JP2008310548A - Filtering processor, content filter production method, content filter production program and content filter production program recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide technology for performing filtering having an excellent real time property or excellent flexibility without imposing a large load on processing, in an information processor having a filter function for a content. <P>SOLUTION: The information processor 1 having the filter function issues a retrieval request by a set retrieval keyword to a retrieval site 5 designated by set retrieval site information (a URL or the like of the retrieval site 5), extracts content specification information (a URL or the like of a content disclosure site 6) of the content corresponding to the retrieval keyword from a retrieval result thereof, and registers it into a filtering target list. When receiving an access request from a client terminal 2, the information processor 1 extracts the content specification information that is a target of the access request, and decides permission/non-permission of access by whether the extracted content specification information is present in the filtering target list or not. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to content filtering that restricts browsing of specific content when browsing content (such as information published on a WEB site) on a network, and in particular, browsing using a search site on the network. The present invention relates to a filtering processing device that collects information on content that restricts content, a content filter creation method, a content filter creation program, and a content filter creation program recording medium.

  As the use of the Internet becomes widespread, URL filters that restrict accessible sites on the network are indispensable due to educational considerations for young people and corporate policies in business.

  FIG. 13 is a diagram illustrating a configuration example of a conventional content filtering system. In the content filtering system shown in FIG. 13, the information processing apparatus 100 having a filtering function is an apparatus that relays communication between the client terminal 200 and the network 400, and content on the network 400 that can be accessed from the client terminal 200 ( It has a filter function for restricting WEB page posting information). Examples of the information processing apparatus 100 having a filter function include a firewall apparatus and a proxy server.

  The client terminal 200 is operated by a user and issues an access request to content on the network 400. The vendor apparatus 300 is an information processing apparatus possessed by a vendor who is a provider of filtering information. The filtering information is information for filtering the access request to the content on the network 400 from the client terminal 200 by the information processing apparatus 100 having a filter function.

  In the content filtering system shown in FIG. 13, the vendor creates and provides filtering information. The information processing apparatus 100 having a filter function periodically accesses the vendor apparatus 300 to obtain filtering information, and updates the filtering information held by itself with the obtained filtering information.

  A user's access request to the content on the network 400 by a WEB browser of the client terminal 200 passes through the information processing apparatus 100 having a filter function. When an access request from the client terminal 200 is generated, the information processing apparatus 100 having a filter function regulates access from the client terminal 200 to content on the network 400 based on filtering information held by itself.

  In some cases, the information processing apparatus 100 having a filter function is not particularly arranged between the client terminal 200 and the network 400, and filtering using software having a filter function is performed inside the client terminal 200. In this case, software having a filter function in the client terminal 200 accesses the vendor apparatus 300 and acquires filtering information. Before being sent to the network 400, the access request from the client terminal 200 is subjected to access control based on filtering information by software having a filter function.

  In addition, the information processing apparatus 100 having the filter function does not acquire the filtering information from the vendor apparatus 300, but the information processing apparatus 100 having the filter function specifies the content of the access destination included in the access request from the client terminal 200. Information may be transmitted to the vendor apparatus 300, and the vendor apparatus 300 may perform filtering based on the filtering information. The information processing apparatus 100 having a filter function regulates access from the client terminal 200 to the content on the network 400 based on the filtering result of the vendor apparatus 300.

  As a typical technique for performing content filtering by the information processing apparatus 100 having the filter function, the following methods may be mentioned.

(1) Filtering by list A method of setting a list of access information to a content (such as URL of a content publishing site) in advance, and determining whether to permit / deny an access request from a user based on the list . A list (black list) that registers sites that are judged to be harmful (black list) and prohibits access to registered sites, or a list that registers sites that are judged to be useful (white list) ), And there is a white list method that allows access to only that site.

(2) Filtering by phrase search A method for judging access restrictions based on phrases specified in advance. It is checked whether or not the content requested for access contains a predetermined phrase, and permission / denial of access to the content is determined.

Note that, for example, Patent Document 1 and Patent Document 2 are documents that describe prior arts related to content filtering. In Patent Document 1, when an Internet service provider has a harmful site database in which identification data of harmful sites is registered, and the identification data of a site requested to be accessed from a user terminal is registered in the harmful site database, A technology that makes it impossible to access a site from a user terminal is described. Patent Document 2 describes a technology that searches a homepage of a server connected by an input address with a set of harmful words and prohibits the display of the homepage when a harmful word is searched from the homepage. ing.
JP 2003-023466 A JP-A-11-306113

  In the filtering by the list of (1) above, the list of access information to the set content is created by accessing the content on the vendor side and judging the harmfulness by an expert. Since the vendor's experts make the hazard judgment, the possibility of false detection of non-hazardous sites is low. However, since content appearing on the network 400 is increasing day by day, there is a possibility that the response to newly created content subject to access restriction may be delayed while the vendor creates and distributes the list. Real-time performance is difficult.

  Also, regarding the problem that the price of the information processing apparatus 100 and software having the filter function becomes high due to the man-hours required to create the filter of the URL forbidden access by the vendor, the recording range and accuracy of the list, and the update frequency There is a problem that it depends on the vendor side.

  Also, the information that the user wants to filter often differs depending on the purpose (for example, the educational purpose of the student, to comply with the company's employment rules). Creating the list to be filtered as desired by the user increases the number of man-hours for creating the list and increases the resources of the database system that manages the list. It tends to become.

  The filtering by the phrase search of (2) is excellent in real-time property and flexibility because the filtering information provided by the vendor is a phrase. However, in the information processing apparatus 100 having the filter function, a phrase search for the content occurs every time the content is accessed, which increases the CPU load and causes a time lag from the access request to the content display. There is a problem that it ends up.

  SUMMARY OF THE INVENTION An object of the present invention is to solve the above-described problems and to provide a technique capable of performing filtering with excellent real-time characteristics and flexibility without applying much load during filtering processing.

  In order to solve the above problems, the present invention utilizes a search site that provides a search function for content existing on a network, automatically detects content to be filtered, and creates a list thereof. It is characterized by realizing a real-time filtering system with low cost. Hereinafter, a solution to the above problem will be described using an example.

<Solution 1>
FIG. 1 illustrates one embodiment of the present invention. In the content filtering system shown in FIG. 1, an information processing apparatus 1 having a filter function relays communication between a client terminal 2 and an external network 4. At this time, the information processing apparatus 1 having a filtering function functions as a filtering processing apparatus that filters content on the network 4 accessed by the client terminal 2.

