JP2007108921A - Information terminal and transmission information monitoring method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a means for preventing significant personal information from being carelessly transmitted from an information terminal. <P>SOLUTION: This information terminal is provided with a monitor means for monitoring whether or not preliminarily set monitor information is included in information to be transmitted and a communication means for transmitting the information according to the monitor result. When it is determined that the preliminarily set monitor information is included in the transmission information by monitoring the transmission information by the monitor information, the information is not transmitted. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a transmission information monitoring method and an information terminal.

  In recent years, the Internet has become widespread and has become an indispensable technology in society, and has become widely involved in personal daily life. Individual procedures related to corporate and social services are also routinely performed on the Internet. In such procedure processing, personal information such as name, date of birth, and telephone number is transmitted from the terminal operated by the individual to the Internet. Since such a procedure process involving the transmission of personal information is frequently performed on a daily basis, there arises a problem that the personal information is inadvertently (inadvertently) transmitted to a partner that should not be transmitted. Or, in order to collect personal information with malicious intent, there is a problem that personal information is transmitted without knowing by a site that is skillfully created.

  On the other hand, the method of patent document 1 is proposed.

  Patent Document 1 proposes to automatically delete personal information included as additional information of photographed image data when an image file photographed by a digital camera is transmitted to the Internet.

JP 2004-343627 A

  However, the conventional method as shown in the above-mentioned patent document can deal only with the case where the target data is included in the captured image file. For this reason, there is a problem that it is not possible to cope with individual procedure processing related to a large number of companies and social services that do not involve transmission of photographed image files.

  Furthermore, transmission of photographed image data is usually performed by a user's conscious operation. However, there is a problem that it is not possible to cope with the leakage of personal information without a user's conscious transmission operation at a site that collects personal information by malicious intent.

  Accordingly, an object of the present invention is to provide a transmission information monitoring method for preventing transmission of unnecessary personal information and an information terminal having a transmission information monitoring function.

  In order to solve the above problem, the information terminal of the present invention is characterized by having monitoring means for monitoring whether or not monitoring information is included in the transmitted information.

  An information terminal according to claim 1 of the present invention includes: a monitoring unit that monitors whether or not preset information is included in transmitted information; a communication unit that transmits the information according to a monitoring result; It is characterized by having.

  The information terminal according to claim 2 of the present invention is characterized in that the monitoring information is personal information.

  An information terminal according to a third aspect of the present invention is the information terminal according to the first or second aspect, wherein the monitoring means includes transmission data monitoring means for monitoring transmission data.

  An information terminal according to a fourth aspect of the present invention is the information terminal according to any one of the first to third aspects, wherein the communication means transmits the transmission information when the monitoring result does not include the monitoring information. It is characterized by transmitting.

  An information terminal according to a fifth aspect of the present invention is the information terminal according to any one of the first to fourth aspects, wherein when the monitoring means detects the monitoring information, the transmission terminal confirms the transmission before the transmission. It is characterized by.

  An information terminal according to claim 6 of the present invention is the information terminal according to claim 3 or 4, wherein the monitoring means includes key input monitoring means for monitoring key-input data, and the transmission data monitoring means detects the information terminal. The monitoring information is compared with the monitoring information detected by the key input monitoring means, and the comparison determination result is used as the monitoring result.

  An information terminal according to claim 7 of the present invention is the information terminal according to claim 6, wherein the information terminal confirms the transmission to the user before the transmission according to the monitoring result.

  An information terminal according to an eighth aspect of the present invention is the information terminal according to any one of the first to seventh aspects, wherein the monitoring information includes designated transmission destination information, and the monitoring information includes a transmission destination of the monitoring information. It includes a transmission destination determination unit that determines whether or not it is within the range of the designated transmission destination information, and the determination result of the transmission destination determination unit is the monitoring result.

  An information terminal according to claim 9 of the present invention is the information terminal according to claim 8, wherein the designated destination information is a URL (Uniform Resource Locator).

  An information terminal according to a tenth aspect of the present invention is the information terminal according to the eighth aspect, wherein the designated destination information is an IP address (Internet Protocol address).

  A transmission information monitoring method according to an eleventh aspect of the present invention is a transmission information monitoring method for monitoring transmission of preset monitoring information, and monitoring whether or not the monitoring information is included in transmission data. And a transmission step of transmitting transmission data when the monitoring data is not included in the transmission data in the monitoring step.

  The transmission information monitoring method according to claim 12 of the present invention is the transmission information monitoring method according to claim 11, wherein the transmission is confirmed with a user when the monitoring information is detected in the transmission data in the monitoring step. A confirmation step is provided.

