JP5119185B2 - Communication terminal, data inspection server, and data inspection system - Google Patents

Description

  The present invention relates to a communication terminal, a data inspection server, and a data inspection system.

  At present, Internet access means are diversified, and Internet access in various access environments including mobile is possible. On the terminal side, a terminal having a plurality of access means (hereinafter referred to as “multihome terminal”) has become available. Advantages of using a plurality of access means are improvement of communication throughput and reduction of the bit transfer unit price. Various techniques have been proposed in relation to the former (see, for example, Non-Patent Document 1). In connection with the latter, for the purpose of reducing the load on a mobile network having a high bit transfer unit price, for example, an operation scenario has been proposed in which communication via broadband access such as a wireless LAN or a fixed line is given priority at home (for example, Non-Patent Document 2).

  A form assumed as a combination of a plurality of access means is an access means using a wireless LAN (802.11a / b / g) characterized by wide bandwidth and a mobile network (eg, CDMA2000 / W) characterized by wide-area connectivity. -CDMA) is used in a complementary manner. The multi-home terminal selects one (or a plurality) of access means for accessing the Internet according to some policy.

  By the way, conventionally, ensuring the safety of data obtained via the Internet has been an issue. Currently, it is essential to check for viruses on email attachments and files downloaded from Web sites (download data). In the past, it was common for a terminal (user) that introduced virus detection software to perform virus checking. However, the burden on the user (for example, the burden of installing, setting, and operating software on the terminal) and the terminal itself In order to reduce the burden on the network (for example, the burden caused by the increase in storage capacity and calculation amount), the network side (communication service provider) monitors data flowing on the communication path and performs virus check (substitute service). Have begun to do. A product that can also be applied to a virus check proxy service is provided (see, for example, Non-Patent Document 3).

Proposal of communication media optimization mechanism considering communication quality in multi-home environment, IEICE technical report. NS, Vol.105, No.278 (20050908) pp.25-28, NS2005-82, ISSN: 09135685 KDDI 2008 Financial Results Briefing, [online], [Search February 6, 2009], Internet <URL: http://www.kddi.com/corporate/ir/library/presentation/2008/qa_080424. html> Cisco ASA-5500 Series Product Overview, [online], [Search February 6, 2009], Internet <URL: http://www.cisco.com/web/JP/product/hs/security/asa/prodlit /pdf/asa5500_atg.pdf>

  5, 6, and 7 are diagrams for describing problems in securing the security of acquired data in Internet access (hereinafter referred to as “multihome access”) by a multihome terminal. 5 to 7, a communication terminal a is a multi-home terminal (multi-home mobile phone) provided by the communication carrier A, and means for accessing a network provided by the communication carrier A (access means A). ) And means for accessing a network provided by another communication carrier B (access means B). The communication carrier A is a communication event person who provides a mobile network characterized by wide-area connectivity, and the communication carrier B is a communication event person who provides a wireless LAN / fixed network characterized by wide bandwidth. Note that the communication terminal “a” has certain limitations on storage capacity, processing capacity, battery capacity, and the like compared to a personal computer or the like.

  Consider a virus check on the communication terminal a. Since the communication terminal a normally uses the domain of the communication carrier A, as shown in FIG. 5, even if the communication terminal a uses the access means B, the transmission / reception mail by the communication terminal a Via the mail server of carrier A. Accordingly, the communication event person A can perform a virus check related to the mail.

  On the other hand, when the communication terminal a uses the access means B, the download file from the Web server may not pass through the network of the communication carrier A as shown in FIG. Is not guaranteed to go through the network). Therefore, when the communication terminal a uses the access means B, there is a problem that the communication event person A may not be able to perform a virus check on the download file. In particular, when the download file from the Web server is a large-capacity file, it is particularly problematic because it is assumed that the broadband access means B is used.

  In addition, as shown in FIG. 7, although the measure which installs the proxy server which relays a download file in the communication event person A can also be considered, access means (for example, access means A other than the access means A by an infinite number of communication terminals from the servers of the world Since the proxy server is in charge of high-speed and large-capacity file transfer via the access means B), there are technical (processing power) and economic problems. From the above, it is impossible or difficult at present for the communication carrier A to perform a virus check on the download file from the Web server.

  The present invention has been made in view of the above-described problems, and an object of the present invention is to provide a technique for ensuring the safety of a download file in a multi-home access environment without imposing a load on the terminal side.

  In order to solve the above problem, a communication terminal according to an aspect of the present invention is a communication terminal that supports multi-home connection that can be connected to a plurality of connection destinations. A summary value calculation unit that calculates a summary value, and storage summary information that indicates whether the data is stored or not when the summary value calculation unit calculates the summary value of the data and transmits the summary value of the data to the data inspection server together with the URI A data transmission / reception unit that receives data from the data inspection server, and a data storage availability determination unit that determines whether to store data according to the storage permission / inhibition information when the data transmission / reception unit receives the storage permission / inhibition information. And

  In the communication terminal, the summary value calculation unit may calculate a summary value of data received from the outside via a predetermined connection destination among a plurality of connection destinations.

  In order to solve the above problem, a data inspection server according to another aspect of the present invention is a data inspection server that communicates with a communication terminal that supports multi-home connection that can be connected to a plurality of connection destinations. A summary value receiving unit that receives a summary value of data together with a URI, a summary value storage unit that stores a summary value of data, a test result obtained by inspecting the abnormality of the data, and a URI indicating the location of the data, and a summary; A summary value match determination unit for determining whether or not the summary value received together with the URI by the value receiving unit matches the summary value associated with the URI stored in the summary value storage unit; When the summary value match determination unit determines that the summary value received by the part together with the URI matches the summary value associated with the URI stored in the summary value storage unit. When a test result indicating that there is no abnormality is stored in association with I, a storage permission / inhibition information generation unit that generates storage permission / inhibition information for permitting storage, and a storage permission / inhibition information generated by the storage permission / inhibition information generation unit And a data transmission / reception unit for transmitting information to the communication terminal.

