JP2001229125A - Method and system for communication management, computer, storage medium, and transmission medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To smoothly put electronic commerce by the Internet, etc., into practice by performing control discriminatingly between a case wherein a return can be made with the 'return' button of a browser and a case wherein a return can not be made according to the contents of operation. SOLUTION: A session identifier 3 managing information of a session is managed while internally divided into two. The identifier controlling the session information is held while internally halved into a 1st identifier 4 which does not vary in its value from login to logout and a 2nd identifier 5 which varies in value each time access is gained. When a return to a previous picture is enabled, only the 1st identifier 4 is checked and when the return to the previous picture is disabled to the contrary, the 1st identifier 4 and 2nd identifier 5 are both checked.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing system in a computer network, and more particularly, to a communication management method and a communication management system for performing electronic commerce between a server computer and a client computer constituting a computer network such as the Internet. The present invention relates to a computer, a storage medium, and a transmission medium.

[0002]

2. Description of the Related Art Electronic commerce using a computer network such as the Internet is diversified. For example, there are online merchandise sales, online stock transactions, and online bank transfers. Since these electronic commerce transactions require a high level of security, an identifier (account) is assigned to each user, and the server can be accessed only when the user is authenticated.

In electronic commerce using a computer network as described above, for example, a browser for displaying information on the Internet is used, and a server computer is authenticated as a valid user in response to a reception request from a client computer. In this case, the server computer sends various information necessary for business transactions (for example, name, address,
A format for entering an account number, product or amount) is transmitted to the client computer, and various information is displayed on the browser.

[0004] Since the entries in such a format are diversified, the entries are often divided and input for a plurality of sessions, and the entry information is transmitted and received in each session in many cases. For example, in online bank transfer, firstly, a session in which the name and address are input and transmitted, second, a session in which the other party's bank name and account number are input and transmitted, and thirdly, a required amount of money, etc. are input. The more the services are diversified, such as a session to be transmitted and transmitted, the number of times of inputting and transmitting and receiving increases.

[0005] When the input items are complicated as described above, there are many cases where a user makes an input error and desires correction.
In such a case, the user returns to the desired session by clicking the back button of the browser, and inputs again. For example, when it is desired to reduce the transfer amount once input, the desired session may be displayed by clicking a back button of the browser, and the desired amount may be input again. When all the entries are completed, a list is displayed to see if there are any errors (for example, a list of names, addresses, destination bank names, branch names, account numbers, amounts, etc.) If so, click the browser's back button as many times as necessary to return to the session that needs correction and re-enter.

[0006] However, there has been an adverse effect such that commerce is duplicated by a simple operation of the back button of the browser. For example, when the user operates the return button of the browser in a session for confirming and displaying to the user that the commercial transaction has been completed, despite the fact that the transaction has been completed after completing and transmitting and receiving the predetermined items, if the user purchases the product again or To return to a session such as a bank transfer, there is a problem that the user misunderstands that the commercial transaction has not been completed and inputs and transmits predetermined items again. If this is done, not only will the user become significantly disadvantageous for users who conduct e-commerce such as product purchases or transfers in duplicate, but as a result of distrust of users and avoiding e-commerce, customers will decrease and businesses that provide content It is very disadvantageous.

FIG. 15 is a schematic diagram showing a computer network. The computer network in FIG. 15 includes server computers 1, 1...
And client computers 2, 2... Which are provided with electronic commerce. The server computer 1 and the client computer 2 are mutually connected via a telephone line or the like. When the user performs electronic commerce, the identifier is transmitted from the client computer 2 to the server computer 1. If the transmitted identifier matches the identifier stored in the server computer 1, the transaction can be started as a valid user.

FIG. 12 is a flow chart in the case where authentication is performed using one conventional identifier. The client computer 2 that wants to receive the information of the second session,
Transmits the identifier to server computer 1 (step S
12-1). The server computer 1 compares the stored identifier with the identifier transmitted from the client computer 2 (Step S12-2). If the server computer 1 determines that the identifiers do not match, the server computer 1 rejects the access as an unauthorized user (A), and forcibly shifts to step S12-1 to initialize the processing. If it is determined that the identifiers match, the second session information is transmitted to the client computer 2 (steps S12-2 and S12-3).

Since the second session information has been transmitted from the server computer 1 in step S12-3, the second session information is displayed on the browser of the client computer 2 (step S12-4). Next, the client computer 2 desiring the information of the third session transmits the identifier to the server computer 1 again (Step S12-5, B). The value of the identifier does not change even if the server computer 1 is accessed a plurality of times.

FIG. 13 is a flowchart in the case where the process has shifted to the second and third sessions. Server computer 1 compares the identifier transmitted in step S12-5 (B) in FIG. 12 with the identifier stored in server computer 1 (step S13-1). Then, as in step S12-2, if the server computer 1 determines that the identifiers do not match, the server computer 1 rejects access (A), and if it determines that the identifiers match, transmits third session information to the client computer 2 (step S13).
-2). As a result, the third session information is displayed on the browser of the client computer 2 (step S).
13-3).