  The transmission information monitoring method according to claim 13 of the present invention is the transmission information monitoring method according to claim 11, wherein the key input monitoring step for monitoring key input in the previous period monitoring step, and the detection detected in the transmission data monitoring step. A transmission for transmitting the transmission data when it is determined that the monitoring information and the monitoring information detected in the key input monitoring step are not equivalent in the key input determining step and the key input determining step. And a step.

  The transmission information monitoring method according to claim 14 of the present invention is the transmission information monitoring method according to claim 13, wherein the confirmation step confirms with the user before the transmission when it is determined that the key input determination step is equivalent. It is characterized by providing.

  The transmission information monitoring method according to claim 15 of the present invention is the transmission information monitoring method according to any one of claims 11 to 14, wherein the monitoring information includes designated transmission destination information, and the monitoring step includes the monitoring information. Including a transmission destination determination step of determining whether or not the transmission destination is within the range of the designated transmission destination information, wherein the transmission step transmits the transmission data when it is determined to be within the range in the transmission destination determination step. It is characterized by.

  According to a sixteenth aspect of the present invention, the program according to the eleventh aspect causes a computer to execute a monitoring step and a transmitting step.

  The program according to claim 17 of the present invention causes the computer to further execute the confirmation step of claim 12 in the program according to claim 16.

  According to an eighteenth aspect of the present invention, the program according to the sixteenth aspect further causes the computer to execute a key input monitoring step, a key input determination step, and a transmission step according to the thirteenth aspect.

  The program according to claim 19 of the present invention causes the computer to further execute the confirmation step of claim 14 in the program according to claim 18.

  According to a twentieth aspect of the present invention, the program according to any one of the sixteenth to nineteenth aspects further causes the computer to execute the transmission destination determination step and the transmission step according to the fifteenth aspect.

  As described above, the information terminal and the transmission information monitoring method according to the present invention are characterized by having monitoring means for monitoring whether or not monitoring information is included in the transmitted information.

  As a result, it is possible to prevent transmission of information that is not preferably transmitted from the information terminal to the Internet.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of an information terminal to which the present invention is applied.

  In FIG. 1, an information terminal 1 includes an antenna 11 and a radio unit 12 that transmit and receive radio signals, a data that is transmitted and received by the radio unit 12, a baseband unit 13 that decodes the encoded data, and program control A central processing unit 14 that operates according to the above, a keyboard 15 that performs input including a display instruction of a Web browser, a display unit 16 that displays information, and monitoring information 17. The central processing unit 14 includes a web browser 141, a communication unit 142, a monitoring unit 143, and a control unit 144. Furthermore, the monitoring unit 143 includes a transmission data monitoring unit 1431 and a key input monitoring unit 1432. The monitoring information 17 is one or more pieces of information that are not preferably transmitted inadvertently, and is preset in a storage unit (not shown). For example, the user's first and last name, date of birth, account, password / password, credit card number, etc. are shown in FIG.

  In addition, although including the following description, it demonstrates taking the case of the terminal which communicates by radio | wireless, the mobile telephone terminal which can mainly communicate data, The terminal which communicates by other means including wired communication may be used. In this embodiment, the information terminal means a general terminal having a communication function, and includes, for example, a PC (Personal Computer), a PDA (Personal Digital Assistance), and a mobile phone terminal. Further, a terminal using a web browser will be described as an example, but it is not necessarily a web browser. It may be a function realized by dedicated software used for a specific purpose, mail, or other application software for communication.

  Next, the operation will be described.

Web information and mail information received through the baseband unit 13 are displayed on the display unit 16 by the Web browser 141. Upon receiving an input from the keyboard 15 from the user, the Web browser 141 performs processing corresponding to display scrolling, button pressing, and the like. Further, the web browser 141 uses the communication unit 142 to communicate with a server installed on the Internet (not shown). When communicating with the server using a Web browser, send a request message and receive a response message. When transmitting a request to the server, the monitoring unit 143 monitors whether the information to be transmitted contains information that is not desirably transmitted.
When performing communication using a Web browser, for example, such information may be included in a part of an address (URL). This is because in HTTP (Hyper Text Transfer Protocol) used for communication of a Web browser, data on the terminal side can be transmitted to the server side by a request message from the terminal to the server. An example of a GET request message sent from the terminal to the server is shown below.
GET /example/cgi-bin/exmple.cgi?tel=09011112222&age=21 HTTP / 1.1
Host: www.example.com
Here, “www.example.com” on the second line indicates the host name requested by the terminal, and “/example/cgi-bin/exmple.cgi” on the first line indicates the host name requested by the terminal. Indicates the path and file name that identifies the page. Furthermore, data “tel = 09011112222 & age = 21” to be transmitted from the terminal to the server is added after “?” In the first line. As described above, the data added to the GET request and transmitted to the server is apparently transmitted as a part of the address (/example/cgi-bin/exmple.cgi) indicating the page requested by the terminal side.

