Risk monitoring apparatus, risk monitoring system, and risk monitoring method

A risk monitoring system is formed of a client terminal, a risk management apparatus, and a security device. A risk calculation portion in the risk management apparatus calculates the vulnerability of each room inside the workplace quantitatively in terms of three viewpoints: individuals, assets, and space, and calculates a risk value of an internal crime in each room in real time by multiplying the vulnerability by the internal crime probability and the asset value. A risk analysis portion analyzes a risk state on the basis of the risk value thus calculated and the analysis result is displayed on a display portion of the client terminal. It is thus possible to understand a risk situation of an internal crime against assets to protect in real time for enabling an action to be taken appropriately according to the situation.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to a monitoring apparatus, a monitoring system, and a monitoring method for dynamically monitoring a risk of an internal crime inside a workplace, such as a company.

2. Background Art

In places such as companies, an internal crime by an employee often raises a problem. The internal crime is defined as an act of stealing assets inside a workplace, such as money, equipment, commodities, and information, by an employee who has authorized access to the workplace. According to penal modi operandi of thief, the internal crime is classified into an employee theft and a workplace theft. The employee theft is an act of stealing money and goods of the employer by an employee in a store. The workplace theft is an act of stealing money and goods from a workplace by an employee of a company. The employee theft and the workplace theft are referred to collectively as “crime targeting workplace”. According to the National Police Agency in Japan, the number of internal crime cases (crimes targeting workplace) has more than doubled to 2251 in 2005 from 1008 in 1998.

Under these circumstances, workplaces such as companies are now constructing a security system by introducing various types of security devices to protect the assets, such as money and equipment, against an internal crime. A risk management for taking an action appropriately by assessing a risk that can cause a loss of assets is now put into operation. In the risk management system in the related art, however, information about a risk is inputted manually. This makes it impossible to understand the state of a risk in real time. Accordingly, in the event that a crucial risk that can lead to an internal crime is occurring, an action against the risk is taken too late and assets will be stolen.

JP-A-2006-92312 describes a device configured to find out a crime probability in a desired area with ease and high accuracy by computing a crime probability on the basis of a value, which is found by dividing a distance to the nearest station by the number of workplaces in a specific area, and another value, which is found by dividing the population by the number of employees, and displaying the crime probability thus computed.

With the device described in this reference, it is easy to understand a static risk under a particular condition. However, because the device is not configured so as to monitor the situation of a risk that changes from moment to moment in real time, there is a problem that a risk of an internal crime corresponding to a change in the environment cannot be determined dynamically.

JP-A-2006-134242 describes a system configured to provide various services, such as notifying a lost article, by reading information of RFIC tags attached to articles or individuals using a tag reader and determining the situation of articles or the relation between the articles and individuals on the basis of the information thus read. This reference, however, fails to disclose the use of this system for dynamically monitoring a risk of an internal crime inside a workplace to calculate the risk quantitatively.

As has been described, there is no system in the related art that is capable of dynamically monitoring a risk of an internal crime inside a workplace to enable an action to be taken appropriately.

SUMMARY OF THE INVENTION

An object of the invention is to provide a risk monitoring device, a risk monitoring system, and a risk monitoring method that make it possible to understand a risk situation of an internal crime against the assets to protect in real time for enabling an action to be taken appropriately according to the situation.

A risk monitoring apparatus according to an aspect of the invention is a risk monitoring apparatus connected to a security device for monitoring a risk inside a workplace, including: a first monitor portion that monitors an asset in a specific place inside the workplace; a second monitor portion that monitors an individual inside the workplace; an analysis portion that analyzes a risk state in the specific place on the basis of information about the asset being monitored by the first monitor portion and information about the individual being monitored by the second monitor portion; and an output portion that outputs an analysis result by the analysis portion.

A condition for the stealing to happen in a given place inside the workplace is the presence of an asset at this place. In the absence of the asset, there is no risk of an internal crime without the trouble of considering other factors. In the presence of the asset, the presence of an individual at this place is a next concern. When there is no individual even in the presence of the asset, there is no risk of an internal crime. Hence, in order to understand a risk of an internal crime, at least the monitor result of asset and the monitor result of individual are necessary. In the invention, a risk at a specific place inside the workplace is analyzed on the basis of the monitor result of asset and the monitor result of individual and then outputted. It is thus possible to understand a risk situation of an internal crime against the assets to protect in real time, which enables an action to be taken appropriately according to the situation.

In a preferred embodiment of the invention, the risk monitoring apparatus further includes a first calculation portion that calculates a vulnerability of the individual being monitored by the second monitor portion quantitatively on the basis of identification information of the individual, and the analysis portion analyzes the risk state on the basis of the vulnerability of the individual calculated in the first calculation portion. According to this configuration, because the vulnerability of individual is calculated quantitatively, it is possible to understand a risk of an internal crime accurately.

