JP5482512B2 - Link dictionary generation processing device, link dictionary generation processing program, link processing device, and link processing program - Google Patents

Description

  The present invention relates to a link process (hereinafter referred to as “auto link process”) that automatically sets a link to a word or phrase (hereinafter referred to as “word”) included in the content of a Web page (hereinafter referred to as “page”). And a link process using the link dictionary.

  FIG. 20 is a diagram for explaining lexicographic link processing, which is one method of autolink processing.

  In the auto link process, as shown in FIG. 20A, when displaying a page 90 requested by the user, a link is automatically set to the word “crawler” in the page. When the user clicks this link as necessary, an explanation page about the “crawler” is displayed. This helps users understand.

  As shown in FIG. 20B, in the lexicographic link processing, a dictionary 92 for link processing in which correspondence between the word “crawler” and a URL (Uniform Resource Locator) linked in advance is registered, and the dictionary 92 is referred to. The processing is performed by a processing unit (auto link engine) 93 that detects a portion where a link in the page is to be pasted and sets a corresponding link destination.

  The auto link engine 93 analyzes the text in the HTML data of the page 90 to be browsed.

  As shown in FIG. 20C, when the word “crawler” registered in the dictionary 92 is included in the text, the URL (http://crawler.com) corresponding to the word “crawler” is included. com /) and the word “crawler” of the text on page 90 is rewritten with an anchor tag linked to the URL corresponding to the word.

  The text “Search engine crawler is ...” on page 90 is “Search engine <a href =” http: // crawler. com / "> crawler </a> is output HTML (page) rewritten to" ... "and is viewed by the browser.

  Here, if the correspondence between the word registered in the link processing dictionary 92 and the URL is not one-to-one, for example, there is a different explanation for one word, and the URL (link destination) of the page for each explanation is the same. When there are a plurality of links, instead of pasting a plurality of links, there is a case where it is desired to paste a link by selecting an optimum URL according to the situation of the page or the viewer.

  As a conventional method, a process of determining one page based on the similarity between pages between a link source and a plurality of link destinations is known. For example, the relationship between pages is calculated based on the ratio of words in anchor characters in the link source page to the link destination page, and the weight of each link is calculated based on the number of links in the link source page. There is a known method for determining the degree of association between pages.

  In addition, for links set in a page, the number of jumps is counted for each link, the next action (jump probability) of the user is predicted, a link destination with a high jump probability is determined, and cached in advance. There is a known technique to do this.

  Also, a technique is known in which the frequency of occurrence of link destinations included in a message is aggregated, and if the frequency of occurrence is a link destination that exceeds a threshold and includes a predetermined prohibited term, the message including the link destination is determined as a spam message. It has been.

JP 2004-164290 A JP 2000-250803 A JP 2007-265368 A JP 2002-132769 A

  When selecting one of a plurality of link destinations associated with words in the link dictionary, or when selecting whether or not to perform link processing to the corresponding link destination, the conventional interpage The method based on the link attached to may not be sufficient.

  For example, when there are a plurality of link destination candidates, it is desired to select a link destination candidate having the highest degree of association with the original page. However, if there is no link between the original page and the link destination candidate in advance, the “relationship between pages” necessary for selecting the link destination candidate cannot be calculated. Further, when selecting whether or not to perform link processing, the degree of association between the original page and the link destination candidate is calculated, and link processing only needs to be performed when it is equal to or greater than a threshold value. However, if there is no link between the original page and the link destination candidate in advance, the relevance necessary for selection cannot be calculated.

  An object of the present invention is to automatically select an appropriate link destination from a plurality of link destinations or link processing to a link destination for a word in a page without assuming that links are pasted between pages. It is an object of the present invention to provide an apparatus for performing a link dictionary generation process for realizing a link process capable of automatically selecting whether or not the link is possible.

  Furthermore, the objective of this invention is providing the apparatus which performs the link process using the link dictionary produced | generated by the said production | generation process.

  Furthermore, an object of the present invention is to provide a program for causing a computer to execute the link dictionary generation process and the link process using the link dictionary.

  A link dictionary generation processing device disclosed as one aspect of the present invention includes: 1) a link dictionary storage unit that stores a link dictionary in which a link destination is associated with each word or phrase; and 2) a resource that is executed in an intra-organization network. A log collection unit that collects log information including an access source IP address and an access destination IP address, and 3) an IP including the access destination IP address based on the collected log information A log totaling unit that counts the number of accesses from the IP address range including the IP address of the access source to the address range; and 4) the access destination and the access source when the total number of accesses is equal to or greater than an arbitrary threshold value. A related address detection unit that holds a pair of IP address ranges as a related IP address range, and 5) in the link dictionary When the IP address of the specified link destination is included in one IP address range of the related IP address range, the other IP address range of the related IP address range is added as a link condition corresponding to the link destination A dictionary output unit that performs processing and processing for storing the link dictionary to which the link condition is added in the link dictionary storage unit.

