JP2016184355A - Personal information display program, personal information display method, and display control apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent unnecessary display of a personal number.SOLUTION: A display control apparatus 101 receives an address search request from a client terminal 102. The display control apparatus 101 refers to a storage unit 110 storing address information, in accordance with the received address search request, and reads address information corresponding to the address search request. The display control apparatus 101 outputs the read address information, excluding at least a personal number, as a search result. Specifically, for example, the display control apparatus 101 displays name information, which is a part of the address information, and a personal number field 130 with no personal number displayed therein, prior to displaying the personal number, and causes the client terminal 102 to display an operation component 140 for receiving an instruction to display the personal number.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a personal information display program, a personal information display method, and a display control apparatus.

  In the future, the My Number (Social Security / Tax Number) system will be implemented. The My Number System is for assigning a unique personal number (My Number) to each citizen with a resident's card and managing personal information related to social security and tax payment. The personal number is printed on a personal number card issued upon application, and is associated with the basic four information such as name, address, date of birth, and gender of the resident card.

  Regarding the My Number system, each local government is obliged to set up a record disclosure system for providing information. The information provision record disclosure system uses information provision record display as one business. This task is to confirm when and who provided the specific personal information of the individual when and why.

  In addition, after the enforcement of the My Number system, for example, the personal number of the individual and the basic four information are managed on the business system in association with the address number that identifies the individual in the existing business system. As a prior art, for example, there is a technique for controlling access to a database that stores data provider's public information and secret information in association with each other.

JP-A-2005-182707

  However, in the conventional technology, when a local government employee performs a business based on an address number, if the personal number is displayed on the business system, excessive provision of personal information to the staff may occur. is there.

  In one aspect, an object of the present invention is to provide a personal information display program, a personal information display method, and a display control device that suppress display of an unnecessary personal number.

  According to one aspect of the present invention, prior to display of the personal number, display of name information that is a part of the address information, and personal number in a state where the personal number is not displayed, in performing display control of the address information. A display field, an operation component that receives an instruction to display the personal number, and an operation log that is recorded in response to an instruction to display the personal number by an operation on the operation component. A personal information display program, a personal information display method, and a display control apparatus for displaying the personal number in a display field are proposed.

  According to another aspect of the present invention, a personal information search request is received, the personal information corresponding to the search request is read out by referring to a storage unit storing personal information including a personal number, and the read personal information is read out. Proposed are a personal information display program, a personal information display method, and a display control device that output information, excluding at least personal number information, as search results.

  According to one aspect of the present invention, it is possible to suppress the display of unnecessary personal numbers.

FIG. 1 is an explanatory diagram of an example of the personal information display method according to the embodiment. FIG. 2 is an explanatory diagram illustrating a system configuration example of the business support system 200. FIG. 3 is a block diagram illustrating a hardware configuration example of the display control apparatus 101. FIG. 4 is a block diagram illustrating a hardware configuration example of the client terminal 102. FIG. 5 is an explanatory diagram showing an example of the contents stored in the address information DB 220. FIG. 6 is an explanatory diagram illustrating a screen example of the address search screen. FIG. 7 is a block diagram illustrating a functional configuration example of the display control apparatus 101. FIG. 8 is an explanatory diagram of a specific example of the search condition file. FIG. 9 is an explanatory diagram showing a display example of the personal number in the personal number display field 130. FIG. 10 is an explanatory diagram (part 1) of a specific example of the operation log. FIG. 11 is an explanatory diagram (part 2) of a specific example of the operation log. FIG. 12 is a flowchart illustrating an example of a personal information display processing procedure of the display control apparatus 101.

  Embodiments of a personal information display program, a personal information display method, and a display control device according to the present invention will be described below in detail with reference to the drawings.

(One example of personal information display method)
FIG. 1 is an explanatory diagram of an example of the personal information display method according to the embodiment. In FIG. 1, a display control apparatus 101 is a computer that performs display control of address information. The display control apparatus 101 is a server installed for local governments, for example. The local government is, for example, a local public organization such as a municipality. The client terminal 102 is a computer used by local government staff. The client terminal 102 is, for example, a PC (personal computer), a notebook PC, or the like.

  Here, with address information, personal information such as personal number and basic 4 information (address, name, date of birth, gender) is associated with the address number of an individual managed in the municipal business. Information. The address number is a number for identifying an individual in the business system. For example, a unique number is assigned to an individual in each business system.

  The personal number is a unique number assigned to each citizen who has a resident card in the My Number system, and is assigned based on the resident card code managed by the resident card recording system of each local government. The personal number is a number for identifying a specific individual in administrative procedures and is specific personal information that requires careful handling.

  In addition, with the introduction of the My Number system, for example, when a local government official receives a personal number from a person who conducts administrative procedures, or through a paper medium such as a declaration, a personal number Office work to confirm the authenticity of. The confirmation of authenticity is performed in order to prevent impersonation by using another person's personal number, and it is necessary to perform it every time a personal number is provided.

