JP2005235013A - Information protection method and information protection system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information protection system or the like which can trace leakage of secret information. <P>SOLUTION: The information protection system is provided with; storage means (112 and 116) for automatically collecting and storing a combination of data and a data receiver in such a state that an influence of the data receiver is not exerted, when providing the data which the data provider has, from the data provider to the data receiver; and discrimination means (114 and 115) for discriminating whether the data receiver has leaked the data or not by stored data groups. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an information protection method and an information protection system for enhancing protection of personal information.

  As the Internet spreads, for example, opportunities to provide personal information to businesses using Web browsers, such as questionnaires, services provided by businesses, and application for exhibitions, are increasing. On the other hand, there are many malicious acts such as so-called SPAM so-called SPAM using personal information such as e-mail addresses from businesses that should not provide personal information or from unspecified senders. .

  The cause of this malicious act is thought to be mainly due to the leakage of personal information, but if the leakage is an intentional illegal provision to a third party, the person is not informed about the provision, and the leakage source There was a problem that it was difficult to find out.

JP 2002-183367 A

  In order to deal with such a problem, using a name identification method as described in Patent Document 1, it is possible to identify an unauthorized provider or obtain information that may lead to narrowing down of the provider company. This concept will be described with reference to FIG.

  7, 701 is a site of company A (URL is http://www.company-a.xxx), 702 is a site of company B (URL is http://www.company-b.xxx). ) 703 is a site of company C (URL is http://www.company-c.xxx), each of which owns a Web page for requesting personal information, and is connected to the Internet 705.

  On the other hand, 707 is an individual 1, 708 is an individual 2, and 709 is an individual 3, which are connected directly to the Internet 705 or indirectly via a dedicated line 706 of a provider or a company, etc. Suppose that you use it to provide personal information. Assume that person 1 (707) provides information to company A and company B, person 2 (708) provides information to company B and company C, and person 3 (709) provides information to company A and company C. Then, it is assumed that SPAM mail arrives at an individual 1 (707) and an individual 2 (708) from a SPAM merchant that each individual should not provide information at a later date. Each individual reports the damage status to each other or to a provider, etc., and collects the names, so SPAM e-mail is delivered to individuals 1 (707) and 2 (708), but not to individuals 3 (709). If the situation can be grasped, it can be estimated that the company that illegally provided the personal information is likely to be the company B. In FIG. 7, the number of companies and individuals is extremely limited to three, but in reality, the above concept can be applied to many companies and individuals.

  However, it takes time to perform such name identification by self-reporting, and it is necessary to accurately understand and accumulate at a personal level what kind of personal information each individual has provided to which site. There was a problem that it was difficult to provide them after an incident occurred.

  The present invention has been made in view of the above-mentioned problems, and when a data provider provides data owned by the data provider to a data receiver, information protection that can track the leakage of confidential information. It is an object to provide a method and an information protection system.

  In order to solve the above-described problems, the present invention provides a combination of the data and the data recipient when the data provider provides the data recipient with the data owned by the data provider. An accumulating step for automatically collecting and accumulating in a state where the influence of the data is not exerted, and a discriminating step for discriminating whether or not the data recipient has leaked the data by the data group accumulated in the accumulating step. The information protection method characterized by the above is provided.

  ADVANTAGE OF THE INVENTION According to this invention, when a data provider provides the data which the said data provider owns with respect to a data receiver, the leakage of confidential information can be tracked.

  In addition, it is possible to automatically store and provide information when performing name identification for the purpose of protecting personal information. Thus, for example, when a customer of a provider (or an employee of a company) provides personal information such as an e-mail address to various company sites using a form from a Web browser, the provider (or The company automatically records and stores the personal information and destination in the database via a trusted third party Proxy, and in the event of a personal information leak in the future, detects the company that provided the fraudulent provision Information.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a schematic configuration diagram of a system including an information protection system according to an embodiment of the present invention. The system shown in FIG. 1 is obtained by adding a personal information protection system 110 to the system shown in the conventional example of FIG. The other configurations are the same as those shown in FIG. 7, and the configurations 101 to 109 in FIG. 1 are the configurations 701 to 709 in FIG.

  The personal information protection system 110 is not affected by the browsing or operation of the companies A, B, and C by, for example, the management department of the company to which each individual belongs, or a third party that can be trusted by each individual such as a provider operator. It is properly managed in the state.

