JP2007257348A - Web page alteration detection system and web server constituting the system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a web page alteration detection system for easily and quickly detecting that web page data is altered in a web server by unauthorized access and restoring the altered web page, and to provide a web server constituting the system. <P>SOLUTION: A hash value of web page data stored in a directory 3A for disclosure is periodically generated, comparison and verification between the generated hash value and a hash value in a time stamp token TST stored in a directory 3B for original storage is periodically performed, it is considered that web page data is altered when there is a difference between the both hash values as a result of the comparison and verification, and the web page stored in the directory 3A for disclosure is overwritten and restored by web page data stored in the directory 3B for original storage. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a system for detecting and restoring falsification of a Web page published through the Internet.

  Conventionally, a system for detecting tampering of this type of Web page is disclosed in Patent Document 1, for example. The system of the literature 1 requests a web page from the user terminal (2) to the web server (3), and returns the requested web page from the user terminal (2) to the web server (3). A configuration for transmitting an HTTP request (4) and an electronic signature for the HTTP request to the user terminal, and a configuration for transmitting an HTTP response (including a Web page) and the electronic signature for the HTTP request from the Web server (3) to the user terminal (2). And by verifying the electronic signature, the HTTP request (4) transmitted from the user terminal (2) is delivered to the Web server (3) without falsification, and the HTTP transmitted from the Web server (3) is transmitted. The response (6) is confirmed to be delivered to the user terminal (2) without falsification. The reference numerals in parentheses are those used in Patent Document 1. The same applies to the following in this column.

  However, in the conventional system, an electronic signature is used as a tampering confirmation means. This electronic signature is an HTTP request or the like exchanged by communication between the user terminal (2) and the Web server (3). Since it is added to the HTTP response, it can be confirmed whether or not there has been any falsification in the communication during that time, but the Web page stored in the public directory of the Web server (3) due to unauthorized access unrelated to the communication during that time It is impossible to detect that the data has been falsified, and it is not possible to restore the falsified Web page data.

JP 2004-240596 A

  The present invention has been made to solve the above-described problems, and the object of the present invention is to quickly detect that the Web page data in the Web server has been tampered with by unauthorized access, and to tamper with the Web. An object of the present invention is to provide a Web page alteration detection system that can restore a page and a Web server that constitutes the system.

  In order to achieve the above object, the present invention provides a Web page tampering detection system including a Web server connected to the Internet, a user terminal, and a time stamp server, wherein the user terminal is created. Function as means for uploading the web page data to the web server, the web server storing the web page data uploaded from the user terminal in a public directory and publishing the web page; When Web page data is uploaded from the user terminal, a hash value of the uploaded Web page data is generated, and a time stamp token including a time stamp for the hash value is issued. As a means to request to the server Function, function as means for storing the Web page data uploaded from the user terminal and the time stamp token issued in response to the request in association with a private original storage directory, the public directory The hash value of the Web page data stored in is periodically generated, and the generated hash value is compared with the hash value in the time stamp token stored in the original storage directory. A function as a means for requesting a stamp server, if there is a difference between the two hash values as a result of the comparison and verification, it is assumed that the Web page data has been altered, and the Web stored in the public directory Save page data in the original save directory The time stamp server has a function as a means for overwriting and restoring with the Web page data being stored, and the time stamp server receives a time stamp token including at least a time stamp, its issue time, and a hash value based on the issue request. And a function as a means for comparing and verifying both hash values based on the request for comparison and verification.

  The present invention is a Web page falsification detection system including a Web server connected to the Internet, a user terminal, and a time stamp server, wherein the Web server uploads Web page data uploaded from the user terminal. Is stored in the public directory and functions as a means for publishing the Web page, and the user terminal functions as means for uploading the generated Web page data to the Web server, and a hash of the generated Web page data. Means for generating a value and requesting the time stamp server to issue a time stamp token including a time stamp for the generated hash value when uploading the generated web page data to the web server As a function, created A function as means for storing the eb page data and the time stamp token issued in response to the request in the original storage directory, and periodically downloading the Web page data from the public directory of the Web server Function as means, each time the Web page data is downloaded, a hash value of the downloaded Web page data is generated, and the generated hash value and a time stamp token stored in the original storage directory The time stamp server has a function of requesting the time stamp server to compare and verify with a hash value in the time, and the time stamp server includes a time including at least a time stamp, an issue time, and a hash value based on the issue request. stamp A function as a means for issuing a token to a request source, a function as a means for performing comparison verification of both hash values based on the request for comparison verification, and the user terminal, as a result of the comparison verification, If there is a difference between the two hash values, it is assumed that the Web page data has been altered, and the Web page data stored in the public directory of the Web server is stored in the original storage directory. It has a function as means for overwriting and restoring with existing web page data.