  Here, the personal number of the individual can be confirmed by inquiring the Juki Net (Basic Resident Register Network System) using, for example, the basic 4 information, the resident card code, etc. as a search key. For this reason, the staff of a local government can confirm authenticity, for example by collating the provided personal number with the personal number obtained from Juki Net.

  However, it is stipulated that authenticity confirmation for the second and subsequent times may be performed in the form of collation with the personal number obtained at the first confirmation. That is, after the first confirmation work, the authenticity can be confirmed using the personal number managed as the address information on the business system. In a large municipality with a population of 300,000 or more, for example, tens of thousands of declarations are generated every year due to, for example, personal resident tax. Therefore, it is desirable that the authenticity can be confirmed in the tax system.

  However, it is not necessary to confirm the personal number in all office work related to business, and there is office work that does not require confirmation of the personal number. Therefore, when a staff member of a local government performs a business based on the address number, if the personal number is displayed on the business system, the personal information may be excessively provided to the staff member.

  In addition, when provision of personal number information occurs, it is obliged to record when and who referred to the personal number for what reason. For this reason, even when the personal number is displayed unintentionally by the staff when performing work based on the address number, the record is taken.

  Therefore, in the present embodiment, a personal information display method for suppressing display of useless personal numbers when a staff member of a local government performs business will be described. Hereinafter, a display control example of the display control apparatus 101 will be described.

  (1) The display control apparatus 101 receives an address search request from the client terminal 102. Here, the address search request is a search request for address information. Further, as described above, the address information is information in which an address number is associated with personal information including a personal number and basic four information. The address search request may include, for example, designation of a personal number as a search condition, or designation of a name.

  (2) The display control apparatus 101 reads the address information corresponding to the address search request with reference to the storage unit 110 according to the received address search request. Here, the storage unit 110 is a storage device that stores address information. For example, if the address search request includes designation of a personal number, the display control apparatus 101 reads address information corresponding to the designated personal number from the storage unit 110.

  (3) The display control apparatus 101 outputs, as a search result, information excluding at least personal number information from the read address information. Specifically, for example, prior to the display of the personal number, the display control apparatus 101 displays the name information that is a part of the address information and the display of the personal number display field in a state where the personal number is not displayed. At the same time, the client terminal 102 is caused to display an operation component that accepts a personal number display instruction.

  In the example of FIG. 1, the address inquiry screen 120 is displayed on the display screen of the client terminal 102 (for example, the display 406 shown in FIG. 4 described later). The address inquiry screen 120 is an initial screen showing a search result corresponding to the address search request. On the address reference screen 120, the name, kanji name, address, etc., which are part of the address information, are displayed. In the address inquiry screen 120, a personal number display field 130 in a state where the personal number is not displayed and an operation component 140 are displayed. The operation component 140 is a reception unit that receives a personal number display instruction.

  According to the address reference screen 120, the local government staff can confirm the personal name, kanji name, address, etc. of the individual specified by the address number “12600004981”. In addition, on the initial screen, the personal number is not displayed in the personal number display field 130, and the personal information is not provided to the staff excessively.

  As described above, according to the display control apparatus 101, when the local government staff performs some affairs on the business system (address reference in the example of FIG. 1), the initial screen showing the search result according to the address search request. Display of useless personal numbers can be suppressed.

  When the display control device 101 receives an instruction to display a personal number by operating the operation component, the display control device 101 records an operation log according to the display instruction and displays the personal number in the personal number display column. Do. The operation log is information that can identify when and who referred to the personal number for what reason.

  For example, when the operation component 140 is clicked by an operation input by a staff member on the address inquiry screen 120, an operation log is recorded and a personal number is displayed in the personal number display field 130. That is, the staff member can confirm the personal number by clicking on the operation component 140 when the personal number needs to be displayed for confirmation of authenticity or the like.

(System configuration example of the business support system 200)
Next, a system configuration example of the business support system 200 according to the embodiment will be described.

  FIG. 2 is an explanatory diagram illustrating a system configuration example of the business support system 200. In FIG. 2, the business support system 200 includes a display control device 101 and a plurality of client terminals 102. In the business support system 200, the display control device 101 and the plurality of client terminals 102 are connected via a wired or wireless network 210. The network 210 is, for example, a local area network (LAN), a wide area network (WAN), or the Internet.

  Here, the display control apparatus 101 includes an address information DB (database) 220 and an operation log DB 230. The display control apparatus 101 is a business server applied to a business system such as a local government tax system, a national health insurance system, or a national pension system. The address information DB 220 corresponds to, for example, the storage unit 110 illustrated in FIG. As described above, the client terminal 102 is a PC, a notebook PC, or the like used by local government staff.

  The contents stored in the address information DB 220 will be described later with reference to FIG. The contents stored in the operation log DB 230 will be described later with reference to FIGS. 10 and 11.

