JP4035410B2 - Server and method for extending a secure in-house network - Google Patents

Description

[0001]
[Technical field to which the invention belongs]
The present invention relates to a technique for constructing a secure computer network.
[0002]
[Prior art]
When extending an in-house network, various methods have been conventionally used to maintain a secure state. Typical examples include the addition of a dedicated line and the construction of a dial-up server. Security techniques include one-time passwords and encryption of transmission files using encryption software.
[0003]
[Problems to be solved by the invention]
However, the conventional technology described above requires time and effort during installation and operation. , There is a problem that it is difficult to cope with frequent expansion or configuration change. For example, in the case of a leased line, the network can be used only for client terminals in the place where the leased line is drawn, and the monthly operating cost for the company is considerable. Construction is also required for changing or adding to the network configuration. In the case of a dial-up server, there is no location restriction, but when accessing from a remote location, the communication cost increases. There are services that provide dial-up line networks, but flexible connections are not always possible. In addition, since security is not perfect, it is often used in combination with a one-time password, but it is difficult to be welcomed by the user because the management of the card that outputs the password is troublesome. In addition, when encrypting a transmission file using encryption software, it is necessary to install the same software as that of the communication partner and execute it every time communication is performed. In addition, there are many restrictions on the operating system (OS: Operating System) of the terminal used, which often requires time and effort for installation and operation.
[0004]
Accordingly, an object of the present invention is to provide a technique for easily expanding a secure in-house network.
[0005]
[Means for Solving the Problems]
The server for extending the secure in-house network according to the first aspect of the present invention is another computer in the in-house via the in-house network (for example, in-house LAN (Local Area Network) 57 (FIG. 1) in the embodiment). (For example, the communication processing unit 555 (FIG. 1) in the embodiment) that communicates with the internal mail server 51 (FIG. 1) in the embodiment, the web browser and the Internet of the client terminal outside the company, Web mail server realization means (for example, in the embodiment) that enables transmission / reception of mail within the company by communicating with Hyper Text Transfer Protocol Security (HTTPS) Inbox management unit 554 (FIG. 1)) and locations from external client terminals Mail transmission prohibiting means (for example, the destination domain management unit 551 (FIG. 1) in the embodiment) for prohibiting mail transmission to a domain other than a fixed in-house domain.
[0006]
As a result, secure communication with an external client terminal can be easily performed. First, since it is via the Internet, there are no restrictions on the installation location of the client terminal, and it is easy to introduce it from the current state of the Internet. Further, since communication is performed by HTTPS using a web browser, secure communication is possible without depending on the OS of the client terminal. Further, by prohibiting mail transmission to the outside, communication with the outside is prevented, and a secure communication environment can be maintained. Moreover, the possibility of exposure to viruses is reduced by limiting the number of communication partners. In addition, when a user of a client terminal outside the company wants to send a mail outside the company, it is necessary to use an individual mailer or the like, which makes it possible to separate the mail environment and make it easy to recognize the requirements. “Internal” includes affiliated group companies and affiliates.
[0007]
Further, the configuration may be such that only the sender address of the mail addressed to the user of the client terminal outside the company received from another computer in the company can be registered in the address book for the user of the client terminal outside the company. . As a result, only the address of the sender who sent the e-mail from the company to the outside user is registered in the address book for the user of the outside client terminal, and the outside user can freely access the outside network. It is possible to prevent e-mails from being sent and information leakage.
[0008]
Further, it may be configured such that only an address registered in an address book for a user of an external client terminal can be specified as a destination of a new mail from a user of the external client terminal. As a result, it is possible to prevent the user from inputting a new address and sending mail, and to maintain a secure communication environment.
[0009]
Further, the mail transmission prohibiting unit described above may further be configured to prohibit mail transmission from a client terminal outside the company to one or more predetermined departments. As a result, even if the destination is in-house, the addresses that can be transmitted are limited, and security management can be performed flexibly on the system side.
[0010]
According to a second aspect of the present invention, there is provided a method for extending a secure in-house network, wherein received mail data is sent to an external client terminal in response to a request from a web browser of the external client terminal. A step of transmitting by HTTPS, a step of transmitting data of a mail transmission page for reply to an external client terminal when the reply to the received mail is instructed by a user of the external client terminal, and an external client terminal And sending a mail via a secure company network only when the designated user address is within a predetermined company domain. This enables secure mail transmission / reception by HTTPS and transmission domain restriction.
