JP6395227B2 - Router device and router device filtering method - Google Patents

Description

  The present invention relates to a router device and a router device filtering method. In particular, the present invention relates to a router device that performs URL filtering and a filtering method of the router device.

  For accessing a website, for example, mobile terminals such as mobile phones, smart phones and tablet terminals, and information communication terminals such as personal computers are used. One method for restricting access to a website from such a portable terminal or information communication terminal is a method called URL (Uniform Resource Locator) filtering. The URL filtering method is a method of enumerating URLs that permit browsing or URLs that refuse browsing, and determines whether or not a website can be browsed only by the URL. For example, by installing this URL filtering function in the router device, it is possible to restrict access to the Web site of the information communication terminal belonging to the router device.

  There are various methods for restricting access to the Web site. Japanese Patent Application Laid-Open No. 2004-151867 discloses a method of determining that a URL is a browsing restriction target on the client side when the category of the URL to be accessed belongs to a browsing restriction target category and restricting browsing to the Web site indicated by the URL. ing. However, in the method disclosed in Patent Literature 1, when a single information communication terminal is shared by a plurality of users and different viewing restriction conditions are to be applied for each user, the viewing restriction is applied each time the user changes. There is a problem that it is necessary to reset the conditions and is complicated.

  In Patent Document 2, in order to solve the problem of Patent Document 1, it is determined whether or not a USB (Universal Serial Bus) memory is connected to the router device. Access to the website is determined by referring to the stored filtering rules. If the USB memory is not connected, the default filtering rules stored in the memory in the router device are referred to access the website. A method for determining accessibility is disclosed.

  However, in the method disclosed in Patent Document 2, when a user using an information communication terminal browses a website, a USB memory is connected to the router device, and when the browsing of the website is terminated, the USB memory is removed. There is a problem that it is troublesome to insert and remove the USB memory.

  In Patent Document 3, a database factory receives URLs from a plurality of gateway systems, determines whether identifiers are categorized, and provides a category to the gateway system. The gateway system receives URLs from a master database or a database factory. A method is disclosed for determining a category associated with an application and applying rules associated with the category and a user to filter access to a requested website / page.

  In Patent Literature 4, the filtering device includes a device type information management unit, the filtering server includes a device type information / filtering list database unit, and the filtering device sends the device type information to the filtering server. A filtering system in which a filtering pattern list is distributed is disclosed.

  In Patent Document 5, the filtering condition includes a condition for a value obtained by quantifying “reputation” in the community of the target website based on a filtering condition for other kids in the designated community, and the child is connected to the network. When an instruction to access the website is input via the server, the access permission determination unit acquires the child identification information and the URL of the access destination, and determines whether the access is possible using the filtering condition stored in the condition database. Is disclosed.

JP 2005-107831 A JP 2012-208730 A JP 2003-233623 A JP 2006-18635 A JP 2010-73167 A

  In any of the above-mentioned Patent Documents 1 to 5, when one information communication terminal is shared by a plurality of users, a router device that can easily apply different URL filtering rules for each user and filtering of the router device The method is not disclosed.

  The present invention has been made to solve such problems. When a single information communication terminal is shared by a plurality of users, different URL filtering rules can be easily applied to each user. It is an object of the present invention to provide a router device and a router device filtering method.

  The router device according to the present invention is connected to a terminal device and an external communication network, and transmits the information to the terminal device in response to a browsing request for information on the external communication network from the terminal device. Device. The router device correlates a terminal identifier that identifies the terminal device, a plurality of filtering rule information that imposes different browsing restrictions, and authentication information that enables each of the plurality of filtering rule information to be adapted When a browsing request is received from the filtering information storage unit and the terminal device, the terminal identifier and the authentication information are acquired from the terminal device, and the terminal identifier and the authentication information are determined to be applicable. A filtering processing unit that identifies a filtering rule, determines whether information can be browsed based on the browsing request based on the identified filtering rule, and executes a filtering process.

  The router device according to the present invention is connected to a terminal device and an external communication network, and transmits the information to the terminal device in response to a browsing request for information on the external communication network from the terminal device. Device. The router device includes a filtering information storage unit that stores a plurality of filtering rule information that imposes different browsing restrictions, and a user identifier that enables each of the plurality of filtering rule information to be associated with each other, When receiving a browsing request from a terminal device, the user identifier is acquired from the terminal device, a filtering rule determined to be applicable by the user identifier is specified, and the browsing is performed based on the specified filtering rule A filtering processing unit that determines whether information can be browsed according to the request and executes filtering processing.

  The filtering method of the router device according to the present invention is connected to a terminal device and an external communication network, and transmits the information to the terminal device in response to a browsing request for information on the external communication network from the terminal device. The filtering method of the router device. The filtering method of the router device includes a terminal identifier that identifies the terminal device, a plurality of filtering rule information that imposes different browsing restrictions, and authentication information that enables each of the plurality of filtering rule information to be adapted, Are stored in association with each other, and when a browsing request is received from the terminal device, the terminal identifier and the authentication information are acquired from the terminal device and determined to be applicable by the terminal identifier and the authentication information. Identifying the specified filtering rule, determining whether information can be browsed based on the browsing request based on the identified filtering rule, and executing a filtering process.

  The filtering method of the router device according to the present invention is connected to a terminal device and an external communication network, and transmits the information to the terminal device in response to a browsing request for information on the external communication network from the terminal device. The filtering method of the router device. The filtering method of the router device stores a plurality of filtering rule information that imposes different browsing restrictions and a user identifier for making each of the plurality of filtering rule information adaptable to each other, and When receiving a browsing request from the terminal device, the user identifier is acquired from the terminal device, the filtering rule determined to be applicable by the user identifier is specified, and the filtering rule is determined based on the specified filtering rule. Determining whether information can be browsed according to a browse request, and executing a filtering process.

  According to the present invention, when a single terminal device is shared by a plurality of users, it is possible to provide a router device and a router device filtering method capable of easily applying different URL filtering rules for each user. .

1 is a block diagram illustrating a router device according to a first exemplary embodiment; 3 is a flowchart illustrating an operation of a URL filtering rule according to the first exemplary embodiment. It is a figure which illustrates a MAC address table. It is a figure which illustrates a category database. 3 is a flowchart illustrating an operation of a URL filtering rule according to the first exemplary embodiment. FIG. 6A is a diagram illustrating an application rule according to the first embodiment. FIG. 6B is a diagram illustrating a filtering rule table according to the first embodiment. It is a figure which illustrates the authentication screen of the web browser of a terminal device. It is a figure which illustrates a password table. 3 is a flowchart illustrating an operation of a URL filtering rule according to the first exemplary embodiment. (A) is a figure which illustrates a default rule. (B) is a diagram illustrating an individual rule 1. (C) is a diagram illustrating personal rule 2. FIG. 3 is a block diagram illustrating a router device according to a second embodiment; 10 is a flowchart illustrating an operation of a URL filtering rule according to the second exemplary embodiment. It is a figure which illustrates a default rule table. It is a figure which illustrates an individual rule table. It is a figure which illustrates the authentication screen of the web browser of a terminal device. It is a figure which illustrates a user ID and password table.