(Example of hardware configuration of display control apparatus 101)
FIG. 3 is a block diagram illustrating a hardware configuration example of the display control apparatus 101. In FIG. 3, the display control apparatus 101 includes a CPU (Central Processing Unit) 301, a memory 302, an I / F (Interface) 303, a disk drive 304, and a disk 305. Each component is connected by a bus 300.

  Here, the CPU 301 controls the entire display control apparatus 101. The memory 302 includes, for example, a ROM (Read Only Memory), a RAM (Random Access Memory), and a flash ROM. Specifically, for example, a flash ROM or ROM stores various programs, and a RAM is used as a work area for the CPU 301. The program stored in the memory 302 is loaded into the CPU 301 to cause the CPU 301 to execute the coded process.

  The I / F 303 is connected to the network 210 via a communication line, and is connected to another device (for example, the client terminal 102 shown in FIG. 2) via the network 210. The I / F 303 serves as an interface between the network 210 and the own apparatus, and controls input / output of data from other apparatuses. For example, a modem or a LAN adapter may be employed as the I / F 303.

  The disk drive 304 controls reading / writing of data with respect to the disk 305 according to the control of the CPU 301. The disk 305 stores data written under the control of the disk drive 304. Examples of the disk 305 include a magnetic disk and an optical disk.

  Note that the display control apparatus 101 may include, for example, an SSD (Solid State Drive), a keyboard, a mouse, and a display in addition to the above-described components.

(Hardware configuration example of client terminal 102)
FIG. 4 is a block diagram illustrating a hardware configuration example of the client terminal 102. 4, the client terminal 102 includes a CPU 401, a memory 402, a disk drive 403, a disk 404, an I / F 405, a display 406, and an input device 407. Each component is connected by a bus 400.

  Here, the CPU 401 controls the entire client terminal 102. The memory 402 includes, for example, a ROM, a RAM, a flash ROM, and the like. Specifically, for example, a flash ROM or ROM stores various programs, and the RAM is used as a work area of the CPU 401. The program stored in the memory 402 is loaded on the CPU 401 to cause the CPU 401 to execute the coded process.

  The disk drive 403 controls reading / writing of data with respect to the disk 404 according to the control of the CPU 401. The disk 404 stores data written under the control of the disk drive 403. Examples of the disk 404 include a magnetic disk and an optical disk.

  The I / F 405 is connected to the network 210 via a communication line, and is connected to another device (for example, the display control device 101 shown in FIG. 2) via the network 210. The I / F 405 controls the interface between the network 210 and the own apparatus, and controls input / output of data from other apparatuses.

  The display 406 displays data such as a document, an image, and function information as well as a cursor, an icon, or a tool box. As the display 406, for example, a liquid crystal display, a CRT (Cathode Ray Tube), or the like can be adopted.

  The input device 407 has keys for inputting characters, numbers, various instructions, and the like, and inputs data. The input device 407 may be a keyboard or a mouse, or may be a touch panel type input pad or a numeric keypad.

(Storage contents of the address information DB 220)
Next, the contents stored in the address information DB 220 included in the display control apparatus 101 will be described. The address information DB 220 is realized by a storage device such as the memory 302 and the disk 305 shown in FIG.

  FIG. 5 is an explanatory diagram showing an example of the contents stored in the address information DB 220. In FIG. 5, the address information DB 220 has fields of address number, personal number, name (kana), name (kanji), date of birth, sex, address, and municipality code. By setting information in each field, address information (for example, address information 500-1, 500-2) is stored as a record.

  Here, the address number is a number that identifies an individual to be managed in the business system. For example, when the display control apparatus 101 is applied to a tax system, the address number is a number that uniquely identifies an individual to be managed in the tax system. In addition, the individuals to be managed include not only those who have registered resident's card in the local government (so-called resident), but also those who have not registered resident's card in the local government (so-called resident) included.

  The personal number is a unique number (my number) assigned to an individual to be managed in the business system. The name (kana) is a name written in kana of an individual to be managed in the business system. The name (kanji) is a name written in the kanji of an individual to be managed in the business system.

  The date of birth is the date of birth of the individual to be managed in the business system. The gender is the gender of an individual to be managed in the business system. The address is an address written in Japanese of an individual to be managed in the business system. The municipality code is a code number that uniquely identifies the municipality to which the personal address to be managed in the business system belongs.

  In addition, although illustration is abbreviate | omitted, information, such as household information (household number, a relationship, etc.), a change reason, a change date, etc. may be memorize | stored in the address information DB220, matched with an address number, for example.

(Example of address search screen)
Next, a screen example of the address search screen displayed on the display 406 of the client terminal 102 will be described.

  FIG. 6 is an explanatory diagram illustrating a screen example of the address search screen. In FIG. 6, an address search screen 600 is an operation screen for making an address search request.

