JP5139943B2 - Communication system, proxy server, proxy server control method and control program - Google Patents

Description

  The present invention relates to a communication system, a proxy server, a proxy server control method, and a control program therefor.

Currently, not only personal computers but also mobile phones can access the web server. However, unlike a personal computer, a mobile phone has various restrictions such as a restriction on the length of a URL that can be handled. For this reason, a device has been devised so that a web page can be accessed regardless of such restrictions (Patent Document 1). There is also an open source mod chxj (non-patent literature).
Japanese Patent Laid-Open No. 2003-141002 http://cvs.sourceforge.jp/cgi-bin/viewcvs.cgi/modchxj/mod_chxj/doc/modchxj.html?rev=HEAD

  When accessing a web server as well as a mobile phone, user authentication processing may be performed.

  An object of the present invention is to provide a form of user authentication.

  1st invention is about the communication system provided with the client terminal device, the proxy server, and the web server.

  The proxy server is received by the first request data receiving means and the first request data receiving means for receiving the request data transmitted from the client terminal device and requesting the web page specified by the URL. When the request data is accompanied by data representing a user ID and data representing a password, a first user authentication is performed based on the user ID data and password data received by the request data receiving means. User authentication means, first request data sending means for sending request data received by the request data receiving means to the web server in response to being authenticated by the first user authentication means, Request data receiving means Thus, when the received request data is not accompanied by user ID data and password data, the URL of the web page requested by the request data received by the request data receiving means is converted by the proxy server. In the proxy server, when the conversion determination means for determining whether or not the URL of the requested web page has been converted in the proxy server by the conversion determination means, Search means for finding user ID data from a storage device in which user ID data is stored corresponding to the URL being converted, and in response to the user ID data being found by the search means, the first request Received by data receiving means The second user authentication means for authenticating the user who sent the quest data as a valid user, and the converted URL is converted according to the fact that the second user authentication means determines that the user is a valid user. URL reverse conversion means for returning to the previous URL, and second request data for sending request data for requesting a web page specified by the URL returned by the URL reverse conversion means to the web server A transmission means is provided.

  The web server includes second request data receiving means for receiving request data transmitted from the first request data transmitting means or the second request data transmitting means of the proxy server; and First web page data transmitting means for transmitting the data of the web page requested by the request data received by the second request data receiving means to the proxy server is provided.

  The proxy server includes a link indicating a link destination of the web page included in the web page represented by the web page data transmitted from the first web page data transmission unit of the web server. Link destination URL converting means for converting the destination URL so as to become a different URL for each conversion, and Web page data representing the web page including the link destination URL converted by the link destination URL converting means. After the second web page data transmission means to be transmitted to the device and the user ID data received by the request data reception means and the data representing the URL before being converted by the link destination URL conversion means The storage device is controlled so as to store the data representing the URL in association with each other. Further comprising a storage control unit that.

  The client terminal device includes a web page data receiving unit that receives the web page data transmitted from the second web page data transmitting unit of the proxy server, and the web page data receiving unit. Designating means for designating one link destination URL among the link destination URLs included in the web page represented by the received web page data, and the web specified by the link destination URL designated by the designation means Third request data transmission means for transmitting request data for requesting a page to the proxy server is provided.

  According to the first invention, when request data is first transmitted from the client terminal device to the proxy server, the request data accompanied by the user ID and the password is transmitted. In the proxy server, a first user authentication process is performed using the user ID and password. When the user is authenticated, the request data transmitted from the client terminal device is transmitted from the proxy server to the web server.

  When the request data transmitted from the proxy server is received by the web server, the web page data corresponding to the request data is transmitted from the web server to the proxy server.

  When the web page data transmitted from the web server is received by the proxy server, the link destination URL indicating the link destination of the web page included in the web page represented by the web page data is: Each conversion is converted differently. Web page data representing a web page including the converted link destination URL is transmitted from the proxy server to the client terminal device. In the proxy server, the user ID data transmitted together with the request data from the client terminal device, the URL data before conversion, and the URL data after conversion are stored in association with each other.