Here, when the user wants to return from the third session to the second session, he or she must click the return button 17 of the browser shown in FIG. In this case, the client computer 2 transmits an identifier to the server computer 1 to request reception of the second session (Step S13-4). If the server computer 1 determines in step S13-5 that the transmitted identifiers do not match, the server computer 1 proceeds to step S1 similarly to step S12-2.
The process proceeds to 2-1 (A), and if it is determined that they match, the process proceeds to step S12-4 (C). That is, by clicking the back button 17 of the browser, the process uniformly shifts to the previous session.

FIG. 14 is an explanatory diagram showing the flow of transactions when online bank transfer is performed based on only one identifier. In step S14-1, the client computer 2 inputs a transfer destination and a transfer amount. If there is an error or change in the description, click the clear button 20 or the return button 17 and step S14.
It is possible to return to the initial screen of -1. After the input, if the contents are satisfactory, the user clicks the OK button 19 or the advance button 18 (step S14-2). The server computer 1 checks a transfer destination and whether or not the transfer is within a range of a receivable amount in a database storing deposit data of a bank (not shown) (step S14-3), and stores the second session information in the client computer. 2 (step S14-4). Then client computer 2
The transfer destination, the transfer amount, and the transfer fee are confirmed and displayed on the browser (step S14-5). Here, if there is an error or change in the description, the clear button 20 or the return button 17 can be clicked to return to the screen of step S14-2 (step S14-5). After the input, if the content is OK, the user clicks the OK button 19 or the forward button 18 to execute the transfer business in the server computer 1 (step S).
14-6).

Then, the third session information is transmitted to notify the client computer 2 that the transfer procedure has been securely completed (step S14-7). In response to this transmission, a message indicating that the transfer has been completed normally is displayed on the browser of the client computer 2 (third session) (step S14-8). Here, the user presses the menu button 21 or the forward button 1 of the third session.
Click 8 to return to the initial menu and complete the procedure. However, when the user clicks the return button 17 of the browser, the screen returns to the screen displaying the second session again (step S14-5). In this case, when the OK button 19 or the forward button 18 of the browser is clicked, the transfer operation is executed again (step S1).
4-6), duplicate transfers are made.

[0014]

In such a case, it is conceivable that the use of the back button of the browser may be uniformly prohibited to prevent the above-mentioned adverse effects. Significantly inconvenient for users. Therefore, it is necessary to permit the use of the browser's back button in a session in which the use of the browser's back button is permitted, and to prohibit the use of the browser's back button in the case where the above-described duplicate transaction must be avoided. Conventionally, as a method for solving such a problem, control to permit or reject returning to the previous session using JavaScript or the like has been performed. However, since it takes a lot of time for processing, it still lacks user convenience. Met.

[0015] Furthermore, since the time from the start to the end of electronic commerce and the number of times of access have increased with the increase in the number of sessions, the unauthorized access due to impersonation of a third party and the like can be appropriately prevented to secure security. Need to improve. In particular, in electronic commerce, it is highly necessary to appropriately protect the property of the user from unauthorized users, and personal information being transmitted and received must not be leaked.

The present invention has been made in view of such circumstances, and even when the use of the back button of a browser is permitted in electronic commerce between a server computer and a client computer constituting a computer network such as the Internet. A communication management method and communication that can effectively prevent duplicate transactions while maintaining the convenience at the time of correction input by controlling the good case and the case of prohibiting use, and have excellent responsiveness. The purpose is to provide a management system.

A second object of the present invention is to provide a communication management method and a communication management system with higher security in electronic commerce between a server computer and a client computer constituting a computer network such as the Internet. It is in.

Further, a third object of the present invention is to control a computer so that a browser's back button is disabled according to the contents of a business, thereby effectively preventing duplicate commercial transactions, and at the same time, being responsive. Another object of the present invention is to provide an e-commerce company with a computer and a storage medium capable of providing a user with excellent e-commerce.

A fourth object of the present invention is to provide a computer, a storage medium, and a transmission medium which are effective for a user to duplicate transactions while maintaining the conventional browser operation environment, and which are excellent in responsiveness. It is in.

[0020]

A communication management method according to a first aspect of the present invention is a communication management method between a client computer and a server computer constituting a computer network, wherein the client computer logs in to the server computer. Comparing the first identifier transmitted from the client computer to the server computer and the first identifier stored in the server computer, the content of which does not change until the user logs out; Selecting whether to compare a second identifier transmitted from the client computer to the server computer and corresponding to a second identifier stored in the server computer, which corresponds to the session of the browser being used Comparing the second identifier transmitted from the client computer to the server computer and the second identifier stored in the server computer, and if the compared second identifier is different, the second identifier is stored in the client computer. Disabling the function of the back button of the browser being operated.

[0021] The communication management method according to the second invention further comprises a step of updating a second identifier stored in the server computer, and a step of transmitting the updated second identifier to the client computer. It is characterized by.

The communication management method according to a third aspect of the present invention is a communication management method comprising: calculating a third identifier based on the first and second identifiers stored in the client computer; Transmitting to the server computer; calculating a third identifier for the server computer based on the first identifier and the second identifier transmitted from the client computer; and the third identifier for the server computer And comparing with the third identifier transmitted from the client computer.