  The monitoring by the monitoring unit 143 may be the simplest method, for example, by determining whether or not the address (URL) contains information that matches information preset in the monitoring information 17 and confirming it. Alternatively, it is estimated whether information corresponding to the monitoring information is included even if the information does not necessarily match the preset monitoring information due to a difference in notation, expression method, or encoding method, It may be a judgment. The difference in notation method and expression method includes, for example, alphanumeric characters and Chinese numerals, Western eras and eras, and phone numbers. Differences in encoding methods include full-width and half-width, or code differences caused by language differences. Furthermore, there are encoding for transmitting as URL format, encoding for transmitting non-character information as character information (quoted-printable, base64, etc.), and the like. Further, depending on the function realized by the application software to be monitored, the information transmitted after being encrypted may be monitored.

  Based on the results of these confirmations and monitoring, the communication unit 142 performs transmission to the server via the baseband unit 13. If the monitoring unit 143 determines that the information of the monitoring information 17 is not included in the transmission information, the communication unit 142 transmits the transmission information. If the monitoring unit 143 determines that the information is included, the communication unit 142 transmits. Absent. With respect to a method that does not transmit when it is determined that it is included, the transmission process itself may be stopped, or information excluding information determined to correspond to monitoring information may be transmitted. In addition, when it is determined that it is included and it is not transmitted, the user may be informed by voice or display information.

  FIG. 2 shows an outline flow of processing of this embodiment. When the transmission process is started by the user pressing the transmission button (S22), transmission is performed when it is determined that the monitoring information is not included in the transmission information (S24), and transmission is not performed when it is determined that the transmission information is included. Processing for notifying the user that the transmission has been stopped by voice or information display is not included. The monitoring unit 142 determines whether or not the transmission information includes monitoring information (S23).

  The operation of this embodiment from the viewpoint of the user will be described with reference to FIG.

  It is assumed that the user is browsing a page including a send button using a Web browser (S31). When the user presses the send button on the screen, a request is normally sent to the server. The request to the server may include information other than the address of the requested page, such as information input in the input field of the page or information embedded in the page. FIG. 3 shows an example in which a telephone number is included. If it is detected that the request to the server includes a preset telephone number in the monitoring information 17, transmission is stopped in this embodiment (S33).

  As described above, in this embodiment, transmission information is monitored, whether or not information that is not preferable to be transmitted is monitored, and if it is included, transmission is stopped. Therefore, it is possible to prevent information that is not preferable to be transmitted.

  A second embodiment will be described with reference to FIG.

  In the second embodiment, the same processing as in the first embodiment is performed up to the monitoring / judgment process whether or not the information preset in the monitoring information 17 is included in the transmission information (in FIG. 4, S41 , S42, S43).

  The second embodiment is different from the first embodiment in that the transmission confirmation is performed for the user when the transmission information includes the monitoring information 17 (S46). If the user selects execution of transmission, the transmission is performed. If transmission is canceled, transmission is not performed. Processing when transmission is not performed is the same as in the first embodiment. The transmission confirmation is made by the control unit 144.

  When the transmission confirmation is performed, it may be displayed which information is the information detected by the monitoring unit 143 among the information set in the monitoring information 17 in advance.

  As described above, in this embodiment, processing according to the intention of the user can be performed by confirming transmission to the user. Although inadvertent transmission of personal information is not preferable, in a situation where transmission is necessary, transmission processing can be performed after final confirmation of the user's transmission intention. This makes it possible to handle procedures on the Internet that require transmission of personal information.

  A third embodiment will be described with reference to FIG.

  In the third embodiment, transmission information is monitored and key input is monitored. Therefore, in the third embodiment, two monitoring processes are performed. In the following description, in order to clarify and explain the difference from the first and second embodiments, the two monitoring processes will be described separately. That is, it is assumed that the transmission data monitoring unit 1431 of the monitoring unit 143 and the key input monitoring unit 1432 perform processing corresponding to monitoring of transmission information in the first and second embodiments, and key input monitoring.

