JP6218054B1 - Service identification device - Google Patents

Abstract

The present invention provides a use service specifying device capable of specifying a used external service. A service identification device for identifying an external service to be used when a predetermined analysis target URL is accessed, an analysis target URL receiving unit for receiving the analysis target URL, and accessing the analysis target URL The external request extraction unit 3 for extracting a URL where access to a domain other than the analysis target URL occurs, the external service database 4 in which the domain and path of the external service and the service name are associated and stored, and the external The service database 4 is referred to, and a use service identification unit 5 that identifies a service name corresponding to the domain and path of the URL extracted by the external request extraction unit 3 is provided. [Selection] Figure 1

Description

  The present invention relates to a use service specifying device for specifying an external service used when a predetermined URL to be analyzed is accessed.

  In recent years, an advertisement technique called targeting advertisement has been widely used in Internet advertisement distribution. There are various methods for targeting advertisements. For example, the attributes of the website visited by the user are stored in the cookie of the browser, and the user is interested in the information based on the cookie information. A technique for distributing related advertisements is known.

  As prior art document information related to the invention of this application, there are Patent Documents 1 and 2.

U.S. Pat. No. 9,361,631 U.S. Pat. No. 8,516,601

  In the above-described targeting advertisement, information such as a website visit history is transmitted to a third party such as an advertising company (hereinafter, a service provided by a third party such as an advertising company is referred to as an external service). Therefore, from the viewpoint of privacy protection, there is an increasing demand for knowing where the information is transmitted to and what kind of external service is used.

  Also, in recent years, the method of targeting advertising using redirects has become complicated, so even website operators may not know the external services used when accessing their websites. is there. Therefore, there is a demand for specifying the external service being used from the viewpoint of enhancing the privacy policy.

  SUMMARY An advantage of some aspects of the invention is that it provides a use service specifying apparatus that can specify a used external service.

In order to solve the above-mentioned problem, the present invention is a service utilization specifying device that identifies an external service used when a predetermined analysis target URL is accessed, and receives the analysis target URL. A receiving unit, an external request extracting unit that accesses the URL to be analyzed and extracts a domain and path where access to a domain other than the domain to be analyzed occurs, and a domain and path of the external service are associated with a service name an external service database stored is, the reference to the external service database, said an external request extracting unit used service specifying unit for specifying a service name corresponding to the extracted domain and path, Bei example, said external request The extraction unit is accessed other than the domain of the URL to be analyzed. Having an external request occurrence number counting unit for counting the number of times, to provide a used service specifying device.

  ADVANTAGE OF THE INVENTION According to this invention, the utilization service specific apparatus which can identify the external service currently utilized can be provided.

It is a schematic block diagram of the utilization service specific apparatus concerning the 1st Embodiment of this invention. It is a figure which shows an example of an external service database. It is a figure which shows the example of a display of an analysis result. It is a flowchart which shows the control flow of the utilization service specific apparatus of FIG. It is a schematic block diagram of the utilization service specific apparatus which concerns on the 2nd Embodiment of this invention. It is explanatory drawing explaining the display of the online privacy notice on a visitor terminal. (A) is a control flow for generating online privacy notices in the service utilization specifying device shown in FIG. 5, and (b) is a service for specifying service utilization when displaying online privacy notices on a visitor terminal, It is a figure which shows the flow of operation | movement of a user server and a visitor terminal. It is explanatory drawing explaining interruption | blocking of an external service. (A) is a control flow at the time of CSP tag generation or update in the CSP tag generation unit, and (b) is a service for specifying service used when applying CSP to a visitor terminal, a user server, and a visit It is a figure which shows the flow of operation | movement of a person terminal.

[Embodiment]
Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.

(First embodiment)
FIG. 1 is a schematic configuration diagram of a use service specifying apparatus 1 according to the first embodiment. The used service specifying device 1 is a device that specifies an external service used when a predetermined URL to be analyzed is accessed. The external service is, for example, advertisement, analysis such as access analysis, data collection, web tool, interaction, and the like.

