JP6768732B2 - Information processing equipment, information processing programs, recording media and information processing methods - Google Patents

Description

The present invention relates to an information processing apparatus, an information processing program, a recording medium, and an information processing method.

E-mails received from others may contain URLs. URLs are sometimes associated with dangerous sites, and if the recipient inadvertently clicks on them, there is a risk of virus infection. Although various mail management methods have been proposed (for example, Patent Document 1), such a problem cannot be dealt with.

Japanese Unexamined Patent Publication No. 2012-78922

The present invention has been made in view of such problems, and an object of the present invention is to provide an information processing device, an information processing program, a recording medium, and an information processing method capable of appropriately handling an e-mail including a URL. Is to provide.

According to one aspect of the present invention, a URL acquisition unit that acquires a URL included in an e-mail, a category determination unit that determines a category of the URL, and a display control unit that displays a screen based on the result of the determination. An information processing device is provided.

The category determination unit may determine whether the URL is a harmful category, a non-harmful category, or cannot be categorized.

The information processing device may include a mail control unit that isolates e-mails containing URLs that are determined to be harmful categories or cannot be categorized.

It may be provided with a mail control unit that quarantines an e-mail that includes a URL that is determined to be a harmful category or cannot be categorized and whose sender is not registered in advance.

The category determination unit makes a determination by referring to a category database that can be updated with the URL and the category associated with the URL, and the category determination unit considers the update of the category database and makes it impossible to categorize. The determined URL may be determined again later.

When the URL is determined not to be harmful by the re-determination, the mail control unit may determine that an e-mail containing the URL can be transmitted.

According to another aspect of the present invention, a mail control unit that acquires category information indicating a result of determining a category of a URL included in an e-mail, and a display control unit that displays a screen based on the category information. An information processing device is provided.

The display control unit may display a screen in which the URL and the determination result of the URL are associated with each other.

The display control unit may display a screen in which the e-mail and the determination result of the URL included in the e-mail are associated with each other.

According to another aspect of the present invention, an information processing program to be installed in an information processing device, wherein the information processing device in which the information processing program is installed acquires a URL included in an e-mail and the URL. An information processing program for performing determination of the category of the above and displaying a screen based on the result of the determination is provided.

According to another aspect of the present invention, the recording medium on which the information processing program to be installed in the information processing device is recorded, and the information processing device in which the information processing program is installed acquires the URL included in the e-mail. A recording medium for performing the determination of the category of the URL and displaying the screen based on the result of the determination is provided.

According to another aspect of the present invention, the URL acquisition unit acquires the URL included in the e-mail, the category determination unit determines the category of the URL, and the display control unit determines the URL. An information processing method is provided that comprises displaying a screen based on the result of.

According to another aspect of the present invention, the information processing program installed in the information processing device, and the information processing device in which the information processing program is installed, shows the result of determining the category of the URL included in the e-mail. An information processing program for acquiring category information and displaying a screen based on the category information is provided.

According to another aspect of the present invention, the recording medium on which the information processing program to be installed in the information processing device is recorded, and the information processing device in which the information processing program is installed sets the category of URL included in the e-mail. A recording medium for acquiring category information indicating a determination result and displaying a screen based on the category information is provided.

According to another aspect of the present invention, the mail control unit acquires category information indicating the result of determining the category of the URL included in the e-mail, and the display control unit displays a screen based on the category information. Information processing methods are provided that include and display.

The URL or the content associated with the URL can be grasped without accessing the URL included in the e-mail.

The block diagram which shows the schematic structure of the information processing system which concerns on one Embodiment. The figure which shows the configuration example of the category database. The flowchart which shows an example of the processing operation of a server 2. The flowchart which shows an example of the processing operation of a server 2. The figure which shows an example of the category information screen displayed on the display 22. The figure which shows another example of the category information screen displayed on the display 22.

Hereinafter, embodiments of an information processing apparatus, an information processing program, a recording medium, and an information processing method according to an embodiment of the present invention will be described with reference to the drawings. In this embodiment, "or" also includes the meaning of "and". That is, in the present embodiment, A or B means any of A, B and A and B.