  The client terminal 2 can access each site (search site 5, content publishing site 6 and the like) on the external network 4 via the information processing apparatus 1 having a filter function.

  The search site 5 is a site for searching for content on the network 4. The content that matches the search keyword included in the search request is searched, and the obtained content, a list of information on the content publishing site 6 and the like are returned to the search request issuer as a search result.

  The content publishing site 6 is a site that provides content on the network 4. In the example of FIG. 1, the search site 5 and the content publishing site 6 are separately described. However, the content publishing site 6 may actually include the search site 5. That is, the search site 5 may be detected as the content disclosure site 6 by keyword search.

  In FIG. 1, the administrator of the internal network to which the client terminal 2 belongs has search site information (such as the URL of the search site 5) that is information specifying the search site 5 for the information processing apparatus 1 having a filter function, Set search keywords for search. The information processing apparatus 1 having a filter function collects filtering information using the set search site information and search keywords.

  The information processing apparatus 1 having the filter function combines the set search site information and the search keyword, and issues a search request (query) with the set search keyword to the search site 5 specified by the search site information. The response (search result) from the search site 5 is received. The search result from the search site 5 includes content specifying information (such as the URL of the content publishing site 6) that is information for specifying the content that matches the set search keyword. The information processing apparatus 1 having a filter function analyzes the received search result and extracts content specifying information of content that matches a set search keyword included in the search result.

  The extracted content specifying information is registered in the filtering target list as filtering information. For example, when the filtering target list is a black list, the extracted content specifying information is content specifying information of content whose access is prohibited. On the contrary, when the filtering target list is a white list, the extracted content specifying information is content specifying information of the content to be permitted access.

  When the information processing apparatus 1 having the filter function receives an access request from the client terminal 2, the information processing apparatus 1 determines permission / denial of access to the access request by filtering processing based on the filtering target list. If it is determined that access is not permitted, a notification that access is denied is returned to the client terminal 2 that is the issuer of the access request.

  For example, when the filtering target list is a black list, if the content identification information of the other party included in the access request from the client terminal 2 exists in the filtering target list, it is determined that access is not permitted, and the filtering target list If it does not exist, it is determined that access is permitted. Conversely, when the filtering target list is a white list, if the content identification information of the other party included in the access request from the client terminal 2 exists in the filtering target list, it is determined that access is permitted, and the filtering target list is included in the filtering target list. If it does not exist, it is determined that access is not permitted.

  Thereby, it is possible to realize filtering that achieves both the speed of the filtering process, which is the advantage of the technique (1), and the real-time property / flexibility, which is the advantage of the technique (2). In addition, since it is not necessary to receive content-specific information or a phrase list (paid) from the vendor as filtering information, an inexpensive filtering system can be constructed.

<Solution 2>
FIG. 2 illustrates one embodiment of the present invention. The content filtering system shown in FIG. 2 has a configuration in which a search information providing device 3 that is an information processing device of a search information provider such as the vendor is added to the content filtering system shown in FIG. In this configuration, search site information and search keywords are acquired from the search information providing device 3 instead of being input by the administrator of the internal network to which the client terminal 2 belongs. The information processing apparatus 1 having a filter function accesses the search information providing apparatus 3 via the network 4 and acquires search information (search site information, search keywords, etc.).

  In the above solution 1, the administrator of the internal network to which the client terminal 2 belongs must set the search site and search keyword for finding the content to be filtered. However, a certain amount of know-how is required to specify a search keyword for accurately finding the content to be filtered. In addition, the search site 5 is diversified, such as the appearance of a search site 5 specialized in a specific field in addition to the general-purpose search site 5, so that it is optimal to search with a search keyword set by the administrator. There is also a problem that the search site 5 must be found.

  In Solution 2, a search information provider such as a vendor who has human resources or resources provides search site information and search keywords, thereby reducing the labor of the administrator. In this case, a search information provider such as a vendor has a database for managing information related to the search site 5 and search keywords for filtering processing. The information processing device 1 having a filter function has a function of periodically accessing the search information providing device 3 and acquiring search site information and search keywords.

  The information processing apparatus 1 having the filter function executes a search of content by the search site 5 using the search site information and the search keyword acquired from the search information providing apparatus 3, and extracts content specifying information from the search result. The extracted content specifying information is registered in the filtering target list as filtering information, and the filtering process based on the filtering target list is performed on the access request from the client terminal 2.

  In the case of Solution 2, only the search site information and search information such as search keywords are created and managed by the vendor who is the search information provider. Therefore, on the vendor side, it is possible to provide services with fewer resources than to create and manage a filtering target list as in the past, and to provide inexpensive services. Therefore, Solution 2 costs more than Solution 1 described above, but it is possible to construct a filtering system that is less expensive to the administrator of the internal network and is somewhat inexpensive. The search information provider does not always provide search information for a fee.

<Solution 3>
Solution 3 is a partial development of solution 2 described above. As the amount of content published on the network 4 increases, the amount of content to be filtered increases. When the amount of content specifying information registered in the filtering target list increases, filtering processing takes time, and the convenience of the information processing apparatus 1 having a filter function is lowered when the processing performance is low. End up.

  In order to avoid such a situation, the information processing apparatus 1 having the filter function can create a filtering target list that is at least necessary for filtering for the subordinate client terminal 2 from the search information providing apparatus 3. From the acquired search site information and search keywords, the search site information and search keywords that are actually used for collecting the content specifying information may be narrowed down. However, it is difficult to judge the criteria for narrowing down the search site information and search keywords, which is a problem for administrators.

  In recent years, when a user wants to browse content, first, a search is performed on the search site 5 using a search keyword that symbolizes the content, and the content publishing site 6 that provides the desired content from the search result. Often it takes a procedure to find out. Therefore, which search site 5 and which search keyword among the search information (search site information, search keyword, etc.) provided by the vendor are applied to the collection of the content specifying information in the information processing apparatus 1 having the filter function. It is considered that the use status of the search site 5 and the search keyword in the client terminal 2 is reflected in the determination.

  In the information processing apparatus 1 having the filter function, when an access request from the client terminal 2 occurs, the access request is analyzed, and search information (search site information, search keywords, etc.) acquired from the search information providing apparatus 3 in the access request is analyzed. ) Is included. If the access request from the client terminal 2 includes the search site information (URL of the search site 5) included in the search information acquired from the search information providing device 3, and the search keyword, the search site information and the search keyword are entered. The keyword search is performed by the search site 5 and the content specifying information obtained from the search result is registered in the filtering target list as filtering information.

