JP6821992B2 - Information management equipment and programs - Google Patents

Description

The present invention relates to an information management device and a program.

Conventionally, a technique for electronically storing a form containing highly confidential personal information (confidential information) has been known. Generally, when electronically storing a form containing personal information, a method of encrypting and storing the electronic form is adopted in consideration of security.
By the way, when outputting a saved electronic form (for example, display, printing, etc.), it is dangerous to allow the output unconditionally for security reasons. Therefore, for example, a technique for setting an access right for each user when accessing an electronic form is disclosed (see, for example, Patent Document 1).

Japanese Unexamined Patent Publication No. 10-326213

However, in the above-mentioned conventional technique, there is a problem that the operation management of the system becomes complicated because it takes time and effort to encrypt and decrypt the electronic form.
Further, in the technique described in Patent Document 1, although the access right can be set for each user, it is not possible to perform access control in consideration of the attribute of the electronic form, that is, the information such as the business of handling the electronic form. Therefore, the user to whom the access right is granted can contact the personal information more than necessary, and there is a problem that the security is not always guaranteed. On the other hand, for users who have not been granted access rights, the rights are restricted even in situations where contact with personal information is permitted, and there is a problem that the convenience of using the system cannot be ensured. ..

An object of the present invention is to ensure the convenience of using the system while ensuring security even when handling highly confidential personal information.

To solve the above problem, the information management apparatus according to the present invention, the tag information is a search information for searching for personal information, stored in place of the personal information to a specific area for storing the personal information electronic When the creation means for creating a form and the electronic form created by the creation means are output, the tag information stored in the specific area is referred to, and the authority according to the business specified by the tag information and An output control means for controlling the output of the personal information of the electronic form based on the validity period is provided, and the tag information includes an identification number for identifying an individual and a reference date of data corresponding to the tag. It is characterized in that it is composed including.
In addition, the program according to the present invention creates an electronic form in which tag information, which is search information for searching personal information, is stored in a specific area for storing personal information in place of the personal information. When outputting the creation means and the electronic form created by the creation means, the tag information stored in the specific area is referred to, and based on the authority according to the business specified by the tag information and its validity period. The tag information is configured to function as an output control means for controlling the output of the electronic form related to the personal information, and the tag information includes an identification number for identifying an individual and a reference date of data corresponding to the tag. It is characterized by being done.

According to the present invention, even when handling highly confidential personal information, it is possible to ensure the convenience of using the system while ensuring security.

It is a block diagram which shows the main control configuration of each apparatus which constitutes the My Number management system which concerns on this embodiment. It is a figure which shows an example of the form setting table. It is a figure which shows an example of an individual number management table. It is a figure which shows an example of the access authority management table. It is a figure which shows an example of the form access authority management table. It is a flowchart which shows the electronic form creation processing of the My Number management system which concerns on this embodiment. It is a figure which shows an example of a tag information. It is a figure which shows another example of a tag information. It is a flowchart which shows the electronic form output processing of the My Number management system which concerns on this embodiment. It is a figure which shows an example of a login screen. It is a figure which shows an example of the business menu screen. It is a figure which shows an example of the form inquiry screen. It is a figure which shows an example of the form inquiry screen which converted only the tag information of an employee himself into my number. It is a figure which shows an example of the form inquiry screen which converted the tag information of the employee himself / herself and the employee's family into the replacement character string. It is a figure which shows an example of the form inquiry screen which converted the tag information of the employee himself / herself and the employee's family into my number.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[1. Description of configuration]
First, the configuration of the My Number management system 100 according to the present embodiment will be described.
As shown in FIG. 1, the My Number management system 100 includes a client terminal 1, a personnel management server 2, a My Number management server 3, and a printing device 4. In the present embodiment, the personnel management server 2 and the My Number management server 3 cooperate to function as the information management device of the present invention. In the My Number management system 100, the client terminal 1, the personnel management server 2, the My Number management server 3, and the printing device 4 are connected to each other so as to be able to communicate with each other by the communication network N. The communication network N is a communication network including a wired LAN (Local Area Network), a wireless LAN, a mobile communication network, the Internet, and the like.

