JP3823757B2 - Server device, screen data transmission method, screen display method, screen display program, distribution program, and storage medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a server device, a screen data transmission method, a screen display method, a screen display program, a distribution program, and a storage medium, for example, to a bank service provided via the Internet.
[0002]
[Prior art]
With recent advances in information technology, the spread of personal computers (PCs), and the development of information infrastructure such as the Internet, anyone can easily access bank servers, check account balances, transfer funds, and open new accounts. It has become possible to carry out various procedures such as exchange to other currencies.
For this reason, the user has been able to perform various procedures, which have been performed by visiting banks and ATMs (Automatic Teller Machine), from a PC or mobile terminal installed at home or work.
For this reason, as long as a client terminal device such as a PC or a mobile phone is connected to the Internet and logs in to a bank server, the user can receive bank services regardless of location.
[0003]
[Problems to be solved by the invention]
However, if the user can access the bank server from an arbitrary location in this way, the opportunity for the third party to see the input items that the user is inputting from the client terminal device increases.
Information that should be kept secret from third parties such as login accounts, user account numbers, transfer destinations and transfer amounts, etc. may be displayed on the client terminal device. There is a higher possibility that information will be leaked to a third party than if the transaction was made from a company.
It is also conceivable that a third party may illegally access the bank server after the user logs in to the bank server.
[0004]
Conventionally, there has been a server that unilaterally disconnects a line when a certain time has elapsed after the screen is displayed on the client terminal device. However, this allotted a certain amount of time uniformly to many screens such as login screens and transaction screens. Even if the client terminal device is forcibly logged out from the server and the line is disconnected, the screen remains displayed on the client terminal device.
In addition, the screen displayed on the client terminal device may be, for example, a screen that can be input in a short time and deleted in as short a time as possible, such as a login screen. There are various items such as account number and transfer amount that are complicated and diverse, and it is necessary to set a long display time. However, conventionally, the display time has not been set in accordance with the types of screens.
[0005]
Accordingly, an object of the present invention is to provide a server device, a screen data transmission method, a screen display method, a screen display program, a distribution program, and a storage medium that reduce the risk of information leakage to a third party and unauthorized access by a third party. Is to provide.
[0006]
[Means for Solving the Problems]
In order to achieve the above object, the present invention provides a method according to claim 1, A screen change function that changes at least a portion of the screen to be unreadable when a predetermined time has elapsed since the screen data was received, or when re-input to the input field set on the screen has reached a predetermined number of times. Is a server device that embeds a program for realizing in a client terminal device into screen data and transmits it to the client terminal device, and from the screen data sent to the client terminal device, the number or attributes of input fields set on the screen The number attribute acquisition means for acquiring at least one of the above, a calculation means for calculating a predetermined time to be set using at least one of the number or attribute acquired by the number attribute acquisition means, and calculated by the calculation means Generating means for generating the program using the predetermined time to be set as the predetermined time set in the program; Adding means for adding the program generated by the generating means to the screen data; and screen data transmitting means for transmitting the screen data to which the program is added by the adding means to the client terminal device. Characteristic server device I will provide a.
According to a second aspect of the present invention, the information to be changed by the screen change function includes input information input from the client terminal device and displayed on the display device. A server device is provided.
According to a third aspect of the present invention, the screen change function erases the screen displayed on the display device. Is a function The server apparatus according to claim 1 is provided.
According to a fourth aspect of the present invention, the client terminal has a warning display function for displaying warning information on the display device informing that the elapse of the predetermined time is near before the predetermined time elapses. Program to be realized by the device Was further incorporated The server apparatus according to claim 1 is provided.
In the invention according to claim 5, the screen data is obtained by the extension information acquisition function for acquiring the extension information indicating that the predetermined time is extended from the user in the client terminal device, and the extension information acquisition function. A program for realizing, on the client terminal device, an extension function for extending the predetermined time when extension information is acquired Was further incorporated The server apparatus according to claim 1 is provided.
In invention of Claim 6, Make a computer unreadable at least part of the screen when a predetermined time has passed since the screen data was received, or when the number of re-entries in the input field set on the screen has reached a predetermined number of times. A program for functioning as a server device that incorporates a program for realizing a screen change function to be changed in the client terminal device into the screen data and transmits it to the client terminal device, from the screen data sent to the client terminal device, A number attribute acquisition function for acquiring at least one of the number or attribute of the input field set on the screen and a predetermined time to be set are calculated using at least one of the number or attribute acquired by the number attribute acquisition function. A calculation function and a predetermined time to be set calculated by the calculation function; A generation function for generating a program for realizing the screen change function in the client terminal device using a predetermined time set in the program for realizing in the terminal device, and the screen generated by the generation function An additional function for adding a program for realizing a change function to the client terminal device to the screen data, and a screen data transmission function for transmitting the screen data to which the program is added by the additional function to the client terminal device. Program to realize I will provide a.