In another preferred embodiment of the invention, the risk monitoring apparatus further includes a second calculation portion that calculates a vulnerability of the asset being monitored by the first monitor portion and a vulnerability of a space where the asset is present quantitatively on the basis of information about the asset; and a third calculation portion that calculates a comprehensive vulnerability quantitatively on the basis of the vulnerability of the individual calculated in the first calculation portion, the vulnerability of the asset calculated in the second calculation portion, and the vulnerability of the space calculated in the second calculation portion, wherein the analysis portion analyzes the risk state on the basis of the comprehensive vulnerability calculated in the third calculation portion. According to this configuration, in addition to the vulnerability of individual, the vulnerability of asset and the vulnerability of space are calculated quantitatively, and the comprehensive vulnerability is calculated quantitatively from these vulnerabilities. It is thus possible to understand a risk of an internal crime more accurately.

In still another preferred embodiment, the risk monitoring apparatus further includes: a fourth calculation portion that calculates a probable maximum loss (PML) through computation of an equation:
PML=N×F×A
where F is a value of the comprehensive vulnerability, A is an asset value, and N is a probability of an internal crime by an individual inside the workplace given by N=k·X, where k is a constant and X is the number of employees in the workplace. According to this configuration, because PML, which is the final risk value, is calculated quantitatively from the comprehensive vulnerability, the asset value, and the internal crime probability, it is possible to understand a risk of an internal crime further more accurately.

In the invention, by further providing a storage portion that stores plural steps of scores pre-set for attributes of individuals and measurement results of a specific behavior of the individuals, and plural steps of levels pre-set according to total values of the scores, the first calculation portion becomes able to calculate the vulnerability of the individual quantitatively on the basis of the scores and the levels stored in the storage portion.

Also, in the invention, by further providing a storage portion that stores plural steps of levels pre-set for respective assessment items relating to an operation of the asset, and plural steps of levels pre-set for respective assessment items relating to an action for the asset, the second calculation portion becomes able to calculate the vulnerability of the asset quantitatively on the basis of the respective levels stored in the storage portion.

Further, in the invention, by further providing a storage portion that stores plural steps of levels pre-set for respective assessment items relating to a space of storage of the asset, and plural steps of levels pre-set for respective assessment items relating to a space of use of the asset, the second calculation portion becomes able to calculate the vulnerability of the space quantitatively on the basis of the respective levels stored in the storage portion.

In addition, a risk monitoring system according to another aspect of the invention includes the risk monitoring apparatus described above, and a security device connected to the risk monitoring apparatus.

Further, a risk monitoring method according to still another aspect of the invention is a risk monitoring method that uses the risk monitoring apparatus described above and includes the followings:

(1) monitoring the asset in the specific place inside the workplace with the first monitor portion;

(2) monitoring the individual inside the workplace with the second monitor portion;

(3) analyzing the risk state in the specific place on the basis of the information about the asset being monitored by the first monitor portion and the information about the individual being monitored by the second monitor portion in the analysis portion; and

(4) outputting the analysis result in the analysis portion by the output portion.

According to the invention, because a risk situation of an internal crime against the assets to protect can be understood in real time, it is possible to take an action appropriately according to the situation.

DETAILED DESCRIPTION OF THE INVENTION

FIG. 1is a view showing the configuration of a risk monitoring system100according to one embodiment of the invention. The risk monitoring system100is operated in each workplace to protect the assets, such as money, equipment, commodities, and information, owned by a workplace, such as a company, against an internal crime by an employee. It goes without saying that the assets are at risk of stealing not only by an internal crime but also by an external crime, and in practice, risk monitoring on an external crime is also performed along risk monitoring on an internal crime described below. However, because the former is not directly related to the invention, descriptions thereof are omitted herein.

The risk monitoring system100is formed of a client terminal1, a risk management apparatus2, and a security device3. The client terminal1and the risk management apparatus2together form a risk monitoring apparatus.

The client terminal1is formed of, for example, a personal computer, and installed in a management office inside the workplace. The client terminal1is electrically connected to the risk management apparatus2. A control portion11is formed of a CPU, a memory, and so forth. A display portion12is formed of a display, such as a CRT or an LCD. An operation portion13is formed of a mouse and a keyboard. A communication portion14is formed of a modem and a known interface circuit, and so forth. A read and write portion15is formed of a known disc drive or card reader that reads and writes information in and from an information recording medium, such as a magnetic disc, an optical disc, and a memory card. A storage portion16is formed of a memory and a hard disc. The client terminal1forms one embodiment of an output portion of the invention.

The risk management apparatus2is formed of a server and installed in the management office or the like inside the workplace. Both the client terminal1and the security device3are electrically connected to the risk management apparatus2. Only one risk management apparatus2is shown inFIG. 1. However, there is a case where more than one risk management apparatus2is provided in a one-to-one correspondence with respective devices included in the security device3. A control portion21, a display portion22, an operation portion23, a communication portion24, and a read and write portion25are the same as the control portion11, the display portion12, the operation portion13, the communication portion14, and the read and write portion15, respectively, in the client terminal1described above. The risk management apparatus2forms one embodiment of a monitor portion, a calculation portion, and an analysis portion of the invention.

