JP2002149496A - Web server device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a Web server device capable of preventing any erroneous Web contents from being made open to the public by quickly detecting that the Web contents have been altered. SOLUTION: When a Web contents provider provides Web contents through a network to a user, preliminarily registered characteristic information related with data included in the Web contents is compared with the characteristic information of the data which are being made into public at present so that an alternation of the Web contents can be detected in the server of the provider. When the alternation of the Web contents is detected, the original Web contents or preliminarily prepared alternative Web contents are provided to the user.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a Web server device, and more particularly, to a Web server device capable of coping with malicious alteration of Web contents.

[0002]

2. Description of the Related Art In recent years, Web contents can be easily used via a network such as the Internet, and the number of users is increasing year by year. While Web content can be easily used in this way, unauthorized access to the network causes Web
Tampering with content is increasing rapidly.

[0003] Even if Web contents are falsified,
It is difficult for an e-content provider to immediately detect tampering, and a method of detecting such tampering has not been established at present. If the user does not notice that the Web content has been tampered in this way, the tampered and erroneous content is disclosed, and the Web content provider suffers disadvantage.

[0004]

Conventionally, as a method of detecting tampering of Web contents, there is a method of providing a client with a tampering detection function and detecting Web contents. However, in this method, it takes a long time to detect tampering, and it is not possible to quickly detect tampering of the Web, and the contents of the tampered and erroneous contents are disclosed, and the provider of the Web contents suffers disadvantages. Could be

[0005] Further, in this method, only the tampering of the Web contents is detected, and post-processing of the tampered Web contents is not performed. Therefore, it is not possible to repair the falsified and erroneous contents, and there is a possibility that the contents will be disclosed as erroneous. The present invention has been made in view of the above point, and an object of the present invention is to provide a Web server device that quickly detects even if Web content has been tampered with and prevents erroneous contents from being disclosed.

[0006]

According to the present invention, there is provided a Web server device comprising: first storage means for storing Web contents publicly provided on a network; and second storage means for storing characteristic information of the Web contents. Control means for acquiring characteristic information of the Web content stored in the first storage means and comparing it with the characteristic information of the Web content stored in the second storage means to detect tampering. It is characterized by.

[0007] Further, the control means, when detecting tampering of the Web content, publicly provides a substitute Web content, thereby providing erroneous information to the user or making the user uneasy. Absent. W instead of the above
Since the eb content is for replacement prepared in advance, the capacity of the storage file can be reduced.

[0008] When the control means detects tampering of the Web content, it informs the administrator of the Web server apparatus so that the administrator can promptly cope with the tampering of the Web content. Since the characteristic information is based on text data, the capacity of a file for storing the characteristic information can be reduced, and the characteristic information comparison process can be performed with a small load.

[0009]

DESCRIPTION OF THE PREFERRED EMBODIMENTS In a Web server device of the present invention,
When a Web content provider and an administrator who manages the Web content create or modify the Web content, the Web content is managed as Web content management information, and the current Web content and the Web content are periodically managed by the administrator. Compare with management information. If the comparison results do not match, it is determined that the Web content has been tampered with, and log information indicating that tampering has been detected is left.
The web content provider and the web content manager are notified of the falsification.

[0010] Further, even when a user of the Web content accesses, the current Web content is compared with the Web content management information. In this case as well, if the comparison results do not match, it is determined that the Web content has been tampered with, log information indicating that tampering has been detected is left, and the Web content provider and the Web content manager have tampered with the log information. Notify that.

When tampering is detected, a Web content user automatically displays Web content prepared in advance so as not to be disadvantageous to the provider. As a result, tampering of Web contents can be efficiently detected, and the profit of the provider can be protected without displaying the tampered contents. Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a diagram showing a We according to an embodiment of the present invention.
It is a schematic diagram for explaining b server apparatus. FIG.
It is a system configuration diagram showing a server group of a provider in a Web server device concerning one embodiment of the present invention. FIG.
FIG. 4 is a diagram showing a Web content management information file table stored in a Web content management storage device of a provider server. FIG. 4 is a view showing a linked content management information file table stored in the linked content management storage device of the server of the provider.