[0007]
DETAILED DESCRIPTION OF THE INVENTION
(First embodiment)
Hereinafter, a first embodiment of the present invention will be described in detail with reference to FIGS.
FIG. 1 is a diagram showing a configuration example of a network system to which a bank server 5 and client terminal devices 7, 7, 7,... According to the present embodiment are applied.
The bank server 5 is a server operated by a bank and is connected to the Internet 8. The bank server 5 is a server that provides services such as confirmation of deposit balance, transfer, opening of a new account, cancellation of a fixed deposit account, exchange with a foreign currency, etc. to a logged-in user.
The bank server 5 stores various screen data such as a balance confirmation screen presented to the user by the client terminal device 5. These screens are described in a computer language called HTML (Hyper Text Markup Language), for example.
The authentication server 6 is a server that performs authentication of a user by confirming a login account, a password, and the like acquired from the client terminal devices 7, 7, 7,. A user who has not been authenticated by the authentication server 6 cannot log in to the bank server 5.
[0008]
The client terminal devices 7, 7, 7,... Are connected to the Internet 8, and can communicate with the bank server 5.
The client terminal devices 7, 7, 7,... Are composed of, for example, a PC, a mobile phone, a word processor having a communication function, a digital TV with a built-in modem, and the like.
The user can receive various bank services provided by the bank server 5 by logging in to the bank server 5 from these client terminal devices 7, 7, 7.
[0009]
A browser is installed in advance in the client terminal devices 7, 7, 7,..., And HTML format screen data transmitted from the bank server 5 can be displayed on the display using this browser.
The user can communicate with the bank server 5 by inputting data such as a bank account number on the displayed screen.
[0010]
The Internet 8 is constructed by, for example, a telephone line, a cable TV network, a satellite line, an optical fiber network, or the like.
The client terminal devices 7, 7, 7,... And the bank server 5 communicate using a protocol such as TCP / IP (Transmission control protocol / internet protocol), for example.
[0011]
1, the client terminal devices 7, 7, 7,... Are directly connected to the Internet 8, but may be connected to the Internet 8 via an Internet connection broker called a provider.
In this embodiment, the client terminal device 7 and the bank server 5 are connected using the Internet 8, but the present invention is not limited to this. For example, a dedicated line, a LAN (Local Area Network), a WAN (Wide Area Area) is used. (Network) or the like.
[0012]
FIG. 2 is a diagram illustrating a configuration example of the client terminal device 7. In the present embodiment, as an example, the client terminal device 7 is configured using a PC.
Hereinafter, description will be given using one of the plurality of client terminal devices 7, 7, 7,.
A CPU (Central Processing Unit) 11 is used for various processing, calculation, condition judgment, display, etc. according to a program stored in a ROM (Read Only Memory) 12 or a program loaded in a RAM (Random Access Memory) 13. Control various devices.
[0013]
The ROM 12 is a read-only memory in which basic programs and parameters for causing the client terminal device 7 to function are stored.
The RAM 13 is a memory that stores programs and data necessary for the CPU 11 to perform various processes, and the CPU 11 can change the stored contents.
The interface 15 is connected to various devices such as the hard disk 16, the magneto-optical disk 17, the communication unit 18, the input unit 19, and the display 20 and the CPU 11, and provides an interface between these devices and the CPU 11.
[0014]
The bus line 14 is a transmission medium used when the interface 15 and the CPU 11, the ROM 12, the RAM 13, and the like transmit and receive data and control signals.
The hard disk 16 includes a storage medium that can be accessed at a high speed and has a large storage capacity, and stores various programs and data.
The hard disk 16 stores, for example, a browser 21, a line connection program 22, other programs 23, various databases 24, and the like.
[0015]
The browser is a program for displaying an HTML file on the display 20.
An HTML format file is a file that describes the structure of a document, a place with an image, a link destination, and the like using tags (a kind of reserved words). Each screen such as a transfer screen can be defined by an HTML file. By using a browser, a screen defined by an HTML file is displayed on a display or the like.
The line connection program 22 is a program for connecting the client terminal device 7 to the Internet 8 (a provider when connecting to the Internet 8 through a provider).
