JP2001306514A - Home page truth maintaining method, device for executing the same and recording medium recording processing program therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technique, capable of deciding whether a certain home page is one, to which unauthorized actions are frequently performed by malicious users. SOLUTION: Concerning the home page truth maintaining method for maintaining the truth of a home page, this method has a step for detecting the illegal action to the relevant home page by comparing authentication information for authenticating contents when registering or updating the home page with the present contents of the relevant home page, a step for counting the number of times of unauthorized action detection, showing how many times the unauthorized action, is detected concerning the relevant home page, and a step for controlling the execution of authentication processing of the relevant home page, corresponding to the number of times of illegal action detection of that home page.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a homepage authenticity maintenance device for maintaining the authenticity of a homepage, and more particularly to a technology effective when applied to a homepage authenticity maintenance device for stopping authentication processing of a homepage with a large number of fraud detections. It is about.

[0002]

2. Description of the Related Art Hitherto, individuals, government offices and many companies have established homepages on WWW (World Wide Web) server devices on the Internet to transmit various information. In addition, various electronic commerce transactions, such as accepting applications for purchasing various products using such Internet homepages or selling digital contents directly through the homepages, have been actively performed.

[0003] On the other hand, since such a home page can be viewed by anyone as long as it is connected to the Internet, there is a risk that the home page may be targeted for unauthorized access by a third party. If the price of a product is tampered with on a homepage used for various electronic commerce, it becomes difficult for a general customer to detect the tampering. Therefore, a method has been considered in which an electronic mark embedded with information for detecting fraud on a homepage is attached to the homepage, and the information in the electronic mark is used to verify whether the contents of the homepage have been tampered with. .

Japanese Patent Application Laid-Open No. 2000-78125 discloses a method of generating authenticatable electronic data that enables strict authentication of the authenticity of electronic data and visually expresses the authenticity to a user of the electronic data. No., published in Japanese Unexamined Patent Publication No. The outline is electronic mark B such as Web page and trademark.
After embedding a digital signature to the authentication information for authenticating the electronic mark A as an invisible electronic watermark in the electronic mark A, the electronic mark A that visually expresses the authenticity is visually embedded in the electronic mark B. Is to be embedded as

[0005]

In the above-mentioned conventional method using an electronic mark in which information for detecting fraud is embedded, when tampering of the homepage is detected, it is notified that the homepage is tampered. Therefore, we do not consider how frequently the homepage or the provider that provides the homepage has been tampered with, and that the homepage is flooded with malicious marks by malicious users. Could not be determined whether it is a homepage.

An object of the present invention is to solve the above-mentioned problem and to provide a technique capable of determining whether a certain homepage is a homepage in which a malicious user is fraudulently flooded.

[0007]

SUMMARY OF THE INVENTION According to the present invention, in a homepage authenticity maintaining apparatus for maintaining the authenticity of a homepage, execution of authentication processing of the homepage is controlled in accordance with the number of times the homepage is detected as unauthorized.

[0008] In the homepage authenticity maintenance device of the present invention, when IM (Internet-Marks) in which authentication information is embedded is attached to the HTML data received from the WWW server, the homepage authenticity of the homepage that received the HTML data is attached. The number of past fraud detections for the URL and the total number of past detections on the WWW server where the homepage is established are checked. If the number of times is equal to or less than a predetermined number, the authentication process using IM is performed. If the number of times of detecting fraud or the total number of times of detection is larger than the predetermined number, the number of times is larger than the predetermined number. Is displayed to stop the authentication process and stop browsing the home page.

As described above, according to the homepage authenticity maintaining apparatus of the present invention, the execution of the authentication processing of the homepage is controlled in accordance with the number of times the homepage has been detected illegally. It is possible to determine whether the homepage is flooding.

[0010]

BEST MODE FOR CARRYING OUT THE INVENTION A homepage authenticity maintaining apparatus according to an embodiment for maintaining authenticity of a homepage by controlling authentication processing of the homepage according to the number of times of detection of fraud will be described below.

FIG. 1 is a diagram showing a schematic configuration of a homepage authenticity maintenance system according to this embodiment. As shown in FIG. 1, when trying to browse a certain homepage, the client device 100, which is the homepage authenticity maintaining device of the present embodiment, uses the homepage detected by the authentication information embedded in the IM of the homepage. The number of past fraud detections and the WWW where the website is established
With reference to the past total number of times of detection by the server apparatus 110, it is determined whether or not to perform the current authentication processing of the homepage according to the number of times. If the number of past fraud detections on the home page or the total number of past detections on the WWW server device 110 where the home page is established is larger than a predetermined number, the authentication process is stopped and browsing of the home page is stopped. Abort.

