JP2003216475A - Securing device for data source and computer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce a communication load without burdening an operator of a server device at the time of preparing a plurality of files and sending them to the server device, and to positively prevent interpolation of data stored in the server device. <P>SOLUTION: When a plurality of files are prepared by a terminal device for preparing a Web page, a plurality of pieces of data stored in each of the plurality of files are concatenated into one file and they are transmitted to the server device, each piece of data is automatically separated in the server device, and they are restored to the pieces of data before concatenation. Under conditions that a switch is in an 'accessible state' position and transmit data is in a particular format, rewriting of display data of the Web page stored in a nonvolatile memory is allowed by the transmitted data. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a server device that provides a Web page to a client device.

[0002]

2. Description of the Related Art The Internet provides a service of an information retrieval system called WWW. Clients on the internet
/ In the server system, by causing the server device to function as a web server, the server device displays a web page as an information screen of the Internet on the display screen of the client device in response to a request from the client device.

A personal computer is used as the server device. Software for performing a process of providing a Web page to a client device is installed in the computer body. This software is roughly classified into "Windows" (registered trademark), "Linux", and "Unix".
An operating system (OS) as basic software such as (registered trademark), a WWW server program that performs a process of providing a Web page to a client device, and a network interface (software that performs a communication process between networks according to a predetermined protocol). )
Consists of. The Web page is an HTML data file or an image file such as GIF data, and is display data for information such as text, images, voice, and moving images.
The software and the display data of the Web page are stored in the hard disk of the computer main body.

When updating a Web page, display data of a new Web page is created by a Web page creation terminal device composed of a personal computer different from the server device. And the created Web
The page data is transferred from the Web page creation terminal device to the server device via the network. This transfer is performed for each file.

That is, as shown in FIG. 3A, "HTML data 1" and "HTML
When the L data 2 ”and the“ GIF data ”are created, these are stored in each file and temporarily stored in the hard disk of the Web page creation terminal device. A header is attached to each file, and each file is individually transferred to the server device.

As described above, conventionally, when a plurality of files are created by the Web page creation terminal device, it is necessary to attach a header to each created file and send each file individually to the server device. was there. For this reason, there is a problem that the amount of data to be transmitted becomes enormous and the communication load on the network increases because headers are required for the number of files.

In addition, the data compression software is installed in the Web page creation terminal device, and the data decompression software is installed in the server device.
Start the data compression software on the eb page creation terminal device, compress the data, and then transfer it to the server device.
Currently, data decompression software is activated in a server device to decompress data.

According to this technique, since the data is compressed and transferred, a huge amount of data can be transferred in a short time and the communication load is reduced.

However, in order to decompress the data compressed by the server device, a specific input operation is required to restore the compressed file to the original state, which imposes a heavy burden on the operator of the server device.

The present invention has been made in view of these circumstances, and it is a first object to reduce the communication load without burdening the operator of the server device when a plurality of files are created and transmitted to the server device. It is a problem to be solved.

By the way, recently, there has been a case where a homepage is maliciously tampered with. Therefore, a security system has been developed that prohibits access to the display data so that the display data of the Web page stored in the hard disk of the server device is not rewritten.

As a security method, there is a method of dealing with software.

However, if a method of dealing with software is taken, there is a risk that the display data can be accessed and the display data can be tampered with by decoding the software.

The present invention has been made in view of these circumstances, and a second problem to be solved is to reliably prevent falsification of data stored in a server device.

[0015]

In order to achieve the first object, the first invention is made by connecting the data creating device and the server device so that they can communicate with each other, and is created by the data creating device. In a data transmission device that attaches a header to multiple files and transmits it to the server device,
In the data creation device, when a plurality of data are stored in a plurality of files, data information is attached to each of the data of the plurality of files to concatenate them into one file, and the head of this one file is To the header, the server device transmits the one file, and when the server device receives the one file, the header added to the head of the one file and the head of each data. It is characterized by performing a process of restoring a plurality of data based on the data information attached to.

According to the first invention, as shown in FIG.
When a plurality of files are created by the eb page creation terminal device 40, a plurality of data stored in each of the plurality of files are concatenated into a single file, which is then transmitted to the server device 10, and at the same time, the server device. Since the data is automatically separated in 10 and restored to the data before the connection, the burden on the operator of the server device 10 can be eliminated and the communication load can be reduced.

In order to achieve the second object, the second invention communicably connects the client device and the server device, and by the data created by the client device,
In a computer security device configured to prohibit writing to a specific storage area of a memory of a server device, the server device is operated so that a switch means is writable, and data is transmitted in a specific transmission format. In this case, the transmitted data of a specific format allows writing to a specific storage area of the memory.