[0011]
It is also possible to create a program for causing a computer to execute the information processing technology according to the present invention, and the program is, for example, a storage medium such as a flexible disk, a CD-ROM, a magneto-optical disk, a semiconductor memory, and a hard disk Alternatively, it is stored in a storage device. Moreover, it may be distributed via a network. Note that data being processed is temporarily stored in the memory of the computer.
[0012]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 shows a system outline diagram according to an embodiment of the present invention. For example, the insurance company 5 includes one or more web mail servers 55, one or more in-house mail servers 51, and one or more employees that are personal computers with a mailer function, for example. A terminal 53 is connected to the in-house LAN 57 and installed. The Web mail server 55 includes a destination registration address management unit 550, a destination domain management unit 551, a user ID management unit 552, a display screen management unit 553, an inbox management unit 554, and a communication processing unit 555. And an electronic certificate management unit 556. Further, a news database (DB) 557, an address book DB 558, and a mail box 559 are connected to the Web mail server 55.
[0013]
The destination registration address management unit 550 performs processing when the user (external user) of the Web mail server 55 registers the mail destination in the address book, and manages the address book DB 558 that is the registration destination. Note that only a predetermined domain can be registered in the address book, and the destination domain management unit 551 manages the domain. In the destination domain management unit 551, a predetermined domain (designated domain) that can be registered in the address book and that can transmit a mail message is set. For example, when an external user transmits mail, it is checked whether the mail transmission destination (destination) is a designated domain to prevent transmission to an external network.
[0014]
The user ID management unit 552 manages data used for login processing such as the ID and password of the user of the Web mail server 55. In addition, the display screen management unit 553 manages data related to the user interface, such as the layout of pages shown to external users, display / non-display settings based on predetermined conditions, and identification processing of input data from each user to the pages To do.
[0015]
The inbox management unit 554 manages mail messages addressed to individual external users using the mail box 559. Note that only mail from a specified domain is accepted, and mail that has passed a predetermined period after reception is deleted. In addition, the communication processing unit 555 controls communication processing in the Web mail server 55. For example, protocol switching control between the hyper text transfer protocol (HTTP) and HTTPS is performed.
[0016]
The electronic certificate management unit 556 issues and manages an electronic certificate for authenticating the user terminal. The electronic certificate is configured to have a predetermined expiration date and to prompt for renewal when the expiration date approaches.
[0017]
In the news database (DB) 557, notices and communication items for all users are registered. The address book DB 558 stores destination addresses registered by each user, and the mail box 559 stores mail data of all external users.
[0018]
Further, for example, the agency terminals 3 and 7 which are personal computers have a web browser function (not shown), and can browse a homepage by connecting to the Internet wirelessly or by wire. These agency terminals are operated by a user who is, for example, an insurance agency (including intermediaries and intermediaries).
[0019]
For example, in addition to one or a plurality of agency terminals 3 (or 7), one or a plurality of Web mail servers 55 described above are connected to the network 1 which is the Internet. In addition, for communication via the network 1, devices and functions necessary for Internet connection such as a domain name server (DNS) and a firewall (not shown) are used.
[0020]
FIG. 2 shows an example of the table structure of the address book DB 558 and stored data. In the example of FIG. 2, a destination registration number (NO.) Column 200, a destination name column 202, and an address column 204 are included. In this table, an address as a mail transmission destination is registered. In the destination registration number (NO.) Column 200, a unique key value capable of specifying a record is registered. In the destination name column 202, for example, a department name which is a destination name is registered. Note that it may be a title or personal name such as “in charge of XXX”. In the address column 204, the mail address of the destination is registered.
[0021]
FIG. 3 shows an example of the table configuration of the mail box 559 and stored data. In the example of FIG. 3, a reception number (reception NO.) Column 300, a title column 302, a body column 304, an attachment 1 column 306, an attachment 2 column 308, a transmission source address column 310, a transmission date and time column 312 and a reception date / time column 314 are included. The table shown in FIG. 3 includes an example of reception data for one user, and reception data for all users is registered with such a configuration. Further, although not shown, the transmission (completed) data may be stored in the mail box 559 in the same manner.
[0022]
In the column 300 of the reception number (reception number), a unique key value that can identify the record is registered. In the title column 302, the subject of the mail input by the transmission source user is registered. In the text column 304, the text of the mail input by the transmission source user is registered. In the attachment 1 column 306 and the attachment 2 column 308, file names attached to the mail by the transmission source user are registered. It is assumed that the actual attached file is stored in an attached file storage unit or the like (not shown). When three or more files are attached, the number of columns for registering attached file names may be increased, or the table may be normalized to have a configuration with a plurality of tables.