A communication management system according to a fourth aspect of the present invention is a communication management system between a client computer and a server computer constituting a computer network, wherein the server computer logs in after the client computer logs in to the server computer. A first identifier transmitted from the client computer to the server computer, a first identifier stored in the server computer, and a first identifier comparing means for comparing the first identifier transmitted from the client computer to the server computer. A second identifier corresponding to the stored browser session and transmitted from the client computer to the server computer is compared with a second identifier stored in the server computer. Selecting means for selecting whether or not, a second identifier comparing means for comparing a second identifier transmitted from the client computer to the server computer and a second identifier stored in the server computer, If the two identifiers are different, it comprises an unauthorized second identifier signal transmitting means for transmitting an unauthorized second identifier signal to the client computer, wherein the client computer receives the unauthorized second identifier signal from the server computer Comprises a function disabling means for disabling a function of a back button of a browser stored in the client computer.

According to a fifth aspect of the present invention, in the communication management system, the server computer updates a second identifier stored in the server computer,
An updated second identifier transmitting means for transmitting the updated second identifier to the client computer.

According to a sixth aspect of the present invention, in the communication management system, the client computer calculates a third identifier based on the first and second identifiers stored in the client computer; A third identifier transmitting unit that transmits a third identifier calculated by a third identifier calculating unit to the server computer, wherein the server computer transmits the third identifier to the first identifier and the second identifier transmitted from the client computer. A third identifier calculating means for calculating a third identifier based on the third identifier, and a third identifier comparing means for comparing the third identifier calculated by the third identifier calculating means with the third identifier transmitted from the client computer. It is characterized by having.

A computer according to a seventh aspect of the present invention is a computer constituting a computer network, wherein the contents of the first identifier transmitted from the other computer remain unchanged until another computer logs in after logging in, and A first identifier comparing means for comparing the first identifier with the first identifier, and a second identifier transmitted from the other computer corresponding to a browser session stored in the other computer, and stored. Selecting means for selecting whether or not to compare the second identifier; second identifier comparing means for comparing the stored second identifier with the second identifier transmitted from the other computer; Sending an unauthorized second identifier signal to the other computer if the two identifiers are different; Characterized in that it comprises a stage.

According to an eighth aspect of the present invention, in the computer constituting the computer network, the first identifier for transmitting to the other computer a first identifier whose contents do not change until the user logs out and logs out of the other computer. Transmitting means, second identifier transmitting means for transmitting a second identifier stored in correspondence with the session of the browser to the other computer, and browser based on an unauthorized second identifier signal transmitted from the other computer Function disabling means for disabling the function of the back button.

According to a ninth aspect of the present invention, a computer readable storage medium stores a computer program for causing a computer constituting a computer network to manage a session. Program code means for comparing the first identifier transmitted from the other computer with the stored first identifier, the content of which does not change until another computer logs in and then logs out; and Program code means for selecting whether to compare a second identifier transmitted from the other computer corresponding to a browser session stored in the other computer with the stored second identifier And the computer, the other A program code means for comparing the second identifier transmitted from the computer with the stored second identifier; and, if the compared second identifier does not match, the second computer is illegal with respect to the other computer. A computer program including program code means for transmitting a signal is stored.

A computer-readable storage medium according to a tenth aspect of the present invention stores a computer program for causing a computer constituting a computer network to manage a session. Program code means for transmitting to the other computer a first identifier whose content does not change until after logging in to another computer and then logging out; and a second program stored in the computer corresponding to a browser session. Program code means for transmitting an identifier to the other computer; and program code means for causing the computer to disable a function of a back button of a browser based on an unauthorized second identifier signal transmitted from the other computer. Wherein the computer program is stored.

[0030] A transmission medium according to an eleventh aspect of the present invention is a transmission medium used in a computer network, wherein a first identifier whose content does not change from logging in to another computer to logging out is transmitted to the other computer. Program code means for transmitting to a computer;
Program code means for causing the computer to transmit a second identifier stored in correspondence with a browser session to the other computer, based on an unauthorized second identifier signal transmitted from the other computer to the computer Computer program including program code means for disabling the function of the back button of the browser.

In the first and fourth inventions, in addition to the first identifier whose value does not change from login to logout, a second identifier corresponding to a browser session stored in the client computer is stored. Identifiers are provided and these are compared between the client computer and the server computer. If the compared first identifiers do not match, the access is denied as an unauthorized user. Next, the second identifier stored in the client computer and corresponding to the browser session is compared with the second identifier stored in the server computer. If the compared second identifiers do not match, the server computer sends an unauthorized second identifier signal to the client computer. The client computer that receives this signal disables the browser's back button function, so if the user accidentally clicks the browser's back button, the function will be disabled, so that duplicate transactions will be effective. Service can be provided, and services with excellent responsiveness can be provided. In addition, since the server computer is provided with a means for selecting whether to compare the second identifier between the server computer and the client computer, the content provider may permit use of the browser's back button depending on the content of the business. And the case where the use is prohibited, can be controlled separately, and computer network electronic commerce such as the Internet can be smoothly operated.