  The present invention is a Web server that publishes a Web page through the Internet and detects and restores the alteration of the Web page, and the Web server stores Web page data uploaded from a user terminal in a public directory. A function as a means for publishing the Web page; when Web page data is uploaded from the user terminal, a hash value of the uploaded Web page data is generated and a time for the hash value is targeted A function as a means for requesting the time stamp server to issue a time stamp token including a stamp, the Web page data uploaded from the user terminal and the time stamp token issued in response to the request are not associated with each other. Open original cover Function as means for saving to the public directory, periodically generating a hash value of the Web page data stored in the public directory, and saving the generated hash value and the original saving directory Function as a means for requesting the time stamp server to compare and verify with the hash value in the time stamp token. If there is a difference between the two hash values as a result of the comparison and verification, the Web page data has been falsified. The Web page data stored in the public directory is overwritten with the Web page data stored in the original storage directory, and has a function as a means for restoring. .

  In the present invention, the hash value of the Web page data stored in the public directory as described above is periodically generated, and the generated hash value and the time stored in the original storage directory are stored. The comparison verification with the hash value in the stamp token is periodically performed, and if there is a difference between the two hash values as a result of the comparison verification, it is considered that the Web page data has been altered, and the public directory The web page data stored in is restored and overwritten with the web page data stored in the original storage directory. Therefore, it is possible to detect that the web page data in the web server has been tampered with by unauthorized access, and to restore the tampered web page. In addition, according to the present invention, when a Web page is composed of a plurality of pages, one hash value is generated for the entire plurality of pages, and the comparison verification described above is performed using the generated one hash value. Since it is possible to detect falsification of page data, there is an effect that it is possible to quickly detect falsification of a Web page without requiring time and effort for falsification detection processing.

  Hereinafter, the best mode for carrying out the present invention will be described in detail with reference to the accompanying drawings.

  FIG. 1 is an overall configuration diagram of a Web page tampering detection system to which the present invention is applied. FIG. 2 is an explanation showing an example of each function / operation of the user terminal, Web server, and time stamp server shown in FIG. FIG.

  The Web page falsification detection system according to the present embodiment includes a user terminal 2 connected to the Internet 1, a Web server 3, and a time stamp server 4.

  The user terminal 2 is a terminal of a user who intends to publish a Web page using this system, for example, and has a function as means for uploading the created Web page data to the Web server 3 (see FIG. 2). . Web page uploading may be performed via an FTP server (not shown) connected to the Internet.

  The Web server 3 has a general function as a means for storing the Web page data uploaded from the user terminal 2 in the public directory 3A and publishing the Web page. It also has a function, an original data storage function, a comparison verification request function, and an overwrite restoration function.

  The “time stamp token request function” is a function for generating a hash value of the uploaded web page data using a predetermined hash function when the web page data is uploaded from the user terminal 2. This is a function for requesting the time stamp server 4 to issue a time stamp token TST including a time stamp for a hash value. When the web page is composed of a plurality of pages, one hash value may be generated for the entire plurality of pages.

  In the present embodiment, since the time stamp is performed on the hash value, the Web server 3 transmits the time stamp target hash value to the time stamp server at the time of the time stamp token issuance request. For this time stamp issue request, for example, an empty time stamp token prepared in advance by the time stamp authority TSA managing the time stamp server 4 is acquired, and the generated hash value is included in the acquired empty time stamp token. May be transmitted to the time stamp server 4.

  The “original data storage function” corresponds to the Web page data (original) uploaded from the user terminal 2 and the time stamp token TST issued in response to the time stamp token issue request in association with FIG. This is a function of saving in the original storage directory 3B that is not disclosed. Here, the “association” may be realized using, for example, a table indicating a correspondence relationship between the uploaded web page data and the corresponding time stamp token TST.