[0023]
In the sender address column 310, the mail address of the sender user is registered. In the transmission date and time column 312 and the reception date and time column 314, the date and time when the mail was transmitted and the date and time when the Web mail server 55 received the mail are registered.
[0024]
Next, the operation of the system shown in FIG. 1 will be described with reference to FIGS.
[0025]
The agency terminal 3 (or 7) transmits a Web mail page data request to the Web mail server 55 by a user operation (FIG. 4: step S1). The Web mail server 55 receives a Web mail page data request from the agency terminal 3 (step S3). When electronic certificate data is received from the agency terminal 3, the electronic certificate management unit 556 performs terminal authentication processing using the electronic certificate data.
[0026]
The display screen management unit 553 prompts the user to log in by transmitting data of a login page (not shown) to the agency terminal 3. The agency terminal 3 receives input data from the user, transmits it to the Web mail server 55, and performs login processing (step S5). Data such as a user ID and a password stored in the user ID management unit 552 is used for the login process. In the transmission / reception of login data, the communication processing unit 555 performs communication using HTTPS. Hereinafter, it is assumed that communication between the agency terminal 3 and the Web mail server 55 is performed according to the HTTPS protocol.
[0027]
The user ID management unit 552 determines whether or not login has been properly performed (step S7). If it is determined that login has not been performed properly (step S7: No route), the process returns to the login process of step S5. Note that the processing may be terminated by outputting an error message or the like.
[0028]
When it is determined that the login has been properly performed (step S7: Yes route), the user ID management unit 552 temporarily stores user data such as a user ID in the storage device (step S9). Then, the inbox management unit 554 extracts data stored in the mail box 559 using the user ID. The display screen management unit 553 generates inbox page data using the data extracted by the inbox management unit 554 and transmits it to the agency terminal 3 (step S11). The agency terminal 3 receives the data of the inbox page from the display screen management unit 553 and displays it on the display device (step S13).
[0029]
FIG. 5 shows an example of the inbox page. In the example of FIG. 5, the page is mainly composed of four frames, the message board frame 500 on the upper right side, the business menu frame 510 on the right middle side, the What's New frame 520 on the lower right side, and On the left side, a list 530 of various processing menus is included.
[0030]
The message board frame 500 is the main frame of the inbox page, and includes a “contact company” link button 501, a “send list” link button 502, a “delete” link button 503, A “destination management” link button 504, a list of received mails 505, a “previous” link button 506, and a “next” link button 507 are included.
[0031]
When the “contact with company” link button 501 is clicked, the screen shifts to a message transmission page for creating a new mail. Further, when the “transmission list” link button 502 is clicked, a transition is made to a transmission list page including a list display of mails transmitted by the user. When the “delete” link button 503 is clicked, the message selected by the check box of the received mail list 505 is deleted. Further, when the “destination management” link button 504 is clicked, a transition is made to a destination management page including a list of destinations registered by the user. Although not shown, the destination management page is configured such that destinations cannot be added or edited. It is only possible to delete registered destinations.
[0032]
The received mail list 505 includes a list of received mail addressed to the user among the data stored in the mail box 559, and includes a check box corresponding to each received mail, a reception date, and a transmission source. The name and subject (title) are also included. The title is a link button that, when clicked, moves to a message display page that shows the details of each email. When the “Previous” link button 506 or the “Next” link button 507 is clicked, the display of the received mail list 505 is switched. For example, in the example shown in FIG. 5, three emails are displayed. However, if there are four or more received emails, the previous three or next emails are displayed to display a list of emails that are not currently displayed. The display is switched to three cases. In addition, the structure which provides a scroll bar and displays it at once may be sufficient.
[0033]
The business menu frame 510 includes menu buttons for various systems that can be used when the user conducts insurance agency business. When a button indicating each business name is clicked, the screen shifts to a corresponding business page.
[0034]
A list of data stored in the news DB 557 is displayed in the new arrival news frame 520, and when a subject link button is clicked, the screen shifts to a news detail display page. Similar to the received mail list 505, a “previous” link button and a “next” link button or a scroll bar may be provided.