The client terminal 1 is an information device such as a PC, a tablet terminal, a smartphone, or a mobile phone. An application (electronic form viewer) that provides a function for viewing (inquiring) an electronic form is installed in the client terminal 1. The client terminal 1 is configured to be composed of one unit, but is not limited to this, and may be composed of a plurality of devices.
As shown in FIG. 1, the client terminal 1 includes a control unit 11, an operation unit 12, a display unit 13, a communication unit 14, and a storage unit 15.

The control unit 11 centrally controls the operation of the client terminal 1. Specifically, the control unit 11 is configured to include a CPU, a ROM, a RAM, and the like, and the client cooperates with the CPU and the program data stored in the ROM and the storage unit 15 expanded in the work area of the RAM. It controls each part of the terminal 1 in an integrated manner.

The operation unit 12 includes a keyboard having a character input key, a number input key, and other keys associated with various functions, a pointing device such as a mouse, and the like, and receives an operation input from a user and responds to the operation input. The operation signal is output to the control unit 11.

The display unit 13 includes a display such as an LCD (Liquid Crystal Display), and displays an image based on the display control signal output from the control unit 11 on the display screen. For example, the display unit 13 displays a screen for instructing the creation of an electronic form (electronic form creation screen), a screen for inquiring an electronic form selected by the user (form inquiry screen), and the like.

The communication unit 14 is a communication interface having a communication IC (Integrated Circuit), a communication connector, and the like, and under the control of the control unit 11, data communication is performed via a communication network N using a predetermined communication protocol.

The storage unit 15 is composed of an HDD (Hard Disk Drive), a semiconductor memory, and the like, and stores data such as program data and various setting data in a readable and writable manner from the control unit 11. In addition, the storage unit 15 stores the electronic form created and transmitted by the personnel management server 2.

The personnel management server 2 is a computer system owned by a company, and is a device that manages personal information of employees and their families as personnel information.
As shown in FIG. 1, the personnel management server 2 includes a control unit 21, an operation unit 22, a display unit 23, a communication unit 24, and a storage unit 25.

The control unit 21 centrally controls the operation of the personnel management server 2. Specifically, the control unit 21 is configured to include a CPU, ROM, RAM, and the like, and personnel personnel are appointed by the cooperation between the CPU and the program data stored in the ROM and the storage unit 25 developed in the work area of the RAM. Centrally controls each part of the management server 2.

The operation unit 22 includes a keyboard having a character input key, a number input key, and other keys associated with various functions, a pointing device such as a mouse, and the like, and receives an operation input from a user and responds to the operation input. The operation signal is output to the control unit 21.
The display unit 23 includes a display such as an LCD, and displays an image based on the display control signal output from the control unit 21 on the display screen.

The communication unit 24 is a communication interface having a communication IC, a communication connector, and the like, and under the control of the control unit 21, data communication is performed via the communication network N using a predetermined communication protocol.

The storage unit 25 is composed of an HDD, a semiconductor memory, and the like, and stores data such as program data and various setting data in a readable and writable manner from the control unit 21. In addition, the storage unit 25 stores a personnel information database for managing personnel information. Further, the storage unit 25 stores the form setting table T1 which is a table for setting the tag information to be stored instead of the My Number in the specific area for storing the My Number (registered trademark) in the electronic form. In addition, in the following description, my number may be referred to as an individual number.

As shown in FIG. 2, the form setting table T1 has a form name T11 which is an electronic form name, a reference date T12 of data (tag data) corresponding to a tag, a tag expiration date T13, a tag conversion count T14, and a tag. It has fields of tag conversion authority T15 indicating a user who has the conversion authority of, and a character string (tag replacement character string) T16 to be displayed by replacing with my number which is not output target.

The My Number management server 3 is a computer system owned by a company, and is a device that manages My Number information including My Numbers of employees and their families. My Number is a unique number given to people with Japanese nationality so that they will not be duplicated by the My Number system that efficiently manages the personal information of the people.
As shown in FIG. 1, the My Number management server 3 includes a control unit 31, an operation unit 32, a display unit 33, a communication unit 34, and a storage unit 35.

The control unit 31 centrally controls the operation of the My Number management server 3. Specifically, the control unit 31 is configured to include a CPU, ROM, RAM, and the like, and the program data stored in the ROM and the storage unit 35 expanded in the work area of the RAM and the CPU collaborate with each other. It controls each part of the number management server 3 in an integrated manner.