A storage portion26accommodates various types of databases (hereinafter, abbreviated as DBs)26athrough26f. Reference numeral26adenotes an entry and leave history DB in which information about the history of entry and leave is recorded. Reference numeral26bdenotes a personal information DB in which personal information (name, position, ID, and other attributes) of employees is recorded. Reference numeral26cdenotes an asset information DB in which information (the name of assets, places of storage, quantities, values, IDs, and so forth) about the assets, such as money and equipment, is recorded. Reference numeral26ddenotes a tag history DB in which information read from RFIC tags attached to individuals and assets is recorded as a history. Reference numeral26edenotes a risk calculation parameter DB in which parameters necessary to calculate a risk are recorded. Reference numeral26fdenotes a risk calculation result history DB in which the results of risk calculation are recorded as a history. Although programs to calculate and analyze a risk and various types of management programs are pre-installed in the storage portion26, these programs are omitted inFIG. 1for ease of illustration. The storage portion26forms one embodiment of a storage portion of the invention.

Reference numeral27denotes a risk calculation portion, and calculates a risk quantitatively by reading out necessary information from the storage portion26. Reference numeral28is a risk analysis portion and analyzes a risk state on the basis of a calculation result in the risk calculation portion27. The calculation and analysis of a risk will be described in detail below.

The security device3includes an entry and leave management apparatus4and a location management apparatus5. Besides these pieces of apparatus, a camera monitoring apparatus7is provided when the necessity arises. Further, a personal identification apparatus and an alarming and reporting device may be provided additionally.

The entry and leave management apparatus4includes a controller41, a card reader42, and an electric lock43. The card reader42is an apparatus installed at the entrance of each room to which access should be restricted to read an ID recorded in an IC card owned by an individual. The electric lock43locks and unlocks the room door. The controller41checks the ID read by the card reader42against IDs assigned to individuals who have authorized access to the room and acquired from the personal information DB26bin the risk management apparatus2to determine whether the two IDs match. It controls the electric lock43on the basis of the determination result so as to allow or inhibit the entry and leave at the door. The processing result in the entry and leave management apparatus4is sent to the risk management apparatus2in each occasion and recorded in the entry and leave history DB26a.

The location management apparatus5includes a controller51and a tag reader52. The tag reader52is an apparatus that reads IDs recorded in RFIC tags (hereinafter, referred to simply as the tags)6attached to individuals P or assets A. The tag readers52are provided in many places including the rooms, the floors, the corridors and so forth inside the workplace, and read the IDs of individuals P or assets A present in any of these places by making wireless communications with the tags6. Also, each tag reader52is assigned with an ID corresponding to the places. Hence, when the tag reader52reads the ID of a given tag6, it sends the read tag ID together with its own ID to the risk management apparatus2via the controller51in each occasion. The risk management apparatus2records the information thus sent in the tag history DB26d. It is possible to manage the location of an individual P or an asset A on the basis of the ID of the tag6and the ID of the tag reader52that has read the ID of the tag6. The management of locations of assets using tags is described, for example, in JP-A-2005-202744 and JP-A-2005-275616.

FIG. 2is a flowchart detailing a basic operation of the risk monitoring system100described above.

In Step S1, conditions under which a risk is monitored are set in the client terminal1. For example, information to specify an asset or a place to be monitored is inputted with the use of the operation portion13and the conditions are set in the control portion11on the basis of this input information. Alternatively, information specifying the object to be monitored is registered in advance, so that the control portion11sets the monitor conditions automatically on the basis of the registered contents. The monitor conditions thus set are sent to the risk management apparatus2. It is also possible to set the monitor conditions in the risk management apparatus2.

In Step S2, the risk management apparatus2acquires security information in real time from the security device3under the monitor conditions that have been set. To be more concrete, information about the ID read by the card reader42, the matching result, and the situation of entry and leave is acquired as the security information of the entry and leave management apparatus4. Also, as the security information of the location management apparatus5, information about the ID of an individual P or an asset A read by the tag reader52and the ID of the tag reader52is acquired. The security information acquired from the entry and leave management apparatus4and the security information acquired from the location management apparatus5are stored into the entry and leave history DB26aand the tag history DB26d, respectively.

In Step S3, the risk calculation portion27in the risk management apparatus2calculates a vulnerability F. The term, “vulnerability”, referred to herein means a parameter indicating the degree of a risk that an asset at a specific location inside the workplace is stolen by an internal crime, and assessed from three factors: the vulnerability of individual (individuals who are highly likely to commit a crime), the vulnerability of asset (the ease of stealing in terms of management and operation), and the vulnerability of space (the circumstances that make it easy to commit a crime). A concrete method of calculating the vulnerability will be described in detail below.

In Step S4, the risk calculation portion27acquires the probability N of an internal crime from the risk calculation parameter DB26e. The probability N is a parameter that indicates the frequency of occurrences of an internal crime (theft) by an employee or the like inside the workplace. The value of N is found, for example, by the multiplication between a value, which is found by dividing the number of internal crime cases (crimes targeting workplace) occurred in the prefecture where the workplace belongs by a total number of employees in this prefecture, and the number of employees in the workplace. For instance, given that the number of annual internal crime cases in a given prefecture is 200 and a total number of employees in this prefecture is 500,000, then the internal crime probability N in a workplace having 1,000 employees is found as:
N=(200/500,000)×1,000=0.4 case/employee/year.
Hence, in this workplace, an internal crime would occur at an annual rate of 0.4 case. As the figure specifying the number of internal crime cases, the value disclosed by the Police Department that keeps the workplace under control may be adopted. When such a figure is not disclosed, the number of internal crime cases is assumed to be found as:
the number of non-intrusive theft cases×0.01
on the ground that internal crimes account for about 1% of non-intrusive thefts (thefts that accompany neither the act of vandalism nor the act of intrusion) (according to the report on the criminal statistics disclosed by the National Police Agency).

