CN101379508A - Personal information leakage preventive device and method - Google Patents
Personal information leakage preventive device and method Download PDFInfo
- Publication number
- CN101379508A CN101379508A CNA2007800041207A CN200780004120A CN101379508A CN 101379508 A CN101379508 A CN 101379508A CN A2007800041207 A CNA2007800041207 A CN A2007800041207A CN 200780004120 A CN200780004120 A CN 200780004120A CN 101379508 A CN101379508 A CN 101379508A
- Authority
- CN
- China
- Prior art keywords
- content
- hyperlink
- agency
- acquisition request
- terminal equipment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
Conventional service providing systems personalized according to the user's personal information need to provide personal information. Therefore, there has been a problem that personal information might be leaked by service providers. A reliable proxy is installed between a user terminal and a service provider server to manage the personal information on the user. The proxy receives information necessary to create a content from the service provider server, creates a content reflecting the personal information from the information necessary to create the content, and transmits it to the user's terminal A countermeasure against estimation of personal information is taken for even a request of a user to acquire a sub-content and so forth.
Description
Technical field
[0001] the present invention relates to a kind of equipment and method that makes service (service) user can under the situation that will not pass to the ISP about the personal information of service-user, receive personalized service from the ISP.Service in the present context is meant the product information that provided by the ISP, Search Results and by described product information and Search Results are carried out the information that personalization (personalize) obtains.In addition, this personal information is meant the information that relates to the individual, and described information is the information that this individual does not want to reveal to other people usually.The example of personal information comprises name, address, date of birth and sex.
Personalized service is meant the service that is fit to (tailor) this individual according to the personal information that belongs to the individual consumer.The example of personalized service is to provide the information of Women's Wear about the reflection preference information for the women, described preference information is comprised in the personal information about this women, and be comprised in the personal information about this male sex for the male sex provides the information of Men's Wear about the reflection preference information, described preference information.
Background technology
[0002] exist some well-known service provider systems, described system comes to provide the commercial product that is complementary with user's request for the user according to user's personal information and preference information.Fig. 1 is the synoptic diagram that its example is shown.The user provides server (50) via the Internet (10) from subscriber terminal equipment (20) access services.
In those service provider systems, the ISP has personal information, such as the purchase history in a lot of occasions.In this case, the user may be subjected to leakage of personal information and the loss that brings.
[0003] use service method as user anonymity, that is, user identity can not be exposed, and at Japanese 2002-183092A, is disclosed in " System for Providing Personalized Service ".It is such method, and in the method, the agency makes the service-user anonymity by the mode that provides user identifier to hide user identity to the user, and service-user uses personalized service as anonymous.Yet, according to this technology, finish by service providing server owing to personalized, so service providing server can not provide the content of the embedding name that comprises the user, for example " hello, and Suzuki is Mr. Lang too ".In other words, in personalization, there is restriction.
What [0004] can expect is: in order to receive personalized service, user terminal or agency make service personalization so that personal information is not provided for the ISP.Yet, in this case, be necessary that testing personal information is not sent to service providing server by this personalized service message reveals, or the like.As a kind of method that is used to verify, what can expect is: be applied in " information flow analysis (information flowanalysis) " described in " non-patent literature 1 ".Yet, if this method is used by strictness, can produce defective: can have been narrowed down by the scope of the service of good authentication.
Patent documentation 1: Japanese 2002-183092 A " SYSTEM FOR PROVIDINGPERSONALIZED SERVICE "
Non-patent literature 1: holt is planted trees, Bai Genqing too, Type-based Information FlowAnalysis for a Low-level Language, the 20th volume, the 2nd phase, 2-21 page or leaf.
Summary of the invention
Problem to be solved by this invention
[0005] therefore, the purpose of this invention is to provide and a kind ofly can not provide under the situation of personal information the equipment, method etc. that use service based on the personal information such as individual preference to the ISP.According to prior art, when the user serves according to user's uses such as individual preference, be necessary that " directly " will offer the ISP about user's personal information (for example sex, age, address and cell phone number).All ISPs may not be the reliable ISPs of managing personal information fully.In other words, irrefragablely be: some service provider not fully managing personal information prevent its leakage.
[0006] as mentioned above, when personal information was provided for the ISP, for a certain reason, the personal information that the ISP collects may be revealed to other ISPs, and may be abused.For example, rubbish (spam) mail may be sent to the service-user that e-mail address is provided, if perhaps the user provides telephone number, then this user just may become " the victim of remittance swindle (billing fraud).In addition, when identify the user according to sex, age and address or the like be solitary old man, just may cause safety problem.
The means of dealing with problems
[0007] in order to solve those problems, will provide description now to means disclosed in this invention.
[claim 1]
Described in embodiments of the invention 1, claim 1 provides at following situation, wherein by the content of browser software program display do not comprise such as image and voice data other guide (hereinafter, be called as " sub-content ") do not comprise hyperlink yet, and claim 1 discloses at the employed user terminal of service providing server, agency and service-user and has set via network in the system connected to one another, a kind of system that stops leakage of personal information by following apparatus (a) to (e):
(a) be used for being sent to described agency's device by the content acquisition request that described subscriber terminal equipment will be used to obtain the content on the described service providing server;
(b) be used for receiving described content acquisition request and described content acquisition request being sent to the device of described service providing server by described agency;
(c) be used for will being sent to described agency's device with corresponding one or more content template of described content acquisition request and rule by described content providing server, described rule is used to select a content template and generate the content of reflection about user's personal information from described content template by using about the personal information of service-user;
(d) be used for utilizing about described user's personal information according to described rule and select a content template, generate reflection about the content of described user's personal information with described content is sent to the device of described subscriber terminal equipment from described content template by described agency; With
(e) be used for by described subscriber terminal equipment by using the device of the described content of browser software program display.
[0008] [claim 2]
Described as embodiments of the invention 2, claim 2 provides at following situation, the content of wherein said browser software program display comprises other sub-contents but does not comprise hyperlink, and claim 2 discloses a kind of system according to claim 1, when described subscriber terminal equipment passed through to use the described content of described browser software program display, described system also comprised following apparatus (a) to (g):
(a) being used in sub-content is the device that the sub-content acquisition request that will be used to obtain described sub-content by described subscriber terminal equipment under the necessary information is sent to described agency for showing described content;
(b) be used for receiving the device of described sub-content acquisition request by described agency;
(c) be used for determine showing for each content that by described agency the necessary sub-content acquisition request collection of content that generates from each content template and each each described sub-content acquisition request that will be included in predetermined sequence that described sub-content acquisition request concentrates when identical of concentrating in described sub-content acquisition request are sent to the device of described service providing server;
(d) be used for by described agency for each content determine to show the request collection of the necessary sub-content requests of content that generates from each content template and concentrate in described sub-content acquisition request each with predetermined sequence all sub-content acquisition request are sent to the device of described service providing server when inequality;
(e) be used for to be sent to described agency's device with the corresponding sub-content of all sub-content acquisition request that receive by described service providing server;
(f) be used for sub-content that receives by described proxies store and the device that the sub-content that subscriber terminal equipment described in the sub-content of being stored is asked is sent to described subscriber terminal equipment;
(g) be used for by described subscriber terminal equipment by using the device of the sub-content of described browser software program display.