FIG. 1 is a block diagram showing a schematic configuration of an information processing system according to an embodiment. The information processing system includes one or more terminal devices 1 and a server 2.

The terminal device 1 can be used by each user and may be any computer (information processing device), but is typically a desktop personal computer, a notebook personal computer, a smartphone, a tablet, or the like.

The terminal device 1 has an input interface 11 and a display 12. The input interface 11 is a keyboard, a mouse, a touch panel, or the like, and accepts user operations on the terminal device 1. The display 12 displays a screen for creating an e-mail, a screen showing the received e-mail, a screen based on the category information of the URL described later, and the like.

Further, the terminal device 1 has a mail control unit 13 and a display control unit 14. A part or all of these may be configured by hardware, or may be realized by executing a program (for example, mail viewing software) installed in the terminal device 1 by a processor (not shown).

The mail control unit 13 transmits an e-mail created by a user via the input interface 11, receives an e-mail from the server 2, and acquires category information. The mail control unit 13 may have a function of analyzing the contents of the e-mail and blocking the e-mail that should not be received.

The display control unit 14 has a screen for creating an e-mail, a screen showing a received e-mail, and URL category information according to a user operation on the input interface 11 or a control from the mail control unit 13. A screen or the like based on the above is displayed on the display 12.

The server 2 can be used by a system administrator, may be any computer (for example, a mail server), and is composed of one or more devices. When the server 2 is composed of a plurality of devices, the devices constituting the server 2 may be installed in different rooms or different places, and a part of the server 2 and the rest of the server 2 are arranged in a remote place. May be good.

The server 2 has an input interface 21 and a display 22. The input interface 21 is a keyboard, a mouse, a touch panel, or the like, and accepts user operations on the server 2. The display 22 displays a screen or the like based on the category information of the URL.

Further, the server 2 has a storage unit 23. The storage unit 23 stores a category database, a white list, quarantined mail, and the like.

FIG. 2 is a diagram showing a configuration example of a category database. In the category database, the URL and the category of the URL are associated with each other. The category is a crusher site, a threat information site, an IT information / service site, a news site, etc., and may be identified by a category number. In addition, whether or not each category is harmful is set. It should be noted that which category is harmful may be predetermined, or may be arbitrarily set by the administrator via the input interface 21.

Of course, not all URLs are registered in the category database, and some URLs are unregistered and have no category set (hereinafter, also referred to as "uncategorized URLs"). Therefore, it is desirable that the category database is updated from time to time and URLs are added. The update of the category database may be performed by the administrator via the input interface 21 or may be performed under external control.

Returning to FIG. 1, the whitelist in the storage unit 23 is a sender of an e-mail registered in advance as being considered safe. The source can be specified arbitrarily, for example, it may be specified by an e-mail address, a domain, or an IP address. The whitelist may be arbitrarily set by the administrator via the input interface 21, or may be arbitrarily set by each user via the input interface 11.

Further, the server 2 has a mail control unit 24, a URL acquisition unit 25, a category determination unit 26, and a display control unit 27. Some or all of these may be configured by hardware, or may be realized by executing a program (for example, mail filtering software) installed on the server 2 by a processor (not shown).

The mail control unit 24 controls e-mails, specifically, receives e-mails from the terminal device 1, sends e-mails to the terminal device 1, and sequesters the e-mails in the storage unit 23 (holds them in the mail queue). )

The URL acquisition unit 25 acquires the URL included in the received e-mail. Specifically, it is desirable that the URL acquisition unit 25 acquires the URL from the subject, body, and attached file (including the URL inside the macro that is not visualized) of the received e-mail, but it is included in a part of these. You may get only the URL.