According to the second invention, the switch 6 shown in FIG.
Is in the "accessible" position, and the transmitted data has a specific format shown in FIG. 3B, the transmitted data displays the Web page stored in the non-volatile memory 4. Since writing of data is allowed, it is possible to reliably prevent falsification of the display data of the Web page stored in the server device 10. If the above conditions are not satisfied, data cannot be rewritten via the network, and unless the authorized administrator removes the non-volatile memory 4 from the slot 5 and attaches it to another computer,
Since the display data of the Web page cannot be rewritten, the We stored in the server device 10 is
It is possible to more reliably prevent falsification of the display data of page b.

[0019]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings.

FIG. 2 shows the overall configuration of the embodiment.

The server device 10 and the client device 20
And are connected to each other by a communication means 30 so that they can be transmitted and received to and from each other. Further, the server device 10 and the web page creation terminal device 40 are connected by a communication means 50 so as to be capable of transmitting and receiving mutually. The communication means 30 and 50 are, for example, the Internet, an intranet, a LAN (local area network), etc., and include any communication means capable of wired or wireless communication. In the embodiment, the communication means 3
It is assumed that 0 is the Internet and the communication means 50 is a LAN.

On the Internet, services such as WWW (World Wide Web: information retrieval system on the Internet) are provided.

On the Internet as the communication means 30, data is a predetermined communication protocol (TCP / I
P) is transmitted and received. The server device 10 is WWW
To function as an HTTP (Hyper Text Transfer Protocol) server. The server device 10, which is an HTTP server, uses HTML.
The Web page as a file described in the (hyper text markup language) format is displayed on the display screen of the client device 20 which is the request source.

The configuration of the server device 10 will be described later with reference to FIG.

The client device 20 has a display 21. A web browser as data display software is installed in the client device 20. Therefore, on the display screen 21a of the display 21 of the client device 20, a Web page as an HTML file or an image file transmitted according to HTTP is displayed. The client device 20 is a personal computer, a workstation, a mobile terminal, or the like.

In the Web page creation terminal device 40, the display data of the Web page to be stored in the server device 10 is created. The web page creation terminal device 40 is
Examples include personal computers, workstations, and mobile terminals.

FIG. 1 shows the configuration of the server device 10.

The server device 10 roughly comprises a substrate 1 and a casing (not shown) for accommodating the substrate 1 therein.

An AC power supply connection adapter 2 to which an AC power supply is connected, an interface 3 for connecting a LAN such as Ethernet (registered trademark), and a portable non-volatile memory 4 are detachably mounted on the substrate 1. Slot 5
A switch 6 for prohibiting access to the nonvolatile memory 4 by a pushing operation and a flash ROM 7 are provided.

The non-volatile memory 4 is, for example, a compact flash (registered trademark), smart media, memory stick, multimedia disk, or the like.

The server device 10 is installed with software for processing to provide a Web page to the client device 20. This software is roughly classified into an operating system (OS) as basic software such as “Windows”, “Linux”, and “Unix” (registered trademark), and a WWW that performs a process of providing a Web page to the client device 20. It consists of a server program and a network interface (software) that performs communication processing between networks according to a predetermined protocol. These software are stored in the flash ROM 7 of the server device 10.

The Web page is an HTML data file or an image file such as GIF data, and is display data for information such as text, images, voice, and moving images.
The display data of the web page is rewritably stored in the portable non-volatile memory 4 separately from the storage area of the software.

When updating the Web page of the first embodiment, a new We
The display data of page b is the terminal device 4 for creating a web page.
Created with 0. The data of the created Web page is transmitted from the Web page creation terminal device 40 to the communication unit 5
It is transferred to the server device 10 via 0.

That is, as shown in FIG. 3A, "HTML data 1" and "HTM" are used as Web page data.
When L data 2 ”and“ GIF data ”are created, these plural data are stored in plural files respectively and W
It is temporarily stored in the hard disk of the eb page creation terminal device 40.

Data link software is installed in the Web page creating terminal device 40. We
When the "send" button is pressed on the web page creation terminal device 40 in order to transfer data from the b page creation terminal device 40 to the server device 10, the data link software is activated.

As a result, as shown in FIG. 3B, the data "HTML data 1" and "HTM" of a plurality of files are obtained.
Data information is attached to each of the "L data 2" and the "GIF data", and these data are concatenated into one file.
Further, a process of attaching a header to the head of this one file is performed. Then, this one file is transmitted from the Web page creation terminal device 40 to the server device 10.

The "data information" includes information such as the format and length of data (for example, "HTML data 1") following the data information.

On the other hand, data separation software is installed in the server device 10. When the server device 10 receives one file shown in FIG. 3B, the data separation software is activated.

As a result, based on the header added to the beginning of the file and the data information added to the beginning of each data "HTML data 1", "HTML data 2", "GIF data", the head and data information "HTML data 1", "HTML data 2",
It is separated into "GIF data". That is, as shown in FIG. 3C, each data “HTM” before connection shown in FIG.
L data 1 ”,“ HTML data 2 ”, and“ GIF data ”are restored.