[0009] [claim 3]
Described in embodiments of the invention 3, claim 3 provides at following situation, the shown content of wherein said browser software program comprises hyperlink, described network comprises one or more hyperlink server (hyperlinked server), and described subscriber terminal equipment comes displaying contents by using described browser software program, and claim 3 discloses a kind of according to claim 1 or 2 described systems, and described system also comprises following apparatus (a) to (g):
(a) be used for when receiving the operation of visit hyperlink from described user being sent to described agency's device by the hyperlink content acquisition request that described subscriber terminal equipment will be used to obtain the hyperlink content;
(b) be used for receiving from described subscriber terminal equipment the device of described hyperlink content acquisition request by described agency;
(c) be used for by described agency for each of the content that generates from each content template determine be comprised in content the corresponding hyperlink content of hyperlink (hyperlinkedcontent) obtain the device that concentrated each of request collection and described hyperlink content acquisition request is sent to the hyperlink content acquisition request when identical the hyperlink server;
(d) be used for by described agency for each of the content that generates from each content template determine be comprised in the hyperlink corresponding hyperlink content acquisition request collection each content and concentrate in described hyperlink content acquisition request each transmit the device of predetermined alert message when inequality to described subscriber terminal equipment;
(e) be used for receiving described hyperlink content acquisition request and content corresponding being sent to described agency's device by described hyperlink server;
(f) be used for the content that receives being sent to the device of described subscriber terminal equipment by described agency; With
(g) be used for by described subscriber terminal equipment by using the device of described content that receives of described browser software program display or described predetermined alert message.
[0010] [claim 4]
Described in embodiments of the invention 4, claim 4 provides at following situation, wherein the shown content of browser software program comprises hyperlink, service providing server is sent to the agency with webpage (web page) collection of link, described agency with the web storage of those links in this agency, and claim 4 discloses at subscriber terminal equipment, described agency, described service providing server and hyperlink server via network in the system connected to one another, a kind of system that stops leakage of personal information by following apparatus (a) to (i):
(a) be used for being sent to described agency's device by the content acquisition request that described subscriber terminal equipment will be used to obtain the content on the described service providing server;
(b) be used for receiving described content acquisition request and described content acquisition request being sent to the device of described service providing server by described agency;
(c) be used for being transmitted with the corresponding content template of described content acquisition request, rule and being included in the device of the content that the hyperlink of described content template quotes by described content providing server, described rule is used to select a content template and generate the content that reflects about user's personal information from described content template according to personal information;
(d) be used for the content stores described content template and described rule and described hyperlink quoted by described agency device at cache memory (cache memory);
(e) be used for determining hyperlink for each content template and obtain the request collection by described agency, determine whether that described concentrated each is identical and predetermined alert message is sent to when all inequality the device of described subscriber terminal equipment at each collection, described hyperlink is obtained request and is linked and be stored in the content in the cache memory and be linked to the link of the content that is different from any content in the described cache memory corresponding to being comprised in from the content that content template generates or being comprised in by the hyperlink in the described content.
(f) be used for selecting a content template, generating reflection about the content of described user's personal information with described content is sent to the device of described subscriber terminal equipment by using according to described rule about user's personal information by described agency;
(g) be used for receiving and the hyperlink content acquisition request that shows described content and will be used to obtain the hyperlink content when receiving the operation of visit hyperlink from described user is sent to described agency's device by described subscriber terminal equipment;
(h) be used for by described agency in the search of described cache memory and the corresponding content of described hyperlink content acquisition request with described content is sent to the device of described subscriber terminal equipment; With
(i) be used for showing content that receives or the device that shows predetermined alert message by use browser software program by described subscriber terminal equipment.
[0011] [claim 5]
Claim 5 discloses a kind of system described in claim 1 to 4, and in this system, described subscriber terminal equipment and described agency integrate physically mutually.
[0012] [claim 6]
Claim 6 discloses in the described system of describing in claim 1, and a kind of personal information leakage preventive method comprises the steps (a) to (e):
(a) content acquisition request that will be used to obtain the content on the service providing server by subscriber terminal equipment is sent to agency's step;
(b) receive described content acquisition request by described agency and described content acquisition request is sent to the step of described service providing server;
(c) will be sent to described agency's step with corresponding one or more content template of described content acquisition request and rule by described content providing server, described rule is used to select a content template and generate the content of reflection about user's personal information from described content template by using about the personal information of service-user;
(d) utilize about user's personal information according to described rule by described agency and select a content template, generate reflection about the content of described user's personal information with described content is sent to the step of described subscriber terminal equipment; With
(e) by the step of described subscriber terminal equipment by the described content of use browser software program display.
The beneficial effect of the invention
[0013] according to the present invention, service-user, not under the ISP provides situation about the personal information of described service-user, can use service based on personal information, reduce the possibility of above-mentioned variety of issue that the leakage owing to described personal information produces etc. thus to a great extent.
In addition, described ISP there is no need to manage the personal information about service-user.
Description of drawings
Fig. 1 is the view that illustrates according to the general survey of the system that is used to provide personalized service of prior art.
Fig. 2 A is the information flow chart according to the system that is used for providing personalized service of prior art.
Fig. 2 B is the information flow chart according to the system that is used for providing personalized service of prior art.
Fig. 2 C is the information flow chart according to the system that is used for providing personalized service of prior art.
Fig. 3 is the view that illustrates according to the general survey of the system that is used to provide personalized service of the present invention.
Fig. 4 is the diagrammatic sketch that illustrates according to agency of the present invention.
Fig. 5 A is the information flow chart according to the system that is used for providing personalized service of the present invention.
Fig. 5 B is the information flow chart according to the system that is used for providing personalized service of the present invention.
Fig. 5 C is the information flow chart according to the system that is used for providing personalized service of the present invention.
Fig. 6 is the diagrammatic sketch according to the general survey of the system that is used to provide personalized service of the present invention.
Fig. 7 is the view that illustrates according to the searching menu of the system that is used to provide personalized service of the present invention.
Fig. 8 is the view that illustrates according to the example of personal information of the present invention.
Fig. 9 is the view that illustrates according to the example of individualized content of the present invention.
Figure 10 is the view that illustrates according to the example of individualized content of the present invention.
Figure 11 is the view that illustrates according to the example of individualized content of the present invention.
Figure 12 is the view that illustrates according to the example of individualized content of the present invention.
Figure 13 is the view that illustrates according to the example of individualized content of the present invention.
Figure 14 is the view that illustrates according to the example of individualized content of the present invention.
Figure 15 is the view of describing according to the PCGP content of embodiments of the invention 3.
Figure 16 is the view of description according to the PCGP content of the expansion of embodiments of the invention 4.
Figure 17 is the view of description according to the PCGP content of the expansion of embodiments of the invention 4.
Figure 18 is a process flow diagram of describing the stream of embodiments of the invention 1.
Figure 19 is a process flow diagram of describing the stream of embodiments of the invention 2.
