JP2008250604A - Web service identification information use system, and device, method and program used therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To safely use Web service identification information of the same contents in different computers. <P>SOLUTION: A Cookie information storage server 200 has a Cookie information DB 220 for storing customer data 500 wherein an ID 510 allocated to at least a user and encryption Cookie information 540 are associated. Cookie information setting software 310 developed in the computer 300 reads the ID 510 stored in a recording medium 400, and performs a reading request of the encryption Cookie information 540 to the Cookie information storage server 200, decrypts the received encryption Cookie information 540 to develop it as Cookie information 380, or encrypts the presently held Cookie information 380 to perform a writing request of the encryption Cookie information 540 to the Cookie information storage server 200. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention uses Web service identification information that uses Web service identification information (information for identifying a user in the Web service or the status of the Web service) held in a terminal on the user side according to an instruction from the Web service side. System, user terminal used therefor, storage server device, Web service identification information utilization method, and web service identification information utilization program, and in particular, a web service that can safely use the same content of web service information on different computers The present invention relates to an identification information utilization system, a user terminal used therefor, a storage server device, a web service identification information utilization method, and a web service identification information utilization program.

  When receiving a Web service on the Internet, browsing a personalized Web page, or using an authentication system, information used by the Web service (for example, information indicating the status of the Web service or a user) There is a method of using Cookie technology as one of the methods for retaining information for identification) in a terminal on the user side.

  By the way, the Internet connection environment can be used not only at the user's home but also at a plurality of locations such as an Internet cafe. Therefore, if the computer to be used is different, the cookie information (Web service identification information held in the user side computer using the cookie technology) held by each computer is naturally different, and the user uses it at home. In the same way as when the user is using the cookie information, the Web service realized using the cookie information cannot be used.

  In addition, if Cookie information is held in a computer in an Internet cafe or the like, the user's service usage status, Web browsing history, or personal information such as IDs and passwords used in the authentication system can be easily communicated to other users. There is a risk of leakage.

  For example, Patent Document 1 describes a method for similarly realizing a Web service realized using Cookie information on different computers.

JP 2004-178193 A (paragraphs 0038-0039)

  However, in the method described in Patent Document 1, since the cookie information is held in the recording medium, the cookie information cannot be maintained when the recording medium is lost. In addition, the user must prepare a recording medium having a storage capacity capable of recording at least all of the user's cookie information, which is inconvenient for the user. Furthermore, after deleting the cookie information on the computer, the cookie information that existed on the computer before the user uses the cookie information is not restored, so that the previous user (or the next user) changes the original cookie information. It cannot be used when you want to use it.

  By the way, cookie information is erased by the user in response to the risk of leaking personal information (service usage status, web browsing history, ID and password in the authentication system, etc.) to other users from the cookie information. Measures are taken such as setting the cookie information not to be stored, or using a program that erases the cookie information simultaneously with the computer termination process.

  However, with such measures, if the user forgets to delete the cookie information, does not set the cookie information not to be stored, or if another user uses the computer before the computer is shut down, the cookie The risk of leakage of personal information held as information has not been solved.

  Therefore, the present invention provides a Web service information use system that can safely use Web service identification information of the same content on different computers, a user terminal used therefor, a storage server device, a Web service identification information use method, and a Web The object is to provide a service identification information utilization program.

  The Web service identification information utilization system according to the present invention uses the Web service identification information, which is information used by the Web service held in the terminal on the user side, in accordance with an instruction from the Web service side and is shared between different terminals. Web service identification information utilization system of the present invention, a user terminal (for example, the computer 100, 300) used by the user, and a storage server device (for example, cookie information storage) connected to the user terminal via a communication network The storage server device includes at least a user identifier (for example, ID 510) for identifying the user and encrypted Web service identification information (for example, the user's Web service identification information). Web service knowledge that stores encrypted cookie information 540) in association with each other. The user terminal includes an information storage device (for example, the cookie information DB 220), and the user terminal uses the user identifier assigned to the current user of the user terminal in the Web service identification information storage device. Updating means (for example, Cookie information setting software 310) for storing the encrypted Web service identification information obtained by encrypting the currently held Web service identification information and the user identifier used for encryption in association with each other; The encrypted Web service identification information stored in association with the user identifier assigned to the current user of the user terminal is read from the Web service identification information storage device, and the user identifier is used. Decryption and use of the decrypted information as Web service identification information in the user terminal Means (e.g., cookie information setting software 310), characterized in that it comprises a.

  In addition, the user terminal according to the present invention is for sharing and using Web service identification information, which is information used by the Web service held in the terminal on the user side, by an instruction from the Web service side between different terminals. A user terminal that is assigned to the current user of the user terminal in a Web service identification information storage device provided in a predetermined server device connected to the user terminal via a communication network Updating means for storing the encrypted Web service identification information obtained by encrypting the Web service identification information currently held in the user terminal using the user identifier and the user identifier used for encryption in association with each other; Stored in association with the user identifier assigned to the current user of the user terminal from the Web service identification information storage device. It decrypted using the user identifier reads the encrypted Web service identification information is, and wherein the utilization means to expand the information obtained by decoding as the Web service identification information in the user terminal.

  Further, the update means encrypts the Web service identification information currently held in the user terminal by using the user identifier input to the user terminal, and creates encrypted Web service identification information Means (for example, encryption means 311) and a Web service identification information storage device for storing the encrypted Web service identification information created by the encryption means in association with the user identifier used for encryption Means for reading out the encrypted Web service identification information stored in association with the user identifier input to the user terminal from the Web service identification information storage device; Decryption means for decrypting the encrypted Web service identification information read by the means using the user identifier used for reading (for example, decryption Means 312), the information decoded by the decoding means may include a deployment means for deploying a Web service identification information in the user terminal.