[Embodiment 1]
Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram illustrating a router device according to the first embodiment.
As shown in FIG. 1, the router device 11 includes a control unit 111, a LAN port 112, a WAN port 113, a MAC address identification unit 114, and a filtering information storage unit 117. The filtering information storage unit 117 includes a filtering unit 115 and an authentication unit 116. The MAC address identification unit 114 includes a MAC address table 114a. The filtering unit 115 includes a filtering rule table 115a and an application rule 115b. The authentication unit 116 includes a password table 116a. The router device 11 is connected to the terminal device 51 and an external communication network such as the Internet communication network 81, for example, and responds to the browsing request for the information on the external communication network from the terminal device 51 to the terminal device 51. Send to. Further, when the terminal device 51 accesses the website 71 via the router device 11, the router device 11 determines a website filtering rule to be applied to each of a plurality of users who operate the terminal device 51.

  The control unit 111 is connected to each of the LAN port 112, the WAN port 113, the MAC address identification unit 114, the filtering unit 115, and the authentication unit 116, and controls each of these units. That is, when receiving a browsing request from the terminal device 51, the control unit 111 performs control for acquiring a MAC address and a password from the terminal device 51. In addition, the control unit 111 performs a control necessary for specifying a filtering rule determined to be applicable based on the acquired MAC address and the acquired password. Moreover, the control part 111 determines whether the browsing of the information by the browsing request of the terminal device 51 is based on the specified filtering rule, and performs a filtering process.

  The LAN port 112 is an interface for connecting to a LAN (Local Area Network). The router device 11 communicates with the terminal device 51 via the LAN. The terminal device 51 is equipped with a web browser 51a. The WAN port 113 is an interface for connecting to the Internet communication network 81 that is one of the external communication networks. The router device 11 communicates with the category server 61 and the Web site 71 via the Internet communication network 81.

  The MAC address identification unit 114 of the router device 11 includes a storage area in which the MAC address table 114a is stored. In the MAC address table 114a, the terminal device 51 and the MAC address are registered in association with each other. This associated MAC address is registered in advance by the user.

  When there is a website access request from the terminal device 51 to the router device 11, the MAC address identifying unit 114 acquires a website access request packet via the control unit 111. The MAC address identifying unit 114 identifies the MAC address of the terminal device 51 included in the website access request packet. The MAC address identifying unit 114 confirms whether or not the MAC address of the terminal device 51 included in the website access request packet is registered in the MAC address table 114a. Then, the MAC address identification unit 114 transmits the confirmation result to the control unit 111.

  The filtering information storage unit 117 includes a filtering unit 115 and an authentication unit 116. The filtering information storage unit 117 includes a MAC address for identifying the terminal device 51, a plurality of filtering rules that impose different browsing restrictions, and authentication information such as a password for adapting each of the plurality of filtering rules. Are stored in association with each other. The filtering unit 115 includes a storage area in which the filtering rule table 115a and the application rule 115b are stored. The filtering rule table 115 a holds filtering rule information of the terminal device 51. For each MAC address registered in the MAC address table 114a, a filtering rule is associated and registered in the filtering rule table 115a. One default filtering rule (hereinafter referred to as a default rule) and a personal filtering rule (hereinafter referred to as a personal rule) for a plurality of users are registered for one MAC address. That is, the filtering rule table 115a stores a terminal identifier such as a MAC address for identifying the terminal device 51 and a “personal rule” that is a filtering rule for each of a plurality of users in association with each other. Is done. Each of the plurality of “individual rules” in the filtering rule table 115a stores a category of the website 71 and information on whether or not the category can be browsed in association with each other.

  The filtering rules set in the filtering rule table 115a are registered in advance by the user. For example, when the user registers the correspondence between the terminal device 51 and the MAC address, a default rule to be applied to the MAC address is set. When setting the default rule, the “personal rule” is also set as necessary. In this way, the “default rule” and “personal rule” are set for each MAC address registered in the MAC address table 114a. In the “personal rule”, for example, “personal rule 1” is set as the personal rule of the first user, and “personal rule 2” is set as the personal rule of the second user.

  The application rule 115b holds information on the currently applied filtering rule for each MAC address registered in the MAC address table 114a. There are three types of information stored in the application rule 115b: “unregistered”, “default rule”, and “personal rule”. The “personal rule” is further set, for example, as information on a filtering rule to which “personal rule 1” as a personal rule for the first user and “personal rule 2” as a personal rule for the second user are currently applied. The

  For example, when the information held by the application rule 115b is “unregistered”, it indicates that the filtering rule currently applied to the terminal device 51 corresponding to the MAC address is in an undecided state. For this reason, it is necessary to determine a filtering rule to be applied, which will be described later. Further, when the information held by the application rule 115b is “default rule”, it indicates that the filtering rule applied to the terminal device 51 corresponding to the MAC address is “default rule”.

  Further, when the information held by the application rule 115b is “personal rule”, it indicates that the filtering rule applied to the terminal device 51 corresponding to the MAC address is “personal rule”. The information indicated by the “personal rule” includes information indicating which user the “personal rule” is when a plurality of users use one terminal device 51.

  The filtering rule set in the filtering rule table 115a can register a plurality of “personal rules” for the terminal device 51 of one MAC address. The “personal rule” registered in the application rule 115b indicates which user's personal rule is applied from among one or more personal rules applicable to one MAC address.

  Further, the filtering unit 115 acquires information on the category of the website 71 that has been requested to access from the control unit 111, refers to the filtering rule table 115a, and confirms whether the category of the website 71 is viewable. The confirmation result is transmitted to the control unit 111.

  Authentication unit 116 includes a storage area in which password table 116a is stored. In the password table 116a, passwords corresponding to personal rules registered for each MAC address are registered. The password information is registered in advance by the user. For example, when setting the “default rule” and “personal rule” applied to the MAC address by the user, the password is also registered. That is, the password table 116a stores MAC addresses, “personal rules”, and passwords for specifying users in association with each other.