  The original storage directory 3B can only be accessed by a user (hereinafter referred to as “specific user”) who has been given special authority on the Web server 3, and access by a third party other than the specific user is restricted.

  The “comparison verification request function” periodically generates a hash value of Web page data stored in the public directory 3A, and stores the generated hash value and the original storage directory 3B. Is sent to the time stamp server 4 as a set of data, and the generated hash value (current hash value) and the hash value in the time stamp token TST, that is, the original storage directory 3B. This is a function for requesting the time stamp server 4 to verify the comparison with the hash value (original hash value) in the time stamp token TST stored in.

  For example, when the comparison verification is requested for the Web page data D1 in the public directory 3A, the hash value generated for the Web page data D1 is stored in the original storage directory 3B corresponding to the Web page data D1. The time stamp token TST1 is transmitted to the time stamp server 4 as a set of data.

  The term “periodic” means that a comparison verification is requested each time a predetermined time or period elapses, for example, every 10 minutes, every other day, every other week, or the like. The predetermined time or period can be changed as necessary.

  In the present embodiment, the time stamp token TST is read from the original storage directory 3B as an internal process of the Web server 3 by the “comparison verification request function”. The original storage directory 3B can be accessed as described above. Since there is only a specific user, such read processing is performed with a specific user authority.

  The “overwrite restoration function” is a result of the comparison and verification, the two hash values, that is, a hash value (current hash value) periodically generated for the Web page data stored in the public directory 3A, and the Web If there is a difference between the hash value (original hash value) in the time stamp token TST stored in the original storage directory 3B corresponding to the page data, it is considered that the Web page data D has been falsified. Thus, the Web page data stored in the public directory 3A is overwritten with the Web page data stored in the original storage directory 3B and restored.

  In the present embodiment, the “overwrite restoration function” reads out the web page data (original), that is, the web page data itself uploaded from the user terminal, from the original storage directory 3B as an internal process of the web server 3. Reading processing is also performed with the authority of a specific user.

  The time stamp server 4 has a time stamp token issuing function and a hash value comparison verification function.

  The “time stamp token issuing function” means that when the time stamp token issuance request is received from the Web server 3, after receiving the issuance request, at least a time stamp and its issuance time as a response to the issuance request. This is a function for issuing a time stamp token including a hash value and transmitting it to the Web server 3 that issued the request. The hash value included in the time stamp token is sent from the Web server 3 as a time stamp token issue request.

  The “hash value comparison verification function” is a function for performing comparison verification of hash values based on the request for comparison verification. The hash value to be compared is the current hash value and the original hash value transmitted from the Web server 3, and the current hash value is a hash value generated from the Web page data stored in the public directory 3A. The original hash value is a hash value in the time stamp token TST stored in the original storage directory 3B corresponding to the Web page data.

  Next, the operation of the Web page falsification detection system of this embodiment will be described with reference to FIG.

  According to the Web page falsification detection system of the present embodiment, first, the user uploads the created Web page data from the user terminal 2 to the Web server 3 (ST1).

  As a result, the Web server 3 stores and saves the uploaded user's Web page data in the public directory 3A and the original storage directory 3B immediately after the upload (ST21). A hash value of the Web page data is generated (ST22), and then the time stamp server 4 is requested to issue a time stamp token TST (ST23). The time stamp server 4 issues a time stamp token from the Web server 3. After accepting the request (ST31), a time stamp token is issued to the issuer requesting Web server 3 (ST32).

  The Web server 3 that has issued the time stamp token issuance request determines whether or not the time stamp token TST has been received from the time stamp server 4 as a response to the issuance request (ST24). Here, when there is no reception, the reception of the time stamp token TST is awaited (No in ST24), and when there is reception, the received time stamp token TST is stored. At this time, the received time stamp token TST is associated with the Web page data (original) uploaded from the user terminal 2 and stored in the private original storage directory 3B as shown in FIG. 2 (Yes in ST24). , ST25).