In Step S5, the risk calculation portion27acquires the asset value A in each room from the asset information DB26c. The asset value A is information about various assets, such as money, the equipment, the commodity, and the information, stored in each room expressed as an amount of money, such as three millions yen and ten millions yen.

In Step S6, the risk calculating portion27calculates a risk value PML (Probable Maximum Loss) on the basis of the vulnerability F, the internal crime probability N, the asset value A obtained in Steps S3through S5, respectively, in accordance with the following equation:
PML=internal crime probability (N)×vulnerability (F)×asset value (A)  (1).
The PML is the risk value that indicates the degree of the final risk that the asset in the room in question would be stolen. As can be understood from the equation above, the risk value PML is expressed as an amount of money. The risk value PML thus calculated is stored in the risk calculation result history DB26f.

In Step S7, the risk analysis portion28analyzes the risk state on the basis of the risk value PML obtained in Step S6. To be more concrete, it performs processing to classify the risk into 5-step levels and to analyze the cause of a rise of the risk. This processing will be described in detail below. The analysis result in the risk analysis portion28is stored in the risk calculation result history DB26fand also sent to the client terminal1via the communication portion24.

In Step S8, the client terminal1displays the risk state on the display portion12according to the analysis result sent from the risk management apparatus2. This display will be described in detail below.

In Step S9, the risk management apparatus2determines whether the monitoring is to be terminated. The monitoring is terminated through a specific manipulation on the operation portion13(or the operation portion23). When the operation to terminate the monitoring is performed (Step S9: YES), the processing is terminated. When the operation to terminate the monitoring is not performed (Step S9: NO), the flow proceeds to Step S10, in which whether a specific time t has elapsed or not is determined. The specific time t is a time interval in a case where the data is acquired periodically from the security device3in Step S2, and it is set to a value, for example, 30 seconds or one minute. The term, “real time”, referred to in the invention means a real time by taking this specific time t into account. In a case where the specific time t has not elapsed (Step S10: NO), the flow returns to Step S9. In a case where the specific time t has elapsed (Step S10: YES), the flow proceeds to Step S2to acquire the security information from the security device3again for the processing in Step S3and the following steps to be performed.

The method of calculating the vulnerability F in Step S3ofFIG. 2will now be described with reference toFIG. 3throughFIG. 10in accordance with a concrete example. As has been descried, the vulnerability F is determined by three factors including an individual, an asset, and a space.

Initially, the method of calculating the vulnerability of individual will be described.FIG. 3shows an example of an assessment table to assess the vulnerability of individual employed by a company or the like. Assessment items set herein are items relating to the attributes of an individual, such as the type of employment, authorization of asset handling, age, and the length of service, and items relating to the measurement results on specific activities, such as the frequency of use of the assets, the number of procedural mistakes, and the number of entry and leave errors. For each assessment item, 5-step vulnerability scores from 1 point to 5 points are set. Herein, the larger the score point, the higher the vulnerability becomes.

The number of procedural mistakes means, for example, the number of cases where an individual moved the asset by a route different from the predetermined route, the number of cases where an individual needed a time longer than the standard time when he moved the asset, and the number of cases where an individual failed to return the asset on time. These cases can be counted using the RFIC tags6attached to an asset A or an individual P. The number of entry and leave errors means, for example, the number of cases when the card read result in the entry and leave management apparatus4showed an error when an individual made an attempt to enter a room where he has no authorized access, and the number of cases where the card read result showed an error when an attempt by an individual who has authorized access to enter a room with another individual who has no authorized access, so-called tailgating, is detected. These cases can be counted on the basis of the information from the entry and leave management apparatus4.

The vulnerability of individual is classified into five ranks A through E depending on a total value found by adding up the points assigned to the respective assessment items in the table ofFIG. 3.FIG. 4shows an example of the rank table in such a case. Each rank is set with a coefficient that indicates the vulnerability quantitatively. Both the tables ofFIG. 3andFIG. 4are stored in the risk calculation parameter DB26einFIG. 1.

For example, according to the table ofFIG. 3, in the case of an employee whose type of employment is a full-time worker (1 point), who has the asset handling authorization as a user (4 points), who is in his thirties (4 points), whose length of service is 1 to 14 years (3 points), whose frequency of use of assets is 20 times or more (5 points), whose number of procedural mistakes is 1 to 2 (2 points), and whose number of entry and leave errors is 0 (1 point), a total of the scores is 20 points. The vulnerability level is therefore determined to be Rank B (=0.5) from the Table ofFIG. 4.

In this manner, the vulnerability level on the basis of a total of the points in the respective assessment items is determined for each employee. This vulnerability level is the parameter that indicates the vulnerability of individual for an employee in question.FIG. 5is an example of an individual basis table in which the vulnerability levels thus determined are correlated with the IDs (identification information) of the respective individuals. This table is stored in the personal information DB26bofFIG. 1.