  The authentication unit 116 acquires the filtering rule selected by the user by operating the terminal device 51 and the password input by the user from the control unit 111. The authentication unit 116 refers to the password table 116a, and performs password authentication for confirming whether the input password input by the user by operating the terminal device 51 matches the password stored in the password table 116a. . That is, an input password input by the user operating the terminal device 51, a password specified by the MAC address of the terminal device 51 in the password table 116 a and a “personal rule” selected by the user operating the terminal device 51 , Perform password authentication to see if they match. Then, this result is transmitted to the control unit 111. If the password authentication matches, the information indicating whether the selected personal rule category can be browsed is applied to the filtering rule for the category of the website requested by the terminal device 51 to access.

  For example, when the information stored in the application rule 115b of the filtering unit 115 is currently “unregistered” and the filtering rule of “personal rule” is to be applied from now on, password authentication of the user is required.

  When the information held by the application rule 115b is currently “default rule” or “personal rule”, the filtering rule stored in the application rule 115b has already been applied. For this reason, user password authentication is not required.

  The category server 61 includes a category database 61a that stores a URL and a category of the Web site 71 specified by the URL in association with each other.

  When there is an inquiry about the category of the website 71 from the router device 11, the category server 61 refers to the category database 61 a to check which category the specified URL corresponds to, and informs the router device 11 about the category of the specified URL. Send.

Next, the URL filtering operation of the first embodiment will be described.
In the first embodiment, in order to restrict Web site access by URL filtering to the terminal device 51 belonging to the router device 11, filtering applied by the user to the MAC address of the terminal device 51 and its MAC address. Register the rule. When the terminal device 51 accesses the website, the router device 11 confirms whether or not the MAC address of the terminal device 51 is registered in the MAC address table 114a. If the MAC address of the terminal device 51 is registered, the filtering rule is applied to the MAC address.

  FIG. 2 is a flowchart illustrating the URL filtering operation according to the first embodiment.

  As illustrated in FIG. 2, when an access request to the web site 71 is generated in the web browser 51 a installed in the terminal device 51 (S <b> 201: Yes), the terminal device 51 includes the URL information of the web site 71. A website access request packet is transmitted to the router device 11.

  The control unit 111 of the router device 11 acquires a website access request packet from the terminal device 51 via the LAN port 112. When acquiring the website access request packet, the control unit 111 passes the website access request packet to the MAC address identification unit 114, and whether the MAC address identification request and the MAC address are registered in the MAC address table 114a. Make an inquiry.

FIG. 3 is a diagram illustrating a MAC address table.
As shown in FIG. 3, the correspondence relationship between the terminal device 51 and the MAC address is registered in the MAC address table 114a. The correspondence information is registered in advance in the MAC address table 114a of the router device 11 when the user operates a Web GUI (Web Graphical User Interface), for example.

  The MAC address identification unit 114 acquires a website access request packet from the control unit 111. Then, the MAC address identifying unit 114 identifies the transmission source MAC address of the website access request packet, that is, the MAC address of the terminal device 51 (S202). The MAC address identifying unit 114 checks whether or not the identified MAC address is registered in the MAC address table 114a (S203). Then, the MAC address identifying unit 114 transmits the confirmation result and the MAC address to the control unit 111.

  The control unit 111 acquires a confirmation result and a MAC address from the MAC address identification unit 114. When the MAC address of the terminal device 51 that has issued the website access request is registered in the MAC address table 114a (S203: Yes), the control unit 111 transmits the category server via the WAN port 113 and the Internet communication network 81. An inquiry for requesting a category is made to 61 (S204). The control unit 111 inquires about the category by transmitting the URL of the Web site that has requested access.

  In addition, when the MAC address of the terminal device 51 that issued the website access request is not registered in the MAC address table 114a (S203: No), the control unit 111 sends an access request to the terminal device 51 via the LAN port 112. It is notified that the Web site where the error occurred cannot be browsed (S207).

  In this example, if the terminal device belongs to the router device 11 and the MAC address corresponding to the terminal device is not registered in the MAC address table 114a, browsing of the website requested by the terminal device is not possible. However, all Web sites may be browsed.

  The category server 61 acquires the URL information of the Web site 71 for which an access request has been made, from the control unit 111 of the router device 11.

FIG. 4 is a diagram illustrating a category database.
As shown in FIG. 4, the category database 61a of the category server 61 stores the correspondence between the URL and the category of the Web site specified by the URL.

  The category server 61 refers to the category database 61a and confirms which category the URL of the Web site corresponds to. That is, the category server 61 refers to the category database 61a in which the website 71 and the category of the website 71 are stored in association with the category of the website requested by the terminal device 51, and the URL of the website 71 Check which category is applicable. Then, the category server 61 transmits a category corresponding to the URL of the Web site to the router device 11 via the Internet communication network 81.

  Specifically, the category server 61 refers to the category database 61a when the router device 11 inquires about the category of the website having the URL “http: // AAA” as shown in FIG. , “Http: // AAA” confirms that the category is “sports”. Then, the category server 61 returns a notification that “http: // AAA” indicates that the category is “sports” to the router device 11.

  When there is a response from the category server 61 and the category corresponding to the URL of the website is acquired (S205: Yes), the control unit 111 of the router device 11 stores the acquired category as a “reception category” (S206). .

  FIG. 5 is a flowchart illustrating the operation of the URL filtering rule according to the first embodiment.

  The control unit 111 of the router device 11 acquires the category corresponding to the URL of the website from the category server 61 (S205: Yes), and as shown in FIG. The MAC address of the device 51 is passed, and the terminal device 51 is inquired about the filtering rule currently applied.

  The filtering unit 115 acquires the MAC address of the terminal device 51 from the control unit 111 and receives an inquiry about the filtering rule currently applied to the terminal device 51. And the filtering part 115 confirms the filtering rule currently applied with respect to the terminal device 51 with reference to the application rule 115b (S501).

Here, the application rule 115b will be described.
FIG. 6A is a diagram illustrating an application rule according to the first embodiment.
As shown in FIG. 6A, in the application rule 115b, a MAC address and a filtering rule currently applied to the terminal device 51 corresponding to the MAC address are registered.

Subsequently, the URL filtering operation will be further described.
When the filtering rule stored in the application rule 115b is not “unregistered” (S501: No), the application rule 115b stores “default rule” or “personal rule”. Therefore, the filtering unit 115 notifies the control unit 111 that the filtering rule applied to the MAC address of the terminal device 51 is the “default rule” or the “personal rule”. When the control unit 111 acquires this notification, the control unit 111 proceeds to a process of determining whether or not a website can be browsed in S901 described later.