  When the above storage process is completed, the Web server 3 uses the completion as a trigger to determine whether or not a periodic verification time has come (ST26). Here, if the verification time has not arrived, the verification time is waited (No in ST26), and if the verification time has come, the hash value of the public Web page, that is, the Web page data stored in the public directory 3A. (ST27), and a set of a hash value (current hash value) of the generated Web page data and a time stamp token TST stored in the original storage directory 3B corresponding to the Web page. Is sent to the time stamp server 4 and a comparison verification is requested (ST28). After receiving the request for comparison and verification (ST33), the time stamp server 4 includes the hash value (current hash value) of the Web page transmitted from the Web server 3 and the time stamp transmitted from the Web server 3. The hash value (original hash value) in the token TST is compared and verified, and the result is transmitted to the requesting Web server 3 (ST34).

  The Web server 3 that has requested the hash value comparison verification determines whether or not a comparison verification result has been received from the time stamp server 4 as a response to the comparison verification request (ST29). The result is awaiting reception (No in ST29), and if there is reception, it is determined whether or not falsification has occurred from the received comparison verification result (ST29-1).

  Here, if the comparison verification result indicating that “the hash values match” is received from the time stamp server 4, it is assumed that the Web page data has not been falsified due to unauthorized access, and the processing returns to the process of ST 26 and the next verification. The time is awaited (No in ST29-1).

  On the other hand, when a comparison verification result indicating “the hash values do not match” is received, it is assumed that the Web page data has been altered, and the altered Web page data is restored. In other words, the Web page data (falsified) stored in the public directory 3A is overwritten with the Web page data (original web page data that has not been falsified) stored in the original storage directory 3B. Then, the process returns to ST26 and waits for the next verification time (Yes in ST29-1, ST29-2).

  It should be noted that while the Web page is not updated, the series of processes from ST26 to 29-2 are periodically repeated according to the verification time, and when the Web page is updated, the first ST21 is newly performed. Is executed from.

  According to the Web page falsification detection system in the example of FIG. 2 described above, the hash value of the Web page data stored in the public directory 3A is periodically generated, and the generated hash value and the original storage directory are generated. Comparison verification with the hash value in the time-stamp token TST stored in 3B is periodically performed. If there is a difference between the two hash values as a result of the comparison verification, the Web page data has been altered. As a result, the web page data stored in the public directory 3A is overwritten and restored with the web page data stored in the original storage directory 3B. Detects that the web page data has been tampered with and It has been able to restore the Web page. In addition, when a Web page is composed of a plurality of pages, one hash value is generated for the entire plurality of pages, and the comparison verification is performed using the generated one hash value to modify the Web page data. Since it can be detected, the falsification detection process does not take time and can quickly detect falsification of the Web page.

  Among the functions of the Web server 3 described in the example of FIG. 2, the time stamp token request function, the original data storage function, the comparison verification request function, and the overwrite restoration function can be provided in the user terminal 2. The functions newly provided in the user terminal 2 are as follows. In this case, the user terminal 2 is provided with the following download function in addition to the upload function of the created Web page data. In such a configuration, the Web server 3 only needs to have a general function of storing the Web page data uploaded from the user terminal 2 in the public directory 3A and publishing the Web page. Since the basic configuration of the time stamp server 4 is the same as that of the example of FIG. 2, the detailed description thereof is omitted.

<Time stamp token request function on user terminal>
This function generates a hash value of the created Web page data using a predetermined hash function, and requests the time stamp server 4 to issue a time stamp token TST including a time stamp for the hash value. To do. It should be noted that the time stamp issuance request method such as sending the hash value generated in the empty time stamp token to the time stamp server 4 may be the same as the example of the Web server 3 described above.

<Original data storage function on user terminal>
This function associates the created Web page data (original) with the time stamp token TST issued in response to the time stamp token issuance request in the directory format as shown in FIG. Are stored in an original storage directory (not shown) provided on a recording medium such as a hard disk, an MO, a USB flash memory, or an SD card.

<Download function on user terminal>
This function periodically downloads Web page data from the public directory 3A of the Web server 3. The meaning of “periodic” is the same as described above.

<Comparison verification request function on user terminal>
This function generates a hash value of the downloaded web page data each time the web page data is periodically downloaded, and the generated hash value and the time stored in the original storage directory. The stamp token is transmitted to the time stamp server 4 as a set of data, and comparison verification between the generated hash value (current hash value) and the hash value (original hash value) in the time stamp token is performed. This is a function requested to 4.