Figure 20 is a process flow diagram of describing the stream of embodiments of the invention 3.
Figure 21 is a process flow diagram of describing the stream of embodiments of the invention 4.
Embodiment
Below will provide description to best mode.At first, will provide to WWW (WWW) on the description that obtaining and drawing the relevant key concept of (drawing) method of content.
(1) content on the WWW is obtained/method for drafting
At WWW (World Wide Web, WWW) on, the ISP is providing various types of information (except data on the Internet, also has program), service-user can be on subscriber terminal equipment (for example personal computer (PC) or cell phone), use Web (network) browser (hereinafter, in instructions of the present invention, being known as browser) to check and use this information.Described information is known as " content " hereinafter.
Content is provided on the service providing server that is connected to the Internet, and URL(uniform resource locator) (URL) is used to discern the content on the service providing server (Web server).The position of URL indication resource on the Internet, and the path that is placed in IP address, its port numbers of the server (server machine) on it and is used for the position of indexed resource on server by scheme (scheme), resource such as the agreement that is used to obtain resource or the like is formed.
With reference to figure 2A, with the description that provides information flow.Service-user is imported the URL of the content that will check in the input block (not shown) of browser.The browser of subscriber terminal equipment (20) transmits request according to the URL (a1) of input to service providing server (50), and receives the content from respective server (a2).Browser shows the content that receives on the display unit of subscriber terminal equipment.Show that what depends on the format of content that is received.For example, content may only be a character information, and may not relate to other guide.When content was image information, this image information was drawn so that show on screen, and in addition, when content was audio-frequency information, this information was reset (replay), so as audio frequency from output such as loudspeaker (as Fig. 2 B).For this purpose, the memory location of browser access information (b1), and from wherein obtaining necessary information (b2).
[0016] in addition, when content comprises hyperlink and user and checks hyperlink content (Fig. 2 C), browser can be visited hyperlink server (60) (c1), from wherein obtaining necessary information (c2), and shows the information of being obtained on the display unit of subscriber terminal equipment.
Down, content is described on this occasion according to HTML(Hypertext Markup Language).According to HTML, can describe the quoting of another content, for example quoting view data.
And then, can be described at an easy rate to the link of hyperlink server.
[0017] example of (2) html document
The example of simple html document is shown below.
1<html>
2<head>
3＜title〉example 1＜/title 〉
4</head>
5<body>
6 place photo＜br/ below 〉
7<img?src＝′http://host_a:8080/img/example0.j?pg′/><br/>
8<a?href＝http://host_b:9090/example0.html’>
9 this be hyperlink
10 </a><br/>
11 place photo＜br/ below 〉
12 <img?src＝’http://host_a:8080/img/examplel.jpg’/><br/>
13 <a?href＝http://host_b:9090/examplel.html’>
14 this be hyperlink
15 </a>
16 </body>
17 </html>
[0018] (2-1) about html tag
This html document is from＜html〉(row 1) extend to＜/html〉(row 17).According to HTML, be enclosed in＜XXX〉and＜/XXX between part or by label＜XXX/ the indication part be regarded as an element,＜XXX〉and＜/XXX〉be known as label (being respectively start-tag and end-tag),＜XXX/〉be the combination of this start-tag and end-tag.Element can be by nested.
(2-2) about " head (head) " label and " main body (body) " label
Html document constitutes by comprising leader an element of signing and the main element that comprises principals tab.In an element, the metadata such as the title of html document is written into.On the other hand, in main element, the main body of html document is written into.Main body constitutes by character string with by the element that label surrounds, and described character string is descriptive statement.
[0019] (2-3) about view data
Here, the img element indicating image data by the appointment of img label are embedded.Can have additional information such as attribute by the element of this label appointment.For example, the img element uses the src attribute to come the URL at specify image place.
(2-4) about hyperlink
In addition, by " a " element representation hyperlink of " a " label appointment, and the indication partial association of being surrounded by this label is positioned at content by the URL of href attribute appointment in (being linked to).
[0020] draw by browser (3)
Will provide browser now is the description of how to draw html document on the display unit (not shown) of subscriber terminal equipment.
1 (row 6) browser drafting character string " is placed photo " below.
2 (row 6) because＜br/ indication line feed, move on to next line so browser will be drawn the position.
3 (row 7) are owing to occurred＜img... 〉,＜img...〉indicating image will be placed, so browser obtains the content (view data) by the URL appointment, URL is indicated by " src ".Especially, browser transmits the HTTP request, and this request asks to be positioned at the content of path "/img/example0.jpg " to the port numbers 8080 of the server of main frame host_a by name, obtains described content from this server thus.
[0021] 4 (row 7) browser is drawn the view data that is obtained.
5 (row 7) because＜br/ indication line feed, move on to next line so browser will be drawn the position.
6 (row 8 to 10) because＜a... this be hyperlink＜/a the meaning be hyperlink, so character string " this is a hyperlink " is drawn so that hyperlink to be shown with underscore or color version.
7 (row 10) because＜br/ indication line feed, move on to next line so browser will be drawn the position.
8 (row 11) browser drafting character string " is placed photo " below.
9 (row 11) because＜br/ indication line feed, move on to next line so browser will be drawn the position.
10 (row 12) are owing to occurred＜img... 〉,＜img...〉indicating image will be placed, so just obtained the content (view data) by the URL appointment, URL is indicated by " src ".Especially, browser transmits the HTTP request, and this request asks to be positioned at the content of path "/img/examplel.jpg " to the port numbers 8080 of the server of main frame host_a by name, has obtained described content from this server thus
[0022] 11 (row 12) browser is drawn the view data that is obtained.
12 (row 12) because＜br/ indication line feed, move on to next line so browser will be drawn the position.
13 (row 13 to 15) because＜a... this be hyperlink＜/a the meaning be hyperlink, so character string " this is a hyperlink " is drawn so that hyperlink to be shown with underscore or color version.
14 (row 17) finish.
[0023] (3-1) classification of content
Here, the shown content of browser is divided into following three types in instructions of the present invention.In example, will be described according to this classification.
(a) do not quote the content of other sub-contents
Normally, the content of describing in HTML comprises drawing quoting of the required other guide of its content, described other guide such as image and voice data.In such, consider not quote the content of other guide.In instructions of the present invention, be used to draw the required content of a certain content and be known as " sub-content ".
(b) quote the content of other sub-contents
Content quotation in such is used to draw other sub-contents of this content.
When browser was drawn the content that the user wants to check, as top example, browser automatically obtained sub-content usually.On some browsers, service-user can be provided with and obtain view data etc. whether automatically.If service-user is selected " not obtaining automatically ", then browser will can not obtain picture material automatically.In instructions of the present invention, for convenience of description, suppose that browser obtains view data etc. automatically.
[0024] (c) quotes the content (comprising hyperlink) of hyperlink content by means of " list (form) " label
Hyperlink is shown as on the display screen of subscriber terminal equipment with underscore or colored character string or the image that highlights.Click this part corresponding hyperlink content will be shown.Practical operation (for example service-user is clicked on the content of being checked) by service-user can obtain the content that hyperlink is quoted.