  In addition, the encryption means is information that is information for identifying the content of the encrypted Web service identification information without decrypting the encrypted Web service identification information when the encrypted Web service identification information is created by encrypting the Web service identification information. The identification data is created, the storage means stores the user identifier, the encrypted Web service identification information and the simple identification data in association with each other, and the reading means inputs from the Web service identification information storage device to the user terminal. The encrypted Web service identification information and simple identification data stored in association with the user identifier to be stored are read out, and the storage means is created by the simple identification data read by the reading means and the encryption means. If there is a difference in comparison with the simple identification data, the information in the Web service identification information storage device may be overwritten.

  The utilization means saves the current web service identification information in the user terminal before expanding the information obtained by decrypting the encrypted web service identification information as the web service identification information in the user terminal. The updating unit may restore the saved Web service identification information after the encrypted Web service identification information is stored in the Web service information storage device.

  In addition, the user terminal reads a software program (for example, cookie information setting software 610) transmitted from a predetermined server device into a data processing device that operates according to the program of the user terminal, thereby saving and using the user terminal. Means may be realized.

  In addition, the storage server device according to the present invention is configured to share and use Web service identification information, which is information used by a Web service held in a user side terminal, according to an instruction from the Web service side between different terminals. Web service identification information storage device, which is a storage server device and stores at least a user identifier for identifying a user and encrypted Web service identification information obtained by encrypting the Web service identification information of the user in association with each other In response to a write request from the user terminal (for example, Cookie information DB 220), the Web service identification information storage device stores the user identifier and the encrypted Web service identification information included in the write request in association with each other. Write request execution means (for example, transmission / reception means 240) and read request from user terminal In response, the read request for reading out the encrypted Web service identification information stored in association with the user identifier included in the read request from the Web service identification information storage device and transmitting it to the user terminal that is the request source. An execution means (for example, transmission / reception means 240) is provided.

  Further, the Web service identification information utilization method according to the present invention shares and uses the Web service identification information, which is information used by the Web service held in the user side terminal, according to an instruction from the Web service side between different terminals. A method of using Web service identification information for performing a user terminal in a Web service identification information storage device provided in a predetermined server device connected to the user terminal via a communication network. Web service identification information obtained by encrypting the Web service identification information currently held in the user terminal using the user identifier assigned to the current user and the user identifier used for encryption Are stored in association with each other, and the user terminal uses the current usage of the user terminal from the Web service identification information storage device. The encrypted Web service identification information stored in association with the user identifier assigned to the user ID is read out and decrypted using the user identifier, and the information obtained by the decryption is stored in the Web at the user terminal. It is developed as service identification information.

  In addition, the Web service identification information using method is for sharing the Web service identification information, which is information used by the Web service held in the terminal on the user side according to an instruction from the Web service side, between different terminals. A method of using Web service identification information, in which a storage server device that manages Web service information for each user writes to a Web service identification information storage device provided in the storage server in response to a write request from a user terminal The user identifier included in the request is stored in association with the encrypted Web service identification information, and the storage server device includes the read request from the Web service identification information storage device in response to the read request from the user terminal. The encrypted Web service identification information stored in association with the user identifier May be transmitted to the user terminal is requesting.

  In addition, the Web service identification information utilization program according to the present invention shares and uses the Web service identification information, which is information used by the Web service held in the terminal on the user side, according to an instruction from the Web service side between different terminals. A Web service identification information use program for performing the above-described processing on a computer used by a user, in a Web service identification information storage device provided in a predetermined server device connected to the computer via a communication network. Correspondence between encrypted Web service identification information obtained by encrypting the Web service identification information currently held in the computer using the user identifier assigned to the current user and the user identifier used for encryption Processing to be stored, and Web service identification information storage device The encrypted Web service identification information stored in association with the user identifier assigned to the current user of the computer is read out, decrypted using the user identifier, and decrypted. It is characterized in that a process of expanding the information as Web service identification information in the computer is executed.

  According to the present invention, the encrypted Web service identification information is used when the Web service identification information storage device stores the Web service identification information and when transmission / reception is performed for the Web service identification information storage device. Service identification information can be used safely.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is an explanatory diagram showing a configuration example of a Web service identification information utilization system according to the present invention. In the present embodiment, a case where the Web service identification information is cookie information will be described as an example. The Web service identification information is information used by the Web service held in the terminal on the user side according to an instruction from the Web service side (for example, the usage status of the Web service or the user for identifying the user in the Web service). Information). Cookie information refers to Web service identification information held in a user's computer using Cookie technology. FIG. 1 shows an example in which a computer 100 used by a user and a computer 300 used by the user exist in the Web service identification information utilization system, and a cookie information storage server 200 exists. The cookie information storage server 200 and each computer (computers 100 and 300) are connected via a communication network such as the Internet.

  In FIG. 1, a computer 100 is an example of a computer used for user registration in the present system. The computer 300 is an example of a computer that is used for using / updating cookie information held in the cookie information storage server 200. In FIG. 1, the computers 100 and 300 are shown as the computers used by the user. However, the number of computers is not limited to two, and there are a plurality of computers depending on the scene where the user uses the cookie information.