  When the filtering rule stored in the application rule 115b is “unregistered” (S501: Yes), the filtering unit 115 refers to the filtering rule table 115a and is registered for the MAC address of the terminal device 51. Check filtering rules. Then, the filtering unit 115 checks whether the “personal rule” is registered in the filtering rule table 115a (S502).

  When the filtering rule stored in the application rule 115b is “unregistered” (S501: Yes), the filtering unit 115 indicates that the filtering rule stored in the application rule 115b is “unregistered” in the control unit 111. Notify that.

  When acquiring the notification that the filtering rule stored in the application rule 115b is “unregistered” from the filtering unit 115, the control unit 111 receives the “MAC address” of the terminal device 51 and the “reception” acquired from the category server 61. Information of “Category” is transmitted to the filtering unit 115.

Here, the filtering rule table 115a will be described.
FIG. 6B is a diagram illustrating a filtering rule table according to the first embodiment.

  As shown in FIG. 6B, the filtering rule table 115a registers a MAC address and a filtering rule applicable to the MAC address. Information on the MAC address and filtering rules applicable to the MAC address is registered in advance by the user using the Web GUI. For example, when the user registers the correspondence relationship between the terminal device 51 and its MAC address, the user also performs setting of a filtering rule to be applied to the MAC address. In the filtering rule table 115a, “default rules” are registered for each MAC address, and “personal rules” are registered as necessary.

  In each filtering rule of the filtering rule table 115a, information on whether or not browsing of Web sites of each category is set is set. For example, filtering rules applicable to the terminal device whose MAC address shown in FIG. 6 is “10: 11: 12: 13: 14: 15” are “default rule”, “personal rule 1”, and “personal rule 2”. It is three. In the “default rule”, the category “sport” is viewable, the category “game” is viewable, the category “violence” is not viewable, the category “dating” is not viewable, and the category is “adult” Is set to not viewable.

Subsequently, the URL filtering operation will be further described.
In the filtering rule table 115a, when the “personal rule” is not registered as the filtering rule for the MAC address of the terminal device 51 (S502: No), only the “default rule” is registered as the filtering rule for the MAC address of the terminal device 51. Because there is not, this “default rule” is applied.

  That is, the filtering unit 115 stores the filtering rule to be applied to the MAC address of the terminal device 51 as the “default rule” in the application rule 115b (S510). The filtering unit 115 notifies the control unit 111 that the filtering rule stored in the application rule 115b is the “default rule”. When the control unit 111 acquires this notification, the control unit 111 proceeds to a process of determining whether or not a website can be browsed in S901 described later.

  When the “personal rule” is registered as a filtering rule for the MAC address of the terminal device 51 in the filtering rule table 115a (S502: Yes), the control unit 111 acquires the MAC address of the terminal device 51 and the category server 61. The received reception category information is transmitted to the filtering unit 115. A plurality of “personal rules” and “default rules” are registered as filtering rules for the MAC address of the terminal device 51.

  When the filtering unit 115 acquires the MAC address and reception category information of the terminal device 51 from the control unit 111, the filtering unit 115 refers to the filtering rule table 115a and registers the “default rule” for the MAC address of the terminal device 51. In step S503, it is checked whether the Web site in the reception category can be browsed.

  When the “default rule” registered for the MAC address of the terminal device 51 allows browsing of the reception category website (S503: Yes), the filtering unit 115 indicates that the terminal device 51 has the reception category website. A notification indicating that browsing is possible is transmitted to the control unit 111.

  The control unit 111 acquires information on the website 71 from the website 71 via the Internet communication network 81. The control unit 111 transmits information on the website 71 to the terminal device 51 via the LAN port 112.

  When the terminal device 51 acquires the information on the website 71 from the router device 11, the terminal device 51 displays the screen of the website 71 on the web browser 51a of the terminal device 51 (S511). In this case, since the website 71 can be browsed with the “default rule”, it is not necessary to determine whether or not to switch the “personal rule”. Accordingly, the storage state of the application rule 115b of the filtering unit 115 remains “unregistered”.

  If the “default rule” registered for the MAC address of the terminal device 51 cannot browse the website of the reception category (S503: No), the filtering unit 115 registers the MAC address of the terminal device 51. Check all the “personal rules”. Then, the filtering unit 115 checks whether or not there is a personal rule that makes it possible to browse the reception category from among all the “personal rules” (S504).

  When there is a personal rule that allows browsing of the website of the reception category from all “personal rules” registered for the MAC address of the terminal device 51 (S504: Yes), the filtering unit 115 Information on the list of filtering rules registered for the MAC address of the device 51 is transmitted to the control unit 111 to request authentication. Even if the Web site 71 can be browsed in all “individual rules” applicable to the MAC address of the terminal device 51, the “default rule” does not permit browsing, so an authentication request is made.

  When there is no filtering rule that makes it possible to browse the website of the reception category among all the “personal rules” registered for the MAC address of the terminal device 51 (S504: No), the filtering unit 115 A notification that the device 51 cannot browse the Web site 71 is transmitted to the control unit 111. The control unit 111 notifies the terminal device 51 that the Web site 71 cannot be browsed via the LAN port 112 (S513).

  When the “default rule” allows browsing of the reception category website 71 (S503: Yes), the website 71 cannot be browsed according to all “personal rules” applicable to the MAC address of the terminal device 51. In some cases (S504: No), the authentication operation is not performed. Thereby, since it is not necessary to perform the authentication work again, the convenience of the user can be improved.

  When the control unit 111 obtains an authentication request from the filtering unit 115, the control unit 111 transmits the authentication screen data that can be browsed by the Web browser 51 a of the terminal device 51 via the LAN port 112, to the user who operates the terminal device 51. An authentication request is made to the server (S505).

Here, an authentication screen displayed on the Web browser 51a of the terminal device 51 will be described.
FIG. 7 is a diagram illustrating an authentication screen of the Web browser of the terminal device.

  As shown in FIG. 7, the authentication screen 701 confirms a form 702 that can select a filtering rule applicable to the terminal device 51 from a list of filtering rules, a password input form 703, and values of input items on the form. A confirmation button 704 for performing the operation.

  When the filtering rule selected by the user operating the terminal device 51 is the “default rule”, it is not necessary to input a password. For this reason, a password cannot be input to the password input form 703.

  Further, when the filtering rule selected by the user operating the terminal device 51 is “personal rule”, the user is prompted to input the password because the password needs to be input.

  When the filtering rule selected by the user operating the terminal device 51 is “default rule”, when the confirmation button 704 is pressed by the user, the terminal device 51 selects “default rule” for the router device 11. Notify that.