[0016]
The magneto-optical disk 17 is generally slower in access speed than the hard disk 16 and is detachable from the client terminal device 7, so that it is used for backup of programs and data.
The communication unit 18 is a device that connects the client terminal device 7 to the Internet 8. When the client terminal device 7 is connected to a public line, it is constituted by a modem or the like.
[0017]
The input unit 19 includes a keyboard, a mouse, and the like. The keyboard is used when inputting characters on various screens displayed by the bank server 5.
The mouse is a pointing device, and data can be input by clicking an icon, a button, or the like displayed on the display.
[0018]
The display 20 is a display device configured by, for example, a CRT (Cathode Ray Tube), a liquid crystal display, a plasma display, or the like.
The display 20 displays various screens downloaded from the bank server 5, and displays the results input by the user from the keyboard or the like.
[0019]
FIG. 3 is a diagram illustrating a configuration example of the bank server 5.
The bank server 5 is configured by a computer having a high-speed and advanced information processing function such as a workstation.
The configuration of the bank server 5 is basically the same as that of the client terminal device 7, and the functions of the CPU 29 and the display 37 are equivalent to the functions of the CPU 11 and the display 20 of the client terminal device 7.
[0020]
The hard disk 33 stores a bank business program 38, other programs 39, and various databases 70.
The banking business program 38 is a program for realizing various service providing functions related to banking business in the bank server 5.
More specifically, it is a program that displays a screen corresponding to the transaction content on the client terminal device 7 and processes various banking operations such as balance confirmation processing, transfer processing, and account opening processing in accordance with user input.
[0021]
The other program 39 stores other programs such as an OS (Operating System), a program for preventing unauthorized access from the outside, and a program used by an administrator for maintenance. The database 40 stores various data such as a record of transactions performed by the bank server 5, user registration data, and deposit balance data.
[0022]
FIG. 4 is a diagram for explaining the function of various screen data stored in the bank server 5.
The bank server 5 has login screen data 42, transaction selection screen data 44, balance confirmation screen data 45, and the like. These screen data are described in, for example, HTML, and are included in the transaction program 38 of the bank server 5.
[0023]
The bank server 5 selects appropriate screen data in response to a request from the user, such as login screen data when the user logs in, balance confirmation screen data when the deposit balance is confirmed, and the client terminal. Transmit to device 7.
More specifically, when there is an access from the client terminal device 7, the bank server 5 selects screen data (HTML document) corresponding to the access and downloads it to the client terminal device 7.
The client terminal device 7 displays the screen data acquired from the bank server 5 on the display 20 using the browser 21.
[0024]
A timeout program is written in each of these screen data. The timeout program is described in a computer language called JAVA, for example.
That is, the source code of the timeout program described in JAVA or the like is incorporated in a file such as an HTML format transmitted from the bank server 5 to the client terminal device 7. When the client terminal device 7 downloads the file in the HTML format, the client terminal device 7 displays a screen defined by the HTML on the display 20, executes a timeout program, and starts measuring the time during which the screen is displayed. To do. Then, the client terminal device 7 deletes the screen according to a timeout program when a predetermined time elapses. Note that the timeout program works with the browser.
Further, the client terminal device 7 sends a signal to log out to the bank server 5 according to the timeout program after erasing the screen, and the bank server 5 forcibly logs out the client terminal device 7 and disconnects the line.
[0025]
That is, when screen data such as a balance confirmation screen and a transfer screen is downloaded from the bank server 5 to the client terminal device 7, a timeout program incorporated in these screen data operates on the client terminal device 7, and a predetermined time is After the elapse of time, the screen displayed on the display 20 is erased.
For example, the timeout program 43 incorporated in the login screen data 42 is set to be deleted from the client terminal device 7 in 30 seconds.
Login data is a screen for entering highly confidential information such as login accounts and passwords. Also, since the input time is short, the time until the screen is cleared (hereinafter referred to as the timeout time) is shortened. It is set.
[0026]
In addition to this, for example, the timeout time of the transaction selection screen is set to 5 minutes, and the timeout time of the balance confirmation screen is set to 20 minutes.
In this way, a time-out period commensurate with the time required for the user to input can be set for each screen.
[0027]
In addition, the timeout program warns before each screen is erased (for example, 10 seconds before) in order to prevent the screen from being erased without notice while the user is operating on the client terminal device 7. A function of displaying a window on the display 20 is also provided.
[0028]
The warning window is displayed as follows.
First, when a screen is displayed on the client terminal device 7, the CPU 11 starts measuring time by a timeout program. When the timeout time is 10 seconds before, the CPU 11 transmits a warning window display signal to the bank server 5 by the timeout program.