  First, the configuration of the cookie information storage server 200 will be described. Specifically, the cookie information storage server 200 includes a storage device (for example, a database system) having a sufficient storage capacity corresponding to the number of users of the system, and can communicate with each computer used by the user. An apparatus (for example, a server computer) that operates by program control connected to a communication network (such as the Internet).

  The cookie information storage server 200 includes a registration unit 210, a cookie information database (hereinafter referred to as a cookie information DB) 220, an authentication unit 230, and a transmission / reception unit 240. The cookie information storage server 200 stores in advance cookie information setting software 610 and ID writing software 620 that are operated on each computer used by the user. Note that the cookie information setting software 610 and the ID writing software 620 are a part of the configuration of the computers 100 and 300, and the cookie information setting software 610 and the ID writing software 620 will be described together in the description of these configurations.

  The registration unit 210 performs user registration in this system in response to a request from each computer used by the user. Specifically, in response to a registration request from each computer based on a user operation, the user is assigned an ID 510 for identifying the user and an authentication password 520 in the system and notified. The ID 510 is, for example, unique character string data. The password 511 is, for example, character string data having a character string length with sufficient consideration for safety. For example, the registration unit 210 publishes a registration Web page (registration screen), and receives a registration request transmitted from the computer according to screen control based on a user operation on the Web page. Registration processing may be performed. The registration unit 210 may cause the user to recognize the ID 510 and the password 520 by displaying the ID 510 and the password 520 assigned on the registration screen. The registration unit 210 may also transmit the cookie information setting software 610 and the ID writing software 620 when transmitting the ID 510 and the password 520 to the requesting computer.

  As a registration process, the registration unit 210 registers, in the cookie information DB 220, customer data 500 for managing the encrypted cookie information 540 associated with the assigned ID 510 and encrypting at least the cookie information of the user. The customer data 500 is information in which at least an ID 510 assigned to a user is associated with encrypted cookie information 540 obtained by encrypting the cookie information of the user. FIG. 2 is an explanatory diagram showing an example of the data structure of the customer data 500. As shown in FIG. 2, the customer data 500 may further include a password 520, customer information 530, usage history 560, simplified identification data 550, and a backup area 570.

  The customer information 530 is information that can specify a user, such as a name, an address, a telephone number, and a credit number for billing. The customer information 530 may be transmitted to the computer according to screen control based on user operation on the screen using, for example, a registration screen including input items for the customer information 530. The simple identification data 550 is information for identifying the contents of the encrypted cookie information 540 such as a hash function without decrypting the encrypted cookie information 540, and is encrypted as the encrypted cookie information 540. This information is used to determine whether or not the cookie information has been updated. The usage history 560 is information used for billing, such as the user's access date and time and the number of uses. The backup area 570 is an area for storing backup data of information (encrypted cookie information 540 and simple identification data 550) of the customer data 500 updated by the computer. The backup area 570 is used, for example, for restoring the encrypted cookie information 540 when a transaction for updating the encrypted cookie information 540 is abnormally terminated for some reason.

  The cookie information DB 220 is a database for centrally managing the customer data 500, and stores the customer data 500 for each user. The cookie information DB 220 has a function of copying the encrypted cookie information 540 to the backup area 570.

  When each computer accesses the customer data 500 via the transmission / reception unit 240, the authentication unit 230 indicates whether the access is by a legitimate user of this system and the ID 510 and password sent from the computer. 520 to authenticate. For example, when the set of ID 510 and password 520 sent from the computer matches the set of ID 510 and password 520 registered in the customer data 500, the authentication means 230 is accessed by a regular user. If there is, access should be allowed.

  The transmission / reception unit 240 transmits the cookie information setting software 610 and the ID writing software 620 to the registration requesting computer in accordance with an instruction from the registration unit 210, or the cookie information setting software in response to a service start request transmitted from each computer. In response to a read request for information (specifically, encrypted cookie information 540 and simple identification data 550) relating to cookie information specifying 610 transmitted from each computer or ID 510 transmitted from each computer, it is associated with the ID 510. In response to a write request (upload request) for information related to cookie information specifying the ID 510 transmitted from each computer, the specified information of the customer data 500 is associated with the ID 510. Or to update the specified information of the customer data 500. The transmission / reception means 240 accesses the customer data 500 only when the authentication means 230 authenticates before accessing the customer data 500 and the access is permitted.

  Next, the configuration of the computers 100 and 300 will be described. Specifically, the computers 100 and 300 are devices operated by program control connected to a communication network (such as the Internet) that can communicate with the cookie information storage server 200, and receive a Web service using Cookie. It is a device that can. For example, a personal computer in which a web browser or the like is installed. Although the operations of the computer 100 and the computer 300 differ depending on the application used, the basic configuration is the same. Therefore, the computer 100 will be described first, and only the parts different from the computer 100 will be described. In FIG. 1, the number 3xx (for example, cookie information setting software 310) attached to each means and data included in the computer 300 corresponds to the number 1xx (here, the cookie information setting software 110) in the computer 100. Yes.

  A computer 100 is a computer used by a user to register a user in the system. The cookie information setting software 110, a transmission / reception unit 120, a display unit 130, a display unit 140, and an input unit 150, ID writing software 160, and a recording medium reading / writing device (reader / writer in FIG. 1) 170.

  The cookie information setting software 110 and the ID writing software 160 are software programs (cookie information setting software 610 and ID writing software) transmitted from the cookie information storage server 200 when a registration request is made to the cookie information storage server 200. 620) is developed on the computer 100 (read into a CPU included in the computer 100). The cookie information setting software 110 and the ID writing software 160 are specifically information processing devices that operate according to a program that reads a cookie information setting software program or an ID writing software program and operates according to the program.