  When the filtering rule selected by the user operating the terminal device 51 is “personal rule”, when the user presses the confirm button 704, the terminal device 51 indicates that the router device 11 has selected “personal rule”. The password input to the password input form 703 (hereinafter referred to as input password) is transmitted. Thereby, the authentication work can be performed in the Web browser 51a of the terminal device 51. For this reason, it is not necessary to install dedicated software for the authentication work in the terminal device 51.

  The control unit 111 confirms a response from the terminal device 51 via the LAN port 112, which is a response to the authentication request for the user (S506). If there is a response from the terminal device 51 (S506: Yes), the control unit 111 determines whether the filtering rule selected by the terminal device 51 is a “personal rule” (S507).

  When the filtering rule selected by the terminal device 51 is a “personal rule” (S507: Yes), the control unit 111 inputs the MAC address of the terminal device 51, the selected “personal rule”, and the input “input” The password ”is transmitted to the authentication unit 116.

Here, the password table 116a will be described.
FIG. 8 is a diagram illustrating a password table.

  As shown in FIG. 8, in the password table 116a, a MAC address, a “personal rule” applicable to the MAC address, and a “password” corresponding to the MAC address are registered. Such information is registered in advance by the user using the WebGUI. For example, when a user registers a personal rule, password registration is also performed. The filtering rule registered in the password table 116a is a “personal rule”. The “default rule” is not registered in the password table 116a because it does not require a password input.

  The authentication unit 116 acquires the MAC address of the terminal device 51, the selected “personal rule”, and the “input password” input by the user from the control unit 111. Then, the authentication unit 116 compares the character string “input password” with the character string “password” corresponding to the MAC address in the password table 116a. Then, the authentication unit 116 confirms whether or not this authentication is successful (S508). Then, authentication unit 116 transmits the authentication result to control unit 111.

  The control unit 111 acquires an authentication result from the authentication unit 116. If the authentication is successful (S508: Yes), the control unit 111 notifies the filtering unit 115 that the filtering rule applied to the MAC address of the terminal device 51 is the “personal rule”.

  The filtering unit 115 stores the filtering rule to be applied to the MAC address of the terminal device 51 as the “individual rule” in the application rule 115b (S509). Then, the filtering unit 115 notifies the control unit 111 to that effect. When acquiring the notification to that effect from the filtering unit 115, the control unit 111 proceeds to processing for determining whether or not a website can be browsed in S <b> 901 described later.

  The control unit 111 confirms the response from the terminal device 51 via the LAN port 112 (S506). When the filtering rule selected by the terminal device 51 is the “default rule” (S507: No), the control unit sets the filtering rule applied to the MAC address of the terminal device 51 as the “default rule”. Is notified to the filtering unit 115.

  In addition, even when the authentication fails in S508 described above and the authentication result is acquired from the authentication unit 116 (S508: No), the control unit 111 sets the filtering rule to be applied to the MAC address of the terminal device 51 as “ The filtering unit 115 is notified that the “default rule” is set.

  When the filtering unit 115 obtains from the control unit 111 a notification that the filtering rule to be applied to the MAC address of the terminal device 51 is the “default rule”, the filtering unit 115 sets the filtering rule to be applied to the MAC address of the terminal device 51 to “default”. It is stored in the application rule 115b as “Rule” (S512). Then, the filtering unit 115 transmits a notification to the control unit 111 that the terminal device 51 cannot browse the Web site 71 of the reception category.

  The control unit 111 notifies the terminal device 51 through the LAN port 112 that the Web site 71 is not viewable (S513).

  When the filtering rule is stored as the “default rule” or “personal rule” in the application rule 115b, the filtering rule is applied for a certain period of time (hereinafter referred to as a timeout time). If it is within this time-out period, it is determined whether or not the category of the website 71 can be browsed based on the filtering rules stored in the application rule 115b. For this reason, as long as it is within the timeout period, it is not necessary to perform the authentication work every time the user accesses the website. That is, the currently applied filtering rule is applied to the category of the website 71 requested by the terminal device 51 identified by the MAC address for a certain time, and authentication for the terminal device 51 is not performed within this certain time. Not performed.

  If there is no website access request from the terminal device 51 within the timeout period, the filtering rule stored in the application rule 115b may be automatically reset to the “unregistered” state.

  In addition, as a condition for automatically resetting the filtering rule stored in the application rule 115b to the “unregistered” state, a part or all of the power supply of the terminal device 51 is in a restricted state. It may be an opportunity.

  Further, after the filtering rule stored in the application rule 115b is reset to the “unregistered” state, when the user makes a website access request again, which filtering rule is given to the terminal device 51. A determination is made as to whether to apply.

  In addition, when the filtering rule stored in the application rule 115b is “default rule” or “personal rule”, when the user switches the filtering rule, the user accesses the Web GUI and switches the filtering rule in the Web GUI. Good. In this case, when the filtering rule is switched to the “personal rule”, authentication with a password is required again. For example, when another input password is input to the terminal device 51 and another browsing request is received from the terminal device 51, the router device 11 acquires a MAC address and another input password from the terminal device 51. Then, the router device 11 specifies another filtering rule determined to be applicable based on the MAC address acquired from the terminal device 51 and another input password. Then, the router device 11 switches the filtering rule to another filtering rule. Further, for example, the user operates the terminal device 51 to input another input password and select “other personal rule”. If the other input password matches the password specified by the “other personal rule” in the password table 116a with the MAC address of the terminal device 51, the terminal device 51 requests access to the Web site. The filtering rule applied to the category may be switched to information on whether or not the category corresponding to the other personal rule can be browsed.

Next, a process for determining whether or not a website can be browsed according to the first embodiment will be described.
FIG. 9 is a flowchart illustrating the operation of the URL filtering rule according to the first embodiment.

  The control unit 111 transmits the MAC address and reception category of the terminal device 51 to the filtering unit 115. Then, the control unit 111 inquires of the filtering unit 115 whether or not the reception category website can be browsed in the filtering rule stored in the application rule 115b.

  The filtering unit 115 refers to the application rule 115b and acquires the filtering rule applied to the MAC address of the terminal device 51. Then, the filtering unit 115 refers to the filtering rule table 115a and confirms whether or not the reception category website can be browsed in the filtering rule applied to the MAC address of the terminal device 51 (S901).

  When the reception category website can be browsed (S901: Yes), the filtering unit 115 notifies the control unit 111 that the terminal device 51 can browse the reception category website.

  The control unit 111 acquires data from the Web site 71 via the Internet communication network 81. Then, the control unit 111 transmits the data acquired from the website 71 to the terminal device 51 via the LAN port 112.

  The terminal device 51 acquires data of the website 71 from the router device 11. Then, the terminal device 51 displays the screen of the website 71 on the web browser 51a (S902).

