To instantly specify a person who is operating a computer which relates to the occurrence of a specific event.

A server 30 is provided with; a fraud/abnormality detection part 32 which detects a fraud/abnormality event; a logical address specifying part 33 which specifies a logical address of a terminal device relating to the fraud/abnormality event; a fraud/abnormality kind specifying part 34 which specifies the kind of the fraud/abnormality event; a physical address specifying part 36a which specifies a physical address corresponding to the logical address; a monitoring camera specifying part 36b which specifies a monitoring camera for photographing the physical address; an instruction transmitting part 37 which transmits, to the monitoring camera, instructions for photographing the physical address and transmitting the image thus obtained to the server 30; an image reception part 38 which receives the image from the monitoring camera; and an image transmitting part 39 which transmits, to a monitor, the image thus received, the kind of the fraud/abnormality event and the physical address.