JP4726150B2 - Home Page Impersonation Check System and Method - Google Patents

Description

  The invention of this application relates to a check system related to transaction information obtained via the Internet and a check method thereof, and more specifically, a check system for checking impersonation of company names, product names, etc. used in Internet commerce, and the like Concerning the check method, information received via the Internet, such as telephone directory data, map information, registry information, NTT registration, URL homepage (hereinafter abbreviated as HP), trademarks, etc., have been registered or registered to date The present invention relates to a homepage impersonation check system and its check method for comparing confirmation information, determining the consistency with the content of the received information, and reporting the result.

  Until now, when starting a new business transaction, the method of obtaining credit information of the other party is generally determined by a report obtained by requesting an investigation from a credit investigation company, but it generally takes time and money. It was a thing. In recent years, especially in electronic commerce via the Internet, the importance of corporate examinations has increased, and promptness of transactions has been demanded, and prompt judgment has been demanded. In addition, with the spread of Internet commerce, impersonation has become apparent. For this reason, it is necessary to quickly solve the problem of impersonation from the viewpoint of further spreading Internet commerce and maintaining the safety of transactions.

  Conventionally, various alteration prevention means for HP have been proposed as measures for preventing alteration of HP itself. Even with this preventive measure, impersonation exists and cannot be solved, and so far, avoiding impersonation has not been solved yet.

  The invention of this application is to provide an impersonation check method that can check impersonation in advance and eliminate the impersonation, thereby preventing impersonation protection.

  Although the recent spread of the Internet is remarkable, it still takes time to spread to all companies and individuals. For this reason, even if you do not bother to ask a specific organization to investigate credit information and pay expensively, for example, register information about the target company name, the existence of product names, and their reliability. In view of such reliable information, it has been desired that the determination can be made using the Internet means and can be easily obtained by the user who needs the determination result. Furthermore, in obtaining land registry information, there are many cases in which confirmation of the existence of the land and the authentic owner is required, and since there is so much need, it is strongly desired that the authenticity determination information can be obtained at the same time. .

  However, in these Internet commerce systems, it is not systematized to confirm the transaction entity and transaction object of the transaction, and therefore all must be accepted as authentic. For this reason, the Internet commerce system was illegally used, and transaction damage such as impersonation was taken up by newspapers, and the damage problem was unending. This also prevented the spread of Internet commerce.

  In fact, in the case of doubts about the reliability of a trading partner or the existence of a traded product in a commercial transaction, when conducting necessary investigations to confirm the actual buying and selling entity in real estate sales when securing the commercial transaction reliability Is time consuming and expensive to investigate. In addition, these conventional check systems are expensive systems because they are individually investigated by the user, and may be delayed due to the convenience of the research company, so that necessary information cannot be obtained quickly when necessary. There were disadvantages such as.

  From the above, one of the present inventions is to make the most of the basic data for checking and the data that is managed or provided by these materials, or existing data that has been bought and sold, and the necessary data can be stored in one server. It is possible to check the authenticity, authenticity, authenticity, etc. of business partners and trading products that appear in Internet commerce based on these data and materials.

  In the invention of this application, as basic data for checking, telephone directory data, map information, company / land / building registry information, NTT database, JPNIC (Japan Network Information), ICANN (US private organization) ) Registered domain names, JPO database, trademarks, etc. are used. Data obtained as a result of checking the reliability of the counterparty (subject) or the product (object) in the transaction is registered and accumulated in a corresponding appropriate file such as a black and white file that is classified each time. The data registered in the black and white file after the check can be provided each time, or the information can be secured according to the access to the required organization. Checked accumulated data can be received and displayed on the terminal screen at any time by calling on the Internet regardless of the presence or absence of the corresponding information in the Internet transaction.