  As described above, in the solution 3, the search site information included in the access request from the client terminal 2 and the search information acquired from the search information providing device 3 by the search keyword are narrowed down. It is possible to automatically create a filtering target list that is at least necessary for filtering. That is, it is possible to create a filtering target list according to the usage status of the user without any human intervention, and it is possible to realize high-speed filtering processing in the information processing apparatus 1 having a filter function.

<Solution 4>
Solution 4 is a partial development of solution 2 described above. If there are a lot of content identification information of the content to be filtered in the search result with an unknown search keyword, the search keyword may be an effective search keyword for detecting the content to be filtered. it is conceivable that.

  Therefore, the information processing apparatus 1 having the filter function analyzes the access request from the client terminal 2 and, if it is an access request to the search site 5, temporarily stores the search keyword, and from the search site 5 to the client terminal 2. The response keyword (search result) is analyzed, and if there is a certain number or more of content identification information corresponding to the content identification information registered in the filtering target list in the response, a temporarily saved search keyword is newly added. By selecting a search keyword candidate, it is possible to automatically detect a search keyword effective for finding a filtering target.

  In the above, Solution 1 to Solution 4 have been described as examples. Here, the information processing apparatus 1 having a filter function for relaying between the client terminal 2 and the network 4 has been described as an example of a filtering processing apparatus that performs filtering of content on the network 4 to be accessed. The device may function as a filtering processing device.

  According to the present invention, content can be filtered by a list of information that directly specifies content to be filtered, and content specific information of content to be filtered is collected at any time by keyword search using a search site. Therefore, it is possible to perform filtering with excellent real-time characteristics and flexibility without imposing a heavy load on the filtering process.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following embodiment, an example of a system provided in a certain company will be described. In this company, it is assumed that all installed computer terminals (hereinafter referred to as client terminals) are connected to the external Internet via firewalls (Fire Wall) devices (hereinafter referred to as FW devices).

[Embodiment 1]
FIG. 3 is a diagram illustrating a configuration example of the content filtering system according to the first embodiment of the present invention. In the content filtering system shown in FIG. 3, the FW device 10, the client terminal 20, the Internet 40, the search site 50, and the content publishing site 60 are an information processing device 1, a client terminal 2, and a network 4 each having a filter function shown in FIG. , Search site 5, content disclosure site 6.

  The FW device 10 having a content filtering function is connected to a plurality of client terminals 20 via an intranet 70 in the company, and the FW device 10 is connected to each site (search site 50 and content publishing site 60) on the Internet 40. Is accessible. Each client terminal 20 is equipped with a WEB browser 21 for browsing various contents on the Internet 40, and each site (search site 50 or content publishing site 60) on the Internet 40 via the FW device 10. ) Is accessible.

  The FW device 10 includes a search information DB 11, an access prohibition information DB 12, a search information setting processing unit 15, an access prohibition information collection processing unit 16, and a filtering processing unit 17 as content filtering functions.

  The search information DB 11 is a database that stores search site information (in this embodiment, the URL of the search site 50) that is information for specifying the search site 50 on the Internet 40, and search information such as a search keyword used for the search. is there.

  The access prohibition information DB 12 is a database that records filtering information for filtering content accessed from the client terminal 20. In the present embodiment, as filtering information, a list of access prohibition information, which is information for specifying content prohibited from access from the client terminal 20, that is, a list of URLs of the content publishing site 60 having content that prohibits access is prohibited. Recorded in the information DB 12.

  FIG. 4 is a diagram illustrating an example of a data configuration of the access prohibition information DB. In the access prohibition information DB 12 shown in FIG. 4, a list of access prohibition sites (URLs) associated with search keywords is recorded. As the access-prohibited site (URL), the URL of the content publishing site 60 whose access is prohibited is registered. The search keyword associated with each registered access prohibited site (URL) is the search keyword used when the access prohibited site (URL) is acquired. You may manage an access prohibition site (URL), without matching with a search keyword.

  The search information setting processing unit 15 acquires and sets search information such as search site information and search keywords. In the first embodiment, search information is input by a system administrator. The search information setting processing unit 15 holds the search information set and set by the administrator in the search information DB 11.

  The access prohibition information collection processing unit 16 is means for collecting content information on the Internet 40 using the search information held in the search information DB 11, and registering the collected content information in the database as filtering information. Here, in particular, access prohibition information (that is, the URL of the content publishing site 60 having the content whose access is prohibited) is collected from the client terminal 20, and the collected access prohibition information is accessed. Accumulate in the prohibition information DB 12.

  The filtering processing unit 17 refers to the access prohibition information DB 12 and performs filtering processing for access from the client terminal 20 to the content publishing site 60.

  An operation example of the content filtering system in FIG. 3 will be described. First, the administrator sets the URL of the search site 50 to be searched and the search keyword used for the search at the search site 50 in the FW device 10 according to the security policy of the company. In the FW device 10, the search information setting processing unit 15 stores the URL of the search site 50 and the search keyword set by the administrator in the search information DB 11 as search information.

  FIG. 5 is a diagram showing an example of a search information input screen for an administrator. Here, the administrator accesses the FW device 10 with the administrator dedicated terminal. When the administrator accesses the search information setting function of the FW device 10 with the administrator dedicated terminal, a search information input screen 80 as shown in FIG. 5 is displayed on the screen of the administrator dedicated terminal. On such a search information input screen 80, the administrator inputs the URL of the search site 50 to be searched and the search keyword used for the search, and presses the setting button. A plurality of URLs and search keywords for the search site 50 can be input. The search information set here is stored in the search information DB 11.

  In the example of the search information input screen 80 shown in FIG. 5, the URL of the search site 50 and the search keyword are simply input, but the combination of the URL of the specific search site 50 and the specific search keyword is changed. It may be settable. Also, a plurality of keywords may be input by connecting them with and or or.

  In the FW device 10, the access prohibition information collection processing unit 16 is set from the search information DB 11 periodically or irregularly (when it is determined that there is no or little access from the client terminal 20 to the Internet 40). The combination of the URL of the search site 50 and the search keyword is read, and a search request using the read search keyword as a search keyword is issued to the read search site 50.

