JP7286073B2 - Web browser, client, information browsing support system, and information browsing support method - Google Patents

Description

The present invention relates to technology for protecting information exchanged via the Internet or the like.

In recent years, web systems have become popular. According to the web system, a user can access a web server from a terminal device via a communication line such as the Internet and use the resources of the web server.

To make resources readily available, websites are often built on web servers. The user accesses the website and uses the resource through the web browser installed on the terminal device.

However, if the resource is sensitive information, security measures are necessary. Therefore, a system as described in Patent Literature 1 has been proposed.

This system keeps the content accessible only for a defined duration and provides a receiving paper device that cannot copy or print on any media. The device can be used in proctor mode as a master paper device and in exam mode as a receiving paper device. The system includes a content authoring engine that securely creates or authors content. Content is transferred from the content authoring engine to the cloud server and master paper device in password-protected encrypted form.

Japanese Patent Application Laid-Open No. 2020-68004

According to the receiving paper device described above, it is not possible to copy or print the content to another medium, so it is possible to prevent the leakage of the content more reliably than before.

However, when the content is distributed from the cloud server to a device other than the receiving paper device or the master paper device, the chances of decryption increase, increasing the risk of content leakage.

SUMMARY OF THE INVENTION An object of the present invention is to improve the certainty of protection of confidential information as compared with the conventional technology.

An information browsing support system according to one aspect of the present invention includes a client for browsing provided information provided from a website, a proxy system for acting for the client to acquire the provided information from the website, wherein the client has transmission means for transmitting request data containing a specific code for a specific item to the proxy system, and the proxy system sends the request data to transfer means for acquiring the provided information from the website and transferring the provided information to the client when received, and the client further includes display means for displaying the provided information.

An information intermediation system according to one aspect of the present invention includes receiving means for receiving request data from a client having a web browser for browsing provided information provided by a specific website; determining means for determining whether or not a code is included in the request data; and when the determining means determines that the specific code for the specific item is included in the request data, It has acquisition means for acquiring the provided information from the website, and transfer means for transferring the provided information to the web browser of the client.

A client according to one aspect of the present invention is a client for browsing provided information provided from the website, and is a proxy system that performs a process of obtaining the provided information from the website. and a display means for displaying the provided information transmitted from the proxy system.

According to the present invention, it is possible to improve the certainty of protection of confidential information as compared with the conventional technology.

1 is a diagram showing an example of the overall configuration of a web system; FIG. It is a figure which shows the example of the hardware constitutions of a terminal device. It is a figure which shows the example of the hardware constitutions of an access control server. FIG. 3 is a diagram showing an example of functional configurations of an access control server and a terminal device; FIG. 10 is a sequence diagram illustrating an example of the flow at the time of authentication; FIG. 10 is a diagram showing an example of initial request data; FIG. 10 is a diagram showing an example of a provision refusal page; It is a figure which shows the example of a top page. FIG. 11 is a flowchart for explaining an example of the flow of operation handling processing; FIG. FIG. 4 illustrates an example of a copy-paste process from a web page of a website; FIG. 10 is a diagram illustrating an example of copy-paste processing from another application window; 4 is a flowchart illustrating an example of overall processing flow by proxy software and a dedicated web browser, respectively;

FIG. 1 is a diagram showing an example of the overall configuration of a web system 1. As shown in FIG. FIG. 2 is a diagram showing an example of the hardware configuration of the terminal device 3. As shown in FIG. FIG. 3 is a diagram showing an example of the hardware configuration of the access control server 2. As shown in FIG. FIG. 4 is a diagram showing an example of the functional configuration of each of the access control server 2 and the terminal device 3. As shown in FIG.

A web system 1 shown in FIG. 1 is a system for performing information processing in a specific business, and includes an access control server 2, a terminal device 3, an information management system 4, a communication line 5, and the like. The access control server 2 can communicate with the terminal device 3 and the information management system 4 via the communication line 5 . As the communication line 5, the Internet, a LAN (Local Area Network), a public line, or the like is used. A case where the web system 1 is used to handle patient information in a medical institution will be described below as an example.

The information management system 4 is a system for managing patient information, and has functions such as data management and a web server.