The operation unit 32 includes a keyboard having a character input key, a number input key, and other keys associated with various functions, a pointing device such as a mouse, and the like, and receives an operation input from a user and responds to the operation input. The operation signal is output to the control unit 31.
The display unit 33 includes a display such as an LCD, and displays an image based on the display control signal output from the control unit 31 on the display screen.

The communication unit 34 is a communication interface having a communication IC, a communication connector, and the like, and under the control of the control unit 31, data communication is performed via the communication network N using a predetermined communication protocol.

The storage unit 35 is composed of an HDD, a semiconductor memory, and the like, and stores data such as program data and various setting data in a readable and writable manner from the control unit 31. In addition, the storage unit 35 stores the My Number information database for managing the My Number information. In addition, the storage unit 35 manages the personal number management table T2, which is a table for managing the My Number of the employee or his / her family in association with other personal information, and the access authority to the work of the employee. The access authority management table T3, which is a table, and the form access authority management table T4, which is a table for managing the access authority to the electronic form of business, are stored.

As shown in FIG. 3, the personal number management table T2 has an employee number T21, a classification T22 indicating whether the employee is an employee or a family member, a relationship with the employee T23, a name T24, a name Frigana T25, and a gender T26. , Date of birth T27, Individual Number (My Number) T28, Data reference date T29.

As shown in FIG. 4, the access authority management table T3 includes employee number T31, name T32, user name T33 at login, password T34 at login, basic personnel work, basic salary work, social insurance work, year-end adjustment work, and so on. It has fields of items T35 to T39, which indicate whether or not there is access authority to each business of tax-related business.

As shown in FIG. 5, the form access authority management table T4 contains the business name T41, each item T42 and T43 indicating the presence or absence of access authority for each of personal information and family information, a tax withholding slip, and an insured person qualification acquisition notification. , Dependent deduction report, insurance premium deduction report, and each item T44 to T48 indicating whether or not each electronic form of monthly change / calculation report has access authority.

Each of the personnel management server 2 and the My Number management server 3 is composed of one or a plurality of servers deployed on the communication network N. In the present embodiment, each is composed of one management server, but may be composed of a plurality of server groups such as a WEB server, a DB server, and a storage server.

The printing device 4 is composed of, for example, an inkjet printer, a laser printer, or the like, and under the control of the control unit 11 of the client terminal 1, prints and outputs according to the processing content performed by the client terminal 1. For example, the printing device 4 prints out the electronic form displayed (inquired) on the client terminal 1.

[2. Description of operation]
Next, the operation of the My Number management system 100 according to the present embodiment will be described with reference to FIGS. 6 to 15.
First, a process in which the client terminal 1 and the personnel management server 2 create an electronic form (electronic form creation process) will be described with reference to the flowchart of FIG. This process is started when the control unit 11 of the client terminal 1 receives the input of the login information (user name, password, etc.) required for accessing (login) the personnel management server 2.

First, the control unit 11 of the client terminal 1 transmits the entered login information such as the user name and password to the personnel management server 2 via the communication unit 14 (step S101).

The control unit 21 of the personnel management server 2 performs a process (login authentication process) for determining whether or not the user is a registered user in the personnel management server 2 based on the login information transmitted from the client terminal 1. (Step S102).
When the control unit 21 determines that the user is a user registered in the personnel management server 2, the control unit 21 proceeds to the next step S103. On the other hand, when it is determined that the user is not a user registered in the personnel management server 2, the control unit 21 notifies the client terminal 1 that the login authentication has failed, and prompts the client terminal 1 to input the login information again.

Next, the control unit 21 generates a screen (electronic form creation screen) for performing an operation instructing the creation of the electronic form, and transmits the screen (electronic form creation screen) to the client terminal 1 via the communication unit 24 (step S103).

The control unit 11 of the client terminal 1 causes the display unit 13 to display the electronic form creation screen transmitted from the personnel management server 2 (step S104).
The user performs an operation for instructing the creation of an electronic form on the electronic form creation screen displayed on the display unit 13. Specifically, the user performs an operation of designating the form type of the electronic form to be created, the information of the employee to be created, and the like.

Next, the control unit 11 transmits information (electronic form creation instruction information) specified by the user on the electronic form creation screen for instructing the creation of the electronic form to the personnel management server 2 via the communication unit 14. (Step S105).