  In the present invention, when the phone book data, map information, company / land / building registry information, NTT registration information, domain names such as JPNIC and ICANN, trademarks, etc. are updated, There is also a device that automatically updates the basic data of the server, and in the case of publications, the basic data information of the application server is updated and created by appropriately registering with the application server without delay after publication. It is devised to be able to prepare the latest updated database. As a result, a customer user can display the authenticity of the display information using white and black files at the same time as displaying the name of the trading company and the product when performing an Internet transaction using the most familiar terminal. Is done. Therefore, the impersonation check result information can be found instantly from the screen, thereby making it possible to execute the transaction more safely. Furthermore, it can be easily used to obtain the latest accurate information at a low price. In the invention of this application, it is possible to automatically perform the update process by using various software currently on the market and registering and using together with the present application server.

  In the present invention, each user simply selects and executes at least one of the items in a predetermined instruction field such as a company name and a product name set on the screen on the Internet application purchase screen on his input terminal, It is possible to easily receive the credit information report after the check. In addition, since the software is always installed on the server of the present application, it is not necessary for the user to purchase a database or install it one by one, and the user can always use the latest database and software, and can be conveniently used at a low cost. We can receive provision of means. Further, the registry information managed by the present invention can be distributed by encrypting and distributing predetermined registry information to the user who requested it, and using a watermark technique.

  The home page impersonation check system of the present invention includes a center server for storing or accumulating white and black files and a domain name file of a check requester, and a plurality of keywords including company names or product names inputted from a search engine through the Internet. HP collection processing means for collecting homepage data using a central processing unit provided in the center server, and sorting the plurality of homepage data by domain name using the central processing unit, and duplication of the sorted homepage data And a collection HP combining unit that creates a combined file that is excluded and is combined and stored and stored or accumulated in the center server.

  In addition, the home page impersonation check method of the present invention stores the white and black files and the domain name file of the check requester in the center server, and inputs a plurality of keywords including company names or product names from the search engine via the Internet. A composite file in which a central processing unit collects a plurality of homepage data in the center server, the central processing unit sorts the plurality of homepage data by a domain name, and eliminates and overlaps the sorted homepage data. And a step of storing or accumulating in the center server.

  As described above, according to the invention of this application, when a user as a customer executes an Internet transaction using the terminal that is most familiar to the present, the display information is displayed at the same time as the name of the trading company and the product. Falseness is displayed using black and white files. Therefore, the user can instantly find the spoofing check result information from the screen by the terminal, and can thereby execute the transaction more safely. Furthermore, it can be easily used to obtain the latest accurate information at a low price.

  In addition, the invention of this application can automatically perform the update process by registering it in the center server and using it together with various types of software currently on the market.

  In the present invention, each user simply selects and executes at least one of the items in a predetermined instruction field such as a company name and a product name set on the screen on the Internet application purchase screen on his input terminal, It is possible to easily receive the credit information report after the check.

  Further, according to the present invention, since the software is always installed on the center server, it is not necessary for the user to purchase a database or install it one by one, so that the user can always use the latest database and software and is inexpensive. You can receive provision of convenient means that can be used. For this reason, general users can greatly reduce the time constraint for confirming the transaction subject and object, and can further reduce the time and labor required to secure appropriate transaction information. .

It is a general view which shows the outline | summary of the impersonation HP check system. It is a figure which shows the pre-stage check flow of the impersonation HP check method. It is a figure which shows the back | latter stage check flow of the spoofing HP check method. It is a figure which shows the flow which added the specific term check to the impersonation HP check. It is a figure which shows the flow for the black-and-white recording fact proof using the data obtained by the spoofing HP check. It is a flow of additional check by a GIF file, a DrBell database, or the like.

  In the spoofing check system of the present invention, a plurality of user terminals, white / black files, check requester's domain name files, existence confirmation information files such as phone book data, and risk term dictionaries / financial term dictionaries are stored or stored. Connecting a central processing center, a central processing center provided with such check processing means, an Internet transmission / reception relay means connecting the user terminal and the central processing center, and an external information providing organization such as JPNIC The center server includes a collection HP composition processing means, an existing registered white / black file check processing means, a requester domain name check processing means, an organization information check processing means such as JPNIC, and a check completed. An information report processing means is provided. However, since the check method can be executed without requiring all means, for example, in the first check, the existing registered white / black file check processing means has not yet been checked, so registration / storage Since the data is not secured, its operation will be deferred.