For example, the information management system 4 receives patient information from the terminal device 3 and stores it in the database 41 , provides patient information from the database 41 based on a request from the terminal device 3 , update or delete the patient's information in the database 41 based on the request.

Also, in the information management system 4, a website 42 for supporting the work of the user of the terminal device 3 is constructed by the function of a web server. The user can view any web page in the website 42 on the terminal device 3 and perform the above-described processing of patient information.

Database software, web server software, etc. may be installed in a so-called server machine, and the database 41 and website 42 may be constructed in the information management system 4 . Alternatively, the database 41 and website 42 may be constructed by cloud services.

The terminal device 3 is a client for receiving services of the information management system 4 . A personal computer, a smart phone, a tablet computer, or the like is used as the terminal device 3 . A case where a personal computer is used as the terminal device 3 will be described below as an example.

As shown in FIG. 2, the terminal device 3 includes a processor 31, a RAM (Random Access Memory) 32, a ROM (Read Only Memory) 33, an auxiliary storage device 34, a display 35, a network controller 36, a keyboard 37, and a pointing device 38. etc.

Programs such as an operating system 381 , office software 382 and a standard web browser 383 are installed in the ROM 33 or auxiliary storage device 34 . Furthermore, a dedicated web browser 30 is installed. A hard disk or an SSD (Solid State Drive) is used as the auxiliary storage device 34 .

The operating system 381 manages resources of the terminal device 3 and provides a user interface. In addition, operating system 381 has a clipboard for storing data for objects such as text or images. A user can copy or cut a portion of the data of a file open in one application to this clipboard and paste it into that file, other files, or other files open in other applications, and so on. As the operating system 381, Microsoft's Windows, Apple's MAC OS, Google's Chrome OS, or the like is used. Windows, MAC OS and Chrome are trademarks or registered trademarks of their respective companies.

Office software 382 is application programs such as word processing, spreadsheets, and presentations. Standard web browser 383 is an application program for browsing web pages. As the standard web browser 383, a publicly available web browser such as Microsoft Edge by Microsoft, Safari by Apple, Chrome by Google, or Firefox by Mozilla is used. The dedicated web browser 30 will be described later. Microsoft Edge, Safari, Chrome and Firefox are trademarks or registered trademarks of their respective companies.

A RAM 32 is the main memory of the terminal device 3 . Programs are loaded into the RAM 32 from the ROM 33 or the auxiliary storage device 34 as appropriate. The processor 31 is a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit) and executes programs loaded in the RAM 32 .

The display 35 displays the screens of the office software 382, the standard web browser 383, the dedicated web browser 30, and the like.

The network controller 36 communicates with devices such as the access control server 2 using a protocol such as TCP/IP (Transmission Control Protocol/Internet Protocol). As the network controller 36, a NIC (Network Interface Card), a Wi-Fi communication device, or the like is used.

A keyboard 37 and pointing device 38 are used for user input of commands or information.

Returning to FIG. 1 , the access control server 2 is a proxy that mediates data exchanged between the terminal device 3 and the website 42 in order to ensure the security of the information management system 4 .

The access control server 2 is composed of a processor 21, a RAM 22, a ROM 23, an auxiliary storage device 24, a network controller 25, etc., as shown in FIG.

Programs such as an operating system 261 and proxy software 20 are installed in the ROM 23 or the auxiliary storage device 24 .

A RAM 22 is the main memory of the access control server 2 . A program is appropriately loaded into the processor 21 from the ROM 23 or the auxiliary storage device 24 . Processor 21 executes programs loaded in RAM 22 .

The network controller 25 communicates with devices such as the terminal device 3 and the information management system 4 using a protocol such as TCP/IP.

By the way, the domain name and IP address of website 42 are not published. Further, the information management system 4 is set to accept access from devices belonging to the same intranet as the information management system 4 and from the access control server 2, but deny access from other devices. Also, the domain name and IP address of the access control server 2 are not disclosed. A dedicated web browser 30 is required to access the access control server 2 .

Proxy software 20 and dedicated web browser 30 allow users to receive the services of information management system 4 in such an environment. This mechanism will be described below.