In order to solve the above problem, a data inspection server according to another aspect of the present invention is a data inspection server that communicates with a communication terminal corresponding to a multihome connection that can be connected to a plurality of connection destinations, and transmits and receives data. A data transmission / reception unit, a summary value calculation unit that calculates a summary value of data received by the data transmission / reception unit, a summary value storage unit that stores the summary value calculated by the summary value calculation unit in association with a URI, and a summary value A summary value presence / absence determination unit that determines whether or not a predetermined summary value is stored in the storage unit, a summary value match determination unit that determines whether or not two summary values match, and a data transmission / reception unit received A data checking unit for determining whether or not there is an abnormality in the data; and a storage permission / inhibition information generating unit for generating storage permission / inhibition information indicating permission / inhibition of data storage. And When the summary value is received from the communication terminal, it is determined whether or not the summary value is stored in the summary value storage unit in association with the URI, and the summary value match determination unit receives the URI received by the data transmitting / receiving unit. When the summary value presence / absence determination unit determines that the summary value is stored in the summary value storage unit in association with the summary value, the summary value received together with the URI by the data transmission / reception unit and the URI stored in the summary value storage unit The data transmission / reception unit determines that the summary value is not stored in the summary value storage unit in association with the received URI, and the summary value existence determination unit determines whether the summary value is matched with the received URI. If the summary value match determination unit determines that the summary value received together with the URI and the summary value associated with the URI stored in the summary value storage unit do not match, Specify When the data is received from outside, the summary value calculation unit calculates the summary value of the data when the data transmission / reception unit receives the data from the outside by specifying the URI, and associates the calculated summary value with the URI. Stored in the summary value storage unit, when the data transmission / reception unit receives data from the outside by specifying the URI, the data inspection unit determines whether or not the data is normal and the inspection result corresponds to the URI The summary value match determination unit adds the summary value received by the data transmission / reception unit together with the URI after the data transmission / reception unit specifies the URI and receives the data from the outside, and the summary value calculation. The summary value associated with the URI calculated by the storage unit and stored in the summary value storage unit is determined to match, and the storage permission information generation unit is received by the data transmitting / receiving unit together with the URI When the summary value match determination unit determines that the approximate value matches the summary value associated with the URI stored in the summary value storage unit, the summary value storage unit has no abnormality associated with the URI. If the inspection result is stored, storage permission / prohibition information for permitting storage is generated, and the summary value received together with the URI by the data transmitting / receiving unit is associated with the URI stored in the summary value storage unit When the summary value match determination unit determines that the summary value does not match, or the summary value received by the data transmitting / receiving unit together with the URI and the summary stored in the summary value storage unit If the summary value match determination unit determines that the values match, and the test result indicating that there is an abnormality associated with the URI is stored in the summary value storage unit, storage indicating that storage is not permitted Forgiveness Generates information, data transceiver is characterized by transmitting the stored permission information storing permission information generation unit is generated to the communication terminal

  In order to solve the above problem, a data inspection system according to another aspect of the present invention includes a communication terminal that supports multi-home connection that can be connected to a plurality of connection destinations, and a data inspection that inspects data received by the communication terminal. A data inspection system comprising a server, wherein a communication terminal includes a terminal-side data transmission / reception unit that transmits / receives data, a terminal-side summary value calculation unit that calculates a summary value of data received by the terminal-side data transmission / reception unit, A data storage server that includes a data storage availability determination unit that determines whether to store data received by the terminal-side data transmission / reception unit, and a data storage unit that stores data determined to be stored by the data storage availability determination unit The server-side data transmission / reception unit for transmitting / receiving data, the server-side summary value calculation unit for calculating the summary value of the data received by the server-side data transmission / reception unit, A summary value storage unit that stores the summary value calculated by the summary value calculation unit on the bus side, a summary value presence / absence determination unit that determines whether or not a predetermined summary value is stored in the summary value storage unit, and two summary values Summary value match determination unit for determining whether or not the data matches, a data checking unit for determining whether or not the data received by the server-side data transmission / reception unit is normal, and storage permission / inhibition information indicating whether or not the data is stored A storage permission / rejection information generation unit for generating data, and in the communication terminal, when the terminal-side data transmission / reception unit receives data from the outside by specifying the URI, the data calculated by the terminal-side summary value calculation unit together with the URI The data storage availability determination unit transmits the summary value of the data calculated by the terminal side summary value calculation unit together with the URI to the data inspection server. When the acceptance / rejection information is received from the data inspection server, it is determined whether to store the data according to the storage permission / rejection information. In the data inspection server, the summary value presence / absence determination unit includes the server-side data transmission / reception unit together with the URI. When the summary value is received from the communication terminal, it is determined whether the summary value is stored in the summary value storage unit in association with the URI, and the summary value match determination unit is received by the server-side data transmission / reception unit When the summary value presence / absence determining unit determines that the summary value corresponding to the URI is stored in the summary value storage unit, the summary value received together with the URI by the server-side data transmission / reception unit is stored in the summary value storage unit. The server side data transmitting / receiving unit stores the summary value corresponding to the received URI in the summary value storage unit. If the summary value presence / absence determination unit determines that there is no match, or if the summary value received together with the URI does not match the summary value associated with the URI stored in the summary value storage unit, the summary value match determination unit If it is determined, the URI is designated to receive data from the outside, and the server-side summary value calculation unit sums up the data when the server-side data transmission / reception unit designates the URI and receives data from the outside. The value is calculated, the calculated summary value is stored in the summary value storage unit in association with the URI, and the data checking unit receives the data when the server-side data transmission / reception unit receives the data from the outside by specifying the URI. The test result is stored in the summary value storage unit in association with the URI, and the summary value match determination unit receives the data from the outside by designating the URI on the server side. After that, whether the summary value received together with the URI by the server-side data transmitting / receiving unit matches the summary value calculated by the server-side summary value calculation unit and associated with the URI stored in the summary value storage unit When the summary value received by the server-side data transmission / reception unit together with the URI matches the summary value associated with the URI stored in the summary value storage unit, the summary value is determined. If the match determination unit determines that the summary value storage unit stores an inspection result indicating that there is no abnormality in association with the URI, storage permission / denial information for permitting storage is generated, and the server When the summary value match determination unit determines that the summary value received by the side data transmitting / receiving unit together with the URI does not match the summary value associated with the URI stored in the summary value storage unit, The summary value match determination unit determines that the summary value received by the server-side data transmission / reception unit together with the URI matches the summary value associated with the URI stored in the summary value storage unit. If the inspection result indicating that there is an abnormality associated with the URI is stored in the summary value storage unit, storage permission information indicating that storage is not permitted is generated, and the server-side data transmitting / receiving unit stores the storage permission information. The storage permission / denial information generated by the generation unit is transmitted to the communication terminal.

  In the data inspection system, the terminal-side data transmission / reception unit transmits a summary value of data together with the URI to the data inspection server when data is received from the outside via a predetermined connection destination among a plurality of connection destinations. You may do it.

