JP2010191998A - Information processing method and computer system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To securely transmit data on obtaining confirmation on a transmission source of the data. <P>SOLUTION: When access to a specific URL is received, a first program for performing authenticity check of a specific file which is preliminarily stored in a user terminal is transmitted. When a signal indicating that authenticity is checked by the authenticity check is received from the first program, the subsequent access is permitted. When an image data registration request is received from the user terminal after the access is permitted, at least issue specification data for specifying an issue to be an object in which the image data is registered and a second program for performing image registration are transmitted. When the issue specification data, data on image files in each of which resolution is adjusted to specific resolution and an order is specified, and arbitrary data in which correspondence relation with the image files is specified are received from the second program of the user terminal, the received pieces of data are stored in an issue data storage part. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a technique for collecting data necessary for insurance processing while maintaining security.

  For example, when a vehicle with auto insurance needs to be repaired due to a traffic accident, the insurance subscriber or the person in charge at the repair shop usually enters the repair car into the repair factory and goes to the insurance company. Notify the customer that repairs will be made. The insurance company that received the contact determines whether or not the car insurance can be applied based on the information on the vehicle to be repaired, the details of the car insurance that is covered, the situation of the accident (the negligence rate), the degree of vehicle damage, etc. To do. Most of the insurance company personnel (accident investigators) go to the repair shop to check the vehicle damage and the estimated repair costs.

  On the other hand, with the recent development of information processing technology, for example, a repair shop photographs a damaged part of a vehicle with a digital camera and sends image data to an insurance company by e-mail or the like, and similarly outputs output data of an estimation system. It became possible to send to insurance companies by e-mail.

  In addition, there is a technique that realizes high-speed transmission by compressing image data and an estimate file (for example, see Patent Document 1). That is, the image of the accident vehicle is input to the computer by an estimate person at the repair shop. In addition, an estimate person of a repair shop makes an accident estimate on a computer and highlights various image areas required. When the estimate is completed, the estimate file is compressed and transmitted to the insurance company. In the insurance company, the estimate person of the insurance company decompresses the estimate file and starts reading the estimate.

  With such a technology, a person in charge of an insurance company can judge the applicability and scope of car insurance without having to go to a repair shop frequently. Further, when transmitting image data or the like from a repair shop, in order to perform secure communication, communication with a dial-up server via a public network or file encryption technology is used.

  The repair shop must prepare a facility and encryption program for connecting to the insurance company's system. If the output data of the repair shop's existing estimation system is not a general-purpose file, fax It also comes out when used together.

JP-A-5-290057

  In this way, in the prior art, insurers in charge of the insurance company decreased the frequency of going to the repair shop, but the interaction with the repair shop did not decrease so much, and the effort to organize image data and other data increased. . In addition, it cannot be said that data is exchanged easily and inexpensively for repair shops.

  Furthermore, communication with a dial-up server and introduction of an encryption program for enabling secure communication require a relatively high system construction cost and operation cost. As for file encryption, even if each repair shop has installed an encryption program, it cannot be said that file encryption processing will be performed without forgetting when sending image data etc. , There is a possibility that unencrypted files will be sent to the insurance company.

  Also, in order to be able to process not only encrypted communication but also other data such as quotations, a method of installing a dedicated program on the computer of the repair shop can be considered, but this affects the computer system at the repair shop. As a result, total operating costs are expected to rise.

  Accordingly, the object of the present invention is to provide information such as insurance companies from companies that provide information while minimizing the impact and cost on computer systems in companies that provide information such as repair shops. It is to provide a new technology for allowing a receiving company or the like to transmit predetermined data securely after obtaining confirmation of the transmission source.

  Another object of the present invention is to provide a novel technique for confirming access authority to a computer system.

  According to the present invention, an information processing method executed by a computer, when receiving an access to a specific URL (Uniform Resource Locator) related to the computer from a user terminal, a specific file ( For example, a step of transmitting a first program for authenticity checking of the ID file in the embodiment to the user terminal, a first program of the user terminal (for example, ActiveX (trademark of Microsoft), Java (Sun Microsystems, Inc.) Trademark) Programs such as applets, etc. The same applies to the second program.) When a signal indicating that the authenticity is confirmed by the authenticity check is received, subsequent access is permitted and the authenticity is not confirmed. Is received from the first program of the user terminal. A step of refusing later access, and, if an image data registration request is received from the user terminal after the access is permitted, at least a case specifying data and an image for specifying a case for which image data is to be registered A second program transmission step of transmitting a second program for registration to the user terminal, the case specifying data, the image file data in which the resolution is adjusted to a specific resolution and the order is defined, and the image file And storing arbitrary data for which the corresponding relationship is defined from the second program of the user terminal in the case data storage unit. The first and second programs are activated in the user terminal only in cooperation with a specific website related to the computer, and the second program is stored in a specific directory of a specific drive of the user terminal. Prompt for selection of files, enable ordering of selected image files, adjust the resolution of selected image files to a specific resolution, allow input of arbitrary data corresponding to the selected image file, at least The selected image file and arbitrary data are encrypted and transmitted to a specific address.

  As described above, after the first program is sent to the user terminal and the confirmation of the data transmission source is obtained from the specific file, the image data encrypted from the second program sent to the user terminal is also necessary. Data is received and stored in the matter data storage. Since the first and second programs are transmitted to the user terminal when necessary, the user terminal does not need to install a dedicated program in advance. Therefore, it is possible to reduce the influence of other programs and reduce operation costs such as version upgrades. Since the second program has the functions as described above, the work load on the person who receives and uses image data or the like is reduced, and the work efficiency is improved. Further, the authentication process of the transmission source by the specific file is confirmation of the access authority to the computer. For example, in addition to or separately from the authentication of the user himself / herself by ID and password, a special user terminal having the access authority is used. It is confirmed that there is.

  In addition, a file in a specific format (for example, a file group for a web page) is generated using item data including image specifying data stored in the item data storage unit, image file data, and arbitrary data, and related to the item You may make it further include the step which transmits the file of the said specific format to the person registered beforehand as a person who performs (for example, an adjuster (contact person in charge of agreement)). In this way, it is possible to obtain, for example, accident case data even if a person related to the case does not bother to access. In addition, by introducing a mechanism in which the transmission destination of the file in the specific format cannot be transmitted to addresses other than those permitted in advance, unintentional leakage of information can be avoided.

  Furthermore, unlike the certificate data issued by the certificate authority, the specific file described above may include binary data for specifying an accessible user terminal. Thereby, the operation cost can be reduced. The specific file is issued when a user such as a repair shop is registered in the computer and stored in the user terminal.

  Further, in the second program transmission step described above, data of a specific directory of a specific drive of the user terminal is further transmitted, and the second program described above is stored in a specific directory of the specific drive of the user terminal. Data may be sent to a computer. Usability of the user who uses the user terminal can be improved.

  In addition, the image data is image data related to the accident, the case is an accident case, and whether the access source domain is a pre-registered domain according to the access from the terminal of the accident case registrant. And when the access source domain is determined to be a pre-registered domain, the subsequent processing is permitted, and when the access source domain is determined not to be a pre-registered domain. If the registration of the accident case is requested from the terminal of the registrant of the accident case after the access is permitted and the registration of the accident case is requested after the access is permitted, Data to identify the user who is a repair shop that takes image data of the accident case from the terminal of the accident case registrant. The method further includes a step of receiving accident case data including the data and storing the data in the case data storage unit, and a step of transmitting a registration request to a user who is a repair shop based on the data stored in the case data storage unit. Good.