According to the proxy software 20, functions such as the access right storage unit 201, the connection processing unit 202, the device authentication unit 203, the refusal notification unit 204, and the proxy processing unit 205 shown in FIG.

According to the dedicated web browser 30, the initial setting value storage unit 301, the initial access processing unit 302, the web page display processing unit 303, the web page requesting unit 304, the standard web browser launching unit 305, and the first copy processing unit shown in FIG. 306 , a dedicated clipboard 307 , a second copy processing unit 308 , an input data transmission unit 309 , and other functions are implemented in the terminal device 3 .

〔Initial setting〕
Access right data 601 is stored in advance in the access right storage unit 201 . The access right data 601 is data indicating one authentication code (specific code), and is used as a key for authenticating that the terminal device 3 has valid access rights. This authentication code is a random combination of a large number of alphabets and numbers.

Authentication data 602 is stored in advance in the initial setting value storage unit 301 . The authentication data 602 indicates the URL (Uniform Resource Locator) or IP address of the gateway site, which is the website of the gateway to the database 41 . This gateway site is prepared in the access control server 2 . Further, the authentication data 602 indicates an authentication code. A user cannot browse the authentication data 602 . The authentication data 602 may be encrypted and stored in the initial setting value storage unit 301 .

[Device Authentication]
FIG. 5 is a sequence diagram illustrating an example of the flow of processing during authentication. FIG. 6 is a diagram showing an example of initial request data 641. As shown in FIG. FIG. 7 is a diagram showing an example of the provision refusal page 81. As shown in FIG. FIG. 8 is a diagram showing an example of the top page 82. As shown in FIG.

When the user of the terminal device 3 wants to access the website 42 , the user activates the dedicated web browser 30 on the terminal device 3 . Then, processing for enabling communication between the terminal device 3 and the website 42 is performed according to the procedure shown in FIG.

The initial access processing unit 302 performs initial processing for receiving services of the information management system 4 via the access control server 2 as follows.

Initial access processing unit 302 reads authentication data 602 from initial setting value storage unit 301 and accesses access control server 2 based on the URL or IP address indicated in authentication data 602 . If the read authentication data 602 is encrypted, it is decrypted.

Then, the initial access processing unit 302 and the connection processing unit 202 establish a TCP connection and further negotiate TLS (Transport Layer Security) using SSL (Secure Sockets Layer) Socket (#721, #731). This enables encrypted communication. That is, encrypted data is exchanged between the access control server 2 and the terminal device 3 .

The initial access processing unit 302 then transmits the initial request data 641 as an HTTP (Hypertext Transfer Protocol) request to the access control server 2 (#732).

As shown in FIG. 6, the header of the initial request data 641 describes an item named "Secret-Gate" (specific item) and a code "79d85bc6306e6249306e9375" (specific code). Hereinafter, this specific item will be referred to as an "authentication item". This code is the authentication code described above.
Authentication items are unique items that do not fall under the specifications of standardization organizations (for example, RFC (Request for Comments) of IETF (Internet Engineering Task Force)), and are special items newly determined for authentication described later. is.

Also, in the request line of the initial request data 641, a code for requesting the top page of the gateway site is described. This code is determined based on the gateway site URL or IP address indicated in the authentication data 602 . Note that the name of the authentication item is not limited to "Secret-Gate" as long as it meets the above conditions.

Upon receiving the initial request data 641 (#722), the device authentication unit 203 checks the header of the initial request data 641 (#723).

If the initial request data 641 does not include authentication items (No in #724), the refusal notification unit 204 generates the web page data of the web page describing the message refusing to provide the web page of the website 42. 681 as an HTTP response to the terminal device 3 (#726). Although the authentication item is included (Yes in #724), even if the value (code) of the authentication item does not match the authentication code shown in the access right data 601 stored in the access right storage unit 201 (# No at 725), the web page data 681 is transmitted to the terminal device 3 (#726). In either case, the TCP connection may be disconnected after the web page data 681 is transmitted.

When the web page display processing unit 303 receives the web page data 681 from the access control server 2 (#733), it causes the display 35 to display the provision refusal page 81 as shown in FIG. 7 (#734).