  The cookie information setting software 110 encrypts the cookie information 180 of the user updated on the current computer (the computer 100 currently used by the user) and stores it in the cookie information storage server 200, or stores the cookie information. Various controls for using the encrypted cookie information of the user received from the server 200 on the current computer are performed. The cookie information setting software 110 includes an encryption unit 111, a decryption unit 112, and an external inaccessible area 113.

  The encryption unit 111 encrypts the cookie information 180 of the user updated on the current computer using the ID 510 assigned to the user from the cookie information storage server 200. The encryption method may be any method as long as it uses the ID 510. In addition to the ID 510, an authentication password 520 assigned with the ID 510 may be used. In addition, when the cookie information 180 is encrypted, the encryption unit 111 creates simple identification data 550 for easily identifying the encrypted cookie information 180.

  The decryption means 112 uses the ID 510 (password if necessary) assigned to the user to encrypt Cookie information 540 received from the cookie information storage server 200 (for example, Cookie developed in the computer 300). The encrypted cookie information 540) updated by the information setting software 310 is decrypted. Note that the decryption unit 112 may decrypt using a decryption method corresponding to the encryption method by the encryption unit 111.

  The externally inaccessible area 113 is an area that is accessed only by the cookie information setting software 110. The external inaccessible area 113 temporarily stores the ID 510 received from the cookie information storage server 200 (or the ID 510 read from the recording medium 400), and is used as a work area for the encryption unit 111 and the decryption unit 112. .

  Note that the cookie information setting software 110 on the computer 100 specifically passes the ID 510 assigned to the user by the cookie information storage server 200 to the ID writing software 160 and stores it in the recording medium 400, The cookie information 180 updated on 100 is encrypted by the encryption unit 111 to generate the encrypted cookie information 540 and the simple identification data 550, or the cookie information storage server 200 is made to use the encrypted cookie information 540 and the simple identification data. 550 write requests. Further, the cookie information setting software 110 may have a function of self-erasing the cookie information setting software 110 after the request for writing the encrypted cookie information 540 and the simple identification data 550 to the cookie information storage server 200 is completed. Good.

  The transmission / reception means 120 transmits / receives data to / from the cookie information storage server 200 via the communication network. The transmission / reception means 120 uses, for example, customer information 530 input from the input device 150, ID 510 read from the recording medium 400 via the recording medium reading / writing device 170, or encryption created by the cookie information setting software 110. The cookie information 540 and the simple identification data 550 are transmitted to the cookie information storage server 200, or the ID 510, the password 520 assigned to the user from the cookie information storage server 200, and the encrypted cookie information 540 held in the cookie information DB 220. Or the simple identification data 550 is received. Note that the transmission / reception unit 120 specifically includes browser software that operates in accordance with screen (for example, registration screen) information of a Web page displayed by accessing a predetermined Web page, and instructions from the cookie information setting software 110. The data may be transmitted and received according to the above. The transmission / reception means 120 is realized by, for example, a communication control device.

  The display unit 130 transmits data to be displayed on the display device 140. The display unit 130 is realized by a display driver, for example. The display device 140 is a device that outputs the data received from the display unit 130 in a format that can be recognized by the user. The display device 140 is realized by a display device, for example. The input device 150 is a device that inputs data (for example, customer information or a password) in response to a user operation. The input device 150 is realized by a keyboard, for example.

  The ID writing software 160 performs control for writing the ID 510 assigned from the cookie information storage server 200 to the recording medium 400 at the time of user registration in the system. The ID writing software 160 includes writing means 161. The writing unit 161 has an interface with the recording medium reading / writing device 170, and stores the ID 510 in the recording medium 400 that is connected to, inserted into, or held over the recording medium reading / writing device 170. Let

  The ID writing software 160 can also be realized as a function of the cookie information setting software 110. Note that the ID 510 is not necessarily stored in the recording medium 400. For example, the ID 510 received from the cookie information storage server 200 may be displayed on the registration screen, and the user may input the ID 510 when using it on another computer. In such a case, the ID writing software 160 and the recording medium reading / writing device 170 can be omitted. Note that it is more preferable to record the ID 510 on the recording medium 400 in terms of security and convenience.

  The recording medium reading / writing device 170 is a device that is connected to or built in the computer 100 and that writes at least ID 510 to and from the recording medium 400. The recording medium reading / writing device 170 is realized by, for example, a media drive corresponding to a readable / writable medium, a card slot, an IC card reader / writer, or a USB connector.

  Next, the configuration of the computer 300 will be described. The computer 300 is a computer used to use / update the cookie information held in the cookie information storage server 200. The cookie information setting software 310, the transmission / reception means 320, the display means 330, and the display device 340, an input device 350, and a recording medium reading / writing device (reader / writer in FIG. 1) 370. When the user uses this system using the computer 300, the ID 510 is already written in the recording medium 400 by the computer 100, so the ID writing software 160 is not necessary in the computer 300.

  The cookie information setting software 310 is a software program (cookie information setting software 610) transmitted from the cookie information storage server 200 when the computer 300 makes a service start request to the cookie information storage server 200 in response to a user operation. Is developed on the computer 300. The service start request to the cookie information storage server 200 may be made, for example, by accessing a service start Web page published by the cookie information storage server 200.