  In the address search screen 600, for example, when a box 601 is clicked by a user operation input using the input device 407 shown in FIG. 4, an address number can be input as a search condition. In addition, on the address search screen 600, for example, when a box 602 is clicked by a user operation input, a personal number can be input as a search condition.

  On the address search screen 600, for example, when the box 603 is clicked by a user operation input, the name of the kana can be input as a search condition. On the address search screen 600, for example, when a box 604 is clicked by a user operation input, the name of a Chinese character can be input as a search condition.

  Further, on the address search screen 600, for example, when the box 605 is clicked by a user operation input, the date of birth can be input as a search condition. In the address search screen 600, for example, when the box 606 is clicked by a user operation input, an address can be input as a search condition.

  In the example of FIG. 6, the box 603 is clicked and the name “Anshin Taro” is input. In addition, the box 604 is clicked, and the name of the Chinese character “Relief Taro” is input. In addition, the box 606 is clicked, and the address “118-0071 Bunketsu-cho, Kami-ku, Anshin-shi” is entered.

  On the address search screen 600, for example, when a search button 610 is clicked by a user operation input, an address search request specifying the input search condition is transmitted from the client terminal 102 to the display control apparatus 101. .

  In the example of FIG. 6, an address search request in which a kana name, a kanji name, and an address are specified as a search condition is transmitted to the display control apparatus 101. As a result, the display of the address search screen 600 is ended, and an initial screen (for example, the address inquiry screen 120 shown in FIG. 1) showing the search result corresponding to the address search request is displayed on the display 406.

  If there are a plurality of search results corresponding to the address search request, for example, a list of a plurality of search results may be displayed in the address search screen 600. However, personal numbers are not displayed in the list. In this case, when any search result is selected from the list, an initial screen showing the search result is displayed on the display 406.

  On the address search screen 600, for example, when the takeover button 620 is clicked by a user operation input, an address search request including designation of repeated input of search conditions is transmitted from the client terminal 102 to the display control apparatus 101. The As a result, it is possible to repeatedly specify the same search condition as when the previous address search request was made, and it is possible to omit the trouble of repeatedly inputting the same search condition when the staff performs different affairs for the same person.

  Note that the search conditions specified at the previous address search request are recorded in, for example, a search condition file 800 shown in FIG. In addition, an operation screen for making an address search request such as the address search screen 600 is prepared for each business performed on the business system, for example. Similarly, an initial screen showing a search result corresponding to the address search request is also prepared for each business performed on the business system.

(Functional configuration example of display control apparatus 101)
FIG. 7 is a block diagram illustrating a functional configuration example of the display control apparatus 101. In FIG. 7, the display control apparatus 101 includes a reception unit 701, an extraction unit 702, a display control unit 703, and a recording unit 704. The receiving unit 701 to the recording unit 704 are functions serving as control units. Specifically, for example, by causing the CPU 301 to execute a program stored in a storage device such as the memory 302 and the disk 305 illustrated in FIG. Alternatively, the function is realized by the I / F 303. The processing result of each functional unit is stored in a storage device such as the memory 302 and the disk 305, for example.

  The accepting unit 701 accepts an address search request. Here, the address search request is a search request for address information, and includes specification of a search condition. As the search condition, for example, a personal number, an address number, a name, an address, a date of birth, sex, and a combination thereof are designated. Specifically, for example, the accepting unit 701 accepts an address search request received from the client terminal 102.

  In response to receiving the address search request, the extraction unit 702 extracts address information corresponding to the address search request from the address information DB 220 (see, for example, FIG. 5). For example, when the address search request includes designation of a personal number, the extraction unit 702 extracts address information corresponding to the designated personal number from the address information DB 220. For example, when the address search request includes designation of an address number, the extraction unit 702 extracts address information corresponding to the specified address number from the address information DB 220.

  For example, when the name search request includes designation of a name, the extraction unit 702 extracts address information corresponding to the designated name from the address information DB 220. For example, when an address designation is included in the address search request, the extraction unit 702 extracts address information corresponding to the designated address from the address information DB 220. For example, if the address search request includes the date of birth, the extraction unit 702 extracts address information corresponding to the specified date of birth from the address information DB 220.

  When a plurality of search conditions are specified, address information corresponding to a combination of the plurality of search conditions is extracted from the address information DB 220. For example, as shown in FIG. 6, an address search request in which the name “Anshin Taro”, the name “Karo Taro” and the address “118-0071 Bunketsu-cho, Kami-ku, Anshin-shi” are designated as search conditions. Assumes that In this case, the extraction unit 702 extracts address information 500-1 corresponding to a combination of a plurality of search conditions from the address information DB 220.

  The display control unit 703 outputs, as search results, information excluding at least personal number information from the extracted address information. Specifically, for example, the display control unit 703 displays the name included in the address information and the personal number display field in a state where the personal number is not displayed on the initial screen indicating the search result according to the address search request. In addition to performing display, control is performed to display an operation component that accepts an instruction to display a personal number. At this time, the display control unit 703 may perform control to display information other than the personal number such as the address number, date of birth, sex, address, and municipality code included in the address information together with the name.