The method of calculating the vulnerability of asset will now be described.FIG. 6shows an example of an assessment table to assess the vulnerability of asset. This table is stored in the risk calculation parameter DB26eofFIG. 1. Assessment items set herein are various items as to whether there is a procedure necessary when handling an asset, whether the asset is operated according to the procedure, whether the asset is stored in the safe, whether the key of the safe is handled strictly, whether the location of the asset can be identified, whether a movement error of the asset can be detected, and whether an action can be taken in the event of a loss of the asset. Herein, 5-step vulnerability levels are set for the respective assessment items. As with the case ofFIG. 4, the vulnerability levels are formed of ranks A through E and coefficients corresponding to the respective ranks. Herein, the larger the coefficient, the higher the vulnerability becomes.

In the case of the vulnerability of asset, the calculation method is different from that of the vulnerability of individual described above. Herein, after the vulnerability levels are determined for the respective assessment items in the table ofFIG. 6, the vulnerability of asset is found in accordance with a calculation algorithm as shown inFIG. 7. This computation is performed in the risk calculation portion27ofFIG. 1. InFIG. 7, circled numbers correspond to the numbers assigned to the assessment items ofFIG. 6. Also, the sign, “MAX”, indicates that the maximum value among plural vulnerability levels is adopted, and the sign, “AND”, indicates that the product of plural vulnerability levels is computed. The numerical values in parentheses indicate the numerical values of the vulnerability levels in a concrete example described below.

For example, referring to the items1and2in the table ofFIG. 6, in a case where there is a procedure necessary when handling the asset (level E=0.0625) but the asset is not operated in accordance with the procedure (level A=1.0), as is shown inFIG. 7, 1.0 is adopted as a parameter indicating the insufficiency of the procedure of the asset. Also, referring to the items3and4of this table, in a case where the asset is stored in something without the lock (level B=0.5) and the key of the safe is kept in the same space where the safe is present while the safe is locked (level C=0.25), as is shown inFIG. 7, 0.5 is adopted as a parameter indicating the insufficiency of the management of the asset. By finding the product of these two parameters (1.0×0.5), the value, 0.5, is calculated as a parameter indicating the vulnerability of operation. Also, referring to the items5,6, and7of this table, in a case where the location of the asset can be identified in a partial region (level C=0.25) but a movement error of the asset cannot be detected (level A=1.0) while an action can be taken within 20 minutes in the event of a loss of the asset (level C=0.25), as is shown inFIG. 7, the value, 0.0625, is calculated from the product as a parameter indicating the vulnerability of action. By finding the product of 0.5 indicating the vulnerability of operation and 0.0625 indicating the vulnerability of action, 0.03125 is calculated as the vulnerability of asset.

The method of calculating the vulnerability of space will now be described. Herein, the space is divided to a space of storage where the asset is stored and a space of use where the asset is used, and the vulnerability is found separately for each space. This is attributed to a difference in nature of crime to be found between the space of storage and the space of use. Hereinafter, assume that the space of storage is a space where access is restricted and the space of use is a space where access is not restricted and individuals are free to enter and leave.

FIG. 8is an example of an assessment table to assess the vulnerability of a space of storage. This table is stored in the risk calculation parameter DB26eofFIG. 1. Assessment items set herein are various items as to whether there are plural entrances, whether there is an access opening to the outside, whether the asset handling is viewable, whether a monitor camera is installed, whether an entry and leave management apparatus is operated, and whether an individual entering the room can be identified. Herein, 5-step vulnerability levels are set for the respective assessment items. As with the case ofFIG. 6, the vulnerability levels are formed of ranks A through E and coefficients corresponding to the respective ranks. Herein, the larger the coefficient, the higher the vulnerability becomes.

FIG. 9shows an example of an assessment table to assess the vulnerability of the space of use. This table is stored in the risk calculation parameter DB26eofFIG. 1. Assessment items set herein are various items as to whether fixtures are lost frequently, whether there is a rule to make a report upon occurrence of a problem, whether any quick action can be taken upon the occurrence of a problem, whether employees know the faces and names of the other employees, whether an individual without an ID is allowed to enter and leave, whether there is an access door to the outside, whether there is a door always open or a free-access door, whether there is an access opening to the outside, whether an individual around the asset can be identified, whether the asset handling is viewable, whether a monitor camera is installed, whether there is something available to hide the asset, and whether personal belongings can be brought in. Herein, 5-step vulnerability levels are set for the respective assessment items. As with the case ofFIG. 6, the vulnerability levels are formed of Ranks A through E and coefficients corresponding to the respective ranks. Herein, the larger the coefficient, the higher the vulnerability becomes.