  For example, when an accident case is registered by the registrant of the accident case, a user who is a repair shop can register the image data and the like as described above in association with each other. As for access in this portion, access authority is confirmed in a simple form, separately from authenticity confirmation of a specific file by the first program. Even in such a simple form, it is possible to apply a certain pawl to information leakage.

  A program for causing an information processing method according to the present invention to be executed by a computer can be created. The program is a storage medium or storage device such as a flexible disk, a CD-ROM, a magneto-optical disk, a semiconductor memory, and a hard disk. Stored in In some cases, digital signals are distributed over a network. Note that data being processed is temporarily stored in a storage device such as a computer memory.

  According to the present invention, an enterprise such as an insurance company that provides information from an enterprise that provides information while minimizing the impact and cost on the computer system in the enterprise that provides information such as a repair shop. For example, predetermined data can be securely transmitted after confirmation of the transmission source is obtained.

  As another aspect, a new technique for confirming access authority to a computer system is provided.

It is a system outline figure in one embodiment of the present invention. It is a figure which shows an example of the repair shop data stored in registration user DB. It is a figure which shows an example of the user data of an insurance company stored in registration user DB. It is a figure which shows an example of accident case data stored in accident DB. It is a figure which shows the processing flow (the 1) in one embodiment of this invention. It is a figure which shows an example of the menu page for insurance companies. It is a figure which shows the processing flow (the 2) in one embodiment of this invention. It is a figure which shows an example of the factory management page for insurance companies. It is a figure which shows an example of the factory new registration page for insurance companies. It is a figure which shows the processing flow (the 3) in one embodiment of this invention. It is a figure which shows an example of the image and estimate registration page for insurance companies. It is a figure which shows an example of the case box information display input page for insurance companies. It is a figure which shows the processing flow (the 4) in one embodiment of this invention. It is a figure which shows an example of the case box registration page for insurance companies. It is a figure which shows the processing flow (the 5) in one embodiment of this invention. It is a figure which shows an example of the menu page for repair shops. It is a figure which shows the processing flow (the 6) in one embodiment of this invention. It is a figure which shows an example of the insurance company selection page for repair shops. It is a figure which shows an example of the item list page for repair shops. It is a figure which shows an example of the item information display input page for repair shops. It is a figure which shows an example of the functional block diagram of a factory terminal. It is a figure which shows an example of the first screen displayed by an image processing program. It is a figure which shows an example of the 2nd screen displayed by an image processing program. It is a figure which shows the processing flow (the 7) in one embodiment of this invention. It is a figure which shows an example of a printing screen. It is a figure which shows the functional block of a computer.

  FIG. 1 shows a system outline diagram according to an embodiment of the present invention. Connected to the Internet 1 which is a non-secure computer network is one or a plurality of factory terminals 3 which are, for example, personal computers installed in a repair shop and a center server 5 which performs main processing in the present embodiment. Has been. The center server 5 may be composed of one computer or a plurality of computers. Further, for example, one unit may be allocated to one insurance company, and one unit or a plurality of units may be allocated to a plurality of insurance companies. The factory terminal 3 has a web (Web) browser function, and the center server 5 has a web server function. For example, each of the factory terminals 3 has an HTTP (Hyper Text Transfer Protocol) or HTTPS (HTTP Security. SSL (Secure). It communicates with HTTP (Socket Layer). Moreover, the factory terminal 3 has a mail client function, and can send and receive mail. Since only the components related to the present embodiment are illustrated, the description of, for example, DNS (Domain Name Server) is omitted.

  The center server 5 is connected to an insurance company in-house LAN (Local Area Network) 11 via a dedicated line, for example. The center server 5 manages the accident DB 55 and the registered user DB 57. Further, the mail processing server 13 performs processing using the data of the accident DB 55 and the registered user DB 57. The mail processing server 13 is also connected to the insurance company internal LAN 11 via a dedicated line, for example. In some cases, it is connected to the insurance company in-house LAN 11 not via the dedicated line but via, for example, the Internet 1 or a known firewall. The insurance company internal LAN 11 manages, for example, one or a plurality of insurance company terminals 7 which are personal computers used in the insurance company, and a mail box 91 for storing mail addressed to each mail address used in the insurance company. In addition, a mail server 9 that performs mail transmission processing is connected. The mail processing server 13 may be integrated with the center server 5 in some cases. Similarly to the center server 5, the mail processing server 13 may be configured by one computer or may be configured by a plurality of computers. The insurance company terminal 7 has a Web browser function, and communicates with the center server 5 by HTTP or HTTPS. Further, the insurance company terminal 7 has a mail client function and can send and receive mail. Since only the components related to the present embodiment are illustrated, explanations of other in-house Web servers and the like are omitted.

  The center server 5 includes a repair factory interface unit 51 having an authentication processing unit 511, an insurance company interface unit 53 including an accident information registration browsing processing unit 531, a factory management unit 532, and a domain inspection unit 533. Although there is an interface unit for the system administrator, the description is omitted because it is not related to this embodiment. The mail processing server 13 includes an attached file generation unit 131, a cryptographic processing unit 132, and a mail generation / transmission unit 133 including a domain inspection unit 1331. Details of these functions will be described below in the description of the processing flow.

  Next, an example of data registered in the registered user DB 57 is shown in FIGS. FIG. 2 shows an example of data on one combination of a repair shop and an insurance company. In the example of FIG. 2, the repair factory ID, password, factory name, telephone number, FAX number, e-mail addresses 1 and 2, e-mail address 2 presence / absence setting, postal code, location (prefecture), location (city / town) Below) and factory information including information such as remarks, non-life insurance ID that is the ID of an insurance company (in this case a non-life insurance company), and whether or not a storage area for image files transmitted using this system has been set Presence / absence of transmission BOX establishment setting, image transmission transfer destination mail address, image transmission transfer destination mail address transmission setting indicating whether or not to send a mail with an image file attached to the image transmission transfer destination mail address, incoming notification mail address, Incoming notification e-mail address transmission setting, whether to send incoming notification e-mail to the incoming notification e-mail address, encryption / decryption password and Insurance information, including the management group (the insurance company information), (including the drive information) a specific directory in which the image file is stored in the factory terminal 3 and is stored. In this example, a record is specified by an ID (repair factory ID) included in the factory information and a non-life ID included in the non-life information. The transfer of image transmission indicates that the image data registered by the repair shop is sent to the person in charge of the agreement by e-mail, and the incoming notification e-mail notifies the person in charge of the agreement only of the registration of the image data etc. Indicates mail. The management group means a group in an insurance company that manages the repair shop.

  FIG. 3 shows an example of a data table for a user who accesses the center server 5 such as a contract person in charge of an insurance company. In the example of FIG. 3, a non-life ID column, a non-life name column, a mail domain column, and a domain (host name, etc., but may be data such as an IP address range) for web access. , A group name column, a user name column, a user ID column, and a password column are provided. As a result, in the authentication process of login, the access authority confirmation process by domain (host name, etc.), and the notification destination setting of image data etc., inappropriate access and mail transmission are prevented, and information leakage is prevented. As for the domain of the mail and the domain for Web access, those registered in advance corresponding to the non-life ID etc. are automatically registered when each user is registered.