In the second invention and the fifth invention, each time the client computer accesses the server computer, the second identifier stored in the server computer and the client computer is updated, and the second identifier that has not been updated is updated. The browser back button is disabled when an identifier is sent from the client computer to the server computer, effectively preventing duplicate transactions even if the user accidentally clicks the browser back button. It is possible to provide services that are highly responsive.

In the third invention and the sixth invention, in addition to the comparison between the first identifier and the second identifier, the third identifier calculated under a certain condition based on the first identifier and the second identifier is used. The client computer and the server computer compare the third identifier independently calculated under the same conditions. If they do not match, the access is rejected, so the security is dramatically improved and the third party is Unauthorized access due to impersonation or the like can be appropriately prevented, and personal information transmitted and received can be appropriately protected.

In the seventh and eighth inventions, the first identifier and the second identifier transmitted from the other computers are compared by the computer, and if the second identifiers do not match, the unauthorized second identifier signal is transmitted to the other computer. Since the computer and the storage medium for controlling the browser of another computer by transmitting the information to the computer have been constructed, the content provider can effectively prevent duplicate transactions and provide a highly responsive service. .

In the ninth, tenth and eleventh aspects,
The computer transmits the first identifier and the second identifier to the other computer, and the other computer that receives the first identifier and the second identifier transmits an unauthorized second identifier signal to the computer if it determines that the second identifier does not match. Since the computer, the storage medium and the transmission medium for disabling the function of the back button of the browser in response to this signal have been constructed, the user can enjoy the convenience of the conventional correction input,
In addition, it is possible to avoid disadvantages caused by duplicate transactions, and to receive services with excellent responsiveness.

[0036]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below in detail with reference to the drawings showing the embodiments. Embodiment 1 FIG. 1 is a schematic diagram showing a computer network of the present invention. The computer network in FIG. 1 includes server computers 1, 1... For providing electronic commerce and client computers 2, 2 for receiving electronic commerce.
…. The server computer 1 and the client computer 2 are mutually connected via a telephone line or the like.

In the case of a business providing online shopping, the server computer 1 stores a catalog of product services posted on a homepage, an order form, and the like. The server computer 1 of the company that provides the online bank transfer service stores various information such as a list of bank codes of the transfer destination posted on the homepage and the format of the bank transfer statement.

Further, the server computer 1 is caused to compare the first identifier 4 shown in FIG. 2, select whether to compare the second identifier 5, and make the second identifier 5 compare.
Is not transmitted to the client computer 2 and a storage medium 1a (such as a CD-ROM or DVD-ROM) storing a program for updating the second identifier 5 is stored in a hard disk (not shown) of the server computer 1. And so on. Such a program is loaded into a main memory (not shown) of the server computer 1 and executed.

A browser is installed in the client computer 2 in advance.
By downloading various types of information such as a purchase order format, a list of bank codes of transfer destinations, and a format of a bank transfer note, it is possible to browse these and perform electronic commerce using these.

The client computer 2 has:
A program for transmitting the first identifier 4 and the second identifier 5 shown in FIG. 2 to the server computer 1 and disabling the function of the back button of the browser based on the unauthorized second identifier signal from the server computer 1 is stored. Medium 2a
Are installed in an auxiliary storage device such as a hard disk (not shown) of the client computer 2. Such a program is loaded into a main memory (not shown) of the client computer 2 and executed.

Further, a transmission medium 2b in FIG. 1 is a coaxial cable, an optical fiber cable, a wireless communication cable in a computer network (LAN, WAN such as the Internet, a wireless communication network, etc.) system for transmitting and supplying program information as a carrier wave. A line, and a LAN connection device such as a router or a bridge. Such program information causes the first identifier 4 and the second identifier 5 shown in FIG. 2 to be transmitted to the server computer 1 and disables the function of the back button of the browser based on the unauthorized second identifier signal from the server computer 1. It is.
The user can download the program information stored in the server computer 1 to the auxiliary storage device of the client computer 2 via the transmission medium 2b. Similarly, the server computer 1 can download and use the same program information as the storage medium 1a from a computer (not shown) to the auxiliary storage device, instead of the storage medium 1a of the server computer 1.

FIG. 2 shows a format of the session identifier 3. As shown in FIG. 2, the session identifier 3 includes a first identifier 4 and a second identifier 5. When the client computer 2 accesses the server computer 1, the first identifier 4 is used by the server computer 1 to determine whether the user who transmitted the first identifier 4 is legitimate. The contents of the first identifier 4 do not change until the client computer 2 logs in to the server computer 1 and then logs out. On the other hand, the second identifier 5 is a value assigned in accordance with a browser session used by the client computer 2, and its content changes every time the client computer 2 accesses the server computer 1. For example, if the session currently displayed on the browser is the second identifier 5 = “1”, the next session to be displayed is the second identifier 5 =
It becomes "2".

The first identifier 4 and the second identifier 5 are, for example, 6
It is composed of 32 quaternary digits, and each value is determined by time, a keyword, and a random number. Therefore, the session identifier 3 is composed of 64 hexadecimal digits. A hexadecimal number is composed of, for example, lowercase letters “az”, uppercase letters “AZ”, numbers “0 to 9”, and two special characters (for example, “” and “”).