Should be noted that, on WWW, obtain content usually by HTTP(Hypertext Transport Protocol).Browser transmits the HTTP request to server.This HTTP request comprises the path that is used to specify the content on the server.The specified content in path that this server will be included in this request is sent to browser as http response.
(4) personalization of content
When content is provided,, make this content be fit to (tailor) each service-user according to personal information about service-user.As a result, even on browser, imported identical URL, also can transmit different contents from this server according to each service-user.This just is known as the personalization of content.
Realize the personalization of content by the program on the server, content can dynamically be selected or generate to described program.In this program, how to describe according to generating content about the personal information of service-user (that is, profile (profile), preference information, the history obtained of content and individual consumer's purchase history) in the past.According to prior art, the ISP is necessary to preserve the personal information about service-user.
[0026] when content during by personalization, the ISP provides personal information to service users request.For example, when service-user used the service that the ISP provides on WWW, this ISP required the user to register and collects necessary personal information.
According to the personal verification when beginning to provide service or according to the HTTP information segment (cookie) on subscriber terminal equipment, server identification is sent service-user of (issue) services request or user's terminal device.Then, server comes content is carried out personalization according to the personal information of the relevant service-user of being discerned.
[0027] with reference to the actual displayed example of the display screen of subscriber terminal equipment, with the description that provides this situation.Fig. 7 illustrates the searching menu screen.This menu screen is the search screen, allows the user use the equipment such as portable terminal of oneself to remove to search a pair of shoes that this user wants.The product that user input " jogging shoes " is wanted as this user, and input " xxxYY " is as the brand of liking, and to specify product to be searched be that this individual subscriber uses.
Fig. 8 illustrates " example of personal information ".This personal information comprises name such as the user, sex, age, address, occupation, annual income and further, the information of hobby, preference information and purchase history and so on.According to prior art, those information are stored in the service providing server.Fig. 9 illustrates " example of individualized content (1) ", as the example based on the individualized content of described information.In this case, the user is that this purchase history true and user of the male sex is used as the personal information about this user.
Under the situation that provides the above-mentioned background technology, first to fourth example of the present invention will be described now.
[0028] 1. synoptic diagram
In embodiments of the invention 1, will provide the shown content of browser is not wherein comprised the description that other sub-contents do not comprise the example of hyperlink yet, that is, and the example of the situation of classifying content described above (a).
Fig. 3 shows the general survey of this example of the present invention.Primary clustering comprises subscriber terminal equipment 20, agency 40 and service providing server 50.
In this case, subscriber terminal equipment 20 has preferably been installed the cell phone of Web browser on it.Agency 40 is provided between subscriber terminal equipment and the service providing server.In addition, agency 40 stores the personal information about the user in database, and management is about user's personal information.Service providing server 50 is servers that information on services is provided to the user, and Web server preferably.
In Fig. 3, storage is provided between service providing server and the subscriber terminal equipment about the agency of user's personal information, thus content is carried out personalization, but agency (40) can be contained in the subscriber terminal equipment (20) and so is integrated in the subscriber terminal equipment (20).
[0029] functional block diagram of 2. acting on behalf of
Fig. 4 has described the functional block diagram according to agency of the present invention (40).Agency's primary clustering comprises subscriber terminal equipment I/F unit (110), control module (120), service providing server I/F unit (130), template selection unit (150), personal information storage unit (160), the personalized unit (170) of template and authentication unit (190).In addition, this service providing server is provided with individualized content generator program (hereinafter, being called as PCGP in instructions of the present invention), is used to generate personalized content.PCGP content template list, be used for selecting a content template and generating the rule of personalized content from content template tabulation according to personal information.
[0030] 3. base conditioning flows
Figure 18 is a process flow diagram of describing embodiments of the invention 1.
The URL of 10 user input contents
20 from browser to agency's request of transmitting
30 from acting on behalf of to server transmission request
40 transmit PCGP from server to the agency
50 by the following process of agency's execution
-template is selected
The personalization of-content
-be sent to browser
60 show on browser
With reference to figure 3,4 and 5A, provide description now to this process.
(1) service-user input will be on the browser on the subscriber terminal equipment (Fig. 3 20) referring to the URL of content of hope.
(2) browser transmits to the agency and is used to obtain the requests for content (a1 of Fig. 5 A) that is positioned at this URL place.
(3) according to this request, the agency transmits content acquisition request (a2 of Fig. 5 A) to service providing server.
(4) service providing server is to the path corresponding PCGP (a3 of Fig. 5 A) of agency's transmission with the URL that describes in the content acquisition request that is received.This PCGP, as described above, content template list and rule.In this case, content template is the content of " empty hurdle (hole) " that comprise that the personal information that will use such as address name is filled, and when personal information is applied to template, just fill " empty hurdle ", thereby generated the content that does not have " empty hurdle " with suitable personal information (such as name).Described rule is the rule that is used to according to selecting from the content template tabulation about user's personal information with the corresponding content template of this user.
[0031] (5) agency carries out the PCGP that is received.Phase one in that PCGP carries out is sent to authentication unit (190) with PCGP from service providing server I/F unit (130), and the checking content whether this PCGP produced can not revealed personal information.Usually, the PCGP basis generates different contents about the value of user's personal information.For example, PCGP is that male user generates different contents with women user.If when those different contents are drawn, the content acquisition request difference that transmits when perhaps the hyperlink in being included in those contents is tracked, then the ISP can learn that according to those contents the user is the male sex or women.In other words, exist the possibility of leakage of personal information.Therefore, be necessary to verify whether the message set that is transmitted is identical for each content that is generated by this PCGP, verified that thus personal information will can not reveal.In embodiments of the invention 1, owing to only generate the content of quoting that does not comprise other guide, so this checking is successful.
(6) template is selected
Then, PCGP is sent to template selection unit (150), selects a suitable content template (Fig. 4 150) according to being stored in personal information in the personal information storage unit (160).
(7) personalization of content
Subordinate phase in the PCGP execution, the personalized unit of template (170) will be stored in the content template that the personal information about the user in the personal information storage unit (160) is applied to selection, promptly, fill " empty hurdle " with suitable personal information, and generate personalized content, thus the content of personalization be sent to control module (Fig. 4 120).
[0032] (8) control module (Fig. 4 120) is sent to browser (a4 of Fig. 5 A) via subscriber terminal equipment I/F (Fig. 4 110) with the content of personalization.
(9) browser is drawn the content that is received and show institute's drawn content on subscriber terminal equipment.
As mentioned above, in embodiments of the invention 1, provided the description of wherein not quoting the situation of other guide.In embodiments of the invention 1, do not providing under the situation of personal information to the ISP, can be illustrated in the example (1) and the example (2) of the individualized content shown in Fig. 9 and 10 respectively.
[0033] in embodiments of the invention 2, with the description that provides following example, wherein the content shown in the browser comprises other sub-contents, but does not cover the link of other websites, that is, and and the example of the situation of classifying content (b) as described above.
Usually, content comprises the quoting of the sub-content such as image and audio frequency, and hyperlink, in order to obtain those sub-contents or when the service-user clickable hyperlinks, browser transmits request.According to content, request to be transmitted is different.In the process of contents processing, browser transmits those sub-requests for content according to the sequence of describing in this content.