  As shown in FIG. 1, the use service specifying device 1 includes an analysis target URL receiving unit 2, an external request extracting unit 3, an external service database (external service DB) 4, a use service specifying unit 5, and a result sending unit. 6 are provided. The analysis target URL receiving unit 2, the external request extracting unit 3, the external service database 4, the used service specifying unit 5, and the result transmitting unit 6 are mounted on a used service specifying server 10 and are a CPU (Central Processing Unit). It is realized by appropriately combining RAM (Random Access Memory) and ROM (Read Only Memory), HDD (Hard Disk Drive), software, interface, etc., which are semiconductor memories.

  The analysis target URL receiving unit 2 receives the analysis target URL. In the first embodiment, the analysis target URL receiving unit 2 receives an analysis target URL from a user terminal 11 such as a personal computer, a smartphone, or a tablet via a network such as the Internet.

  In the first embodiment, a predetermined URL is assigned to the use service specifying server 10, and a website (referred to as a use service specifying website) can be provided to the user via the Internet. Yes. The user accesses the use service specifying website from the user terminal 11 using the Internet browser, and inputs the analysis target URL, which is the URL of the website desired to be analyzed, from the input form of the use service specifying website. . The analysis target URL receiving unit 2 receives the URL input in the above input form as the analysis target URL. Note that the method of transmitting the analysis target URL from the user terminal 11 to the use service specifying server 10 (analysis target URL receiving unit 2) is not limited to this.

  The external request extraction unit 3 accesses the analysis target URL received by the analysis target URL reception unit 2 and extracts a URL where access to a domain other than the domain of the analysis target URL occurs. More specifically, the external request extraction unit 3 accesses the analysis target server 12 that activates the Internet browser and provides the website of the analysis target URL. In addition, the external request extraction unit 3 monitors an HTTP request transmitted after accessing the analysis target server 12 and extracts a URL where access occurs from a message of the HTTP request. Further, the external request extraction unit 3 excludes the URL having the same domain as the analysis target URL from the extracted URL. As a result, the URL of the external service providing server 13 that is accessed when the URL to be analyzed is accessed is specified. Hereinafter, an access request to a domain other than the analysis target URL is referred to as an external request. The URL of the extracted external request is stored in a predetermined storage area in the memory of the use service specifying server 10.

  Although it is possible to extract the URL of the external request by extracting the URL included in the HTML source received from the URL to be analyzed, in this case, another external service is used in the script of the external service. When such a description is included, the other external service cannot be extracted. As in the present embodiment, by monitoring the message of the transmitted HTTP request, it is possible to extract another external service used in the external service as described above.

  The external request extraction unit 3 includes an external request occurrence count counter 31 that counts the number of times an external request has occurred (hereinafter referred to as an external request occurrence count). The external request occurrence count counted by the external request occurrence count counting unit 31 is stored in a predetermined storage area in the memory of the use service specifying server 10.

  As shown in FIG. 2, the external service database 4 stores the domain and path of the external service, the service name and the service type in association with each other, and is stored in advance in the memory of the use service specifying server 10. Is stored in the storage area. Note that the URL is generally composed of a scheme, a domain, a path, a parameter, and a fragment. In the external service database 4, the path and the subsequent paths (path, parameter, and fragment) are represented by regular expressions. The service name represents the name of an external service such as an advertisement service or an access analysis service, and the service type represents the type of service such as an advertisement or access analysis. Although not shown in FIG. 2, in this embodiment, a service provider of an external service (a company name that provides an external service) is also stored in the external service database 4.

  The used service specifying unit 5 refers to the external service database 4 and refers to the service name, service type, and service provider (hereinafter referred to as service name) corresponding to the URL and domain of the URL of the external request extracted by the external request extraction unit 3. Is specified. The use service specifying unit 5 stores the specified service name or the like in a predetermined storage area in the memory of the use service specifying server 10.

  If the service name corresponding to the domain and path of the URL of the external request does not exist in the external service database 4, the use service specifying unit 5 sets the service name or the like as “under investigation”. The used service specifying unit 5 may be configured to notify the administrator who manages the used service specifying apparatus 1 of the URL of the external request when the URL of the external request whose service name is unknown exists.