  FIG. 4 shows an example of a table stored in the accident DB 55. In the example of Fig. 4, data registration date, data reception date (update date), sender name (repair shop name or code), customer name, contract person name (or code), accident reception Number, accident date, security number, vehicle registration number, model, model designation number, classification number, color code, vehicle owner, vehicle user, remarks, file name of attached file 1, file name of attached file 2, File name of image file 1, corresponding comment 1, file name of image file 2, corresponding comment 2, file name of image file 3, corresponding comment 3, file name of image file 4, corresponding comment 4,. . . And are included. Part of the data is registered by the person in charge of the agreement on the insurance company side, and part of the data is registered by the user on the repair shop side. Details will be described in the following description.

  Next, accident information registration processing using the insurance company terminal 7 will be described with reference to FIGS. For example, the contract person in charge of the insurance company accesses the insurance company terminal 7 to the non-life login page of the center server 5 (step S1). In response to this access, the insurance company interface unit 53 in the center server 5 transmits the non-life insurance login page data to the insurance company terminal 7 (step S3). The insurance company terminal 7 receives the non-life login page data from the center server 5 and displays it on the display device (step S5). For example, a web page including an input field for a code (for example, non-life insurance ID) specifying an insurance company, an input field for a user ID, and an input field for a password is displayed.

  The person in charge of the agreement of the insurance company operates the insurance company terminal 7 and inputs a code for identifying the insurance company, a user ID, and a password as login data. The insurance company terminal 7 accepts input of login data and transmits the login data to the center server 5 (step S7). The insurance company interface 53 of the center server 5 receives the login data from the insurance company terminal 7 (step S9), and performs the authentication process using the data registered in the registered user DB 57 (FIG. 3) ( Step S11). Further, the domain inspection unit 533 of the insurance company interface unit 53 indicates that the domain name (or host name or IP address) of the access source (insurance company terminal 7) corresponds to the code and user ID for specifying the insurance company and is a registered user. It is determined whether or not it is the same as that registered in the DB 57 (FIG. 3) (step S13). Then, the insurance company interface unit 53 determines whether the authentication process in step S11 is successful and the inspection in step S13 is cleared (step S15). If there is a problem in either the authentication process in step S11 or the inspection in step S13, Web page data including a login failure message is generated and transmitted to the insurance company terminal 7. The insurance company terminal 7 receives the Web page data including the login failure message and displays it on the display device (step S17). On the other hand, if it is determined that the authentication process of step S11 is successful and the inspection of step S13 is cleared, menu page data for the insurance company is transmitted to the insurance company terminal 7 (step S19). The insurance company terminal 7 receives the menu page data for the insurance company and displays it on the display device (step S21).

  For example, a menu page as shown in FIG. 6 is displayed. In the example of FIG. 6, menu items such as image / quote registration, message board, factory management, company registration content change, company ID management, company group ID management, and password change are shown. In this embodiment, the company ID management, the company registration content change, the company group ID management, the message board, the password change, and the logout are not the main points of the present embodiment, and the description thereof is omitted.

  The person in charge of agreement at the insurance company selects and clicks one of the menu items on the menu page as shown in FIG. The insurance company terminal 7 receives the selection input of the person in charge of the agreement of the insurance company and transmits the selection input data to the center server 5 (step S23). The insurance company interface 53 of the center server 5 receives the selection input data (step S25), and determines whether image / estimate registration is selected (step S27). If it is determined that the image / estimate registration is selected by the contract person in charge of the insurance company, the process proceeds to the processing flow of FIG. On the other hand, when it is determined that the image / quotation registration is not performed, it is determined whether factory management is selected (step S29). If it is determined that the factory management is selected, the processing flow of FIG. If it is determined that it is not factory management, any one of company ID management, company registration content change, company group ID management, message board, password change, and logout has been selected. (Step S31).

  First, the previous process transferred through the terminal B will be described with reference to FIGS. If it is determined that the factory management is selected, the factory management unit 532 of the insurance company interface unit 53 transmits the factory management page data to the insurance company terminal 7 (step S35). The insurance company terminal 7 receives the factory management page data from the center server 5 and displays it on the display device (step S37). For example, a factory management page as shown in FIG. 8 is displayed. In the example of FIG. 8, a combo box for selecting a prefecture where a repair factory exists, a factory name input field, a factory ID input field, a telephone number input field, a combo box for specifying whether or not there is a transaction, A menu button for returning to the menu page, a new registration button, and a search button are provided. When an insurance company agreement officer searches for a repair shop, a search condition is specified by a combo box and an input field, and a search button is clicked. Click the New Registration button to register a new repair shop.

  The insurance company terminal 7 accepts a selection input from an insurance company agreement manager and transmits selection input data to the center server 5 (step S39). The factory management unit 532 included in the insurance company interface unit 53 of the center server 5 receives the selection input data from the insurance company terminal 7 (step S41), and determines whether the selection input data is a search instruction including a search condition. (Step S43). If the search instruction includes the search condition, the registered user DB 57 (FIG. 2) is searched according to the search condition, and the repair shop data that matches the search condition is extracted (step S45). Then, search result display page data is generated and transmitted to the insurance company terminal 7 (step S47). The insurance company terminal 7 receives the search result display page data from the center server 5 and displays it on the display device (step S49). On the search result display page, repair shop data that matches the search conditions is listed, and the insurance company contractor who referred to the data instructs the processing such as correction of the registered data. Since it is not the main point of this form, further explanation will be omitted.

  On the other hand, if it is determined that it is not a search instruction, it is determined whether or not an instruction for transition to a menu page is given (step S44). If the transition to the menu page is instructed, the process returns to step S19 in FIG. On the other hand, when it is determined that the transition to the menu page has not been instructed, new registration has been instructed, so the factory management unit 532 refers to the registered user DB 57 (FIG. 3) and newly registers. Page data is generated and transmitted to the insurance company terminal 7 (step S51). The insurance company terminal 7 receives the new registration page data and displays it on the display device (step S53).

  For example, a new registration page as shown in FIG. 9 is displayed. In the example of FIG. 9, as factory information, factory name, telephone number, FAX number, mail address 1, mail address 2, presence / absence of notification to mail address 2, postal code, location (prefecture), location (under municipality) And a selection input field is provided so as to select or input remarks. In addition, as the transmission BOX settings for receiving image file transmission from the factory, image transmission BOX opening setting, image transmission transfer destination mail address (only user name can be specified, domain name cannot be specified), image transmission transfer destination A selection input field is provided to select or input mail address transmission setting, incoming notification mail address, incoming notification mail address transmission setting, encryption / decryption password (including confirmation), and management group data. As described above, a domain name cannot be specified for an image transmission transfer destination mail address. As for image data and the like, it is impossible to set transmission to other domains, and accident information is prevented from being transferred to mail addresses of other domains. For example, it cannot be sent to the personal email address of the person in charge of the agreement. In the case of an incoming notification mail, only the registration is notified by the repair shop, so it may be transmitted to another domain. Since image data and the like are encrypted, it is necessary to register a password for that purpose. However, image data or the like may not be transferred, or an incoming notification mail may not be transmitted. Further, a registration button, an undo button, a cancel button, a menu button, a logout button, and a return button are provided. When the undo button is clicked, the data selected or input in the selection input field is cleared. When the cancel button is clicked, for example, the screen returns to the factory management page. When the back button is clicked, the factory management page is restored. Clicking the menu button returns you to the menu page. Here, it is assumed that necessary data for the repair shop is selected and input and the registration button is clicked.