When the bank server 5 receives the warning window display signal from the client terminal device 7, the bank server 5 transmits a signal for displaying a warning window on the display 20 of the client terminal device 7 to the client terminal device 7.
The client terminal device 7 receives the signal and displays a warning window on the display 20.
Alternatively, a program for displaying a warning window on the display 20 before the timeout time 10 seconds may be incorporated in the timeout program itself, and the warning window may be displayed by the action of this program.
[0029]
The user can know that the timeout is approaching through the warning window. The warning window includes a button for extending the timeout time. When the user clicks this button, the timeout program extends the timeout time.
[0030]
On the other hand, the bank server 5 includes a timer 46, and starts measuring time since the client terminal device 7 logged in.
The time measurement is reset to 0 each time the client terminal device 7 is accessed.
When the measurement time reaches a predetermined value (for example, 1 hour), the timer 46 forcibly logs out the client terminal device 7 and disconnects the line.
[0031]
Thus, although the line is disconnected by the timeout program incorporated in each screen, the timer 46 is installed because, for example, a power failure occurs in the client terminal device 7 or the provider to which the client terminal device 7 is connected. Even if it occurs and communication with the client terminal device 7 becomes impossible, the bank server 5 cannot recognize it, and in this case, the client terminal device is quickly logged out.
[0032]
Next, changes in display contents displayed on the client terminal device 7 when the timeout time elapses will be described with reference to FIGS. 5 and 6.
FIG. 5 is a view showing a transfer destination registration confirmation screen 55.
The transfer destination registration confirmation screen 55 is obtained by displaying the transfer destination registration confirmation screen data stored in the bank server 5 on the display 20 of the client terminal device 7.
[0033]
The transfer destination registration confirmation screen 55 includes various fields.
The registration number column 56 is a serial number for each user assigned to the transfer destination registered by the user. In the transfer destination financial institution column 57, the bank name of the transfer destination is displayed. In the branch name column 58, the branch name of the transfer destination is displayed. In the deposit type column 59, the deposit type of the transfer destination account is displayed. In the account number column 60, the account number of the transfer destination account is displayed. The recipient name field 61 displays the name of the recipient. In the transfer person name column 62, the name of the transfer person is displayed. In the telephone number column 63, the telephone number of the transfer person is displayed.
The user clicks the confirmation button 64 after confirming the items displayed in these fields. Then, these data are confirmed and registered in the bank server 5.
[0034]
FIG. 6 is a diagram showing a warning window 71.
The warning window 71 is displayed by the bank server 5 as a result of the time-out program operating together with the browser 21 on the client terminal device 7 sending a warning window display signal to the bank server 5 before the time-out period elapses.
[0035]
The warning window 71 includes a confirmation button 72 and a cancel button 73. When the confirmation button 72 is clicked by the user, the bank server 5 logs out the client terminal device 7 and then disconnects the line.
When the cancel button 73 is clicked, the display time of the registration confirmation screen 55 is extended by a predetermined time, and the login state is also maintained.
[0036]
FIG. 7 is a flowchart for explaining the operation of the timeout program.
It is assumed that the client terminal device 7 is logged into the bank server 5.
First, the bank server 5 receives access from the client terminal device 7 (step 10), and downloads screen data corresponding to the access to the client terminal device 7 (step 20).
[0037]
The timeout program downloaded to the client terminal device 7 together with the screen data starts, and starts counting the time since the screen data was downloaded to the client terminal device 7 (step 30).
The timeout program transmits a warning window display signal to the bank server 5 10 seconds before the timeout time elapses. When the bank server 5 receives the warning window display signal, the bank server 5 displays a warning window 71 on the display 20 of the client terminal device 7 (step 40).
When the user clicks the cancel button 73 and selects to extend the screen display time (step 50; Y), the timeout program extends the timeout time by a predetermined time and maintains the state in the client terminal device 7. (Step 60).
[0038]
After extending the time-out time, or when the user does not select the display time extension by clicking the confirmation button 72 (step 50; N), the time-out program terminates the login to the bank server 5 The signal is transmitted, and the bank server 5 enters an end process. Then, the timeout program erases the contents displayed on the display 20 (step 70). The bank server 5 logs out the client terminal device 7 and disconnects the connection between the client terminal device 7 and the bank server 5.
If other screen data is downloaded to the client terminal device 7 before the timeout, the timeout program included in the screen data is newly activated, and the timeout program that was activated before the screen data was downloaded Is erased.