[0034] if those sub-requests for content directly are sent to service providing server, then service providing server can be according to discerning the content of being checked by this user to the request sequence of certain content or to the quantity of certain content visit.。
To provide respectively below the example (3) of the individualized content shown in Figure 11 and 12 and the description of (4).
In order to draw individualized content (3), browser is with image 1-〉image 1-〉image 2-〉the sequence request of transmitting of image 3.On the other hand, in order to visit individualized content (4), browser is with image 4-〉image 4-〉image 5-〉sequence of image 6 conducts interviews.
Then, under those situations, service providing server can determine that to the request of image the active user is " male sex " or " women " by monitoring.In addition, how to generate according to content, server can be inferred the information the scope of age group, address area and annual income such as the user.
[0035] common, service providing server can be inferred (estimate) or definite personal information about the user by receiving following information.
1. obtain the type of sub-requests for content
2. obtain the sequence of sub-requests for content
3. obtain the quantity of identical sub-requests for content
Now those problems will be discussed.
[0036] 1. about obtaining the type of sub-requests for content
What be easy to expect is: the type according to the content of being asked is inferred personal information.Yet, can be transferred into browser from any content one or more contents that PCGP generates, transmitting by browser under the situation of identical request, when when service providing server is checked, can't infer the content that the user checks.
Therefore, whether checking all is identical according to all requests that each content generates, and described each content generates from a PCGP.If those requests are different, then by no matter all requests whether user's viewing content is all obtained the summation (sum) of antithetical phrase requests for content collection and will be belonged to the summation of this collection are sent to server, the template that just can stop service providing server supposition user to visit.
For example, when browser transmits (to image 1 and image 2) request when drawing content 1 and transmitting that (to image 2 and image 3), request was with drafting content 2, if the agency transmits (to image 1, image 2 and image 3) request, described request is their summation, and then service providing server can't be inferred the template that the user visits.
[0037] 2. about obtaining the sequence of sub-requests for content
When for drawing each content when generating identical request, service providing server can be inferred the content that the user checks according to the sequence of request.Yet in this case, if act on behalf of the sequence of the request of rearranging according to the predefine rule, service providing server just can't be inferred the content that the user checks.For example, if request is to use the lexicographic sequence about URL to transmit, then service providing server just can't be inferred the content that the user checks.
[0038] for example, when browser transmits (to image 1 and image 2) request with the request of drawing content 1 and transmitting (to image 2 and image 1) during with drafting template 2, although the agency needs to transmit (to image 1 and image 2) request, described request is their summation, but service providing server can be according to being that (to image 1 and image 2) request is transmitted or (to image 2 and image 1) request is transmitted the content of inferring that the user has visited.So, by rearranging its sequence according to the predefine rule, for example, no matter the request of being made is to draw content 1 or draw content 2, all by this sequence being rearranged to littler sequence image 1-〉image 2, service providing server just can't be inferred the content that the user checks.
[0039] 3. about obtaining the quantity of identical sub-requests for content
When identical sub-content is repeatedly visited, and according to content, when different content was repeatedly visited identical sub-content, service providing server can be inferred the content that the user checks.
[0040] for example, browser transmits (to image 1-〉image 1-〉image 2) request when drawing content 1 and transmitting (to image 1-〉image 2-〉image 2) request with drafting content 2, and the type of obtaining those sub-requests for content is (image 1 and an image 2).Yet, directly be sent to service providing server if draw the request of content 1, because these two requests to image 1 exist,, service providing server just using content 1 at present so just can inferring the user.
After this manner, when a plurality of content requests to identical sub-content exist, just obtain to draw the request collection (image 1, image 1 and image 2) of content 1 and the summation of drawing the request collection (image 1, image 2 and image 2) of content 2.In other words, be transferred into service providing server with (image 1 and image 2) corresponding request.As a result, service providing server can't be inferred the content that the user checks.
[0041] here, agency's sub-content that storage obtains from service providing server in cache memory unit (Fig. 6 140), and, provide the sub-content that will be stored under the situation of server in the cache memory to be sent to service-user in access services not for those sub-requests for content.As a result, service providing server can not be inferred the content that the user checks according to the quantity of request, and provide the efficient of server also to be improved for obtaining sub-content access services.
[0042] as described above, revealed to service providing server in order to stop about user's personal information, the present invention has taked following measures.
(1) definite sub-requests for content collection that each content that generates from a PCGP is quoted.
(2) determine the summation of the request collection of all acquisitions, and this summation is sent to service providing server according to certain rule (for example lexicographic sequence).
(3) with the sub-content stores that obtained in agency's cache memory, and cache memory searched for to search the sub-requests for content to being obtained.
[0043] Figure 19 is a process flow diagram of describing embodiments of the invention 2.In this case, begin to describe from following state: browser illustrates content at subscriber terminal equipment, and sub-content is requested.
10 from browser to agency's request of transmitting
20 summation and request sequences by the definite request collection of agency
30 from agency's transmission request
40 transmit sub-content from server to the agency
50 carry out high-speed cache by acting on behalf of the antithetical phrase content
60 by acting on behalf of according to asking the sub-content with high-speed cache to be sent to browser
70 show on browser
Referring to Fig. 3,5B and 6, will be described this now.Referring to Fig. 6, with the description that provides it.Compare with Fig. 4, difference is: added cache memory (140) and request generation unit (180).Authentication unit (190) calculates the request that may generate from all the elements that a PCGP generated.If all requests that may generate according to each content all are identical, their quantity all is identical, and their all sequences all is identical, visits sub-content so and will can not reveal personal information about the user.
If any one type in the request that may generate according to each content is all inequality, if any one in their quantity is different, perhaps any one in Qing Qiu the sequence is different, ask generation unit (180) to calculate the summation of the request collection that may generate so according to each content, rearrange the request in the summation of request collection according to the predefine rule, and the request that will rearrange is sent to control module 120.
[0044] as among the embodiment 1, carry out this process till having generated individualized content by the application personal information, wherein, template selection unit (150) is selected a content template according to personal information, and the personalized unit of template (170) carries out personalization to selected template.Control module (120) is sent to browser by subscriber terminal equipment I/F unit (110) with individualized content.As the result of browser handles individualized content and the request that generates is transferred into agency (b1 of Fig. 5 B).When control module (120) receives request, control module (120) is sent to service providing server (b2 of Fig. 5 B) with the sequence of appointment with all requests of rearranging via service providing server I/F unit, and described all request package of rearranging are contained in the summation of the request collection that sends from request generation unit (180).Service providing server will with received each ask corresponding sub-content to be sent to agency (b3 of Fig. 5 B).The agency with the sub-content stores that received in cache memory unit (140).Control module (120) search cache memory unit (140) is to search and the corresponding sub-content of request that transmits from browser.The sub-content that searches is transferred into browser (b4 of Fig. 5 B).Browser uses those sub-contents to show them on the display unit of subscriber terminal equipment.