  In addition, the link processing device disclosed as one aspect of the present invention 1) sets, for each word or phrase, a link destination and an IP address range of a device in the organization network that is a target of link setting to the link destination. A link dictionary storage unit that stores a link dictionary that associates link conditions with each other; 2) any of the accessed web page, the device that provides the web page, or the device that accesses the web page in the in-house network An input acquisition unit that acquires the IP address of the device; 3) a process of extracting a word or phrase included in the link dictionary from the content of the web page; and an IP address of the acquired device is the extracted word of the link dictionary Or the word or phrase when included in the IP address range of the link condition associated with the phrase A link destination selection unit that performs a process of selecting a link destination corresponding to a link condition including an IP address of the acquired device, and 4) the selected word or phrase in the web page A page output generation unit that performs a process of setting a link to a link destination and a process of outputting a web page in which the link destination is set.

  According to the disclosed link dictionary generation processing device, the IP address of the access destination (server) that holds the page or the access source (client) that requested the page and the IP of the link destination without assuming the link relationship between the pages. It is possible to generate a link dictionary for realizing link processing in which a suitable link destination or link processing can be selected based on the association with the address. Also, instead of a uniform link dictionary that does not depend on the page viewer, it is possible to generate a link dictionary that takes into account differences between users browsing the page.

  Further, according to the disclosed link processing device, the link dictionary generated by the link dictionary generation processing device is used to select a link destination suitable for the server that holds the page or the client that accesses the page or whether or not link processing is possible. Link processing.

It is a figure which shows the structural example of the link dictionary production | generation processing apparatus and link processing apparatus which are disclosed as one embodiment of this invention. It is a figure which shows the example of a link dictionary. It is FIG. (1) explaining the outline | summary of a process of a link processing apparatus. It is FIG. (2) explaining the outline | summary of a process of a link processing apparatus. It is a figure which shows the processing flow of a link dictionary production | generation process. It is a more detailed process flowchart of the log collection process of step S1. It is a figure which shows the example of a log collection table. It is a figure which shows the example of log information, and the example of a log information storage part. It is a more detailed process flowchart of the log total process of step S2. It is a figure which shows the example of the total table (all digits) of the access count in all the digits. It is a more detailed process flowchart of the process of step S21. It is a figure which shows the example of the total table (3 digits) of the number of accesses of the range put together by upper 3 digits. It is a figure which shows the more detailed process flow of the process of step S22. It is a figure which shows the example of the detection result table of a related IP detection process. It is a more detailed process flowchart of the related IP detection process of step S3. It is a more detailed process flowchart of the process of step S33 and step S36. It is a figure which shows the example of the link dictionary before and behind a dictionary production | generation process. It is a more detailed process flow figure of the dictionary production | generation process of step S4. It is a figure which shows the processing flow of a link process. It is a figure for demonstrating a lexicographic link process.

  FIG. 1 is a diagram illustrating a configuration example of a link dictionary generation processing device and a link processing device disclosed as an embodiment of the present invention.

  In the configuration example shown in FIG. 1, an auto link system 1, a client 5, various servers 6 (6 a, 6 b,...), A DNS server 7, etc. are connected to a network 8.

  The auto link system 1 is a system that provides an auto link process for a page provided by a server in the network 8, and includes a link dictionary generation processing device 2, a link dictionary storage unit 3, and a link processing device 4.

  The client 5 is a computer connected to the network 8 and is used by the user.

  The client includes an input conversion unit 51 and a display unit 52. The input conversion unit 51 rewrites and outputs the URL input by the user for page browsing to the URL of the auto link system 1. The display unit 52 obtains the page (HTML after link processing) output from the auto link system 1 and displays the page for viewing.

  The server 6 (6a, 6b,...) Is a computer that provides various pages, and the domain name system (DNS) server 7 is a computer that holds and manages the association between domain names and IP addresses.

  As the network shown in FIG. 1, for example, an in-house network such as an in-company network is assumed. In an intra-organizational network, a group of IP addresses that are close in number are usually assigned to each department. In the IP address group, the IP address of the page (server) of the same department and the client PC of the viewer are collected. For example, the pages (servers) owned by the research department A and the client PC of the user who is a member of the research department A are “10.25.181.1” and “10.25.181.28”. 25.181. * "(* Is optional).

  Therefore, both pages and users can be associated with IP addresses. Then, by combining the upper digits (upper octets) of the IP address with a common one, it is possible to group pages / users having similarities belonging to the same A research department.

  There may be a plurality of IP addresses assigned to the same department. For example, in addition to “10.25.181. *”, “10.25.136. *”, Which is a little apart from the number, belongs to the A research department. Also, similar pages and users may not always be within the scope of a department. Therefore, as a similar page / user group extraction method, in addition to collecting IP addresses by upper digits, it is also possible to see the mutual access relationship between IP address groups compiled by upper digits. This makes it possible to find a range of IP addresses that are not necessarily similar in terms of numbers, but that are relevant for use purposes.

  By setting conditions using these related IP address ranges as judgment information for auto-link processing, link processing that switches the appropriate link destination according to the page, and appropriate link destination according to the browsing user Both of the link processings that switch are possible in the same framework.

  The link dictionary storage unit 3 of the auto link system 1 stores a link dictionary.

  FIG. 2 is a diagram illustrating an example of a link dictionary.

  The link dictionary includes items of “word / phrase, link destination, link condition”.

  “Word / phrase” indicates a link location (character string) where link pasting is set from the text of the page.