In the case of the vulnerability of space, the calculation method is also different from that of the vulnerability of individual. Herein, after the vulnerability levels are determined for the respective assessment items in the tables ofFIG. 8andFIG. 9, the vulnerability is found for each of the space of storage and the space of use in accordance with a calculation algorithm as shown inFIG. 10. This computation is carried out in the risk calculation portion27ofFIG. 1. InFIG. 10, circled numbers correspond to the numbers assigned to the assessment items ofFIG. 8andFIG. 9. Also, as withFIG. 7, the sign, “MAX”, indicates that the maximum value among plural vulnerability levels is adopted, and the sign, “AND”, indicates that the product of plural vulnerability levels is computed. The numerical values in parentheses indicate the numerical values of the vulnerability levels in a concrete example described below.

For example, in a case where the vulnerability of the space of storage is to be found, with reference to the items1through6ofFIG. 8, when there are plural entrances (level A=1.0), there is no access opening to the outside (level E=0.06), the inside of the room is unviewable from the corridor (level D=0.125), the monitoring camera is installed but there is a blind spot that cannot be covered (level C=0.25), the entry and leave management apparatus is operating (level E=0.0625), and any individual with the ID is allowed to enter the room (level A=1.0), as is shown inFIG. 10, 0.015625 is calculated as the vulnerability of the space of storage.

In a case where the vulnerability of the space of use is to be found, with reference to the items7through10ofFIG. 9, when the fixtures are lost occasionally (level C=0.25), there is a rule to make a report upon the occurrence of a problem (level E=0.0625), a quick action is taken upon the occurrence of a problem (level E=0.0625), and the employees know the faces and the names of the other employees but do not know any further information (level C=0.25), as is shown inFIG. 10, 0.25 is calculated as a parameter indicating the vulnerability in terms of daily management. With reference to the items11through14ofFIG. 9, when an individual without an ID is allowed to enter and leave (level A=1.0), there is an access door to the outside (level A=1.0), there is a door always open or a free-access door (level A=1.0), and there is an access opening to the outside (level A=1.0), as is shown inFIG. 10, 1.0 is calculated as a parameter indicating the vulnerability in terms of access. Also, with reference to the items15through19of the table ofFIG. 9, when the attributes and the number of individuals around the asset can be acquired (level D=0.125), there is nothing that blocks the line of sight and the state of use of the asset is viewable (level A=1.0), the monitoring camera is installed but there is a blind spot that cannot be covered (level C=0.25), there is something available to hide the asset (level A=1.0), and personal belongings can be brought in (level A=1.0), as is shownFIG. 10, 1.0 is calculated as a parameter indicating the vulnerability in terms of the environment on the periphery of the asset. From the product of the three parameters thus calculated (0.25×1.0×1.0), that is, the vulnerability in terms of daily management, the vulnerability in terms of access, and the vulnerability in terms of the environment on the periphery of the asset, as is shown inFIG. 10, 0.25 is calculated as the vulnerability of the space of use.

The risk calculation portion27in the risk management apparatus2multiplies the respective values of the vulnerability of individual, the vulnerability of asset, and the vulnerability of space calculated in the manner described above to calculate the comprehensive vulnerability F quantitatively. In short, let Fh be the vulnerability of an individual around the asset, Fa be the vulnerability of the asset present in the space, and Fs is the vulnerability of the space where the asset is stored or used, the vulnerability F can be found in accordance with the following equation:
F=Fh×Fa×Fs(2).

The risk calculation portion27performs a computation in accordance with Equation (1) using the vulnerability F found in accordance with Equation (2), and the internal crime probability N and the asset value A described above to calculate PML (Probable Maximum Loss), which is the final risk value. As can be understood from the description above, the risk value PML indicates the risk that the asset will be stolen by an internal crime in a place (room) where the asset is stored or used as an amount of money.

Incidentally, of the internal crime probability N, the vulnerability F, and the asset value A, which are the factors that determine the risk value PML, N is a fixed value determined according to the number of employees in the workplace, and calculated as: N=k·X, where k is a constant and X is the number of employees in the workplace. On the contrary, F×A is a value that dynamically varies with the situation at a current point in time. For example, even in a case where the vulnerability of the room (space) is high, when the asset that has been stored in this room is now moved to another place and is no longer present in this room, A=0 from this point in time and the risk value PML=0. Also, even in a case where the asset value A is large, when there is no one in the room where the asset is placed, F=0 and the risk value PML=0 at this point in time. However, when an individual enters into the room, the risk value is no longer 0 from this point in time, and the risk value varies to a value corresponding to the vulnerability level of this individual. When a case where the vulnerability of this individual in the room is level D and a case where the vulnerability level of this individual is level B are compared, it is natural that a risk of the internal crime is higher in the latter case.

In the system ofFIG. 1, the location of an individual is identified by reading the ID of the tag6attached to this individual by the tag reader52, and the vulnerability level of this individual can be acquired by referring to the individual basis table (FIG. 5) in the personal information DB26baccording to the ID. Also, the location of the asset can be identified by reading the ID of the tag6attached to the asset by the tag reader52, and the type and the amount of the asset can be acquired by referring to the asset information DB26caccording to the ID. Accordingly, in this system, because the individual and the asset and the location thereof can be identified by exploiting the tags6attached to the individual and the asset, it is possible to dynamically monitor a risk of an internal crime by understanding the vulnerability F and the asset value A in real time. It is thus possible to take an action appropriately according to the situation.

A concrete example of the display in Step S8ofFIG. 2will now be described with reference toFIG. 11throughFIG. 17.