  In order to solve the above problem, a data inspection system according to another aspect of the present invention includes a data storage unit that stores received data, and a communication terminal that supports multihome connection that can be connected to a plurality of connection destinations. A data inspection system including a data inspection server including a summary value storage unit that stores a summary value of received data in association with a URI, wherein a communication terminal specifies a URI and receives data from the outside Side data reception means, and terminal side summary value calculation means for calculating a summary value of terminal reception data which is data received by the terminal side data reception means when data is received from the outside by the terminal side data reception means, A terminal whose URI is designated by the terminal side data receiving means when the summary value of the terminal received data is calculated by the terminal side summary value calculating means Summary value transmission means for transmitting a terminal calculation summary value, which is a summary value calculated by the terminal side summary value calculation means together with a fixed URI, and storage permission / rejection information indicating permission / prohibition of storage of terminal reception data from the data inspection server Storage permission / rejection information receiving means for receiving, and data storage permission / rejection determination means for determining whether to store terminal reception data in the data storage unit according to the storage permission / rejection information received by the storage permission / rejection information receiving means, The data inspection server includes a summary value receiving unit that receives a terminal calculation summary value together with a terminal designation URI from a communication terminal, and a terminal calculation summary value that is received together with the terminal designation URI by the summary value reception unit. Summary value presence / absence judging means for judging whether or not summary values are stored in the summary value storage unit in association with each other, and summary value existence judging means When it is determined that the summary value is stored in the summary value storage unit in association with the terminal-specified URI, the terminal calculation summary value and the summary stored in the summary value storage unit in association with the terminal-specified URI are stored. The summary value is stored in the summary value storage unit in association with the terminal-specified URI by the first summary value match determination unit and the summary value presence / absence determination unit that determine whether or not the server stored summary value that is a value matches. If it is determined that the terminal calculated summary value does not match the server stored summary value by the first summary value match determination means, the terminal specified URI is specified to send data from the outside. The data received by the server-side data receiving means when the server-side data receiving means and the server-side data receiving means specify the terminal designation URI and the data is received from the outside. Server-side summary value calculation means for calculating the summary value of the server received data, and storing the calculated summary value in the summary value storage unit in association with the terminal-designated URI; A data inspection means for determining whether or not there is any abnormality in the server received data when the data is received from the outside designated and storing the inspection result in the summary value storage unit in association with the terminal specified URI; When the summary value of the server reception data is calculated by the side summary value calculation means, the server calculation summary is the terminal calculation summary value and the summary value calculated by the server side summary value calculation means and stored in the summary value storage unit Stored in the summary value storage section and the summary value received together with the URI by the second data transmission / reception means. In the case where the first summary value match determination means or the second summary value match determination means determines that the summary value associated with the current URI matches, and there is an abnormality associated with the URI in the summary value storage unit If a test result indicating that there is no data is stored, storage permission / prohibition information indicating that storage is permitted is generated and stored in the summary value and summary value storage unit received together with the URI by the server-side data transmission / reception unit When the second summary value match determination means determines that the summary value associated with the URI does not match, or the summary value received together with the URI by the server-side data transmitting / receiving unit is stored in the summary value storage unit When the first summary value match determination unit or the second summary value match determination unit determines that the summary value associated with the existing URI matches, the summary value storage unit is abnormal in association with the URI. If a test result indicating that the storage is present is stored, storage permission / rejection information generating means for generating storage permission / rejection information indicating that storage is not permitted, and storage permission / rejection information generated by the storage permission / rejection information generating means are transmitted to the communication terminal. And storing permission / inhibition information transmitting means.

  In the data inspection system, the terminal side summary value calculation means summarizes the terminal reception data when the terminal side data reception means receives data from the outside via a predetermined connection destination among the plurality of connection destinations. A value may be calculated.

  According to the present invention, it is possible to ensure the security of a download file in a multi-home access environment without imposing a load on the terminal side.

It is a block diagram of the data inspection server 10 which concerns on this embodiment, and the communication terminal 20 which concerns on this embodiment. 4 is an example of information stored in a summary value storage unit 100. 4 is a flowchart showing operations of the data inspection server 10 and the communication terminal 20. It is a figure which supplements operation | movement of the data test | inspection server 10 and the communication terminal 20. FIG. It is a figure for demonstrating a subject. It is a figure for demonstrating a subject. It is a figure for demonstrating a subject.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. As shown in FIG. 1, the data inspection system 1 includes a data inspection server 10 and a communication terminal 20. The data inspection server 10 includes a summary value / inspection result storage unit 100 (also simply referred to as “summary value storage unit”), a summary value / data temporary storage unit 110, and a data transmission / reception unit 120 (“summary value reception unit” or “server side”). Also referred to as “data transmission / reception unit”), summary value presence / absence determination unit 130, summary value calculation unit 140 (also referred to as “server-side summary value calculation unit”), summary value match determination unit 150, data check unit 160, and storage permission / rejection information generation unit 170. The communication terminal 20 includes a data storage unit 200, a data temporary storage unit 210, a data transmission / reception unit (also referred to as “terminal side data transmission / reception unit”) 220, a summary value calculation unit (also referred to as “terminal side summary value calculation unit”) 230, and A data storage availability determination unit 240 is provided.

  The data transmission / reception unit 220 of the communication terminal 20 transmits / receives data. For example, the data transmission / reception unit 220 receives data from the outside by specifying a URI (Uniform Resource Identifier), for example, a URL (Uniform Resource Locator). When the data transmission / reception unit 220 receives data from the outside by specifying a URI, the data transmission / reception unit 220 temporarily stores the data in the data temporary storage unit 210 and notifies that the data has been received from the outside (hereinafter referred to as “external data reception notification”). ") Is sent to the summary value calculation unit 230. The data transmitter / receiver 220 notifies the summary value calculator 230 of the external data reception notification, and then acquires the summary value of the data acquired from the outside by specifying the URI from the summary value calculator 230.

  When the data transmission / reception unit 220 acquires a summary value of data acquired from outside by specifying a URI from the summary value calculation unit 230, the data transmission / reception unit 220 transmits the URI and the summary value of the data to the data inspection server 10.

  In addition, after transmitting the URI and the summary value of the data acquired from the outside to the data inspection server 10, the data transmitting / receiving unit 220 transmits information indicating whether the data is stored in the data storage unit 200 (hereinafter, “storage permission information”). Is received from the data inspection server 10. When the data transmission / reception unit 220 receives the storage permission / inhibition information from the data inspection server 10, the data transmission / reception unit 220 supplies the storage permission / inhibition information to the data storage permission / inhibition determination unit 240.

  The summary value calculation unit 230 of the communication terminal 20 calculates a summary value of data acquired from the outside by specifying a URI. Specifically, when the summary value calculation unit 230 acquires an external data reception notification from the data transmission / reception unit 220, the data temporarily stored in the data temporary storage unit 210 (data acquired from the outside by specifying a URI) Calculate the summary value of. The summary value calculation unit 230 supplies the calculated summary value to the data transmission / reception unit 220.