  “Link destination” indicates a link destination set for the corresponding word / phrase. Here, name information (link destination URL) of the link destination is registered.

  The “link condition” is a range of a target for executing a link setting to a corresponding link destination, that is, a range indicating whether the device is a device (client 5, server 6 or the like) in the network 8 that performs link pasting processing. This is judgment information set according to the address range.

  When the link dictionary shown in FIG. 2 is used, the link destination URLs 1 to 3 corresponding to the link conditions satisfied by the IP address of the server 6 of the page or the client 5 that accesses the “approval system” included in the text of the page. Is set.

  Further, the “link condition” may be information for determining whether to set a link to a link destination corresponding to a word / phrase. For example, if the IP address of the page server 6 or the accessed client 5 does not satisfy the set link condition, the link process is performed even if the correspondence between the word / phrase and the link destination is set in the link dictionary. Deterred.

  The link dictionary generation processing device 2 of the auto link system 1 is a device that generates a link dictionary, and includes a log information storage unit 20, a log collection unit 21, a log totaling unit 22, a related address detection unit 23, and a dictionary output unit 24. .

  The log information storage unit 20 is a storage unit that stores log information collected by the log collection unit 21 and related to access to pages.

  The log collection unit 21 collects log information related to page access from each server 6 in the network 8 and stores it in the log information storage unit 20.

  The log information includes an access date and time, an access destination URL, an IP address of the access destination server 6, an IP address of the access source client 5, and the like.

  Based on the collected log information, the log totaling unit 22 totals the number of accesses for each IP address of the access destination for each IP address of the access destination, and further determines the IP address of the access destination from any number of digits. The number of accesses from the IP address range in which the IP address of the access source is indicated by an arbitrary number of digits from the top is counted.

  In addition, the log totaling unit 22 may total the number of unique IP addresses in the IP address range of the access destination and the access source.

  When the number of accesses from the IP address range of the access source with respect to the IP address range of the access destination calculated by the log totaling unit 22 is equal to or greater than an arbitrary threshold, the related address detection unit 23 calculates the access destination and access source 2 One IP address range pair is retained as an associated IP address range.

  Here, the IP address range of the access destination and the access source is a range determined by an arbitrary number of digits or bits from the top of the IP address. In this embodiment, for example, the IP address range is set using the upper three-digit range, but the present invention is not limited to this setting.

  Specifically, the related address detection unit 23 collects the number of accesses for each IP address of the access source for each IP address of the access destination, and collects the IP address range of the access destination (for example, IP IP address range (IP address group, for example, IP address range P “10.25.181. *”, IP address range Q “10”) in the upper 3 digits range with respect to address range X “10.25.136. *”) .25.192. * ”) And the number of accesses (P → X, Q → X).

  Further, the related address detector 23 counts accesses for the reverse relationship. That is, the related address detection unit 23 accesses the access destination IP address range P “10.25.181. *” From the access source IP address range X “10.25.136. *” (X → P ), The number of accesses from the IP address range X “10.25.136. *” To the IP address range Q “10.25.192. *” (X → Q) and the like are tabulated.

  Then, when the number of bidirectional accesses is equal to or greater than the threshold, the related address detection unit 23 sets the pair of the two IP address ranges as the related IP address range.

  Further, the related address detection unit 23 may further determine whether the unique number of IP addresses included in the IP address range grouped in the upper three digits is a predetermined number or more as a detection condition for the related IP address range.

  Here, the log totaling unit 22 and the related address detecting unit 23 are different from each other in the organization except that the upper digits of the IP address are the same, as described above. If there is explicit information that “the department is in charge”, the IP address range may be collected using the information and the aggregation may be performed within the range. For example, detailed management information such as “10.25.121.1” to “10.25.121.5” and “10.25.181.40” to “10.25.181.50” are the same department. If there is a separate item, aggregation can be performed within that range.

  The dictionary output unit 24 extracts link destinations (link destination URLs) associated with the words and phrases of the link dictionary stored in the link dictionary storage unit 3 one by one, and refers to the DNS server 7 to link destination URLs. An IP address corresponding to is obtained. Then, when the IP address of the link destination is included in one of the IP address ranges of the related IP address range held by the related address detection unit 23, the dictionary output unit 24 selects the other of the corresponding related IP address ranges. Get IP address range. The dictionary output unit 24 stores, in the link dictionary storage unit 3, a link dictionary to which the IP address range is added as a link condition corresponding to the corresponding link destination of the link dictionary.

  The link processing device 4 is a device that performs link processing, and includes an input acquisition unit 41, a link destination selection unit 42, and an output generation unit 43.

  The input acquisition unit 41 receives the URL requested for access from the input conversion unit 51 of the client 5, the contents of the accessed page, the IP address of either the server 6 that provides the page or the client 5 that has accessed the page, To get.

  The link destination selection unit 42 performs matching between the text in the page and the link dictionary, and extracts words included in the link dictionary of the link dictionary storage unit 3 from the page. Then, the link destination selection unit 42 associates the IP address range of the link condition associated with the word extracted from the link dictionary with the acquired server 6 or client 5 in association with the word. , The link destination corresponding to the link condition including the IP address of the server 6 or the client 5 is selected.