FIG. 3 is an explanatory diagram showing an outline of the present invention.
First, the first identifier 4 is transmitted from the client computer 2 by the first identifier transmitting means 7a, and the first identifier 4 of the server computer 1 is compared with the first identifier 4 stored in the server computer 1 to determine whether it matches. The determination is made by means 7. Subsequently, the selector 12 selects whether or not to compare the second identifier 5 transmitted from the client computer 2 by the second identifier transmitter 8a with the second identifier 5 stored in the server computer 1. When the comparison is made by comparing the second identifiers 5 with the selection means 12, the comparison is performed by the second identifier comparison means 8.
If it is determined that they match, the second identifier 5 is updated by the second identifier updating means 10 and transmitted to the client computer 2 by the updated second identifier transmitting means 11. If it is determined that the second identifiers 5 do not match, the client computer 2 is notified of the unauthorized second identifier signal transmitting means 13
To send an illegal signal. In response to the illegal signal, the client computer 2 disables the function of the back button 17 of the browser already clicked by the function disabling means 9. Further, the second identifier 5 is selected by the selecting means 12.
Is selected, the use of the browser back button 17 is uniformly permitted to the client computer 2.

FIG. 4 to FIG. 7 are flowcharts in the case where processing is performed using the second identifier 5 of the present invention. The processing flow will be described below in detail. First, the browser of the client computer 2 is currently displaying the first session. After viewing the first session, the user seeks new information and desires to shift to the second session. When requesting reception of the second session information, the first identifier 4 and the second identifier 5 are transmitted to the server computer 1 (step S4).
-1). In this case, the second identifier 5 corresponding to the first session of the browser is “1”. Server computer 1
The side determines by the first identifier comparing means 7 whether the first identifier 4 matches the first identifier 4 stored in the server computer 1 (step S4-2). If it is determined that the first identifier 4 does not match, it is an unauthorized access. As step S4-1
The processing is shifted to (A).

If the first identifier comparing means 7 determines that they match, the selecting means 12 (step S4-3) determines whether or not to compare the second identifier 5. This is not to disable the browser's back button 17 uniformly, but to make it selectable by providing the selection means 12 and to enable or disable the return button by setting the server computer 1. This is because This allows the user to use the browser in the same operating environment as before.

If it is selected in step S4-3 to compare the second identifier 5, the second identifier comparing means 8 determines whether the second identifier 5 matches the second identifier 5 stored in the server computer 1. A determination is made (step S4-4). The processing when it is determined that the second identifiers 5 do not match will be described later (B1). Since the comparison of the second identifier 5 is the first time, the server computer 1 stores "1" as an initial value. Then, in this example, since the second identifier 5 transmitted from the client computer 2 is “1”, it is determined that they match, and the server computer 1 updates the second identifier 5 to “2” by the second identifier updating means 10. (Step S4-5), the updated second identifier 5 is transmitted to the client computer 2 by the updated second identifier transmitting means 11, and the second session information is transmitted (Step S4-5, C1).
When the selecting means 12 does not select the second identifier 5, the process shifts to step S4-5 to perform the same processing as when the second identifier 5 is valid.

FIG. 5 is a flow chart when the process is shifted to the second session. By the process of step S4-5, the second session information is displayed on the browser of the client computer 2, and the fact that the second identifier 5 is "2" is stored (C1, step S5-1). Further, when the user wants to obtain the information of the next session (third session), the first identifier 4 and the second identifier 5 (currently “2”) are transmitted to the server computer 1 based on the reception request ( Step S5-2). Then, the process is executed in the same procedure as described above (step S5-3,
S5-4, S5-5, S5-6). In this case, the second identifier 5 transmitted from the client computer 2 is “2”, and the second identifier 5 stored in the server computer 1 is also “2”.
Determines that the transmitted second identifier 5 matches, updates the second identifier 5 to “3” by the second identifier updating means 10, and transmits the second identifier 5 updated to “3” to the client computer 2. Transmit (S5-6, C2). The processing when the second identifier 5 is not valid will be described later (step S5-5, B2).

FIG. 6 is a flow chart when the process is shifted to the third session. The updated second identifier 5 (currently “3”) and the third session information are transmitted from the server computer 1 (S5-6, C2), and the third session information is displayed on the browser of the client computer 2 (step). S6-1). Here, the process when the server computer 1 prohibits the process when the user tries to return to the second session by clicking the back button 17 of the browser is described below.

When the user clicks the return button 17, the process of shifting to the second session is started, and the server computer 1 determines whether or not to permit the shift process.
At this time, the second identifier 5 of the client computer 2 is changed from "3" to "2" corresponding to the second session information by clicking the return button 17, and this second identifier 5 ("2") is changed to the first identifier 4 (Step S6-2). Then, the same processing as described above proceeds (steps S6-3, S6-4, S6-6), and the second identifier 5 (currently “2”) transmitted by the second identifier comparing means 8 is sent to the server computer 1. It is determined whether it matches the stored second identifier 5 (currently “3”) (step S6-5). When the second identifier 5 is not compared and when it is determined that they match, the second session information is transmitted and the second identifier 5 updated to “4” is transmitted in the same manner as described above (step S6). -6).