In embodiments of the invention 2, provide description to following situation, wherein other guide is cited.According to the present invention, in embodiments of the invention 2, do not providing under the situation of personal information to the ISP yet, can be presented at example (3) and (4) of the individualized content shown in Figure 11 and 12 respectively.
[0045] in embodiments of the invention 3, with the description that provides following example, wherein the shown content of browser comprises the hyperlink to other guide (webpage), that is, and and the example of situation (c).Yet, for simplicity, only provide the description of the process relevant with hyperlink.By such in the embodiment of the invention 2, handle sub-content.Show in the example (5) of the individualized content shown in Figure 13 and 14 and (6) by " Clicking here " in " details " row indicated part by hyperlink.
In this case, " image 1 " the corresponding details (" Clicking here ") of if " #1 " in the example of user capture and individualized content (5), then service providing server can be determined the content that the user checks at present, and can infer that this user is the male sex.On the other hand, if " image 4 " corresponding details (" Clicking here ") of user capture and " #1 " in the example (6) of individualized content, then service providing server can be determined the content that the user checks at present and can infer that this user is the women.
[0046], will provide description with reference to Figure 15.Service-user is specified predetermined URL, and shown in dotted arrow, exists three content template A, B and C, and each all is comprised in the PCGP that is arranged in this URL place.They are surrounded by long dotted line and short dash line in Figure 15.From those content template, select suitable content template according to personal information about the user.In this case, further, content template A comprises hyperlink " a ", and by hyperlink to by the webpage shown in the solid arrow " a ".Content template B comprises hyperlink " b " and " c ", and by hyperlink to by the webpage shown in the solid arrow " b " and " c ".Content template C comprises hyperlink " a " and " c ", and by hyperlink to by the webpage shown in the solid arrow " a " and " c ".When webpage " b " is accessed, can determine: just the content of being checked by the user produces from content template " B ".In addition, when webpage " a " and " c " were accessed, can determine: just the content of being checked by the user generated from content template " C ".
[0047] common, from the webpage of predetermined content link when accessed, can determine the content of just being checked when only according to visit information by the user, infer personal information according to the content of being checked then about the user.In addition, can infer more substantial personal information according to many visit informations.
On the other hand, if the content that generates from single PCGP, be identical for obtaining the request that the hyperlink content sends, then just can not infer which content the user has browsed according to visit information.In this case, the user can select to visit the sequence of hyperlink arbitrarily, therefore, and according to inferring that about the information of access sequence the user is impossible in the content of visiting.
Therefore, the present invention has verified: adopt following manner, will can not reveal to service providing server about user's personal information.
[0048] [process after verification method and the checking]
(1) verify that each hyperlink content acquisition request that may generate according to a plurality of content template is identical, described a plurality of content template generate from a PCGP.
(2) if the hyperlink content acquisition request is respectively identical, that is, if checking is successful, then individualized content is transferred into the user.
(3) if the hyperlink content acquisition request is respectively different, that is, if checking is unsuccessful, although then individualized content is transferred into the user, but when the user capture hyperlink, " warning " revealed with regard to producing the content that personal information may check according to the user.Example among Figure 15 will be considered.
Because the hyperlink content acquisition request to content template A is " a ", is " b " and " c " to the hyperlink content acquisition request of content template B, and is " a " and " c " the hyperlink content acquisition request of content template C, so { a} ≠ { b, c} ≠ { a, c}, and thereby authentication failed.
[0049] Figure 20 is a process flow diagram of describing embodiment 3.In this case, description will be from following state: browser illustrates content at subscriber terminal equipment, and is requested with the corresponding content of hyperlink.To suppose for this description: the checking (that is, verifying whether all requests that may generate by clicking the hyperlink on each content are identical) in the step 50 among Figure 18 (" agency carries out following process ") is performed.
10 by browser detection user clickable hyperlinks
20 are sent to the agency with the hyperlink request from browser
Are 30 proved to be successful?
40 agencies obtain content from the hyperlink server
50 from acting on behalf of to browser transmission content
60,80 show on browser
70 from acting on behalf of to browser transmission warning
Do 90 receive demonstration purpose (intention) from the user?
To provide description now to this process stream.Authentication unit among Fig. 6 (190) calculates the hyperlink collection be included in all each contents, and described all each contents are the content template the PCGP that obtains from being included in and the content that may generate.If all hyperlink collection that are included in each content are identical, that is, be proved to be successful, then when the user capture hyperlink, will can not revealed about user's personal information.
It should be noted, this process is according to being performed like that in the embodiment of the invention 2 up to having generated individualized content by using personal information, wherein, template selection unit (150) is selected a content template according to personal information, and the personalized unit of template (170) carries out personalization to selected template.This individualized content is transferred into browser via control module (120).
If be proved to be successful, then the hyperlink content acquisition request that is generated when the user clicks the hyperlink that is included in this individualized content is transferred into agency (c1 among Fig. 5 C).When control module (120) received this request, control module (120) was sent to service providing server (c2 among Fig. 5 C) via service providing server I/F unit with this request.Service providing server will be sent to agency (c3 among Fig. 5 C) with the corresponding content of the request that is received.The agency is sent to the content that is received the browser (c4 among Fig. 5 C) of subscriber terminal equipment.The content that browser display received.
[0050] if the hyperlink collection that is included in each content is inequality, promptly, checking is unsuccessful, although then process (wherein individualized content is transferred into browser via control module (120) and is transferred into agency (c1 among Fig. 5 C) with the hyperlink content acquisition request that generates when the user clicks the hyperlink that is included in this individualized content) is identical with case of successful, but when control module (120) receives the hyperlink content acquisition request, control module (120) warning browser " if the hyperlink content acquisition request is transferred into the destination of hyperlink, then may be pushed and measures " (c4 among Fig. 5 C) about user's personal information.The warning that browser display received.
[0051] if the user ignores this " warning " and still asks visit, then this request is transferred into service providing server (c2 among Fig. 5 C).The content pass course c3-of hyperlink〉c4 is transferred into browser (Fig. 5 C), and illustrated thereon.
Stop visit if the user defers to this " warning ", visit will can not be performed.
[0052] in embodiments of the invention 4, with the description that provides following example, wherein the content shown in the browser comprises the hyperlink to other guide, service providing server with those content collectings together, and they are sent to the agency, the agency the content stores that is linked in cache memory.As embodiment 3, only provide the description of the process relevant with hyperlink.
[0053] Figure 21 is a process flow diagram of describing embodiment 4.In this case, browser is at the subscriber terminal equipment displaying contents, and will begin from the state of having asked hyperlink to describe.For this description, will provide following hypothesis: the checking in the step 50 among Figure 18 (" agency carries out following process "), and be used for being performed in the process of cache memory storage from the content of template link.
10 by browser detection user clickable hyperlinks
20 are sent to the agency with the hyperlink request from browser
Are 30 proved to be successful?
40 agencies obtain content from the hyperlink server
50 from acting on behalf of to browser transmission content
60,80 show on browser
70 from acting on behalf of to browser transmission warning
Do 90 receive the demonstration purpose from the user?
The content of 100 request high-speed caches?