  Further, the link destination selection unit 42, when the acquired IP address of the server 6 or the client 5 is not included in the IP address range of the link condition associated with the word / phrase extracted from the link dictionary, A predetermined link destination (for example, the first link destination) associated with the phrase may be selected.

  Alternatively, the link destination selection unit 42 may suppress the link setting process by the link destination when the acquired IP address of the server 6 or the client 5 is not included in the IP address range of the link condition.

  Further, when there are a plurality of link destination candidates, and the link destination selection unit 42 does not directly meet any of the link conditions of any candidate, the link destination selection unit 42 selects the IP address group with the closest number in the link condition. You may choose. For example, if there is no match in the upper 3 digits (eg “10.25.181. *”) Of the IP address, even if the upper 2 digits (eg “10.25. *. *”) Are selected in common Good. Moreover, you may select the thing with the closer number of the 3rd digit among the things with the upper 2 digits in common.

  The output generation unit 43 rewrites the corresponding word of the page with the link tag in which the link to the selected link destination is set, and outputs the HTML data of the page rewritten to the link tag to the client 5. The output page is analyzed and displayed on the display unit 52 of the client 5. The user can browse a page with a link to a word, and if necessary, select the word with the link and jump to another page.

  As described above, when the link processing device 4 having the above configuration includes a word / phrase registered in the link dictionary in the text of the page provided by the server 6a, the IP of the server 6a or the client 5 is used. Automatic link setting to the link destination selected according to the address is realized.

  3 and 4 are diagrams for explaining the outline of the processing of the link processing device 4.

  As shown in FIG. 3, when the “approval system” registered in the link dictionary is included in the text of the page “a” of the sales department provided by the server 6 a, the IP address of the server 6 a as the access destination is linked. Matched with a condition. If it is included in the range of the IP address of the link condition corresponding to the link destination “URL3”, a link to URL3 (a page of the business deliberation system) is set in the text “Deliberation System”.

  In addition, when the “approval system” registered in the link dictionary is included in the text of the laboratory page b provided by the server 6b, the IP address of the server 6b as the access destination is the link destination “URL1”. If it is included in the range of the IP address of the link condition corresponding to, a link to URL1 (page of the laboratory deliberation system) is set in the text “Deliberation System”.

  In this way, it is possible to select a link destination based on the relationship between the IP address of the server (access destination) that provides the requested access page and the IP address of the link destination.

  Further, as shown in FIG. 4, a common page c provided by another server 6c is accessed from the client 5a of the user a belonging to the laboratory, and the “approval system” registered in the link dictionary in the text of the page c Is included. When the IP address of the client 5a is included in the range of the IP address of the link condition corresponding to the link destination “URL1”, a link to URL1 (research system page for laboratory) is set in the text “approval system” Is done.

  Further, it is assumed that the page c provided by the same server 6c is accessed from the client 5b of the user b belonging to the sales department. When the IP address of the client b is included in the range of the IP address of the link condition corresponding to the link destination “URL3”, a link to URL3 (the page of the sales department deliberation system) is displayed in the text “Deliberation System”. Is set.

  In this way, it is possible to select a link destination based on the relationship between the IP address of the client (access source) that requested access and the IP address of the link destination.

  As described above, in an intra-organizational network such as the network 8 shown in FIG. 1, IP addresses are allocated within a certain range by a group of IP addresses, such as devices (clients and servers) in the same jurisdiction (department). Assigned to.

  The link processing device 4 uses, as link destination determination information, an IP address group having a certain relevance to the IP address corresponding to the URL that is the link destination. Therefore, the link processing device 4 can collectively set link destinations for each server or client (user) group in an arbitrary range within the same jurisdiction.

  Further, the link dictionary generation processing device 2 detects the range of the access source and the access destination IP address groups having a certain number of accesses as the related IP address range from the log information of the access executed in the network 8, A link dictionary using the detected related IP address range as link destination determination information is generated.

  As a result, the link dictionary generation processing device 2 can link the link destinations for each server or client group within a certain range related to the link destination based on the past access tendency even if the assigned IP address values are not similar. Can be set together.

  Further, the link processing device 4 can select a link destination based on the relationship between a certain range including pages and users and the link destination.

  Next, the processing flow of the link dictionary generation processing device 2 will be described.

  The link dictionary generation processing device 2 generates a link dictionary by batch processing and stores the link dictionary in the link dictionary storage unit 3 every arbitrary trigger or period.

  FIG. 5 is a diagram showing a processing flow of link dictionary generation processing.

  The log collection unit 21 of the link dictionary generation processing device 2 performs log collection processing (step S1). The log totaling unit 22 performs log totaling processing based on the log information collected by the log collecting unit 21 (step S2). The related address detection unit 23 performs related IP detection processing based on the log total result (step S3). The dictionary output unit 24 adds a link condition of the link dictionary based on the result of the related IP detection process, and stores the link dictionary in the link dictionary storage unit 3 (step S4).

  Details of the processing of each step S will be described later.

[Step S1: Log collection processing]
FIG. 6 is a more detailed process flow diagram of the log collection process in step S1.

  Step S11: The log collection unit 21 reads one line (data) of a log collection table prepared in advance.

  FIG. 7 is a diagram illustrating an example of a log collection table.