  The insurance company terminal 7 receives the selection input of the person in charge of the agreement of the insurance company, and transmits the selection input data to the center server 5 (step S55). The factory management unit 532 in the insurance company interface unit 53 of the center server 5 receives the selection input data from the insurance company terminal 7 and registers it in the registered user DB 57 (FIG. 2) (step S57). The transaction insurance ID is extracted from, for example, the registered user DB 57 (FIG. 3) based on the user ID of the person in charge of the agreement of the insurance company. Then, an ID file is generated in the repair factory related to the new registration, and the ID file is registered in, for example, the registered user DB 57 (step S59). Further, the ID file is encrypted and transmitted by mail to the registered mail address of the repair shop (step S61). The ID file is not an electronic certificate issued by a certificate authority, but is binary data of a predetermined length, for example. In operation, for example, in a repair shop that has received this ID file, the ID file is decrypted with a separately transmitted password or decryption key and stored in a predetermined directory. The binary data may be a bit string whose authenticity is confirmed by performing a predetermined operation. For example, the authenticity can be confirmed by performing a comparison process with an ID file registered in the registered user DB 57. It may be a bit string to be confirmed. By saving this ID file in a predetermined directory, the access authority to the center server 5 is confirmed. The process proceeds to step S19 in FIG.

  Next, the processing after shifting from FIG. 5 through the terminal A will be described with reference to FIGS. The accident information registration browsing processing unit 531 included in the insurance company interface unit 53 of the center server 5 refers to the accident DB 55 to generate an image / estimation registration page / data and transmits it to the insurance company terminal 7 (step S65). . For example, the accident DB 55 is searched with the user ID of the person in charge of the agreement of the logged-in insurance company, the data about the case updated (or received) within a predetermined period is extracted, and the extracted data is used as an image.・ Generate quotation registration page data. The insurance company terminal 7 receives the image / quotation registration page / data from the center server 5 and displays it on the display device (step S67).

  For example, an image / estimate registration page as shown in FIG. 11 is displayed. In the example of FIG. 11, in order to search for accident cases, a registration number selection field, a reception number input field, a customer name input field, a sender name input field, an agreement person name selection field, and a search result sort order designation field (Including radio buttons for specifying ascending or descending order). Click the search button to search, click the new item registration button to register a new item, click the menu button to return to the menu page, and click the logout button to log out. It is supposed to be. A table is also provided as a case list for data extracted from the accident DB 55. In the example of FIG. 11, the extracted data is presented by the registration number, the reception number, the customer name, the transmission source name, the name of the person in charge of the agreement, the registration date, and the update date. The registration number is a hyperlink. Here, since there is no processing specific to this embodiment when moving to the menu page or logging out, the insurance company's agreement manager selects the search instruction, specific case (selects the hyperlink of the registration number) One of the new project registration instructions is performed.

  The insurance company terminal 7 receives the selection input from the person in charge of the agreement, and transmits the selection input data to the center server 5 (step S69). The accident information registration browsing processing unit 531 in the insurance company interface unit 53 of the center server 5 receives the selection input data from the insurance company terminal 7 (step S71), and determines whether a new case registration is instructed (step S73). If it is determined that a new case registration is instructed, the process proceeds to the process of FIG. On the other hand, if it is determined that the new case registration is not instructed, it is determined whether the search process is instructed (step S75). If it is determined that the search process has been instructed, the search process is performed on the accident DB 55 according to the search condition data included in the selection input data and the user ID of the person in charge of the agreement (step S77). Then, search result page data is generated using the search result and transmitted to the insurance company terminal 7 (step S79). The insurance company terminal 7 receives the search result page data from the center server 5 and displays it on the display device (step S81). For example, a case list table including extracted accident case data as shown in the lower part of FIG. 11 is displayed. The insurance company's agreement manager clicks on a hyperlink with a specific registration number. The insurance company terminal 7 receives the selection input of the person in charge of the agreement, and transmits the selection input data including the data of the specific accident case to the center server 5 (step S82). The accident information registration browsing processor 531 in the insurance company interface 53 of the center server 5 receives the selection input data from the insurance company terminal 7.

  On the other hand, if it is determined in step S75 that it is not a search process, a specific accident case selection instruction has been issued from the case list table shown at the bottom of FIG. In step S82, selection input data including data on a specific accident case is transmitted from the insurance company terminal 7. In any case, the accident information registration browsing processing unit 531 in the insurance company interface unit 53 of the center server 5 is Then, the accident DB 55 is searched with the data of a specific accident case, the corresponding data is read, accident page data is generated based on the read data, and is transmitted to the insurance company terminal 7 (step S83). The insurance company terminal 7 receives the accident page data from the center server 5 and displays it on the display device (step S85).

  For example, an accident page as shown in FIG. 12 is displayed. In the example of FIG. 12, the date / time display column, the reception number display column, the customer name display column, the accident date display column, the model display column, the model designation number display column, the vehicle owner display column, the transmission, when the accident case is registered. An original name display field, a registration number display field, an agreement person name display field, a securities number display field, a color code display field, a category classification number display field, and a vehicle user display field are provided. In addition, a comment display input field is provided, which enables not only display of comments but also input. In addition, a display field for attached file names (attached file 1 and attached file 2. Clicking with a link, for example, displays the contents of the file in a separate window) and an attached file deletion button are also provided. Attachment files that are considered unnecessary are deleted by the delete button. Hereinafter, the file name display column and delete button of the image file 1 and the image data display column and comment display column, the file name display column and delete button of the image file 2, the image data display column and comment display column, and the file name of the image file 3 Display column and delete button, image data display column and comment display column, file name display column and delete button and image data display column and comment display column of image file 4, file name display column and delete button and image data of image file 5 A display field, a comment display field, a file name display field for the image file 6, a delete button, an image data display field, and a comment display field are provided. Again, image files that seem unnecessary are deleted with the delete button. Further, an “undo” button, an update button, a menu button for transitioning to a menu page, and a logout button for logging out are provided. When the “Undo” button is clicked, the result of the correction input or the file instructed to be deleted is restored. When the update button is clicked, update registration is performed so that the correction input made so far is reflected. Here, the case where the menu button and the logout button are clicked or the case where the “undo” button is clicked is not the gist of the present embodiment, so the explanation is omitted, and the delete button or the update button is clicked. To do. In addition, you may make it perform only browsing in this page. In that case, when browsing is completed, for example, a menu button or a logout button may be clicked.

  The insurance company terminal 7 accepts a selection input by the person in charge of agreement of the insurance company, and transmits selection input data to the center server 5 (step S87). The accident information registration browsing processing unit 531 in the insurance company interface unit 53 of the center server 5 receives the selection input data from the insurance company terminal 7 (step S89), and determines the contents of the selection input. If it is determined that the delete button has been clicked, the corresponding file is once deleted, and the process returns to step S83 while reflecting other correction input data, and new accident page data is constructed. On the other hand, if it is determined that the update button has been clicked, the accident DB 55 is updated and registered according to the accident data included in the selection input data (step S91). Then, the processing returns to the processing in FIG.

  Next, the process after it is determined in step S73 (FIG. 10) that new registration has been instructed and the process proceeds via the terminal D will be described with reference to FIGS. The accident information registration browsing processing unit 531 in the insurance company interface unit 53 of the center server 5 transmits the new case registration page data to the insurance company terminal 7 (step S95). The insurance company terminal 7 receives the new item registration page data from the center server 5 and displays it on the display device (step S97).

  For example, a new case registration page as shown in FIG. 14 is displayed. In the example of FIG. 14, a reception number input field, a customer name input field, an accident date input field, a model input field, a model designation number input field, a vehicle owner input field, a sender name input field, A registration number input field, an agreement person input field, a securities number input field, a color code input field, a category classification number input field, a vehicle user input field, and a comment input field are provided. Also, a registration button for registering the accident case data, a cancel button, a menu button for returning to the menu page, a logout button for logging out, and a return button for returning to the previous page are provided. Yes. On this new case registration page, the accident case data is entered in the input field described above. Here, the menu button, the logout button, the return button, and the cancel button are not the main points of the present embodiment, and thus description thereof is omitted. Accordingly, it is assumed that accident case data is input in the input field and the registration button is clicked.