FIG. 2 shows a client device 10 according to the present embodiment.
FIG. 2 is a diagram showing a schematic configuration of a zero. As shown in FIG. 2, the client device 100 of the present embodiment includes a CPU 201, a memory 202, a magnetic disk device 203, and an input device 20.
4, an output device 205, a CD-ROM device 206,
And unauthorized use information 207.

The CPU 201 is a client device 100
This is a device that controls the entire operation. The memory 202 is a storage device that loads various processing programs and data for controlling the operation of the entire client device 100.

The magnetic disk device 203 is a storage device for storing the various processing programs and data. The input device 204 is a device that performs various inputs for controlling the execution of the authentication processing of the homepage according to the number of times of detecting the fraud.

The output device 205 is a device that performs various outputs accompanying browsing control of a homepage according to the number of times of detecting fraud. The CD-ROM device 206 is a device that reads the contents of a CD-ROM in which the various processing programs are recorded.

The fraudulent use information 207 includes the number of fraud detections indicating the number of frauds detected in the past at the URL of a specific homepage, and the number of frauds detected in the past in the WWW server apparatus 110 in which the homepage is established. This is information that stores the total number of times of detection indicating the total of.

The client device 100 has an authentication processing unit 210, a fraud detection frequency counting processing unit 211, and an authentication control processing unit 212.

The authentication processing section 210 is a processing section for comparing the authentication information for authenticating the content at the time of registration or update of the home page with the current content of the home page, and detecting an improper operation on the home page. The fraud detection frequency counting section 211 is a processing section that counts the number of fraud detections indicating the number of frauds detected for the homepage. The authentication control processing unit 212 is a processing unit that controls the execution of the authentication processing of the homepage according to the number of times the homepage is detected as unauthorized.

The client device 100 is connected to the authentication processing unit 21
0, the program for functioning as the fraud detection frequency counting processing unit 211 and the authentication control processing unit 212 is a CD-RO
After being recorded on a recording medium such as M and stored on a magnetic disk or the like, it is assumed to be loaded into a memory and executed. The recording medium for recording the program may be a recording medium other than the CD-ROM.

FIG. 3 shows the client device 10 of the present embodiment.
9 is a flowchart illustrating a processing procedure of No. 0. As shown in FIG. 3, the client device 100 receives the contents of the requested home page from the WWW server device 110, and performs a process of controlling the execution of the authentication process according to the number of times of detecting the fraud on the home page.

In step 301, the client device 100
WWW browsers allow users to access URLs (Uniform Resourc
e Locators) and check if the user
If L is entered, the URL is accepted and step 3
Go to 02. In step 302, a request for displaying the page of the URL received in step 301 is transmitted to the WWW server device 110 of the destination indicated by the URL.

In step 303, it is checked whether or not HTML data for displaying the URL home page has been received as a result of the transmitted request.
If TML data has been received, the process proceeds to step 304.

In step 304, it is checked whether or not an IM is pasted in the HTML data received in step 303. If the IM is pasted, the process proceeds to step 305. If the IM is not pasted, the process proceeds to step 305. Proceed to 307.

In step 305, the authentication control processing section 212
Refers to the unauthorized use information 207, checks the number of past unauthorized detections for the URL of the homepage that has received the HTML data, and the total number of past detections in the WWW server apparatus 110 in which the homepage is established, and checks them. It is determined whether the number is equal to or less than a predetermined number.

FIG. 4 is a diagram showing an example of the unauthorized use information 207 of this embodiment. As shown in FIG. 4, the fraudulent use information 207 of the present embodiment includes the number of fraud detections indicating the number of frauds detected in the past at the URL of a specific homepage, and the WWW server apparatus 110 on which the homepage is established.
Stores the total number of times of detection indicating the total number of times of fraud detected in the past.

If the result of the determination in step 305 is that the number of times of fraud detection or the total number of times of detection is not more than a predetermined number of times, the process proceeds to step 306, and if the number of times of fraud detection or the total number of times of detection is greater than the predetermined number of times. Is Step 308
Proceed to.

In step 306, the authentication processing unit 210 reads out the URL and the characteristic value of the home page by referring to the authentication information in the IM pasted in the home page received in step 303, and reads out the URL of the received HTML data. It is checked whether or not the contents of the home page have been falsified by comparing with the URL or its characteristic value. If tampering of the contents of the homepage is not detected, the process proceeds to step 307, and if tampering of the contents of the homepage is detected, the process proceeds to step 309.