  More specifically, for example, the display control unit 703 generates screen information of the address reference screen 120 as illustrated in FIG. 1 based on the extracted address information 500-1. Then, the display control unit 703 displays the address reference screen 120 on the display 406 of the client terminal 102 by transmitting the generated screen information of the address reference screen 120 to the client terminal 102.

  The address reference screen 120 shows an initial result indicating a search result in response to an address search request in which the name of Kana “Anshin Taro”, the name of Kanji “Reliable Taro” and the address “118-0071 Bunketsu-cho, Kami-ku, Anshin-shi” are designated. It is a screen. On the address inquiry screen 120, information other than the personal number such as the address number, name (kana), name (kanji), date of birth, sex, and address included in the address information 500-1 is displayed. In the address inquiry screen 120, a personal number display field 130 in a state where the personal number is not displayed and an operation component 140 are displayed.

  When receiving the address search request, the recording unit 704 records personal information other than the personal number input as the search condition as a target of repeated input of the search condition, and the search condition for the personal number input as the search condition. Do not record as a target of repeated input. The search condition to be repeatedly input is, for example, a search condition that is used repeatedly when a local government staff performs a plurality of different affairs for the same person.

  Specifically, for example, the recording unit 704 records a search condition other than the personal number included in the address search request in the search condition file. The search condition file is a file that stores search conditions to be repeatedly input, and is created for each user of the client terminal 102 (for example, a local government staff).

  Here, a specific example of the search condition file will be described with reference to FIG. The search condition file is stored in a storage device such as the memory 302 and the disk 305, for example.

  FIG. 8 is an explanatory diagram of a specific example of the search condition file. Here, an address search request in which the personal number “111111111111”, the kanji name “Relief Taro”, the address “118-0071 Bunketsu-cho, Kami-ku, Anshin-shi” and the date of birth “19871228” are designated as search conditions. Assume the case of acceptance.

  The recording unit 704 records personal information other than the personal number input as the search condition as a target of repeated input of the search condition, and does not record the personal number input as the search condition as a target of repeated input of the search condition. . The search condition to be repeatedly input is, for example, a search condition that is used repeatedly when a local government staff performs a plurality of different affairs for the same person.

  In this case, the recording unit 704 repeatedly inputs the kanji name “Relief Taro”, the address “118-0071 Bunetsucho, Kami-ku, Anshin-shi” and the date of birth “19871228” included in the address search request. Is recorded in the search condition file 800 as a search condition. On the other hand, the recording unit 704 does not record the personal number “111111111111” included in the address search request in the search condition file 800 as a target of repeated input of search conditions.

  Returning to the description of FIG. 7, the extraction unit 702 extracts, from the address information DB 220, address information that matches the same search condition as that of the previous address search request when the address search request includes designation of repeated input of the search condition. To do. Specifically, for example, when the address search request includes designation of repeated input of search conditions, the extraction unit 702 selects address information that matches the search conditions recorded in the search condition file 800 shown in FIG. Extract.

  The accepting unit 701 accepts an instruction to display a personal number by operating the operation component. Here, the display instruction of the personal number is performed on the initial screen showing the search result corresponding to the address search request. For example, the address inquiry screen 120 shown in FIG. 1 is an example of an initial screen showing a search result corresponding to the address search request.

  When the operation component 140 is clicked by a user operation input on the address inquiry screen 120, a personal number display instruction is transmitted from the client terminal 102 to the display control apparatus 101. The accepting unit 701 accepts a personal number display instruction received from the client terminal 102.

  Further, the display control unit 703 displays a personal number in response to a personal number display instruction. Specifically, for example, when the display control unit 703 receives an instruction to display a personal number by an operation on the operation component 140 on the address reference screen 120, the display control unit 703 moves to the personal number display field 130 in the address reference screen 120. , Control to display the personal number included in the address information 500-1.

  A display example of the personal number in the personal number display field 130 in the address inquiry screen 120 will be described later with reference to FIG.

  The recording unit 704 records an operation log when receiving an instruction to display a personal number. Here, the operation log is an operation log of an operation performed on the client terminal 102. The operation log recorded when a personal number display instruction is received includes, for example, information capable of specifying when and who referred to the personal number for what reason.

  A specific example of the operation log will be described later with reference to FIGS. 10 and 11. The operation log is recorded in, for example, the operation log DB 230 (see FIG. 2). The operation log DB 230 is realized by a storage device such as the memory 302 and the disk 305 shown in FIG.

(Example of personal number display)
Next, a display example of the personal number in the personal number display field 130 in the address inquiry screen 120 will be described.