  Then, the insurance company terminal 7 accepts input by the insurance company agreement manager and transmits the input data to the center server 5 (step S99). The accident information registration browsing processing unit 531 in the insurance company interface unit 53 of the center server 5 receives the input data from the insurance company terminal 7 and registers it in the accident DB 55 (step S101). Then, the repair factory table (FIG. 2) included in the registered user DB 57 is searched from the repair factory name (including transaction non-life insurance ID) included in the input data, and the mail address of the repair factory is extracted. Then, an e-mail indicating that a new case has been registered is generated and transmitted to the e-mail address of the repair shop (step S103). Then, the process returns to step S19 in FIG.

  In this way, the person in charge of the agreement of the insurance company registers accident case data in advance for a case in which image data or the like is transmitted to the repair shop using this system. As mentioned above, there are cases where the repair shop voluntarily registers image data etc. using this system for cases that have not been registered by the contract person in charge of the insurance company. The repair shop registers the image data and the like according to the processing described below for the case registration.

  Next, processing when a person in charge at a repair shop registers image data or the like in the center server 5 will be described with reference to FIGS. First, the person in charge of the repair shop makes the factory terminal 3 access the login page of the center server 5 (step S111). The repair factory interface unit 51 of the center server 5 transmits login page data to the factory terminal 3 in response to access (step S113). The factory terminal 3 receives the login page data from the center server 5 and displays it on the display device (step S115). In the case of a log-in page of a repair shop, an input field for a repair shop user ID and password is provided. The person in charge of the repair shop inputs the user ID and password on the login page. The factory terminal 3 accepts the input of the user ID and password, and transmits login data including the user ID and password to the center server 5 (step S117). The authentication processing unit 511 in the repair factory interface unit 51 of the center server 5 receives the login data from the factory terminal 3 (step S119), and performs authentication processing with reference to the registered user DB 57 (FIG. 2) (step S119). S121). Since this authentication process is a normal authentication process, it will not be described further. If this authentication fails, the process may return to step S113 to input login data again.

  And the authentication process part 511 transmits the terminal authentication program prepared beforehand to the factory terminal 3 (step S123). This terminal authentication program is a program that is transmitted to a terminal device in association with a specific Web page (URL or site) and executed on the terminal device, such as a Java applet or ActiveX control. The terminal authentication program is also set to send the processing result to a specific URL (or IP address). Although execution may be restricted depending on the settings of the Web browser on the terminal device side, etc., if the user of the terminal device explicitly or implicitly gives permission, execution is automatically started. The In the case of ActiveX control, installation is also performed automatically, and once downloaded, only activation may be performed without downloading again.

  The factory terminal 3 receives the terminal authentication program from the center server 5 (step S125), starts the received terminal authentication program, and performs an ID file check on the ID file stored in a predetermined directory (step S125). S127). As described above, the ID file is binary data issued for the repair shop, and its authenticity is determined according to a predetermined algorithm. First, it is determined whether an ID file is stored in a predetermined directory. For binary data, when a predetermined calculation is performed, a known value is calculated, and when the ID file is stored in a predetermined directory, the terminal authentication program performs the predetermined calculation, In some cases, it may be determined whether the value of is calculated. Further, the comparison calculation may be performed using the data of the ID file stored in the registered user DB 57. In this way, by checking the factory terminal 3 using a combination of the authentication processing program and the ID file, even if the user ID and password are leaked, it is not a terminal that holds a genuine ID file. Access can be denied. As described above, since the ID file is not a certificate of a certification authority, it is possible to reduce the issuing cost and the operating cost. Information management is strengthened by applying such a new access control technology.

  Regardless of which processing method is employed, the terminal authentication program confirms the authenticity of the factory terminal 3 and transmits the confirmation result to the center server 5 (step S129). At this time, the terminal authentication program is set in advance to transmit the confirmation result to a predetermined URL (or IP address), and cannot be transmitted to other URLs. Note that the confirmation result may be transmitted using SSL. The authentication processing unit 511 in the repair factory interface unit 51 of the center server 5 receives the confirmation result from the factory terminal 3 and checks the content of the confirmation result (step S131). Here, based on both the authentication process in step S121 and the confirmation result of the terminal authentication program, it is determined whether the access is made by the authentic factory terminal 3 operated by the authentic user (step S133). If the result of one of the processes indicates that the access is not performed by a genuine factory terminal 3 operated by a genuine user, Web page data including a login failure message is transmitted to the factory terminal 3. To do. The factory terminal 3 receives the Web page data including the login failure message from the center server 5 and displays it on the display device (step S135). The person in charge of the repair shop can recognize that the login has failed.

  On the other hand, when the authentication processing unit 511 determines that the access is made by the authentic factory terminal 3 operated by the authentic user, the repair factory interface unit 51 transmits the menu page data to the factory terminal 3 (step S137). ). The factory terminal 3 receives the menu page data from the center server 5 and displays it on the display device (step S139). For example, a menu page as shown in FIG. 16 is displayed. In the example of FIG. 16, buttons for image / quote registration, message board, company registration content change, and password change are provided, and a hyperlink for logging out is also provided. Note that the message board, password change, and company registration content change are not the gist of the present embodiment, and thus description thereof is omitted. The person in charge of the repair shop clicks the image / quotation registration button.

  The factory terminal 3 receives the selection input of the person in charge of the repair shop, and transmits the selection input data to the center server 5 (step S141). The repair factory interface unit 51 of the center server 5 receives the selection input data from the factory terminal 3 (step S143), and determines whether image / estimate registration is selected (step S145). If it is determined that image / estimate registration has been selected, the process proceeds to the processing in FIG. On the other hand, if it is determined that other than image / estimate registration has been selected, a corresponding process is performed (step S147). Since this is not the gist of the present embodiment as described above, detailed description thereof is omitted.

  Next, the processing after the transition through the terminal E will be described with reference to FIG. The repair factory interface 51 of the center server 5 searches the accident DB 55 (FIG. 4) using the repair shop user ID, and, for example, an accident case related to the repair factory registered within a predetermined period from the current date. The registered user DB 57 is searched using the insurance company ID (transaction insurance ID) included in the extracted accident case data or using the repair factory user ID, and the repair factory is searched. Using the insurance company ID (non-life insurance ID) registered correspondingly, non-life insurance selection page data is generated and transmitted to the factory terminal 3 (step S151). The factory terminal 3 receives the non-life insurance page data from the center server 5 and displays it on the display device (step S153). For example, a non-life insurance selection page as shown in FIG. 18 is displayed. In the example of FIG. 18, an A non-life button, a B non-life button, a C non-life button, a D non-life button, a logout button, and a menu button are provided. In addition, a “newly registered” display is attached to the right side of the button of the insurance company in which an accident case is newly registered to the repair shop. As a result, it is possible to easily identify an insurance company in which an accident case is newly registered. Here, it is assumed that the A non-life button, the B non-life button, the C non-life button, or the D non-life button is selected. Since other selection instructions are not the main points of the present embodiment, the description thereof will be omitted.