  When the web page data transmitted from the proxy server is received by the client terminal device, a link destination included in the web page represented by the web page data is designated. Request data requesting a web page specified by the specified URL is transmitted from the client terminal device to the proxy server. This request data is not accompanied by user ID data and password data.

  When request data transmitted from the client terminal device and not accompanied by user ID data and password data is received at the proxy server, it is determined whether the URL of the requested web page has been converted. Is done. Then, the user ID data is found from the storage device storing the user ID data corresponding to the URL converted in the proxy server. If it has been converted, the converted URL should be known only by the user authenticated, so that the user ID data can be found. Thereby, the second authentication process is performed. The converted URL is returned to the URL before conversion, and the request data of the web page specified by the returned URL is transmitted from the proxy server to the web server.

  When the request data transmitted from the proxy server is received by the web server, the requested web server is transmitted from the web server to the proxy server. Thereafter, similarly, the conversion of the link destination URL in the proxy server and the transmission of the web page in which the converted link destination URL is embedded from the proxy server to the client terminal device are performed.

  If the first user authentication is performed, the second user authentication is also performed in subsequent data transmission / reception between the client terminal device and the proxy server. Even if the user ID data and the password are not attached for each data communication as in the BASIC authentication, the user authentication is substantially performed for each data communication. Also, since Cookie is not used, it can be applied to client terminal devices that cannot use Cookie.

  Among user ID data, URL data before conversion, and URL data after conversion stored in association with the storage control unit of the proxy server, a predetermined time before the last storage or a predetermined number of times before the last storage An erasing unit for erasing the data stored in the storage device may be further provided.

  A second invention is a proxy server constituting a communication system including a client terminal device, a proxy server, and a web server, and requests a web page transmitted from the client terminal device and specified by a URL. Request data receiving means for receiving request data, and when the request data received by the request data receiving means is accompanied by data representing a user ID and data representing a password, the request data receiving means The first user authentication means for performing user authentication based on the user ID data and password data received by the request, the request received by the request data receiving means in response to being authenticated by the first user authentication means・ The above data When the request data received by the first request data transmitting means and the request data receiving means to be transmitted to the server is not accompanied by user ID data and password data, the request data receiving means Conversion determination means for determining whether the URL of the web page requested by the received request data has been converted by the proxy server, and the URL of the web page requested by the conversion determination means is the proxy Retrieval means for finding user ID data from a storage device in which user ID data is stored corresponding to the URL converted in the proxy server in response to determining that the server has converted the search User ID The second user authentication means for authenticating the user who transmitted the request data received by the request data receiving means as a valid user, and the second user authentication means. URL reverse conversion means for returning the converted URL to the URL before conversion in response to the determination that the user is a valid user, and requesting a web page specified by the URL returned by the URL reverse conversion means Second request data transmission means for transmitting the request data to the web server, the request data transmitted from the first request data transmission means or the second request data transmission means of the proxy server In response to data, the web page data sent from the web server The link destination URL converting means for converting the link destination URL indicating the link destination of the web page included in the web page represented by the above into a different URL for each conversion is converted by the link destination URL converting means. Second web page data transmitting means for transmitting web page data representing the web page including the linked URL to the client terminal device, user ID data received by the request data receiving means, and the above Storage control means is provided for controlling the storage device so as to store the data representing the URL before being converted by the link destination URL conversion means and the data representing the URL after being converted in association with each other. And

