KR20070101042A - Device of detecting invalid use of keyword advertisement - Google Patents

Abstract

A device for detecting illegal use of keyword AD is provided to prevent an excessive AD charge from being billed to an advertiser by detecting occurrence of the excessive AD charge only when the number of clicks against an AD server, connected with a predetermined keyword AD, is increased. A keyword relay information obtainer(110) obtains keyword relay information until a keyword is relayed to the AD server from a user device. An event information extractor(120) extracts event information transceived between the user device and the AD server after the keyword is relayed. A data storing part(130) stores basic data for determining the illegal use of keyword AD relay. An illegal use probability adjuster(140) adjusts an illegal use probability value used for determining the illegal use of the keyword AD relay based on the basic data, the keyword relay information, and the event information. A determiner(150) determines the illegal use if the illegal use probability value is over a predetermined value.

Description

Keyword advertising fraud detection device {DEVICE OF DETECTING INVALID USE OF KEYWORD ADVERTISEMENT}

1 is a flowchart illustrating a conventional keyword advertising performance.

Figure 2 is a block diagram of a keyword advertising fraud detection device according to the present invention.

<Description of the symbols for the main parts of the drawings>

110: keyword relay information acquisition unit 120: event information extraction unit

130: data storage unit 140: fraud probability control unit

150: determination unit 160: illegal use information storage unit

170: illegal use information transmission unit 180: second illegal use information transmission unit

The present invention relates to an apparatus for detecting keyword advertisement fraud, and more specifically, when performing keyword advertising, an advertiser is charged with an excessive charge by increasing only the number of clicks on an advertisement server connected to a specific keyword advertisement for the purpose of fraudulent purposes. In particular, the inefficiency and judgment uncertainty caused by the existing keyword advertisement fraud detection is mainly performed based on limited data between the server performing the keyword advertisement relay and the user device. The present invention relates to a keyword advertisement fraud detection apparatus that can be improved by additionally including information such as an event.

With the spread of the Internet, the number of information sources such as web pages accessible through the Internet is increasing exponentially. As this information source grows, so does the use of search engines that search for locations on the network of information that users want, such as www.naver.com, www.google.com, or www.yahoo.com. Doing. In addition to the increase in search in these search engines, the use of so-called keyword advertising or keyword search advertising is increasing.

1 is a flowchart illustrating a conventional keyword advertising performance.

First, a user performs a wired / wireless network connection to a search engine through a user device and performs a search through keyword input (S10).

A user device is a device used by a user for searching and means a device such as a personal computer, a PDA or a mobile phone. Alternatively, the user device may mean an application program such as a web browser used for network connection in such a personal computer, PDA, mobile phone, or the like. Hereinafter, the term "user device" refers to a device such as a personal computer, a PDA, a mobile phone, or an application program used in such a device.

In response to the user's keyword search, the search engine transmits keyword search result information including the search result and the advertisement list designated to the keyword to the user device (S20).

The keyword search result information is preferably configured and transmitted in the form of a web page, and more preferably, the advertisement list is arranged at a location easily accessible to the user, that is, at the top of the web page.

In this case, the advertisement list may be used as a term such as a sponsored link.

In response to the transmitted keyword search result information, the user device receives a request for connection through a user's connection request, for example, a click on one of the advertisement lists (S30).

In response to the access request, the access request is redirected to the search engine or the keyword advertisement relay server (S40).

For example, if a keyword advertising relay is directly performed in the search engine, the search engine is redirected to the search engine, and if a separate relay server is provided, the access request is redirected to the relay server.

Hereinafter, in the specification of the present invention, a server that performs a keyword advertisement relay function, including a case in which such a search engine directly performs keyword advertisement relay or a separate relay server is referred to as a “server performing keyword advertisement relay”. Refers to.

The access request redirected in step S40 is subsequently redirected to an advertisement server that provides information to the user in response to the request (S50).

In the specification of the present invention, an "ad server" provides various information related to a specific keyword as well as an advertisement, and is assigned to an advertisement list for a corresponding keyword of a server that performs keyword advertisement relaying, and thus a user from a server performing keyword advertisement relay. A server that can receive a connection request.

In this case, the server that performs keyword advertisement relaying may charge the advertisement server for redirection of the access request in step S50 (S60).

The keyword advertisement described with reference to FIG. 1 has been widely used because it enables more efficient target advertisement in that keyword search is performed and access is made to the keyword, rather than the conventional simple exposure.