[0039]
As described above, in the first embodiment, the following effects can be obtained.
A timeout time can be set for each screen displayed on the client terminal device 7. Therefore, it is possible to set the display time for a screen that can be input in a short time and for which highly confidential information is input, such as a login screen, to be short.
Further, when the time-out period elapses, the screen displayed on the client terminal device 7 can be erased and the connection between the client terminal device 7 and the bank server 5 can be disconnected.
Further, the warning window 71 is displayed on the client terminal device 7 before the timeout time elapses, and the user can select whether or not to extend the timeout time.
[0040]
When the user selects to extend the timeout time in the warning window 71, the connection state between the client terminal device 7 and the bank server 5 can be extended by a predetermined time.
Moreover, since the display time of the screen displayed on the client terminal device 7 is limited to a certain time, it is possible to reduce the risk that the display content can be seen by a third party.
Further, when the time-out period elapses, the line between the client terminal device 7 and the bank server 5 is disconnected. Access risk can be reduced.
[0041]
The configuration and processing operation of the present embodiment have been described above. However, the present invention is not limited to these embodiments, and various modifications can be made within the scope of the invention described in the claims. It is.
For example, the bank server 5 is not limited to banking business, and can be configured as a securities transaction server, for example.
In recent years, customers of securities companies can connect to a securities company's securities trading server or the like from a PC at home via the Internet to buy and sell stocks. Also in this case, the display time of each screen can be limited by setting a timeout time on various transaction screens displayed on the customer's PC. Accordingly, it is possible to reduce a risk that a third party can see a login account, a password, a securities transaction account, a stock name, a quantity, etc. of a stock involved in the transaction input to the securities transaction server.
[0042]
In this embodiment, when the timeout time set on each screen has elapsed, the connection between the client terminal device 7 and the bank server 5 is disconnected. Alternatively, the client terminal device 7 can be configured to simply log out. In such a configuration, when the user wants to perform a procedure on the bank server 5, the user logs in to the bank server 5 again.
Also, before disconnecting the line, the procedural state before the line disconnection is recorded in the client terminal device 7 using a cookie or the like, and when the user logs in to the bank server 5 again, the cookie is read and before the line disconnection. You may make it restart a procedure from the state of.
Furthermore, in the present embodiment, the entire screen displayed on the display 20 is erased. However, the present invention is not limited to this, and a part of display contents such as items input by the user and information to be concealed are, It may be made unreadable by painting with a predetermined color.
[0043]
(Second Embodiment)
In the second embodiment, a timeout time is automatically assigned to each screen using the number of input items on each screen.
Hereinafter, a second embodiment of the present invention will be described in detail with reference to FIGS.
The connection relationship between the bank server 5 and the client terminal device 7 via the network is the same as in FIG. 1, and the hardware configurations of the client terminal device 7 and the bank server 5 are the same as those in FIGS.
[0044]
FIG. 8 is a diagram showing each module realized by the bank server 5. These modules are implemented by software by the transaction program 38.
The screen data 84 is, for example, screen data such as balance confirmation screen data and transfer screen data, and is screen data transmitted to the client terminal device 7 by access from the client terminal device 7. This screen data does not include a timeout program.
[0045]
The input item detection module 81 acquires the number of input items and the attributes of each input item from the screen data sent to the client terminal device 7.
Input item attributes include, for example, a login number input field, an account number input field, an address input field, a click button, or a check box. Information. Alternatively, it may be information such as a field for inputting Chinese characters, a field for inputting only numbers, or the number of input characters.
The timeout time calculation module 82 acquires the number of input items and the attributes of each input item from the input item detection module 81, and calculates the timeout time to be set in the screen data 84 from these data according to a predetermined formula.
[0046]
Various expressions are possible. For example, the timeout time may be calculated from a value obtained by multiplying the number of input items by a constant, or a value obtained by adding a value weighted according to the attribute of each input field over all input items may be employed.
The timeout program writing module 83 writes a timeout program in the screen data 84 using a computer language such as JAVA using the timeout time calculated by the timeout time calculating module 82.
[0047]
The operation of this timeout program is the same as the operation of the timeout program described in the first embodiment.
The timeout program is downloaded to the client terminal device 7 together with the screen data.
The browser 21 of the client terminal device 7 displays a screen on the display 20 and the time-out program starts measuring time.
[0048]
When the elapsed time reaches the time calculated by the time-out time calculating module 82, the time-out program erases the screen of the display 20 and logs out the client terminal device 7 from the bank server 5 to disconnect the line connection. To do.