  On the other hand, in the spoofing check method, the central server of the central processing center: ■ Collected HP composition processing step of sorting (merging) HP collected by the user's search engine by domain name, etc., ■ Check requester domain Requester domain name check processing process for checking consistency with name, ■ NICIC etc. information check process process for checking attribute consistency related to registration contents of JPNIC etc., ■ Existence confirmation information such as phone book data As a comparison basis, the company name consistency check process that automatically and visually checks the company name match and determines the black and white, and the company name check process that is determined in black and white in the company name check process, is sorted into each file and specified Checked black and white file storage process for registering and storing items, ■ Checked black and white file storage information It encompasses a black-and-white file registration matters reporting step of reporting to check the requester and the prescribed institution. In this case, in the collected HP combining process, it is stipulated to sort by domain name or the like and combine (merge), but it is also possible to sort by company name alone. The collected data is not limited to a plurality of items, and the number of items can be arbitrarily selected.

  Also, the spoofing check method of the invention of this application is a check request by the client, and when the same HP exists in the individually obtained data, duplicates are deleted and combined, and duplication in subsequent checks A check is made between the collected HP composition process and the client domain name check process that can avoid the check, and the consistency with the monochrome file / domain name is checked based on the existing registered monochrome file. A registered black and white file / domain name check processing step can be added. According to this, on the basis of a black and white file obtained through a series of check processes starting from the first requester domain name check process, a series of processes after the registered black and white file / domain name check process from the second time onward. Through this checking process, a black and white file is obtained, and this black and white file can be used as a basis for the registered black and white file / domain name check process.

  In addition, the impersonation check method of the invention of this application optionally includes a black file and / or a white file obtained through a predetermined check. Checks are made from the viewpoint of the presence or absence of the data, and a device for sorting the data into four data files that are sorted by combining dangerous terms and financial terms is applied. In addition, a term check processing step including a black file check process can be included between the check for the presence of a dangerous term and the subsequent check for the presence of a financial term as necessary. .

  In this case, the check requester or the like is notified of the results sorted in the term check processing step, and detailed information can be provided for the registered contents of the black file.

  The check described below can be added to the black determination file or the like extracted by the visual check in the company name matching check process by using a GIF file, DrBell, or the like.

  As shown in FIG. 6, the client's image is used by matching the file obtained by visual inspection of the HP that adversely affects the client with the software based on the GIF file from the client. Check if it is. The obtained file is then subjected to a DrBell and phone book search based on the DrBell database and the phone book database, and the TEL status on the HP is checked. Further, based on the company information database, it is checked whether the company displayed on the HP is registered in the company information database. After that, the registry is obtained from the civil law association D / B via the Internet, and whether or not the company displayed on the website is registered in the company information database is confirmed. In addition, the ADR status on the HP is checked by a map information search system obtained from the map information service company via the Internet.

  It goes without saying that the check using the GIF file, DrBell, and the like can be performed for each divided file obtained in the above-described term check processing step.

  It is also possible to output the HP once on paper and issue a certificate signed by the service organization. In this case, in addition to the signature of the organization, the certificate includes a history of the time when the HP was recorded and the elapsed time during which the same content was posted.

  Furthermore, the invention of this application is such that, in the above-mentioned impersonation check system, when a request for recording fact proof is received from a recording fact proof requester, the corresponding HP is extracted from a white file or a black file, and the extracted corresponding HP It is also possible to provide a system that outputs and encrypts the contents of the message and transmits it to the client. By this fact proof, it is possible to prove that one's own HP is not a spoofed HP but a genuine HP founder.

  Hereinafter, the invention of this application will be described in more detail with reference to the drawings.

  In the impersonation check system of this application, as shown in FIG. 1, a user terminal (1) is connected between a central processing center (2) via a fax or the Internet (9), and the central processing center (2 ) Is connected to the information providing server (7) via the Internet (9). Here, the user terminal (1) represents a plurality of user terminals. As a result, the user terminal (1), the central processing center (2), and the information providing side (7) are connected to each other so that they can transmit and receive each other, and the user terminal (1) transmits information from the information providing side server (7).・ It is connected so that it can be received, and it is possible to search and inquire necessary information.