The category determination unit 26 refers to the category database stored in the storage unit 23, and determines the category of the URL acquired by the URL acquisition unit 25. Specifically, when the URL acquired by the URL acquisition unit 25 is registered in the category database, the category determination unit 26 determines the category of the URL and whether it is a harmful category or a non-harmful category. .. On the other hand, if the URL acquired by the URL acquisition unit 25 is not registered in the category database, that is, for an uncategorized URL, the category determination unit 26 determines that the URL cannot be categorized. Then, the category determination unit 26 generates category information indicating the determination result.

The display control unit 27 causes the display 22 to display a screen according to the determination result by the category determination unit 26 based on the category information.

FIG. 3 is a flowchart showing an example of the processing operation of the server 2, and shows the processing operation performed when receiving an e-mail.

First, the mail control unit 24 receives an e-mail from the outside (step S1). The e-mails received in step S1 and then processed are the e-mails whose recipient is the user of the terminal device 1 in the information processing system shown in FIG. 1 and the e-mails whose sender is the user of the terminal device 1. Includes any email. Then, the URL acquisition unit 25 acquires the URL included in the e-mail (step S2). However, the URL is not accessed. When a plurality of URLs are included in the e-mail, it is desirable that the URL acquisition unit 25 acquires all the URLs, but first, the explanation will be continued assuming that one URL is included.

Subsequently, the category determination unit 26 determines the category of the URL acquired by the URL acquisition unit 25, and generates category information indicating the determination result (step S3). That is, if the URL is not registered in the category database (NO in step S4), the category determination unit 26 determines that the URL cannot be categorized (step S5). On the other hand, when the URL is registered in the category database (YES in step S4), the category determination unit 26 can determine whether the category of the URL is harmful or not harmful.

If the URL is determined to be uncategorizable (step S5) or harmful (YES in step S6), the mail control unit 24 refers to the whitelist and determines whether the sender of the e-mail is registered in the whitelist. Determine (step S7). At this time, it is desirable to consider the possibility that the source is spoofed. The mail control unit 24 quarantines the e-mail if the sender of the e-mail is not registered in the whitelist (step S8), and determines that the e-mail can be sent to the destination if it is registered in the whitelist. (Step S9).

On the other hand, when it is determined that the URL category is not harmful (NO in step S6), the mail control unit 24 determines that the e-mail can be sent to the destination (step S9).

If the e-mail contains a plurality of URLs, category determination is performed for each URL. Then, if at least one URL is uncategorizable or harmful, the process may proceed to step S7, and if all the URL categories are not harmful, the process may proceed to step S9.

The category information generated by the above may be transmitted from the mail control unit 24 to the terminal device 1 at an arbitrary timing, for example, when an e-mail is transmitted or when requested by the terminal device 1. The category information indicates the result of the category determination. For example, the URL may be associated with the category determination result of the URL, or the e-mail and the category determination result of the URL included in the e-mail may be associated with each other. The e-mail, the URL included in the e-mail, and the category determination result of the URL may be associated with each other.

Although step S7 can be omitted, by providing this process, the quarantined e-mail can be transmitted without the judgment of the administrator, so that the burden on the administrator can be reduced. Further, instead of / in addition to the registration to the whitelist in step S7, the administrator may confirm the individually quarantined e-mail and allow the transmission, or each user confirms the individually quarantined e-mail. You may allow the transmission.

FIG. 4 is a flowchart showing an example of the processing operation of the server 2, and shows the processing operation for the e-mail isolated in step S8 of FIG. This processing operation is performed at a frequency that takes into consideration the update timing of the category database. For example, if the category database is updated once a day, the processing operation shown in FIG. 4 may be performed once a day at a fixed time.

The category determination unit 26 determines the category of the URL included in the quarantined email (step S21). If the URL is not registered in the category database as usual (NO in step S22), the category determination unit 26 determines that the URL cannot be categorized yet (step S23). In this case, the mail control unit 24 maintains the isolation of the e-mail (step S24).