Alternatively, a warning window may be displayed before the timeout time.
The second embodiment is configured as described above, and is the same as the first embodiment except that a timeout program is automatically created from the input items of the screen data 84.
[0049]
FIG. 9 is a flowchart for explaining an operation in which the bank server 5 writes a timeout program in the screen data 84.
It is assumed that the user has already logged in to the bank server 5.
First, the bank server 5 selects screen data to be sent to the client terminal device 7 in accordance with the access from the user (step 100).
Next, the input item detection module 81 checks the screen data 84 and acquires, for example, the number of input items and the attributes of each input item (step 110).
[0050]
Next, the timeout time calculation module 82 acquires the number of input items and the attributes of the input items from the input item detection module 81, and calculates the timeout time according to a predetermined arithmetic expression (step 120).
Next, the time-out program writing module 83 acquires the time-out time calculated from the time-out time calculating module and writes the time-out program in the screen data 84 (step 130). Thereafter, the timeout program writing module 83 sends the screen data 84 in which the timeout program is written to the client terminal device 7 (step 140).
[0051]
In the second embodiment, the following effects can be obtained.
Since the timeout time of each screen is automatically calculated, there is no need to set the timeout time for each screen.
In addition, since the timeout program is automatically written in the screen data 84, it is possible to save the trouble of writing the timeout program for each screen when creating the screen data. For this reason, when screen data is changed along with expansion or change of banking business, it is only necessary to create screen data, so that work efficiency such as maintenance of screen data is improved.
Further, when changing the timeout time over the entire screen data, it is only necessary to modify the arithmetic expression of the timeout time calculation module 82. Therefore, it is not necessary to change the timeout time for each screen data, and work efficiency is improved. Will be better.
[0052]
(Third embodiment)
In an ATM (Automatic Teller Machine) installed in a bank or the like, a cash card is set and a personal identification number is entered to log in. In general, if a wrong password is entered three times, the card cannot be used.
In the third embodiment, when the user re-enters the input data in the predetermined input field in this way, the number of re-inputs is counted, and when this reaches the predetermined number, the screen of the client terminal device is displayed. In addition to erasing, the line connection is disconnected.
[0053]
Hereinafter, the third embodiment of the present invention will be described in detail with reference to FIGS.
The configuration of the client terminal device 7 and the bank server 5 in the network is the same as that shown in FIG. The hardware configurations of the client terminal device 7 and the bank server 5 are the same as those in FIGS. 2 and 3, respectively.
FIG. 10 is a diagram for explaining the re-input count program 92.
The bank server 5 transmits various screen data 91 such as a transfer screen and a balance confirmation screen to the client terminal device 7 in order to perform banking operations. In the third embodiment, a re-input count program 92 is incorporated in the screen data 91.
[0054]
The screen data 91 is, for example, a file in HTML format, and a balance confirmation screen and a transfer screen are defined in HTML.
When the client terminal device 7 receives the screen data 91, the browser 21 displays the screen on the display 20. This screen is defined by HTML.
These mechanisms are the same as those in the first embodiment and the second embodiment.
[0055]
The screen data 91 incorporates a re-input count program 92 described in a computer language such as JAVA.
The re-input count program 92 is downloaded from the bank server 5 to the client terminal device 7 together with the screen data 91.
When the re-input counter program 92 is downloaded to the client terminal device 7, it operates together with a browser provided in the client terminal device 7.
[0056]
When the user inputs an input item to the input item on the screen and then cancels and inputs the item again, the number of re-inputs is counted for each input item.
When the number of re-inputs reaches a predetermined value (for example, 3 times) set in advance, the re-input count program 92 erases the screen displayed on the client terminal device 7 and stores the client terminal device in the bank server 5. Signal 7 to log out. Then, the bank server 5 forcibly logs out the client terminal device 7.
[0057]
FIG. 11 is a flowchart showing the operation of the re-input count program 92.
The re-input count program 92 is executed by the CPU 11 of the client terminal device 7.
The re-input count program 92 counts the number of times the user re-inputs for each item such as the input of the login account and the account number of the transfer destination. This flowchart shows the operation when the re-input count program 92 counts the number of re-inputs for one item.
[0058]
It is assumed that the user has already logged into the bank server 5.
First, when the user focuses on an input item on the screen displayed on the client terminal device 7 (move the cursor to the input field to input to the input field), the counter i is set to an initial value (displays the screen). If the input is made for the first time, it is set to 0) (step 210). In the following, these operations are performed according to the re-input count program 92 downloaded from the bank server 5 together with the screen data 91 by the CPU 11 of the client terminal device 7.