  The center server (5) of the central processing center (2) collects registered black and white files (5a) (5b), URL registration organizations (6) such as JPNIC, presence confirmation information (5f) such as phone book data ■ and danger A term dictionary (5c) and a financial term dictionary (5d) are provided, and a central processing unit (4) for recording and managing these is provided. Here, the central processing unit (4) is a collection HP composition processing means (4a), an existing registered white / black file check processing means (4b), a requester domain name check processing means (4c), an organization information check processing means such as JPNIC. (4d), an automatic judgment processing means (4e) and a checked information report processing means (4f) are provided. By this system, impersonation is carried out in accordance with predetermined procedures based on various impersonation checking methods described below. A check can be performed.

Hereinafter, a spoofing check method according to the present invention will be described.
(Example 1) As shown in FIGS. 1 and 2, in a terminal (1) connected to the Internet, first, a search engine inputs a keyword of a company name and / or product name of a trading partner, and the center server (5) When received, the collected HP synthesis processing means (4a) of the central processing unit (4) collects the corresponding HP. Next, HPs obtained by the corresponding company names are sorted by domain name, and a composite file is created by organizing and synthesizing by eliminating duplicates.

  Here, since black-and-white data is not stored at first, as shown in FIG. 2, the process starts from checking whether the client domain name matches. Therefore, checking of the data of the composite file is omitted. However, since at least the first “black and white determination file” is secured from the second time onward, a check is also added as to whether it matches the domain name of the “registered black and white determination file” accumulated so far. It will be. This monochrome determination file / domain name matching check will be described later.

  In the composite file, the client domain name check processing unit (4c) performs a client domain name consistency check, and in this check, a match with the client domain name is determined to be “white”. It is registered and accumulated in the white file (5a). On the other hand, if it does not match the client domain name, the process proceeds to the next stage, and a registration content consistency check such as JPNIC confirms whether it matches the attribute of the registration content of the URL registration organization (6) such as the next JPNIC or ICANN. , Executed by the engine information checking means (4d) such as JPNIC.

  If the attribute matches the registered content of the URL registration organization (6) such as JPNIC as a result of the registration content consistency check of JPNIC etc., it is determined as “white” and is registered and accumulated in the white file (5a). On the other hand, if the attribute does not match the registration contents of the registration organization, the comparison is made based on the presence confirmation information (5f) such as the phone book data ■, and “whether the company name matches” or “URL is An automatic determination process is executed under the check of “whether or not the URL is a branch URL” or “whether the company attribute is different from the presence confirmation information”. Automatic determination processing is executed by automatic determination processing means (4e). In addition to the company name and match / difference determination information, the data obtained as a result of this processing is additionally provided with the comparison confirmation status (company name, phone number, address, representative, etc.) based on the phone book data, etc. Will be recorded additionally.

  Here, as the presence confirmation information (5f), for example, ■ Phone book corporation data, ■ Map information, ■ Registry (land / building, company), ■ East / West NTT database, ■ Company information, ■ Trademark, ■ GIF file, (1) A DrBell file or the like exists, and is basic information for obtaining more reliable information on the target company name and product name from the check target (3).

  Further, in the present invention, since a trademark search system that can search for (1) trademarks posted on the HP is provided, the user can enjoy providing search results from the user terminal via the Internet.

  The automatic determination process can be executed for the white file (5a) registered through the client domain name consistency check and the registration content consistency check such as JPNIC. As a result, when the automatic determination is already completed, it is “determination; black”, and a series of “determination status” and “determination date, time and existence status” are registered and accumulated in the black file (5b). Report to the check requester and related organizations (8) by e-mail.

  On the other hand, HP data that has not been determined by automatic determination is additionally determined by visual check. The HP data determined to be white by this visual check is registered and accumulated in the white file (5a). The other HP-determined HP data is registered in the black file (5b) in the same manner as the automatically determined data. The black determination part by this route is also reported to the check requester and related organizations (8) by means such as mail.