110 from acting on behalf of to the browser transmission by the content of high-speed cache
With reference to Figure 16, will provide now webpage wherein by the description of the example of hyperlink.Service providing server is sent to the agency with PCGP, described PCGP content template A, B and C and from its webpage " a ", " b " and " c " as set link, and described PCGP is known as " PCGP of expansion " hereinafter.They are surrounded by long dotted line short dash line in Figure 16.
The agency receives is somebody's turn to do " PCGP of expansion " and checking: in the following ways, " PCGP of expansion " will can not generate the request that may reveal personal information.
[0054] [verification method] (1) generates the hyperlink collection that is included in the content that generates according to content template for each content template among the PCGP that is included in expansion.
In Figure 16, the content template that is included among the PCGP of this expansion is A, B and C.The hyperlink collection that is included in each content template is:
A＝{a}
B＝{b，c}
C＝{a，c}
(2) concentrate to select hyperlink (for example " a ") from hyperlink, its hyperlink is included in the webpage in this " PCGP of expansion ", and will be included in hyperlink (for example " a1 " and " a2 ") in this webpage as the element adding of this set.It should be noted, hyperlink is in a single day selected put up with not selected once more.The result is as follows:
A＝{a，a1，a2}
B＝{b，c，b1，b2}
C＝{a，c，a1，a2}
[0055] (3) for each hyperlink collection, and the operation that repeats (2) is up to there not be the hyperlink to be selected of being left.The quantity that is included in the webpage among the PCGP of expansion is limited, and therefore this iteration always can finish.
A＝{a，a1，a2}
B＝{b，c，b1，b2，c1，c2}
C＝{a，c，a1，a2，c1，c2}
[0056] (4) are concentrated from all hyperlink and are removed the hyperlink (for example " a ") that links the webpage the PCGP that is included in this expansion, and the result is as follows:
A＝{a1，a2}
B＝{b1，b2，c1，c2}
C＝{a1，a2，c1，c2}
The set of having experienced this operation is such hyperlink collection: the individualized content that generates from corresponding template may transmit request to service providing server.If those set are different, then personal information may be revealed to the ISP.
[0057] (5) checking is identical with corresponding all set of each template.If all set are identical, then be proved to be successful, otherwise authentication failed.
In example shown in Figure 16,
{a1，a2}
≠ b1, b2, c1, c2} and
≠ a1, a2, c1, c2} and
So authentication failed.
[0058] although described webpage by the situation of hyperlink, webpage can be by hyperlink, and PCGP (or PCGP of expansion) can be by hyperlink (Figure 17).The PCGP that comprises the expansion of PCGP is surrounded by long dotted line short dash line in Figure 17.In this case, at first be verified by the PCGP of hyperlink.In other words, when PCGP when nested, inner PCGP at first is verified.With reference to Figure 17, will provide description now.In Figure 17, will further generate a plurality of webpages.In Figure 17, hyperlink " a " content " a " pointed that is included among the content template A is PCGP, its content template " a1 " and " a2 ".In addition, if hyperlink " a11 " and " a12 " further by from " a1 " link, and hyperlink " a21 " and " a22 " be further by from " a2 " link, then just for a1 and a2 have obtained the hyperlink collection, PCGP " a " so at first be verified.
If be proved to be successful, then be included in by the hyperlink in the content that is produced by the PCGP of hyperlink " a " and be used as the element that the hyperlink of content template A concentrates and be added into.If this authentication failed, then whole checking is also failed, thereby there is no need to verify other PCGP, for example " b " and " c ".
[0059] situation of (6) good authentication
The content that is included among the PCGP of this expansion is stored in the cache memory unit (140).In addition, in template selection unit (150), select template, selected template is sent to the personalized unit (170) of template, and generates individualized content.The individualized content that is generated is transferred into subscriber terminal equipment via subscriber terminal equipment I/F unit (110).
[0060] situation of the checking of (7) failure
As the process of this situation, as embodiment 3, individualized content is transferred into the user.When this link of user capture, personal information may be revealed " warning " from the content that the user checks and be illustrated.
(8) if click hyperlink to the content among the PCGP that is included in this expansion, request can be transferred into the agency so.The content that the agency will be stored in the cache memory unit (140) is sent to subscriber terminal equipment.It should be noted that if this content is the PCGP of PCGP or expansion, the agency generates and transmit individualized content so.
The description of Reference numeral
[0062] 10: the internet
20: subscriber terminal equipment
30: the wireless base station
40: the agency
50: service providing server
60: the hyperlink server
110: subscriber terminal equipment I/F unit
120: control module
130: service providing server I/F unit
140: cache memory unit
150: template selection unit
160: the personal information storage unit
170: the personalized unit of template
180: the request generation unit
190: authentication unit
Claims (6)
- At the employed subscriber terminal equipment of service providing server, agency and service-user via network in the system connected to one another, a kind of personal information leakage preventive system comprises following apparatus (a) to (e):(a) be used for being sent to described agency's device by the content acquisition request that described subscriber terminal equipment will be used to obtain the content on the described service providing server;(b) be used for receiving described content acquisition request by described agency; With the device that described content acquisition request is sent to described service providing server;(c) be used for will being sent to described agency's device with corresponding one or more content template of described content acquisition request and rule by described content providing server, described rule is used to select a content template and generate the content of reflection about user's personal information from described content template by using about the personal information of service-user;(d) be used for selecting a content template according to described rule by using about described user's personal information by described agency; Generate the content of reflection from described content template about described user's personal information; With the device that described content is sent to described subscriber terminal equipment; With(e) by the device of described subscriber terminal equipment by the described content of use browser software program display.
- 2. personal information leakage preventive as claimed in claim 1 system when using the described content of browser software program display, also comprises following apparatus (a) to (g) at described subscriber terminal equipment:(a) being used in sub-content is the device that the sub-content acquisition request that will be used to obtain described sub-content by described subscriber terminal equipment under the necessary information is sent to described agency for showing described content;(b) be used for receiving the device of described sub-content acquisition request by described agency;(c) be used for determining to show the necessary sub-content acquisition request collection of content that generates from each content template for each content by described agency; With concentrate in described sub-content acquisition request each when identical, will be included in the device that described sub-content acquisition request in each that described sub-content acquisition request concentrates is sent to described service providing server with predetermined sequence;(d) be used for determining to show the necessary sub-content acquisition request collection of content that generates from each content template for each content by described agency; With concentrate in described sub-content acquisition request each with predetermined sequence all sub-content acquisition request are sent to the device of described service providing server when inequality;(e) be used for to be sent to described agency's device with the corresponding sub-content of all sub-content acquisition request that receive by described service providing server;(f) be used for by the described sub-content that receives of described proxies store; Be sent to the device of described subscriber terminal equipment with the sub-content that subscriber terminal equipment described in the sub-content of being stored is asked; With(g) be used for by described subscriber terminal equipment by using the device of the described sub-content of described browser software program display.