  The used service specifying unit 5 includes a used service number counting unit 51 that counts the number of used external services. The number of used external services counted by the used service number counting unit 51 is stored in a predetermined storage area in the memory of the used service specifying server 10.

  The result transmission unit 6 transmits the service name specified by the use service specifying unit 5 to the user terminal 11. In the first embodiment, the result transmission unit 6 includes the service name specified by the used service specifying unit 5, the number of external request generations counted by the external request generation number counting unit 31, and the used service number counting unit 51. The counted number of used external services is transmitted to the user terminal 11 as an analysis result.

  In the first embodiment, the result transmission unit 6 is configured to display the analysis result on the web page. An example of a web page displaying the analysis result is shown in FIG. The method in which the result transmission unit 6 transmits the analysis result to the user terminal 11 is not limited to this. In addition, in FIG. 3, the page reading time, the scan date and time that is the date and time when the service name is specified by the use service specifying device 1 are shown on the web page, but the items displayed on the web page can be changed as appropriate. The layout of the web page is not limited to the illustrated one. In addition, the URL or domain and path of the external request may be transmitted by the result transmitting unit 6, and the URL or domain and path of the external request may be displayed on the web page displaying the analysis result.

  Next, the control flow of the use service specifying apparatus 1 will be described with reference to FIG. As shown in FIG. 4, in the use service specifying device 1, first, in step S <b> 11, the analysis target URL receiving unit 2 receives the analysis target URL. Thereafter, in step S12, the external request extraction unit 3 activates the Internet browser to access the URL to be analyzed, and in step S13, the external request extraction unit 3 extracts the URL of the external request. In subsequent step S14, the external request occurrence count counting unit 31 counts the external request occurrence count and proceeds to step S15.

  In step S <b> 15, the used service specifying unit 5 refers to the external service database 4 and specifies a service name corresponding to the URL of the external request extracted by the external request extracting unit 3. Thereafter, in step S16, the used service number counting unit 51 counts the number of used external services, and the process proceeds to step S17. In step S17, the result transmission unit 6 analyzes the service name specified in step S15, the number of external request occurrences counted in step S14, and the number of used external services counted in step S16. To the user terminal 11.

(Operation and effect of the embodiment)
As described above, the used service specifying device 1 includes the external service database 4 in which the domain and path of the external service and the service name are stored in association with each other, and the external request extraction is performed with reference to the external service database 4. The service name corresponding to the domain and path extracted by the part 3 is specified.

  By only displaying the domain and path of the external request, it is difficult to understand what the service content is, and it is difficult for the user to intuitively understand the external service being used. By specifying the service name or the like as described above, the user can intuitively understand the external service being used.

(Second Embodiment)
FIG. 5 is a schematic configuration diagram of the service utilization specifying device 1a according to the second embodiment of the present invention. The use service specifying device 1a is the same as the use service specifying device 1 according to the first embodiment, except that the result transmission unit 6 is omitted, the online privacy notice generation unit 7, the online privacy notice storage unit 8, and the CSP tag generation. A portion 9 is further provided.

  In the first embodiment, the external service being used is specified and transmitted to the user terminal 11 based on the URL to be analyzed input on the user terminal 11, but in the second embodiment, , Generate an online privacy notice for the website by identifying the external services used when accessing the registered website, and send the generated online privacy notice to the visitors to the website Is configured to do.

  Here, as an example, a case where a user website provided by the user server 14 is registered will be described. The user server 14 and the use service specifying server 10 are different servers.

  The user 15 who manages the user server 14 uses the terminal such as a personal computer to access the usage service specifying website provided by the usage service specifying server 10 and use it when using the usage service specifying device 1a. The URL of a user website (a website that desires to generate online privacy notice) provided by the operator server 14 is registered (input and transmitted). The analysis target URL receiving unit 2 receives the URL of the user website registered through the use service specifying website.

  Based on the registered URL of the user website, the use service specifying device 1a specifies the service name of the external service being used by the external request extraction unit 3 and the use service specifying unit 5. Since the external request extraction unit 3 and the use service specifying unit 5 are the same as those in the first embodiment, description thereof is omitted here.