  The second invention also provides a control method suitable for the proxy server. That is, this method is a control method of a proxy server that constitutes a communication system including a client terminal device, a proxy server, and a web server, and the request data receiving means is transmitted from the client terminal device, and the URL The request data for requesting the web page specified by is received, and the first user authentication means includes the data representing the user ID and the data representing the password in the request data received by the request data receiving means. When attached, user authentication is performed based on the user ID data and password data received by the request data receiving means, and the first request data transmitting means authenticates by the first user authentication means. Depending on what was done, the above request When the request data received by the data receiving means is transmitted to the web server, and the conversion determining means does not include the user ID data and password data in the request data received by the request data receiving means. Then, it is determined whether the URL of the web page requested by the request data received by the request data receiving means has been converted in the proxy server, and the search means uses the conversion determining means to request In response to determining that the URL of the Web page to be converted has been converted by the proxy server, the storage device stores user ID data corresponding to the URL converted by the proxy server. Find user ID data, The user authentication means authenticates the user who transmitted the request data received by the request data receiving means as a legitimate user in response to the user ID data being found by the search means, and reverse URL conversion When the means is determined to be a valid user by the second user authentication means, the converted URL is returned to the URL before being converted, and the second request data transmitting means Request data requesting a web page specified by the URL returned by the URL reverse conversion means is transmitted to the web server, and the link destination conversion means is the first request data transmission means of the proxy server. Or in response to the request data sent from the second request data sending means. The link destination URL indicating the link destination of the web page included in the web page represented by the web page data transmitted from the web server is converted so as to become a different URL for each conversion. 2 web page data transmission means transmits web page data representing the web page including the link destination URL converted by the link destination URL conversion means to the client terminal device, and the storage control means The user ID data received by the request data receiving means, the data representing the URL before being converted by the link destination URL converting means, and the data representing the URL after being converted are stored in association with each other. It controls the device.

  The second invention also provides a program for realizing the proxy server control method. Further, a recording medium for storing the program may be provided.

  FIG. 1 shows the overall configuration of a communication system according to an embodiment of the present invention.

  The communication system according to this embodiment includes a client terminal device typified by a mobile phone (not limited to a mobile phone) 1, a proxy server (proxy server) 10, and a web server 20. ing.

  A client program 2 that controls operations described later is installed in the client terminal device 1. The client terminal device 1 includes a CPU, a display device for displaying a web page, a communication device for communicating with the proxy server 10, a keypad for giving various commands, a memory, etc. (Not shown).

  The proxy server 10 is installed with a first server program 11 that controls operations described later. This server program 11 is stored in a CD-ROM (compact disk-read only memory), and the server program 11 is read by a CD-ROM drive (not shown) and sent to the proxy server 10. Installed. Of course, the server program 11 transmitted from another server or the like may be received and installed in the proxy server 10. The proxy server 10 also includes a hard disk 13 for storing a conversion / inverse conversion table, user ID data necessary for user authentication, password data, and other data, which will be described later.

  The web server 20 is installed with a second server program 21 that controls operations described later. The web server 20 also has a built-in hard disk 22. The hard disk 22 stores web page data displayed on the display device of the client terminal device 1.

  Both the proxy server 10 and the web server 20 include a CPU, a display device, a communication device, a memory, a hard disk drive, a keyboard, and the like.

  When displaying the web page represented by the desired web page data stored in the web server 20 on the display device of the client terminal device 1, the client terminal device 1 and the proxy server 10 are connected, and The proxy server 10 and the web server 20 are connected.

  FIG. 2 is an example of a web page having a URL of index.html.

  The web page 30 having the URL index.html includes a first character string 31 “click here”, a second character string 32 “click here”, and the like. The character string “here” in the first character string 31 is clickable and is the hot text 32. This hot text 32 is linked to a web page having the URL of pagea.html. The character string “here” of the character string of the second character string 33 is also clickable and is the hot text 34. The hot text 34 is linked to a web page having a URL of pageb.html.

  FIG. 3 is an example of a web page having the URL pagea.html.

  The web page 40 having the URL pagea.html includes a first character string 41 “jump to this page”, a second character string 42 “jump to this page”, and the like. The character string “page” in the first character string 41 is the hot text 42. The hot text 42 is linked to a web page having the URL page1.html. The character string “page” of the second character string 42 is also the hot text 44. The hot text 44 is linked to a web page having the URL page2.html.

  When the web page 30 having the URL index.html shown in FIG. 2 is displayed, if the hot text 32 is clicked, the web having the URL of pagea.html that is the link destination of the hot text 32 -Page 42 will be displayed.

  In this embodiment, when the web page 30 shown in FIG. 2 is requested by the client terminal device 1, the web page 50 shown in FIG. 4 is displayed on the client terminal device 1.

  FIG. 4 is an example of a web page 50 having a URL of index.html.