[0035]
The frame 530 of the list of various processing menus is provided with an “electronic certificate update” button 531 and link buttons for various processing. When an “electronic certificate update” button 531 is clicked, the electronic certificate management unit 556 performs reissue processing of the electronic certificate for the currently used user terminal. It should be noted that the message shown under the “electronic certificate update” button 531 is not displayed within a predetermined period after the electronic certificate is issued or renewed. In this case, the “update electronic certificate” button 531 may be hidden or not clickable. When any of the link buttons for various processes is clicked, the corresponding process page is displayed.
[0036]
Returning to the processing flow of FIG. 4, the agency terminal 3 accepts a selection input from the user for the inbox page (FIG. 5) (step S15). The agency terminal 3 transmits the accepted selection input data to the Web mail server 55 (step S17). The display screen management unit 553 receives the selected input data from the agency terminal 3 and temporarily stores it in the storage device (step S19). The display screen management unit 553 determines whether the selection input is browsing of a specific message (step S21). That is, it is determined whether or not the selection input operation to the inbox page (FIG. 5) by the user is a click on a link of a specific received mail title shown in the received mail list 505.
[0037]
When the selection input is not browsing of a message (step S21: No route), it is determined whether or not it is “contact to company” (step S27). That is, it is determined whether or not the selection input operation to the inbox page (FIG. 5) by the user is a click on the “contact company” link button 501. When it is determined that it is “contact to the company” (step S27: Yes route), the process proceeds to the process of step S47 (FIG. 7) (described later) via the terminal B. When it is determined that it is not “contact to the company” (step S27: No route), the corresponding processing as described in the explanation of the inbox page (FIG. 5) is performed (step S29).
[0038]
On the other hand, when it is determined in step S21 that the message was viewed (step S21: Yes route), the inbox management unit 554 extracts the data of the selected (specific) message from the mail box 559. The display screen management unit 553 generates message display page data including data of a specific message and transmits it to the agency terminal 3 (step S23). The agency terminal 3 receives the message display page data from the display screen management unit 553 and displays it on the display device (step S25). The processing shifts to the processing in FIG.
[0039]
FIG. 6 shows an example of the message display page. In the example of FIG. 6, a date / time display field 600, a transmission source (transmission source) display field 610, a “destination registration” button 611, a title display field 620, a text display field 630, an attached file link button 640, and a “save” button 650, a “reply” button 660, a “quote and reply” button 670, and a “close” button 680.
[0040]
The date and time display field 600 includes the date and time when the mail is received. The sender (sender) display field 610 includes the name and mail address of the mail sender. When the “Register Destination” button 611 is clicked, the data shown in the transmission source (transmission source) display column 610 is registered in the address book DB 558 by the destination registration address management unit 550. The registered addresses are only addresses in the domain set in the destination domain management unit 551.
[0041]
The title display field 620 includes the title of the mail, and the text display field 630 includes the text of the mail. The attached file link button 640 indicates the name of the file attached to the mail as a link button. When the file name link button is clicked, a file download page (or dialog box) is displayed (not shown), and the process proceeds to file download processing.
[0042]
When the “save” button 650 is clicked, the received mail is stored in the received mail storage unit (storage folder) set in the agency terminal 3. As a result, even if a predetermined period elapses after the mail is received and the mail is deleted from the mail box 559 by the inbox management unit 554, the user can view the mail. The received mail may be stored in the Web mail server 55.
[0043]
When the “Reply” button 660 is clicked, the screen shifts to a mail transmission page. At this time, the mail address shown in the transmission source (transmission source) display column 610 is set as the destination (transmission destination) and displayed. In addition, in order to indicate that the message is a reply, a character string in which, for example, “Re:” is added to the head of the character string displayed in the title display field 620 is displayed in the title of the mail. The destination (transmission destination) can be changed (limited) on the mail transmission page. The title of the mail can be changed and deleted on the mail transmission page.
[0044]
When the “quote and reply” button 670 is clicked, in addition to the processing when the “reply” button 660 is clicked, for example, “>” is added to the head of each line of the sentence shown in the text display field 630. The set text is set and displayed. This sentence can also be deleted and changed on the mail transmission page.
[0045]
Clicking on the “Close” button 680 closes the message display page and returns to the Inbox page (FIG. 5). The message display page and the inbox page (FIG. 5) may be configured to start up and display Web browser windows separately, or configured to use the same Web browser window. It may be. In addition, between all pages used in the present embodiment, the page may be transferred with either configuration. However, when logout processing is performed, processing other than login is performed for all pages (used window). ) Is not accepted.