  The factory terminal 3 receives a selection input by a person in charge at the repair shop, and transmits selection input data to the center server 5 (step S155). The repair factory interface unit 51 of the center server 5 receives the selection input data from the factory terminal 3 (step S157) and confirms the selection instruction content. Here, since the A non-life insurance button or the B non-life insurance button is clicked, the accident DB 55 (FIG. 4) is searched using the non-life insurance ID of the selected non-life insurance and the user ID of the repair shop, and the data of the accident cases registered within a predetermined period. To extract. Then, the case list page data corresponding to the selected non-life insurance is generated and transmitted to the factory terminal 3 (step S159). The factory terminal 3 receives the case list page data from the center server 5 and displays it on the display device (step S161).

  For example, a case list page as shown in FIG. 19 is displayed. In the example of FIG. 19, a case number table including a registration number display field (with a link), a reception number display field, a customer name display field, an accident date display field, a registration date display field, an update date display field, a registration button, and a menu page A menu button for returning to the page, a logout button for logging out, a case creation button, and a return button for returning to the previous page are included. The person in charge of the repair shop can refer to the information registered for the accident case by clicking the registration number. For example, when the registration number on the first line in FIG. 19 is clicked, a case information page as shown in FIG. 20 is displayed. Although the configuration is slightly different, the same contents as in FIG. 12 can be referred to. The person in charge of the repair shop can confirm again the image data and the like transmitted in the following processing on this page, and can instruct correction if correction is necessary. Note that the menu button, logout button, and return button are not the main points of the present embodiment and will not be described further. The project creation button is for the repair shop to voluntarily register image data, etc., for accidents that are not registered by the insurance company, and is basically the same as the image / estimate registration process described below. Therefore, description of only this is omitted. That is, here, the registration button is clicked for any accident case.

  The factory terminal 3 receives a selection input by a person in charge at the repair shop, and transmits selection input data to the center server 5 (step S163). The repair factory interface unit 51 of the center server 5 receives the selection input data from the factory terminal 3 (step S165) and confirms the content of the selection instruction. Here, as described above, it can be seen that the image / estimate registration button was clicked for a specific accident case. Then, the accident case ID (reception number or the like) included in the selected input data is specified, the accident DB 55 (FIG. 4) is searched using the accident case ID, and the registered accident case data is read (step S167). . Further, the directory data registered in the registered user DB 57 (FIG. 2) is read out. Then, the accident case data and directory data and the image processing program prepared in advance are transmitted to the factory terminal 3 (step S169). The factory terminal 3 receives accident case data, directory data, and an image processing program from the center server 5 (step S171). More specifically, it is assumed that the image processing program is transmitted first, and the accident case data and directory data are transmitted later.

  Similar to the terminal authentication program, the image processing program is a program that is transmitted to the terminal device in association with a specific Web page (URL or site) and executed on the terminal device, such as a Java applet or ActiveX control. is there. The image processing program is also set to send the processing result to a specific URL (or IP address). Although execution may be restricted depending on the settings of the Web browser on the terminal device side, etc., if the user of the terminal device explicitly or implicitly gives permission, execution is automatically started. The In the case of ActiveX control, installation is also performed automatically, and once downloaded, only activation may be performed without downloading again. When the reception of the image processing program ends, the factory terminal 3 activates the image processing program and executes processing (step S173).

  Here, a functional block diagram of a part related to the present embodiment of the factory terminal 3 is shown in FIG. The factory terminal 3 includes a normal web browser 30, an ID file 32 stored in a predetermined directory, a terminal authentication program 31 that performs authenticity confirmation processing of the ID file 32, and is photographed at a repair factory and is predetermined. One or a plurality of image files 34 stored in the directory, one or a plurality of estimate files 35 generated by other application programs, the image file 34 and the estimate file 35 are fetched, and a temporary file 36 is obtained. And an image processing program 33 that performs processing of image data and the like while being used. Note that the terminal authentication program 31 and the image processing program 33 are installed first, and are automatically activated when an activation instruction is transmitted from the center server 5 corresponding to a specific Web page. In some cases, the image may be downloaded every time an image / estimate registration is instructed. Therefore, the factory terminal 3 is configured to retain functions as shown in FIG. 21 when necessary.

  The image processing program 33 includes an image processing unit 331, a data transmission / reception unit 332, and a file management unit 333. The image processing unit 331 includes a rotation processing unit 3311, a contrast processing unit 3312, a resolution conversion unit 3313 for adjusting the size of the image file to a predetermined size (that is, changing the resolution of the image), an interface unit 3314, and a comment input process Part 3315. The data transmission / reception unit 332 receives accident case data and the like from the center server 5 and transmits image data and the like encrypted to the center server 5 using SSL. A site confirmation unit 3321 is included so that activation is not instructed and data is not transmitted / received to / from other sites (or computers). The file management unit 333 manages the temporary file 36 and reads the estimate file 35. Depending on the setting, the file management unit 333 deletes the image file that is the source of the image data instructed to be transmitted to the center server 5. Processing is also performed.

  When the image processing program 33 is activated, a screen as shown in FIG. 22 is displayed. In the example of FIG. 22, accident information (acceptance number, sender name, customer name, accident date, model, model designation number, vehicle owner, registration number, contract person, securities number, color code received as accident case data) Accident information display input unit 220 for displaying a classification classification number and a vehicle user), an image selection unit 221 for selecting an image file to be transmitted, and an estimate for attaching an estimate to be transmitted An attachment unit 222, a registration button 2212, and a clear button 2213 for clearing input contents are included. The image selection unit 221 includes an image folder display input field 2202 from which an image file is read based on the received directory data, a reference button 2203 for instructing to change the image file read source directory, and an image file read-out. An image list 2220 for listing image files existing in the original directory, and buttons 2204a and 2204b for scrolling the image list 2220 are included. In the image list 2220, one item is provided for each image file stored in the directory indicated in the image folder display input field 2202, and each item has a check box 2205 for selecting an image file to be transmitted. A file name display field 2206, an image thumbnail display field 2207, an image rotation instruction button 2208, a comment input field 2209, and an order change instruction bar 2214. The estimate attachment unit 222 includes a file name display input field 2210 and a reference button 2211 for designating an estimate file for each estimate.

  The interface unit 3314 of the image processing unit 331 in the image processing program 33 displays as shown in FIG. The accident information display input unit 220 displays the accident case data received by the data transmission / reception unit 332. In the image folder display input field 2202, the directory data received by the data transmission / reception unit 332 is displayed. Note that when the reference button 2203 is clicked, a file reference function of the operating system (OS) is called. Further, the image file 34 is read from the directory specified based on the directory data, and each item of the image list 2220 is generated. That is, for each item, the image file name is displayed in the file name display field 2206 and the image thumbnail is displayed in the image thumbnail display field 2207. The interface unit 3314 detects dragging of the order change instruction bar 2214 and changes the order of the image items in the image list 2220. The estimate attachment unit 222 receives and displays the input of a file name for each estimate. When the reference button 2211 is clicked, the OS file reference function is called.