  FIG. 9 is an explanatory diagram showing a display example of the personal number in the personal number display field 130. In (9-1) of FIG. 9, an address inquiry screen 120 is an initial screen showing a search result corresponding to the address search request. The address inquiry screen 120 includes a personal number display field 130 in a state where the personal number is not displayed, and an operation component 140.

  Here, it is assumed that the authenticity is confirmed for the second and subsequent times with respect to the personal number of the non-resident (out of resident registration) provided by the return form. In this case, when the operation component 140 is clicked by the user's operation input using the input device 407 on the address inquiry screen 120, an operation log (for example, the operation log 1000 shown in FIG. 10) is recorded and a personal number display is performed. A personal number is displayed in the column 130.

  In FIG. 9 (9-2), the personal number “111111111111” is displayed in the personal number display field 130 in the address inquiry screen 120. Thereby, the staff of a local government can confirm authenticity by collating the personal number provided by the report with the personal number displayed in the personal number display column 130, for example.

  In addition, when the user clicks the close button 901 on the address inquiry screen 120 by a user operation input, a display end instruction for the address inquiry screen 120 is transmitted from the client terminal 102 to the display control apparatus 101, and the display of the address inquiry screen 120 is ended. Can be made.

(Specific examples of operation logs)
Next, a specific example of an operation log of operations performed on the client terminal 102 will be described with reference to FIGS. 10 and 11.

  FIG. 10 is an explanatory diagram (part 1) of a specific example of the operation log. In FIG. 10, an operation log 1000 is an operation log of operations related to address search performed at the client terminal 102. The operation log 1000 includes the date and time when the address search was performed (creation date and creation time), the staff who performed the address search (staff code, staff name, etc.), and address information other than the personal number (name, date of birth, gender) , Address, etc.), information that can identify the reason (reason code, reason name, etc.) referring to the address information.

  According to the operation log 1000, it is possible to identify when and who referred to address information other than the personal number for what reason.

  FIG. 11 is an explanatory diagram (part 2) of a specific example of the operation log. In FIG. 11, an operation log 1100 is an operation log of operations regarding personal number display performed at the client terminal 102. The operation log 1100 includes the date and time when the personal number was displayed (creation date and time), the staff member who displayed the personal number (staff code, staff name, etc.), and the work that referred to the personal number (work code, work name) , Processing details, etc.), information indicating whether or not a personal number is referenced is included.

  According to the operation log 1100, it is possible to specify when and who referred to the personal number in what kind of business. Further, by not including the personal number in the operation log 1100, it is possible to prevent the operation log including the personal number that is the specific personal information from being recorded.

(Personal information display processing procedure of display control apparatus 101)
Next, the personal information display processing procedure of the display control apparatus 101 will be described.

  FIG. 12 is a flowchart illustrating an example of a personal information display processing procedure of the display control apparatus 101. In the flowchart of FIG. 12, first, the display control apparatus 101 determines whether an address search request from the client terminal 102 has been received (step S1201). Here, the display control apparatus 101 waits to accept an address search request (step S1201: No).

  When the display control apparatus 101 receives the address search request (step S1201: Yes), the display control apparatus 101 records personal information other than the personal number input as the search condition in the search condition file as a target of repeated input of the search condition ( Step S1202). Note that the display control apparatus 101 does not record the personal number input as the search condition as a target of repeated input of the search condition.

  Next, the display control apparatus 101 extracts address information corresponding to the address search request from the address information DB 220 (for example, see FIG. 5) (step S1203). Based on the extracted address information, the display control apparatus 101 generates screen information of an address inquiry screen including a personal number display field in a state where the personal number is not displayed and an operation component that accepts an instruction to display the personal number. (Step S1204). The address reference screen includes personal information other than the personal number included in the address information, for example, address number, name, date of birth, sex, address, and the like.

  Next, the display control apparatus 101 displays the address reference screen on the display 406 of the client terminal 102 by transmitting the generated screen information of the address reference screen to the client terminal 102 (step S1205). Then, the display control apparatus 101 determines whether an instruction to display a personal number from the client terminal 102 has been received (step S1206).

  If the display instruction of the personal number is not received (step S1206: No), the display control apparatus 101 determines whether the display end instruction of the address inquiry screen from the client terminal 102 is received (step S1207). .

  If the display end instruction for the address inquiry screen has not been received (step S1207: NO), the display control apparatus 101 returns to step S1206. On the other hand, when the display end instruction for the address inquiry screen is received (step S1207: YES), the display control apparatus 101 proceeds to step S1211.

  If an instruction to display a personal number is received in step S1206 (step S1206: Yes), the display control apparatus 101 records an operation log of an operation for displaying a personal number (step S1208). The display control apparatus 101 displays the personal number included in the address information in the personal number display field in the address inquiry screen displayed on the display 406 of the client terminal 102 (step S1209).

  Next, the display control apparatus 101 determines whether an instruction to end display of the address inquiry screen from the client terminal 102 has been received (step S1210).