  The combination of the URL of the search site 50 and the search keyword is arbitrary. For example, when URLs of three search sites 50 and three search keywords are registered in the search information DB 11, search is performed for all combinations (3 URLs of search sites 50 × 3 search keywords = 9 combinations). A request may be issued. Alternatively, the administrator may set a combination of the URL of a specific search site 50 and a specific search keyword, and issue a search request with the set specific combination. In addition, if the administrator is set to perform a search with a plurality of search keywords at a time, a search request may be issued with a plurality of search keywords according to the setting.

  When the access prohibition information collection processing unit 16 receives a response (search result) to the search request from the search site 50, the access prohibition information collection processing unit 16 analyzes the response and extracts the URL of the content publishing site 60 having content that matches the search keyword. The URL thus stored is stored in the access prohibition information DB 12 as access prohibition information. In the example of the access prohibition information DB 12 shown in FIG. 4 above, in order to make it easy to manage the access prohibition information, the search keyword used for the search and the URL extracted from the search result are associated with each other and stored in the list. ing. If managed by a search keyword, search of the access prohibition information DB 12, batch deletion in keyword units, and the like are simplified.

  When the URL of the content publishing site 60 extracted from the search result is stored in the access prohibition information DB 12, the URL already stored in the access prohibition information DB 12 is checked, and the same URL is not yet stored. Only URLs are stored to avoid duplicate registration of URLs in the access prohibition information DB 12.

  Further, if the URL of the content publishing site 60 is extracted under predetermined conditions such as the top 30 searches, for example, the access prohibition information DB 12 can be prevented from becoming too large.

  Further, if only the upper common part (host name part, etc.) of the URL is extracted and stored for a site composed of a plurality of pages, the access prohibition information DB 12 can be prevented from becoming too large. For example, when “www.xxx.co.jp/page1”, “www.xxx.co.jp/page2”, and “www.xxx.co.jp/page3” exist, the host name “www.xxx.co .jp / "as a representative and is stored in the access prohibition information DB 12.

  In this way, the FW device 10 can efficiently collect the URL information of the content publishing site 60 whose access is prohibited without taking time and effort. The FW device 10 performs filtering using the access prohibition information collected in the access prohibition information DB 12 and restricts access to the client terminal 20.

  When receiving an access request from the client terminal 20 to the content publishing site 60, the filtering processing unit 17 in the FW device 10 extracts the URL of the other party's content publishing site 60 from the access request, and is extracted from the access request. The access prohibition information DB 12 is searched by URL. If there is no corresponding URL in the access prohibition information DB 12, the access request from the client terminal 20 is passed through the Internet 40. If there is a corresponding URL in the access prohibition information DB 12, the client terminal 20 is notified of access refusal.

  Here, whether or not the corresponding URL exists may be determined to exist only when the URL completely matches, or may be determined to include the URL partially matching. For example, when the URL extracted from the access request is “www.xxx.co.jp/page1”, if it is determined that there is only a complete match (here, the file name matches), the access prohibition information If the URL “www.xxx.co.jp/page1” is not registered in the DB 12, it is not determined to exist. When a partial match (here, a host name match) is included in the presence determination, it can be determined that the URL “www.xxx.co.jp/” is registered in the access prohibition information DB 12. .

  Note that there may be a case where some users need to access the content publishing site 60 whose URL is registered in the access prohibition information DB 12 as a business. In such a case, a database for user information (the IP address of the user's client terminal 20, the user's work, user identification information, etc.) is installed in the FW device 10, and the database is linked to the access prohibition information DB 12, Access permission / denial determination may be performed for each user.

  FIG. 6 is a flowchart of access prohibition information collection processing according to the first embodiment. The access prohibition information collection process shown in FIG. 6 is executed regularly or irregularly (when it is determined that there is no or little access from the client terminal 20 to the Internet 40).

  A combination of the URL of the search site 50 and the search keyword is acquired from the search information DB 11 (step S10), and a search request based on the acquired search keyword is issued to the search site 50 of the acquired URL (step S11). ).

  When the search result is received from the search site 50 (step S12), the search result is analyzed to extract the URL of the content publishing site 60 included in the search result (step S13). Register in the access prohibition information DB 12 (step S14).

  If there is a combination of the URL of the search site 50 that has not been searched and the search keyword in the search information DB 11 (step S15), the process returns to step S10 to acquire the combination of the URL of the search site 50 and the search keyword, Repeat the process.

  FIG. 7 is a filtering process flowchart according to the first embodiment. When an access request to the content publishing site 60 on the Internet 40 is received from the client terminal 20 (step S20), the URL of the partner content publishing site 60 is extracted from the access request (step S21), and the extracted URL is used. The access prohibition information DB 12 is searched (step S22).

  If the URL extracted from the access request exists in the access prohibition information DB 12 (step S23), the access request is not permitted (step S24). If the URL extracted from the access request does not exist in the access prohibition information DB 12 (step S23), it is determined that the access request is permitted (step S25).

[Embodiment 2]
FIG. 8 is a diagram illustrating a configuration example of a content filtering system according to the second embodiment of the present invention. In the content filtering system shown in FIG. 8, the FW device 10, the client terminal 20, the Internet 40, the FW vendor device 30, the search site 50, and the content publishing site 60 are the information processing device 1 and the client having the filter function shown in FIG. This corresponds to the terminal 2, the search information providing device 3, the network 4, the search site 5, and the content disclosure site 6. The content filtering system shown in FIG. 8 has a configuration in which a FW vendor device 30 of a vendor that provides search information is added to the content filtering system shown in FIG.

  The FW device 10 having a content filtering function is connected to a plurality of client terminals 20 via an intranet 70 in the company, and the FW device 10 is connected to each site (search site 50 and content publishing site 60) on the Internet 40. And the FW vendor apparatus 30 can be accessed. Each client terminal 20 is equipped with a WEB browser 21 for browsing various contents on the Internet 40, and each site (search site 50 or content publishing site 60) on the Internet 40 via the FW device 10. ) Is accessible.

  The FW device 10 includes a search information DB 11, an access prohibition information DB 12, a search information setting processing unit 15, an access prohibition information collection processing unit 16, and a filtering processing unit 17 as content filtering functions. The search information DB 11, access prohibition information DB 12, access prohibition information collection processing unit 16, and filtering processing unit 17 are the same as those in the first embodiment, and a description thereof is omitted here.

  In the second embodiment, the search information setting processing unit 15 acquires search information from the FW vendor apparatus 30. The FW vendor apparatus 30 is a vendor information processing apparatus that provides search information, and includes a search information master DB 31 that stores search information to be provided to the FW apparatus 10. The search information setting processing unit 15 accesses the FW vendor apparatus 30 regularly or irregularly, acquires search information (search site URL list, search keyword list, etc.), and uses the acquired search information as the search information DB 11. Hold on.