  Similar to the web page 30 shown in FIG. 2, the web page 50 includes a first character string 51 “click here”, a second character string 52 “click here”, and the like. The character string “here” in the first character string 51 is clickable and is the hot text 52. Unlike the web page having the URL of the link destination pagea.html of the hot text 32 shown in FIG. 2, the hot text 52 is linked to the web page having the URL of xa.html. The character string “here” of the character string of the second character string 53 is also clickable and is the hot text 54. Unlike the web page having the URL of the link destination pageb.html of the hot text 34 shown in FIG. 2, the hot text 54 is linked to xb.html.

  Referring to FIG. 1, in the embodiment of the present invention, when requesting a web page with the URL name “index.html” shown in FIG. 2 from client terminal device 1, “GET” is sent from client terminal device 1 to proxy server 10. The request “index.html” is sent. If the URL (index.html) included in the request is not converted in the proxy server 10, the request “GET index.html” is transmitted from the proxy server 10 to the web server 20. In response to the request, web page data (index.html file 1) for displaying the web page having the URL name index.html shown in FIG. 2 is transmitted from the web server 20 to the proxy server 10. . In the proxy server 10, the URL of the link destination of the hot text is converted so as to become a different URL for each conversion so that the data represents the web page 50 shown in FIG. 4 from the web page 30 shown in FIG. The That is, the link destination is converted from pagea.html shown in FIG. 2 to xa.html shown in FIG. 4, and from pageb.html shown in FIG. 2 to xb.html shown in FIG. Web page data (index.html file 2) obtained by converting the URL of the link destination is transmitted from the proxy server 10 to the client terminal device 1.

  When the web page 50 shown in FIG. 4 is displayed on the display device of the client terminal device 1, any one of the hot texts displayed on the web page 50 by the user of the client terminal device 1 is displayed. Is clicked. When the user clicks the hot text 52, a request “GET xa.html” of the web page of xa.html that is a link destination of the hot text 52 is sent from the client terminal device 1 to the proxy server 10.

  When the proxy server 10 receives a request “GET xa.html” for a web page having a URL of xa.html, the URL (xa.html) of the requested web page is converted by the proxy server 10 Therefore, the original URL (pagea.html) before conversion is restored. A request “GET pagea.html” of the web page having the returned original URL (pagea.html) is transmitted from the proxy server 10 to the web server 20.

  When the web server 20 receives the request “GET pagea.html” of the web page having the URL of pagea.html transmitted from the proxy server 10, the pagea is responded to the request as shown in FIG. Web page data (pagea.html file) representing a web page having a URL of .html is transmitted to the proxy server 10.

  The proxy server 10 performs URL conversion processing so that the web page 60 shown in FIG. 5 is displayed from the web page 40 shown in FIG.

  Referring to FIG. 5, a web page 60 having pagea.html in the URL includes a first character string 61 “jump to this page” and a second character “jump to this page”, as in FIG. 3. The character string 62 is included. The character string “page” in the first character string 61 is the hot text 62. The hot text 62 is not linked to the web page having the URL of page1.html like the hot text 52 of FIG. 3, but is linked to the web page having the URL of x1.html. It is stretched. The character string “page” in the second character string 62 is also the hot text 64. The hot text 64 is not linked to the web page having the URL of page2.html like the hot text 44 of FIG. 3, but is linked to the web page having the URL of x2.html. It is stretched.

  The proxy server 10 converts the link destination URL included in the web page so that the web page 60 shown in FIG. 5 is displayed from the web page 40 shown in FIG. The web page data (pagea.html file) in which the link destination URL is converted is transmitted from the proxy server to the client terminal device 1, so that the display screen of the display device of the client terminal device 1 displays the web shown in FIG.・ Page 60 is displayed. Thereafter, as described above, the URL of the web page requested from the client terminal device 1 is reversely converted in the proxy server 10, and a request for the web page having the URL before conversion is given to the web server 20. As a result, the web page data is transmitted from the web server 20 to the client terminal device 1 via the proxy server 10.

  FIG. 6 is an example of the conversion / inverse conversion table.

  The conversion / inverse conversion table is stored in the hard disk 13 of the proxy server 10.

