JP4245591B2 - File deletion system and file deletion method for client terminal used for online transaction - Google Patents

Description

  The present invention relates to a file erasing system provided in an online transaction server and a file erasing method executed by the online transaction server for erasing a temporary Internet file stored in a client terminal that has accessed the online transaction server via the Internet. Is.

  In an online transaction system via the Internet, as a method for easily identifying a client terminal that accesses a transaction server, a predetermined information is transmitted from a Web server and stored in the client terminal, and when an HTML request is made to the Web server, the client Cookies that transmit saved information from terminals are widely used. When cookie is used in online transactions, the user ID and password are stored in the cookie so that the transaction server can receive the cookie information and omit the user authentication procedure.

  The problem in the above case is that important personal information of the user may be recorded in the cookie and stored in the client terminal, so that a third party using the same client terminal will give the user There is a risk of impersonating and gaining access to the trading system. In particular, when conducting online transactions in a public space, such as using a personal computer shared by multiple users or using a personal computer used by an unspecified number of users such as an Internet cafe, After the transaction is completed, it is desirable to delete temporary Internet files such as cookie, history information that can be specified by the operation content, and the like.

  Cookies can usually be deleted by performing certain operations on the browser. However, not all users are proficient in erasing operations and online even when connected to the Internet. Since erasure is not always necessary when no transaction is performed, it is not easy to prompt the user to perform an erasure operation. When online transaction services are provided in the Internet environment, it is impossible to exclude the possibility of users accessing from public spaces. Therefore, erasure of cookies, etc. is particularly important in Internet banking that requires high security. It is a difficult issue.

  As a technique for dealing with such a problem, for example, an invention related to a security system that automatically deletes predetermined security data such as cookie from a storage device at the timing of closing a browser or a page break of a Web page is disclosed. (See Patent Document 1).

Japanese Patent Laid-Open No. 11-316727

  When the security system described in Patent Document 1 is used, it is possible to delete the cookie without requiring the user to perform a special operation. However, since this security system is provided on the client terminal side, a dedicated program must be installed in each computer that the user may use. Since it is almost impossible to install a dedicated program on all client terminals installed in a public space, it can be applied to Internet banking, etc. where users cannot specify which terminal to access. It is practically difficult.

  The present invention has been made in order to deal with such problems, and in online transaction services via the Internet, such as Internet banking, when an online transaction server is accessed from a shared client terminal installed in a public space. The present invention relates to a file erasing system provided in an online transaction server for erasing stored temporary Internet files and history information, and a file erasing method executed by the online transaction server.

  In order to solve such a problem, the present invention is a file erasing system provided in an online transaction server for erasing a temporary Internet file stored in a client terminal accessing the online transaction server via the Internet. Accepting a log-in request from the client terminal and establishing a session with the client terminal; and accepting a log-out request from the client terminal during the session, the temporary Internet stored in the client terminal A selection screen transmitting means for transmitting a file for displaying a selection screen as to whether or not to delete the file to the client terminal; and deletion of the temporary Internet file on the selection screen from the client terminal. When receiving the information indicating that it has been executed, the client terminal transmits an executable file for erasing the temporary Internet file to the client terminal, and the temporary Internet by the executable file from the client terminal. And a session disconnection unit for confirming acceptance of a logout request and receiving a logout request and executing the session disconnection process.

  According to the present invention, the executable file transmitted by the executable file transmitting means includes an instruction for erasing the browsing history data stored in the client terminal together with the erasing of the temporary Internet file. Can also be characterized.

  In the present invention, when logging in to the online transaction server from the client terminal, a screen for selecting whether or not to delete the temporary Internet file is displayed on the client terminal at the time of logout. By sending an executable file for erasing the temporary Internet file, the temporary Internet file stored in the client terminal by online transaction can be deleted without any special operation on the client side. When performing online transactions using a client terminal installed in a public space, it is possible to prevent important information such as passwords from being stored on the client terminal by selecting to delete the temporary Internet file when logging out. it can.