If the initial request data 641 contains an authentication item (Yes at #724) and the value of the authentication item matches the authentication code shown in the access right data 601 (Yes at #725), the proxy The processing unit 205 transmits a request for the top page of the website 42 to the information management system 4 (#727).

When the information management system 4 receives this request (#741), it transmits the web page data 682 of the top page of the website 42 to the access control server 2 (#742). The proxy processing unit 205 transfers the web page data 682 as an HTTP response to the terminal device 3 (#728).

Further, the device authentication unit 203 determines that the terminal device 3 is a valid device, and permits the provision of services to the terminal device 3 (#729).

When the web page display processing unit 303 receives the web page data 682 from the access control server 2 (#735), the top page 82, which is the top web page of the website 42, is displayed on the display 35 as shown in FIG. (#736).

Data provided from the website 42 to the terminal device 3 via the access control server 2, including the web page data 682, is temporarily stored in a volatile storage medium such as the RAM 32 in principle. It is not stored in a non-volatile storage medium such as auxiliary storage device 34 or USB (Universal Serial Bus) memory. The data may be stored in a predetermined directory of the non-volatile storage medium, but the user's access to this directory is prohibited, or the data is encrypted and stored in this directory.

[Process according to user's operation]
FIG. 9 is a flowchart for explaining an example of the flow of operation handling processing. FIG. 10 is a diagram showing an example of a copy-paste process from a web page of website 42. As shown in FIG. FIG. 11 is a diagram showing an example of copy-paste processing from a window of another application.

When the provision of services to the terminal device 3 is permitted, the user can perform various tasks by using any web page of the website 42 . In the terminal device 3, every time the user performs an operation, processing is performed according to the procedure shown in FIG.

When a hyperlink included in an active web page (hereinafter referred to as "current page") is clicked (Yes in #751 in FIG. 9), the web page associated with the hyperlink (hereinafter referred to as , described as “linked page”) belongs to the website 42 (Yes in #752), the web page requesting unit 304 transmits the provision request data 642 to the access control server 2 as an HTTP request. requests the linked web page (#753). The provision request data 642 is an HTTP request, and the request line indicates the URL of the link destination page, the GET method, and the like.

Upon receiving the provision request data 642, the proxy processing unit 205 acquires the web page data 683 of the linked page from the website 42 based on the URL indicated in the request line of the provision request data 642, and sends the data to the terminal device 3 as an HTTP response. transfer to

Then, upon receiving the web page data 683 (#754), the web page display processing unit 303 causes the display 35 to display the web page 83 as a link destination page based on the web page data 683 (#755).

On the other hand, if the linked page is not for the website 42 (No in #752), the standard web browser activation unit 305 activates the standard web browser 383 (#756), and transmits the URL of the linked page to the standard web browser. 383 causes the standard web browser 383 to access the linked page (#757).

Then, the standard web browser 383 acquires the data of the linked page based on the URL and causes the display 35 to display the linked page.

Alternatively, when content in the current page is selected and a copy command is input (Yes in #758), the first copy processing unit 306 stores data of the selected content in the dedicated clipboard 307 as copy data 603. (#759). For example, when a character string in the current page is selected and a copy command is entered, text data or rich text data of the character string is stored in the dedicated clipboard 307 as copy data 603 .

Note that if other data is already stored in the dedicated clipboard 307, the first copy processing unit 306 deletes the other data from the dedicated clipboard 307, and copies the data of the selected content to new copy data. 603 is stored in the dedicated clipboard 307 . That is, overwrite. Also, applications other than dedicated web browser 30 (eg, office software 382 and standard web browser 383 ) cannot refer to dedicated clipboard 307 .

Alternatively, when the screen (for example, window) of an application other than the dedicated web browser 30 is active and the web page of the dedicated web browser 30 becomes active (Yes in #760), the data is stored in the clipboard of the operating system 381. If so, the second copy processing unit 308 stores this data in the dedicated clipboard 307 as copy data 603 (#761). Hereinafter, the clipboard of the operating system 381 will be referred to as "standard clipboard 51".

If other data is already stored in the dedicated clipboard 307, the other data is deleted from the dedicated clipboard 307, and the data stored in the standard clipboard 51 is newly copied to the dedicated clipboard as copy data 603. Store in 307 .