The white file and the black file obtained by the check method according to the first embodiment are used as basic data for the black and white file / domain name matching check.
(Example 2) The check method of 2nd Example is demonstrated based on the check flow illustrated in FIG. In this embodiment, as described above, in the second and subsequent checks, as described in the first embodiment, at least the “black and white determination file” (5a) (5b) that is the basis of the black and white file / domain name matching check. ) Is secured. Therefore, similar to the first embodiment, the collected composite file can be used to check whether it matches the domain name of the data of the “registered black and white determination file” accumulated so far. Is done. For this reason, the registered black and white file check processing means (4b) interposed between the collected HP composition processing means (4a) and the requester domain name check processing means (4c) comes to operate. Between the collection HP composition processing step and the client domain name check processing step, an already registered black and white file check process for checking the consistency with the black and white file / domain name is executed based on the existing registered black and white file. The

  In this registered black-and-white file check processing step, a check for whether there is a change in HP contents and a check for a white file are executed in order for those that match the black-and-white file / domain name. If the HP content does not change in the HP content change presence / absence check, the check ends here. On the other hand, if the HP content has changed, the white file is checked to determine whether it is a white file. If it does not correspond to the white file, it is registered and accumulated in the black file (5b). ).

  Also in the second embodiment, the white file and the black file obtained through the checking method are both basic data for the black and white file / domain name matching check as in the first embodiment.

  In the second embodiment, the black and white file registration data obtained by the check flow after matching in the black and white file / domain name check, and the subsequent requester domain name check and JPNIC registration content check due to the mismatch in the black and white file / domain name check In addition, as in the first embodiment, a predetermined report is executed on the result data of the black file obtained by performing automatic determination processing by the presence confirmation information check.

  In the invention of this application, reports by means of e-mail etc. to the check requester and related organizations were registered and accumulated in the black file (5b) as shown in Example 1 in FIG. 2 and Example 2 in FIG. Although it is performed on the information that has been executed up to the existence confirmation information check, it is also possible to execute a detailed report by further checking the black file (5b) from a further point of view. is there.

Referring to FIG. 4, the black file shown here is the black file (5b) initially obtained by a series of checks starting from the client domain name consistency check, and the black and white file / domain name consistency check does not match Thus, a black file obtained by a series of checks including a subsequent client domain name consistency check, and a black file obtained by a series of subsequent checks, although matched by a monochrome file / domain name consistency check ( 5b). A flow diagram for checking and sorting these black files in terms of the presence or absence of dangerous terms and / or financial terms is disclosed.
The data accumulated in this “black file” (5b) is based on the presence or absence of dangerous terms and / or financial terms. ■ When dangerous terms exist and financial terms exist, ■ Although dangerous terms exist, There are four types of checks: a case where financial terms do not exist, a case where there are no dangerous terms, but a case where financial terms exist, and a case where neither dangerous terms nor financial terms exist.

  In the above case, when there is no dangerous term and the process proceeds to the check of the financial term, in order to narrow down the final check number, it is possible to intervene a check whether or not it is a black file. In this flow, if the file is not a black file, the process ends and only the file that is a black file is checked for financial terms.

  Here, the check order by term is checked first for the presence of a risk term and then for the presence of a financial term in this order, but is not limited to this.

  These term checks have been described for black files. However, the term check is not limited thereto, and may be executed for white files as necessary.

  The result of the term check execution is reported by including information classified in four ways in the “judgment status”.

  All the above data are reported to the check requester of each terminal. In this case, the report is made by e-mail. Moreover, about the provision method of these result information, it can be made to report automatically to a required organization, or it can also provide requirements as needed, such as when a related organization requests.

  Here, the risk terms and financial terms adopted here are converted into data as a risk term dictionary (5c) and a financial term dictionary (5d), and include, for example, terms such as slander, slander, customs terms, slaughter, The dangerous term dictionary is compared and checked as basic data, but is not limited to these terms.