  Also in FIG. 1, the company site is the same as FIG. 7, 101 is the site of company A (URL is http://www.company-a.xxx), 102 is the site of company B (URL is http: /// www.company-b.xxx), 103 is the site of company C (URL is http://www.company-c.xxx), each of which owns a web page for personal information, Connected to the Internet 105.

  Each individual is the same as in FIG. 7, 107 is individual 1, 108 is individual 2, and 109 is individual 3. Each company is directly connected to the Internet 105 or indirectly through a dedicated line 106 such as a provider or a company. And providing personal information using a Web browser. However, each browser is set to designate a proxy server (Proxy) for access, and the personal information protection system 110 designates the Proxy unit 113 as the designated server.

  In the personal information protection system 110, reference numeral 111 denotes a personal information database that needs to be recorded when provided by each individual. An example of each record stored in this database is shown in each row in the table of FIG. Here, the person 1 (107) identified by the person ID 0001 is the email address “person1@provider.xx”, the name “name 1”, the phone number “111-xxx-1111”, or necessary. Other personal information is registered as personal information that needs to be recorded. The same registration is made for the person 2 (108) identified by the personal ID 0002 and the person 3 (109) identified by the personal ID 0003.

  In the personal information protection system 110, reference numeral 112 denotes a personal information / providing destination database that records personal information and its providing destination in association with each other. A proxy unit 113 provides a general proxy server function of the Web browser. Reference numeral 114 denotes a transmission data determination unit that determines whether or not an HTTP request transmitted by an individual to a site is form data transmission. Reference numeral 115 denotes a form data part for analyzing whether the form data is personal information. Reference numeral 116 denotes a transmission personal information / providing destination registration unit that records a combination of personal information and a transmission destination as a record in the personal information / providing destination DB 112.

  In the personal information protection system 110 having each of the above-described components, even if each function is configured in one computer, two or more computers connected to the network share one or more functions. It may consist of.

Hereinafter, the processing of the information protection system in the present embodiment will be described based on the flowchart of FIG.
First, when an HTTP request to a Web site is generated from each individual Web browser (107, 108, or 109) in FIG. 1, the proxy unit 113 receives the request message for relaying (step S301). Here, transmission from each Web browser is generally performed as an answer after receiving HTML data including a FORM tag from a Web site. However, local HTML obtained by another means such as e-mail is often used. In some cases, a request message is sent directly to a website from data or the like.

  Subsequently, the transmission data determination unit 114 determines whether or not the HTTP request message received by the proxy unit 113 for relay is form data that the individual transmits to the site (step S302).

  Here, the first criterion for determining whether or not the data is form data is whether or not the HTTP request is a POST method. FIG. 4 is a structural diagram in which a portion related to the HTTP request message format is extracted. If the request line located at the top of the message header is described as POST, it is understood that the message is a POST method and form data is being transmitted (the data itself may be empty).

  The second criterion for determining whether the data is form data is whether the HTTP request is a GET method and a query is transmitted. FIG. 5 is a structural diagram in which a portion related to the HTTP request message format is extracted. Whether or not the query is to be sent is described by a question mark “?” In the URL of the Web site indicated in the request line, and whether or not data exists thereafter (generally, a variable name and transmission data are required respectively) Is encoded to ASCII characters called URL encoding, and is combined with equal “=”, and if there are multiple variables and data, the data that is combined with the ampersand symbol “&” )).

  Subsequently, based on the determination in step S302, it is determined whether or not form data is to be transmitted (step S303). As a result of this determination, if it is determined that the form data is not transmitted, the proxy unit 113 accepts the HTTP request received from the client for relay as it is or in accordance with the function of a general proxy server to the request destination website. Transmit (step S307). On the other hand, as a result of the determination in step S303, if it is determined that the transmission is form data, the form data analysis unit 115 subsequently analyzes whether the form data is personal information that needs to be recorded ( Step S304).