[0046]
Returning to the processing flow of FIG. 7, the agency terminal 3 accepts a selection input from the user to the message display page (FIG. 6) (step S31). The agency terminal 3 transmits the accepted selection input data to the Web mail server 55 (step S33). The display screen management unit 553 receives the selected input data from the agency terminal 3 and temporarily stores it in the storage device (step S35). The display screen management unit 553 determines whether the selection input is “reply” or “quote and reply” (step S37). That is, it is determined whether or not the selection input operation to the message display page (FIG. 6) by the user is a click on “Reply” button 660 or “Reply quoted” button 670.
[0047]
When it is determined that the selection input is not “Reply” or “Reply quoted” (Step S37: No route), it is determined whether it is “Address registration” (Step S39). That is, it is determined whether or not the selection input operation to the message display page (FIG. 6) by the user is a click on the “register destination” button 611. If it is determined that the destination is registered (step S39: Yes route), if the sender's mail address is within the designated domain, the destination registration process to the address book DB 558 is performed (step S41), and the terminal C is connected. Then, the process returns to step S23 (FIG. 4). As described above, if the sender's mail address is other than the designated domain, the destination registration process is not performed. Further, an error message may be displayed.
[0048]
As described above, only the destination in the designated domain can be registered in the address book. Further, when it is determined that it is not “destination registration” (step S39: No route), the corresponding processing as described in the explanation of the message display page (FIG. 6) is performed (step S43).
[0049]
On the other hand, when it is determined in step S37 that the response is “Reply” or “Reply quoted” (step S37: Yes route), the display screen management unit 553 sets the mail address of the transmission source as the destination ( In step S45, mail transmission page data is generated and transmitted to the agency terminal 3 (step S47). The agency terminal 3 receives the mail transmission page data from the display screen management unit 553 and displays it on the display device (step S49).
[0050]
FIG. 8 shows an example of a mail transmission page. In the example of FIG. 8, the date / time display field 800, the address display field 810, the “address designation” button 811, the address list 812, the title input field 820, the text input field 830, the attached file registration field 840, the “reference” button 850, A “Save” button 860, a “Send” button 870, and a “Close” button 880 are included.
[0051]
The date / time display field 800 includes the date / time when the page is displayed. The destination display field 810 includes a “designate destination” button 811 and a destination list 812, and the destination list 812 includes the name and mail address of the mail destination. When this page is displayed when the “reply” button 660 (FIG. 6) or the “quote and reply” button 670 (FIG. 6) is clicked (step S37 (FIG. 7): Yes route). In the destination list 812, the data shown in the transmission source (transmission source) display field 610 (FIG. 6) is displayed as a reply destination. Further, when this page is displayed when the “contact company” link button 501 (FIG. 5) is clicked (step S27 (FIG. 4): Yes route), a new mail is created. Therefore, the destination list 812 is displayed with a blank. The destination list 812 is a display field, and data (destination) cannot be input to this item. However, deletion is possible. When the “designate destination” button 811 is clicked, the screen shifts to a destination designation page.
[0052]
It may be configured such that the destination list 812 can be used as an input field and a mail address of a transmission destination can be directly input. However, even in that case, the destination domain management unit 551 checks whether or not the set destination is within the designated domain at the time of transmission (described later in step S77 (FIG. 11)). Not done.
[0053]
The title input field 820 is a text box for inputting a mail title. When this page is displayed when the “reply” button 660 (FIG. 6) or the “quote and reply” button 670 (FIG. 6) is clicked (step S37 (FIG. 7): Yes route). For example, a character string in which “Re:” is added to the head of the character string shown in the title display field 620 of the message display page (FIG. 6) is displayed. Further, when this page is displayed when the “contact company” link button 501 (FIG. 5) is clicked (step S27 (FIG. 4): Yes route), a new mail is created. Therefore, the title input column 820 is displayed as a blank column.
[0054]
The text input field 830 is a text box for inputting the mail text. When this page is displayed when the “quote and reply” button 670 (FIG. 6) is clicked (step S37 (FIG. 7): Yes route), it is displayed in the text display field 630 (FIG. 6). For example, a sentence with “>” added at the beginning of each line of the sentence that has been set is displayed. Further, when this page is displayed when the “contact company” link button 501 (FIG. 5) is clicked (step S27 (FIG. 4): Yes route), a new mail is created. Therefore, the text input field 830 is displayed as a blank field.