Since the server computer 1 stores the second identifier 5 as “3”, the second identifier 5 information “2” transmitted from the client computer 2 must be matched by the second identifier comparing means 8. It is determined (steps S6-5, B3).

FIG. 7 is a flowchart when the second identifiers 5 do not match. The process proceeds from B1, B2, B3,... BN to step S7-1, and the server computer 1 transmits an unauthorized second identifier signal to the client computer 2. Client computer 2 receiving such a signal
Disables the function of the back button 17 of the browser already clicked (D1, D2, D3... DN).

FIG. 8 is an explanatory diagram of an online bank transfer utilizing the present invention. The browser of the client computer 2 displays a first session, that is, a screen for inputting a transfer destination and a transfer amount (step S8-1).
Here, the user enters the transfer destination and the transfer amount (step S8-2). At this time, if there is an error, the user can click the clear button 20 or the return button 17 to return to step S8-1 and make corrections (in this case, the server computer 1 is not accessed).

When the transfer destination and the transfer amount are input and the OK button 19 or the forward button 18 is clicked, the server computer 1 is accessed and the first identifier 4 and the second identifier 5 are compared. Is confirmed in a database storing deposit data of a bank (not shown) (step S8-3).
The second session information is transmitted to the client computer 2 (Steps S8-3, S8-4). Then, the second session information (transfer destination, transfer amount, transfer fee, etc.) is displayed on the browser of the client computer 2 (step S8-5).

Here (step S8-5), even if the user notices an error and clicks the return button 17 or the clear button 20, the setting is made so that the selection means 12 does not authenticate the second identifier 5, so that the authentication of the first identifier 4 is performed. If it is received, it is possible to return to the first session (step S8-1 or S8-2). If there is no error and the OK button 19 or the forward button 18 is clicked in step S8-5, the process proceeds to step S8-6 and the server computer 1
Executes the transfer business, and transmits confirmation information (third session information) to the client computer 2 to clarify that the transfer has been completed (step S8-7). Then, the content of the successful completion of the transfer is displayed on the browser of the client computer 2 (step S8-8).

Here, if the menu button 21 or the forward button 18 is clicked, the transaction is successfully completed. However, when the user clicks the back button 17 of the browser, the second identifier 5 is determined not to match (step S8-9) since the second identifier 5 is set to be compared by the selection means 12 in advance (step S8-9). The server computer 1 determines that the process has been performed (step S8-10), and transmits an unauthorized second identifier signal to the client computer 2. Then, the client computer 2 disables the function of the back button 17 that has already been clicked, and displays on the browser that it is not possible to return to the previous session (second session) (step S8-11). Then, when the user clicks the menu button 21 in step S8-11, the transaction is successfully completed. In the first and second sessions in which it is necessary to approve the correction in this way, the selection means 12 selects not to compare the second identifier 5, and conversely, there is a possibility that duplicate transfer may occur. In three sessions, selection means 1
In 2, the second identifier 5 is compared,
Duplicate transfer can be effectively prevented, and the browser can be used in the same operating environment as before.

Embodiment 2 FIG. 9 shows a format of a session identifier further using the third identifier 6. For example, the first identifier 4 is composed of 32 hexadecimal digits, the second identifier 5 is composed of 28 hexadecimal digits, and the third identifier 6 is composed of 4 hexadecimal digits. The session identifier composed of the identifier 6 is composed of 64 hexadecimal digits.

FIG. 10 is an explanatory diagram showing an authentication method when the third identifier 6 is used. The client computer 2 calculates the third identifier 6 by the third identifier calculating means 14. As a calculation method, for example, if the first identifier 4 is “1”
Assuming that it is 2 ”and the second identifier 5 is“ 34 ”, a numerical value obtained by adding the numbers of the respective digits, that is,“ 1 ”+“ 2 ”+“ 3 ”
+ “4” is calculated as “10”, and the third identifier 6 (“1
0 ”). This example is an example, and the third identifier 6 may be calculated using a more complicated method. Then, the third identifier 6 is transmitted to the server computer 1 by the third identifier transmitting means 15.

In the server computer 1, based on the first identifier 4 and the second identifier 5 transmitted from the client computer 2 by the third identifier calculating means 14, the same conditions as those of the third identifier calculating means 14 used by the client computer 2 are used. The third identifier 6 is calculated by the equation (“10” in this example). The third identifier 6 of the server computer 1 and the third identifier 6 transmitted from the client computer 2 are compared with the third identifier comparing means 16.
And verify whether there is any unauthorized access.

FIG. 11 is a flowchart in the case of performing authentication using the third identifier 6. The third identifier 6 is calculated based on the first identifier 4 and the second identifier 5 by the third identifier calculating means 14.
(Steps S11-1 and S11-2).
Then, the first identifier 4, the second identifier 5, and the third identifier 6 are transmitted to the server computer 1 (Step S11-
3).