  The data storage availability determination unit 240 of the communication terminal 20 determines whether or not data acquired from the outside by specifying a URI can be stored in the data storage unit 200. Specifically, the data storage permission / non-permission determination unit 240 stores data temporarily stored in the data temporary storage unit 210 (data acquired from the outside by specifying a URI) according to the storage permission / inhibition information acquired from the data transmission / reception unit 220. It is determined whether or not data can be stored in the data storage unit 200. That is, when the storage permission / non-permission determination unit 240 obtains storage permission / inhibition information indicating that storage is permitted from the data transmission / reception unit 220, the data storage unit 200 stores the data temporarily stored in the data temporary storage unit 210, When storage permission / prohibition information indicating that storage is not permitted is acquired from the data transmission / reception unit 220, the data temporarily stored in the data temporary storage unit 210 is not stored in the data storage unit 200. When the data temporarily stored in the data temporary storage unit 210 is not stored in the data storage unit 200, the data storage availability determination unit 240 displays an error message (creates an error message and displays control information (not shown)). May be provided).

  The data transmission / reception unit 120 of the data inspection server 10 transmits / receives data. For example, the data transmission / reception unit 120 receives a URI and a summary value from the communication terminal 20. When the data transmission / reception unit 120 receives a URI and a summary value from the communication terminal 20, the data transmission / reception unit 120 associates the summary value (hereinafter referred to as “terminal calculation summary value”) with the URI (hereinafter referred to as “terminal designation URI”). The summary value / data temporary storage unit 110 is temporarily stored, and a notification that the URI and the summary value are received from the communication terminal 20 (hereinafter referred to as “summary value reception notification”) is notified to the summary value presence / absence determination unit 130.

  In addition, after notifying the summary value presence / absence determination unit 130 of the summary value reception notification, the data transmission / reception unit 120 sends a summary value (corresponding to the terminal specification URI) from the summary value presence / absence determination unit 130. The summary value) is not stored in the summary value / test result storage unit 100 (hereinafter referred to as “summary value non-storage notification”), or from the summary value match determination unit 150 The terminal calculated summary value temporarily stored in the summary value / data temporary storage unit 110 in association with the terminal designation URI and the summary value (hereinafter referred to as the summary value stored in the summary value / inspection result storage unit 100 in association with the terminal designation URI). , “Server stored summary value”) (hereinafter referred to as “summary value mismatch notification”), the terminal designation URI is designated to receive data from the outside. To. When data is received from outside by designating a terminal designation URI, the data transmission / reception unit 120 temporarily stores the data in the summary value / data temporary storage unit 110 in association with the terminal designation URI and notifies the external data reception Is sent to the summary value calculation unit 140.

  In addition, the data transmission / reception unit 120 acquires storage permission information from the storage permission information generation unit 170. When the data transmission / reception unit 120 acquires the storage permission / rejection information from the storage permission / rejection information generation unit 170, the data transmission / reception unit 120 transmits the storage permission / rejection information to the communication terminal 20.

  The summary value presence / absence determination unit 130 of the data inspection server 10 determines whether or not a predetermined summary value is stored in the summary value / inspection result storage unit 100. Specifically, when the summary value presence / absence determination unit 130 acquires the summary value reception notification from the data transmission / reception unit 120, the summary value corresponding to the terminal designation URI temporarily stored in the summary value / data temporary storage unit 110 is obtained. It is determined whether or not it is stored in the summary value / inspection result storage unit 100. That is, the summary value presence / absence determination unit 130 determines whether a summary value corresponding to the URI specified by the communication terminal 20 is stored in the summary value / inspection result storage unit 100. Information stored in the summary value / inspection result storage unit 100 is shown in FIG.

  When the summary value presence / absence determination unit 130 determines that the summary value corresponding to the terminal-specified URI is not stored in the summary value / test result storage unit 100, the summary value non-storage notification is sent to the data transmission / reception unit 120. On the other hand, when it is determined that the summary value corresponding to the terminal-specified URI is stored in the summary value / inspection result storage unit 100, the summary value corresponding to the terminal-specified URI is stored in the summary value / inspection result storage unit 100. Is notified to the summary value match determination unit 150 (hereinafter referred to as “summary value already stored notification”).

  The summary value calculation unit 140 of the data inspection server 10 calculates the summary value of the data acquired from the outside by designating the terminal designation URI. Specifically, when the summary value calculation unit 140 acquires the external data reception notification from the data transmission / reception unit 120, the summary value / data temporary storage unit 110 temporarily stores the data (corresponding to the terminal specified URI). A summary value of data acquired from the outside by designating a terminal designation URI is calculated. When the summary value calculation unit 140 calculates a summary value of data acquired from the outside by specifying a terminal designation URI, the summary value calculation unit 140 associates the summary value (hereinafter referred to as “server calculation summary value”) with the terminal designation URI. The data is stored in the summary value / inspection result storage unit 100 and a notification that the summary value has been calculated (hereinafter referred to as “summary value calculation notification”) is notified to the data inspection unit 160.

  The data inspection unit 160 of the data inspection server 10 determines whether there is no abnormality in the data acquired from the outside by designating the terminal designation URI. Specifically, when the data checking unit 160 obtains the summary value calculation notification from the summary value calculation unit 140, that is, the summary value of the data acquired from the outside by the summary value calculation unit 140 specifying the terminal designation URI is displayed. When calculated, the server calculated summary value stored in the summary value / inspection result storage unit 100 in association with the terminal-specified URI is inspected (for example, virus check).

  When the data check unit 160 checks the server calculation summary value stored in the summary value / check result storage unit 100 in association with the terminal-specified URI, the data check unit 160 checks the check result in association with the terminal-specified URI. In addition to storing the result in the result storage unit 100, the summary value matching determination unit 150 is notified of a notification that the inspection has been completed (hereinafter referred to as “inspection completion notification”).

  The summary value match determination unit 150 of the data inspection server 10 determines whether the two summary values match. Specifically, the summary value match determination unit 150 obtains the summary value already stored notification from the summary value presence / absence determination unit 130, that is, the summary value corresponding to the terminal-specified URI is displayed by the summary value presence / absence determination unit 130. If it is determined that the data is already stored in the test result storage unit 100, the terminal calculation summary value temporarily stored in the summary value / data temporary storage unit 110 in association with the terminal designation URI and the terminal designation URI It is determined whether or not the server stored summary values stored in the summary value / inspection result storage unit 100 in association with each other match. In addition, when the summary value match determination unit 150 obtains an inspection completion notification from the data inspection unit 160, that is, the data inspection unit 160 stores the summary value / inspection result storage unit 100 in association with the terminal designation URI. When the server calculation summary value is checked, it is determined whether or not the server calculation summary value matches the terminal calculation summary value temporarily stored in the summary value / data temporary storage unit 110 in association with the terminal designation URI. to decide.

  The summary value match determination unit 150 includes a terminal calculation summary value temporarily stored in the summary value / data temporary storage unit 110 in association with the terminal designation URI, and a summary value / inspection result storage unit in association with the terminal designation URI. When it is determined that the server stored summary values stored in 100 match, a notification that the two summary values match (hereinafter referred to as “summary value match notification”) is notified to the storage permission / inhibition information generation unit 170.