  The online transaction server in the present invention includes a web server for performing transactions after a registered user accesses via the Internet and authenticates the user, such as an Internet banking transaction server, an Internet securities transaction server, and an Internet shopping server. It is. Transactions are not limited to those involving money movement, and may be targeted at servers used for providing information such as news.

  The temporary Internet file to be deleted preferably includes, in addition to a cookie in which a password or the like may be written, an image file cached in a client terminal that may specify an accessed page. In addition, it is preferable that history information that may be traced of the operation content is also to be deleted.

  The type of executable file for deleting the temporary Internet file is not particularly limited. For example, a command file for instructing the program for deleting the temporary Internet file included in the browser of the client terminal to execute the deletion, What is necessary is just to transmit the program file which erase | eliminates a temporary Internet file in a client terminal.

  Furthermore, the present invention can be specified as a file erasing method executed by the file erasing system provided in the online transaction server according to the present invention.

  That is, the file erasing method according to the present invention is a file erasing method executed by an online transaction server for erasing a temporary Internet file stored in a client terminal that has accessed the online transaction server via the Internet. When the transaction server accepts a login request from a client terminal and establishes a session with the client terminal, and when the online transaction server accepts a logout request from the client terminal during the session, A selection screen transmission step of transmitting to the client terminal a file for displaying a selection screen as to whether or not to delete the temporary Internet file stored in the client terminal; When the client terminal receives information indicating that deletion of the temporary Internet file has been selected on the selection screen, the client terminal transmits an execution file for deleting the temporary Internet file to the client terminal. An executable file sending step, and the online transaction server confirms the completion of the temporary Internet file erasure by the executable file from the client terminal and accepts the logout request, and disconnects the session. And a step. The executable file transmitted in the executable file transmission step includes an instruction to erase the Internet browsing history data stored in the client terminal together with the erasure of the temporary Internet file. You can also.

  According to the present invention, even when online transactions are performed using a client terminal installed in a public space, even if a user does not perform a special operation for erasure, the Internet temporarily includes passwords and other important information. Files, access histories, and the like can be prevented from being stored in the client terminal. As a result, it is possible to improve the safety of online transactions such as Internet banking.

  The best mode for carrying out the present invention will be described below in detail with reference to the drawings. The following description is an example of an embodiment of a file erasing system according to the present invention, and the present invention is not limited to the following embodiment. In the following, an example in which the file erasing system according to the present invention is applied to an online transaction server for Internet banking will be described. However, the field of application of the present invention is not limited to Internet banking, and other online transaction servers. It can also be applied to.

  FIG. 1 is a diagram showing an outline of an embodiment of a file erasing system according to the present invention. 2 and 3 are first and second diagrams showing examples of operation screens when the file erasing system according to the present invention is applied to the Internet banking system, respectively. 4 to 6 are a first flowchart showing a processing flow of an online transaction server, a flowchart showing a processing flow of a client terminal, and a second flowchart showing a processing flow of an online transaction server, respectively, according to the file erasing system according to the present invention. It is a flowchart.

  In FIG. 1, a file erasing system according to the present invention is provided in an online transaction server 30. The online transaction server 30 is a Web server used for Internet banking, Internet securities trading, online shopping, and the like, and can be accessed online through a terminal such as a personal computer to perform online transactions.

  First, a case where a user of online transaction accesses the online transaction server 30 from the terminal 10 used at home or the like will be described. When the online transaction server 30 is accessed from the terminal 10, a session with the online transaction server 30 is established, and the online transaction is started, the user ID input at the time of login is set to the cookie, the image file of the accessed page, etc. Is stored as a temporary file 11 in a predetermined folder of the terminal 10.

  When the cookie including the user ID is stored as the temporary file 11, for example, in the case where the user authentication is requested again after being left for a predetermined time during the transaction operation, the information with the cookie is transmitted to the online transaction server 30. Thus, re-login can be requested without re-authenticating the user ID. When the image file of the accessed page is stored as the temporary file 11, for example, the image file such as a logo used in a plurality of pages may be stored in the terminal 10 without acquiring the image file such as a logo from the online transaction server 30 every time the page is read. Processing efficiency can be increased by using cached files.