  Thereafter, as in the first embodiment, access prohibition information is collected using search information stored in the search information DB 11, and content filtering is performed using the collected access prohibition information. The collection of access prohibition information and the content filtering process are the same as those in the first embodiment, and a description thereof will be omitted.

  However, the vendor side does not always prepare search information suitable for each customer's purpose, and may provide the same search information to a plurality of customers. In this case, if the access prohibition information is collected by using all the search information acquired from the vendor unconditionally, there is a possibility that the access to the content publishing site 60 which does not need to be prohibited may be prohibited. In addition, when the number of acquired search site information (here, the URL of the search site) and the number of search keywords are large, processing for collecting access prohibition information becomes very heavy. For example, if a search request is issued for all combinations of search information with the search site 50 URL of 5 and the search keyword of 100, a total of 500 search requests are issued.

  Therefore, the administrator may be able to select and set a necessary combination from the URL of the search site 50 and the search keyword provided by the vendor according to the security policy of the company.

  FIG. 9 is a diagram illustrating an example of a search information selection screen for an administrator. When the administrator accesses the search information setting function of the FW device 10 with the administrator dedicated terminal, a search information selection screen 81 as shown in FIG. 9 is displayed on the screen of the administrator dedicated terminal. In the search information selection screen 81 shown in FIG. 9, the URL of the search site and the search keyword acquired from the FW vendor apparatus 30 and stored in the search information DB 11 are arranged. On such a search information selection screen 81, the administrator selects the URL of the search site 50 to be searched and the search keyword used for the search, and presses the setting button.

  In the example of the search information selection screen 81 of FIG. 9, the URL of the search site 50 and the search keyword are simply selected, but the combination of the URL of the specific search site 50 and the specific search keyword is selected. You may be able to do it. Also, a plurality of keywords may be selected by connecting them with and or or.

  The combination information of the search site information and the search keyword selected by the administrator is registered in the search information DB 11. The access prohibition information collection processing unit 16 collects access prohibition information based on combination information of search site information and search keywords registered in the search information DB 11.

  In order to reduce the work of the administrator, the default combination information suitable for the purpose of the provider is prepared on the vendor side, and the combination information prepared when the search information is transmitted to the FW device 10 is also transmitted. Thus, the combination information prepared as it is may be used in the FW device 10.

  As described above, in the second embodiment, the administrator can devise the search site 50 and the search keyword by himself and input them to the FW device 10 by himself / herself.

[Embodiment 3]
The third embodiment of the present invention is an embodiment in which the second embodiment is partially developed. The configuration of the content filtering system according to the third embodiment is as shown in FIG. 8 as in the second embodiment.

  In FIG. 8, when the FW device 10 receives an access request from the client terminal 20, the search information setting processing unit 15 indicates that the access request from the client terminal 20 is an access request to the search site 50 registered in the search information DB 11. If the search keyword included in the access request is a search keyword registered in the search information DB 11, a combination of the search site information (here, the URL of the search site 50) and the search keyword is set, and the search is performed. The combination information of the site information and the search keyword is registered in the search information DB 11. The access prohibition information collection processing unit 16 collects access prohibition information based on combination information of search site information and search keywords registered in the search information DB 11.

  FIG. 10 is a flowchart of search information setting processing, access prohibition information collection processing, and filtering processing according to the third embodiment. In the flowchart shown in FIG. 10, in a portion that is determined to be “applicable” for a URL or a search keyword, it may be determined that “applicable” is only a complete match, or “applicable” including a partial match. You may make it judge.

  Upon receiving the access request from the client terminal 20 (step S30), the FW device 10 analyzes the received access request and extracts the URL of the other party of the access request (step S31). The search information DB 11 is referred to by the URL extracted from the access request (step S32).

  If the URL of the search site 50 corresponding to the URL extracted from the access request does not exist in the search information DB 11 (step S33), the access prohibition information DB 12 is referred to by the URL extracted from the access request (step S34). If the URL of the content publishing site 60 corresponding to the URL extracted from the access request exists in the access prohibition information DB 12 (step S35), an access rejection notice is transmitted to the client terminal 20 (step S36). If the URL of the content public site 60 corresponding to the URL extracted from the access request does not exist in the access prohibition information DB 12 (step S35), the access request from the client terminal 20 is transmitted to the Internet 40 (step S37). A response from the content publishing site 60 is transmitted to the client terminal 20 (step S38).

  If the URL of the search site 50 corresponding to the URL extracted from the access request exists in the search information DB 11 (step S33), the search keyword is extracted from the URL extracted from the access request (step S39). The search information DB 11 is referred to by the search keyword extracted from the access request (step S40).

  If the search keyword corresponding to the search keyword extracted from the access request does not exist in the search information DB 11 (step S41), the access request from the client terminal 20 is transmitted to the Internet 40 (step S37), and the content publication for it is made. A response from the site 60 is transmitted to the client terminal 20 (step S38).

  If a search keyword corresponding to the search keyword extracted from the access request exists in the search information DB 11 (step S41), the corresponding search site information and the search keyword (the URL and search keyword of the search site 50 extracted from the access request). ) Is registered in the search information DB 11 (step S42).

  An access request from the client terminal 20 is transmitted to the Internet 40 (step S43), and a response (search result) from the search site 50 is received (step S44). The received search result is analyzed, the content specifying information included in the search result, that is, the URL of the content publishing site 60 having the content corresponding to the search keyword is extracted (step S45), and the content publishing site extracted from the search result 60 URLs are registered in the access prohibition information DB 12 (step S46). The search result from the search site 50 is transmitted to the client terminal 20 (step S47).

  In the flowchart of FIG. 10, the search result is returned to the client terminal 20 in step S47. However, even if the client terminal 20 attempts to access the content from the obtained search result list, the access is not permitted due to the filtering process by the FW device 10. Instead of returning the search result to the client terminal 20 in step S47, it may be notified that the content corresponding to the search keyword of the search request is the access prohibited content.

In this way, by narrowing down the search site information and the search information acquired from the FW vendor device 30 with the search keyword included in the access request from the client terminal 20, without having to bother the administrator. It is possible to automatically create the access prohibition information DB 12 that is at least necessary for filtering the client terminal 20. That is, since only the content specifying information extracted by the search result at the search site 50 that is likely to be accessed from the client terminal 20 is automatically stored in the access prohibition information DB 12, the size of the access prohibition information DB 12 is larger than necessary. The FW device 10 can perform high-speed filtering processing.
[Embodiment 4]
The fourth embodiment of the present invention is an embodiment obtained by partially developing the second embodiment, as in the third embodiment. The configuration of the content filtering system according to the fourth embodiment is as shown in FIG. 8 as in the second embodiment.