  On the other hand, the summary value match determination unit 150 associates the terminal calculation summary value temporarily stored in the summary value / data temporary storage unit 110 with the terminal designation URI and the summary value / inspection result in association with the terminal designation URI. If it is determined that the server stored summary values stored in the storage unit 100 do not match, a notification that the two summary values do not match (hereinafter referred to as “summary value mismatch notification”) is notified to the data transmitting / receiving unit 120. .

  On the other hand, the summary value match determination unit 150 associates the terminal calculation summary value temporarily stored in the summary value / data temporary storage unit 110 with the terminal designation URI and the summary value / inspection result in association with the terminal designation URI. When it is determined that the server calculation summary values stored in the storage unit 100 match, a summary value match notification is sent to the storage permission / inhibition information generation unit 170.

  On the other hand, the summary value match determination unit 150 associates the terminal calculation summary value temporarily stored in the summary value / data temporary storage unit 110 with the terminal designation URI and the summary value / inspection result in association with the terminal designation URI. When it is determined that the server calculation summary value stored in the storage unit 100 does not match, a summary value mismatch notification is sent to the storage permission / inhibition information generation unit 170.

  The storage permission / rejection information generation unit 170 of the data inspection server 10 generates storage permission / rejection information. Specifically, the storage permission / inhibition information generation unit 170 obtains the summary value match notification from the summary value match determination unit 150, that is, the terminal calculation summary value and the server storage summary value indicated by the same terminal designation URI are obtained. When they match, or when the terminal calculation summary value indicated by the same terminal designation URI matches the server calculation summary value, the summary value / test result storage unit 100 is referred to, and the summary value / test result storage unit is referred to. It is determined whether an inspection result indicating that there is no abnormality is stored in 100 in correspondence with the terminal designation URI or whether an inspection result indicating that there is an abnormality is stored.

  The storage permission / inhibition information generation unit 170 generates the storage permission / inhibition information for permitting storage when it is determined that the summary value / inspection result storage unit 100 stores the inspection result indicating that there is no abnormality. When it is determined that an inspection result indicating that there is an abnormality is stored in the value / inspection result storage unit 100, storage permission / inhibition information indicating that storage is not permitted is generated. The storage permission / rejection information generation unit 170 supplies the generated storage permission / rejection information to the data transmission / reception unit 120.

  On the other hand, when the storage permission information generation unit 170 obtains the summary value mismatch notification from the summary value match determination unit 150, that is, when the terminal calculation summary value indicated by the same terminal designation URI does not match the server calculation summary value. Storage permission information indicating that storage is not permitted is generated. The storage permission / rejection information generation unit 170 supplies the generated storage permission / rejection information to the data transmission / reception unit 120.

  Next, operations of the data inspection server 10 and the communication terminal 20 will be described with reference to FIG. The left side of the flowchart shown in FIG. 3 shows the operation of the communication terminal 20, and the right side shows the operation of the data inspection server 10. FIG. 4 shows a state of data transmission / reception between the data inspection server 10 and the communication terminal 20.

  The data transmission / reception unit 220 of the communication terminal 20 designates a URI (terminal designation URI) and receives data from the outside (step S200). That is, the operation (reception in step S200) by the data transmitting / receiving unit 220 is an arrow 1 in FIG. The summary value calculation unit 230 of the communication terminal 20 calculates a summary value (terminal calculation summary value St) of data acquired from the outside (step S202). The data transmitting / receiving unit 220 of the communication terminal 20 transmits the terminal designation URI and the terminal calculation summary value St to the data inspection server 10 (step S204). That is, the operation (transmission in step S204) by the data transmitting / receiving unit 220 is an arrow 2 in FIG.

  The data transmitter / receiver 120 of the data inspection server 10 receives the terminal designation URI and the terminal calculation summary value St from the communication terminal 20 (step S100). That is, the operation (reception in step S100) by the data transmitting / receiving unit 120 is indicated by an arrow 2 in FIG. The summary value presence / absence determination unit 130 of the data inspection server 10 determines whether or not the summary value (server stored summary value Ss1) corresponding to the terminal-specified URI is stored in the summary value / inspection result storage unit 100 (step S102). ).

  In step S102, when the summary value presence / absence determination unit 130 determines that the server stored summary value Ss1 corresponding to the terminal-specified URI is stored in the summary value / inspection result storage unit 100 (step S102: Yes), the data inspection server The ten summary value match determination unit 150 determines whether the terminal calculation summary value St indicated by the same terminal designation URI matches the server stored summary value Ss1 (step S104). If the summary value match determination unit 150 determines that the terminal calculation summary value St indicated by the same terminal designation URI does not match the server stored summary value Ss1 (step S104: No), the summary value match determination unit 150 summarizes the server stored summary value Ss1. Delete from the value / inspection result storage unit 100 (step S106). The summary value match determination unit 150 may delete the corresponding terminal designation URI and the inspection result from the summary value / inspection result storage unit 100 in addition to the server storage summary value Ss1 (step S106).

  On the other hand, when the summary value presence / absence determination unit 130 determines in step S102 that the server stored summary value Ss1 corresponding to the terminal-specified URI is not stored in the summary value / test result storage unit 100 (step S102: No), or Subsequent to step S106, the data transmitting / receiving unit 120 of the data inspection server 10 receives the data from the outside by designating the terminal designation URI (step S108). That is, the operation (reception in step S108) by the data transmitting / receiving unit 120 is indicated by an arrow 3 in FIG. Subsequent to step S108, the summary value calculation unit 140 of the data inspection server 10 calculates the summary value (server calculation summary value Ss2) of the data acquired from the outside, and stores the summary value / inspection result in association with the terminal-specified URI. The data is stored in the unit 100 (step S112).

  Subsequent to step S110, the data inspection unit 160 of the data inspection server 10 inspects the server calculation summary value Ss2 (for example, virus check), associates the inspection result with the terminal-specified URI, and summarizes the result / inspection result storage unit 100. (Step S112). Subsequently, the summary value match determination unit 150 of the data inspection server 10 determines whether the terminal calculation summary value St indicated by the same terminal designation URI matches the server calculation summary value Ss2 (step S114).

  When the summary value match determination unit 150 determines that the terminal calculation summary value St indicated by the same terminal designation URI matches the server stored summary value Ss1 (step S104: Yes), or the summary value match determination unit 150 is the same. When it is determined that the terminal calculation summary value St indicated by the terminal designation URI of the server and the server calculation summary value Ss2 match (step S114: Yes), the storage permission / inhibition information generation unit 170 of the data inspection server 10 determines the summary value / inspection result. With reference to the storage unit 100, whether the inspection result indicating that there is no abnormality is stored in the summary value / inspection result storage unit 100 in association with the terminal-specified URI or whether the inspection result indicating that there is an abnormality is stored. Judgment is made (step S116).