  Further, the access history to the online transaction server 30 is stored as history information 12 in a predetermined folder of the terminal 10. The operation history stored in the history information 12 can be displayed by the browser of the terminal 10, and the user of the terminal 10 can quickly specify pages accessed in the past using the history information displayed on the browser. it can.

  When the user wants to log out after completing the online transaction, the user selects and presses the logout button on the transaction screen displayed on the terminal 10. FIG. 2 shows an example of a transaction screen for Internet banking. A selection button for logout is displayed in the upper right part.

  When a logout button is pressed on the transaction screen, a logout processing request is transmitted from the terminal 10 to the online transaction server 30. When the online transaction server 30 accepts the processing request, the file erasing program 31 is started, and a file for displaying a screen for selecting whether or not to erase the temporary Internet file or the like on the terminal 10 is transmitted.

  The terminal 10 receives a file for displaying a screen for selecting deletion of a temporary Internet file or the like from the online transaction server 30 and displays it on the transaction screen. FIG. 3 shows an example of a transaction screen for Internet banking, and a selection button for displaying whether or not to delete all information stored in the terminal 10 by online transaction is displayed.

  If the terminal 10 operated by the user is a user-only terminal installed at home or the like, if the information such as cookie is deleted, the same operation as the first time such as personal authentication is performed at the next transaction. Since processing is required, the “No” button is selected and pressed so as not to delete normally. When the “No” button is pressed, information indicating that erasure is not performed is transmitted from the terminal 10 to the online transaction server 30, and the online transaction server 30 ends the processing by the file erasure program 31.

  At this stage, the online transaction server 30 may determine that it has received a logout command and execute a session disconnection process with the terminal 10, but in order to confirm the user's intention to logout again, A confirmation screen for executing the logout process may be transmitted to the terminal 10. In this case, when the online transaction server 30 accepts that the confirmation button for executing the logout process is pressed on the terminal 10, the session disconnection process with the terminal 10 is executed. When the session disconnection process is performed, a display screen indicating that logout has been completed is transmitted to the terminal 10.

  As described above, when the online transaction is performed using the terminal 10 dedicated to the user installed at home or the like, the file erasing process of the terminal 10 by the file erasing program 31 is not executed, and the terminal 10 The temporary file 11 and the history information 12 are stored, and these pieces of information are used when the online transaction server 30 is accessed next time.

  Next, a case where a user of online transaction accesses the online transaction server 30 from the terminal 20 used in a public space such as an Internet cafe will be described. When the online transaction server 30 is accessed from the terminal 20, a session with the online transaction server 30 is established, and the online transaction is started, the user ID input at the time of login is set to the cookie, the image file of the accessed page, etc. Is stored in the predetermined folder of the terminal 20 as the temporary file 21 and the access history to the online transaction server 30 is stored in the predetermined folder of the terminal 20 as the history information 22 as in the case of accessing from the terminal 10. It is.

  When the user wants to end the online transaction and log out, the logout button is displayed on the transaction screen displayed on the terminal 20, as shown in the example of FIG. Select and press. A logout processing request is transmitted from the terminal 20 to the online transaction server 30. When the processing request is received by the online transaction server 30, the file deletion program 31 is activated and whether or not the terminal 20 deletes temporary Internet files and the like. Send a file to display a screen for selecting.

  The terminal 20 receives a file for displaying a screen for selecting deletion of a temporary Internet file or the like from the online transaction server 30 and deletes all stored information as shown in the example of FIG. Displays a transaction screen that includes a selection button for.

  Since the terminal 20 operated by the user is a shared terminal installed in a public space, if information such as cookie is stored in the terminal 20, when another person operates the terminal 20, the cookie information is used. There is a risk of logging in to the user's dedicated page to conduct transactions, or specifying personal information illegally from access history or the like. Therefore, a button “Erase all information” is displayed in order to prompt the user to delete the temporary Internet file or the like. The user can delete a temporary Internet file or the like by selecting and pressing this button.