  In the fourth embodiment, when the access request from the client terminal 20 is a search request to the search site 50, even if the search keyword included in the search request does not exist in the search information DB 11, When the URL of the content publishing site 60 extracted from the search result for the search request is registered in the access prohibition information DB 12 with a URL exceeding a predetermined standard, the search request from the client terminal 20 is received. The included search keyword is regarded as effective as a search keyword for extracting access prohibition information, and is additionally registered as a search keyword candidate in the search information DB 11.

  The above-mentioned fixed standard can be arbitrarily determined. For example, if the criterion of “80% or more of the top 20 search results” is defined, the access prohibition information DB 12 is searched for the top 20 URLs of the search results, and 80% or more, that is, 16 or more URLs are searched. In the case of a hit, the search keyword of the search request is registered in the search information DB 11 as a search keyword effective for extracting access prohibition information.

  In FIG. 8, when the FW device 10 receives an access request from the client terminal 20, the search information setting processing unit 15 indicates that the access request from the client terminal 20 is an access request to the search site 50, and is included in the access request. If the search keyword to be searched does not exist in the search information DB 11, the search keyword included in the access request is temporarily saved in the buffer.

  The access prohibition information collection processing unit 16 analyzes the response (search result) to the access request (search request) from the client terminal 20 and extracts content specifying information (here, the URL of the content publishing site 60) extracted from the search result. Among them, when a certain standard or more exists in the access prohibition information DB 12, the content specifying information extracted from the search result is collected as access prohibition information.

  At this time, the search information setting processing unit 15 additionally registers the search keyword saved in the buffer in the search information DB 11. Further, combination information of search site information (here, the URL of the search site 50) included in the access request and a search keyword may be registered in the search information DB 11.

  11 and 12 are flowcharts of search information setting processing, access prohibition information collection processing, and filtering processing according to the fourth embodiment. In the flowcharts shown in FIG. 11 and FIG. 12, it may be determined that the URL or the search keyword is “applicable” only by the complete match, or “applicable” including the partial match. It may be determined that “Yes”.

  Upon receiving the access request from the client terminal 20 (step S50), the FW device 10 analyzes the received access request and extracts the URL of the other party of the access request (step S51). The search information DB 11 is referred to by the URL extracted from the access request (step S52).

  If the URL of the search site 50 corresponding to the URL extracted from the access request does not exist in the search information DB 11 (step S53), the access prohibition information DB 12 is referred to by the URL extracted from the access request (step S54). If the URL of the content publishing site 60 corresponding to the URL extracted from the access request exists in the access prohibition information DB 12 (step S55), an access rejection notice is transmitted to the client terminal 20 (step S56). If the URL of the content publishing site 60 corresponding to the URL extracted from the access request does not exist in the access prohibition information DB 12 (step S55), the access request from the client terminal 20 is transmitted to the Internet 40 (step S57), A response from the content publishing site 60 is transmitted to the client terminal 20 (step S58).

  If the URL of the search site 50 corresponding to the URL extracted from the access request exists in the search information DB 11 (step S53), the search keyword is extracted from the URL extracted from the access request (step S59). The search information DB 11 is referred to by the search keyword extracted from the access request (step S60).

  If the search keyword corresponding to the search keyword extracted from the access request does not exist in the search information DB 11 (step S61), the search keyword extracted from the access request is stored in the buffer (step S62).

  If a search keyword corresponding to the search keyword extracted from the access request exists in the search information DB 11 (step S61), the corresponding search site information and search keyword (the URL of the search site 50 extracted from the access request and the search keyword). ) Is registered in the search information DB 11 (step S63).

  An access request from the client terminal 20 is transmitted to the Internet 40 (step S64), and a response (search result) from the search site 50 is received (step S65). The received search result is analyzed, and the content specifying information included in the search result, that is, the URL of the content publishing site 60 having the content corresponding to the search keyword is extracted (step S66).

  If the search keyword is stored in the buffer (step S67), the access prohibition information DB 12 is referred to by the URL of each content publishing site 60 extracted from the search result (step S68). If the URL of the content public site 60 corresponding to the URL extracted from the search result exists in the access prohibition information DB 12 (step S69), the search keyword stored in the buffer is registered in the search information DB 11 (step S70). ), The combination information of the corresponding search site information and the search keyword (URL and search keyword of the search site 50 extracted from the access request) is registered in the search information DB 11 (step S71), and the buffer is cleared (step S72). . The content specifying information extracted from the search result, that is, the URL of the content publishing site 60 is registered in the access prohibition information DB 12 (step S73), and the search result from the search site 50 is transmitted to the client terminal 20 (step S74).

  If the URL of the content publishing site 60 corresponding to the URL extracted from the search result that is equal to or more than a predetermined standard does not exist in the access prohibition information DB 12 (step S69), the search result from the search site 50 is sent to the client. It transmits to the terminal 20 (step S74).

  If the search keyword is not stored in the buffer (step S67), the content specifying information extracted from the search result, that is, the URL of the content publishing site 60 is registered in the access prohibition information DB 12 (step S73). The search result is transmitted to the client terminal 20 (step S74).

  As described above, when the content specifying information existing in the access prohibition information DB 12 is included in a search result with a search keyword that does not exist in the search information DB 11, the search keyword is automatically registered by registering the search keyword in the search information DB 11. Thus, it becomes possible to obtain a search keyword effective for collecting access prohibition information.

  The processing by the FW device 10 described above can be realized by a computer and a software program, and the program can be recorded on a computer-readable recording medium or provided through a network.

  Although the first to fourth embodiments of the present invention have been described above, the present invention is not limited to these embodiments.

  For example, in this embodiment, as the filtering information, the content specifying information of the content whose access is prohibited is collected by keyword search, and the filtering process is performed using the list, that is, the black list. The content specifying information may be collected by keyword search, and the filtering process may be performed using the list, that is, the white list.

  Further, for example, in the present embodiment, the FW device 10 having the filtering function of the present invention is installed as the information processing apparatus 1 having the filtering function between the client terminal 20 and the Internet 40. Software having the filter function of the invention may be installed to perform filtering processing inside the client terminal 20.

  The features of the present embodiment described above are listed as follows.