[0055]
The attached file registration field 840 displays the file name of the file attached to the mail. An attached file may be directly input with a file name, but may be set by a process on a file reference page (or dialog box) (not shown) displayed when the “Browse” button 850 is clicked. .
[0056]
When the “save” button 860 is clicked, the transmission mail is stored in a transmission mail storage unit (storage folder) set in the Web mail server 55. As a result, even if the process is interrupted once during the creation of the outgoing mail, the user can continue to create the outgoing mail. It can also be used when the same mail text is sent to other destinations, or sent again to the same destination at a later date. Note that the storage destination may be the agency terminal 3.
[0057]
When the “Send” button 870 is clicked, mail transmission processing is performed with the input and set contents. When the “close” button 880 is clicked, the processing on the mail transmission page is terminated, and the original page (the inbox page (FIG. 5) or the message display page (FIG. 6)) is returned.
[0058]
Returning to the processing flow of FIG. 7, the agency terminal 3 accepts selection and input to the mail transmission page (FIG. 8) from the user (step S51). The agency terminal 3 transmits the received selection and input data to the Web mail server 55 (step S53). The display screen management unit 553 receives the selection and input data from the agency terminal 3 and temporarily stores them in the storage device (step S55). The display screen management unit 553 determines whether the selection input is “designation of destination” (step S57). That is, it is determined whether or not the selection input operation to the mail transmission page (FIG. 8) by the user is a click of the “designate destination” button 811.
[0059]
When it is determined that the selection input is “address designation” (step S57: Yes route), the processing shifts to the processing of FIG. If it is determined that the selection input is not “address designation” (step S57: No route), it is determined whether it is “transmission” (step S59). That is, it is determined whether or not the selection input operation to the mail transmission page (FIG. 8) by the user is a click of the “Send” button 870.
[0060]
When it is determined that the transmission is “transmission” (step S59: Yes route), the processing shifts to the processing in FIG. If it is determined that it is not “transmission” (step S59: No route), the corresponding processing as described in the explanation of the mail transmission page (FIG. 8) is performed (step S61).
[0061]
Next, a process that transits through the terminal D will be described with reference to FIG. This process is a process when it is determined in step S57 (FIG. 7) that “designation of destination” has been made (step S57: Yes route). The destination registration address management unit 550 extracts data registered in the address book of the external user stored in the address book DB 558. The display screen management unit 553 generates destination designation page data and transmits it to the agency terminal 3 (step S63). The agency terminal 3 receives the destination designation page data from the display screen management unit 553 and displays it on the display device (step S65).
[0062]
FIG. 10 shows an example of the destination designation page. In the example of FIG. 10, a destination list 100, an “OK” button 110, and a “cancel” button 120 are included. The destination list 100 includes address book data for the external user registered in the address book DB 558 by the destination registration address management unit 550. Each row shows a destination name and a destination mail address, and a check box for selection is provided on the left side. If reply source data is set in the destination display field 810 of the mail transmission page (FIG. 8) while reply mail is being created, even if the destination is not registered. The configuration may be included in the destination list 100. The destination list 100 is a display field, and data (destination) cannot be input to this item.
[0063]
Returning to the flow of FIG. 9, the agency terminal 3 accepts a selection input from the user to the destination designation page (FIG. 10) (step S67). The agency terminal 3 transmits the accepted selection input data to the Web mail server 55 (step S69). The display screen management unit 553 receives the selected input data from the agency terminal 3, and temporarily stores it in the storage device (step S71). The display screen management unit 553 determines whether or not the selection input is “OK” (step S73). That is, it is determined whether or not the selection input operation to the destination designation page (FIG. 10) by the user is a click on the “OK” button 110.
[0064]
If it is determined that the selection input is “OK” (step S73: Yes route), the destination (mail address) selected by the check box of the destination list 100 (FIG. 10) is set as the transmission destination (step S73). S75). The destination set here is determined to be a mail address in the designated domain in step S41 (FIG. 7), and is selected from the registered destinations. Therefore, it can be said that the destination is in the designated domain. . However, the configuration may be such that the domain determination process is performed in step S75 in order to ensure completeness, for example, taking into account the occurrence of a malfunction in the address book DB 558.
[0065]
On the other hand, when it is determined in step S73 that it is not “OK” (step S73: No route), that is, in the case of cancellation (when the “cancel” button 120 (FIG. 10) is clicked), Web mail / The server 55 skips the process of step S75. The process returns to the process of step S47 (FIG. 7) via the terminal B.