Alternatively, when a paste command is input to an input control (for example, a text box) in the current page (Yes in #762), the web page display processing unit 303 causes the dedicated clipboard 307 to display the The content (for example, character string) of the copy data 603 is pasted to the control and the current page is displayed again (#763).

Alternatively, when the submit button in the current page is clicked (Yes in #764), the input data transmission unit 309 transmits the update request data 643 as an HTTP request to the access control server 2 (#765). ). The update request data 643 includes the data indicating the URL of the current page and the POST method, as well as the data of the content entered in the input control (for example, text box) corresponding to the send button.

In the access control server 2 , upon receiving the update request data 643 , the proxy processing unit 205 instructs the website 42 to update the database 41 as indicated by the update request data 643 . At this time, the update request data 643 may be transferred to the website 42 .

According to the processing of steps #758 to #763, the standard clipboard 51 and dedicated clipboard 307 are used, for example, as follows.

When content in the web page (current page) displayed by dedicated web browser 30 is selected and a copy command is input, data of the selected content is copied and copy data 603 is generated as shown in FIG. is stored in the dedicated clipboard 307 as (#801). Then, when a paste command is input in the input control in the current page, the contents are pasted to the control based on the copy data 603 (#802). Content is also pasted when a paste command is entered in an input control in another web page of the dedicated web browser 30 .

On the other hand, even if a paste command is input on the screen of an application other than the dedicated web browser 30, the application cannot refer to the dedicated clipboard 307, so the content cannot be pasted. If data is stored in the standard clipboard 51, content may be pasted based on that data.

Alternatively, when content in the screen of an application other than the dedicated web browser 30 is selected and a copy command is entered, the data of the selected content is copied and stored in the standard clipboard 51 as shown in FIG. (#811). When the web page displayed by the dedicated web browser 30 becomes active, the data stored in the standard clipboard 51 is copied and stored as copy data 603 in the dedicated clipboard 307 (#812). Then, when a paste command is entered in the input control in the web page (current page), the contents are pasted to the control based on the copy data 603 (#813).

[Prohibition of downloading files]
A standard web browser 383 has the ability to download files and save them to a local disk. That is, when a web page is being displayed by the standard web browser 383, when the user selects an object such as an image, moving image, or sound in this web page and enters a download command, the standard web browser 383 , the file of the selected object is downloaded from the website and stored in the auxiliary storage device 34, USB memory, or the like.

However, the dedicated web browser 30 does not have such commands. Therefore, the user cannot save the file downloaded from the website 42 to the auxiliary storage device 34, USB memory, or the like.

FIG. 12 is a flow chart illustrating an example of overall processing flow by proxy software 20 and dedicated web browser 30 respectively.

Next, the overall processing flow of each of the access control server 2 and the terminal device 3 will be described with reference to flowcharts.

The access control server 2 performs processing according to the procedure shown in FIG. 12A based on the proxy software 20. FIG.

When the access control server 2 receives initial request data 641 from a terminal device 3 that has not yet established a connection with the access control server 2 (Yes in #71 in FIG. 12A), the terminal device 3 and connection is established (#72). The procedure for this processing is as described with reference to FIG.

Alternatively, when the provision request data 642 or the update request data 643 is received from the terminal device 3 with which the connection with the access control server 2 has already been established (Yes in #73), the access control server 2 receives the terminal device 3 exchange with the access control server 2 instead of (#74). Specifically, when the provision request data 642 is received, the web page data 683 is obtained from the website 42 based on the provision request data 642 and transferred to the terminal device 3 as an HTTP response. When update request data 643 is received, website 42 is instructed to update database 41 as indicated in update request data 643 .

The access control server 2 appropriately executes the processing of step #72 and the processing of step #74 while continuing the service (No in #75).

On the other hand, the terminal device 3 performs processing according to the procedure shown in FIG. 12B based on the dedicated web browser 30 .

When the dedicated web browser 30 is activated, the terminal device 3 performs processing for establishing a connection with the access control server 2 (#81 in FIG. 12B). The procedure for this processing is as described with reference to FIG.