  In this embodiment, transmission information monitoring (S53) is performed in the same manner as in the first and second embodiments. When the transmission data monitoring unit 1431 detects that the transmission information includes monitoring information, the monitoring information detected by the transmission data monitoring unit 1431, the key input content monitored by the key input monitoring unit 1432, and Compare

  Based on this comparison, it is determined whether the monitoring information included in the transmission information is information keyed by the user. If the monitoring information included in the transmission information is information keyed by the user, it can be considered that the transmission is based on the user's conscious operation. If the information is not key input by the user, it can be considered a dangerous situation in which important information is not transmitted regardless of the intention of the user. The monitoring unit 143 performs a comparison process between the transmission information and the key input information and the determination of the corresponding information.

  Based on this idea, transmission is performed when the detected monitoring information is determined to be due to key input, and transmission is stopped when it is determined not to be due to user key input.

  Note that the comparison between the information detected by the transmission data monitoring unit 1431 and the information monitored by the key input monitoring unit 1432 is similar to the first embodiment. It can be implemented in various ways, up to an advanced comparison assuming the above. Furthermore, in the present embodiment, it may be assumed that information is input through a so-called radio button or select box. In the case of input using a radio button, select box, or the like, the transmitted information may be indirect information that cannot directly connect the meaning of the information content such as the selected item number or symbol to the key input. In this case, the key input monitoring unit 1432 needs not only direct key input but also advanced processing for recognizing and monitoring the content of the display information (page content) corresponding to the key input.

  In this embodiment, by monitoring the key input information together with the transmission information, it becomes possible to determine the user's intention to transmit when transmitting personal information. As a result, it is possible to prevent important information from being transmitted without the user being aware of it.

  A fourth embodiment will be described with reference to FIG.

  In the fourth embodiment, the comparison between the monitoring information detected by the transmission data monitoring unit 1431 and the key input content monitored by the key input monitoring unit 1432 proceeds in the same manner as in the third embodiment. If it is determined that the transmission information is not the information keyed by the user in comparison with the key input content monitored by the key input monitoring unit 1432, the user is warned (S 67) and the transmission is confirmed. (S68) and proceed based on the confirmed intention of the user. That is, in response to the transmission confirmation, if there is a response that the user transmits, the transmission is transmitted. If the response is that the transmission is canceled, the transmission is stopped. Warnings and confirmations are made by the control unit 144.

  FIG. 7 shows the operation of this embodiment from the user's viewpoint.

  FIG. 7 shows an example in which warning and transmission confirmation are performed on one screen (S74). As described above, the warning and the transmission confirmation may be anything that alerts the user and confirms the final transmission.

  In this embodiment, the user's intention is confirmed after monitoring the key input information together with the transmission information. For this reason, it is possible to confirm the user's intention to transmit at the time of transmitting personal information from various angles, and to prevent the transmission of important information that the user is not aware of more reliably.

  A fifth embodiment will be described with reference to FIGS.

  In the fifth embodiment, as shown in FIG. 10, information on the transmission destination range is added to the monitoring information.

  The operation of this embodiment will be described with reference to FIG. In the present embodiment, the transmission information is monitored in the same manner as in the first embodiment. When the monitoring unit 143 detects that the information of the monitoring information 17 is included in the transmission information, it next confirms whether the transmission destination of the transmission information is within the range specified as the transmission destination of the monitoring information 17. If it is within the range specified as the transmission destination of the monitoring information 17, it is transmitted, and if not within the range, transmission is not performed.

  Here, the transmission destination specified in the monitoring information 17 may be a transmission destination that is uniquely specified or a specific range. For example, a specific page may be specified by a URL, or a range may be specified by a domain or a site. It may also be specified using an IP address. Such monitoring processing is performed by the monitoring unit 143.

  Further, the designation of the transmission destination in the monitoring information 17 does not have to be specified for all items of the monitoring information 17. When the transmission destination is specified only for some items of the monitoring information 17, when the transmission destination is specified in the monitoring information detected by the monitoring unit 143, the operation shown in this embodiment is performed, and the monitoring information For example, if the transmission destination is not specified, the same operation as in the first embodiment may be performed.

  Furthermore, the present embodiment may be appropriately combined with the first to fifth embodiments. That is, key input monitoring may be performed together, or a warning or transmission confirmation may be performed to the user.

  In this embodiment, the transmission destination is confirmed together with the contents of the transmission information. Thereby, it is possible to prevent important information such as personal information from being transmitted to an unintended transmission destination. For example, a bank account name or PIN is considered information that should be sent only to a specific site, such as the corresponding bank's net banking site. In this embodiment, information that should be used only at such a specific site is prevented from being inadvertently transmitted to other sites. The present embodiment is effective when such a transmission destination is specified. The present embodiment is effective in preventing information transmission to a site such as phishing, where a legitimate site is disguised and personal information is obtained.