[0059]
Next, when the user finishes inputting the input item (for example, it is determined by detecting that the user moves the focus to another input field or presses the return key of the keyboard) (step 220). 1 is added to i (step 230).
Next, it is determined whether the counter i is 3 or less (step 240). When the counter i is 3 or less (step 240; Y), it is further determined whether or not the user modifies the item (step 250). This determination is made, for example, by detecting that the user deletes or adds an input item once confirmed.
[0060]
If the user desires re-input (step 250; Y), the process returns to step 220, and the user performs re-input (step 220), and the counter is updated (step 230).
When the user does not wish to input again (that is, when the input item is confirmed) (step 250; N), the counting is finished. This count is stored while the screen is displayed. Then, after the user inputs another item, it is used as an initial value in step 210 when the item is re-input.
[0061]
If the count is greater than 3 in step 240 (step 240; N), the CPU 11 erases the screen of the display 20 and requests logout from the bank server 5 (step 260). The bank server 5 forcibly logs out the client terminal device 7 and then disconnects the line.
[0062]
As described above, in step 210, the number of re-inputs last time is used as an initial value. For this reason, for example, when the user first enters and confirms the login account on the login screen, then confirms by entering the password, and if the password is changed back to the login account, the login account is re-entered first. The number of re-inputs is added to the number of times.
[0063]
In the third configuration, for example, when a person who is not familiar with a login account, password, etc. inputs a value that seems to be appropriate, if the input is wrong three times, the screen display can be turned off and the line can be disconnected. .
[0064]
In this embodiment, the number of re-inputs is limited for all screens such as a login screen, a transfer screen, and a balance confirmation screen. However, the present invention is not limited to this. For example, a specific screen such as a login screen. It is also possible to configure so as to limit the number of re-inputs only for.
Further, the screen data 91 can be configured to incorporate the timeout program of the first embodiment or the second embodiment together with the re-input count program 92. In this case, there is a limit on the number of re-inputs, and the screen is erased and logged out after a predetermined time.
[0065]
(Fourth embodiment)
In the fourth embodiment, the time for disconnecting the line can be set for each screen displayed on the client terminal device 7 by the bank server 5.
The configuration of the bank server 5 and the client terminal device 7 in the network is the same as in FIG. The hardware configurations of the client terminal device 7 and the bank server 5 are the same as those in FIGS. 2 and 3, respectively.
FIG. 11 is a diagram for explaining the mechanism of the bank server 5.
The bank server 5 includes screen data 96 to be displayed on the client terminal device 7. In FIG. 12, one of the screen data is shown, but actually it is composed of a plurality of screen data such as login screen data, transfer screen data, and balance confirmation screen data.
[0066]
The screen data 96 is associated with time data 97. This time data is data defining the time for which the login state is maintained after the screen data 96 is transmitted to the client terminal device 7.
When the screen data 96 is downloaded to the client terminal device 7, the time data 97 is passed to the timer 95.
The screen data 96 is transmitted to the client terminal device 7. The client terminal device 7 can display a screen defined by the screen data 96 by the browser 21.
[0067]
The timer 95 receives time data 97 again when the screen data 96 is transmitted to the client terminal device 7 and starts measuring time. When the time specified by the time data 97 elapses, the client terminal device 7 is forcibly logged out and a line is connected.
When other screen data is transmitted to the client terminal device 7 after the screen data 96 by access from the client terminal device 7, the time data associated with the screen data is passed to the timer 95, and the timer 95 A new time measurement is started.
[0068]
With the above configuration, the bank server 5 can set the time for maintaining the connection with the client terminal device 7 for each screen data. For this reason, for example, the security of bank transactions can be enhanced by setting the connection time of the login screen or the like to a short time.
In addition, since the screen data 96 and the time data 97 are different, for example, a relational database is created from the screen data table that collects the screen data and the time data table that collects the time data. Can be managed separately.
[0069]
Further, a program for erasing the screen by the client terminal device 7 when a predetermined time elapses can be incorporated in the screen data 96.
In this case, the screen displayed on the client terminal device 7 is deleted after a predetermined time after being downloaded by the program incorporated in the screen data 96, and the line connection is disconnected by the timer 95.
Further, in this case, since there is a difference between the time when the timer 95 starts measuring time and the time when the program for deleting the screen of the client terminal device 7 starts measuring time, the timer is set to be longer than the time set by the program. The time measured at 95 is made longer. As a result, it is possible to prevent a line from being connected even though the user inputs to the screen.