  In the conversion / inverse conversion table, the link destination URL after conversion, the link destination URL before conversion, the link source URL, the user ID, and the access time are recorded as described above. As shown in FIG. 2 to FIG. 5, the link source URLs are linked to the web pages 30 to 60 by hot text 32, 34, 42, 44, 52, 54, 62, 64. URLs of the web pages 30-60. The user ID identifies the user of the client terminal device 1 that has accessed the proxy server 10. The access time is recorded as the access to the web page having the URL that has been reversely converted when the URL is reversely converted.

  Which web page is accessed by the client terminal device identified by the client identification data can be known from the link source URL history of the conversion / inverse conversion table.

  FIG. 7 to FIG. 10 are flowcharts showing processing procedures among the client terminal device 1, the proxy server 10, and the web server 20. FIG. 7 shows the processing procedure of the client terminal device 1, FIGS. 8 and 9 show the processing procedure of the proxy server 10, and FIG. 10 shows the processing procedure of the web server.

  First, access request data is transmitted from the client terminal device 1 to the proxy server 10 to make an access request (step 71 in FIG. 7).

  When the access request data transmitted from the client terminal device 1 is received by the proxy server 10 and it is found that there is an access request (YES in step 91 in FIG. 8), the authentication data is transferred from the proxy server 10 to the client terminal device 1. It is transmitted (step 92 in FIG. 8).

  When the authentication data transmitted from the proxy server 10 is received by the client terminal device 1 (YES in step 72 in FIG. 7), an authentication window (not shown) is displayed on the display screen of the client terminal device 1. (Step 73 in FIG. 7). In the displayed authentication window, areas for inputting a user ID and a password are defined, and the user ID and password are input to these areas by the user of the client terminal device 1 (step 74 in FIG. 7). Then, request data (for example, the above-mentioned GET index.html) accompanied by the data representing the input user ID and the data is transmitted from the client terminal device 1 to the proxy server 10 (step 75 in FIG. 7). .

  When the proxy server 10 receives the request data accompanied by the user ID data and password data transmitted from the client terminal device 1 (YES in step 93 in FIG. 8), the request data is based on the received user ID data and password data. Thus, the first user authentication is performed (step 94 in FIG. 8). Data necessary for the first user authentication is stored in the hard disk 13 of the proxy server 10, and the access authority of the proxy server 10 is verified by comparing the stored data with the received user ID data and password data. Whether the request is from a certain client terminal device 1 is confirmed.

  If user authentication is not performed (NO in step 95 in FIG. 8), authentication error data is transmitted from the proxy server 10 to the client terminal device 1 (step 96 in FIG. 8). When the authentication error data is received by the client terminal device 1 (YES in step 76 in FIG. 7), predetermined processing is performed based on the authentication error.

  When user authentication is performed (YES in step 95 in FIG. 8), request data (GET index.html described above) is transmitted from the proxy server 10 to the web server 20 (step 97 in FIG. 9).

  The request data transmitted from the proxy server 10 is received by the web server 20 (step 111 in FIG. 10). Then, data representing the web page of the URL specified by the request (for example, the index.html file 1 described above) is transmitted from the web server 20 to the proxy server 10 (step 112 in FIG. 10).

  When the web page data transmitted from the web server 20 is received by the proxy server 10 (step 98 in FIG. 9), the web page represented by the received web page data (index.html described above). The link destination URL (pagea.html, etc.) embedded in the hot text included in FIG. 2 is converted so as to become a different URL for each conversion (step 99 in FIG. 9). URL after conversion (such as xa.html), URL before conversion (pagea.html), URL of link source (such as index.html that is the URL of the web page), and user ID data are recorded in the conversion / inverse conversion table (Step 100 in FIG. 9). The web page data in which the link destination URL is converted is transmitted from the proxy server 10 to the client terminal device 1 (step 101 in FIG. 9).

  When the web page data transmitted from the proxy server 10 is received by the client terminal device 1 (step 77 in FIG. 7), the web page (Index shown in FIG. 4) represented by the received web page data. .html) is displayed on the display screen of the client terminal device 1 (step 78 in FIG. 7). When the hot text in the web page (hot text 52 in FIG. 4) is clicked (YES in step 79 in FIG. 7), a request is made for the linked web page embedded in the clicked hot text. Request data (GET xa.html) to be transmitted is transmitted to the proxy server 10 (step 80 in FIG. 7). At this time, unlike when the request data is first transmitted from the client terminal device 1 to the proxy server 10, user ID data and password data are not added. Request data (GET xa.html) not accompanied by user ID data and password data is transmitted from the client terminal device 1 to the proxy server 10.