  The online privacy notice generation unit 7 stores the service name specified by the use service specifying unit 5 in the online privacy notice storage unit 8 as an online privacy notice.

  The online privacy notice generation unit 7 includes a display tag generation unit 71 that generates a display tag for displaying the online privacy notice on the user website. The display tag generation unit 71 transmits the generated display tag to the user 15 (such as a personal computer of the user 15). The user 15 can display the online privacy notice by embedding the received display tag in the HTML of the user website and uploading it to the user server 14. The display tag includes a script code, and when the visitor visits the user website, accesses the use service specifying server 10 and acquires / displays the online privacy notice.

  As shown in FIG. 6, when a user visits a user website, the visitor terminal 16 sends an HTTP request to the user server 14, and the user server 14 responds to this by displaying a display tag. HTML data in which is embedded is transmitted. At the visitor terminal 16, the received HTML data is read and executed, but the access to the use service specifying server 10 is generated by the display tag embedded at this time, and the use service specifying server 10 is online. Request transmission of privacy notices. In response to a request from the visitor terminal 16, the online privacy notice generation unit 7 of the use service specifying server 10 extracts and extracts the online privacy notice stored in the online privacy notice storage unit 8. The online privacy notice is transmitted to the visitor terminal 16. Thereby, the online privacy notice of the user website (a list of service names of external services used when accessing the user website) is displayed on the visitor terminal 16.

  By the way, the external services used when accessing the website are not always the same, and the external services used may increase or decrease or may be changed to other external services. Therefore, it is desirable to update the online privacy notice every predetermined period (for example, every few days). In other words, the online privacy notice generation unit 7 is configured to repeatedly execute identification of a service name or the like by the external request extraction unit 3 and the used service identification unit 5 and update the online privacy notice every predetermined period. Is more desirable.

  FIG. 7A is a control flow for generating an online privacy notice in the use service specifying device 1a, and FIG. 7B shows the use service specifying when displaying the online privacy notice on the visitor terminal 16. It is a figure which shows the flow of operation | movement of the server 10, the user server 14, and the visitor terminal 16. FIG.

  As shown in FIG. 7A, the use service specifying device 1a receives the URL of the user website as an analysis target URL in step S21, and proceeds to step S22. Steps S22 to S26 are the same as steps S12 to S16 in FIG. In subsequent step S27, the online privacy notice generation unit 7 includes the service name specified in step S25, the number of external request occurrences counted in step S24, and the number of used external services counted in step S26. The analysis result including the number is stored in the online privacy notice storage unit 8 as an online privacy notice. Thereafter, in step S28, the display tag generation unit 71 generates a display tag for displaying the online privacy notice on the user website, and transmits the generated display tag to the user 15. As a result, the online privacy notice for the user website is prepared in the use service specifying server 10, and the display tag received by the user 15 is embedded in the HTML of the user website in the user server 14. By uploading, online privacy notice can be displayed.

  As shown in FIG. 7B, when accessing the user website from the visitor terminal 16, the user server 14 first receives an HTTP request from the visitor terminal 16 in step S31. In step S32, the user server 14 that has received the HTTP request transmits HTML data in which a display tag is embedded in response to the request. Thereafter, in step S33, the visitor terminal 16 receives and executes the HTML data. In step S34, the visitor terminal 16 accesses the use service specifying server 10 by the display tag script, and requests the use service specifying server 10 for the online privacy notice. Thereafter, in step S <b> 35, the use service specifying server 10 that has received the request for online privacy notice transmits the online privacy notice to the visitor terminal 16. Thereafter, in step S36, the visitor terminal 16 that has received the online privacy notice displays the received online privacy notice on the user website according to the script of the display tag.

  Returning to FIG. 5, the use service specifying device 1 a according to the second embodiment also has a function of prohibiting access to a specific external service (blocking the external service). Specifically, the service identifying device 1a uses a content security policy (Content-Security-Policy) defined by the World Wide Web Consortium (W3C) to prohibit access to a specific external service. Is further provided with a CSP tag generation unit 9 for generating a tag (hereinafter referred to as a CSP tag).