However, such keyword advertisements have a problem of fraudulent use of keyword advertisements, so-called "negative clicks", especially when charging is performed in response to such redesignation. The fraudulent use of keyword advertising, ie fraudulent clicks, is not intended to search for information and perform specific actions such as purchase activities by competitors or third parties of the company that operates the ad server. This means that excessive access to the advertisement server is performed through the keyword advertisement service in order to increase only the charge due to the redesignation.

Such fraudulent clicks are estimated to occupy 10 to 20% in the keyword advertising market of hundreds of billions of dollars per year, and the spread of fraudulent clicks increases the amount of unnecessary advertising expenses from the advertiser's point of view.

In order to prevent such fraudulent clicks, a search and click request for the same keyword is received within a certain time from a user device having the same network address, for example, the same IP, at the server level that performs keyword advertisement relaying, or an identifier of the user device, such as a cookie. Background of the Invention A method of determining a case in which a search and a click request for the same keyword is received within a predetermined time from a user device having the same cookie using information has been conventionally used.

However, the method of preventing fraud using the Internet Protocol (IP) address is as follows. An IP address is primitive information to identify a user. However, IP address has a limitation in accurate user identification considering the problem of native address translation of devices on the network such as proxy server, cache server, firewall / router.

For example, via a proxy server, you can only see the IP address of the proxy server, not the user's IP address.

In addition, firewalls used by corporations perform address translation to transmit all Internet traffic using several public IP addresses, even if hundreds or thousands of computers are connected to each other. .

Dynamic IP allocation at Internet service providers also makes it difficult to identify users by IP. In other words, Internet service providers provide a service that allows a larger pool of public IP addresses to be reused so that more people can access the Internet through dial-up. Therefore, even if the same IP address is used, the same user cannot be determined after a certain time.

In addition, assuming that an Internet connection using a wireless LAN, for example, in a public place such as a hotel, a coffee shop, a library, or the like is performed in a wireless environment, even in this case, all Internet in one site or region corresponding to an AP Traffic is sent using a few IP addresses.

In addition, a method of preventing fraudulent use by using identification information such as cookie information is as follows. For example, cookie information such as PCID is a concept of providing one unique ID to one user device. This PCID concept is intended to identify users in proxy servers, cache servers, firewalls, dynamic IP or Internet connections in mobile environments. Especially in one person 1PC environment, PCID plays an important role in identifying users.

The PCID is issued in the form of a cookie with a validity period. For example, when a server that performs keyword advertisement relay issues a PCID to a user, illegal use identification may be performed based on this.

However, the PCID method identifies individual users when several people share a single computer based on one or a few IPs, such as those in public PCs such as PC rooms, schools, hotels, parks, and other places. It does not have the disadvantage. In addition, if the same person uses a work computer and a personal laptop at work and a personal computer at home, even though the PCID is different, the same user may not be able to identify the same user.

In addition, the PCID method cannot detect a keyword advertisement fraudulent by changing a server that performs keyword advertisement relay. For example, if there is a server that performs the keyword advertising relay of A and a server that performs the keyword advertising relay of B, and if the keyword search is performed with the advertisement server of C in each, the PCID corresponding to A and the PCID corresponding to B are different. It is difficult to detect when the same user is using fraudulently through A and B, respectively.

In addition, the conventional method for preventing the illegal use of keyword advertising determines whether to use fraudulently based on specific information such as IP information or cookie information, and thus, for example, when accessing while changing IP or cookie information, it cannot be determined as a click fraud. There are disadvantages.

Finally, the login ID is the correct way to identify an individual user. However, this method can only be used if the user's device visits and logs in to the ad server, and if such information is not available from the ad server side if the server performing the current keyword ad relay detects fraud. none. In addition, considering the fact that general users perform a search through a server that performs keyword advertisement relaying without logging in and do not log in from an advertisement server, the utility is insufficient.

Therefore, there is a disadvantage that it is difficult to determine the illegal use of keyword advertising only by the conventional method.

In addition, the conventional method of preventing the illegal use of keyword advertising is only a method that can determine the false click only on the server side performing the keyword advertising relay, and is a method that cannot determine the illegal click on the ad server side. In other words, the advertiser running the ad server has to pay a fee corresponding to the keyword ad to the server that performs the keyword ad relay because there is no way to check even though there are many suspected clicks on the ad server. There was a disadvantage.