[0066]
Next, a process that transits through the terminal E will be described with reference to FIG. This process is a process performed when it is determined that the transmission is “transmission” in the process of step S59 (FIG. 7) (step S59: Yes route). The destination domain management unit 551 determines whether the destination (the mail address set in the destination list 812 (FIG. 8)) is within the designated domain (step S77). When it is determined that it is not within the designated domain (step S77: No route), the destination domain management unit 551 performs a mail / data discarding process (step S79). That is, mail transmission is prohibited in the case of a mail address that is not within the designated domain. Note that an error message may be output without discarding the mail, and the user may be prompted to reset the destination. In addition, when some of the plurality of destinations are destinations other than the designated domain, a configuration may be adopted in which only destinations other than the designated domain are excluded from transmission targets.
[0067]
On the other hand, when it is determined in step S77 that the destination is within the designated domain (step S77: Yes route), the communication processing unit 555 performs a mail / data transmission process (step S81). For example, the mail data is transmitted to the in-house mail server 51. The in-house mail server 51 receives the mail data from the Web mail server 55 and stores it in a storage device such as a mail box (not shown) (step S83). As described above, the mail can be transmitted only to the designated domain.
[0068]
In addition, by using a table (not shown), the user is associated with one or more departments or company specific email addresses that can be specified as the destination, and the destination is further limited even within the specified domain. Such a configuration may be adopted. In this case, in step S77, determination processing is also performed to determine whether the destination set in the table is a department that can be designated as the destination. That is, if a department other than the preset department is designated as the destination, the transmission is prohibited. As described above, by setting the Web mail server 55, confidential information management and the like can be freely performed.
[0069]
For example, the employee terminal 53 having a mailer function transmits a mail data request to the in-house mail server 51 based on the operation of the in-house user of the insurance company 5 (step S85). The in-house mail server 51 receives the mail / data request from the employee terminal 53 and temporarily stores it in the storage device (step S87). The in-house mail server 51 transmits data such as a user authentication page (not shown) to the employee terminal 53 to prompt input of a user ID, password, etc., and the employee terminal 53 accepts input data from the user. The user authentication process is sent to the in-house mail server 51 (step S89). Note that the data to be transmitted in step S85 may include data for user authentication.
[0070]
The in-house mail server 51 determines whether or not the user authentication has been properly performed (step S91). When it is determined that the user authentication has not been properly performed (step S91: No route), the process returns to step S89 and again. Perform user authentication processing. Note that the processing may be terminated by outputting an error message or the like.
[0071]
When it is determined that the user authentication is properly performed (step S91: Yes route), the in-house mail server 51 extracts the mail data addressed to the in-house user stored in a mail box (not shown), and the employee Is transmitted to the service terminal 53 (step S93). The employee terminal 53 receives the mail data from the in-house mail server 51 and displays it on the display device (step S95).
[0072]
Also, for mail addressed to the user (insurance agency, etc.) of the Web mail server 55, the Web mail server 55 is not disclosed to other servers outside the company by the DNS setting not shown, and the designated domain It is configured to accept only mail from within (in-house mail server).
[0073]
When the Web mail server 55 receives mail from another server, it is determined whether or not the transmission source server is in the designated domain, and only mail from the server in the designated domain is stored in the mail box 559. Such a configuration may be adopted.
[0074]
As described above, secure communication with an external client terminal can be easily performed. In other words, secure mail transmission / reception by HTTPS and transmission domain restriction becomes possible. Also, in the address book for external users, only the address of the sender that sent the mail from the company to the external user is registered, and the external user can freely send mail to the external network. Can be prevented, and information leakage can be prevented. In addition, it is possible to prevent a user from entering a new address and sending mail, and to maintain a secure communication environment.
[0075]
Although one embodiment of the present invention has been described above, the present invention is not limited to this. For example, the table configurations shown in FIGS. 2 and 3 are examples, and other configurations may be adopted as long as they store similar data. Moreover, you may make it add or delete an item as needed. In addition, the screen configurations shown in FIGS. 5, 6, 8, and 10 are merely examples, and the same contents can be expressed in different modes. In some cases, a program module is not created as shown in the functional block diagram of the Web mail server 55 shown in FIG. In addition, each server is not limited to a single unit, and may have a plurality of units. For example, the Web mail server 55 and the in-house mail server 51 may be composed of a plurality of units.
[0076]
【The invention's effect】
As described above, according to the present invention, a secure in-house network can be easily expanded.