  The CSP is originally intended to detect and mitigate attacks such as cross-site scripting. In the second embodiment, the CSP is specified by using the CSP function that can limit the domain of the content to be acquired. The external service of is blocked.

  The CSP tag generation unit 9 receives an external service desired to be blocked from the user 15 (such as the personal computer of the user 15). The CSP tag generation unit 9 generates a CSP tag including a script code for adding a CSP that prohibits access to the domain of the external service desired to be blocked to the user website, and uses the generated CSP tag as the user 15 (user 15 To a personal computer). The user 15 embeds the received CSP tag in the HTML head of the user website and uploads it to the user server 14.

  In the present embodiment, the CSP tag generation unit 9 stores the CSP content (including a specific description of the CSP such as a domain for which content acquisition is permitted) in the CSP content storage unit 9a, and the CSP tag The content of the CSP is transmitted to the visitor terminal 16 in response to a request from the visitor terminal 16. As a result, even if the domain for which content acquisition is permitted is changed, it is possible to respond by simply updating the content of the CSP within the use service specifying server 10, and the user 15 can change the HTML of the user website. This saves the trouble of changing and uploading, and improves convenience.

  There is no particular limitation on the method of receiving an external service desired to be blocked from the user 15 (user 15's personal computer or the like). For example, a dedicated management screen for the user 15 is provided on the web page. Alternatively, an external service that permits access (or an external service that does not permit access) may be selected on the management screen. In this case, the CSP tag generation unit 9 updates the content of the CSP stored in the CSP content storage unit 9a in accordance with an operation on the management screen.

  As shown in FIG. 8, when a user visits a user website, the visitor terminal 16 sends an HTTP request to the user server 14, and the user server 14 responds to the request by the CSP tag. HTML data in which is embedded is transmitted. In the visitor terminal 16, the received HTML data is read and executed, but the access to the use service specifying server 10 is generated by the CSP tag embedded at this time, and the use service specifying server 10 receives the CSP. Request transmission of content. In response to a request from the visitor terminal 16, the CSP tag generation unit 9 of the use service specifying server 10 transmits the content of the CSP stored in the CSP content storage unit 8 to the visitor terminal 16. Thereby, CSP is applied in the visitor terminal 16, and access to the specific external service provision server 13 from the visitor terminal 16 is prohibited according to the content of CSP. As a result, the external service provided by the external service providing server 13 whose access is prohibited (blocking desired external service) is blocked.

  FIG. 9A is a control flow at the time of CSP tag generation or update in the CSP tag generation unit 9, and FIG. 9B is a use service specifying server 10 at the time of applying CSP to the visitor terminal 16. It is a figure which shows the flow of operation | movement of the user server 14 and the visitor terminal 16. FIG.

  As shown in FIG. 9A, the CSP tag generation unit 9 first receives a block request external service from the user 15 in step S41, and transmits a CSP tag to the user 15 in step S42. Judge whether it has been completed. If already transmitted, the process proceeds to step S44. If not yet transmitted, a CSP tag is generated and transmitted to the user 15 in step S43. In step S44, the content of the CSP that prohibits access to the domain of the external service desired to be blocked received in step S41 is generated and stored (or updated) in the CSP content storage unit 9a. As a result, the content of the CSP for the user website is prepared in the use service specifying server 10, and the CSP tag received by the user 15 is embedded in the HTML of the user website and uploaded to the user server 14. As a result, the external service can be blocked by the CSP.

  As shown in FIG. 9B, when accessing the user website from the visitor terminal 16, the user server 14 first receives an HTTP request from the visitor terminal 16 in step S51. In step S52, the user server 14 that has received the HTTP request transmits HTML data in which the CSP tag is embedded in response to the request. Thereafter, in step S53, the visitor terminal 16 receives and executes the HTML data. In step S54, the visitor terminal 16 accesses the use service specifying server 10 by the script of the CSP tag, and requests the use service specifying server 10 for the contents of the CSP. Thereafter, in step S55, the use service specifying server 10 that has received the request for the content of the CSP transmits the content of the CSP to the visitor terminal 16. Thereafter, in step S56, the CSP is applied at the visitor terminal 16 that has received the contents of the CSP, and the external service desired to be blocked is blocked due to the access restriction of the CSP.