  The cookie information setting software 310 on the computer 300 specifically reads the ID 510 from the recording medium 400 using the recording medium reading / writing device 370 and designates the ID 510 to the cookie information storage server 200. A request to read the encrypted cookie information 540 and the simple identification data 550 is made, or the encrypted cookie information 540 transmitted from the cookie information storage server 200 is decrypted by the decryption means 312 and expanded as the cookie information 380. Further, the cookie information 380 updated on the computer 300 is encrypted by the encryption means 311 to generate the encrypted cookie information 540 and the simple identification data 550, or the encrypted cookie information generated by the cookie information storage server 200. A request to write information 540 and simple identification data 550 is made. Here, the expansion as the cookie information 380 specifically means that the information is stored in a location where the cookie information 380 is stored so that the computer 300 can process the information as the cookie information 380. In addition, the cookie information setting software 310 is configured to store the cookie information 380 that currently exists before the information obtained by decrypting the encrypted cookie information 540 is expanded as the cookie information 380. (Temporary cookie information 390 in FIG. 1) is temporarily stored in a different location. The saved cookie information 390 is restored (redeployed) as the cookie information 380 after the encrypted cookie information 540 is held in the cookie information storage server 200.

  Next, the operation of the present embodiment will be described. First, the operation at the time of user registration using the computer 100 will be described. FIG. 3 is a flowchart showing the operation of the present embodiment at the time of user registration. In this example, a case where the user “A” performs user registration using the computer 100 will be described as an example.

  First, in response to an operation from the user “A”, the computer 100 accesses the cookie information storage server 200 via the Internet by communication using SSL (step S101). For example, the computer 100 accesses a registration web page published by the cookie information storage server 200 in response to a user operation on the web browser. Thereafter, all exchanges between the computer 100 and the cookie information storage server 200 are performed by communication using SSL.

  It is assumed that the recording medium 400 for storing the ID 510 assigned from the cookie information storage server 200 is inserted or held in the recording medium reading / writing device 170 by the user “A”. Note that the recording medium 400 may be inserted or held in the recording medium reading / writing device 170 before step S107. For example, when the ID 510 assigned by the cookie information storage server 200 is displayed, a message for inserting or holding the recording medium 400 may be displayed on the recording medium reading / writing device 170.

  Next, the input device 150 of the computer 100 inputs customer information 530 in response to an operation from the user “A” (step S102). Then, the transmission / reception means 120 of the computer 100 transmits a registration request including customer information 530 input from the input device 150 to the cookie information storage server 200 in accordance with screen control based on a user operation on the accessed Web page ( Step S103).

  The registration unit 210 of the cookie information storage server 200 accepts a registration request from the computer 100 transmitted from the computer 100. Upon receiving the registration request, the registration unit 210 assigns an ID 510 and an authentication password 520 to the user (user “A”), and associates the customer information 530 included in the registration request with the assigned ID 510 and password 520. In addition, it is registered (recorded) in the cookie information DB 220 as customer data 500 (step S104). Then, the assigned ID 510 and password 520, cookie information setting software 610, and ID writing software 620 are transmitted to the requesting computer 100 (step S105).

  The transmission / reception means 120 of the computer 100 receives data (ID 510 and password 520, cookie information setting software 610 and ID writing software 620) transmitted from the cookie information storage server 200. Then, the received ID 510 and password 520 are transferred to the display means 130 and displayed on the display device 140 (step S106). For example, the transmission / reception unit 120 transmits Web page screen information that displays the ID 510 and the password 520 to the display unit 130 according to an instruction from the browser software that operates according to the screen information of the registration Web page. The data may be converted into data that can be recognized by the display device 140 and output to the display device 140.

  The received cookie information setting software 610 and the ID writing software 620 are developed on the computer 100 by an operation from the user “A” according to an instruction displayed on the Web page, for example, and the cookie information in the computer 100 is displayed. The processing starts as the setting software 110 and the ID writing software 160.

  First, the ID writing software 160 writes the ID 510 assigned to the recording medium 400 inserted or held in the recording medium reading / writing device 170 via the writing unit 161 (step S107). Note that the ID writing software 160 may perform processing for writing the ID 510 to the recording medium 400 in accordance with an instruction from the cookie information setting software 110. Note that when the user manually inputs the ID 510 at the time of use, the process of writing the ID 510 to the recording medium 400 can be omitted.

  The user registration is completed when the customer data 500 of the user “A” is registered in the cookie information DB 220 and the user “A” recognizes the ID 510 and the password 520. In this example, the cookie information 180 held in the current computer 100 is subsequently uploaded to the cookie information storage server 200. Note that the cookie information 180 may not be automatically uploaded, but may be received in response to an upload instruction from the user.

  The cookie information setting software 110 passes the cookie information 180 currently held in the computer 100 together with the assigned ID 510 (or ID 510 read from the recording medium 400) to the encryption unit 111, and encrypts the cookie information 180. (Step S108). The encryption unit 111 encrypts the cookie information 180 by using the ID 510 to create the encrypted cookie information 540. In addition, the encryption unit 111 creates simple identification data 550 for easily identifying the encrypted cookie information 540 when the cookie information 180 is encrypted.

  When the encrypted cookie information 540 and the simple identification data 550 are created by the encryption unit 111, the cookie information setting software 110 sends a write request specifying the ID 510 of the user “A” via the transmission / reception unit 120. It transmits to the information storage server 200 (step S109). For example, the message identifier includes a write request, the user identifier includes ID 510 and a password 520, the write target specification includes encrypted cookie information 540 and simple identification data 550, and the write data includes A write request including the encrypted cookie information 540 and the simple identification data 550 is transmitted to the cookie information storage server 200.