  A comment input processing unit 3315 of the image processing unit 331 receives data input by the user in the comment input field 2209 and stores the data in association with the image file name. When the image rotation instruction button 2208 is clicked, the rotation processing unit 3311 of the image processing unit 331 in the image processing program 33 performs a process of rotating the image 90 ° to the left, for example. The contrast processing unit 3312 sets an appropriate contrast using, for example, an algorithm of histogram conversion (expansion and flattening), and performs processing for adding clarity to the image. For details, see for example <URL: http://ipr20.cs.ehime-u.ac.jp/column/gazo_syori/chapter2.html>. Further, the resolution conversion unit 3313 adjusts the size of the image to a predetermined size using, for example, a bi-cubic convolution. The bicubic method is one of image interpolation methods used when enlarging or reducing an image. The bicubic method specifies a density value of 16 pixels around a pixel of an image before enlargement or reduction, and a cubic function. Interpolate using. Specifically, the equation sin (πx) / πx is approximated by a third-order term by Taylor expansion and used as an interpolation equation. Thereby, highly accurate interpolation can be performed. In addition, other interpolation methods (for example, ““ CG Course for Poor People CG Knowledge Edition ”, [online], [2003] September 29 search], Internet <URL: http://tt.sakura.ne.jp/~hiropon/lecture/trans.html> ”)) may be used. The contrast processing unit 3312 and the resolution conversion unit 3313 perform processing after the registration button 2212 is clicked, and store the processed data in the temporary file 36.

  For example, when the image thumbnail display field 2207 is clicked, a screen as shown in FIG. 23 is displayed. FIG. 23 includes an image display field 2301, a back button 2302, and an image information display unit (file name, resolution, file size). The interface unit 3314 of the image processing unit 331 displays a screen as shown in FIG. The image is enlarged and displayed on the screen as shown in FIG. Note that before the screen shown in FIG. 23 is displayed, contrast adjustment processing by the contrast processing unit 3312 and resolution conversion processing by the resolution conversion unit 3313 may be performed.

  The user performs correction input if necessary in the input field of the accident information display input unit 220. If necessary, correction input is performed in the image folder display input field 2202. Further, the check box 2205 is checked corresponding to the image file to be transmitted in the image list 2220, and the image is rotated by the image rotation instruction button 2208 if necessary. Further, if necessary, text is input in the comment input field 2209. Furthermore, when changing the order of the image files, the order change instruction bar 2214 is dragged to change the order. When displaying an image file that is not displayed, the button 2204a or 2204b is clicked to change the display. Further, an estimate file name to be transmitted is input to the estimate file name display input field 2210 of the estimate attachment unit 222.

  When necessary data is input and selected, a registration button 2212 is clicked. Then, as described above, the contrast processing unit 3312 performs contrast adjustment processing on the image file whose check box 2205 is checked, and the resolution conversion unit 3313 performs resolution conversion processing. Store in the temporary file 36. At this time, the contrast processing unit 3312 and the resolution conversion unit 3313 perform processing in the order arranged in the image list 2220 of the image selection unit 221, and the file management unit 333 generates data on the order of the image files. The temporary file 36 is stored. The text data input in the comment input field 2209 is stored in the temporary file 36 in association with the image file name. Further, the file management unit 333 reads the estimate file designated by the estimate attachment unit 222. The data transmission / reception unit 332 confirms that the connection destination site is the center server 5 in the site confirmation unit 3321, and then stores the data of the temporary file 36, the estimate file, and the directory data (in the image folder display input field 2202). The input directory name data) is transmitted to the center server 5 (FIG. 17: step S175). At this time, encryption is performed according to SSL. When the data transmission / reception unit 332 confirms the completion of transmission, the file management unit 333 deletes the temporary file 36 and the image file selected to be transmitted by the check box 2205. Note that all the image files in the directory specified in the image folder display input field 2202 may be deleted. Also, the image processing program 33 is terminated. Note that data check may be performed by the data transmission / reception unit 332 before transmission, for example. For example, if no image file is designated, there is a problem, so that a warning may be displayed without performing the transmission process. Further, the upload status of transmission data may be displayed.

  The repair factory interface unit 51 of the center server 5 receives the data of the temporary file 36, the data of the estimate file, and the directory data as input data to the image processing program 33 from the image processing program 33 of the factory terminal 3. Once stored in a storage device such as a main memory (step S177). Then, the repair shop interface unit 51 performs a data check on the received data (step S179). For example, check whether the file format is checked or inappropriate data that cannot be received is received. When the data check is performed in the image processing program 33, the data check in the center server 5 may be skipped. If a problem occurs after data check, the image processing program 33 may be requested to retransmit.

  If no problem is found by the data check, the received data is registered in the accident DB 55 and the registered user DB 57 (for directory data) (step S181). Then, Web page data including a registration end message is generated and transmitted to the factory terminal 3 (step S183). The factory terminal 3 receives the Web page data including the registration end message and displays it on the display device (step S185). You may make it return to a menu page after this. The processing of the center server 5 proceeds to the processing of FIG.

  FIG. 24 shows the processing of the mail processing server 13. When data such as an image file received from a repair factory is newly registered in the accident DB 55, the attached file generation unit 131 of the mail processing server 13 receives the ID of the repair factory and the ID of the insurance company that handles the accident case (transactions). The registered user DB 57 (FIG. 2) is searched with the non-life ID), and it is determined whether or not transfer to the image transmission / transfer destination is set. If it is set to transfer to the image transfer destination, an attached file generation process is performed, and the generated attached file group is stored in a storage device such as a main memory (step S187). In the attached file generation process, the accident case data including the image file data is placed on the accident case data or the image display size is adjusted so that the data is accurately printed on, for example, one or a plurality of A4 size paper. Generate a (Hyper Text Markup Language) file. Image files are also included in the attached file group. The file is not limited to the HTML file, and the file may be generated in a document file format of another word processor program. Then, the encryption processing unit 132 performs encryption processing related to the encryption / decryption password registered in the registered user DB 57 for the attached file group (step S189).

  Further, the mail generation / transmission unit 133 searches the registered user DB 57 with the ID of the repair factory and the ID of the insurance company that handles the accident case, and determines whether transmission to the incoming notification mail address is set. If the transmission to the incoming notification mail address is set to be enabled, a notification mail indicating that the accident case data such as a new image file has been registered in the accident DB 55 is generated, and the registered incoming notification mail It is transmitted to the address (the registered mail address of the person in charge of the agreement) (step S191). In this case, the e-mail is sent to the e-mail address of the person in charge of the agreement. May be transmitted to a receiving address provided for each area in charge). The same applies hereinafter. Further, when the attached file group is generated in step S187, an e-mail attached with the encrypted attached file group is generated, and the registered e-mail address (e-mail address of the registered contract person in charge) It transmits to address (step S193). At that time, the domain checking unit 1331 of the mail generation / transmission unit 133 determines whether the domain part of the transmission destination mail address is a domain name registered corresponding to the insurance company of the transmission destination in the registered user DB 57 (FIG. 3). To check. If the domain part of the destination email address is different from the domain name of the destination insurance company registered in the registered user DB 57 (FIG. 3), the email Do not allow transmission. When the domain part of the destination mail address is the same as the domain name of the destination insurance company registered in the registered user DB 57 (FIG. 3), the mail transmission is permitted. The mail is transmitted to the mail server 9 managing the destination mail address, and stored in the mail box 91.

  The mailer of the insurance company terminal 7 receives the mail transmitted from at least one of step S191 and step S193 from the mail server 9, and displays it on the display device (step S195). In the case of the notification mail, the person in charge of the agreement of the insurance company knows that the image data or the like has been newly registered, so that the center server 5 may be accessed. When an email attached with an attached file including an image file is received, the attached file is stored in a desired directory in accordance with an instruction from an insurance company agreement manager (step S197). Then, encryption / decryption processing corresponding to the encryption processing in step S189 is performed (step S199). For example, a password registered in the registered user DB 57 (FIG. 2) is used. You may make it use the encryption technique which does not require a password. Then, the attached file is displayed on the display device using an application program adapted to the file format of the attached file (step S201). For example, when an attached file is composed of a combination of an HTML file and an image file, it is displayed by a Web browser.