An object of the present invention is to detect the problem that the advertiser is inadvertently charged by increasing the number of clicks only to the ad server connected to a particular keyword ad for negative purposes when performing a keyword ad, in particular the existing keyword ads Since fraud detection is mainly performed on the basis of limited data between a server performing keyword advertisement relay and a user device, the inefficiency and judgment uncertainty additionally include information such as an event in the advertisement server to detect fraud. It is to provide a keyword advertising fraud detection device that can be configured and improved.

In order to achieve the above technical problem, the present invention provides a user device that performs a keyword search, a server that performs a keyword advertising relay for the keyword search of the user device, and receives a keyword advertising relay to provide information to the user A keyword advertisement fraud detection apparatus provided in the advertisement server in a keyword advertisement system including an advertisement server, wherein the keyword for acquiring keyword relay information which is corresponding information until the keyword relay is performed from the user device to the advertisement server is performed. A relay information obtaining unit, an event information extracting unit for extracting event information which is information transmitted / received between the user device and the advertisement server after the keyword relaying, and data storing basic data of the misuse determination of the keyword advertisement relaying; Storage unit, the basic data and the growth A fraud probability adjusting unit that adjusts a fraud probability value that is a basis for fraud determination of the keyword advertisement relay based on the relay information or the event information, and determines that the fraud probability value is more than a predetermined value; Provided is a keyword advertisement fraud detection apparatus including a determination unit.

The present invention also provides a keyword advertisement including a user device for performing a keyword search, a server for relaying keyword advertisements for the keyword search of the user device, and an advertisement server for receiving keyword advertisement relay and providing information to a user. A keyword advertisement fraud detection device provided in a server that performs the keyword advertisement relay in a system, the keyword relay information for obtaining keyword relay information which is corresponding information until the keyword relay is performed from the user device to the advertisement server. An acquiring unit, an event information extracting unit for extracting event information which is information transmitted / received between the user device and the advertisement server after the keyword relay, and a data storage unit storing basic data of the misuse determination of the keyword advertisement relay; And, the basic data and the keyword relay A fraud probability adjusting unit that adjusts a fraud probability value that is the basis of fraud determination of the keyword advertisement relay based on the information or the event information, and determines that the fraud probability value is greater than or equal to a predetermined value; Provided is a keyword advertisement fraud detection apparatus including a portion.

Hereinafter, with reference to the accompanying drawings, the keyword advertising fraud detection apparatus of the present invention will be described in more detail.

The keyword advertisement fraud detection apparatus of the present invention includes a user device that performs a keyword search, a server that performs a keyword advertisement relay for the keyword search of the user device, and an advertisement that receives a keyword advertisement relay and provides information to the user. In the keyword advertising system including a server, it is preferable to be provided at the advertisement server side or may be provided at the server side for performing keyword advertisement relay.

2 is a block diagram of a keyword advertisement fraud detection apparatus according to the present invention.

As shown, the keyword advertisement fraud detection apparatus according to the present invention includes a keyword relay information obtaining unit 110, an event information extracting unit 120, a data storage unit 130, a fraud probability adjusting unit 140 and And a determination unit 150.

The keyword relay information acquisition unit 110 acquires keyword relay information, which is corresponding information until keyword relay is performed from the user device to the advertisement server.

The event information extractor 120 extracts event information, which is information transmitted and received between the user device and the advertisement server after the keyword relay.

The data storage unit 130 stores the basic data of the misuse determination of the keyword advertisement relay.

The illegal use probability adjusting unit 140 adjusts the illegal use probability value that is the basis of the illegal use determination of the keyword advertisement relay based on the basic data and the keyword relay information or event information.

The determination unit 150 determines that the illegal use probability value is equal to or larger than a predetermined value.

Detailed operations will be described below in each case.

(1) The keyword relay information may be, for example, a unique identifier of the user device for the advertisement server. In this case, the basic data stored in the data storage unit 130 are unique identifiers of the user devices which are regarded as illegal use among the user devices relayed to the advertisement server within a predetermined period of time.

The illegal use probability adjusting unit 140 increases the illegal use probability value by a predetermined value when the keyword relay information is the same as the basic data, that is, when the unique identifier obtained from the user device is the same as the unique identifier stored in the basic data.