  In the log collection table, “server IP” indicating the IP address of each server in the network 8 and “log acquisition source” indicating the storage location of the log file are recorded.

  The log collection unit 21 accesses all the servers 6 based on the server IP of the read data, and acquires the log file from the “log acquisition source”.

  Step S12: The log collection unit 21 stores the acquired contents of the log file in the log information storage unit 20.

  FIG. 8 is a diagram illustrating an example of log information and an example of the log information storage unit 20.

  The log collection unit 21 collects log information (access log) regarding access to a page from all servers in the network 8 as shown in FIG. 8A, and an accelerator log table corresponding to the log information storage unit 20 To store.

  FIG. 8B is a data configuration example of an access log table corresponding to the log information storage unit 20.

  The access log table includes items of “access destination server IP, access source user IP, access date and time, access destination URL”.

  “Access destination server IP” is the IP address of the server that acquired the log file. Each item of “access source user IP, access date and time, access destination URL” is stored in a unified format based on the contents of the log file. “Access source user IP” is the IP address of the client that has accessed the server of the access destination server IP. “Access date and time” indicates the date and time of access. The “access destination URL” indicates a URL actually accessed from the access source by rewriting it with an absolute path.

  Step S13: If there is a next line (data) in the log collection table (Y in S13), the log collecting unit 21 returns to the processing in step S11, and if there is no next line (data) (N in S13), The process ends, and the process proceeds to step S2.

[Step S2: Log tabulation process]
FIG. 9 is a more detailed process flow diagram of the log tabulation process in step S2.

  Step S21: The log totaling unit 22 totals the number of accesses from the access source user IP for each access destination IP in all digits of the data (log information) in the log information storage unit 20 (access log table).

  FIG. 10 is a diagram showing an example of the access count total table (all digits) in all digits.

  The aggregation table (all digits) indicates “access destination server IP” indicating the IP address of the access destination server, “access source user IP” indicating the IP address of the access source client, and the number of accesses from the access source user IP. The “count” and “check” items indicating whether log aggregation processing in step S22 described later has been performed are recorded, and the aggregation results are recorded.

  FIG. 11 is a more detailed process flow diagram of the process of step S21.

  The log totaling unit 22 extracts one row (data) from the access log table of the log information storage unit 20 (step S211), and extracts the access destination server IP and the access source user IP (step S212).

  The log totaling unit 22 newly creates the corresponding access destination IP and access source IP only when the row for the combination of the extracted access destination IP and access source IP does not exist in the total table (all digits) (N in step S213). Is created (step S214). Then, the log totaling unit 22 increments the counter in the number of times column of the corresponding access destination IP / access source IP by 1 (step S215).

  If there is a next line (data) in the access log table (Y in step S216), the log totaling unit 22 returns to the process in step S211 and if there is no next line (data) in the access log table (in step S216). N), terminates the process and proceeds to step S22.

  Step S22: The log totaling unit 22 totals the contents of the totaling table (all digits) in FIG. 10 in the upper three-digit range.

  FIG. 12 is a diagram illustrating an example of a count table (three digits) of the number of accesses in a range summarized in the upper three digits.

  The tabulation table (three digits) includes items of “access destination upper IP”, “access source upper IP”, “access count”, “access destination unique IP count”, and “access source unique IP count”, and the tabulation result is To be recorded.

  The “access destination upper IP” is the upper three digits extracted from the IP address of the access destination, and the fourth digit is optional, and indicates the range of tabulation of the access destination IP address. For example, when the access destination IP address is “10.25.136.1”, the access destination upper IP is “10.25.136. *”. Similarly, the “access source upper IP” is the upper three digits of the IP address of the access source and indicates the range of aggregation of the access source IP address. For example, “10.25.181. *”, “10.25.192. *”, And the like. “Number of accesses” is a value obtained by counting the number of accesses for each IP address in units of upper IP.

  The “number of access destination unique IPs” indicates the number of unique IP addresses that appear within the range summarized as the access destination upper IP, that is, the number of different IP addresses. The “number of access source unique IPs” indicates the number of unique IP addresses in a range collected as the access source upper IP.

  FIG. 13 is a diagram showing a more detailed processing flow of the processing in step S22.

  The log totaling unit 22 extracts one line (data) whose check column is not “completed” from the totaling table (all digits) (step S221), and extracts the access destination IP, access source IP, and number of times of the extracted line (data) (Step S222). The log totaling unit 22 extracts the upper 3 digits of the extracted access destination IP and access source IP (step S223), and corresponds to the combination of the extracted access destination IP (3 digits) and access source IP (3 digits). A row (data) is created in the tabulation table (3 digits) (step S224).

  Then, the log totaling unit 22 sets the access destination IP (3) of the row (data) created by the processing of step S224 in which the combination of the upper three digits of the access destination IP and the access source IP in the total table (all digits) is created. All the rows (data) that are the same as the combination of the access source IP (three digits) are extracted (step S225). For each row extracted in steps S221 and S225, the check column of the tabulation table (all digits) is set to “ "Completed" (step S226).