The control unit 21 of the personnel management server 2 creates an electronic form based on the electronic form creation instruction information transmitted from the client terminal 1, and transmits the electronic form to the client terminal 1 via the communication unit 24 (step S106).
In the present embodiment, when the electronic form is created in step S106, the form setting table T1 (see FIG. 2) is referred to, and the My Number (individual number) in the electronic form is stored in the specific area instead of the My Number. Store tag information in. That is, the control unit 21 functions as a means for creating the present invention.
The tag information is information (search information) required for searching and acquiring the My Number from the My Number management server 3 when outputting the electronic form. Since My Number is required to have a high degree of security due to its nature, tag information should be stored in the electronic form instead of My Number, and the tag information should be used as a search key when the electronic form is output. Security can be ensured by acquiring My Number from the number management server 3.

As shown in FIG. 7, the tag information includes a fixed value A1 (%% MYN in this embodiment) indicating the start of the tag information, an employee number A2 which is an identification number for identifying an individual, and whether the tag information is the employee himself / herself. It is composed of a character string A3 indicating whether it is an employee's family, a reference date A4 of data (tag data) corresponding to the tag, and a fixed value A5 (%% in this embodiment) indicating the end of tag information. Has been done.
The tag information (1) is an example of tag information when creating an electronic form of "employee himself" whose base date A4 of tag data is "2015/10/1" and whose employee number A2 is "1000". is there. The tag information (2) is an example of tag information when creating an electronic form of "family 1" in which the base date A4 of the tag data is "2015/10/1" and the employee number A2 is "1000". .. The tag information (3) is an example of tag information when creating an electronic form of "family 2" in which the base date A4 of the tag data is "2015/10/1" and the employee number A2 is "1000". ..

The tag information is not limited to the example shown in FIG. 7, and may be, for example, the example shown in FIG. In addition to the tag information shown in FIG. 7, the tag information shown in FIG. 8 is replaced with the tag expiration date A6, the tag conversion number A7, the user A8 having the tag conversion authority, and the My Number that is not output. It is configured to include a character string (replacement character string) A9 to be displayed.
In the tag information (4), the base date A4 of the tag data is "2015/10/1", the tag expiration date A6 is "2016/9/30", the tag conversion count A7 is "10 times", and the tag conversion. This is an example of tag information when creating an electronic form of "employee himself" whose authorized user A8 is "administrator", whose replacement character string A9 is "*", and whose employee number A2 is "1000". The tag information (5) is an example of the tag information when creating an electronic form of "family 1" with the employee number A2 of "1000" under the same conditions as the tag information (4), and the tag information (6). Is an example of tag information when creating an electronic form of "family 2" with employee number A2 of "1000" under the same conditions as tag information (4).

For the tag information, for example, the setting contents may be set in advance for each electronic form to be created, or the same contents may be set regardless of the type of the electronic form.

The control unit 11 of the client terminal 1 stores the electronic form transmitted from the personnel management server 2 in the storage unit 15 (step S107).

Next, a process (electronic form output process) in which the information management device (client terminal 1 and My Number management server 3) outputs (inquires / prints) an electronic form will be described with reference to FIG. This process is started when the control unit 11 of the client terminal 1 receives a user's operation to activate the electronic form viewer.

First, the control unit 11 of the client terminal 1 causes the display unit 13 to display the login screen (step S201). As shown in FIG. 10, the login screen G1 includes a user name input unit G11 for inputting a user name, a password input unit G12 for inputting a password, and a login button G13 for executing a login operation. Has been done.
The user executes a login operation by pressing the login button G13 after inputting his / her own user name and password in the user name input unit G11 and the password input unit G12 on the login screen G1.

Next, the control unit 11 causes the display unit 13 to display the business menu screen (step S202). As shown in FIG. 11, the business menu screen G2 has a menu classification display area G21 for displaying the classification of the business menu and a menu for displaying items (electronic forms) corresponding to the business menu selected in the menu classification display area G21. It is configured to include an item display area G22 and an end button G23 for ending an operation on the business menu screen G2. In the menu classification display area G21, each business menu of the personnel information management menu G211, the salary information management menu G212, the personnel form management menu G213, and the salary form management menu G214 is displayed.
On the business menu screen G2, the user selects one business menu from the menu classification display area G21, and then selects one electronic form from the electronic forms displayed in the menu item display area G22. FIG. 11 shows an example in which the payroll form management menu G214 is selected by the user. When the salary form management menu G214 is selected, the menu item display area G22 has the withholding slip G221, the dependent deduction report G222, the monthly change / calculation report G223, and so on as electronic forms corresponding to the salary form management menu G214. Etc. are displayed in a selectable manner. In the subsequent processing, it is assumed that the “dependent deduction report G222” is selected from the electronic forms displayed in the menu item display area G22.