  For example, a screen as shown in FIG. 25 is displayed. The contents of the data included in FIG. 25 are the same as those in FIGS. 12 and 20, and only the screen configuration is different. This is because the data arrangement and the image display size are adapted for printing in, for example, A4 size as described above. In this example, only the first page is shown, but since there are a large number of image files as a whole, it has a three-page configuration. However, the page configuration is arbitrary.

  By performing such processing, it is not necessary to install an executable program in advance in the factory terminal 3 of the repair shop, so that the influence on the computer system in the repair shop can be minimized. Therefore, the operation cost can be suppressed. Since ActiveX or Java technology is used, it is easy to upgrade the terminal authentication program and the image processing program. Furthermore, cost reduction is achieved because no certificate issued by the certification authority is used, but since the terminal authentication is performed using the terminal authentication program, the security level does not decrease. In addition, since terminal authentication is performed using a terminal authentication program, a problem does not easily occur even if the password expiration date is set relatively long for a repair shop where the frequency of use of the system is low. In addition, access from the insurance company terminal 7 is also restricted, and when sending emails, not only encryption but also email destinations are restricted, thus further preventing data leakage Can do.

  As shown in FIG. 26, in the computer according to the present embodiment, the memory 201, the CPU 203, the hard disk drive (HDD) 205, the display control unit 207 connected to the display device 209, and the drive for the removable disk 211. A device 213, an input device 215, and a communication control unit 217 for connecting to a network are connected by a bus 219. Application programs including an operating system (OS) and a Web browser are stored in the HDD 205, and are read from the HDD 205 to the memory 201 when executed by the CPU 203. If necessary, the CPU 203 controls the display control unit 207, the communication control unit 217, and the drive device 213 to perform necessary operations. Further, data in the middle of processing is stored in the memory 201, and if necessary, stored in the HDD 205. Such a computer is configured by the above-described hardware, such as the CPU 203 and the memory 201, and the OS and necessary application programs (including a terminal authentication program and an image processing program) in an organic manner. Implement various functions as described.

  Although one embodiment of the present invention has been described above, the present invention is not limited to this. For example, the center server 5 and the insurance company in-house LAN 11 are connected by a dedicated line, but may be connected by, for example, a VPN (Virtual Private Network). Although examples of non-life insurance companies are mainly shown, the scope of application is not limited to non-life insurance.

  As for the image processing program, a function for adding a figure to a part that should be particularly noted on the repair shop side may be added to the image data so as to call attention to the insurance company side.

  In the above example, the terminal authentication program executes confirmation in the terminal device that the ID file exists in a specific directory and its authenticity in the terminal device. -You may make it transmit to the server 5 encrypted, for example by SSL. In that case, the authentication processing unit 511 of the repair factory interface unit 51 of the center server 5 receives the ID file from the terminal authentication program, decrypts it, and is registered in the registered user DB 57 and the repair factory (or a specific terminal thereof). A comparison operation may be performed with the ID file corresponding to) to determine whether or not they match.

  Furthermore, the screen configuration of the screen example described above is merely an example, and other screen configurations including the same contents may be employed. Furthermore, it is possible to change the one-page configuration to a multi-page configuration. In the data tables of FIGS. 2 to 4, additional data may be registered, or some data may not be registered.

  In the processing flow described above, it is also possible to change the order of some steps or change the branching method so that the processing does not contradict.

1 Internet 3 Factory Terminal 5 Center Server 7 Insurance Company Terminal 9 Mail Server 11 Insurance Company Internal LAN
13 Mail Processing Server 51 Repair Factory Interface 53 Insurance Company Interface 55 Accident DB 57 Registered User DB
511 Authentication processing unit 531 Accident information registration browsing processing unit 532 Factory management unit 533 Domain inspection unit 131 Attached file generation unit 132 Encryption processing unit 133 Mail generation transmission unit 1331 Domain inspection unit 91 Mailbox

Claims (2)

An information processing method executed by a computer,
A step of transmitting to the user terminal a first program for checking the authenticity of a specific file stored in advance in the user terminal when an access to a specific URL related to the computer is received from the user terminal; ,
When a signal indicating that authenticity has been confirmed by the authenticity check is received from the first program of the user terminal, subsequent access is permitted, and a signal indicating that authenticity has not been confirmed Rejecting subsequent access when received from the first program of the user terminal;
A second program for performing image registration and image specifying data for specifying at least an item for which image data is registered when an image data registration request is received from the user terminal after access is permitted A second program transmission step for transmitting to the user terminal;
The second program of the user terminal includes the case identification data, image file data in which the resolution is adjusted to a specific resolution and the order is defined, and arbitrary data in which a correspondence relationship between the image files is defined. When receiving from the step of storing in the matter data storage unit,
Including
The first and second programs are activated in the user terminal only in cooperation with a specific website related to the computer,
The second program is
Receiving the case identification data transmitted by the computer;
Prompts for selection of image files stored in a specific directory of a specific drive of the user terminal, enables ordering of the selected image files, adjusts the resolution of the selected image file to a specific resolution; The input of arbitrary data corresponding to the selected image file is enabled, and at least the selected image file and the arbitrary data are encrypted and transmitted to a specific address in association with the matter specifying data,
An information processing method comprising: deleting at least the selected image file and the arbitrary data after transmitting the selected image file and the arbitrary data. An information processing method executed by a computer,
A step of transmitting to the user terminal a first program for checking the authenticity of a specific file stored in advance in the user terminal when an access to a specific URL related to the computer is received from the user terminal; ,
When a signal indicating that authenticity has been confirmed by the authenticity check is received from the first program of the user terminal, subsequent access is permitted, and a signal indicating that authenticity has not been confirmed Rejecting subsequent access when received from the first program of the user terminal;
When an image registration request is received from the user terminal after the access is permitted, a non-life insurance selection page data for selecting a non-life insurance company that deals with a matter for which an image is to be registered is generated and transmitted to the user terminal And steps to
When the designation of the non-life insurance company is received from the user terminal, the case data of the case handled by the non-life insurance company according to the designation from the case data storage unit that stores the case data related to the case handled by the non-life insurance company for each case Identifying steps,
Generating page data for selecting a case for registering image data from a case handled by the specified non-life insurance company, including at least a part of the specified case data, and transmitting the page data to the user terminal When,
When the case specification is received from the user terminal, the case data for the case related to the specification is specified from the case data storage unit, and the case specification for specifying the case included in the specified case data is specified. A second program transmission step of transmitting data and a second program for image registration to the user terminal;
The second program of the user terminal includes the case identification data, image file data in which the resolution is adjusted to a specific resolution and the order is defined, and arbitrary data in which a correspondence relationship between the image files is defined. When receiving from, the step which stores in the said matter data storage part,
Including
The first and second programs are activated in the user terminal only in cooperation with a specific website related to the computer,
The second program is
Receiving the case identification data transmitted by the computer;
Prompts for selection of image files stored in a specific directory of a specific drive of the user terminal, enables ordering of the selected image files, adjusts the resolution of the selected image file to a specific resolution; Arbitrary data corresponding to the selected image file can be input, and at least the selected image file and the arbitrary data are encrypted and transmitted to a specific address in association with the case specifying data, and the user terminal Sending data from a specific directory of a specific drive to the computer,
The computer holds the received data of the specific directory of the specific drive of the user terminal, and further transmits the data of the specific directory of the specific drive of the user terminal at the time of the next case specific data transmission. 2. An information processing method characterized by transmitting to two programs.

Images