- 3. as claim 1 or 2 described personal information leakage preventive systems, wherein, described network comprises one or more hyperlink server, and after described subscriber terminal equipment uses described browser software program display content, also comprises following apparatus (a) to (g):(a) the hyperlink content acquisition request that is used for will obtaining the hyperlink content by described subscriber terminal equipment when receiving the operation of visit hyperlink from the user is sent to described agency's device;(b) be used for receiving from described subscriber terminal equipment the device of described hyperlink content acquisition request by described agency;(c) be used for determining and the corresponding hyperlink content acquisition request of the hyperlink collection that is comprised in the content for the content that generates from each content template each by described agency; When identical the hyperlink content acquisition request is sent to the device of described hyperlink server with in described set each;(d) be used for determining and the corresponding hyperlink content acquisition request of the hyperlink collection that is comprised in each content for the content that generates from each content template each by described agency; With concentrate in described hyperlink content acquisition request each transmit the device of predetermined alert message when inequality to described subscriber terminal equipment;(e) be used for receiving described hyperlink content acquisition request by described hyperlink server; With the device that content corresponding is sent to described agency;(f) be used for the content that receives being sent to the device of described subscriber terminal equipment by described agency; With(g) be used for by described subscriber terminal equipment by using the device of described content that receives of described browser software program display or described predetermined alert message.
- At service providing server, agency, hyperlink server and the employed subscriber terminal equipment of service-user via network in the system connected to one another, a kind of personal information leakage preventive system comprises following apparatus (a) to (i):(a) be used for being sent to described agency's device by the content acquisition request that described subscriber terminal equipment will be used to obtain the content on the described service providing server;(b) be used for receiving described content acquisition request by described agency; With the device that described content acquisition request is sent to described service providing server;(c) be used for being transmitted with the corresponding content template of described content acquisition request, rule and being included in the device of the content that the hyperlink of described content template quotes by described content providing server, described rule is used to select a content template and generate the content that reflects about user's personal information from described content template according to personal information;(d) be used for the content stores quoted with described content template and described rule and by described hyperlink by described agency device at cache memory;(e) be used for determining hyperlink for each content template and obtain request collection, determine whether that by described agency described concentrated each is identical and predetermined alert message is sent to the device of described subscriber terminal equipment when each collection is all inequality that described hyperlink is obtained request and linked and be stored in the content in the cache memory and be linked to the link of the content that is different from any content in the described cache memory corresponding to being comprised in from the content that described content template generates or being comprised in by the hyperlink in the content;(f) be used for selecting a content template according to described rule by using about described user's personal information by described agency; Generate the content of reflection about described user's personal information; With the device that described content is sent to described subscriber terminal equipment;(g) be used for receiving and showing described content by described subscriber terminal equipment; Be sent to described agency's device with the hyperlink content acquisition request that when receiving the operation of visit hyperlink from described user, will be used to obtain the hyperlink content;(h) be used for by described agency in described cache memory search and the corresponding content of described hyperlink content acquisition request; With the device that described content is sent to described subscriber terminal equipment; With(i) be used for by described subscriber terminal equipment by using the browser software program and show the content that receives or show the device of described predetermined alert message.
- 5. according to the described personal information leakage preventive of claim 1 to 4 system, wherein, described subscriber terminal equipment and described agency integrate physically mutually.
- At the employed subscriber terminal equipment of service providing server, agency and service-user via network in the system connected to one another, a kind of personal information leakage preventive method comprises the steps (a) to (e):(a) content acquisition request that will be used to obtain the content on the described service providing server by described subscriber terminal equipment is sent to described agency's step;(b) receive described content acquisition request by described agency and described content acquisition request is sent to the step of described service providing server;(c) will be sent to described agency's step with corresponding one or more content template of described content acquisition request and rule by described content providing server, described rule is used to select a content template and generate the content of reflection about user's personal information from described content template by using about the personal information of service-user;(d) select a content template according to described rule use about described user's personal information by described agency; Generate the content of reflection about described user's personal information; With the step that described content is sent to described subscriber terminal equipment; With(e) by the step of described subscriber terminal equipment by the described content of use browser software program display.
Applications Claiming Priority (3)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| JP021729/2006 | 2006-01-31 | ||
| JP2006021729 | 2006-01-31 | ||
| JP032707/2006 | 2006-02-09 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101379508A true CN101379508A (en) | 2009-03-04 |
Family
ID=40422023
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA2007800041207A Pending CN101379508A (en) | 2006-01-31 | 2007-01-26 | Personal information leakage preventive device and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101379508A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102098271A (en) * | 2009-12-10 | 2011-06-15 | 华为技术有限公司 | User information acquisition method, device and system |
-
2007
- 2007-01-26 CN CNA2007800041207A patent/CN101379508A/en active Pending
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102098271A (en) * | 2009-12-10 | 2011-06-15 | 华为技术有限公司 | User information acquisition method, device and system |
| WO2011069466A1 (en) * | 2009-12-10 | 2011-06-16 | 华为技术有限公司 | Method, apparatus and system for obtaining user information |
| US8875225B2 (en) | 2009-12-10 | 2014-10-28 | Huawei Technologies Co., Ltd. | Method, apparatus and system for obtaining user information |
| CN102098271B (en) * | 2009-12-10 | 2015-01-07 | 华为技术有限公司 | User information acquisition method, device and system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10042838B2 (en) | Obtaining data from incomplete electronic forms | |
| US8918495B2 (en) | Link tracking | |
| US20190190977A1 (en) | System and method of automatic generation and insertion of analytic tracking codes | |
| FI114066B (en) | Traffic flow analysis method | |
| CN108805694B (en) | Credit consultation service method, apparatus, device and computer readable storage medium | |
| KR20090016745A (en) | Message catalogs for remote modules | |
| US20120221386A1 (en) | Real-time online advertisement verification system and method | |
| KR20000030679A (en) | Method for managing advertisements on Internet and System therefor | |
| EP1980973A1 (en) | Personal information leakage preventive device and method | |
| WO2001009771A9 (en) | Targeted advertising system | |
| US20060184655A1 (en) | Traffic analysis | |
| CN101379508A (en) | Personal information leakage preventive device and method | |
| KR100393252B1 (en) | Method and System for managing translation service | |
| KR101493067B1 (en) | Method for Operating Contents | |
| KR101493015B1 (en) | Method for Displaying Advertisement for Supplying Value using Mouse Event | |
| KR101115635B1 (en) | System and Method for Providing Advertisement Information and Recording Medium | |
| KR101497116B1 (en) | Method for Providing User-created Multimedia Contents | |
| KR100574091B1 (en) | Re-target Advertising System and Method Using Status Objects | |
| KR20090006478A (en) | System and method for processing information and program recording medium | |
| US20060053205A1 (en) | Method and device for distinguishing user HTTP requests | |
| KR101509141B1 (en) | Method for Processing Search Result | |
| KR101508759B1 (en) | Method for Linking Contents | |
| Karkaletsis et al. | Quality labeling of Web content: The QUATRO approach | |
| KR20100031593A (en) | System and method for outputting combined answer data | |
| KR20060034491A (en) | Web contents service system and process with gis hyper link |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| AD01 | Patent right deemed abandoned |
Effective date of abandoning: 20090304 |
|
| C20 | Patent right or utility model deemed to be abandoned or is abandoned |