  If the storage permission / inhibition information generation unit 170 determines that the inspection result indicating that there is no abnormality is stored in the summary value / inspection result storage unit 100 (step S116: Yes), the storage permission / inhibition information “to allow storage” “ OK "is generated (step S118 :). Subsequently, the data transmitting / receiving unit 120 of the data inspection server 10 transmits the storage permission / denial information “OK” (step S124). That is, the operation (transmission in step S124) by the data transmitting / receiving unit 120 is an arrow 4 in FIG. Then, the operation of the data inspection server 10 ends.

  On the other hand, when the storage permission / inhibition information generation unit 170 determines that the inspection result indicating that there is an abnormality is stored in the summary value / inspection result storage unit 100 (step S116: No), the storage permission / inhibition indicating that storage is not permitted. Generate information. Subsequently, the data transmitting / receiving unit 120 of the data inspection server 10 transmits the storage permission / inhibition information “NG (inspection abnormality)” (step S124). That is, the operation (transmission in step S124) by the data transmitting / receiving unit 120 is an arrow 4 in FIG. Then, the operation of the data inspection server 10 ends.

  On the other hand, if the summary value match determination unit 150 determines that the terminal calculation summary value St and the server calculation summary value Ss2 indicated by the same terminal designation URI match (step S114: Yes), Storage permission / prohibition information “NE (summary value mismatch)” indicating that storage is not permitted is generated (step S122). Subsequently, the data transmitting / receiving unit 120 of the data inspection server 10 transmits storage permission / prohibition information “NE (summary value mismatch)” (step S124). That is, the operation (transmission in step S124) by the data transmitting / receiving unit 120 is an arrow 4 in FIG. Then, the operation of the data inspection server 10 ends.

  The data transmitting / receiving unit 220 of the communication terminal 20 determines whether or not storage permission / inhibition information has been received from the data inspection server 10 (step S206). The receiving operation of the storage permission / rejection information by the data transmitting / receiving unit 220 is indicated by an arrow 4 in FIG. When determining that the storage permission / rejection information has not been received from the data inspection server 10 (step S206: No), the data transmitting / receiving unit 220 determines that the storage permission / rejection information has been received from the data inspection server 10 (step S206: Yes). Until step S206 is repeated (waiting).

  On the other hand, when the data transmission / reception unit 220 determines that storage permission / inhibition information has been received from the data inspection server 10 (step S206: Yes), the data storage permission / inhibition determination unit 240 of the communication terminal 20 stores the storage permission / inhibition information to permit storage. It is determined whether or not “OK” (step S208). If the data storage availability determination unit 240 determines that the storage permission information “OK” indicates that storage is permitted (step S208: Yes), the data storage unit 200 stores the data received from the outside in step S200. (Step S210). Then, the operation of the communication terminal 20 ends.

  On the other hand, when it is determined that the storage permission / inhibition information 240 indicates that the storage is permitted (No in step S208), the storage permission / inhibition information “NG (inspection error)” that does not permit storage is determined. It is determined whether or not (step S212). If the data storage availability determination unit 240 determines that the storage permission information “NG (inspection error)” indicates that storage is not permitted (step S212: Yes), an error message “inspection error” is displayed (step S214). . That is, the data storage availability determination unit 240 does not store the data received from the outside in step S200 in the data storage unit 200. Then, the operation of the communication terminal 20 ends.

  On the other hand, if the data storage availability determination unit 240 determines that the storage permission information “NG (inspection error)” is not permitted (NO in step S212), an error message “summary value mismatch” is displayed (step S212). S216). That is, the data storage availability determination unit 240 does not store the data received from the outside in step S200 in the data storage unit 200. Then, the operation of the communication terminal 20 ends.

  As described above, according to the data inspection server 10 and the communication terminal 20, it is possible to ensure the safety of a download file in a multi-home access environment without imposing a load on the terminal side. That is, since the communication terminal 20 does not implement a process for ensuring safety (inspection process), the burden on the user (for example, the burden of software installation, setting, and operation on the terminal) and the burden on the terminal itself (for example, No burden due to increase in storage capacity and calculation amount. As a result, the battery consumption of the communication terminal 20 can also be saved. Further, the data transfer amount can be reduced as compared with a method in which a proxy server is installed.

  When a plurality of communication terminals 20 download the same content, in principle, the number of downloads from the external server to the data inspection server 10 can be suppressed to one. That is, when the URL and the summary value are acquired from the communication terminal, the data inspection server 10 does not store the summary value corresponding to the URL or the summary value does not match the summary value corresponding to the URL. This is because data (file) is downloaded from outside only in the case.

  Moreover, since the data inspection server 10 stores only the URL and the summary value, the storage capacity can be reduced. Further, when the URL and the summary value are acquired from the communication terminal, the data inspection server 10 does not need to inspect the data when the summary value matches the summary value corresponding to the URL. , Processing load can be reduced. In addition, the data inspection server 10 may download the latest data (file) from the outside as needed, and can reduce the processing load. That is, the data inspection server 10 only needs to acquire the latest data (file) from the outside when the summary value acquired from the communication terminal 20 and its summary value do not match.

  In addition, although the communication terminal 20 of the said embodiment assumes the communication terminal corresponding to the multihome connection which can be connected with a some connection destination, ie, a multihome terminal, the communication terminal 20 receives data from the outside. After that, the terminal designation URI and the terminal calculation summary value are not always transmitted to the data inspection server 10, but only when data is received from the outside via a predetermined connection destination (for example, another communication carrier). The terminal designation URI and the terminal calculation summary value may be transmitted to the data inspection server 10.

  The summary values calculated by the summary value calculation unit 230 of the communication terminal 20 and the summary value calculation unit 140 of the data inspection server 10 are, for example, hash values (for example, SHA-1, SHA-224, SHA-256, SHA- 384, SHA-512, MD4, 5).

  Note that a program for executing each process of the data inspection server 10 (or the communication terminal 20) according to an embodiment of the present invention is recorded on a computer-readable recording medium, and the program recorded on the recording medium is recorded on the computer. The above-described various processes relating to the data inspection server 10 (or the communication terminal 20) according to an embodiment of the present invention may be performed by being read and executed by the system. Here, the “computer system” may include an OS and hardware such as peripheral devices. Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used. The “computer-readable recording medium” means a flexible disk, a magneto-optical disk, a ROM, a writable nonvolatile memory such as a flash memory, a portable medium such as a CD-ROM, a hard disk built in a computer system, etc. This is a storage device.