When the connection is successfully established (Yes at #82), the terminal device 3 executes the process corresponding to the operation by the procedure shown in FIG. 9 each time the user performs an operation (Yes at #83). (#84).

Until the dedicated web browser 30 is terminated (No in #85), the terminal device 3 appropriately executes the process of step #84. If connection establishment fails in step #81 (No in #82), the dedicated web browser 30 is terminated.

According to this embodiment, the user cannot obtain web pages provided by the website 42 of the information management system 4 with a general web browser, and must use the dedicated web browser 30 . Therefore, the patient's confidential information managed by the information management system 4 can be protected more reliably than before. Moreover, unless the authentication items and the authentication code are set correctly, the provision of services to the dedicated web browser 30 is not permitted, so confidential information can be protected more reliably.

Moreover, since the access control server 2 decides whether or not to permit the provision of services, it is possible to protect confidential information without significantly modifying the existing information management system 4 .

Furthermore, according to the dedicated web browser 30, information on a web page within the website 42 can be copy-pasted to that web page or to other web pages within the website 42, but not to other applications. you can't. Information used in other applications can be copy-pasted into web pages in website 42 . Therefore, it is possible to protect the information managed by the information management system 4 while improving the user's convenience.

In this embodiment, the access control server 2 has a unique and specific item "Secret-Gate" in the initial request data 641 received from the terminal device 3, and a specific code is indicated as the value of the item. In this case, provision of services to the terminal device 3 is permitted, but further conditions may be imposed.

For example, the access control server 2 prepares a device list showing identifiers of accessible devices (UUID (Universally Unique Identifier), IP address, or MAC (Media Access Control) address). The access control server 2 acquires an identifier from the terminal device 3, and permits provision of the service if the acquired identifier is shown in the list. If not, refuse to provide service.

Alternatively, the access control server 2 prepares a user list showing the identifiers and passwords of users who can access. The access control server 2 acquires the user's identifier and password from the terminal device 3, and permits provision of the service if the acquired identifier and password are shown in the user list. If not, refuse to provide service.

In this embodiment, the terminal device 3 describes the authentication items and the authentication code only in the initial request data 641, but they may also be written in the provision request data 642 or the update request data 643 constantly or periodically. good. When the provision request data 642 or the update request data 643 describes the authentication item and the authentication code, the access control server 2 determines whether or not the service can be provided in the same manner as when the initial request data 641 is received. determine.

In the present embodiment, the terminal device 3 determines whether or not the linked page is for the website 42, but the access control server 2 may determine. In this case, when the hyperlink is clicked, the dedicated web browser 30 of the terminal device 3 provides data indicating the URL of the linked page regardless of whether the linked page belongs to the website 42 or not. It is transmitted to the access control server 2 as request data 642 .

When the access control server 2 receives the provision request data 642, and if the URL indicated in the provision request data 642 is for a web page of a website other than the website 42, the access control server 2 sends a standard browser activation command to the dedicated web browser 30. Send.

When the dedicated web browser 30 receives the standard browser activation command from the access control server 2, it activates the standard web browser 383 and causes the standard web browser 383 to access the linked page.
Although only one authentication code is shown in the access right data 601 in this embodiment, a plurality of different authentication codes may be shown. The access control server 2 permits the information management system 4 to provide the service if any one of these authentication codes is indicated in the initial request data 641 as the value of the authentication item.
Alternatively, a plurality of items for authentication may be defined. In this case, access right data 601 is prepared for each authentication item, and one or more authentication codes are described in each access right data 601 . In the access control server 2, any authentication item is provided in the initial request data 641, and the code indicated as the value of this authentication item is indicated in the access right data 601 of this authentication item. If so, the service provision of the information management system 4 is permitted.

In the present embodiment, a system for managing patient information in a medical institution has been described as an example of the information management system 4 , but a system for managing other information can also be used as the information management system 4 . For example, a system for managing customer information or employee information in a company, a system for managing personal information of residents in a government office, a system for managing technical information in a research institution, etc. can be used as the information management system 4 .