  Here, specific examples of the contents of the “spoofing” file for reporting as the contents to be reported to the check requester and related organizations are the URL address, the dangerous term xn, the company name (on HP / NIC), Address (on HP / NIC), phone number on HP, DrBell status of the phone number, address in phone book data registered with the phone number, company name listed on the map with the phone number, “ Impersonation ”The date when the reserve army was raised, the HP itself, etc., which caused either a mismatch or contradiction in address and company name comparisons, use of dangerous terms, or abnormal DrBell status, etc. Whether or not this is true is reported.

  In the invention of this application, a system for proving the fact of recording the HP of the information registered and accumulated in the white file obtained by the spoofing checking means is incorporated separately. This will be described below with reference to FIG.

  First, in the white / black file, HP contents, recording date, time, HP founder name, domain name, address, and others are stored as registered information.

  The information stored in the white / black file is stored with a falsification prevention technique. As the tampering prevention technique, for example, a technique for performing tampering prevention technique on a digital watermark, a method of calculating and encrypting the value of the contents described in HP, and the like can be adopted. In this case, when the HP is additionally recorded on the white / black file, ejection is simultaneously performed on the CD-ROM.

  Next, a system for proof of recording of HP will be described.

  The record fact proof requester makes a proof request to the center server. Upon receiving the request, the center server extracts the corresponding HP from the CD-ROM ejected from the white / black file in the above state, and verifies and confirms it with the recorded content of the CD-ROM.

  Next, the HP obtained as a result of the collation / confirmation is encrypted and transmitted to the recording fact proof requester. As shown in FIG. 5, the output form from the center server storage HP can be launched by paper, and the posted contents include HP contents, watermarked proof, certifier signature, due date, time, and other marks. Is done.

DESCRIPTION OF SYMBOLS 1 User terminal 2 Central processing center 3 Check object 4 Central processing unit 4a Collecting HP synthetic | combination processing means 4b Existing registration white / black file check processing means 4c Requester domain name check processing means 4d Engine information check processing means 4e such as JPNIC Automatic determination Processing means 4f Checked information report processing means 5 Center server 5a White file 5b Black file 5c Danger term dictionary 5d Financial term dictionary 5e URL file 5f Existence confirmation information ■ Phone book corporation data ■ Map information ■ Registry information ■ East-West NTT registration database ■ Company information ■ Trademark ■ GIF file ■ DrBell file 6 URL registration organization (data such as ICANN, JPNIC)
7 Information provider (server)
8 Related organizations 9 Internet

Claims (2)

A home page impersonation check system by a center server that stores or accumulates black and white files and the domain name file of the check requester .
The center server is
HP collection processing means for inputting a plurality of keywords including a company name or a product name to a search engine through the Internet and collecting a plurality of homepage data using a central processing unit provided in the center server;
Collecting HP composites by sorting the plurality of homepage data by domain name using the central processing unit, creating a composite file that is organized and synthesized by eliminating duplicate parts of the sorted homepage data, and storing or storing in the center server Processing means;
The homepage data of the composite file is checked for consistency with the client domain name stored in the domain name file using the central processing unit, and the matching homepage data is determined to be white and registered in the white file -Client domain name check processing means to be accumulated,
The homepage data of the composite file is checked for coincidence with the black and white file / domain name based on the existing registered black and white file including the white file registered and accumulated by the requester domain name check processing means. Registered black and white file domain name checking means,
A website impersonation check system characterized by comprising A method for checking spoofing of a homepage by a center server that stores or accumulates white and black files and a domain name file of a check requester .
And HP collection processing step of company name or a plurality of home page data enter multiple keywords in the search engine through the Internet, including the trade name central processor collected in the center server,
Collecting HP synthesizing process step in which the central processing unit sorts the plurality of homepage data by domain name, creates a synthesized file by eliminating and overlapping the sorted homepage data, and storing or accumulating it in the center server When,
The homepage data of the composite file is checked for consistency with the client domain name stored in the domain name file using the central processing unit, and the matching homepage data is determined to be white and registered in the white file・ Process to check client domain name to be accumulated,
Check the consistency with the monochrome file / domain name with reference to the existing registered monochrome file including the white file registered / accumulated in the requester domain name check process for the homepage data of the composite file. Registered black and white file domain name check process,
Impersonation check method of homepage characterized by including

Images