  When the reception category website cannot be browsed (S901: No), the filtering unit 115 notifies the control unit 111 that the terminal device 51 cannot browse the reception category website. The control unit 111 notifies the terminal device 51 through the LAN port 112 that the web site 71 cannot be browsed (S903).

Next, a case where the user newly adds and registers a “personal rule” will be described.
FIG. 10A is a diagram illustrating a default rule.
FIG. 10B is a diagram illustrating the personal rule 1.
FIG. 10C is a diagram illustrating the personal rule 2.

  When a “personal rule” is newly added to the filtering rules applicable to the terminal device 51, the “default rule” applicable to the terminal device 51 is a safe and secure way for all users to browse the website 71. It is necessary to be able to

  As shown in FIG. 10A, the setting of the “default rule” registered as the filtering rule enables browsing of websites in categories such as violence and encounters. In this state, consider a case where a “personal rule 2” for a child as shown in FIG. 10C is newly registered as a filtering rule. Since “Personal Rule 2” is for children, it is set that Web sites in categories such as violence and encounters cannot be browsed. In such a case, when the “default rule” is applied as an application rule, a website of a category such as violence or encounter can be browsed.

  In order to prevent this, a category that cannot be browsed by the “personal rule” is automatically set as a category that cannot be browsed by the “default rule”. This setting may be performed when the user newly registers a “personal rule”.

  For example, when “Personal Rule 2” is newly registered, it is a category that can be browsed by “Default Rule” among violence, encounter, and adult that are categories that cannot be browsed by “Personal Rule 2” Violations and encounters that are may be automatically disabled. As a result, the category set as “not viewable” in the “personal rule” is set as not viewable even in the “default rule”.

  In this way, when a personal rule is newly added to the router device, a category set as unviewable by the personal rule is automatically set as unviewable even by a default rule applicable to the terminal device. Thereby, all users can browse the website safely and securely.

  In the first embodiment, a plurality of filtering rules are registered in advance for one terminal device that communicates with the router device, and further, user password authentication is performed when the user uses the terminal device. This makes it possible to easily apply different URL filtering rules for each user.

  In addition, when switching the filtering rule applied to one terminal device to another filtering rule, the filtering rule is switched by password authentication without using an auxiliary storage device such as a USB memory. Thereby, switching of a filtering rule becomes easy and does not take time.

  In addition, since an auxiliary storage device such as a USB memory is not required, the cost is lower than when an auxiliary storage device such as a USB memory is used.

  Also, categories that cannot be browsed by the “personal rule” are automatically set to be unviewable by the “default rule”. Thereby, all users can browse the website safely and securely.

  As described above, according to the first embodiment, when one information communication terminal is shared by a plurality of users, a router device that can easily apply different URL filtering rules for each user and filtering of the router device A method can be provided.

[Embodiment 2]
Next, a second embodiment will be described.

  In the first embodiment, when a personal rule is registered for each MAC address in the router device 11 and a website is accessed from the terminal device 51, the router device 11 registers a personal rule for the MAC address of the terminal device 51. If the personal rule is registered, the personal rule is applied to the terminal device 51 through the authentication process.

  In the second embodiment, the “individual rule” registered in the filtering rule table 115a of the router device 11 can be commonly applied to all the MAC addresses registered in the MAC address table 114a of the router device 11. Personal rules ”. That is, the “personal rule” registered in the filtering rule table 115a of the router device 11 is not a personal rule applied to a specific MAC address.

FIG. 11 is a block diagram illustrating a router device according to the second embodiment.
As shown in FIG. 11, the router device 21 according to the second embodiment is different from the router device 11 shown in FIG. 1 in that the filtering rule table 115a is the default rule table 215a1 and the personal rule table 215a2, and the password table 116a is the user. The ID / password table 216a is changed.

  In the default rule table 215a1, a default rule is registered for each MAC address registered in the MAC address table 114a. The default rule registered in the default rule table 215a1 is registered in advance by the user. For example, when a user registers a MAC address, a default rule to be applied to the MAC address is set.

  In the personal rule table 215a2, personal filtering rules applicable to all MAC addresses registered in the MAC address table 114a are registered. The personal rule registered in the personal rule table 215a2 is registered in advance by the user.

  The user ID / password table 216a manages user IDs and passwords for each individual rule. The user ID and password are registered in advance by the user, and the user ID and password are registered when the personal rule is registered.

  The processing from acquisition of a website access request to inquiry of a category in the second embodiment is the same as that in the first embodiment, and will not be described.

  FIG. 12 is a flowchart illustrating the operation of the URL filtering rule according to the second embodiment.

  When the category of the website 71 of the URL requested by the terminal device 51 is determined, the control unit 111 passes the MAC address information of the terminal device 51 to the filtering unit 215 of the filtering information storage unit 217 as shown in FIG. The terminal device 51 is inquired about the filtering rule currently applied.

  The filtering unit 215 refers to the application rule 215b and confirms the filtering rule currently applied to the terminal device 51 (S1201).

  When the filtering rule stored in the application rule 215b is “unregistered” (S1201: Yes), the filtering unit 215 indicates that the filtering rule stored in the application rule 215b in the control unit 111 is “unregistered”. Notify that there is.

  When the filtering rule stored in the application rule 215b is not in an “unregistered” state (S1201: No), the application rule 215b stores “default rule” or “personal rule”. Therefore, the filtering unit 215 notifies the control unit 111 that the filtering rule stored in the application rule 215b is the “default rule” or the “personal rule”. When the control unit 111 acquires this notification, the control unit 111 proceeds to the above-described processing for determining whether or not the website can be browsed in S901.

  When the control unit 111 receives a notification from the filtering unit 215 that the filtering rule stored in the application rule 215 b is “unregistered”, the control unit 111 acquires the MAC address of the terminal device 51 and the category server 61 from the filtering unit 215. The received reception category information is transmitted to the filtering unit 215.

Here, the default rule table 215a1 will be described with reference to FIG.
FIG. 13 is a diagram illustrating a default rule table.
As shown in FIG. 13, in the default rule table 215a1, information on a default rule applied to the MAC address and the MAC address is registered, and these information are registered in advance by the user himself using WebGUI. .

  When the filtering unit 215 acquires the MAC address and reception category information of the terminal device 51, the filtering unit 215 refers to the default rule table 215 a 1 and uses the default rule registered for the MAC address of the terminal device 51 to receive the reception category website. It is confirmed whether or not can be browsed (S1202).