The server computer 1 compares the transmitted first identifier 4 and second identifier 5 by the above-described method (step S11-4), and if it is determined that they do not match, shifts to abnormal processing (step S11-7). . If it is determined that they match, the first identifier 4 and the second identifier 5 transmitted from the client computer 2 are replaced with the server computer 1
The third identifier calculating means 14 of the client computer 2 calculates the third identifier 6 by the same method as the third identifier calculating means 14 of the client computer 2 (step S11-5). Then, the third identifier 6 calculated on the server computer 1 side is compared with the third identifier 6 calculated on the client computer 2 side (step S11-6).

Here, if the mutual third identifiers 6 do not match, it is determined that the unauthorized access has been made by a third party, and abnormal processing is performed (step S11-7). If the mutual third identifiers 6 match, a process of permitting access is performed (step S1).
1-8).

The second embodiment is configured as described above, and the other configurations and operations are the same as those of the first embodiment. Corresponding portions are allotted with the same reference numerals, and description thereof is not repeated. Omitted.

[0064]

As described in detail above, in the first and fourth aspects of the present invention, in addition to the first identifier whose value does not change from login to logout, the browser stored in the client computer A second identifier corresponding to the session is provided, and these are compared between the client computer and the server computer. When the compared second identifiers do not match, the function of the back button of the browser is disabled. So if a user accidentally clicks the browser's back button, that feature will be disabled, effectively preventing duplicate transactions,
In addition, a service with excellent responsiveness can be provided.
In addition, since the server computer is provided with a means for selecting whether to compare the second identifier between the server computer and the client computer, the content provider may permit use of the browser's back button depending on the content of the business. And the case where the use is prohibited, can be controlled separately, and computer network electronic commerce such as the Internet can be smoothly operated.

In the second and fifth inventions, each time a client computer accesses the server computer, the second identifier stored in the server computer and the client computer is updated, and the second identifier not updated is updated. Disables the browser's back button when sent from the client computer to the server computer, effectively preventing duplicate transactions even if the user accidentally clicks the browser's back button. Moreover, it is possible to provide a service with excellent responsiveness.

According to the third and sixth aspects of the present invention, in addition to the comparison of the first identifier and the second identifier, a third identifier calculated under a certain condition based on the first identifier and the second identifier is provided. Since the client computer and the server computer compare the third identifier uniquely calculated under the same conditions, and if they do not match, the access is rejected, so that the security is dramatically improved and the third party's Unauthorized access due to impersonation or the like can be appropriately prevented, and personal information being transmitted and received can be appropriately protected.

In the seventh and eighth inventions, the first identifier and the second identifier transmitted from the other computers are compared by the computer, and if the second identifiers do not match, the unauthorized second identifier signal is transmitted to the other computer. Since the computer and the storage medium for controlling the browser of another computer by transmitting the information to the computer have been constructed, the content provider can effectively prevent duplicate transactions and provide a highly responsive service. .

In the ninth, tenth and eleventh inventions,
The computer transmits the first identifier and the second identifier to the other computer, and the other computer that receives the first identifier and the second identifier transmits an unauthorized second identifier signal to the computer if it determines that the second identifier does not match. Since the computer, the storage medium and the transmission medium for disabling the function of the back button of the browser in response to this signal have been constructed, the user can enjoy the convenience of the conventional correction input,
In addition, it is possible to avoid disadvantages caused by duplicate transactions, and to receive services with excellent responsiveness.

[Brief description of the drawings]

FIG. 1 is a schematic diagram showing a computer network of the present invention.

FIG. 2 is a format of a session identifier.

FIG. 3 is an explanatory diagram showing an outline of the present invention.

FIG. 4 is a flowchart when a process is performed using a second identifier according to the present invention.

FIG. 5 is a flowchart when a transition is made to a second session.

FIG. 6 is a flowchart in a case where the process has shifted to a third session.

FIG. 7 is a flowchart when the second identifiers do not match.

FIG. 8 is an explanatory diagram of an online bank transfer utilizing the present invention.

FIG. 9 is a format of a session identifier further using a third identifier.

FIG. 10 is an explanatory diagram showing an authentication method when a third identifier is used.

FIG. 11 is a flowchart in the case of performing authentication using a third identifier.

FIG. 12 is a flowchart in the case of performing authentication using one identifier.

FIG. 13 is a flowchart when a transition is made to the second and third sessions.

FIG. 14 is an explanatory diagram showing a flow of transactions when online bank transfer is performed based on only one identifier.

FIG. 15 is a schematic diagram showing a computer network.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Server computer 1a, 2a Storage medium 2 Client computer 2b Transmission medium 4 First identifier 5 Second identifier 6 Third identifier 7 First identifier comparing means 8 Second identifier comparing means 9 Function disabling means 10 Second identifier updating means 11 updated second identifier transmitting means 12 selecting means 13 illegal second identifier signal transmitting means 14 third identifier calculating means 15 third identifier transmitting means 16 third identifier comparing means 17 return button

 ──────────────────────────────────────────────────の Continuing from the front page (72) Inventor Shogo Komatsu 271 Eiraku Onsencho, Tottori City, Tottori Prefecture F-term in Fujitsu Tottori System Engineering Co., Ltd. 5B049 AA05 BB11 BB46 CC10 CC36 DD05 EE05 FF01 GG02 GG04 GG07 GG08 5B085 AE01 BE07 BG07 CE03 CE04 5K034 AA19 CC01 DD01 EE10 FF01 GG02 GG06 HH14 HH17 LL01