  The log totaling unit 22 extracts the access destination IP, access source IP, and number of times of all rows (data) extracted in S225 (step S227). Then, the log totaling unit 22 takes the uniqueness of all access destination IPs extracted in steps S222 and S227, and stores the unique number in the “access destination unique IP number” of the row (data) created in S224 (step S22). S228). Further, the log totaling unit 22 takes the uniqueness of all the access source IPs extracted in steps S222 and S227, and stores the unique number in the “access source unique IP number” of the row (data) created in S224 (step S22). S229). Further, the log totaling unit 22 totals all the numbers extracted in steps S222 and S227, and stores the total number of accesses in the “access count” of the row (data) created in S224 (step S2210).

  If there is a row (data) in which “check” is not “done” in the aggregation table (all digits) (Y in step S2211), the log totaling unit 22 returns to the process in step S221, and “check” is not “done”. If there is no row (data) (N in step S2211), the process is terminated.

[Step S3: Related IP Detection Processing]
FIG. 14 is a diagram illustrating an example of a detection result table of related IP detection processing.

  The detection result table is a table in which items of “condition, inverse relation condition, check” are added to the aggregation table (three digits) shown in FIG.

  “Condition” indicates whether a condition satisfying the relationship between the access-destination upper IP and the access-source upper IP is satisfied. The “reverse relationship condition” indicates whether a condition satisfying the relevance is satisfied in the reverse relationship in which the access destination upper IP is the access source and the access source upper IP is the access destination. In the example shown in FIG. 14, circles (◯) of “condition” and “reverse relationship condition” indicate that there is a relationship. “Check” indicates whether the related IP detection processing has been performed. “Done” indicates that processing has been performed.

  FIG. 15 is a more detailed process flow diagram of the related IP detection process in step S3.

  The related address detection unit 23 reads one line of the tabulation table (three digits) and sets it as a line R1 (step S31). If the check field is not “completed” (N in step S32), the related address detection unit 23 proceeds to the process of step S33, and if the check field is “completed” (Y in step S32), the process of step S312 is performed. Proceed to

  The related address detector 23 checks whether a predetermined condition is satisfied (step S33). Note that the condition establishment determination process will be described later.

  When the condition is satisfied (Y in step S33), the related address detection unit 23 enters “O” in the condition column of the row R1 (step S34), and accesses the access source IP and the access from the total table (three digits). A row R2 having a value obtained by reversing the value of the destination IP from the row R1 is searched (step S35).

  The related address detection unit 23 checks whether or not the same condition as in step S33 is satisfied for the line R2 (step S36), and if the condition is satisfied (Y in step S36), the condition column and the line in the line R2 “○” is entered in the condition column of the inverse relationship of R1 (step S37), and if the condition is not satisfied (N in step S36), “conditional column of the row R2 and condition column of the inverse relationship of the row R1 are“ X "is entered (step S38).

  Further, when the condition is not satisfied in the process of step S33 (N in step S33), the related address detection unit 23 enters “x” in the condition column of the row R1 (step S39), and the aggregation table (three digits) ) To search for a row R2 having values obtained by reversing the values of the access source IP and the access destination IP from those of the row R1 (step S310).

  Then, the related address detection unit 23 enters “Done” in the check column of the rows R1 and R2 (step S311). Furthermore, if there is a next line (data) in the tabulation table (3 digits) (Y in step S312), the related address detection unit 23 returns to the process in step S31, and if there is no next line (data) (step S31). N in S312), the process ends.

  FIG. 16 is a more detailed process flow diagram of the processes in steps S33 and S36.

  The related address detection unit 23 checks whether the number of accesses is greater than or equal to the threshold in rows R1 and R2 (step S331), and if the number of accesses is greater than or equal to the threshold (Y in step S331), the number of access destination unique IPs is It is checked whether or not the threshold value is exceeded (step S332). Furthermore, when the number of access destination unique IPs is equal to or greater than the threshold (Y in step S332), the related address detection unit 23 checks whether the number of access source unique IPs is equal to or greater than the threshold (step S333). When the number is equal to or greater than the threshold value (Y in step S333), it is determined that the condition is satisfied (step S334).

  When the number of accesses is not greater than or equal to the threshold (N in Step S331), the related address detection unit 23 is not greater than or equal to the threshold (N in Step S332), or the number of access-source unique IPs is not greater than or equal to the threshold. (N in step S333), it is determined that the condition is not satisfied (step S335).

[Step S4: Dictionary Generation Processing]
FIG. 17 is a diagram illustrating an example of a link dictionary before and after the dictionary generation process.

  FIG. 17A is a diagram illustrating an example of a link dictionary before dictionary generation processing.

  A dictionary table corresponding to a link dictionary has items of a word to which a link is set, a “word” indicating a phrase, and a “link destination” indicating a URL of a link destination.

  Here, it can be seen that a plurality of link destinations are associated with the word “conference room reservation” registered in the link dictionary.

  FIG. 17B is a diagram illustrating an example of a link dictionary (dictionary table) subjected to dictionary generation processing.

  In the dictionary table, “link destination IP” indicating the IP address corresponding to the “link destination” URL and “condition” indicating the range of IP addresses related to the link destination IP are added.

  FIG. 18 is a more detailed process flow diagram of the dictionary generation process in step S4.