  Further, the “computer-readable recording medium” means a volatile memory (for example, DRAM (Dynamic DRAM) in a computer system that becomes a server or a client when a program is transmitted through a network such as the Internet or a communication line such as a telephone line. Random Access Memory)), etc., which hold programs for a certain period of time. The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes designs and the like that do not depart from the gist of the present invention.

  DESCRIPTION OF SYMBOLS 1 Data test | inspection system 10 Data test | inspection server 20 Communication terminal 100 Summary value and test result storage part (Summary value storage part) 110 Summary value and data temporary storage part 120 Data transmission / reception part (Summary value reception part, server side data transmission / reception part) 130 Summary value presence / absence determination unit 140 Summary value calculation unit (server side summary value calculation unit) 150 Summary value match determination unit 160 Data check unit 170 Storage permission / rejection information generation unit 200 Data storage unit 210 Data temporary storage unit 220 Data transmission / reception unit (terminal side) Data transmission / reception unit 230 Summary value calculation unit (terminal-side summary value calculation unit) 240 Data storage availability determination unit

Claims (8)

A communication terminal that supports multi-home connection that can be connected to multiple connection destinations,
A summary value calculation unit for calculating a summary value of data received from outside by specifying a URI;
When the summary value calculation unit calculates the summary value of the data, the summary value of the data is transmitted to the data inspection server together with the URI, and storage permission / rejection information indicating permission / inhibition of storage of the data is transmitted from the data inspection server. A data transmitter / receiver to receive;
A communication terminal comprising: a data storage availability determination unit that determines whether to store the data in accordance with the storage permission information when the data transmission / reception unit receives the storage permission information.   The communication terminal according to claim 1, wherein the summary value calculation unit calculates a summary value of data received from outside via a predetermined connection destination among the plurality of connection destinations. A data inspection server that communicates with a communication terminal that supports multi-home connection that can be connected to multiple connection destinations,
A summary value receiving unit for receiving a summary value of data together with a URI from the communication terminal;
A summary value storage unit that stores a summary value of data, a test result obtained by inspecting the abnormality of the data, and a URI indicating the location of the data;
A summary value match determination unit that determines whether or not the summary value received by the summary value receiving unit together with the URI matches the summary value associated with the URI stored in the summary value storage unit; ,
The summary value matching determination unit determines that the summary value received by the summary value receiving unit together with the URI matches the summary value associated with the URI stored in the summary value storage unit. A storage permission / rejection information generation unit that generates the storage permission / rejection information for permitting storage when the inspection result indicating that there is no abnormality is stored in the summary value storage unit in association with the URI;
A data inspection server, comprising: a data transmission / reception unit that transmits the storage permission information generated by the storage permission information generation unit to the communication terminal. A data inspection server that communicates with a communication terminal that supports multi-home connection that can be connected to a plurality of connection destinations,
A data transmitting and receiving unit for transmitting and receiving data;
A summary value calculator for calculating a summary value of data received by the data transceiver;
A summary value storage unit that stores the summary value calculated by the summary value calculation unit in association with a URI;
A summary value presence / absence determination unit that determines whether or not a predetermined summary value is stored in the summary value storage unit;
A summary value match determination unit for determining whether or not two summary values match;
A data inspection unit for determining whether or not the data received by the data transmission / reception unit is normal; and
A storage permission / rejection information generation unit that generates storage permission / rejection information indicating permission / inhibition of data storage;
The summary value presence / absence determination unit determines whether a summary value is stored in the summary value storage unit in association with the URI when the data transmitting / receiving unit receives a summary value together with the URI from the communication terminal. And
The summary value match determination unit, when the summary value presence determination unit determines that a summary value is stored in the summary value storage unit in association with the URI received by the data transmission / reception unit, Determines whether the summary value received together with the URI matches the summary value associated with the URI stored in the summary value storage unit,
When the summary value presence / absence determination unit determines that the summary value is not stored in the summary value storage unit in association with the received URI, or the summary value and the summary value received together with the URI When the summary value match determination unit determines that the summary value associated with the URI stored in the storage unit does not match, the URI is specified to receive data from the outside,
The summary value calculation unit calculates a summary value of the data when the data transmission / reception unit specifies the URI and receives data from the outside, and associates the calculated summary value with the URI to calculate the summary value Store in the storage,
When the data transmitting / receiving unit receives data from the outside by specifying the URI, the data inspection unit determines whether the data is normal, and associates the inspection result with the URI to summarize the summary. Stored in the value storage,
The summary value match determination unit further calculates the summary value received by the data transmission / reception unit together with the URI after the data transmission / reception unit specifies the URI and receives the data from the outside, and is calculated by the summary value calculation unit. Determining whether or not the summary value associated with the URI stored in the summary value storage unit matches,
When the summary value received together with the URI by the data transmission / reception unit matches the summary value associated with the URI stored in the summary value storage unit, the storage permission / inhibition information generation unit If the inspection result indicating that there is no abnormality in association with the URI is stored in the summary value storage unit, the storage permission information for permitting storage is generated, When the summary value match determination unit determines that the summary value received by the data transmission / reception unit together with the URI and the summary value associated with the URI stored in the summary value storage unit do not match, or When the summary value received together with the URI by the data transmitting / receiving unit matches the summary value associated with the URI stored in the summary value storage unit, the summary value match determination unit If the URI the inspection result indicating that there is abnormality in correspondence with the digest value storage unit in a case where it is determined is stored, and generates the storage permission information that does not allow storing,
The data transmission / reception unit transmits the storage permission / inhibition information generated by the storage permission / inhibition information generation unit to the communication terminal. A data inspection system comprising a communication terminal corresponding to a multihome connection that can be connected to a plurality of connection destinations, and a data inspection server that inspects data received by the communication terminal,
The communication terminal is
A terminal-side data transmission / reception unit for transmitting / receiving data;
A terminal-side summary value calculation unit for calculating a summary value of data received by the terminal-side data transmission / reception unit;
A data storage availability determination unit that determines whether to store the data received by the terminal-side data transmission / reception unit;
A data storage unit for storing data determined to be stored by the data storage availability determination unit;
The data inspection server
A server-side data transceiver for transmitting and receiving data;
A server-side summary value calculation unit that calculates a summary value of data received by the server-side data transmission / reception unit;
A summary value storage for storing the summary value calculated by the server side summary value calculator;
A summary value presence / absence determination unit that determines whether or not a predetermined summary value is stored in the summary value storage unit;
A summary value match determination unit for determining whether or not two summary values match;
A data inspection unit for determining whether or not the data received by the server-side data transmission / reception unit is normal;
A storage permission / rejection information generating unit for generating storage permission / rejection information indicating permission / inhibition of storage of the data,
In the communication terminal,
When the terminal-side data transmitting / receiving unit receives data from the outside by specifying a URI, the terminal-side data transmitting / receiving unit transmits the summary value of the data calculated by the terminal-side summary value calculating unit together with the URI to the data inspection server,