  Then, the transmission / reception means 240 of the cookie information storage server 200 receives the write request from the computer 100, and the encrypted cookie information 540 and the simple identification data of the customer data 500 associated with the ID 510 registered in the cookie information DB 220. 550 is updated (step S110). The transmission / reception means 240 accesses the customer data 500 only when the access is permitted after the authentication means 230 authenticates the access (write request) before updating the information of the customer data 500. In addition, when the customer data 500 is updated, the cookie information DB 220 may copy the encrypted cookie information 540 to the backup area 570 of the customer data 500 or update the usage history 560.

  In addition, the cookie information setting software 110 of the computer 100 may self-delete the cookie information setting software 110 when a write request to the cookie information storage server 200 is completed. For example, the cookie information setting software 110 may confirm that the usage history 560 of the customer data 500 of the current user has been updated, or may delete itself in response to an end instruction from the cookie information storage server 200. The self-erasure may be realized by, for example, preparing as a program on the cookie information setting software 110 and executing the self-erasure program upon completion of the process. For example, if the cookie information setting software 110 is executed on a temporary file, it can be automatically deleted at the next startup. Note that the cookie information setting software 110 does not necessarily have to be self-erased. For example, depending on the setting of the cookie information setting software 110, the presence / absence of self-erase or the presence / absence of automatic upload may be switched.

  Through the above operation, the cookie information 180 held in the computer 100 becomes the encrypted cookie information 540 encrypted using the ID 510 and is uploaded to the customer data 500 of the cookie information DB 220.

  Next, an operation when the encrypted cookie information 540 uploaded by the computer 100 is used and updated by the computer 300 will be described. FIG. 4 is a flowchart showing the operation of the present embodiment at the time of using and updating the encrypted cookie information 540. In this example, the encrypted cookie information 540 obtained by encrypting the cookie information 180 in the computer 100 by the user “A” is registered in the cookie information storage server 200. The recording medium 400 possessed by the user “A” stores an ID 510 assigned to the user “A”. Note that the operation of using and updating the encrypted cookie information 540 can be performed not only by the computer 300 but also by the computer 100 or another computer.

  The computer 300 accesses the cookie information storage server 200 via the Internet by communication using SSL in response to an operation from the user “A” (step S201). For example, the computer 300 accesses a web page for starting a service published by the cookie information storage server 200 in response to a user operation on the web browser. Here, when the computer 300 accesses the Web page for starting a service, the cookie information setting software 610 is transmitted from the cookie information storage server 200 to the computer 300 (step S202).

  Note that the recording medium 400 storing the ID 510 assigned by the cookie information storage server 200 is inserted or held over the recording medium reading / writing device 370 by the user (user “A”). To do.

  The transmission / reception means 320 of the computer 300 receives the data (cookie information setting software 610) transmitted from the cookie information storage server 200. The received cookie information setting software 610 is developed on the computer 300 by a user operation in accordance with an instruction displayed on a Web page, for example, and starts processing as the cookie information setting software 310 in the computer 300.

  First, the cookie information setting software 310 reads the ID 510 stored in the recording medium 400 inserted or held in the recording medium reading / writing device 170 (step S203). Also, the cookie information setting software 310 displays a password input screen presenting the read ID 510, for example, and allows the user to input the password 520. The input device 350 of the computer 300 inputs the password 520 in response to a user operation (step S204).

  When the ID 510 is read and the password 520 is input, the cookie information setting software 310 reads the specified ID 510 (that is, the ID 510 of the user “A”) via the transmission / reception unit 320. The request is transmitted to the cookie information storage server 200 (step S205). For example, a read request including a message identifier indicating that the request is a read request, ID 510 and password 520 as a user identifier, and specifying the encrypted cookie information 540 and the simple identification data 550 as a read target is specified. It transmits to the information storage server 200.

  Then, the transmission / reception means 240 of the cookie information storage server 200 receives a read request from the computer 300 and specifies the customer data 500 associated with the ID 510 (ID 510 of the user “A”) registered in the cookie information DB 220. The information (encrypted cookie information 540 and simple identification data 550) is read and transmitted (step S206). The transmission / reception means 240 accesses the customer data 500 only when the access (read request) is authorized by the authentication means 230 before the information of the customer data 500 is read and the access is permitted. The cookie information DB 220 may update the usage history 560 of the customer data 500 when the customer data 500 is read.

  Further, the cookie information setting software 310 of the computer 300 receives the encrypted cookie information 540 and the simple identification data 550 associated with the ID 510 of the user “A” from the cookie information storage server 200 via the transmission / reception unit 320.

  The cookie information setting software 310 that has received the encrypted cookie information 540 and the simple identification data 550, first, temporarily stores the cookie information 380 currently held in the computer 300, and a location other than the location where the cookie information 380 of the computer 300 is stored. (Step S207). Hereinafter, the saved cookie information 380 is referred to as saved cookie information 390.

  Next, the cookie information setting software 310 passes the received encrypted cookie information 540 together with the ID 510 of the user “A” to the decryption means 112, decrypts the encrypted cookie information 540, and develops it as the cookie information 380. (Step S208). The decryption unit 312 decrypts the encrypted cookie information 540 using the input ID 510. The cookie information setting software 310 uses the cookie information (here, the cookie information 180 held on the computer 100 when the user “A” uses the computer 100) obtained by the decryption by the decryption unit 312. Expanded as information 380. That is, the cookie information obtained by decoding is overwritten and stored in a location where the cookie information 380 is stored.