  In the default rule registered with respect to the MAC address of the terminal device 51, when the website of the reception category can be browsed (S1202: Yes), the filtering unit 215 browses the website of the reception category of the terminal device 51. A notification that it is possible is transmitted to the control unit 111. The control unit 111 acquires data from the Web site 71 via the Internet communication network 81 and transmits the acquired data to the terminal device 51 via the LAN port 112.

  When the terminal device 51 acquires the data of the website 71 from the router device 11, the screen of the website 71 is displayed by the web browser 51a (S1209). In this case, since the Web site 71 can be browsed with the default rule, it is not necessary to determine whether or not to switch the personal rule. The storage state of the application rule 215b of the filtering unit 215 remains “unregistered”.

Here, the personal rule table 215a2 will be described with reference to FIG.
FIG. 14 is a diagram illustrating a personal rule table.
As shown in FIG. 14, personal rule information is registered in the personal rule table 215a2. This personal rule can be applied to any terminal device having a MAC address registered in the MAC address table 114a. The personal rule is registered in advance by the user using the Web GUI.

  In the default rule registered with respect to the MAC address of the terminal device 51, when the website of the reception category cannot be browsed (S1202: No), the filtering unit 215 selects all of the registered in the personal rule table 215a2. Check filtering rules. Then, the filtering unit 215 confirms whether or not there is a personal rule that allows the reception category to be browsed (S1203).

  When there is a personal rule that allows browsing of the received category website from all the personal rules registered in the personal rule table 215a2 (S1203: Yes), the filtering unit 215 requests the control unit 111 to perform authentication. To do.

  When there is no personal rule that allows browsing of the website of the reception category among all the personal rules registered in the personal rule table 215a2 (S1203: No), the filtering unit 215 indicates that the terminal device 51 is the website 71. Is sent to the control unit 111. The control unit 111 notifies the terminal device 51 that the web site 71 cannot be browsed via the LAN port 112 (S1211).

  Thereby, when the browsing of the website 71 is possible with the default rule, or when the website 71 cannot be browsed with all the personal rules, the authentication work may not be performed.

  When the control unit 111 receives the authentication request from the filtering unit 215, the control unit 111 transmits the authentication screen data that can be viewed on the Web browser 51 a to the terminal device 51 via the LAN port 112, and operates the terminal device 51. An authentication request is made to (S1204).

Here, an authentication screen displayed on the Web browser 51a of the terminal device 51 will be described.
FIG. 15 is a diagram illustrating an authentication screen of the Web browser of the terminal device.
As shown in FIG. 15, the authentication screen 1501 is used to confirm a form 1502 for selecting whether to use a default rule or a personal rule, a user ID input form 1503, a password input form 1504, and input item values on the form. A confirmation button 1505 is provided.

  When the user operating the terminal device 51 selects the default rule, it is not necessary to input the password, and therefore the password cannot be input to the password input form 1504. When the user operating the terminal device 51 selects a default rule and presses the confirm button 1505, the terminal device 51 notifies the router device 11 that the default rule has been selected.

  When the user operating the terminal device 51 selects the personal rule, the user ID and password must be input, and the user is prompted to input the user ID and password. When the user operating the terminal device 51 selects a personal rule and presses the confirm button 1505, the terminal device 51 is input to the user ID input form 1503 that the personal rule has been selected. The user ID (hereinafter referred to as the input user ID) and the input password input in the password input form 1504 are transmitted to the router device 11.

  As a result, the authentication work can be performed on the Web browser 51a, so that it is not necessary to install the dedicated software of this system in the terminal device 51.

Next, the operation of the URL filtering rule will be described.
When acquiring a response to the authentication request from the terminal device 51 via the LAN port 112 (S1205: Yes), the control unit 111 determines whether the filtering rule selected by the terminal device 51 is a personal rule ( S1206).

  When the filtering rule selected by the terminal device 51 is a personal rule (S1206: Yes), the control unit 111 transmits the input user ID and the input password to the authentication unit 216.

Here, the user ID / password table 216a will be described.
FIG. 16 is a diagram illustrating a user ID / password table. As shown in FIG. 16, the user ID / password table 216a is registered with user IDs and passwords corresponding to the personal rules registered in the personal rule table 215a2. Has been. These pieces of information are registered by the user in advance using the Web GUI. For example, when a user registers a personal rule, a user ID and password are also registered.

  The filtering rule registered in the user ID / password table 216a is only a personal rule. A default rule that does not require user ID and password input is not registered in the user ID / password table 216a.

Next, the operation of the URL filtering rule will be described.
Upon obtaining the input user ID and the input password from the control unit 111, the authentication unit 216 refers to the user ID / password table 216a. The authentication unit 216 matches the input user ID input by operating the terminal device 51 with the user ID in the user ID / password table 216a, and the input password and user ID input by the user operating the terminal device 51. It is checked whether the passwords in the password table 216a match and there is a personal rule corresponding to them. That is, the authentication unit 216 confirms whether there is a personal rule that matches the input user ID and the input password acquired from the control unit 111. If there is a matching personal rule as a result of the confirmation, the authentication unit 216 transmits to the control unit 111 information indicating that the authentication has been successful and “personal rule that has been successfully authenticated”. The personal rule that has been successfully authenticated is, for example, “personal rule 1” in the user ID / password table 216a. Thereby, the filtering rule applied to the terminal device 51 is specified. If there is no personal rule that matches the user ID and the input password as a result of the confirmation, the authentication unit 216 transmits information indicating that the authentication has failed to the control unit 111.

  When the control unit 111 acquires the authentication result from the authentication unit 216 and succeeds in the authentication with the user ID and the password (S1207: Yes), the control unit 111 sets the filtering rule to be applied to the MAC address of the terminal device 51. The filtering unit 215 is notified of the “personal rule”. That is, the control unit 111 notifies the filtering unit 215 that the “personal rule” specified by the user ID and password authenticated in the user ID / password table 216 a is applied to the terminal device 51.

The filtering unit 215 stores the filtering rule to be applied to the MAC address of the terminal device 51 as the “individual rule” in the application rule 215b (S1208).
The filtering unit 215 notifies the control unit 111 that the filtering rule applied to the MAC address of the terminal device 51 is the “personal rule”. When the control unit 111 acquires this notification, the control unit 111 proceeds to the above-described processing for determining whether or not the website can be browsed in S901. Then, information on whether or not browsing of the category of “personal rule” specified by the user ID and password authenticated in the user ID / password table 216 a is applied to the terminal device 51.

  The control unit 111 acquires a response to the authentication request from the terminal device 51 via the LAN port 112 (S1205: Yes), and when the filtering rule selected by the terminal device 51 is a default rule (S1206: No), The control unit 111 notifies the filtering unit 215 that the filtering rule applied to the MAC address of the terminal device 51 is the “default rule”.