  The dictionary output unit 24 reads one line (data) from the link dictionary (dictionary table) (step S41), and searches for an IP address based on the value in the URL field using the DNS server 7 (step S42). For example, the dictionary output unit 24 extracts the host name “http://aaa.iaias.f2.com/” from the URL field, obtains the IP address “10.25.136.1” of the host name, Write to the link destination IP of the dictionary table.

  Then, using the IP address obtained in step S42 as a key, the dictionary output unit 24 searches the access destination upper IP in the aggregation table (three digits), and the value of “reverse relationship condition” is “O (established) ) "Line is acquired (step S43). Then, the dictionary output unit 24 writes the value of the access source upper IP in the acquired row in the “condition” of the dictionary table (step S44).

  Furthermore, if there is a next line (data) in the dictionary table (Y in step S45), the dictionary output unit 24 proceeds to the process of step S41, and if there is no next line (data) (N in step S45), The word, link destination, and condition fields in the dictionary table are stored in the link dictionary storage unit 3 as a link dictionary (step S46).

  Next, the processing flow of the link processing device 4 will be described. Here, it is assumed that the link processing device 4 performs link processing in real time when the user browses a page, and selects a link destination based on the IP address of the client 5 of the access source.

  FIG. 19 is a diagram illustrating a processing flow of link processing.

  Step S51: The input conversion unit 51 of the client 5 acquires the URL of the page that the user wants to browse, converts the URL to the auto link system 1 including the page URL, and outputs the URL.

  The input acquisition unit 41 receives an input (page access request) from the client 5 and receives an access destination URL and a user IP address (IP address of the client 5).

  Step S52: The input acquisition unit 41 acquires the contents (text) of the page from the corresponding server 6 based on the received URL.

  Step S53: The link destination selection unit 42 matches the content (text) of the page with the “word” of the link dictionary, and detects a link location (word) that is a candidate for the link process.

  Step S54: The link destination selection unit 42 determines whether there are a plurality of corresponding link destinations (URLs) for the matched “word”. If there are a plurality of link destinations (URLs) (Y in step S54), the process proceeds to step S55. If there is one link destination (URL) (N in step S54), the process proceeds to step S16.

  Step S55: The link destination selection unit 42 collates the “condition” corresponding to each link destination of the user IP address and “word”, and sets the range of the IP address including the user IP address. Select the link destination.

  Step S56: The output generation unit 43 rewrites the corresponding link location (word) to a link tag in which the selected link destination is set, and sets a link in HTML.

  Step S57: If it is matched with the link dictionary until the end of the content (text) of the acquired page (Y of step S57), the process proceeds to step S58, and if it is not matched with the link dictionary until the end (in step S57) N), the process returns to step S13.

  Step S58: The output generation unit outputs HTML for which the link has been set. The display unit 52 of the client 5 displays a page based on the HTML for which the link has been set.

  As described above, according to the disclosed link dictionary generation processing device 2, it corresponds to either a user corresponding to the IP address of the access source or a page corresponding to the IP address of the access destination server. Thus, it is possible to provide a link dictionary that can select a link destination that is highly related to the accessed page (server) or the accessed user.

  Further, according to the link dictionary generation processing device 2, since the IP address range for determining the relevance can be detected as an arbitrary range, the relevance of the IP address can be detected. Can be provided.

  Further, according to the link dictionary generation processing device 2, since the relevance between IP addresses is detected based on the access tendency in the organization, the page or user is not dependent on the similarity of assigned IP address values. It is possible to provide a link dictionary that can set link destinations that are actually related to the.

  Although the above embodiment has been described, as a modification thereof, the concept of score may be introduced into the link dictionary. In the above embodiment, “X” is given under conditions such as the number of accesses equal to or greater than the threshold, and only the upper IP addresses with “O” are entered in the link dictionary. However, the score may be calculated based on the number of accesses and the higher IP address and its score value may be entered in the dictionary. In this way, when a plurality of conditions are matched, an appropriate link destination with the highest score can be selected. That is, there is an advantage that the link destination can be selected more flexibly.

  In the above description of the embodiment, the configuration example in which each client 5 includes the input conversion unit 51 is shown. However, a proxy server (not shown) connected to the network 8 may include an input conversion unit.

  In the above description of the embodiment, the configuration example in which the link dictionary generation processing device 2 and the link processing device 4 are provided in the auto link system 1 has been described. However, the link dictionary generation processing device 2 and the link processing device 4 may be provided as different systems.

  The link dictionary generation processing device 2 and the link processing device 4 are respectively a computing device (CPU), a temporary storage device (DRAM, flash memory, etc.), a permanent storage device (HDD, flash memory, etc.), and a network with the network 8. It can be implemented by a computer having an interface. The link dictionary storage unit 3 can be implemented by a permanent storage device or the like.

  Further, each of the link dictionary generation processing device 2 and the link processing device 4 can be implemented by a program executable by a computer. In this case, a program describing the processing contents of the functions that each of the link dictionary generation processing device 2 and the link processing device 4 should have is provided. When the provided program is executed by the computer, the processing functions of the link dictionary generation processing device 2 and the link processing device 4 as described above are realized on the computer. That is, each processing unit of the link dictionary generation processing device 2 and the link processing device 4 can be configured by a program, and the functions of each processing unit can be performed by loading these programs into a temporary storage device and executing them. Realized.