FIG. 11shows an example of a monitor screen12adisplayed on the display portion12of the client terminal1. The risk states in the rooms inside the workplace monitored by the risk management apparatus2are shown on the monitor screen12a. More specifically, risk information of each room in every floor of the building is displayed in real time on a risk information display portion30, and the current risk level among the 5-step risk levels (level 1 to level 5) is displayed on a risk level display portion36. The level 1 is a state where the risk is the lowest and the level 5 is a state where the risk is the highest. Reference numeral37denotes a history refer button to make a transition to a history display screen12b(FIG. 13) described below. The display program to display the foregoing information is pre-installed in the storage portion16.

In the risk information display portion30, reference numeral31is a floor layout chart, and marks A1through A5and B1through B4representing the assets33are displayed in the rooms where the assets are present. A1through A5represents the assets in the form of money, and B1through B4represent the assets in the form other than money, such as equipment and commodities. In a case where the asset is moved to another place, a movement track as is denoted by reference numeral34is displayed. As has been described, the tag6is attached to each asset33, and the location of the asset33is detected by the location management apparatus5. Hence, when the asset33is moved, it is possible to keep the track of such a movement by the risk management apparatus2. The movement track34is displayed as a movement route from the place detected earlier in a case where the asset33has been continuously detected in the moved place for a time period shorter than a specific time. In a case where the asset33has been detected in the moved place over the specific time, the movement track34is not displayed.

In the risk information display portion30, reference numeral32denotes a separate risk display portion that displays a risk level of each room, and the transition of the risk level of each room from two hours ago to the present is displayed thereon in the form of a bar graph35. The bar graph35is displayed in a color corresponding to the level of a risk, and a bar in a denser color indicates a higher risk level. The risk level display portion36described above displays the value of the currently highest risk level among the risk levels in all the places. BecauseFIG. 11is an example of a normal state where no abnormality occurs, the current risk levels of the respective rooms are all at “level 1” and “level 1” is displayed on the risk level display portion36.

The risk levels described above are determined by the processing in Step S7ofFIG. 2. More specifically, upon receipt of the risk value PML of each room calculated in accordance with Equation (1) above from the risk calculation portion27, the risk analysis portion28in the risk management apparatus2compares the risk value PML with the threshold values and classifies the risk value to any of level 1 through level 5. As has been described, because the risk value PML is expressed as an amount of money, four amounts, α, β, γ, and δ(α<β<γ<δ), are set in advance as the threshold values. The risk analysis portion28determines the level according to the amount of PML as follows:

in a case where 0≦PML<α, level 1;

in a case where α≦PML<β, level 2;

in a case where β≦PML<γ, level 3;

in a case where γ≦PML<δ, level 4; and

in a case where δ≦PML, level 5.

These level values are successively accumulated in the risk calculation result history DB26f. The client terminal1displays the current risk level (highest value) on the risk level display portion36ofFIG. 11according to the level values accumulated in the risk calculation result history DB26f, and at the same time, it displays the risk level of each room from two hours ago to the present on the separate risk display portions32in the form of the bar graphs35.

FIG. 12shows an example of the monitor screen12ain a case where an abnormality occurs. The abnormality herein is a state where an individual who has no authorized access (for example, a part-time employee at Rank A ofFIG. 4) enters a room where an asset A5(for example, three millions yen in cash) is placed in the first floor of the building No. 3, and as a result of a rise of the vulnerability of individual, the risk value PML is changed to level 5. In this case, the risk calculation portion27calculates the risk value PML of the room where the asset A5is present using the changed value of the vulnerability. Also, the risk analysis portion28determines the risk level of an internal crime in this room to level 5 on the basis of the risk value PML thus calculated according to the criteria described above.

This result is sent to the client terminal1. Accordingly, as the current risk level of the room (security room) where the asset A5is present, a bar in a color corresponding to level 5 as is indicated by a capital M is displayed on the separate risk display portion32for the first floor of the building No. 3 on the monitor room12a. Because the risk level of the room where the asset A5is present has changed to level 5, “level 5” is displayed on the risk level display portion36. Further, in the floor layout chart31, the room where the asset A5is present is displayed in a color corresponding to the risk level 5. It is thus possible to understand the risk level of the room obviously at a glance.

Meanwhile, the risk analysis portion28checks the cause of a rise of the risk level to level 5 and an action to take, and sends the result to the client terminal1. Accordingly, a message box45is displayed at the bottom of the monitor screen12a, in which the location where the risk is occurring, the cause of the occurrence of the risk, and an action to take are displayed. Hence, it is possible to take an action against the risk quickly and accurately by looking this display. The message box45is displayed when the risk reaches a specific level or higher (for example, level 4 or higher). However, it may be configured in such a manner that a message of some kind is displayed in a case where the risk is lower than the specific level.