Then, each of these restored data "HT
The display data of the Web page stored in the non-volatile memory 4 is rewritten by "ML data 1", "HTML data 2", and "GIF data".

As described above, according to this embodiment, when a plurality of files are created by the Web page creation terminal device 40, a plurality of files stored in each of the plurality of files are concatenated into one file. Server device 1
Since the server device 10 automatically separates each data and restores the data before the connection, the load on the operator of the server device 10 can be eliminated and the communication load can be reduced. it can.

Second embodiment FIG. 4 shows the processing flow of the second embodiment.

When a legitimate administrator wants to rewrite the display data of a Web page, the switch 6 of the server device 10 is operated to the "accessible" position by the legitimate administrator. The switch 6 is assumed to be in the "access prohibited state" position when the push operation is not performed (step 101, step 102).

As a result, when it is determined that the switch 6 is in the "accessible state" position (step 102).
Determination of YES), the flag of "rewrite prohibited" is cleared (step 103).

Next, as shown in FIG. 3B, the transmission data received by the server device 10 is each data (“HTML data 1”, “HTML data 2”, “GIF data”).
Is determined to be a concatenated specific format (step 104).

As a result, when the switch 6 is in the "accessible state" position and the transmission data has the specific format shown in FIG. 3B (YES in step 104), this specific format is used. The display data of the Web page stored in the non-volatile memory 4 can be written by the transmission data. That is, as described in the first embodiment, the transmission data of a specific format in which the respective data “HTML data 1”, “HTML data 2”, and “GIF data” shown in FIG. The respective data “HTML data 1”, “HTML data 2”, and “GIF data” are restored, and the display data of the Web page stored in the nonvolatile memory 4 is rewritten by these data (step 105).

When the rewriting is completed (YES in step 105), the process returns to step 101, and the switch 6 of the server device 10 automatically returns to the "access prohibited" position (step 101).

When the switch 6 is in the "access prohibited state" position, the "rewrite prohibited" flag is set. As a result, writing to the non-volatile memory 4 is locked to an impossible state via the CPU of the server device 10.

Therefore, even if the transmission data in the specific format shown in FIG. 3B is transmitted from the Web data creation device 40 as well as the client device 20, the non-volatile memory 4 of the server device 10 is stored. You will not be able to access the data, so
It becomes impossible to rewrite the page display data. To rewrite in this state, the non-volatile memory 4 must be removed from the slot 5 and executed on another computer.

As described above, according to this embodiment, the switch 6
Is in the "accessible" position, and the transmitted data has a specific format shown in FIG. 3B, the transmitted data displays the Web page stored in the non-volatile memory 4. Since writing of data is allowed, it is possible to reliably prevent falsification of the display data of the Web page stored in the server device 10. If the above conditions are not satisfied, the data cannot be rewritten via the network, and unless the authorized administrator removes the nonvolatile memory 4 from the slot 5 and attaches it to another computer,
Since the display data of the Web page cannot be rewritten, the We stored in the server device 10 is
It is possible to more reliably prevent falsification of the display data of page b.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration of a server device.

FIG. 2 is a diagram showing an overall configuration of an embodiment.

3 (a), (b), and (c) are diagrams for explaining a process of concatenating data into a specific format and restoring it to data before concatenation.

FIG. 4 is a diagram illustrating a processing procedure of an embodiment.

[Explanation of symbols]

4 Non-volatile memory 6 switch 10 Server device 20 client devices 30, 50 Communication means 40 Web page creation terminal device

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Koji Takahashi             3-25-1 Shinomiya, Hiratsuka City, Kanagawa Prefecture             Komatsu Seisakusho Electronics Business Book             Department (72) Inventor Hidenori Kito             3-25-1 Shinomiya, Hiratsuka City, Kanagawa Prefecture             Komatsu Seisakusho Electronics Business Book             Department F term (reference) 5B017 AA02 BA04 BB03 CA12 CA14                       CA16                 5B082 EA11 GA00 GA11 HA05 HA08

Claims (2)

[Claims] 1. A data transmission device, wherein a data creation device and a server device are communicably connected to each other, and a header is attached to a plurality of files created by the data creation device, and the file is sent to the server device. In the data creation device, when a plurality of data are stored in a plurality of files, the data information is attached to each of the data of the plurality of files to concatenate them into one file, and After the process of attaching a header to the head is performed, the one file is transmitted, and when the server device receives the one file, the header attached to the head of the one file and the data A data transmitting apparatus, which performs a process of restoring a plurality of data based on data information attached to the head. 2. A security device for a computer, wherein a client device and a server device are communicably connected to each other, and writing to a specific storage area of a memory of the server device is prohibited by data created by the client device. When the switch device is operated in a writable state and the data is transmitted in a specific transmission format, the server device uses the transmitted specific format data to move to a specific storage area of the memory. A computer security device characterized by permitting writing of data.