  Thereafter, the computer 300 can receive the Web service by using the cookie information 380 that is the content of the cookie information (that is, the cookie information 180) obtained by decrypting the received encrypted cookie information 540. Become. The received simple identification data 550 may be stored in the externally inaccessible area 313 together with the ID 510.

  Next, when the cookie information setting software 310 recognizes the end of the use of the service of this system (Yes in step S209), the cookie information 380 at that time is passed to the encryption unit 311 together with the ID 510, and the cookie information 380 is encrypted. (Step S210). Using the ID 510, the encryption unit 311 encrypts the cookie information 380 and creates the encrypted cookie information 540. Then, the cookie information setting software 310 transmits a write request designating the ID 510 of the user “A” to the cookie information storage server 200 via the transmission / reception unit 320 (step S211). Here, the cookie information setting software 310 stores the encrypted cookie information 540 received from the cookie information storage server 200 at the start of the service stored in the externally inaccessible area 313 and the encrypted cookie created by the encryption unit 311. The write request may be transmitted only when there is a difference between the information 540 and the information 540. Note that the write request to the cookie information storage server 200 is the same as step S109 in FIG.

  In addition, the cookie information setting software 310 periodically monitors whether or not the recording medium 400 is removed from the recording medium reading / writing device 370, for example, when detecting that the recording medium 400 is disconnected. In addition, the end of use of the service may be recognized. Further, for example, the cookie information setting software 310 may display a screen (such as an end button) on which an end instruction can be input, and the end may be recognized according to a user operation. Also, for example, an end flag is transmitted to the cookie information storage server 200 when the cookie information storage server 200 elapses for a certain time from the start of service use, and the end processing is automatically performed when the end flag is received from the cookie information storage server 200. May be performed.

  Then, the transmission / reception means 240 of the cookie information storage server 200 receives the write request from the computer 100, and the encrypted cookie information 540 and the simple identification data of the customer data 500 associated with the ID 510 registered in the cookie information DB 220. 550 is updated (step S212). The update of the customer data 500 is the same as step S111 in FIG.

  Then, when the write request for the cookie information storage server 200 is completed, the cookie information setting software 310 of the computer 300 restores the saved cookie information 390 (step S213). For example, the cookie information setting software 310 may restore the saved cookie information 390 by overwriting the saved cookie information 390 in a location where the cookie information 380 is stored. Then, after restoring the saved cookie information 390, the cookie information setting software 310 may self-delete the cookie information setting software 310.

  When the computer 300 is a computer at the user's home, the saved cookie information 390 is not necessarily restored when the service ends. Further, the cookie information setting software 310 does not necessarily have to be self-erased. For example, the presence / absence of restoration of cookie information or the presence / absence of self-erase may be switched according to the setting of the cookie information setting software 310.

  As described above, according to the present embodiment, by storing the encrypted cookie information 540 in the cookie information storage server 200, it is possible to safely use the same Web service identification information from different computers. Therefore, the use of the Web service identification information can be made convenient. Further, according to the present embodiment, the cookie information setting software 610 that is transmitted from the cookie information storage server 200 and automatically expanded performs processing for causing the cookie information storage server 200 to store the encrypted cookie information 540. Therefore, the user does not need special knowledge for operation.

  Further, by using the encrypted cookie information 540 not only for information stored in the cookie information storage server 200 but also for transmission / reception therefor, leakage of personal information stored as cookie information can be prevented. In addition, Cookie information existing before the start of the system is temporarily saved, and the Cookie information is restored at the end of the service, thereby preventing other users from recognizing the Web service identification information of the user. Can do. Further, since the web service identification information is not stored in the recording medium, the user does not carry the web service identification information, so there is no risk of leakage of personal information due to the user's own negligence.

  The present invention is not limited to a personal computer, but can be applied to any system provided with a terminal that holds Web service identification information according to an instruction from the Web service side.

It is explanatory drawing which shows the structural example of the web service identification information utilization system by this invention. It is explanatory drawing which shows the example of a data structure of the customer data. It is a flowchart which shows the operation | movement of this Embodiment at the time of user registration. It is a flowchart which shows the operation | movement of this Embodiment at the time of utilization and update of encryption Cookie information 540.

Explanation of symbols

100, 300 computers (user side computers)
110, 310 Cookie information setting software 111, 311 Encrypting means 112, 312 Decrypting means 113, 313 Non-accessible area 120, 320 Transmitting / receiving means 130, 330 Display means 140, 340 Display device 150, 350 Input device 160 ID writing software 161 Writing means 170, 370 Recording medium reading / writing device 180, 380 Cookie information 390 Saving cookie information 200 Cookie information storage server 210 Registration means 220 Cookie information database 230 Authentication means 240 Transmission / reception means 400 Recording medium 500 Customer data 510 ID
520 Password 530 Customer information 540 Encrypted cookie information 550 Simple identification data 610 Cookie information setting software 620 ID writing software

Claims (10)