<Overwrite restoration function on user terminal>
This function assumes that the Web page data has been falsified if there is a difference between the two hash values, ie, the current hash value and the original hash value as described above, as a result of the comparison and verification in the time stamp server 4. Thus, the Web page data stored in the public directory 3A of the Web server 3 is overwritten and restored with the Web page data stored in the original storage directory.

  According to the example of FIG. 3, the user terminal 2, the Web server 3, and the time stamp server 4 are connected to each other and operate as follows.

  First, before uploading the created web page data to the web server 3, the user terminal 2 of the user stores the created web page data in an original storage directory (not shown) in advance (ST41). A hash value of the created Web page data is generated (ST42), and the time stamp server 4 is requested to issue a time stamp token TST (ST43). After receiving the time stamp token issuance request from the user terminal 2 (ST31), the time stamp server 4 issues a time stamp token TST to the user terminal 2 that issued the issuance request (ST32).

  The user terminal 2 that has issued the time stamp token issuance request thereafter determines whether or not the time stamp token TST has been received from the time stamp server 4 as a response to the issuance request (ST44). Here, when there is no reception, the reception of the time stamp token TST is waited (No in ST44), and when there is reception, the received time stamp token TST is stored. At this time, the received time stamp token TST is stored in the original storage directory in association with the Web page data (original) stored in the original storage directory (not shown) in ST41 (Yes in ST44, ST45).

  Only when the above saving process is completed, the created web page data is uploaded from the user terminal 2 to the web server 3 (ST46). The uploaded web page data is stored in the public directory 3A of the web server 3 and is published as a web page in response to a public request.

  When the above upload is completed, using the completion as a trigger, the user terminal 2 determines whether or not a regular verification time has come (ST47). Here, if the verification time has not arrived, the process waits for the verification time (No in ST47). If the verification time has come, download of the public web page data, that is, the web page data from the public directory 3A of the web server 3 is performed. Is downloaded (ST48), and a hash value of the downloaded web page data is generated (ST49).

  Thereafter, the user terminal 2 uses the generated Web page data hash value (current hash value) and the time stamp token stored in the original storage directory corresponding to the Web page as a set of data. It transmits to the stamp server 4 and requests comparison verification (ST50). After receiving the request for comparison verification (ST33), the time stamp server receives the hash value (current hash value) of the Web page transmitted from the user terminal 2 and the time stamp transmitted from the user terminal 2. The hash value (original hash value) in the token TST is compared and verified, and the result is transmitted to the requesting user terminal 2 (ST34).

  The user terminal 2 that has made the hash value comparison verification request thereafter determines whether or not a comparison verification result has been received from the time stamp server 4 as a response to the comparison verification request (ST51). The result is awaiting reception (No in ST51). If there is reception, it is determined whether or not falsification has occurred from the received comparison verification result (ST52).

  Here, if a comparison verification result indicating that “the hash values match” is received from the time stamp server 4, it is assumed that the Web page data has not been falsified due to unauthorized access, and the processing returns to the processing of ST 47 to perform the next verification. The time is awaited (No in ST52).

  On the other hand, when a comparison verification result indicating “the hash values do not match” is received, it is assumed that the Web page data has been altered, and the altered Web page data is restored. In other words, the Web page data stored in the original storage directory (not shown) is uploaded again to the Web server, and the public directory of the Web server 3 is displayed using the Web page data that has been uploaded again (original Web page data that has not been falsified). After overwriting the Web page data (falsified Web page data) stored in 3A, the process returns to ST47 and waits for the next verification time (Yes in ST52, ST53).

  Note that while the Web page is not updated, the processes from ST47 to ST53 are periodically repeated according to the verification time, and when the Web page is updated, the process is newly executed from the first ST41. Is done.

  The web page falsification detection system of the example of FIG. 4 described above also generates a hash value of the web page data stored in the public directory 3A periodically, as in the example of FIG. The comparison between the hash value and the hash value in the time stamp token TST stored in the original storage directory is periodically performed. If the comparison result shows that there is a difference between the two hash values, the Web Assuming that the page data is falsified, the web page data stored in the public directory 3A is overwritten with the web page data stored in the original storage directory 3B and restored. Therefore, the Web page data in the Web server 3 is falsified due to unauthorized access. It detects that the, and can recover the tampered Web pages. In addition, when a Web page is composed of a plurality of pages, one hash value is generated for the entire plurality of pages, and the comparison verification is performed using the generated one hash value to modify the Web page data. It is also possible to detect the falsification of the web page quickly without taking time and effort for the falsification detection process.