[0070]
【The invention's effect】
According to the present invention, there are provided a server device, a screen data transmission method, a screen display method, a screen display program, a distribution program, and a storage medium that reduce the risk of information leakage to a third party and unauthorized access by a third party. be able to.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating a configuration example of a network system to which a bank server and a client terminal device according to an embodiment are applied.
FIG. 2 is a diagram illustrating a configuration example of a client terminal device.
FIG. 3 is a diagram showing a configuration example of a bank server.
FIG. 4 is a diagram for explaining the operation of various screen data stored in a bank server.
FIG. 5 is a view showing a transfer destination registration confirmation screen.
FIG. 6 is a diagram showing a warning window.
FIG. 7 is a flowchart for explaining the operation of a timeout program.
FIG. 8 is a diagram showing modules implemented in a bank server in the second embodiment.
FIG. 9 is a flowchart for explaining an operation in which the bank server writes a timeout program in the screen data.
FIG. 10 is a diagram for explaining a re-input count program.
FIG. 11 is a flowchart showing the operation of a re-input count program.
FIG. 12 is a diagram for explaining a mechanism of a bank server in the fourth embodiment.
[Explanation of symbols]
5 Bank server
6 Authentication server
7 Client terminal
11 CPU
12 ROM
13 RAM
14 Bus line
15 interface
16 hard disk
17 Magneto-optical disk
18 Communication Department
19 Display
21 Browser
22 Line connection program
23 programs
24 database
28 Bus line
29 CPU
30 ROM
31 RAM
32 interface
33 Hard disk
34 Magneto-optical disk
35 Communication Department
36 Input section
37 display
38 Banking program
39 programs
42 Login screen data
43 Timeout program
44 Transaction selection screen data
45 Balance confirmation screen data
46 timer
55 Transferee registration confirmation screen
71 Warning window
81 Input item detection module
82 Timeout time calculation module
83 Timeout program writing module
84 screen data
91 Screen data
92 Re-input count program
95 timer
96 screen data
97 hour data

Claims (6)

A screen change function that changes at least part of the screen to be unreadable when a predetermined time has elapsed since the screen data was received, or when the number of re-entries in the input field set on the screen has reached a predetermined number of times. Is a server device that incorporates a program for realizing in a client terminal device into screen data and transmits the program to the client terminal device,
  A number attribute acquisition means for acquiring at least one of the number or attribute of the input fields set on the screen from the screen data sent to the client terminal device;
  Calculating means for calculating a predetermined time to be set using at least one of the number or attribute acquired by the number attribute acquiring means;
  Generating means for generating the program using the predetermined time to be set calculated by the calculating means as the predetermined time set in the program;
  Adding means for adding the program generated by the generating means to the screen data;
  Screen data transmitting means for transmitting the screen data to which the program is added by the adding means to the client terminal device;
A server device comprising:   The server apparatus according to claim 1, wherein the information to be changed by the screen change function includes input information input from the client terminal apparatus and displayed on the display device. The server device according to claim 1, wherein the screen change function is a function of deleting a screen displayed on the display device. The screen data is
A program for realizing a warning display function for displaying on the display device warning information notifying that the predetermined time has passed before the predetermined time has passed is further incorporated in the client terminal device. The server device according to claim 1, characterized in that: The screen data is
In the client terminal device, an extension information acquisition function for acquiring extension information for extending the predetermined time from a user;
An extension function for extending the predetermined time when the extension information is acquired by the extension information acquisition function;
The server device according to claim 1, further comprising a program for realizing the above in the client terminal device. Make a computer unreadable at least part of the screen when a predetermined time has passed since the screen data was received, or when the number of re-entries in the input field set on the screen has reached a predetermined number of times. A program for functioning as a server device that incorporates a program for realizing a screen change function to be changed in a client terminal device into screen data and transmits it to the client terminal device
  A number attribute acquisition function for acquiring at least one of the number or attribute of input fields set on the screen from the screen data sent to the client terminal device;
  A calculation function for calculating a predetermined time to be set using at least one of the number or attribute acquired by the number attribute acquisition function;
  The screen change function is realized in the client terminal device using the predetermined time calculated by the calculation function as the predetermined time set in the program for realizing the screen change function in the client terminal device. A generation function for generating a program for
  An additional function for adding to the screen data a program for realizing the screen change function in the client terminal device generated by the generation function;
  A screen data transmission function for transmitting the screen data to which the program is added by the additional function to the client terminal device;
A program for realizing the above on a computer.

Images