(2) The keyword relay information may be a network address of the user device or a network address of the device used in the process of relaying the user device to the advertisement server.

In this case, the basic data is the network address of user devices deemed to be fraudulent among the user devices relayed to the ad server within a certain period or the network address of a device used in the process of relaying the user devices deemed to be fraudulent to the ad server. .

In this case, the illegal use probability adjusting unit 140 increases the illegal use probability value by a predetermined value when it is determined that the keyword relay information is the same region or the same region as the basic data.

In other words, when a user accesses an advertisement server while changing a network address in a PC room or the like and uses it illegally, the network address is changed for each connection.

However, according to the present invention, if the same connection is continuously performed in a certain area, it is stored as a basic data in advance, and if the connection continues, it can be regarded as a high probability of fraudulent use.

(3) The keyword relay information may be a path in the advertisement server to access from the user device. Fundamental data is information about pathways presumed to be fraudulent.

The illegal use probability adjusting unit 140 increases the illegal use probability value by a predetermined value when the keyword relay information and the basic data are the same.

In other words, the competitor of the operator of the advertising server, etc. can malicious use of keyword advertising. In this case, after accessing the advertisement server or at the same time, a specific path in the advertisement server may be requested. In general, a relay request received through a keyword advertisement search is not often performed directly through a login path and performing an information provision path, an advertisement click path, and the like in the advertisement server. Therefore, it may be suspected of fraud if the user connects to the login path of the advertisement server after the access request or at the same time.

Therefore, it is possible to determine that a keyword relay having the same access path as the corresponding path is stored in advance in a path suspected of such fraud, and that the probability of fraud is high.

(4) The keyword relay information may be the number of access paths from the user device to the advertisement server, and the basic data may be the minimum number of paths determined to be not used illegally.

That is, in the case of a normal user's connection, there is a minimum number of paths that must be passed from the user device to the advertisement server, and the number of the minimum paths is stored as basic data.

For example, a normal user accesses a search engine, performs a keyword search, and then accesses an advertisement server through an advertisement list in a search result.

However, if a part of the essential path is omitted through a program such as a robot, and keyword relaying is performed through a query of a previously acquired advertisement list without accessing a search engine and performing a keyword search, this is determined to be illegal. This is possible.

Therefore, if the number of paths of the keyword relay information is smaller than the number of paths of the basic data, the illegal use probability adjusting unit 140 increases the illegal use probability value by a predetermined value.

(5) The basic data may be an average number of keywords relayed to the ad server for each time zone, and the keyword relay information may be a total number of keywords relayed to the ad server within a predetermined time.

In this case, statistically, if the number of keyword relays that is much larger than the average number of times, for example, 10 times or more of the average value is statistically determined, it may be determined that the keyword relay has a high probability of fraudulent use.

Therefore, the illegal use probability adjusting unit 140 increases the negative use probability value by a predetermined value in this case.

(6) The event information is information requested from the user device to the advertisement server, and the basic data may be essential information requested from the user device to the advertisement server when considered to be normal use.

For example, in the case of a keyword search of a normal user, a transmission completion response from a user device is transmitted to data transmitted from an advertisement server, and additional information such as media download may be requested from the advertisement server. Therefore, after setting the required information as basic data, the probability of fraudulent use can be adjusted according to whether the required information is requested.

The illegal use probability adjusting unit 140 increases the illegal use probability value by a predetermined value when the event information does not include basic data.

(7) The event information may be any one of a user login from the user device to the ad server, an additional search, a post registration, a subscription, an advertisement click, a detailed information download, a purchase or a community subscription or activity scenario corresponding to the advertisement server. Or information indicating whether an operation is performed in response to such an event. In this case, the unauthorized use probability adjusting unit 140 increases the illegal use probability value by a predetermined value when there is no request or execution for the above-described event in the event information.

(8) The event information may be login ID information when a user logins from the user device to the advertisement server, and the basic data may be login ID information of the user devices relayed to the advertisement server within a predetermined period of time.

In this case, if the login with the same ID continues within a certain period of time, this is meaningless for the keyword advertisement, and there is a high possibility of fraudulent use.

Therefore, the unauthorized use probability adjusting unit 140 increases the illegal use probability value by a predetermined value when the login ID of the event information and the login ID of the basic data are the same.