1 is an overall configuration diagram of a Web page alteration detection system. FIG. 3 is an explanatory flowchart showing an example of each function / operation of the user terminal, Web server, and time stamp server shown in FIG. 1. FIG. 3 is an explanatory diagram of a Web server in the case of the example of FIG. FIG. 6 is an explanatory flowchart showing another example of each function / operation of the user terminal, the Web server, and the time stamp server shown in FIG. 1.

Explanation of symbols

1 Internet 2 User terminal 3 Web server 3 A Public directory 3 B Original storage directory 4 Time stamp server TST Time stamp token

Claims (3)

A web page falsification detection system including a web server connected to the Internet, a user terminal, and a time stamp server,
The user terminal is
Functions as means for uploading the created web page data to the web server;
The web server
A function as means for storing the web page data uploaded from the user terminal in a public directory and publishing the web page;
When Web page data is uploaded from the user terminal, a hash value of the uploaded Web page data is generated, and a time-stamp token including a time stamp for the hash value is issued. Function as a means to request to the server,
A function as means for associating the Web page data uploaded from the user terminal with the time stamp token issued in response to the request and storing them in a private original storage directory;
The hash value of the Web page data stored in the public directory is periodically generated, and the generated hash value is compared with the hash value in the time stamp token stored in the original storage directory. A function as a means for requesting the time stamp server for verification;
If there is a difference between the two hash values as a result of the comparison verification, it is assumed that the Web page data has been altered, and the Web page data stored in the public directory is stored in the original storage directory. It has a function as a means for overwriting and restoring with saved web page data,
The timestamp server is
A function as means for issuing a time stamp token including at least a time stamp, its issue time, and a hash value to the request source based on the request for issue;
A Web page falsification detection system having a function as means for comparing and verifying both hash values based on the request for comparison verification. A web page falsification detection system including a web server connected to the Internet, a user terminal, and a time stamp server,
The web server
Functions as means for storing the web page data uploaded from the user terminal in a public directory and publishing the web page;
The user terminal is
A function as means for uploading the created web page data to the web server;
Generate a hash value of the created web page data, and issue a time stamp token including a time stamp for the created hash value when uploading the created web page data to the web server A function as means for requesting the time stamp server;
A function as a means for storing the created web page data and the time stamp token issued in response to the request in the original storage directory;
A function as means for periodically downloading Web page data from the public directory of the Web server;
Each time the web page data is downloaded, a hash value of the downloaded web page data is generated, the generated hash value, and a hash value in a time stamp token stored in the original storage directory, Having a function as a means for requesting the time stamp server for comparison verification of
The timestamp server is
A function as means for issuing a time stamp token including at least a time stamp, its issue time, and a hash value to the request source based on the request for issue;
Having a function as means for performing comparison verification of both hash values based on the request for comparison verification;
Furthermore, the user terminal is
If there is a difference between the two hash values as a result of the comparison verification, it is assumed that the Web page data has been altered, and the Web page data stored in the public directory of the Web server is stored in the original storage. A Web page falsification detection system characterized by having a function as means for overwriting and restoring with Web page data stored in a directory for use. A web server that publishes a web page through the Internet and detects and restores tampering with the web page,
The web server
A function as a means for storing Web page data uploaded from a user terminal in a public directory and publishing the Web page;
When the web page data is uploaded from the user terminal, a hash value of the uploaded web page data is generated, and a time stamp token including a time stamp for the hash value is issued as a time stamp server Function as a means to request
A function as means for associating the Web page data uploaded from the user terminal with the time stamp token issued in response to the request and storing them in a private original storage directory;
The hash value of the Web page data stored in the public directory is periodically generated, and the generated hash value is compared with the hash value in the time stamp token stored in the original storage directory. A function as a means for requesting the time stamp server for verification;
If there is a difference between the two hash values as a result of the comparison verification, it is assumed that the Web page data has been altered, and the Web page data stored in the public directory is stored in the original storage directory. A Web server constituting a Web page falsification detection system characterized by having a function as means for overwriting and restoring with stored Web page data.

Images