  When the “delete all information” button is pressed, information indicating that the online transaction server 30 is requested to be deleted is transmitted from the terminal 20, and the online transaction server 30 sends the information to the terminal 20 by the file deletion program 31. An operation for deleting the stored temporary Internet file or the like is executed.

  Specifically, an execution file 32 for causing the terminal 20 to execute an operation of deleting a temporary Internet file or the like is transmitted to the terminal 20. The type of the execution file 32 is not particularly limited. For example, the command file for instructing the program for deleting the temporary Internet file included in the browser of the terminal 20 to execute the deletion or the temporary Internet file in the terminal 20 A program file to be deleted can be used.

  When the terminal 20 receives the execution file 32 transmitted from the online transaction server 30, the temporary file 21 and the history information 22 stored in the terminal 20 are all deleted according to the processing command of the execution file 32. When the execution file 32 is a command file for instructing the program for deleting the temporary Internet file included in the browser to execute the deletion, the browser deletion function of the terminal 20 is activated, and the temporary file 21 and the history information 22 are activated. Is erased. When the execution file 32 is a program for deleting the temporary Internet file, the temporary file 21 and the history information 22 are deleted by the operation of the execution file 32 itself.

  When the terminal 20 completes the process of deleting the temporary file 21 and the history information 22, information indicating that the deletion has been completed is transmitted to the online transaction server 30. Since the user has already pressed the logout button once, the online transaction server 30 may determine that the logout command has been received at this stage and execute a session disconnection process with the terminal 20, In order to confirm the user's intention to log out again, a confirmation screen for logout processing execution may be transmitted to the terminal 20. In this case, when the online transaction server 30 accepts that the confirmation button for executing the logout process is pressed on the terminal 20, the session disconnection process with the terminal 20 is executed. When the session disconnection process is performed, a display screen indicating that logout has been completed is transmitted to the terminal 20.

  As described above, when online transaction is performed using the shared terminal 20 installed in the public space, the temporary file 21 and the history information of the terminal 20 are obtained by the operation of the execution file 32 transmitted by the file erasing program 31. 22 is erased. As a result, all important information handled in online transactions such as passwords is erased from the terminal 20, so that the security of the transactions can be ensured.

  The flowchart of FIG. 4 shows a processing flow in which the online transaction server transmits an erasing command such as a temporary Internet file to the client terminal by the file erasing system according to the invention. When the online transaction server accepts an online transaction login request from the client terminal (S01), it is determined whether or not the login is accepted by identity authentication using an ID and a password (S02). If the login is not accepted, error processing such as transmission of an error screen to the client terminal is performed (S08), and the processing ends.

  When the login is accepted, according to the request from the client terminal, for example, if it is Internet banking, each transaction process such as balance inquiry and transfer is executed (S03). The requested transaction process is repeated until a logout request is accepted (S03 to S04), but when a logout request is accepted (S04), a selection screen for displaying whether or not to erase all temporary Internet files and the like is displayed. Is sent to the client terminal (S05).

  When a request for all erasure is received from the client terminal (S06), a processing command for erasing all temporary Internet files and the like is transmitted to the client terminal (S07). If the request to delete all is not selected at the client terminal (S06), the process proceeds to logout processing.

  The flowchart of FIG. 5 shows the processing flow of the client terminal that has received a command for erasing all temporary files such as temporary Internet files from the file erasing system according to the present invention. When the client terminal receives a processing command for erasing all temporary Internet files (S09), the client terminal performs processing such as deletion of the temporary Internet files and clearing of the browsing history of the Internet by the operation of the browser or the like. (S10). When the erasure process is completed, an erasure completion notice is transmitted to the online transaction server (S11).