(9) The event information is the number of page-views provided to the user device after the keyword advertisement relay or the time the user device stays in the advertisement server, and the basic data is extracted on average from user devices relayed to the advertisement server within a certain period of time. It can be an average page-view number or an average dwell time.

In this case, the fraud probability adjusting unit 140 sets the fraud probability value by a predetermined value when the page-view number or the residence time value of the event information is less than a predetermined ratio of the average page-view number or the average dwell time value of the basic data. Increase.

In various cases as described above, the unauthorized use probability controller 140 increases or decreases the illegal use probability value.

In response to the foregoing, the determination unit 150 determines that the illegal use probability value is greater than or equal to a predetermined value, and thus uses the wrong use.

For example, if the fraud probability value is initially set to 0, and the threshold for judging fraud is set to 0.7, for example, each of the nine cases described above corresponds to a fraud probability value of 0.9. It will be possible.

Also, for example, if the probability of use of fraud is initially set to 0, and the threshold value determined to be the use of fraud is set to 5, for example, each of the nine cases described above is applicable. This can be judged as fraudulent use.

As described above, the present invention can comprehensively determine the illegal use of keyword advertising in consideration of various aspects.

When the keyword advertisement fraud detection apparatus according to the present invention is provided in the advertisement server, the apparatus may further include a fraud information storage unit 160, a fraud information transmission unit 170, or a second fraud information transmission unit 180. Can be.

The illegal use information storage unit 160 stores detailed information on the corresponding keyword relay when the determination unit 150 determines that the illegal use is illegal. The illegal use information storage unit 160 preferably stores the detailed information on the corresponding keyword relay so as not to be modified, and may store the hash information in the form of hashing or the like.

This storage is intended to be used as a basis for negotiating fee reductions for fraudulent use between the advertisement server and the server performing keyword advertisement relay.

The illegal use information transmitting unit 170 transmits the detailed information on the corresponding keyword relay to the server that performs the keyword advertisement relay when the determination unit 150 determines that the illegal use. This is intended to be used as a basis for negotiating a fee reduction or the like for fraudulent use between an ad server and a server that performs keyword advertisement relaying, similarly to the misuse information storage unit 160.

When the determination unit 140 determines that the use is illegal, the second illegal use information transmission unit 180 transmits detailed information on the corresponding keyword relay to an external storage organization. This is to be stored in a trusted external storage institution for use as a basis in negotiations, such as fee reductions for fraud between the ad server and the server performing keyword advertisement relay.

Although the present invention has been described in detail, this is for illustrative purposes only, and the protection scope of the present invention is not limited thereto, and the protection scope of the present invention is defined through the description of the claims.

As described above, according to the present invention, when performing keyword advertising, an advertiser may detect a problem that causes excessive billing by increasing only the number of clicks on an ad server connected to a specific keyword advertisement for negative purposes, In particular, the existing keyword advertising fraud detection mainly includes based on limited data between the server performing the keyword advertisement relay and the user device, and additionally includes information such as an event in the advertisement server due to the inefficiency and judgment uncertainty. To detect fraudulent use.

Claims (16)