On the other hand, when the URL is registered in the category database due to the update of the category database (YES in step S22), the category determination unit 26 can determine whether the category of the URL is harmful or not, and can update the category information. .. As a result of the determination, when the URL category is determined to be harmful (YES in step S25), the mail control unit 24 maintains the isolation of the e-mail (step S24). As a result of the determination, if it is determined that the URL category is not harmful (NO in step S25), the mail control unit 24 determines that the e-mail can be sent to the destination and redelivers it (step S26).

Even if it is determined in step S9 of FIG. 3 or step S26 of FIG. 4 that transmission is possible, transmission may not be possible due to other reasons. Further, even if it is actually transmitted, it may be blocked by the mail control unit 13 on the terminal device 1 side.

FIG. 5 is a diagram showing an example of a category information screen displayed on the display 22, and is displayed based on the category information generated by the determination in step S3 of FIG. 3 or step S21 of FIG. On the category information screen, the acquired URL is associated with the category (the one that cannot be categorized is, for example, "uncategorized URL"), and it is shown whether or not each category is harmful.

By displaying such a category information screen, it is possible to grasp the category of each URL without actually accessing the URL included in the e-mail, and it is also possible to know whether or not it is harmful.

FIG. 6 is a diagram showing another example of the category information screen displayed on the display 22. On this category information screen, the e-mail and the determination result of the URL included in the e-mail are associated and displayed in a list. For e-mail, for example, the date and time of receipt, the e-mail address of the sender and the destination, the subject, and the name of the attached file are shown. In the example of FIG. 6, the first received e-mail contains a non-categorizable URL and a harmful category URL, and the second e-mail contains a non-categorizable URL and a harmful category URL. Indicates that there is no such thing.

The category information screen shown in FIGS. 5 and 6 is updated as the category information is updated. For example, even if it is displayed on the category information screen as uncategorizable at a certain point, if the category can be determined by being registered in the category database after that, when the category information screen is displayed after that, the determined category is displayed. Will be done.

In addition, the mail search function may be able to search on the condition of "e-mail containing a URL of a harmful category", "e-mail containing a URL of a non-harmful category", and "e-mail that cannot be categorized". By doing so, it is possible to extract e-mails that require attention. Further, a specific category may be specified (for example, specified by the category number shown in FIG. 2) instead of simply being a harmful category or a non-harmful category, and an e-mail containing the URL of that category may be extracted.

By transmitting the category information to the terminal device 1, the screen as shown in FIGS. 5 and 6 may be displayed on the display 12 of the terminal device 1. Further, the screens shown in FIGS. 5 and 6 are merely examples, and some of the illustrated information may be omitted or other information may be added.

As described above, according to the present embodiment, what kind of content is the URL included in the e-mail without actually accessing it (what kind of content is the URL associated with)? Can be grasped as a category. As a result, dangerous URLs that should not be accessed in advance can be detected, and infection due to URL access can be prevented.

The description of the embodiment and the disclosure of the drawings described above are merely examples for explaining the invention described in the claims, and are described in the claims by the description of the above-described embodiments or disclosure of the drawings. The inventions made are not limited. The description of the scope of claims at the time of filing can be appropriately changed within the scope of the patent specification, and the scope can be extended.

1 Terminal device 11 Input interface 12 Display 13 Mail control unit 14 Display control unit 2 Server 21 Input interface 22 Display 23 Storage unit 24 Mail control unit 25 URL acquisition unit 26 Category determination unit 27 Display control unit

Claims (12)