  The flowchart of FIG. 6 shows a processing flow in which the online transaction server executes logout processing of the client terminal by the file erasing system according to the present invention. When the online transaction server receives an erasure completion notification from the client terminal (S12), a file for displaying a logout confirmation screen is transmitted to the client terminal (S13). Even when all erasure is not selected on the previous all erasure selection screen, a file for displaying the logout confirmation screen is similarly transmitted (S13).

  When a logout request is received again from the client terminal on which the confirmation screen is displayed (S14), a session disconnection process established at the time of login is executed (S15), and a session for informing the client terminal of the completion of logout A disconnection notice is transmitted (S16). If logout is not selected on the confirmation screen and the logout request is not accepted (S14), the session disconnection process is not performed and the transaction process can be continued.

It is a figure which shows the outline | summary of embodiment of the file deletion system concerning this invention. It is a 1st figure which shows an example of the operation screen at the time of applying the file deletion system concerning this invention to an internet banking system. It is a 2nd figure which shows an example of the operation screen at the time of applying the file deletion system concerning this invention to an internet banking system. It is a 1st flowchart which shows the processing flow of the online transaction server by the file deletion system concerning this invention. It is a flowchart which shows the processing flow of a client terminal by the file deletion system concerning this invention. It is a 2nd flowchart which shows the processing flow of the online transaction server by the file deletion system concerning this invention.

Explanation of symbols

10 Terminal 11 Temporary File 12 History Information 20 Terminal 21 Temporary File 22 History Information 30 Online Transaction Server 31 File Deletion Program 32 Execution File

Claims (4)

A file erasing system provided in an online transaction server for erasing a temporary Internet file stored in a client terminal that has accessed the online transaction server via the Internet,
Session establishment means for accepting a login request from a client terminal and establishing a session with the client terminal;
When a logout request is received from the client terminal during the session, a selection for transmitting a file for displaying a selection screen as to whether or not to delete a temporary Internet file stored in the client terminal to the client terminal Screen transmission means;
When receiving information indicating that the deletion of the temporary Internet file has been selected on the selection screen from the client terminal, an execution file for deleting the temporary Internet file is received on the client terminal. Executable file sending means to send to
When receiving information indicating that it is selected not to delete the temporary Internet file on the selection screen from the client terminal, or to delete the temporary Internet file on the selection screen from the client terminal Confirmation of acceptance of a logout request from the client terminal in any of the cases where information indicating that the temporary file has been erased by the executable file from the client terminal is accepted. Session disconnecting means for executing the session disconnection process;
A file erasing system comprising: The executable file transmitted by the executable file transmitting means includes an instruction for deleting the browsing history data of the Internet stored in the client terminal together with the deletion of the temporary Internet file. 1. The file erasing system according to 1. A file erasing method executed by an online transaction server for erasing a temporary Internet file stored in a client terminal that has accessed the online transaction server via the Internet,
A session establishment step in which the online transaction server accepts a login request from the client terminal and establishes a session with the client terminal;
When the online transaction server accepts a logout request from the client terminal during the continuation of the session, a file for displaying a selection screen as to whether to delete the temporary Internet file stored in the client terminal is displayed. A selection screen sending step to send to the client terminal;
The online trading server, when to erase the temporary Internet files in the selection screen from the client terminal has received information indicating that it has been selected, for erasing said temporary Internet files at the client terminal An executable file transmission step of transmitting an executable file to the client terminal;
When the online transaction server receives information indicating that it has been selected not to delete the temporary Internet file on the selection screen from the client terminal, or deletes the temporary Internet file on the selection screen from the client terminal in a case where it has received the information indicating that the selected to be, when receiving the deletion completion notice of the temporary Internet files by the execution file from the client terminal, in either, from the client terminal A session disconnection step for confirming acceptance of the logout request and executing the session disconnection process;
A file erasing method comprising: The executable file transmitted in the executable file transmission step includes an instruction to erase Internet browsing history data stored in the client terminal together with erasure of the temporary Internet file. Item 4. The file erasing method according to Item 3.