  As described above, the information terminal and the transmission information monitoring method of the present invention are characterized by monitoring whether or not important information set in advance is included in the transmission information. This makes it possible to prevent important information from being transmitted.

Configuration diagram of embodiments 1 to 5 of the present invention Process flow diagram in the form of Example 1 of the present invention Process flow diagram from the viewpoint of the user in the first embodiment of the present invention Process flow diagram in the embodiment 2 of the present invention Process flow diagram in the embodiment 3 of the present invention Process flow diagram in the form of Example 4 of the present invention Process flow diagram from the viewpoint of the user in the embodiment 4 of the present invention Example of monitoring information 17 in the embodiments 1 to 4 of the present invention Process flow diagram in the form of Example 5 of the present invention Example of monitoring information 17 in the form of Example 5 of the present invention

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Information terminal 11 Antenna 12 Radio | wireless part 13 Baseband part 14 Central processing part 141 Web browser 142 Communication part 143 Monitoring part 1431 Transmission data monitoring part 1432 Key input monitoring part 15 Keyboard 16 Display part 17 Monitoring information

Claims (20)

In an information terminal having a communication function, monitoring means for monitoring whether or not preset monitoring information is included in the transmitted information;
A communication means for transmitting the information according to a monitoring result;
An information terminal comprising: The information terminal according to claim 1, wherein the monitoring information is personal information. The information terminal according to claim 1, wherein the monitoring unit includes a transmission data monitoring unit that monitors transmission data. 4. The information terminal according to claim 1, wherein the communication unit transmits the transmission information when the monitoring result includes no monitoring information in the transmission information. 5. The information terminal according to any one of claims 1 to 4, wherein when the monitoring unit detects the monitoring information, the transmission unit confirms the transmission with the user before the transmission. The monitoring means includes key input monitoring means for monitoring key input data, and compares and determines the equivalence between the monitoring information detected by the transmission data monitoring means and the monitoring information detected by the key input monitoring means The information terminal according to claim 3, wherein the result of the comparison determination is the monitoring result. The information terminal according to claim 6, wherein the transmission is confirmed with a user before the transmission according to the monitoring result. The monitoring information includes designated transmission destination information, and the monitoring means includes transmission destination determination means for determining whether or not the transmission destination of the monitoring information is within the range of the designated transmission destination information. The information terminal according to claim 1, wherein the determination result is the monitoring result. 9. The information terminal according to claim 8, wherein the designated transmission destination information is a URL (Uniform Resource Locator). 9. The information terminal according to claim 8, wherein the designated destination information is an IP address (Internet Protocol address). A transmission information monitoring method for monitoring transmission of monitoring information set in advance in an information terminal having a communication function,
A monitoring step for monitoring whether or not the monitoring information is included in transmission data;
A transmission step of transmitting transmission data when the monitoring information is not included in the transmission data in the monitoring step;
A transmission information monitoring method comprising: 12. The transmission information monitoring method according to claim 11, further comprising a confirmation step of confirming the transmission with a user when the monitoring information is detected in the transmission data in the monitoring step. Key input monitoring step for monitoring key input in the previous monitoring step;
A key input determination step for comparing and comparing equivalence between the monitoring information detected in the transmission data monitoring step and the monitoring information detected in the key input monitoring step;
A transmission step of transmitting the transmission data when determined to be unequal in the key input determination step;
The transmission information monitoring method according to claim 11, further comprising: The transmission information monitoring method according to claim 13, further comprising a confirmation step of confirming with a user before the transmission when it is determined that the key input determination is equivalent. The monitoring information includes designated transmission destination information, and the monitoring step includes a transmission destination determination step of determining whether or not the transmission destination of the monitoring information is within the range of the designated transmission destination information, and the transmission step includes the transmission 15. The transmission information monitoring method according to claim 11, wherein the transmission data is transmitted when it is determined to be within the range in the destination determination step. The monitoring step of claim 11;
Sending step;
A program that causes a computer to execute. The program according to claim 16, further causing the computer to execute the confirmation step of claim 12. A key input monitoring step of claim 13;
A key input determination step;
Sending step;
The program according to claim 16, further causing a computer to execute. The program according to claim 18, further causing the computer to execute the confirmation step of claim 14. A transmission destination determination step according to claim 15;
Sending step;
The program according to claim 16, further causing a computer to execute.

Images