  The computer can also read a program directly from a portable recording medium and execute processing according to the program. Each time the program is transferred from the server computer, the computer sequentially executes processing according to the received program. It can also be executed. Furthermore, the computer can record this program on a readable recording medium.

DESCRIPTION OF SYMBOLS 1 Autolink system 2 Link dictionary production | generation apparatus 20 Log information storage part 21 Log collection part 22 Log totaling part 23 Related address detection part 24 Dictionary output part 3 Link dictionary storage part 4 Link processing apparatus 41 Input acquisition part 42 Link destination selection part 43 output generation unit 5 client 51 input conversion unit 52 display unit 6 (6a, 6b,...) Server 7 DNS server 8 network

Claims (8)

A link dictionary generation device for generating a link dictionary for link processing for setting a link to a word or phrase in a text of a web page,
A link dictionary storage unit for storing a link dictionary in which a link destination is associated with each word or phrase;
A log collection unit that collects log information including an IP address of an access source and an IP address of an access destination with respect to access to a resource executed in an organization network;
A log totaling unit that counts the number of accesses from the IP address range including the access source IP address to the IP address range including the access destination IP address based on the collected log information;
A related address detection unit that holds a pair of IP address ranges of the access destination and the access source as a related IP address range when the total number of accesses is equal to or greater than an arbitrary threshold;
When the IP address of the link destination set in the link dictionary is included in one IP address range of the related IP address range, the other IP address range of the related IP address range is changed to a link corresponding to the link destination. Processing to be added as a condition,
A link dictionary generation processing device comprising: a dictionary output unit that performs a process of storing the link dictionary to which the link condition is added in the link dictionary storage unit. The related address detection unit determines a pair of the IP address range of the access destination and the access source when the number of bidirectional accesses between the access destination and the IP address range of the access source is equal to or greater than the threshold. The link dictionary generation processing device according to claim 1, wherein the link dictionary generation processing device is held as a related IP address range. 3. The IP address range of the access destination and the access source is a range determined by an arbitrary number of digits or bits from the top of an IP address assigned in the intra-organization network. The link dictionary generation processing apparatus according to any one of the above. A link dictionary generation processing program for causing a computer to execute a process of generating a link dictionary used in a link process for setting a link to a word or phrase in a text of a web page,
In the computer comprising the link dictionary storage unit,
A process of collecting log information including an IP address of an access source and an IP address of an access destination regarding access to resources executed in an organization network;
A process of counting the number of accesses from the IP address range including the access source IP address with respect to the IP address range including the access destination IP address based on the collected log information;
A process of holding a pair of the IP address range of the access destination and the access source as a related IP address range when the total number of accesses is an arbitrary threshold or more;
When the IP address of the link destination set in the link dictionary is included in one IP address range of the related IP address range, the other IP address range of the related IP address range is changed to a link corresponding to the link destination. Processing to be added as a condition,
A link dictionary generation processing program for executing a process of storing the link dictionary to which the link condition is added in the link dictionary storage unit. A link processing device for setting a link to a word or phrase in a text of a web page,
A link dictionary storage unit that stores a link dictionary in which a link destination and a link condition for setting an IP address range that is a target for link setting to the link destination are stored for each word or phrase;
An input acquisition unit that acquires an accessed resource and an IP address of either the device that provides the resource or the device that accesses the resource in the organization network;
Processing to extract words or phrases included in the link dictionary from the contents of the web page;
When the acquired IP address of the device is included in the IP address range of the link condition associated with the extracted word or phrase in the link dictionary, it is associated with the word or phrase and the acquired A link destination selection unit that performs a process of selecting a link destination corresponding to a link condition including the IP address of the device;
A page output generation unit that performs a process of setting a link to the selected link destination in a corresponding word or phrase of the web page, and a process of outputting the web page in which the link destination is set. Link processing device. The page output unit, when the IP address of the acquired device is not included in the IP address range of the link condition associated with the extracted word or phrase of the link dictionary, the word of the web page Alternatively, the link processing apparatus according to claim 5, wherein setting of a link based on the link destination information is suppressed for a phrase. 7. The IP address range of the link condition is a range determined by an arbitrary number of digits or bits from the top of an IP address assigned in the intra-organization network. The link processing device according to item. A link processing program for causing a computer to execute a process of setting a link to a word or phrase in a text of a web page,
In the computer comprising the link dictionary storage unit,
A process of obtaining an accessed resource and an IP address of either the device providing the resource or the device accessing the resource in the organization network;
Information stored in the link dictionary storage unit, for each word or phrase, sets a link destination and a range of IP addresses of devices constituting an intra-organization network that is a target of link pasting processing to the link destination A process of referring to a link dictionary that associates a link condition with a word or phrase included in the link dictionary from the content of the web page;
The IP address of the acquired device is associated with the word or phrase when the IP address of the link condition associated with the extracted word or phrase of the link dictionary is included, and the acquisition Processing for selecting a link destination corresponding to the link condition including the IP address of the selected device;
A process of setting a link to the selected link destination in the corresponding word or phrase of the web page;
A link processing program for executing a process of outputting a web page in which the link destination is set.

Images