As shown in FIG. 1, a server group 10 of providers who publish Web contents on a network 50,
The computer of the user 20 viewing the Web content is connected to a network, for example, communication lines 30 and 40 such as the Internet. Further, the Web content management information file and the link destination content management information file may include not only text data but also data such as image data and audio data.

The provider server 10 has the configuration shown in FIG. The server 10 includes a communication connection mechanism 120 connected to the communication line 30, Web server software 60 connected to the communication connection mechanism 120, a check mechanism 70 for checking the Web server software 60,
Web content management mechanism 8 for managing web content
0 and W containing the Web content management information file
Web content management storage device 100, link destination management storage device 110 storing a link destination content management information file, and storage device 9 storing the created web content file and related link destination content file
0.

The communication connection mechanism 120 is not particularly limited as long as it can be connected to the external communication line 30. There is no particular limitation on the Web server software 60 as long as it can display text data and image data on a homepage.

The check mechanism 70 is provided at the server 10 of the provider.
It checks for falsification of Web contents within the server, and has a contents check function 71 for checking the contents of the contents and a link destination check function 72 for checking the link destination. Web content management mechanism 8
No. 0 is provided with a Web content characteristic information acquisition function 81 for acquiring characteristic information of Web contents and a Web content characteristic information storage function 82 for storing characteristic information of Web contents.

The web content management storage device 100
The link destination management storage device 110 is a storage device that stores the Web content management information file table as shown in FIG. 3, and the storage device that stores the link destination content management information file table as shown in FIG. The device 90 is a storage device that stores a Web content file created for public offering and a related link destination content file.

Therefore, first, the Web contents management mechanism 80 acquires characteristic information of Web contents, for example, characteristic information which can specify image data such as partial image information and color information in image data, and stores the information. We
b Store in the content management storage device 100. afterwards,
The check mechanism 70 compares the characteristic information acquired from the Web content file that is being made publicly available with the previously stored characteristic information to detect tampering. In this way, by not using all of the image data as a comparison target, but making only the characteristic information that can specify the image data as a comparison target, the load of the arithmetic processing can be reduced.

Next, the characteristic information obtained from the link destination (for example, the link destination from which image data is obtained) by the Web content management mechanism 80 is stored in the link destination management storage device 11.
0 is stored. After that, the check mechanism 70 compares the characteristic information acquired from the publicly provided link destination content file with the previously stored characteristic information to detect tampering.

When tampering is detected, an original display screen for backup is displayed, or a substitute display screen prepared in advance is displayed. Further, for example, when image data is tampered with on a display screen including text data and image data, a substitute display screen is displayed, and on the other hand, the image data is not tampered and the text data is tampered with. In this case, the original image data can be used as it is.

Further, the characteristic information may be information representing the characteristic based on all or a part of the text data, information based on all or a part of the image data, or a combination thereof. Specifically, it may be the data length, the data itself at a specific position, or the specific data, for example, the number of characters “A” and its position, and the like.

The check can be periodically performed synchronously or asynchronously with the time when the user (client) accesses. For example, alteration detection of the Web content may be performed in synchronization with the user's access, or alteration detection of the Web content may be performed periodically (asynchronously) regardless of the access of the user. Further, the alteration of the Web content may be detected when the number of accesses is small irrespective of the user's access. In this way, by detecting tampering of Web contents when the number of accesses is small, it is possible to reduce the load on the server of the provider.

The computer of the user 20 has a communication line 4
Communication connection mechanism 140 and communication connection mechanism 14 that connect to
0 connected to the Web browser software 130. The communication connection mechanism 140 is not particularly limited as long as it can be connected to the external communication line 40. The Web browser software 130 is not particularly limited as long as it can display a homepage on a user's computer. Next, a processing procedure of the Web server device of the present invention based on the above configuration will be described.