In addition, the web system 1, the access control server 2, and the configuration of each part of the entire or each part of the web system 1, the access control server 2, the content of the processing, the order of the processing, the configuration of the data, the configuration of the screen, etc. may be changed as appropriate in line with the spirit of the present invention. can be done.

1 Web system (information browsing support system)
2 Access control server (proxy system)
20 Proxy software (computer program)
202 connection processing unit (receiving means)
203 device authentication unit (determining means)
204 Rejection notification unit (notification means)
205 proxy processing unit (transfer means, acquisition means)
3 Terminal device (client)
30 Dedicated web browser (web browser)
302 initial access processing unit (transmitting means)
303 Web page display processing unit (display means)
35 display (display means)
42 Website 603 Copy data (copy information)
641 Initial request data (request data)
681 Web page data 682 Web page data 683 Web page data 81 Page refusal to provide 82 Top page (provided information)
83 Web Pages (Information Provided)

Claims (10)

A web browser used on a computer to view provided information provided by a specific website,
to the computer;
executing a process of providing temporary storage means for temporarily storing copy information;
executing display processing for displaying the provided information;
executing a first copy process for storing a portion of the provided information selected by the user as the copy information in the temporary storage means;
executing a second copy process of storing information stored in a clipboard of the operating system of the computer as the copy information in the temporary storage means when the web browser itself becomes active;
When a paste command is input, the provided information or other provided information obtained from the specific website is displayed with the copy information stored in the temporary storage means pasted. , to perform the paste operation,
A web browser characterized by: Send data in which a unique item is set as the specific item as request data including a specific code for a specific item to a proxy system acting on behalf of the process of acquiring the provided information from the specific website. cause the computer to execute a transmission process to
The display process is a process of displaying the provided information transmitted from the proxy system.
The web browser of claim 1. causing the computer to execute a process of causing a general web browser to acquire the web page when a hyperlink to a web page originating from a site other than the website is selected;
A web browser according to claim 1 or claim 2. Temporary storage means, different from the clipboard of the operating system of the client, for temporarily storing copy information;
a display means for displaying provided information provided by a specific website , realized by a dedicated web browser ;
first copying means for storing a portion selected by the user from the provided information as the copy information in the temporary storage means;
second copying means for storing the information stored in the clipboard as the copy information in the temporary storage means when the dedicated web browser is activated;
When a paste command is input, the provided information or other provided information obtained from the specific website is displayed with the copy information stored in the temporary storage means pasted. , a paste means, and
A client characterized by having Send data in which a unique item is set as the specific item as request data including a specific code for a specific item to the proxy system that acts on behalf of the process of obtaining the above-mentioned provided information from the specific website. transmission means implemented by said dedicated web browser,
has
the display means displays the provided information transmitted from the proxy system;
A client according to claim 4. Acquisition control means for causing a general web browser to acquire a web page when a hyperlink to a web page originating from a site other than the website is selected;
having
A client according to claim 4 or claim 5. a client according to any one of claims 4 to 6;
a proxy system that acquires provided information from a specific website and transfers it to the client when request data containing a specific code for a specific item is received;
An information browsing support system characterized by comprising: To the client used to view the provided information provided by a particular website,
causing a dedicated web browser to execute display processing for displaying the provided information;
providing temporary storage means different from the clipboard of the operating system of the client for temporarily storing copy information;
executing a first copy process for storing a portion of the provided information selected by the user as the copy information in the temporary storage means;
executing a second copy process of storing information stored in the clipboard as the copy information in the temporary storage means when the dedicated web browser is activated;
When a paste command is input, the provided information or other provided information obtained from the specific website is displayed with the copy information stored in the temporary storage means pasted. , to perform the paste operation,
An information browsing support method characterized by: causing the client to execute a transmission process of transmitting data in which a unique item is set as the specific item to the proxy system as request data containing a specific code for the specific item;
causing the proxy system to execute a process of acquiring the provided information from the specific website and transferring it to the client when the requested data is received;
causing the client to execute a process of displaying the provided information transmitted from the proxy system as the display process;
9. The information browsing support method according to claim 8. When a hyperlink to a web page originating from a site other than the website is selected, causing the client to execute a process of causing a general web browser to acquire the web page;
10. The information browsing support method according to claim 8 or 9.

Images