  In addition, the control unit 111 acquires the authentication result from the authentication unit 216, and also when the authentication fails (S1207: No), the control unit 111 sets the filtering rule to be applied to the MAC address of the terminal device 51 as “default”. The filtering unit 215 is notified of the “rule”.

  The filtering unit 215 acquires from the control unit 111 a notification that the filtering rule applied to the MAC address of the terminal device 51 is the “default rule”. The filtering unit 215 stores the filtering rule applied to the MAC address of the terminal device 51 as the “default rule” in the application rule 215b (S1210). The filtering unit 215 transmits a notification to the control unit 111 that the terminal device 51 cannot browse the reception category website.

  The control unit 111 notifies the terminal device 51 that the web site 71 cannot be browsed via the LAN port 112 (S1211).

  The flow of processing for determining whether or not a website can be browsed according to the filtering rule stored in the application rule 215b is the same as that described with reference to FIG.

  As described above, in the second embodiment, the user ID and password are registered for each individual rule, and the user ID and password are requested to be input at the time of authentication. Thereby, it is possible to register a personal rule applicable to any terminal device having a MAC address registered in the router device.

  As described above, the personal rule registered in the router device 11 can be made a common personal rule applicable to the terminal devices having all the MAC addresses registered in the MAC address table 114a by the operation described above.

  Note that the present invention is not limited to the above-described embodiment, and can be changed as appropriate without departing from the spirit of the present invention.

DESCRIPTION OF SYMBOLS 11 ... Router apparatus 51 ... Terminal device 61 ... Category server 61a ... Category database 71 ... Web site 81 ... Internet communication network 111 ... Control part 112 ... LAN port 113 ... WAN port 114 ... MAC address identification part 114a ... MAC address table 115 ... Filtering unit 115a ... Filtering rule table 115b ... Application rule 116 ... Authentication unit 116a ... Password table 117 ... Filtering information storage unit 215 ... Filtering unit 215a1 ... Default rule table 215a2 ... Personal rule table 215b ... Application rule 216 ... Authentication unit 216a ... User ID / password table 217 ... Filtering information storage unit 701 ... Authentication screen 702 ... Form 703 ... Pass Word input form 704 ... Confirm button 1501 ... Authentication screen 1502 ... Form 1503 ... User ID input form 1504 ... Password input form 1505 ... Confirm button

Claims (6)

A router device connected to a terminal device and an external communication network, and transmitting the information to the terminal device in response to a browsing request for information on the external communication network from the terminal device,
Filtering information that stores a terminal identifier that identifies the terminal device, a plurality of filtering rule information that imposes different browsing restrictions, and authentication information that enables each of the plurality of filtering rule information to be associated with each other. A storage unit;
When receiving a browsing request from the terminal device, the terminal identifier and authentication information are acquired from the terminal device, authentication work is performed using the authentication information, and it is determined that the terminal identifier and the authentication information are applicable. A filtering processing unit that specifies a filtering rule, determines whether information can be browsed based on the browsing request based on the specified filtering rule, and executes a filtering process;
Equipped with a,
The plurality of filtering rule information includes a default rule corresponding to the terminal identifier and a personal rule corresponding to a user who uses the terminal device,
The filtering processing unit does not perform the authentication work when the information requested for browsing in the default rule is viewable, or when the information requested for viewing in the personal rule is not viewable,
Router device. When other authentication information is input to the terminal device and another browsing request is received from the terminal device, the terminal identifier and the other authentication information are acquired from the terminal device, and the terminal identifier and the other Identify other filtering rules determined to be applicable by the authentication information of and switch from the filtering rules to the other filtering rules.
The router device according to claim 1. The filtering process based on the specified filtering rule is executed for a certain period of time.
The router device according to claim 1 or 2. A router device connected to a terminal device and an external communication network, and transmitting the information to the terminal device in response to a browsing request for information on the external communication network from the terminal device,
A filtering information storage unit that stores a plurality of filtering rule information that imposes different browsing restrictions, and a user identifier that enables each of the plurality of filtering rule information to be associated with each other;
When a browsing request is received from the terminal device, the user identifier is acquired from the terminal device, authentication is performed using the user identifier, a filtering rule determined to be applicable by the user identifier is identified , and the identification is performed. A filtering processing unit that determines whether information can be browsed according to the browsing request based on the filtering rule that is performed, and executes a filtering process;
With
The plurality of filtering rule information includes a default rule corresponding to a terminal identifier for identifying the terminal device, and a personal rule corresponding to a user who uses the terminal device,
The filtering processing unit does not perform the authentication work when the information requested for browsing in the default rule is viewable, or when the information requested for viewing in the personal rule is not viewable,
Router device. A filtering method of a router device connected to a terminal device and an external communication network and transmitting the information to the terminal device in response to a browsing request for information on the external communication network from the terminal device,
A step of storing a terminal identifier for identifying the terminal device, a plurality of filtering rule information imposing different browsing restrictions, and authentication information for making each of the plurality of filtering rule information adaptable to each other ,
When receiving a browsing request from the terminal device, the terminal identifier and authentication information are acquired from the terminal device, authentication work is performed using the authentication information, and it is determined that the terminal identifier and the authentication information are applicable. Identifying a filtering rule, determining whether information can be browsed based on the browsing request based on the identified filtering rule, and executing a filtering process;
Equipped with a,
The plurality of filtering rule information includes a default rule corresponding to the terminal identifier and a personal rule corresponding to a user who uses the terminal device,
The step of executing the filtering process does not perform the authentication work when the information requested to be browsed in the default rule is viewable, or when the information requested to be browsed in the personal rule is not viewable. Including that,
Router device filtering method. A filtering method of a router device connected to a terminal device and an external communication network and transmitting the information to the terminal device in response to a browsing request for information on the external communication network from the terminal device,
Storing a plurality of filtering rule information that imposes different browsing restrictions and a user identifier for making each of the plurality of filtering rule information adaptable, in association with each other;
When a browsing request is received from the terminal device, the user identifier is acquired from the terminal device, authentication is performed using the user identifier, a filtering rule determined to be applicable by the user identifier is identified , and the identification is performed. Determining whether or not to allow browsing of information according to the browsing request based on the filtering rules performed, and executing a filtering process;
Equipped with a,
The plurality of filtering rule information includes a default rule corresponding to a terminal identifier for identifying the terminal device, and a personal rule corresponding to a user who uses the terminal device,
The step of executing the filtering process does not perform the authentication work when the information requested to be browsed in the default rule is viewable, or when the information requested to be browsed in the personal rule is not viewable. Including that,
Router device filtering method.

Images