Next, the control unit 11 determines whether or not any of the electronic forms has been selected by the user on the business menu screen G2 (step S203).
When the control unit 11 determines that any of the electronic forms has been selected (step S203: YES), the control unit 11 proceeds to the next step S204.
On the other hand, when the control unit 11 determines that none of the electronic forms has been selected (step S203: NO), the control unit 11 ends the process. Here, the case where none of the electronic forms is selected means the case where the end button G23 of the business menu screen G2 is pressed without selecting any of the electronic forms.

Next, the control unit 11 displays the login information such as the user name and password entered on the login screen G1 as well as the electronic form selected on the business menu screen G2 and the tag information stored in the electronic form. It is transmitted to the My Number management server 3 via (step S204).

The control unit 31 of the My Number management server 3 collates the login information transmitted from the client terminal 1 with the access authority management table T3 (see FIG. 4) stored in the storage unit 35, and is accessed by the logged-in user. Extract the business having the authority (tag conversion authority) (step S205). For example, if the logged-in user is "Human salary Taro (user name: taro, password: Qsad2330)", the tasks that have access authority include "basic personnel services", "basic salary services", "social insurance services", and "year-end". "Coordination work" and "tax related work" are extracted. If the logged-in user is "Office Hanako (user name: hanako, password: Amnm7756)", "year-end adjustment work" is extracted as the work that has access authority.

Next, the control unit 31 collates the electronic form transmitted from the client terminal 1 with the form access authority management table T4 (see FIG. 5) stored in the storage unit 35, and has an access authority to the electronic form. The "business" to which is assigned and the "accessible period (valid period)" in the business are extracted (step S206). For example, if the electronic form is a "Deduction for Dependents", the work to which access authority is assigned and the accessible period are "Basic salary work (year-round)" and "Year-end adjustment work (11-February, for the current year)". Is extracted.

Next, the control unit 31 extracts the business for which the currently logged-in user has access authority based on the business extracted in step S205, the business extracted in step S206, the accessible period, and the current date and time (step). S207). For example, if the current date and time is July 1, Taro Hitoha has access authority for "basic salary work (year-round)", and Hanako Office does not have access authority for any of the work. In addition, if the current date and time is February 1, Taro Hitoha has access authority for "basic salary work (year-round)" and "year-end adjustment work (11-February, for the current year)", and Hanako Office , Has access authority for "year-end adjustment work (11-February, for the current year)".

Next, the control unit 31 collates the business extracted in step S207 (the business for which the logged-in user currently has access authority) with the form access authority management table T4 (see FIG. 5), and sets the tag information as My Number. The target to be converted to (tag information conversion target) is determined (step S208). For example, in the case of year-end adjustment work, it is determined that the tag information of the employee's family can be converted into My Number in addition to the employee himself / herself. In addition, in the case of basic salary work, it is determined that only the tag information of the employee himself / herself can be converted into My Number. Of course, if the business is not extracted in step S207, it is determined that the tag information cannot be converted to the My Number.
For example, if the current date and time is July 1, Taro Hitoha has access authority for "basic salary work (year-round)", so only the tag information of the employee himself can be converted to My Number. decide. In addition, if the current date and time is July 1, Office Hanako does not have access authority for any of the tasks, so it is determined that the tag information cannot be converted to My Number.
In addition, if the current date and time is February 1, Taro Hitoha has access authority for "year-end adjustment work (11-February, for the current year)" in addition to "basic salary work (year-round)". Therefore, it is determined that the tag information of the employee himself / herself and the employee's family can be converted into My Number. In addition, if the current date and time is February 1, the office Hanako has access authority for "year-end adjustment work (11-February, for the current year)", so the tag of the employee himself / herself and the employee's family Determine that the information can be converted to My Number.