FIG. 13shows an example of the history display screen12bdisplayed on the display portion12of the client terminal1. The history display screen12bis displayed when the history refer button37shown inFIG. 11andFIG. 12is clicked. The history of the risk in a specific period is displayed on the history display screen12baccording to the history recorded in the risk calculation result history DB26f. Reference numeral56denotes a search period input box to input a search period of the history and reference numeral57denotes a search button to execute the search. Reference numeral58denotes a history display portion, on which is displayed the transition of the risk level of each room during the period specified in the search period input box56in the form a bar graph. As with the bar graph35ofFIG. 11and related drawings, this bar graph is displayed in a color corresponding to the risk level. Because the search period is a particular day in the example ofFIG. 13, variances of the risk level of each room over 24 hours of this particular day are shown in the form of bar graphs. Reference numeral59denotes a search result display portion to display thereon the result of the history search in the form of a list. The risk level display portion36is the same as those shown inFIG. 11andFIG. 12, and the current risk level is displayed thereon as has been described (this level is not directly related to the display on the history display portion58). Reference numeral55denotes a monitor button and the screen returns to the monitor screen12aofFIG. 11and related drawings when this button is clicked.

FIG. 14shows an example of a display on the history display screen12bin a case where a search period over several days is specified. InFIG. 14, like portions are labeled with like reference numerals with respect toFIG. 13. In the example ofFIG. 14, the search period is six days and variances of the risk level of each room during this period are displayed in the form of bar graphs. Herein, one day is divided into suitable time zones, and the bar graph of each time zone is displayed in a color corresponding to the highest risk level during this time zone.

Alternatively, as another embodiment, it may be configured in such a manner that the scale of the period changes on the history display screen12bofFIG. 13when the time box of the history display portion58is clicked. For example, the scale may change cyclically from one hour to one day to one week to one month to three months on each click, so that the history corresponding to each period is displayed.

FIG. 15shows an example of a detailed history display screen12cshowing a detailed risk state at a given point in time in the past. The detailed history display screen12cis displayed, for example, by clicking a place in the bar graph display region corresponding to a point in time that the user wishes to be displayed in the history display portion58on the history display screen12bofFIG. 13. A point in time can be specified, for example, in every 10 minutes depending on the place to be clicked. The display content of the detailed history display screen12cis basically the same as the display content of the monitor screen12aofFIG. 11andFIG. 12, and the risk level at the specified point in time (including before and after the specified point in time) is displayed on the separate risk display portions32in the form of the bar graphs35. Reference numeral46denotes a point-in-time display portion indicating the point in time specified by the clicking. By displaying the detailed history display screen12cas described above, it is possible to understand a detailed risk state at an arbitrary point in time in the past.

Herein, it is configured in such a manner that the screen is switched to the detailed history display screen12cand the point in time is specified by clicking the bar graph display area on the history display screen12b. However, instead of this configuration, it may be configured in such a manner that an exclusive-use button for the detailed history display is provided on the history display screen12b, so that the detailed history display screen12cis displayed when this button is operated and the point in time is specified by inputting the point in time into a point-in-time input box on the detailed history display screen12c.

As has been described, according to the embodiment above, a risk of an internal crime in each room inside the workplace is calculated and analyzed on the basis of the monitor result of the assets and the monitor result of individuals in the risk management apparatus2, and the result of calculation and analysis is displayed on the display portion12of the client terminal1. Accordingly, it is possible to understand a risk situation of an internal crime against the assets to protect in real time, which enables an action to be taken appropriately according to the situation. In addition, because the risk is calculated as an amount of money, it is possible to understand the risk comparable to the value of the assets accurately.

In the embodiment above, because the risk state is analyzed using the vulnerability of individual calculated quantitatively, it is possible to understand a risk of an internal crime accurately. Further, by finding the vulnerability of asset and the vulnerability of space quantitatively in addition to the vulnerability of individual to calculate the comprehensive vulnerability F quantitatively from the three vulnerabilities of individual, assets, and space, it is possible to understand a risk of an internal crime more accurately. In addition, by calculating the final risk value PML using the vulnerability F, the asset value A, and the internal crime probability N to analyze the risk state on the basis of this risk value, it is possible to understand a risk of an internal crime further more accurately.

In the invention, various embodiments other than the embodiments described above can be adopted. For example, as is shown inFIG. 16, it may be configured in such a manner that the asset value (amount)49of an asset33is displayed on the monitor screen12awhen a mouse pointer48is placed on the mark representing the asset33. Alternatively, it may be configured in such a manner that the asset values49are displayed for all the assets33from the start without the need to operate the mouse pointer48. Further, it may be configured in such a manner that when money and an asset other than money are present in the same place, the asset value of each and a total of the asset values are displayed.

InFIG. 11throughFIG. 16, it is configured in such a manner that only the value of the highest level among the risk levels in all the floors is displayed on the risk level display portion36. However, as is shown inFIG. 17, it may be configured in such a manner that the highest value of the risk level in each floor is displayed floor by floor on the risk level display portion36. Although it is not shown in the drawing, as still another embodiment, it may be configured in such a manner that level 1 through level 5 are constantly displayed on the risk level display portion36and the corresponding level alone is displayed at the higher luminance, in an enlarged form, or by means of blinking.

Further, inFIG. 1, the client terminal1and the risk management apparatus2are configured to be isolated from each other. However, the client terminal1may be integrated into the risk management apparatus2, so that the screens as shown inFIG. 11throughFIG. 17are displayed on the display portion22of the risk management apparatus2.