Claims (11)

[Claims] 1. A communication management method between a client computer and a server computer constituting a computer network, wherein the contents do not change until the client computer logs in to the server computer and then logs out. Comparing the first identifier transmitted to the server computer with the first identifier stored in the server computer; and, from the client computer, the server corresponding to a browser session stored in the client computer. Selecting whether or not to compare a second identifier transmitted to a computer with a second identifier stored in the server computer; and Comparing the second identifier transmitted to the server computer with the second identifier stored in the server computer, and if the compared second identifier is different, a back button of a browser stored in the client computer Disabling the function of the communication. 2. The method according to claim 1, further comprising: updating a second identifier stored in the server computer; and transmitting the updated second identifier to the client computer. Communication management method described. Calculating a third identifier based on the first and second identifiers stored in the client computer; transmitting the third identifier to the server computer by the client computer; Calculating a third identifier for the server computer based on the first identifier and the second identifier transmitted from the client computer; andthe third identifier for the server computer and transmitted from the client computer. 3. The communication management method according to claim 1, further comprising: comparing the third identifier with the third identifier. 4. A communication management system between a client computer and a server computer constituting a computer network, wherein the server computer does not change its contents until the client computer logs in to the server computer and then logs out. A first identifier transmitted from the client computer to the server computer, a first identifier comparing means for comparing the first identifier stored in the server computer, and a browser session stored in the client computer Corresponding, selecting means for selecting whether to compare the second identifier transmitted from the client computer to the server computer and the second identifier stored in the server computer, A second identifier comparing means for comparing a second identifier transmitted from the client computer to the server computer with a second identifier stored in the server computer; if the compared second identifier is different, the client computer And an unauthorized second identifier signal transmitting means for transmitting an unauthorized second identifier signal to the client computer, wherein when the unauthorized second identifier signal is received from the server computer, the client computer is stored in the client computer. A communication management system comprising a function disabling means for disabling a function of a back button of a browser. 5. The server computer, comprising: a second identifier updating unit for updating a second identifier stored in the server computer; and an updated second identifier transmitting unit for transmitting the updated second identifier to a client computer. The communication management system according to claim 4, further comprising: 6. The third computer, wherein the client computer calculates a third identifier based on the first and second identifiers stored in the client computer; A third identifier transmitting means for transmitting the third identifier to the server computer, wherein the server computer calculates a third identifier based on the first identifier and the second identifier transmitted from the client computer. A third identifier calculating means, comprising: a third identifier comparing means for comparing the third identifier calculated by the third identifier calculating means with a third identifier transmitted from the client computer. The communication management system according to 4 or 5. 7. A computer constituting a computer network, wherein a first identifier transmitted from the other computer remains unchanged until another computer logs in and then logs out, and a stored first identifier. First identifier comparing means for comparing a second identifier transmitted from the other computer with a stored second identifier corresponding to a browser session stored in the other computer. Selecting means for selecting whether or not to perform the operation; second identifier comparing means for comparing the second identifier transmitted from the other computer with the stored second identifier; when the compared second identifiers are different Comprises an unauthorized second identifier signal transmitting means for transmitting an unauthorized second identifier signal to the other computer, The computer on. 8. A computer constituting a computer network, comprising: a first identifier transmitting means for transmitting a first identifier whose content does not change from logging in to another computer to logging out to the other computer; A second identifier transmitting unit that transmits the second identifier stored in correspondence with the session to the other computer; and a function of a back button of the browser based on the unauthorized second identifier signal transmitted from the other computer. A computer comprising: a function disabling unit that disables the function. 9. A computer program for causing a computer constituting a computer network to manage a session, and stores the program in a storage medium readable by the computer until another computer logs in to the computer until the computer logs out. Program code means for comparing the first identifier transmitted from the other computer with the stored first identifier, the content of which does not change; and a session of a browser stored in the other computer in the computer. Corresponding to the second identifier transmitted from the other computer, and program code means for selecting whether or not to compare the stored second identifier, and the computer is transmitted from the other computer The second identifier and the stored A computer program including program code means for comparing two identifiers, and program code means for causing the computer to transmit an unauthorized second identifier signal to the other computer when the compared second identifiers do not match is stored. A storage medium readable by a computer, comprising: 10. A computer program for causing a computer constituting a computer network to manage a session, and stores the program in a computer-readable storage medium until the computer logs in to another computer and then logs out. Program code means for transmitting a first identifier whose content does not change to the other computer, and program code means for causing the computer to transmit a second identifier stored corresponding to a browser session to the other computer. Wherein the computer stores a computer program including program code means for disabling a function of a back button of a browser based on an unauthorized second identifier signal transmitted from the other computer. Computer-readable storage medium. 11. A transmission medium used in a computer network, said program code means for causing a computer to transmit to said other computer a first identifier whose contents do not change until the user logs out and logs out of said other computer. Program code means for causing the computer to transmit a second identifier stored corresponding to a browser session to the other computer; and an unauthorized second identifier signal transmitted from the other computer to the computer. A computer code including program code means for disabling a function of a back button of a browser based on the computer program.