  When request data transmitted from the client terminal device 1 and not accompanied by user ID data and password data is received by the proxy server 10 (NO in step 102 in FIG. 9), it is specified by the received request data. It is determined whether the URL of the web page has been converted by the proxy server 10 (step 103 in FIG. 9).

  Since the converted URL is known only to the user authenticated in step 94 in FIG. 8, it is requested only from the authenticated user. If the URL is not converted for this purpose (NO in step 103 in FIG. 9), it is determined that the request is from a user other than the user who has been authenticated, and authentication error data is sent from the proxy server 10 to the client terminal device 1 It is transmitted (step 107). If it is a converted URL (YES in step 103 in FIG. 9), the user ID data stored in correspondence with the converted URL is found from the conversion / inverse conversion table (search means). If the user ID is found, it is determined that the user is a valid user (second user authentication) (step 104 in FIG. 9). Then, the conversion / reverse conversion table is referred to return to the URL before conversion (returned from xa.html to pagea.html) (step 105 in FIG. 9). The access time is recorded in the conversion / inverse conversion table. Of the data recorded in the conversion / inverse conversion table, the data recorded before a predetermined time (or a predetermined time) from the end is deleted from the conversion / inverse conversion table (step 106 in FIG. 9). Since the data recorded before a predetermined time is deleted from the conversion / inverse conversion table, the data representing the URL after conversion is read by a third party when it is transmitted from the client terminal device 1 to the proxy server 10. If it is also deleted, it is determined that it is not a converted URL. It is possible to prevent impersonation by a third party by reading the URL after the change.

  Request data (GET pagea.html) of web page data specified by the URL before conversion is transmitted from the proxy server 10 to the web server 20 (step 97 in FIG. 9). As described above, web page data (pagea.html file) is transmitted from the web server 20 to the proxy server 10 in response to the request (step 112 in FIG. 10).

  As described above, when the web page data transmitted from the web server 20 is received by the proxy server 10 (step 98 in FIG. 9), the web page represented by the received web page data is displayed. The link destination URL (page1.html) embedded in the included hot text is converted (step 99 in FIG. 9). URL after conversion (page1.html), URL before conversion (x1.html), link source URL (URL of the web page.pagea.html) and user ID data are recorded in the conversion / inverse conversion table ( FIG. 9 Step 100). The web page data in which the link destination URL is converted is transmitted from the proxy server 10 to the client terminal device 1 (step 101 in FIG. 9).

  As described above, when the web page data transmitted from the proxy server 10 is received by the client terminal device 1 (step 77 in FIG. 7), the web page represented by the received web page data is displayed. A page (pagea.html, see FIG. 5) is displayed on the display screen of the client terminal device 1 (step 78 in FIG. 7). When the hot text in the web page (for example, hot text 62 in FIG. 5) is clicked (YES in step 79 in FIG. 7), the linked web page embedded in the clicked hot text is displayed. Request data to be requested is transmitted to the proxy server 10 (step 80 in FIG. 7). Also at this time, unlike when the request data is first transmitted from the client terminal device 1 to the proxy server 10, the user ID data and the password data are not added. Request data not accompanied by user ID data and password data is transmitted from the client terminal device 1 to the proxy server 10.

  Thereafter, substantial user authentication is performed again depending on whether or not the URL before conversion is requested in the proxy server 10 as described above, and when authenticated, the web page data is transmitted to the client terminal device 1. It becomes. Subsequent processing is repeated in the same manner when there is a request from the client terminal device 1 to the proxy server 10.

1 shows the entire communication system. It is an example of the web page in which the link destination URL is embedded. It is an example of the web page in which the link destination URL is embedded. It is an example of the web page in which the converted link destination URL is embedded. It is an example of the web page in which the converted link destination URL is embedded. It is an example of a conversion / inverse conversion table. It is a flowchart which shows the process sequence of a client terminal device. It is a flowchart which shows the process sequence of a proxy server. It is a flowchart which shows the process sequence of a proxy server. It is a flowchart which shows the process sequence of a web server.