(Appendix 1)
A filtering processor that restricts access to content on an external network,
A search information database in which search site information and search keywords, which are information for specifying search sites, are registered;
A filtering information database in which content specifying information, which is information specifying content on the external network that restricts access, is registered;
Search information setting means for registering the search site information and the search keyword in the search information database;
Issue a search request for content by the search keyword registered in the search information database to the search site registered in the search information database, collect content specifying information from the response from the search site to the search request, and collect Filtering information registration means for registering the specified content specifying information in the filtering information database;
When receiving an access request to the content on the external network, the content specifying information of the other party is extracted from the access request, and the content specifying information corresponding to the extracted content specifying information exists in the filtering information database. Filtering means for determining whether the access request is permitted or not, depending on whether or not the access request is permitted.

(Appendix 2)
In the filtering processing device described in Appendix 1,
The search information setting means acquires the search site information and the search keyword via the external network from a search information providing device that provides the search site information and the search keyword, and the acquired search site A filtering processing apparatus, wherein information and the search keyword are registered in the search information database.

(Appendix 3)
In the filtering processing device described in Appendix 1 or Appendix 2,
When the filtering information registration means receives an access request to the content on the external network, the search information information corresponding to the content specifying information of the other party extracted from the access request exists in the search information database. When the search keyword corresponding to the search keyword extracted from the access request exists in the search information database, the content specifying information is collected from the response from the search site to the access request, and the collected content specifying information is collected. Is registered in the filtering information database.

(Appendix 4)
In the filtering processing device described in any one of appendix 1 to appendix 3,
When the search information setting means receives an access request to the content on the external network, the search information information corresponding to the content specifying information of the other party extracted from the access request exists in the search information database. When the search keyword corresponding to the search keyword extracted from the access request does not exist in the search information database, the content specifying information corresponding to the content specifying information extracted from the response from the search site to the access request is The filtering processing apparatus, wherein a search keyword extracted from the access request is registered in the search information database if the filtering information database has a predetermined criterion or more.

(Appendix 5)
The filtering processing device includes:
Any one of appendix 1 to appendix 4, wherein the information processing apparatus is connected to a client terminal used by a user via an internal network and has a filter function for restricting access from the client terminal to content on the external network. The filtering processing apparatus described in the above.

(Appendix 6)
A search information database in which search site information, which is information for specifying a search site, and a search keyword are registered; a filtering information database in which content specification information, which is information for specifying content on an external network that restricts access, is registered; A content filtering method by a filtering processing device for restricting access to content on an external network,
The filtering processor is
Registering the search site information and the search keyword in the search information database;
Issue a search request for content by the search keyword registered in the search information database to the search site registered in the search information database, collect content specifying information from the response from the search site to the search request, and collect A process of registering the content identification information thus registered in the filtering information database.

(Appendix 7)
In the content filter creation method described in Appendix 6,
In the process of registering the search site information and the search keyword in the search information database, the search site information and the search keyword are provided from the search information providing device that provides the search site information and the search keyword via the external network. A search method for acquiring a search keyword, and registering the acquired search site information and the search keyword in the search information database.

(Appendix 8)
In the content filter creation method described in appendix 6 or appendix 7,
When an access request to content on the external network is received, search site information corresponding to the content identification information of the other party extracted from the access request exists in the search information database and is extracted from the access request When the search keyword corresponding to the search keyword exists in the search information database, the content specifying information is collected from the response from the search site to the access request, and the collected content specifying information is registered in the filtering information database. A content filter creating method characterized by comprising the steps of:

(Appendix 9)
In the content filter creation method described in any one of appendix 6 to appendix 8,
When an access request to content on the external network is received, search site information corresponding to the content identification information of the other party extracted from the access request exists in the search information database and is extracted from the access request If the search keyword corresponding to the search keyword does not exist in the search information database, the content specification information corresponding to the content specification information extracted from the response from the search site to the access request is determined in the filtering information database in advance. A method for creating a content filter having a filter function, comprising: a step of registering a search keyword extracted from the access request in the search information database if there is a specified criterion or more.

(Appendix 10)
A search information database in which search site information, which is information for specifying a search site, and a search keyword are registered; a filtering information database in which content specification information, which is information for specifying content on an external network that restricts access, is registered; A content filter creation program for causing a computer of a filtering processing device to restrict access to content on an external network,
Said computer,
Search information setting means for registering the search site information and the search keyword in the search information database;
Issue a search request for content by the search keyword registered in the search information database to the search site registered in the search information database, collect content specifying information from the response from the search site to the search request, and collect A content filter creation program for functioning as filtering information registration means for registering the specified content specifying information in the filtering information database.

(Appendix 11)
In the content filter creation program described in Appendix 10,
The search information setting means acquires the search site information and the search keyword via the external network from a search information providing device that provides the search site information and the search keyword, and the acquired search site Information and the search keyword are registered in the search information database.

(Appendix 12)
In the content filter creation program described in Supplementary Note 10 or Supplementary Note 11,
When the filtering information registration means receives an access request to the content on the external network, the search information information corresponding to the content specifying information of the other party extracted from the access request exists in the search information database. When the search keyword corresponding to the search keyword extracted from the access request exists in the search information database, the content specifying information is collected from the response from the search site to the access request, and the collected content specifying information is collected. Is registered in the filtering information database.

(Appendix 13)
In the content filter creation program described in any one of Supplementary Note 10 to Supplementary Note 12,
When the search information setting means receives an access request to the content on the external network, the search information information corresponding to the content specifying information of the other party extracted from the access request exists in the search information database. When the search keyword corresponding to the search keyword extracted from the access request does not exist in the search information database, the content specifying information corresponding to the content specifying information extracted from the response from the search site to the access request is A content filter creation program for registering a search keyword extracted from the access request in the search information database if the filtering information database exceeds a predetermined criterion.

(Appendix 14)
A search information database in which search site information, which is information for specifying a search site, and a search keyword are registered; a filtering information database in which content specification information, which is information for specifying content on an external network that restricts access, is registered; A recording medium on which a program for causing a computer of a filtering processing device to restrict access to content on an external network is recorded,
Said computer,
Search information setting means for registering the search site information and the search keyword in the search information database;
Issue a search request for content by the search keyword registered in the search information database to the search site registered in the search information database, collect content specifying information from the response from the search site to the search request, and collect A content filter creation program recording medium recorded with a program for functioning as filtering information registration means for registering the specified content specifying information in the filtering information database.