In step 307, the homepage is browsed according to the HTML data received in step 303. In step 308, the UR of the home page
L, or a message indicating that the authentication is stopped because the total number of past detections in the WWW server apparatus 110 in which the homepage is established or the total number of past detections in the WWW server apparatus 110 in which the homepage is established is displayed. Abort.

In step 309, the fraud detection frequency counting section 211 reads the fraud detection frequency for the URL of the homepage and the total detection frequency in the WWW server apparatus 110 where the homepage is established from the fraudulent information 207, and Is added to the number of times and stored in the unauthorized use information 207. If the fraudulent use information 207 does not include data on the number of fraud detections for the URL of the homepage or the total number of detections on the WWW server apparatus 110 where the homepage is established, a new record of those numbers is stored. Generate and set the initial value "1".

As described above, in the present embodiment, the execution of the authentication process is controlled in accordance with the number of times the URL of the homepage is detected as illegal or the total number of times detected by the WWW server apparatus 110 in which the homepage is established. Even if the user with the password floods the fraudulent mark, it is possible to suppress an increase in the load of the authentication process and stop browsing a frequently fraudulent homepage.

Also, in this embodiment, since the total number of detections by the WWW server apparatus 110 in which the homepage where the fraud is detected is also counted, the area (provider) on the network where many fraudulent users are found , Etc.) to assist in preventing unauthorized use.

From these facts, in the present embodiment, the social infrastructure of the reliability of the homepage by the Internet mark can be maintained, and even if the illegal use mark is flooded, the user's operability is not significantly impaired. This makes it possible to use marks with high added value.

As described above, according to the homepage authenticity maintaining apparatus of the present embodiment, the execution of the authentication processing of the homepage is controlled in accordance with the number of times the homepage has been detected illegally. It is possible to determine whether the homepage is fraudulent and fraudulent.

[0034]

According to the present invention, since the execution of the authentication processing of a home page is controlled in accordance with the number of times the home page has been detected, whether or not a certain home page is a home page that is fraudulently flooded by malicious users. Can be determined.

[Brief description of the drawings]

FIG. 1 is a diagram showing a schematic configuration of a homepage authenticity maintenance system of an embodiment.

FIG. 2 is a diagram illustrating a schematic configuration of a client device 100 of the present embodiment.

FIG. 3 is a flowchart illustrating a processing procedure of the client device 100 according to the embodiment.

FIG. 4 is a diagram showing an example of the unauthorized use information 207 of the embodiment.

[Explanation of symbols]

Reference Signs List 100 client device, 110 WWW server device, 201 CPU, 202 memory, 203 magnetic disk device, 204 input device, 205 output device, 2
06 ... CD-ROM device, 207 ... Unauthorized use information, 21
0: authentication processing unit, 211: fraud detection frequency counting processing unit, 2
12: Authentication control processing unit.

Claims (3)

[Claims] [Claim 1] In a homepage authenticity maintaining method for maintaining the authenticity of a homepage, the authentication information for authenticating the content at the time of registration or update of the homepage is compared with the current content of the homepage, and the unauthorized operation on the homepage is performed. Detecting
Homepage authenticity comprising: a step of counting the number of fraud detections indicating the number of frauds detected for the homepage; and a step of controlling execution of authentication processing of the homepage according to the number of fraud detections of the homepage. Sex maintenance method. 2. A homepage authenticity maintaining device for maintaining the authenticity of a homepage, in which authentication information for authenticating the content at the time of registration or update of the homepage is compared with the current content of the homepage, and illegality of the homepage is verified. An authentication processing unit for detecting the number of frauds detected for the home page, a fraud detection count processing unit for counting the number of fraud detections indicating the number of frauds detected for the home page, and executing authentication processing of the home page according to the number of fraud detections for the home page. A homepage authenticity maintaining device comprising: an authentication control processing unit for controlling. 3. A computer-readable recording medium storing a program for causing a computer to function as a homepage authenticity maintaining device for maintaining the authenticity of a homepage. An authentication processing unit that compares the information with the current content of the homepage to detect fraud on the homepage; a fraud detection count processing unit that counts the number of fraud detections indicating the number of frauds detected on the homepage; A recording medium having recorded thereon a program for causing a computer to function as an authentication control processing unit that controls execution of authentication processing of the homepage in accordance with the number of times of detection of fraud on the homepage.