Explanation of symbols

1 Client terminal device
10 Proxy server
20 Web server
30, 40 Web page before link URL conversion
50, 60 Web page after link destination URL conversion

Claims (5)

In a communication system comprising a client terminal device, a proxy server, and a web server,
The proxy server is
First request data receiving means for receiving request data transmitted from the client terminal device and requesting a web page specified by a URL;
When the request data received by the first request data receiving means is accompanied by data representing a user ID and data representing a password, the user ID data and password received by the request data receiving means A first user authentication means for performing user authentication based on the data;
First request data transmitting means for transmitting the request data received by the request data receiving means to the web server in response to being authenticated by the first user authentication means;
URL of the web page requested by the request data received by the request data receiving means when the request data received by the request data receiving means is not accompanied by user ID data and password data Conversion judging means for judging whether or not is converted in the proxy server,
In response to determining that the URL of the requested web page has been converted in the proxy server by the conversion determination means, user ID data corresponding to the URL converted in the proxy server is Search means for finding user ID data from a stored storage device;
A second user authentication means for authenticating a user who has transmitted the request data received by the first request data receiving means as a valid user in response to the user ID data being found by the search means;
When the second user authentication means determines that the user is a valid user, the URL reverse conversion means for returning the converted URL to the URL before conversion, and the URL reverse conversion means Second request data transmission means for transmitting request data for requesting a web page specified by a URL to the web server;
The web server
Second request data receiving means for receiving request data transmitted from the first request data transmitting means or the second request data transmitting means of the proxy server; and the second request data. First web page data transmission means for transmitting data of the web page requested by the request data received by the reception means to the proxy server;
The proxy server is
The link destination URL indicating the link destination of the web page included in the web page represented by the web page data transmitted from the first web page data transmission means of the web server is converted. Link destination URL conversion means for converting the URL so as to be different for each URL,
Second web page data transmission means for transmitting web page data representing a web page including the link destination URL converted by the link destination URL conversion means to the client terminal device, and the request data reception Memory for controlling the storage device to store the user ID data received by the means, the data representing the URL before being converted by the link destination URL converting means, and the data representing the URL after being converted in association with each other Control means,
The client terminal device
Web page data receiving means for receiving web page data transmitted from the second web page data transmitting means of the proxy server;
Designating means for designating one link destination URL among the link destination URLs included in the web page represented by the web page data received by the web page data receiving means, and designated by the designating means Request data transmitting means for transmitting request data for requesting a web page specified by the linked URL to the proxy server,
A communication system comprising:   Among user ID data, URL data before conversion, and URL data after conversion stored in association with the storage control unit of the proxy server, a predetermined time before the last storage or a predetermined number of times before the last storage The communication system according to claim 1, further comprising erasing means for erasing data stored in the storage device. A proxy server constituting a communication system including a client terminal device, a proxy server, and a web server,
Request data receiving means for receiving request data transmitted from the client terminal device and requesting a web page specified by a URL;
Based on the user ID data and password data received by the request data receiving means when the request data received by the request data receiving means is accompanied by data representing a user ID and data representing a password. First user authentication means for performing user authentication
First request data transmitting means for transmitting the request data received by the request data receiving means to the web server in response to being authenticated by the first user authentication means;
URL of the web page requested by the request data received by the request data receiving means when the request data received by the request data receiving means is not accompanied by user ID data and password data Conversion judging means for judging whether or not is converted in the proxy server,
In response to determining that the URL of the requested web page has been converted in the proxy server by the conversion determination means, user ID data corresponding to the URL converted in the proxy server is Search means for finding user ID data from a stored storage device;
Second user authentication means for authenticating a user who has transmitted the request data received by the request data receiving means as a valid user in response to the user ID data being found by the search means;
URL reverse conversion means for returning the converted URL to the URL before conversion in response to the determination by the second user authentication means that the user is a valid user;
Second request data sending means for sending request data requesting a web page specified by the URL returned by the URL reverse conversion means to the web server;
In response to the request data transmitted from the first request data transmission unit or the second request data transmission unit of the proxy server, the proxy server is represented by the web page data transmitted from the web server. Link destination URL conversion means for converting the link destination URL indicating the link destination of the web page included in the web page to be changed into a different URL for each conversion;