(Appendix 15)
In the content filter creation program recording medium described in appendix 14,
The search information setting means acquires the search site information and the search keyword via the external network from a search information providing device that provides the search site information and the search keyword, and the acquired search site Information and the search keyword are registered in the search information database. A content filter creating program recording medium.

(Appendix 16)
In the content filter creation program recording medium described in appendix 14 or appendix 15,
When the filtering information registration means receives an access request to the content on the external network, the search information information corresponding to the content specifying information of the other party extracted from the access request exists in the search information database. When the search keyword corresponding to the search keyword extracted from the access request exists in the search information database, the content specifying information is collected from the response from the search site to the access request, and the collected content specifying information is collected. Is registered in the filtering information database. A content filter creating program recording medium.

(Appendix 17)
In the content filter creation program recording medium described in any one of Supplementary Note 14 to Supplementary Note 16,
When the search information setting means receives an access request to the content on the external network, the search information information corresponding to the content specifying information of the other party extracted from the access request exists in the search information database. When the search keyword corresponding to the search keyword extracted from the access request does not exist in the search information database, the content specifying information corresponding to the content specifying information extracted from the response from the search site to the access request is A content filter creation program recording medium, wherein a search keyword extracted from the access request is registered in the search information database if the filtering information database exceeds a predetermined criterion.

FIG. 10 illustrates one embodiment of the present invention. FIG. 10 illustrates one embodiment of the present invention. It is a figure which shows the structural example of the content filtering system by Embodiment 1 of this invention. It is a figure which shows the example of a data structure of access prohibition information DB. It is a figure which shows the example of the search information input screen for administrators. 6 is a flowchart of access prohibition information collection processing according to the first embodiment. It is a filtering process flowchart by this Embodiment 1. FIG. It is a figure which shows the structural example of the content filtering system by Embodiment 2 of this invention. It is a figure which shows the example of the search information selection screen for managers. It is a search information setting process by this Embodiment 3, an access prohibition information collection process, and a filtering process flowchart. 10 is a flowchart of search information setting processing, access prohibition information collection processing, and filtering processing according to the fourth embodiment. 10 is a flowchart of search information setting processing, access prohibition information collection processing, and filtering processing according to the fourth embodiment. It is a figure which shows the structural example of the conventional content filtering system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Information processing apparatus which has a filter function 2 Client terminal 3 Search information provision apparatus 4 Network 5 Search site 6 Content release site 10 FW apparatus 11 Search information DB
12 Access prohibition information DB
DESCRIPTION OF SYMBOLS 15 Search information setting process part 16 Access prohibition information collection process part 17 Filtering process part 20 Client terminal 21 WEB browser 30 FW vendor apparatus 31 Search information master DB
40 Internet 50 Search site 60 Content publishing site 70 Intranet

Claims (8)

A filtering processor that restricts access to content on an external network,
A search information database in which search site information and search keywords, which are information for specifying search sites, are registered;
A filtering information database in which content specifying information, which is information specifying content on the external network that restricts access, is registered;
Search information setting means for registering the search site information and the search keyword in the search information database;
Issue a search request for content by the search keyword registered in the search information database to the search site registered in the search information database, collect content specifying information from the response from the search site to the search request, and collect Filtering information registration means for registering the specified content specifying information in the filtering information database;
When receiving an access request to the content on the external network, the content specifying information of the other party is extracted from the access request, and the content specifying information corresponding to the extracted content specifying information exists in the filtering information database. Filtering means for determining whether the access request is permitted or not, depending on whether or not the access request is permitted. The filtering processing device according to claim 1,
The search information setting means acquires the search site information and the search keyword via the external network from a search information providing device that provides the search site information and the search keyword, and the acquired search site A filtering processing apparatus, wherein information and the search keyword are registered in the search information database. In the filtering processing apparatus according to claim 1 or 2,
When the filtering information registration means receives an access request to the content on the external network, the search information information corresponding to the content specifying information of the other party extracted from the access request exists in the search information database. When the search keyword corresponding to the search keyword extracted from the access request exists in the search information database, the content specifying information is collected from the response from the search site to the access request, and the collected content specifying information is collected. Is registered in the filtering information database. In the filtering processing device according to any one of claims 1 to 3,
When the search information setting means receives an access request to the content on the external network, the search information information corresponding to the content specifying information of the other party extracted from the access request exists in the search information database. When the search keyword corresponding to the search keyword extracted from the access request does not exist in the search information database, the content specifying information corresponding to the content specifying information extracted from the response from the search site to the access request is The filtering processing apparatus, wherein a search keyword extracted from the access request is registered in the search information database if the filtering information database has a predetermined criterion or more. The filtering processing device includes:
5. An information processing apparatus that is connected to a client terminal used by a user via an internal network and has a filter function that restricts access from the client terminal to content on the external network. The filtering processing apparatus described in any one of. A search information database in which search site information, which is information for specifying a search site, and a search keyword are registered; a filtering information database in which content specification information, which is information for specifying content on an external network that restricts access, is registered; A content filtering method by a filtering processing device for restricting access to content on an external network,
The filtering processor is
Registering the search site information and the search keyword in the search information database;
Issue a search request for content by the search keyword registered in the search information database to the search site registered in the search information database, collect content specifying information from the response from the search site to the search request, and collect A process of registering the content identification information thus registered in the filtering information database. A search information database in which search site information, which is information for specifying a search site, and a search keyword are registered; a filtering information database in which content specification information, which is information for specifying content on an external network that restricts access, is registered; A content filter creation program for causing a computer of a filtering processing device to restrict access to content on an external network,
Said computer,
Search information setting means for registering the search site information and the search keyword in the search information database;
Issue a search request for content by the search keyword registered in the search information database to the search site registered in the search information database, collect content specifying information from the response from the search site to the search request, and collect A content filter creation program for functioning as filtering information registration means for registering the specified content specifying information in the filtering information database. A search information database in which search site information, which is information for specifying a search site, and a search keyword are registered; a filtering information database in which content specification information, which is information for specifying content on an external network that restricts access, is registered; A recording medium on which a program for causing a computer of a filtering processing device to restrict access to content on an external network is recorded,
Said computer,
Search information setting means for registering the search site information and the search keyword in the search information database;
Issue a search request for content by the search keyword registered in the search information database to the search site registered in the search information database, collect content specifying information from the response from the search site to the search request, and collect A content filter creation program recording medium recorded with a program for functioning as filtering information registration means for registering the specified content specifying information in the filtering information database.

Images