[Brief description of the drawings]
FIG. 1 is a system outline diagram according to an embodiment of the present invention.
FIG. 2 is a diagram showing an example of a table structure of an address book DB and stored data.
FIG. 3 is a diagram showing an example of a mail box table configuration and stored data;
FIG. 4 is a diagram showing a processing flow (part 1) according to the embodiment of the present invention;
FIG. 5 is a diagram illustrating an example of an inbox page.
FIG. 6 is a diagram illustrating an example of a message display page.
FIG. 7 is a diagram showing a processing flow (2) in the embodiment of the present invention;
FIG. 8 is a diagram illustrating an example of a message transmission page.
FIG. 9 is a diagram showing a process flow (No. 3) in the embodiment of the present invention;
FIG. 10 is a diagram illustrating an example of a destination designation page.
FIG. 11 is a diagram showing a process flow (4) according to the embodiment of the present invention;
[Explanation of symbols]
1 Network 3 Agency terminal
5 Insurance companies 7 Agency terminals
51 Internal mail server 53 Employee terminal
55 Web mail server 57 Internal LAN
550 Destination registration address management unit 551 Destination domain management unit
552 User ID management unit 553 Display screen management unit
554 Inbox management unit 555 Communication processing unit
556 Electronic Certificate Management Department 557 News DB
558 Address Book DB 559 Mail Box

Claims (5)

A server for extending a secure corporate network,
Means for communicating with other internal computers via the internal network;
Means for realizing a web mail server capable of sending and receiving mail within the company by communicating with a web browser possessed by an external client terminal via the Internet via Hyper Text Transfer Protocol Security (HTTPS) When,
A destination e-mail address determining means for determining whether or not the destination e-mail address is within a predetermined in-house domain when receiving a destination e-mail address registration request from the outside client terminal;
A destination mail address registration means for registering the destination mail address in an address book for a user of the external client terminal when it is determined that the destination mail address is within a predetermined internal domain;
Means capable of designating only an address registered in an address book for the user of the external client terminal as a new mail destination from the user of the external client terminal;
Email transmission prohibition means for prohibiting email transmission from a client terminal outside the predetermined internal domain,
A server for extending a secure corporate network. The destination e-mail address determining means further includes:
Determining whether the destination e-mail address is a source address of an e-mail received from another computer in the company and addressed to a user of the external client terminal ;
The destination e-mail address registration means further includes:
Only when it is determined that the destination e-mail address is a source address of an e-mail received from another computer in the company and addressed to the user of the external client terminal, for the user of the external client terminal Register the destination email address in the address book
Server for extending secure corporate network according to claim 1, wherein a. The e-mail transmission prohibition means further includes:
3. The server for extending a secure in-house network according to claim 1, wherein mail transmission from a client terminal outside the outside to one or more predetermined departments is prohibited. A method for extending a secure corporate network,
In response to a request from a web browser possessed by an external client terminal, the received mail data is transmitted to the external client terminal by Hyper Text Transfer Protocol Security (HTTPS);
When a reply to the received mail is instructed by a user of the external client terminal, transmitting data of a mail transmission page for reply to the external client terminal by the HTTPS;
Determining whether or not the destination email address is within a predetermined in-house domain when receiving a destination email address registration request from the external client terminal;
Registering the destination email address in an address book for a user of the external client terminal when it is determined that the destination email address is within a predetermined internal domain;
When a new mail is instructed by a user of the external client terminal, the new mail address from the external client terminal user is registered in the address book for the external client terminal user. A step that allows only address specification,
Only when the destination address specified in the new mail from the user of the external client terminal is within a predetermined internal domain, the new mail from the user of the external client terminal is sent via the secure internal network. Sending, and
A method for extending a secure corporate network including: The ability to communicate with other computers in the company via the company network;
A web mail server function that enables transmission and reception of mail within the company by communicating with a web browser of an external client terminal via the Internet via Hyper Text Transfer Protocol Security (HTTPS); ,
A function of determining whether or not the destination email address is within a predetermined in-house domain when a registration request for the destination email address is received from the external client terminal;
A destination email address registration function for registering the destination email address in an address book for a user of the external client terminal when it is determined that the destination email address is within a predetermined internal domain;
A function that allows only the address registered in the address book for the user of the external client terminal to be specified as the destination of a new mail from the user of the external client terminal;
A function of prohibiting mail transmission from a client terminal outside the company to a domain other than a predetermined company domain;
A program to make a computer realize.

Images