FIG. 6 is a flowchart showing a processing procedure for creating and modifying Web contents. Also, FIG.
5 is a flowchart illustrating a processing procedure for displaying Web content in the Web server device according to the embodiment of the present invention. FIG. 8 is a flowchart showing a procedure for periodically performing a tampering check in the Web server device according to the embodiment of the present invention.

The provider creates and modifies the Web content file in the server group 10 of the provider (step S10), and stores the created Web content file and the related link destination content file in the storage device 90 (step S10). S11).

In this case, in order to prevent unauthorized alteration of the Web contents, the Web contents management mechanism 8
The characteristic information of the Web content file and the link destination content file is acquired by the Web content characteristic information acquisition function 81 of No. 0 (step S12, step S1).
4). Also, the characteristic information of the Web content file and the link destination content file acquired by the Web content characteristic information acquisition function 81 is stored in the Web content management storage device 100 and the link destination management storage device 110 by the Web content management device.
The content is stored by the content characteristic information storage function 82 (step S13, step S15).

Next, the operation between the provider and the user will be described with reference to FIG. The user connects to the Web server software 60 of the server group 10 of the administrator in order to view the information of the Web contents publicly provided by the provider from the Web browser software 130 of the computer 20 of the user. In this case, the user's computer 20
Requests Web content information from the provider server group 10 (step S20), and the requested provider server group 10 receives the request (step S21).

The server of the provider that has received the request is a Web server.
The content file is acquired, and the Web content management function 80 of the Web content management mechanism 80 acquires the W
Information A such as a characteristic value of the eb content file is acquired (step S22). Next, the content check function 71 of the check mechanism 70 executes the Web content management storage device (database) 100
Information B such as characteristic values of Web contents stored at the time of content creation and modification is acquired (step S2)
3). Thereafter, the checking mechanism 70 compares the information A and the information B to determine whether the information A and the information B match (step S24).

If the information A being provided publicly and the information B stored in advance do not match, the fact that tampering has been detected is notified to the administrator and the provider, and log information is acquired and stored (step S30). ). In this case, it is necessary to provide the Web content information to the user. However, providing incorrect information lowers the trust of the provider, and therefore cannot provide incorrect information. For this reason, an original Web content file that has been backed up or a substitute Web content file prepared in advance is searched and generated (step S31), and these web content files are passed to the user (step S32) and used. Browser software 1 of the user's computer 20
30 is displayed (step S33).

On the other hand, if the information A currently provided to the public matches the information B stored in advance, the link destination content file of the requested Web content file is obtained, and the Web content management mechanism's Web content characteristic is acquired. The information acquisition function 81 acquires information A such as a characteristic value of a linked content file (step S25). Next, the link destination check function 72 of the check mechanism 70
Web content management storage device (database) 110
The information B such as the characteristic value of the linked content file stored at the time of content creation and correction stored in the file is acquired (step S26). Then, check mechanism 7
0, the information A and the information B are compared, and the information A and the information B are compared.
Is determined whether or not they match (step S2).
7).

If the information A being provided to the public and the information B stored in advance do not match, the fact that tampering has been detected is notified to the administrator and the provider, and log information is acquired and stored (step S30). ). In this case, it is necessary to provide the Web content information to the user. However, providing incorrect information lowers the trust of the provider, and therefore cannot provide incorrect information. Therefore, the original linked destination content file that has been backed up or a substitute linked destination content file prepared in advance is searched and generated (step S31), and these linked destination content files are passed to the user (step S3).
2) Display on the Web browser software 130 of the user's computer 20 (step S33).

If the information A being provided to the public matches the information B stored in advance, these Web content files are transferred to the user (step S28), and the Web content file is sent to the Web browser software 130 of the computer 20 of the user. It is displayed (step S29). The above-described falsification detection is periodically performed inside the server group irrespective of the access of the user so that the load is not applied to the server group 10 of the provider.
Check the Web content file and the link destination content file.