  Here, the display control apparatus 101 waits for receiving a display end instruction for the address reference screen (step S1210: No), and when receiving a display end instruction for the address reference screen (step S1210: Yes), the address reference screen. Is terminated (step S1211), and a series of processes according to this flowchart is terminated.

  As a result, in the initial screen showing the search result according to the address search request, the personal number display field is displayed in the state where the personal number is not displayed, and the personal number is displayed according to the instruction to display the personal number by the operation on the operation part. A personal number can be displayed in the number display column.

  As described above, according to the display control apparatus 101 according to the embodiment, in response to receiving the address search request from the client terminal 102, the address information corresponding to the address search request is extracted from the address information DB 220. can do. Then, according to the display control apparatus 101, information excluding at least personal number information in the extracted address information can be output as a search result.

  Specifically, for example, the display control apparatus 101 displays the name included in the address information and the personal number display field in a state where the personal number is not displayed on the initial screen showing the search result according to the address search request. In addition to displaying, it is possible to perform control to display an operation component that accepts an instruction to display a personal number. As a result, it is possible to suppress the display of useless personal numbers when local government staff perform business on the business system.

  Further, according to the display control apparatus 101, the personal number can be displayed in the personal number display column in response to a personal number display instruction by an operation on the operation component. As a result, when it is necessary for the staff member to refer to the personal number, the personal number can be displayed in accordance with the operation on the operation component on the initial screen such as the address inquiry screen 120.

  Further, according to the display control apparatus 101, it is possible to record an operation log indicating that the personal number is displayed in response to an instruction to display the personal number by operating the operation component. At this time, the display control apparatus 101 can record an operation log that does not include a personal number (for example, an operation log 1100). This makes it possible to specify when and who referred to the personal number in what kind of business. Further, it is possible to prevent the operation log including the personal number that is the specific personal information from being recorded.

  Moreover, according to the display control apparatus 101, any personal information can be received as a search condition for a search request. For example, according to the display control apparatus 101, when an address search request specifying a personal number is received, address information corresponding to the specified personal number can be extracted from the address information DB 220. Thereby, the staff can search the address information using the personal number as a search condition. Further, even when a personal number is designated as a search condition, it is possible to suppress the display of the personal number on the initial screen showing the search result according to the address search request.

  For example, according to the display control apparatus 101, when an address search request specifying a name is received, address information corresponding to the specified name can be extracted from the address information DB 220. Thereby, the staff can search the address information using the name as a search condition.

  Further, according to the display control apparatus 101, personal information other than the personal number input as the search condition is stored as a target of repeated input of the search condition, and the search condition is repeatedly input for the personal number input as the search condition. It is possible to perform control that is not memorized as a target. As a result, the personal number, which is specific personal information, is recorded in the search condition file (for example, the search condition file 800) as the target of repeated input of the search condition while enabling the repetitive input of the search condition to simplify the work. Can be prevented. In addition, it is possible to prevent an operation log from being generated when the personal number is recorded in the search condition file.

  The personal information display method described in the present embodiment can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. The personal information display program is recorded on a computer-readable recording medium such as a hard disk, a flexible disk, a CD-ROM, an MO, and a DVD, and is executed by being read from the recording medium by the computer. Further, the personal information display program may be distributed via a network such as the Internet.

  The following additional notes are disclosed with respect to the embodiment described above.

(Appendix 1) In a personal information display program for controlling display of address information,
Prior to the display of the personal number, an operation for displaying name information which is a part of the address information, displaying the personal number display column in a state where the personal number is not displayed, and receiving an instruction to display the personal number Display parts,
In response to an instruction to display the personal number by an operation on the operation component, the operation log is recorded, and the personal number is displayed in the personal number display column.
A personal information display program for causing a computer to execute processing.

(Supplementary note 2) The supplementary note 1 is characterized in that the display including the name information, the personal number display column, and the operation component is performed on an initial screen showing a search result corresponding to the address search request. Personal information display program.

(Supplementary note 3) The personal information display program according to supplementary note 2, wherein the address search request includes designation of the personal number.

(Supplementary note 4) The personal information display program according to supplementary note 2, wherein the address search request includes designation of the name.

(Supplementary note 5) The personal information display program according to any one of supplementary notes 1 to 4, wherein the operation log does not include the personal number.

(Appendix 6) In the personal information display method for controlling the display of address information,
Prior to the display of the personal number, an operation for displaying name information which is a part of the address information, displaying the personal number display column in a state where the personal number is not displayed, and receiving an instruction to display the personal number Display parts,
In response to an instruction to display the personal number by an operation on the operation component, the operation log is recorded, and the personal number is displayed in the personal number display column.
A personal information display method characterized in that a computer executes processing.