Second web page data transmitting means for transmitting web page data representing a web page including the link destination URL converted by the link destination URL converting means to the client terminal device, and receiving the request data Memory for controlling the storage device to store the user ID data received by the means, the data representing the URL before being converted by the link destination URL converting means, and the data representing the URL after being converted in association with each other Control means,
Proxy server with A method for controlling a proxy server constituting a communication system including a client terminal device, a proxy server, and a web server,
A request data receiving means receives request data transmitted from the client terminal device and requesting a web page specified by a URL;
The user received by the request data receiving means when the first user authentication means is accompanied by the data representing the user ID and the data representing the password with the request data received by the request data receiving means. User authentication based on ID data and password data,
In response to the first request data sending means being authenticated by the first user authentication means, the request data received by the request data receiving means is sent to the web server,
The conversion determining means is requested by the request data received by the request data receiving means when the request data received by the request data receiving means is not accompanied by user ID data and password data. Determine whether the URL of the web page has been converted by the proxy server,
In response to determining that the URL of the requested web page has been converted in the proxy server by the conversion determination unit, the search unit corresponds to the URL converted in the proxy server. Find the user ID data from the storage device storing the user ID data,
The second user authentication means authenticates the user who transmitted the request data received by the request data receiving means as a valid user in response to the user ID data being found by the search means,
When the URL reverse conversion means determines that the second user authentication means is a valid user, the URL reverse conversion means returns the converted URL to the URL before conversion,
A second request data sending means sends request data requesting a web page specified by the URL returned by the URL reverse conversion means to the web server;
The link destination URL converting means is transmitted from the web server in response to the request data transmitted from the first request data transmitting means or the second request data transmitting means of the proxy server. The link destination URL indicating the link destination of the web page included in the web page represented by the web page data is converted so as to become a different URL for each conversion,
A second web page data transmission means transmits web page data representing the web page including the link destination URL converted by the link destination URL conversion means to the client terminal device;
The storage control means stores the user ID data received by the request / data receiving means, the data representing the URL before being converted by the link destination URL converting means, and the data representing the URL after being converted. Control the storage device to
Proxy server control method. A program for controlling a proxy server that constitutes a communication system including a client terminal device, a proxy server, and a web server,
A request data reception process is performed for receiving request data transmitted from the client terminal device and requesting a web page specified by the URL.
Based on the user ID data and password data received by the request data reception process when the request data received by the request data reception process is accompanied by data representing a user ID and data representing a password. To perform the first user authentication,
In response to the user authentication by a first user authentication process, the request data received by the request data reception processing to perform the first request data transmission process Ru is transmitted to the web server,
URL of the web page requested by the request data received by the request data reception process when the request data received by the request data reception process is not accompanied by user ID data and password data There was carried out the conversion determination processing Ru is determined whether or not have been converted in the proxy server,
In response to determining that the URL of the requested web page has been converted in the proxy server by the conversion determination process, user ID data corresponding to the URL converted in the proxy server is obtained. from the stored storage device that allowed locate the user ID data to perform the search process,
In response to the user ID data being found by the search process, a second user authentication process for authenticating a user who has transmitted the request data received by the request data reception process as a valid user is performed.
When the second user authentication process determines that the user is a valid user, the converted URL is returned to the URL before being converted,
The request data requesting a web page specified by the returned URL to perform the second request data transmission process Ru is transmitted to the web server,
Web page data transmitted from the web server in response to the request data transmitted based on the first request data transmission process or the second request data transmission process of the proxy server The link destination URL indicating the link destination of the web page included in the web page represented by is converted so as to become a different URL for each conversion,
Web page data representing the Web page including the converted link destination URL is transmitted to the client terminal device,
The proxy server is controlled so that the user ID data received by the request data receiving process and the data representing the URL before conversion are associated with the data representing the URL after conversion and stored in the storage device. Computer readable program.

Images