Next, the control unit 31 refers to the personal number management table T2 (see FIG. 3), and converts the tag information stored in the electronic form into my number based on the tag information conversion target determined in step S208. , Is transmitted to the client terminal 1 via the communication unit 34 (step S209). Note that the tag information determined in step S208 that cannot be converted to My Number is converted into a replacement character string (for example, "*") and transmitted to the client terminal 1. That is, the control unit 31 functions as an output control means for controlling the output related to the My Number of the electronic form based on the authority (access authority) according to the business and the validity period thereof.

The control unit 11 of the client terminal 1 causes the display unit 13 to display a screen (form inquiry screen) for inquiring the electronic form selected on the business menu screen G2 (step S210). FIG. 12 shows an example of the form inquiry screen G3 for inquiring the dependent deduction report. As shown in FIG. 12, the form inquiry screen G3 includes a form display area G31 for displaying an electronic form to be inquired, a print button G32, and an end button G33 for ending an operation on the form inquiry screen G3. It is composed of.
In the form display area G31, the dependent deduction report F1 which is an electronic form is displayed. The dependent deduction report F1 is composed of a personal information display area F11 for displaying the personal information of the employee and a family information display area F12 for displaying the personal information of the employee's family.
In the personal information display area F11, in addition to each area for displaying the work place, work address, name, date of birth, address, presence / absence of spouse, etc., the personal number display area for displaying the employee's personal number is displayed. F111 is included.
In the family information display area F12, in addition to each area for displaying the name, date of birth, estimated amount of income, etc. of the spouse and dependent relatives who are eligible for the dependent deduction, the spouse and dependent relatives who are eligible for the dependent deduction The My Number display area F121 for displaying the My Number of the above is included.
The tag information (see FIGS. 7, 8 and the like) stored at the time of creating the electronic form (dependent deduction report F1) is stored in each of the above My Number display area F111 and My Number display area F121. , Information (My Number or replacement character string) transmitted from My Number Management Server 3 in step S209 is displayed. However, if the expiration date of the tag information has passed or the number of conversions has exceeded, the tag information is not converted and each of the My Number display area F111 and the My Number display area F121 is blank.

13 to 15 show an example of the form inquiry screen G3 for inquiring the dependent deduction report F1 of the employee “Taro Tanaka”.
For example, the example shown in FIG. 13 shows the form inquiry screen G3 when the current date and time is July 1st and the login user is Taro Hibiki. In this case, in step S208, since it is determined that only the tag information of the employee himself / herself can be converted into the My Number, the My Number "111111111111" of the employee "Taro Tanaka" himself / herself is displayed in the My Number display area F111. In addition to being displayed, the replacement character string "*" is displayed in the My Number display area F121 instead of the My Number of "Hanako Tanaka" who is a family member (spouse) of the employee "Taro Tanaka".

Further, the example shown in FIG. 14 shows the form inquiry screen G3 when the current date and time is July 1st and the login user is Hanako. In this case, since it is determined in step S208 that the tag information cannot be converted to the My Number, the replacement character string "*" is used instead of the My Number in both the My Number display area F111 and the My Number display area F121. Is displayed.

Further, the example shown in FIG. 15 shows the form inquiry screen G3 when the current date and time is February 1st and the login user is Taro Hibiki. In this case, since it is determined in step S208 that the tag information of the employee himself / herself and the employee's family can be converted into the My Number, the My Number of the employee "Taro Tanaka" himself / herself is displayed in the My Number display area F111. Is displayed, and the My Number of "Hanako Tanaka", a family member of the employee "Taro Tanaka", is displayed in the My Number display area F121. Even if the current date and time is February 1st and the logged-in user is Hanako the Space Alien, it is determined in step S208 that the tag information of the employee himself / herself and the employee's family can be converted to My Number in the same manner as above. Therefore, the My Number of the employee "Taro Tanaka" is displayed in the My Number display area F111, and the My Number of the employee "Taro Tanaka"'s family "Hanako Tanaka" is displayed in the My Number display area F121. The number is displayed.

Next, the control unit 11 determines whether or not the print button G32 is pressed by the user on the form inquiry screen G3 (step S211).
When the control unit 11 determines that the print button G32 has been pressed (step S211: YES), the control unit 11 proceeds to the next step S212.
On the other hand, when the control unit 11 determines that the print button G32 is not pressed (step S211: NO), the control unit 11 proceeds to step S213.