A web service identification information utilization system for sharing and using web service identification information, which is information used by a web service held in a user side terminal in accordance with an instruction from the web service side, between different terminals,
A user terminal used by a user, and a storage server device connected to the user terminal via a communication network,
The storage server device
A web service identification information storage device that stores at least a user identifier for identifying a user and an encrypted web service identification information obtained by encrypting the web service identification information of the user in association with each other;
The user terminal is
An encrypted Web in which the Web service identification information currently stored in the user terminal is encrypted in the Web service identification information storage device using the user identifier assigned to the current user of the user terminal. Update means for storing service identification information and the user identifier used for the encryption in association with each other;
From the Web service identification information storage device, the encrypted Web service identification information stored in association with the user identifier assigned to the current user of the user terminal is read and used. A Web service identification information utilization system comprising: a utilization unit that decrypts the information obtained by decrypting the information and expands the information obtained by the decryption as the Web service identification information in the user terminal. A user terminal for sharing and using web service identification information, which is information used by a web service held in a user terminal in accordance with an instruction from the web service side, between different terminals,
Using the user identifier assigned to the current user of the user terminal in the Web service identification information storage device provided in the predetermined server device connected to the user terminal via the communication network Updating means for storing the encrypted Web service identification information obtained by encrypting the Web service identification information currently held in the user terminal and the user identifier used for the encryption in association with each other;
The encrypted web service identification information stored in association with the user identifier assigned to the current user of the user terminal is read from the web service identification information storage device and used. A user terminal comprising: a means for decoding the information obtained by decoding the information, and expanding the information obtained as the Web service identification information in the user terminal. Update means
Using the user identifier input to the user terminal, encrypting the Web service identification information currently held in the user terminal to create encrypted Web service identification information;
A storage unit that stores the Web service identification information storage device in association with the encrypted Web service identification information created by the encryption unit and the user identifier used for the encryption;
Use means are
Reading means for reading out encrypted Web service identification information stored in association with a user identifier input to the user terminal from the Web service identification information storage device;
Decryption means for decrypting the encrypted Web service identification information read by the reading means using the user identifier used for the reading;
The user terminal according to claim 2, further comprising: expansion means for expanding the information decrypted by the decryption means as Web service identification information in the user terminal. The encryption means encrypts the Web service identification information to create the encrypted Web service identification information, and the simple identification data that is information for identifying the content without decrypting the encrypted Web service identification information Create
The storage means stores the user identifier, the encrypted Web service identification information, and the simple identification data in association with each other in the Web service identification information storage device,
The reading means reads the encrypted Web service identification information and the simple identification data stored in association with the user identifier input to the user terminal from the Web service identification information storage device,
The storage means compares the simple identification data read by the reading means with the simple identification data created by the encryption means, and when there is a difference, information in the Web service identification information storage device The user terminal according to claim 3. The utilization means saves the current web service identification information in the user terminal before expanding the information obtained by decrypting the encrypted web service identification information as the web service identification information in the user terminal,
The update unit restores the saved Web service identification information after the encrypted Web service identification information is stored in the Web service information storage device. User terminal. The saving means and the utilization means are realized by causing a data processing device that operates according to a program of the user terminal to read a software program transmitted from a predetermined server device. The user terminal according to claim 1. A storage server device for sharing and using Web service identification information, which is information used by a Web service held in a user terminal in accordance with an instruction from the Web service side, between different terminals,
A web service identification information storage device that stores at least a user identifier for identifying a user and encrypted web service identification information obtained by encrypting the web service identification information of the user in association with each other;
A write request execution means for storing the user identifier and encrypted Web service identification information included in the write request in association with each other in the Web service identification information storage device in response to a write request from a user terminal;
In response to the read request from the user terminal, the encrypted web service identification information stored in association with the user identifier included in the read request is read from the web service identification information storage device, and the request source A storage server device, comprising: a read request execution means for transmitting to a user terminal. A method of using web service identification information for sharing and using web service identification information, which is information used by a web service held in a terminal on a user side in accordance with an instruction from the web service side, between different terminals,
The user identifier assigned to the current user of the user terminal in the Web service identification information storage device provided in the predetermined server device connected to the user terminal via the communication network And stores the encrypted Web service identification information obtained by encrypting the Web service identification information currently held in the user terminal and the user identifier used for the encryption in association with each other,
The user terminal reads out the encrypted Web service identification information stored in association with the user identifier assigned to the current user of the user terminal from the Web service identification information storage device. A method of using Web service identification information, comprising: decoding using a user identifier; and developing the information obtained by decoding as Web service identification information in the user terminal. A method of using web service identification information for sharing and using web service identification information, which is information used by a web service held in a terminal on a user side in accordance with an instruction from the web service side, between different terminals,
In response to a write request from a user terminal, a storage server device that manages Web service information for each user stores a user identifier and an encryption included in the write request in a Web service identification information storage device provided in the storage server. Web service identification information is stored in association with each other,
In response to a read request from a user terminal, the storage server device stores encrypted Web service identification information stored in association with the user identifier included in the read request from the Web service identification information storage device. Is read and transmitted to the user terminal that is the request source. A web service identification information utilization program for sharing and using web service identification information, which is information used by a web service held in a user side terminal in accordance with an instruction from the web service side, between different terminals,
On the computer used by the user,
A Web service identification information storage device provided in a predetermined server device connected to the computer via a communication network is currently stored in the computer using a user identifier assigned to the current user of the computer. A process for storing the encrypted Web service identification information obtained by encrypting the current Web service identification information in association with the user identifier used for the encryption, and from the Web service identification information storage device, The encrypted Web service identification information stored in association with the user identifier assigned to the user is read out, decrypted using the user identifier, and the information obtained by decryption is stored in the computer. Web for executing processing to develop as Web service identification information -Bis identification information utilization program.

Images