The URL acquisition unit that acquires the URL included in the e-mail,
A category determination unit that determines whether the URL is a harmful category, a non-harmful category, or cannot be categorized.
Based on the result of the determination, the display control unit that displays on the screen the category information that is associated with each of the e-mails and is classified into a harmful category, a non-harmful category, or an uncategorizable category. When,
An information processing device including an e-mail containing a URL determined to be a harmful category and a mail control unit for isolating the e-mail containing the URL determined to be uncategorizable. The URL acquisition unit that acquires the URL included in the e-mail, and
A category determination unit that determines whether the URL is a harmful category, a non-harmful category, or cannot be categorized.
Based on the result of the determination, the display control unit that displays on the screen the category information that is associated with each of the e-mails and is classified into a harmful category, a non-harmful category, or an uncategorizable category. When,
It includes an e-mail containing a URL determined to be a harmful category, and a mail control unit for isolating an e-mail containing the URL determined to be uncategorizable and whose sender is not registered in advance. Information processing device. The category determination unit makes a determination by referring to the updatable category database in which the URL and the category are associated with each other.
The information processing apparatus according to claim 1 or 2, wherein the category determination unit determines again later for a URL determined to be uncategorizable in consideration of updating the category database. The information processing device according to claim 3, wherein the mail control unit determines that an e-mail containing the URL can be transmitted when the URL is determined not to be harmful by the re-determination. The information processing device according to any one of claims 1 to 4, wherein the display control unit displays a screen in which a URL and a determination result of the URL are associated with each other. The information processing device according to any one of claims 1 to 5, wherein the display control unit displays a screen in which an e-mail and a determination result of a URL included in the e-mail are associated with each other. An information processing program to be installed in the information processing apparatus, in the information processing apparatus,
Getting the URL contained in the email and
Determining whether the URL is a harmful category, a non-harmful category, or uncategorizable.
Based on the result of the determination, the category information classified as harmful category, non-harmful category, or uncategorizable is displayed on the screen in association with each of the e-mails.
An information processing program that executes processing of quarantining an e-mail containing a URL determined to be a harmful category and an e-mail containing a URL determined to be uncategorizable. An information processing program to be installed in the information processing apparatus, in the information processing apparatus,
Getting the URL contained in the email and
Determining whether the URL is a harmful category, a non-harmful category, or uncategorizable.
Based on the result of the determination, the category information classified as harmful category, non-harmful category, or uncategorizable is displayed on the screen in association with each of the e-mails.
E-mail including said determined harmful category URL, and includes the categorization crippled the determined URL, and executes the sequestering email sender is not the one previously registered, processing of Information processing program. A recording medium recording an information processing program to be installed in the information processing apparatus, in the information processing apparatus,
Getting the URL contained in the email and
Determining whether the URL is a harmful category, a non-harmful category, or uncategorizable.
Based on the result of the determination, the category information classified as harmful category, non-harmful category, or uncategorizable is displayed on the screen in association with each of the e-mails.
A recording medium recording the information processing program that executes the processing of isolating the e-mail containing the URL determined to be harmful category and the e-mail containing the URL determined to be uncategorizable. A recording medium recording an information processing program to be installed in the information processing apparatus, in the information processing apparatus,
Getting the URL contained in the email and
Determining whether the URL is a harmful category, a non-harmful category, or uncategorizable.
Based on the result of the determination, the category information classified as harmful category, non-harmful category, or uncategorizable is displayed on the screen in association with each of the e-mails.
E-mail including said determined harmful category URL, and includes the categorization crippled the determined URL, and executes the sequestering email sender is not the one previously registered, processing of A recording medium on which the information processing program is recorded . When the URL acquisition unit acquires the URL included in the e-mail,
The category determination unit determines whether the URL is a harmful category, a non-harmful category, or cannot be categorized.
Based on the result of the determination, the display control unit displays categorical information on the screen, which is classified into a harmful category, a non-harmful category, or an uncategorizable category in association with each of the e-mails. To display and
An information processing method comprising: that the mail control unit quarantines an e-mail including a URL determined to be a harmful category and an e-mail including a URL determined to be uncategorizable. When the URL acquisition unit acquires the URL included in the e-mail,
The category determination unit determines whether the URL is a harmful category, a non-harmful category, or cannot be categorized.
Based on the result of the determination, the display control unit displays categorical information on the screen, which is classified into a harmful category, a non-harmful category, or an uncategorizable category in association with each of the e-mails. To display and
The mail control unit quarantines the e-mail containing the URL determined to be the harmful category and the e-mail containing the URL determined to be uncategorizable and the sender is not registered in advance. Information processing method.