In this case, as shown in FIG. 8, all the Web content files are linked with the Web content characteristic information acquisition function 81 of the Web content management mechanism 80 and the content check function 71 and the link destination check function 72 of the check mechanism 70. It is determined whether all the characteristic information of the destination content file and the information stored at the time of creation and modification have been confirmed (step S40).

In this case, if all the confirmations have not been completed, the characteristic information (B) of the Web content file and the link destination content file stored in advance is obtained, and the characteristic information (B) and the disclosure are obtained. The Web content file being provided is compared with the characteristic information (A) of the linked content file (steps S41 to S4).
3).

If the characteristic information (A) and the characteristic information (B) do not match in the comparison, that is, if tampering is detected, the fact that the tampering has been performed is notified to the administrator and the provider.
The log information is saved (step S44), and a falsification flag indicating that the log has been tampered is added to the Web content management information file and the link destination content management information file (step S45). When all confirmations have been completed, the confirmation completion flag is added to the Web content management information file and the link destination content management information file in the same manner as the falsification flag. When all the Web content files and the link destination content files have been confirmed, the process ends.

As described above, the Web according to the above embodiment is
According to the server device, it is possible to quickly and efficiently detect tampering of Web contents, prevent display of tampered contents, and protect a profit of a provider.
The present invention is not limited to the above embodiment, and can be implemented with various modifications. For example, in the above embodiment, the case where the falsification detection of the property information of the content is performed before the falsification detection of the property information of the link destination is described. Is performed prior to the detection of tampering of the characteristic information of the content. The contents of the tables shown in FIGS. 3 and 4 are all examples, and there are no particular restrictions on the items to be managed.

[0037]

As described above, the Web server apparatus according to the present invention can quickly and efficiently detect tampering of Web contents, prevent display of tampered contents, and provide the benefits of the provider. Can be protected.

[Brief description of the drawings]

FIG. 1 is a schematic diagram illustrating a Web server device according to an embodiment of the present invention.

FIG. 2 is a system configuration diagram showing a server group of a provider in a Web server device according to an embodiment of the present invention.

FIG. 3 is a diagram showing a Web content management information file table stored in a Web content management storage device of a provider server.

FIG. 4 is a diagram showing a link destination content management information file table stored in a link destination management storage device of a server of a provider.

FIG. 5 is a system configuration diagram of a user's computer in the Web server device according to the embodiment of the present invention.

FIG. 6 is a flowchart illustrating a processing procedure for creating and modifying Web contents.

FIG. 7 is a flowchart illustrating a processing procedure for displaying Web content in the Web server device according to the embodiment of the present invention.

FIG. 8 is a flowchart showing a procedure for periodically performing a tampering check in the Web server device according to the embodiment of the present invention.

[Explanation of symbols]

Reference Signs List 10 provider 20 user 30, 40, 50 communication line network 60 Web server software (part of control means) 70, 71, 72 check mechanism (part of control means) 80, 81, 82 Web content management mechanism 90 external Storage device (Web content file, link destination content file) (first storage unit) 100 Web content management storage device (part of the second storage unit) 110 Link destination content management storage device (one of the second storage unit) Parts) 120, 140 Communication connection mechanism 130 Web browser software

Claims (5)

[Claims] A first storage unit for storing Web contents to be publicly provided on a network; a second storage unit for storing characteristic information of the Web contents;
Obtains the characteristic information of the Web content stored in the storage unit of the second storage unit and stores the characteristic information of the Web content stored in the second storage unit.
A Web server device comprising: a control unit that detects tampering by comparing with content characteristic information. 2. The Web server device according to claim 1, wherein the control unit publicly provides a substitute Web content when detecting tampering of the Web content. 3. The Web server device according to claim 2, wherein the substitute Web contents are replacement contents prepared in advance. 4. The Web server device according to claim 1, wherein the control unit notifies the administrator of the Web server device when tampering of the Web content is detected. 5. The Web server device according to claim 1, wherein the characteristic information is based on text data.