In step S212, the control unit 11 performs a process (form printing process) of printing the electronic form displayed (inquired) on the form inquiry screen G3. The contents of the electronic form displayed in the form display area G31 of the form inquiry screen G3 are printed as they are on the printing paper. Therefore, for example, when the form printing process is performed on the form inquiry screen G3 shown in FIGS. 13 to 15, the dependent deduction report F1 shown in FIGS. 13 to 15 is printed respectively.

In step S213, the control unit 11 determines whether or not the end button G33 has been pressed by the user on the form inquiry screen G3.
When the control unit 11 determines that the end button G33 has been pressed (step S213: YES), the control unit 11 proceeds to step S202 and causes the display unit 13 to display the business menu screen G2 again.
On the other hand, when the control unit 11 determines that the end button G33 is not pressed (step S213: NO), the control unit 11 repeats the process of step S213 until the end button G33 is pressed.

As described above, according to the information management device (personnel management server 2 and my number management server 3) of the my number management system 100 according to the present embodiment, the tag information which is the search information for searching the personal information can be obtained. , Create an electronic form stored in place of personal information in a specific area where personal information is stored, and when outputting the created electronic form, refer to the tag information stored in the specific area and specify it by the tag information. The output of personal information in electronic forms is controlled based on the authority according to the business and the validity period thereof.
Therefore, access to personal information can be controlled for each business of the user. Therefore, even when handling highly confidential personal information, it is possible to ensure the convenience of using the system while ensuring security.

Further, in the present embodiment, the personal information is my number.
Therefore, even when handling personal information with particularly high confidentiality among personal information, it is possible to ensure the convenience of using the system while ensuring security.

Further, in the present embodiment, the personal information includes the personal information of the employee himself / herself and the personal information of the employee's family, and the output control means is based on the authority according to the business and the validity period thereof. Determine the personal information to be output and output it.
Therefore, it is possible to control the output target of personal information for each business of the user. Therefore, personal information can be output flexibly according to the user's business, and more detailed system use can be realized.

Further, in the present embodiment, the tag information includes an identification number for identifying an individual and a reference date of data corresponding to the tag.
Therefore, personal information can be easily searched only by setting relatively simple information as tag information, so that the processing load can be reduced and efficient operation management of the system can be realized.

Further, in the present embodiment, the tag information further includes the validity period of the tag, the number of times the tag is converted, the authority to convert the tag, and the replacement character string to be displayed by replacing the personal information not to be output. Consists of.
Therefore, since the access authority to the personal information can be set in detail according to the situation, it is possible to ensure both security and convenience of system use at a higher level.

The present invention has been specifically described above based on the embodiment of the present invention, but the present invention is not limited to the above embodiment and can be changed without departing from the gist thereof.

For example, in the above embodiment, My Number is illustrated as personal information, and only My Number is converted to a replacement character string when it is not output target (when access authority is not granted). It is not limited to.
That is, by generating tag information for personal information other than My Number (for example, name, date of birth, address, etc.), not only My Number but also personal information other than My Number can be replaced when it is not output. It may be converted to a character string.

Further, in the above embodiment, personal information such as My Number is converted into a replacement character string when it is not subject to output (when access authority is not provided), but it is not limited to this. Absent.
For example, instead of converting personal information into a replacement character string, it may be hidden (blank).
Further, when the access authority is not given to the personal information of the employee himself / herself and his / her family, the form inquiry screen G3 itself may be hidden.

Further, in the above embodiment, an example in which the control unit 31 of the My Number management server 3 functions as the output control means of the present invention by performing the processes of steps S205 to S209 of FIG. 9 is described. It is not limited to this. For example, the access authority management table T3 and the form access authority management table T4 are stored in the storage unit 15 of the client terminal 1 in advance, and the control unit 11 of the client terminal 1 is made to perform the processes of steps S205 to S208. You may do so. In this case, the tag information conversion target determined in step S208 is transmitted to the My Number management server 3, and the control unit 31 of the My Number management server 3 is made to perform the process of step S209.

Further, in the above embodiment, the client terminal 1, the personnel management server 2, and the My Number management server 3 are illustrated and described as separate devices, but the present invention is not limited thereto.
For example, any two of the client terminal 1, the personnel management server 2, and the My Number management server 3 may be configured as an integrated device, or the client terminal 1, the personnel management server 2, and the My Number management server 3 may be configured as an integrated device. All of the servers 3 may be configured as an integrated device.