And a user device that performs a keyword search, a server that performs keyword advertisement relay for the keyword search of the user device, and an advertisement server that receives keyword advertisement relay and provides information to the user. A keyword advertisement fraud detection device provided in a server, A keyword relay information acquisition unit for acquiring keyword relay information which is corresponding information until the keyword relay is performed from the user device to the advertisement server; An event information extraction unit for extracting event information which is information transmitted and received between the user device and the advertisement server after the keyword relay; A data storage unit for storing basic data of the misuse determination of the keyword advertisement relay; A fraud probability adjusting unit configured to adjust a fraud probability value that is a basis for fraud determination of the keyword advertisement relay based on the basic data, the keyword relay information, or the event information; Determination unit for determining that the illegal use probability value is greater than or equal to a predetermined value that the illegal use probability value Keyword advertising fraud detection device comprising a. In the keyword advertising system including a user device for performing a keyword search, a server for performing a keyword advertising relay for the keyword search of the user device, and an advertisement server for receiving a keyword advertising relay to provide information to the user A keyword advertisement fraud detection apparatus provided in a server that performs keyword advertisement relaying A keyword relay information acquisition unit for acquiring keyword relay information which is corresponding information until the keyword relay is performed from the user device to the advertisement server; An event information extraction unit for extracting event information which is information transmitted and received between the user device and the advertisement server after the keyword relay; A data storage unit for storing basic data of the misuse determination of the keyword advertisement relay; A fraud probability adjusting unit configured to adjust a fraud probability value that is a basis for fraud determination of the keyword advertisement relay based on the basic data, the keyword relay information, or the event information; Determination unit for determining that the illegal use probability value is greater than or equal to a predetermined value that the illegal use probability value Keyword advertising fraud detection device comprising a. The method according to claim 1 or 2, The keyword relay information is a unique identifier of the user device for the ad server, The basic data is a unique identifier of the user devices that are deemed to be fraudulent among the user devices relayed to the ad server within a period of time; The illegal use probability adjusting unit increases the illegal use probability value by a predetermined value when the keyword relay information is the same as the basic data. The method according to claim 1 or 2, The keyword relay information is a network address of the user device or a network address of a device used in the process of relaying the user device to the advertisement server. The basic data is a network address of user devices deemed to be fraudulent among user devices relayed to the ad server within a predetermined period of time, or a device used in the process of relaying the user devices deemed to be fraudulent to the ad server. Network address, And the fraud probability adjusting unit increases the fraud probability value by a predetermined value when it is determined that the keyword relay information is the same region or the same region as the basic data. The method according to claim 1 or 2, The keyword relay information is a path in the ad server to access from the user device The basic data is information on a path suspected of being fraudulent; The illegal use probability adjusting unit increases the illegal use probability value by a predetermined value when the keyword relay information and the basic data are the same. The method according to claim 1 or 2, The keyword relay information is the number of access paths connected to the advertisement server through the server for performing the keyword advertisement relay from the user device, The base material is the minimum number of paths that are determined not to be fraudulent The illegal use probability adjusting unit increases the illegal use probability value by a predetermined value when the value of the keyword relay information is smaller than the value of the basic data. The method according to claim 1 or 2, The basic data is the average number of keywords relayed to the ad server for each time zone, The keyword relay information is the total number of the keyword relayed to the ad server within a predetermined time, And the illegal use probability adjusting unit increases the illegal use probability value by a predetermined value when a value of the keyword relay information is a predetermined ratio or more than a value of the basic data extracted corresponding to a predetermined time. The method according to claim 1 or 2, The event information is information requested from the user device to the advertisement server. The basic data is essential information requested from the user device to the ad server when considered normal use, And the fraud probability adjusting unit increases the fraud probability value by a predetermined value when the event information does not include the basic data. The method according to claim 1 or 2, And the essential information includes a transmission completion response from the user device to a data transmitted from the advertisement server or a media download request from the user device to the advertisement server. The method according to claim 1 or 2, The event information may be any one of a user login from the user device to the advertisement server, additional search, post registration, membership registration, advertisement click, detailed information download, purchase, or community subscription or activity scenario corresponding to the advertisement server. Information indicating whether an action was performed or in response to such an event. The illegal use probability adjusting unit increases the illegal use probability value by a predetermined value when the event request or the execution does not exist in the event information. The method according to claim 1 or 2, The event information is login ID information when a user log in from the user device to the advertisement server. The basic data is login ID information of user devices relayed to the advertisement server within a predetermined period of time. And wherein the illegal use probability adjusting unit increases the illegal use probability value by a predetermined value when the event information and the basic data are the same. The method according to claim 1 or 2, The event information is the number of page-views provided to the user device after the keyword advertisement relay or the time the user device stays in the advertisement server. The basic data is the average number of page-views or average residence time extracted on average from user devices relayed to the ad server within a period of time, The illegal use probability adjusting unit increases the illegal use probability value by a predetermined value when the value of the event information is a predetermined ratio or less than the value of the basic data. The method of claim 1, If the determination unit determines that the fraud is illegal use information storage unit for storing detailed information on the keyword relay Keyword advertising fraud detection device further comprising. The method of claim 13, wherein the illegal use information storage unit, The apparatus of claim 13, wherein the detailed information on the corresponding keyword relay is stored so as not to be modified. The method of claim 1, If the determination unit determines that the fraud is illegal use information transmission unit for transmitting the detailed information on the keyword relay to the server that performs the keyword advertising relay Keyword advertising fraud detection device further comprising. The method of claim 1, A second misuse information transmission unit for transmitting the detailed information on the corresponding keyword relay to an external storage organization when the determination unit determines that the misuse is made; Keyword advertising fraud detection device further comprising.

Images