The data storage availability determination unit transmits the summary value of the data calculated by the terminal side summary value calculation unit together with the URI to the data inspection server, and further stores the storage permission information in the data check server. When received from the data inspection server, according to the storage permission information, determine whether to store the data,
In the data inspection server,
The summary value presence / absence determination unit determines whether or not a summary value is stored in the summary value storage unit in association with the URI when the server-side data transmission / reception unit receives the summary value together with the URI from the communication terminal. Judging
When the summary value presence / absence determination unit determines that the summary value corresponding to the URI received by the server side data transmission / reception unit is stored in the summary value storage unit, Determining whether the summary value received together with the URI by the data transmitting / receiving unit matches the summary value associated with the URI stored in the summary value storage unit;
The server-side data transmission / reception unit determines whether the summary value presence determination unit determines that the summary value corresponding to the received URI is not stored in the summary value storage unit, or the summary value received together with the URI and the summary When the summary value match determination unit determines that the summary value associated with the URI stored in the value storage unit does not match, the URI is designated to receive data from the outside,
The server-side summary value calculation unit calculates a summary value of the data when the server-side data transmission / reception unit receives the data from the outside by specifying the URI, and associates the calculated summary value with the URI Stored in the summary value storage unit,
When the server-side data transmission / reception unit receives the data from the outside by specifying the URI, the data inspection unit determines whether the data is normal and associates the inspection result with the URI. Storing in the summary value storage unit,
The summary value match determination unit further includes a summary value received by the server side data transmission / reception unit together with the URI after the server side data transmission / reception unit specifies the URI and receives data from the outside, and the server side summary value Determining whether a summary value calculated by a calculation unit and associated with the URI stored in the summary value storage unit matches,
The storage permission / inhibition information generation unit matches the summary value when the summary value received together with the URI by the server-side data transmission / reception unit matches the summary value associated with the URI stored in the summary value storage unit. If the determination result is determined and the inspection result indicating that there is no abnormality is stored in the summary value storage unit in association with the URI, the storage permission / inhibition information for permitting storage is generated. The summary value match determination unit determines that the summary value received together with the URI by the server-side data transmission / reception unit does not match the summary value associated with the URI stored in the summary value storage unit. Or the summary value received together with the URI by the server-side data transmitting / receiving unit matches the summary value associated with the URI stored in the summary value storage unit Then, when the summary value match determination unit makes a determination and the summary value storage unit stores the inspection result indicating that there is an abnormality in association with the URI, the storage unit does not permit storage. Generating the storage permission / inhibition information;
The server-side data transmission / reception unit transmits the storage permission / inhibition information generated by the storage permission / inhibition information generation unit to the communication terminal.   The terminal-side data transmission / reception unit transmits a summary value of the data to the data inspection server together with the URI when data is received from the outside through a predetermined connection destination among the plurality of connection destinations. The data inspection system according to claim 5. A data test including a data storage unit that stores received data, a communication terminal that supports multi-homed connection that can be connected to a plurality of connection destinations, and a summary value storage unit that stores a summary value of received data in association with a URI A data inspection system comprising a server,
The communication terminal is
A terminal-side data receiving means for receiving data from outside by designating a URI;
A terminal-side summary value calculating means for calculating a summary value of terminal-received data that is data received by the terminal-side data receiving means when data is received from the outside by the terminal-side data receiving means;
When the summary value of the terminal reception data is calculated by the terminal side summary value calculation means, it is calculated by the terminal side summary value calculation means together with a terminal designation URI that is a URI designated by the terminal side data reception means. Summary value transmitting means for transmitting a terminal calculation summary value, which is a summary value, to the data inspection server;
Storage permission / rejection information receiving means for receiving storage permission / rejection information indicating permission / refusal of storage of the terminal reception data from the data inspection server;
Data storage availability determination means for determining whether to store the terminal reception data in the data storage unit according to the storage permission information received by the storage permission information reception means;
The data inspection server
Summary value receiving means for receiving the terminal calculation summary value together with the terminal-designated URI from the communication terminal;
A summary value for determining whether or not a summary value is stored in the summary value storage unit in association with the terminal designated URI when the terminal calculated summary value is received together with the terminal designated URI by the summary value receiving means Presence / absence judging means,
When it is determined by the summary value presence / absence determining means that a summary value is stored in the summary value storage unit in association with the terminal specified URI, the terminal calculated summary value and the terminal specification URI in the summary value storage unit First summary value match determination means for determining whether or not a server stored summary value that is a summary value stored in correspondence with
When it is determined by the summary value presence / absence determining means that a summary value is not stored in the summary value storage unit in association with the terminal-specified URI, or the terminal calculated summary value is determined by the first summary value match determining means And server-side data receiving means for receiving data from the outside by specifying the terminal-designated URI when it is determined that the server-stored summary value does not match,
When data is received from the outside by specifying the terminal designation URI by the server side data receiving means, a summary value of server received data that is data received by the server side data receiving means is calculated and calculated Server-side summary value calculation means for storing a summary value in the summary value storage unit in association with the terminal-specified URI;
When data is received from the outside by specifying the terminal-designated URI by the server-side data receiving means, it is determined whether or not the server-received data is normal, and an inspection result is associated with the terminal-designated URI Data inspection means for storing in the summary value storage unit;
When the summary value of the server received data is calculated by the server side summary value calculation means, the terminal calculation summary value and the server side summary value calculation means are calculated and stored in the summary value storage unit. Second summary value match determination means for determining whether or not the server calculated summary value that is a summary value matches;
If the summary value received together with the URI by the server-side data transmission / reception means matches the summary value associated with the URI stored in the summary value storage unit, the first summary value match determination means or If the second summary value match determination means makes a determination and the summary value storage unit stores the inspection result indicating that there is no abnormality in association with the URI, storage is permitted. If the summary value received by the server-side data transmitting / receiving unit together with the URI does not match the summary value associated with the URI stored in the summary value storage unit Or the summary value received by the server-side data transmitting / receiving unit together with the URI and the UR stored in the summary value storage unit. When the first summary value match determination unit or the second summary value match determination unit determines that the summary value is matched with the summary value, the summary value storage unit associates the summary value with the URI. When the inspection result indicating that there is an abnormality is stored, storage permission / inhibition information generating means for generating the storage permission / inhibition information not to permit storage,
A data inspection system comprising: storage permission / inhibition information transmission means for transmitting the storage permission / inhibition information generated by the storage permission / inhibition information generation means to the communication terminal.   The terminal side summary value calculation means calculates the summary value of the terminal reception data when the terminal side data reception means receives data from the outside via a predetermined connection destination among the plurality of connection destinations. The data inspection system according to claim 7, wherein calculation is performed.

Images