In addition, each aspect shown in the present application can be grasped as a method, a program, or the like. Regarding the method and program categories, the "means" shown in the device category shall be appropriately read as, for example, "process" and "step". In addition, the order of processes and steps is not limited to those directly specified in the present application, and the order may be changed, or some processes may be changed to be executed collectively or at any time.

In addition, the detailed configuration of each device constituting the client terminal, personnel management server, my number management server, and printing device, and the detailed operation of each device can be appropriately changed without departing from the spirit of the present invention. ..

Although some embodiments of the present invention have been described, the scope of the present invention is not limited to the above-described embodiments, but includes the scope of the invention described in the claims and the equivalent scope thereof.
The inventions described in the claims originally attached to the application of this application are added below. The claims in the appendix are as specified in the claims originally attached to the application for this application.
[Additional Notes]
<Claim 1>
A means for creating an electronic form in which tag information, which is search information for searching personal information, is stored in a specific area for storing personal information instead of the personal information.
When outputting the electronic form created by the creating means, the tag information stored in the specific area is referred to, and based on the authority according to the business defined by the tag information and the validity period thereof, the said An output control means for controlling the output of the personal information of the electronic form, and
Information management device equipped with.
<Claim 2>
The information management device according to claim 1, wherein the personal information is my number.
<Claim 3>
The personal information includes the personal information of the employee himself / herself and the personal information of the employee's family.
The information according to claim 1 or 2, wherein the output control means determines personal information to be output based on the authority according to the business and the validity period thereof, and outputs the personal information determined as the output target. Management device.
<Claim 4>
The information management device according to any one of claims 1 to 3, wherein the tag information includes an identification number for identifying an individual and a reference date of data corresponding to the tag.
<Claim 5>
The tag information is further composed of a tag validity period, a tag conversion number of times, a tag conversion authority, and a replacement character string to be displayed by replacing the personal information that is not output target. Item 4. The information management device according to item 4.
<Claim 6>
Computer,
A means for creating an electronic form in which tag information, which is search information for searching personal information, is stored in a specific area for storing personal information instead of the personal information.
When outputting the electronic form created by the creating means, the tag information stored in the specific area is referred to, and based on the authority according to the business defined by the tag information and the validity period thereof, the said Output control means for controlling the output of the personal information of the electronic form,
A program to function as.

100 My number management system 1 Client terminal 11 Control unit 12 Operation unit 13 Display unit 14 Communication unit 15 Storage unit 2 Personnel management server (information management device)
21 Control unit (creating means)
22 Operation unit 23 Display unit 24 Communication unit 25 Storage unit 3 My number management server (information management device)
31 Control unit (output control means)
32 Operation unit 33 Display unit 34 Communication unit 35 Storage unit 4 Printing device N Communication network

Claims (5)

A means for creating an electronic form in which tag information, which is search information for searching personal information, is stored in a specific area for storing personal information instead of the personal information.
When outputting the electronic form created by the creating means, the tag information stored in the specific area is referred to, and based on the authority according to the business defined by the tag information and the validity period thereof, the said An output control means for controlling the output of the personal information of the electronic form, and
With
The tag information is composed of an identification number for identifying an individual and a reference date of data corresponding to the tag.
An information management device characterized by this . The tag information is further composed of a tag validity period, a tag conversion frequency, a tag conversion authority, and a replacement character string to be displayed by replacing the personal information that is not output target.
The information management device according to claim 1. The personal information is my number,
The information management device according to claim 1 or 2. The personal information includes the personal information of the employee himself / herself and the personal information of the employee's family.
The output control means determines the personal information to be output based on the authority according to the business and the validity period thereof, and outputs the personal information determined as the output target.
Information management apparatus according to claim 1, characterized in that. Computer,
A means for creating an electronic form in which tag information, which is search information for searching personal information, is stored in a specific area for storing personal information instead of the personal information.
When outputting the electronic form created by the creating means, the tag information stored in the specific area is referred to, and based on the authority according to the business defined by the tag information and the validity period thereof, the said Output control means for controlling the output of the personal information of the electronic form,
To function as
The tag information is composed of an identification number for identifying an individual and a reference date of data corresponding to the tag.
A program characterized by that.

Images