(Supplementary Note 7) In a display control apparatus that performs display control of address information,
Prior to the display of the personal number, an operation for displaying name information which is a part of the address information, displaying the personal number display column in a state where the personal number is not displayed, and receiving an instruction to display the personal number Display parts,
In response to an instruction to display the personal number by an operation on the operation component, the operation log is recorded, and the personal number is displayed in the personal number display column.
A display control apparatus comprising a control unit.

(Appendix 8) Accepting personal information search requests,
With reference to a storage unit storing personal information including a personal number, read personal information corresponding to the search request,
Output as search results information excluding at least personal number information in the read personal information.
A personal information display program for causing a computer to execute processing.

(Supplementary note 9) The personal information display program according to supplementary note 8, further causing the computer to execute a process including a reception unit that receives an instruction to display the personal number in the search result.

(Additional remark 10) When the instruction | indication to display about the said personal number in the said reception part is received, while the said personal number is displayed, the process which memorize | stores that the said personal number was displayed in the display log memory | storage part further The personal information display program according to appendix 9, which is executed by a computer.

(Appendix 11) Accept any one of the personal information as a search condition for the search request;
The personal information other than the personal number input as the search condition is stored as a target of repeated input of the search condition, and the personal number input as the search condition is not stored as the target of repeated input of the search condition. Do control,
The personal information display program according to appendix 8, further causing the computer to execute processing.

(Appendix 12) Accepting requests for personal information search,
With reference to a storage unit storing personal information including a personal number, read personal information corresponding to the search request,
Output as search results information excluding at least personal number information in the read personal information.
A personal information display method characterized in that a computer executes processing.

(Appendix 13) Accepting a search request for personal information
With reference to a storage unit storing personal information including a personal number, read personal information corresponding to the search request,
Output as search results information excluding at least personal number information in the read personal information.
A display control apparatus comprising a control unit.

DESCRIPTION OF SYMBOLS 101 Display control apparatus 102 Client terminal 110 Memory | storage part 120 Address reference screen 130 Personal number display column 140 Operation component 200 Business support system 220 Address information DB
230 Operation log DB
600 Address Search Screen 701 Reception Unit 702 Extraction Unit 703 Display Control Unit 704 Recording Unit 800 Search Condition File 1000, 1100 Operation Log

Claims (12)

In the personal information display program that controls the display of address information,
Prior to the display of the personal number, an operation for displaying name information which is a part of the address information, displaying the personal number display column in a state where the personal number is not displayed, and receiving an instruction to display the personal number Display parts,
In response to an instruction to display the personal number by an operation on the operation component, the operation log is recorded, and the personal number is displayed in the personal number display column.
A personal information display program for causing a computer to execute processing.   2. The personal information according to claim 1, wherein the display including the name information, the personal number display field, and the operation component is performed on an initial screen showing a search result according to an address search request. Display program.   3. The personal information display program according to claim 2, wherein the address search request includes designation of the personal number.   The personal information display program according to claim 2, wherein the address search request includes designation of the name. In the personal information display method that controls the display of address information,
Prior to the display of the personal number, an operation for displaying name information which is a part of the address information, displaying the personal number display column in a state where the personal number is not displayed, and receiving an instruction to display the personal number Display parts,
In response to an instruction to display the personal number by an operation on the operation component, the operation log is recorded, and the personal number is displayed in the personal number display column.
A personal information display method characterized in that a computer executes processing. In a display control device that controls display of address information,
Prior to the display of the personal number, an operation for displaying name information which is a part of the address information, displaying the personal number display column in a state where the personal number is not displayed, and receiving an instruction to display the personal number Display parts,
In response to an instruction to display the personal number by an operation on the operation component, the operation log is recorded, and the personal number is displayed in the personal number display column.
A display control apparatus comprising a control unit. Accept search requests for personal information,
With reference to a storage unit storing personal information including a personal number, read personal information corresponding to the search request,
Output as search results information excluding at least personal number information in the read personal information.
A personal information display program for causing a computer to execute processing.   8. The personal information display program according to claim 7, further causing the computer to execute a process of including a receiving unit that receives an instruction to display the personal number in the search result.   When the receiving unit receives an instruction to display the personal number, the computer is further configured to display the personal number and store the display log storage unit that the personal number is displayed. The personal information display program according to claim 8, wherein: Accept any of the personal information as a search condition for the search request,
The personal information other than the personal number input as the search condition is stored as a target of repeated input of the search condition, and the personal number input as the search condition is not stored as the target of repeated input of the search condition. Do control,
The personal information display program according to claim 7, further causing the computer to execute processing. Accept search requests for personal information,
With reference to a storage unit storing personal information including a personal number, read personal information corresponding to the search request,
Output as search results information excluding at least personal number information in the read personal information.
A personal information display method characterized in that a computer executes processing. Accept search requests for personal information,
With reference to a storage unit storing personal information including a personal number, read personal information corresponding to the search request,
Output as search results information excluding at least personal number information in the read personal information.
A display control apparatus comprising a control unit.

Images