  According to the second embodiment, the website operator can grasp the external service used when accessing his / her own website. In addition, it is possible to enhance the privacy policy by making available external services available to visitors as online privacy notices. In addition, it is possible to block an external service that is not desired to be used by a simple operation of transmitting a block request external service and embedding the received CSP tag in HTML.

  In the second embodiment, the content of the CSP is stored in the use service specifying server 10, but the present invention is not limited to this, and the content of the CSP may be included in the CSP tag. In this case, the user 15 can block unnecessary external services by the CSP by embedding and uploading the received CSP tag as a meta tag in HTML of the user website. However, in this case, every time the content of the CSP is changed, that is, every time an external service that permits access is changed, the user 15 needs to upload the content of the CSP again.

  In the second embodiment, the case where the user 15 blocks an external service desired to be blocked has been described. However, the present invention is not limited to this, and the CSP tag generation unit 9 lists safe external service domains. A CSP that has an up-to-date white list and permits access only to the domains listed in the white list may be generated.

  As mentioned above, although embodiment of this invention was described, these embodiment is only an example and does not limit the invention which concerns on a claim. These novel embodiments can be implemented in various other forms, and various omissions, replacements, changes, and the like can be made without departing from the scope of the present invention. In addition, not all the combinations of features described in these embodiments are essential to the means for solving the problems of the invention. Furthermore, these embodiments are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

DESCRIPTION OF SYMBOLS 1 ... Utilization service specific apparatus 2 ... Analysis object URL receiving part 3 ... External request extraction part 31 ... External request generation frequency counting part 4 ... External service database 5 ... Utilization service identification part 51 ... Utilization service number counting part 6 ... Result transmission part 7 ... Online privacy notice generation unit 71 ... Display tag generation unit 8 ... Online privacy notice storage unit 9 ... CSP tag generation unit 9a ... CSP content storage unit 10 ... Used service specifying server 11 ... User terminal 12 ... Analysis target Server 13 ... External service providing server 14 ... User server 15 ... User 16 ... Visitor terminal

Claims (5)

A use service specifying device for specifying an external service used when a predetermined URL to be analyzed is accessed,
An analysis target URL receiving unit for receiving the analysis target URL;
An external request extraction unit that accesses the URL to be analyzed and extracts a URL where access to a domain other than the domain of the URL to be analyzed occurs;
An external service database in which the domain and path of the external service and the service name are associated and stored;
The reference to the external service database, e Bei and a used service specifying unit for specifying a service name corresponding to the domain and the path of the extracted URL by the external request extracting unit,
The external request extraction unit has an external request occurrence number counting unit that counts the number of times access to a domain other than the domain of the analysis target URL occurs.
Use service identification device. The analysis target URL receiving unit, the external request extraction unit, the external service database, and the use service specifying unit are mounted on a use service specifying server,
The analysis target URL receiving unit receives the analysis target URL from a user terminal,
Further comprising a result transmitting unit that transmits the service name specified by the used service specifying unit to the user terminal;
The use service specifying device according to claim 1. The URL to be analyzed is a URL of a user website provided by the user server,
The analysis target URL receiving unit, the external request extraction unit, the external service database, and the use service specifying unit are mounted on a use service specifying server different from the user server,
The service name of the external service specified by the use service specifying unit is stored as an online privacy notice, and in response to a request from the visitor terminal that has accessed the user website, the visitor terminal receives the online privacy information. It also has an online privacy notice generator that sends notices.
The use service specifying device according to claim 1. The online privacy notice generation unit repeatedly executes the service name specification by the external request extraction unit and the use service specifying unit for each predetermined period, and updates the online privacy notice.
The use service specifying device according to claim 3. A CSP tag generator for generating a content security policy tag defined by the World Wide Web Consortium to prohibit access to a specific external service;
The use service specifying device according to claim 3 or 4.

Images