  As a specific process of this step S304, when the HTTP request message is a POST method, the transmission data (in the example of FIG. 4, as shown in the message body field, each variable name and transmission data is URL encoding processing is performed as necessary, and they are combined with an equal “=” symbol. If there are multiple variables and data, the data immediately after “=” of the data combined with the ampersand “&” symbol. Whether or not the data up to immediately before "&" or the decoded data if it is URL-encoded data) is registered in any of the data in the personal information database shown in FIG. To analyze. Here, the URL encoding may be decoded each time, but each personal data item URL-encoded as a data item is recorded in the personal information database (FIG. 2) and compared with it as it is. .

  Further, as a specific process of step S304, when the HTTP request is a GET method, the transmission data is shown in the right part of the “?” Symbol in the request line column in the example of FIG. Analyze whether it is registered in any of the data in the information database.

  Subsequently, it is determined whether the form data transmission includes personal data that needs to be recorded (step S305). As a result of the determination, if it is determined that the form data to be transmitted does not include personal data that needs to be recorded, the proxy unit 113 accepts the HTTP request from the client received for relay as it is or a general proxy server The request is transmitted to the request destination Web site according to the function (step S307).

  On the other hand, as a result of the determination in step S305, if it is determined that the form data to be transmitted includes personal data that needs to be recorded, the personal data is transmitted to the personal data by the transmission personal information / providing destination registration unit 116 in FIG. Registration is made in the information / providing destination DB 112 (step S306). For example, in the case where the data shown in FIG. 4 is transmitted, the mail address and the name phone number of the individual 1 are displayed at www. company-a. Since the data is provided to xxx (Web site of company A), data as indicated by the dotted line box 601 in FIG. 6 is registered as a record. In the case where the data of FIG. 5 is transmitted, only the mail address of the individual 1 is www. company-b. Since the data is provided to xxx (Web site of company B), data as indicated by a dotted line box 602 in FIG. 6 is registered as a record.

After the record is registered in step S306, the proxy unit 113 transmits the HTTP request received from the client for relay to the request destination website as it is or according to the function of a general proxy server (step S307). ).
With the above, the flowchart process of FIG. 3 ends.

It is a schematic block diagram of the system containing the information protection system in embodiment of this invention. It is a figure which shows the example of the data recorded on a personal information database. It is a flowchart of the process of the personal information protection system in embodiment of this invention. It is the figure which showed the example of the HTTP request message in a POST method. It is the figure which showed the example of the HTTP request message in a GET method. It is the figure which showed the example of the data recorded on a personal information / providing destination database. It is a schematic block diagram of the system which shows a prior art example and contains each company site, each individual, and a network.

Explanation of symbols

101-103, 701-703 Corporate Web site 104, 704 SPAM site 105, 705 Internet 106, 706 Internet or dedicated line 107-109, 707-709 Individual (Web browser)
110 personal information protection system 111 personal information database 112 personal information / providing destination database 113 proxy unit 114 transmission data determining unit 115 form data analyzing unit 116 transmitting personal information / providing destination registering units 601 and 602 recorded in the personal information / providing destination database Record

Claims (7)

When a data provider provides data owned by the data provider to the data receiver, the data provider and the combination of the data receiver are automatically collected without being affected by the data receiver. Accumulation process to accumulate,
And a determining step of determining whether the data recipient has leaked the data based on the data group stored in the storing step.   The data owned by the data provider is personal information including at least one of a name, an email address, a telephone number, and an address that may identify the individual of the data provider. The information protection method according to claim 1.   The data owned by the data provider is provided via a network connected to a computer, and the storage step is based on information in a database in which a data group of the data provider to be recorded is registered in advance. 3. The information protection method according to claim 1, wherein the combination of the data and the data recipient is automatically collected and stored by another database.   The network is a network using the Internet protocol, and the data owned by the data provider is transmitted to the data recipient through a proxy server using the HTTP protocol located on the upper layer of the Internet protocol. The information protection method according to claim 3.   That the data transmitted using the HTTP protocol is the data to be automatically collected and accumulated in the other database, the content of the method of the request line of the HTTP protocol, or the message 5. The information protection method according to claim 4, wherein the content of the body is analyzed and determined.   6. The information protection method according to claim 5, wherein the function of performing the determination is realized via a Web browser and a proxy server that relays the site. When a data provider provides data owned by the data provider to the data receiver, the data provider and the combination of the data receiver are automatically collected without being affected by the data receiver. Storage means for storing and
An information protection system comprising: discrimination means for discriminating whether or not the data recipient has leaked the data based on the data group stored in the storage means.

Images