WO2010035670A1

WO2010035670A1 - Application control method, application control program, server device, client device, and application control system

Info

Publication number: WO2010035670A1
Application number: PCT/JP2009/066147
Authority: WO
Inventors: 雅幸伴野; 雅之長町; 康晴山田
Original assignee: 株式会社Access
Priority date: 2008-09-25
Filing date: 2009-09-16
Publication date: 2010-04-01
Also published as: JP2011253211A

Abstract

Provided is a method which can appropriately protect benefits of both of an administrator and an advertiser by effectively detecting tampering of a Web content which can be redistributed such as Widjet. The method is executed by a server device which communicates with a client device having an application having the advertisement display function and distributes an advertisement displayed on the application to the client device. The method includes: a step that the server device communicates with the client device at a predetermined timing so as to detect whether a content stored in the client device and to be displayed on the application is not tampered; and a step that the server device instructs the client device to limit the display of the advertisement on the application or the function of the application if the content has been tampered.

Description

Application control method, application control program, server device, client device, and application control system

The present invention relates to an application control method for restricting the display of advertisements on an application having an advertisement display function, and more specifically, based on the completeness and authenticity of the contents of a widget that is a kind of application. The present invention relates to an application control method for permitting or prohibiting display of an advertisement on an application. The present invention also provides an application control program for causing a computer to execute the application control method, a client device having the application control program, a server device connected to the client device via a predetermined network, and the server device. And an application control system having the client device.

With the improvement of Web technology, Web services that display advertisements published by advertisers other than Web site managers on Web pages have become widespread. When such a web service is used, the advertiser can appeal the contents of the product to the site viewer and recognize it, and can promote the use or purchase of the product. On the other hand, the site administrator who provided the advertising space on the Web page responded to the affiliate revenue according to the number of clicks on the advertisement, that is, the reward according to the number of clicks, or the purchase of the product at the linked site by the clicked user You can get rewards.

In order to obtain a high advertising effect (high affiliate income from the viewpoint of a site administrator) by using advertisements on a web page, the web in which advertisements are displayed in countless web pages on the web It is desirable to have a mechanism in which pages are efficiently accessed by user groups and purchasers targeted by advertisers. In recent years, in order to meet such demands, Web services for selecting and displaying on a Web page an advertisement that is likely to be relevant to the interests of a site visitor from advertisements put out by a large number of advertisers have been proposed and spread. . An example of such a Web service is disclosed in International Publication WO 2004/029758 (hereinafter referred to as “Patent Document 1”). According to Patent Document 1, when a user browses a web page (when accessing a web page using a client device), the advertisement system automatically analyzes the content of the web page. The advertisement system is configured to select an advertisement related to the Web page based on the analysis result as an advertisement conforming to the user's interest, and distribute the advertisement to the client device. On the client device, the advertisement distributed by the advertisement system is displayed on the web page.

Since the Web page is information stored in a server on the network, there is a possibility that the Web page may be altered by unauthorized access to the server by a third party. If a web page is tampered with, the site administrator will suffer damage, as well as a disadvantage for the advertiser who placed the advertisement on the web page. Specific disadvantages that arise for advertisers include the fact that published advertisements are displayed on improperly altered (for example, unrelated to the advertising content) web pages, so high advertising effectiveness cannot be obtained. is there. In addition, depending on the content that has been altered (for example, if an alteration is made to a Web page that contains expressions that are not preferable to society, an advertisement is placed on such a Web page), the advertiser's image and social position There is also a disadvantage that damages etc.

By the way, the location of the Web page on the network is specified by a URL (Uniform Resource Locator). Therefore, the site administrator can easily detect falsification of the Web page by specifying the URL, accessing the Web page, and checking the display content and source of the Web page. When the site manager detects tampering, the site manager can promptly repair the Web page to prevent its own damage and protect the advertiser's profit.

On the other hand, in the case of Web content distributed from a server to a client, such as a widget, it is technically possible for a third party to download the Web content to the client and then tamper and redistribute it to another client. . The content manager is unaware of the location of the Web content that has been altered and redistributed on the network, and has no way of knowing its existence. For this reason, content managers and advertisers cannot detect tampering, and cannot even recognize damages and disadvantages that occur to themselves. To date, no problem has been raised about the damage to the interests of both administrators and advertisers when redistributable Web content such as widgets has been tampered with. Not done.

The present invention has been made in view of such circumstances, and the object of the present invention is to effectively detect alteration of redistributable Web content such as a widget to protect the interests of both the administrator and the advertiser. A client device suitable for the system, a server device connected to the client device via a predetermined network, and an application control system including the server device and the client device are provided. Moreover, it is providing the application control method corresponding to the application control program which this client apparatus, a server apparatus has, and an application control program.

An application control method according to an aspect of the present invention that solves the above problem is a server apparatus that communicates with a client apparatus having an application having an advertisement display function and distributes an advertisement displayed on the application to the client apparatus. Is a method to be executed, and includes the following steps. That is, the application control method includes a falsification detection step in which a server device communicates with a client device at a predetermined timing to detect falsification of content stored in the client device and scheduled to be displayed on the application. And a restriction instruction step in which the server apparatus causes the client apparatus to issue a restriction regarding the display of an advertisement on the application or a function restriction of the application when alteration of the content is detected. In this way, the server device monitors the integrity of the content stored in the client device, and when the integrity is broken, for example, the advertisement is displayed simultaneously with the content. Will not be done. By performing control not to display advertisements, it is possible to effectively avoid a reduction in advertising effectiveness, a downsizing of the advertiser's image, a loss of social position, and the like. In addition, the content creator can be effectively protected (copyright infringement deterrence effect), that is, the content infringement and redistribution of the content author can be effectively prevented.

The application control method according to the present invention includes a content distribution step of distributing content to a client device together with first content certification data unique to the content in order to ensure that the content is content distributed from an authorized publisher. The first content certification data transmitted from the client device when communicating with the client device at a predetermined timing and the second content certification data corresponding to the first content certification data. An authenticity confirmation step of confirming the authenticity of the one content certification data, and instructing the client device to perform the above instruction even when it is confirmed in the restriction instruction step that the first content certification data is not authentic It is desirable to be a method. Such a method may further include a content certification data storage step of generating first and second content certification data based on the content and storing the first and second content certification data in a predetermined database. The first content certification data may be generated by encrypting the second content certification data.

Further, the application control method according to the present invention may be a method further including a content update step of executing an update process of content stored in the client device by communicating with the client device. In this case, the predetermined timing is, for example, content update processing timing or predetermined periodic timing.

Also, an application control method according to an aspect of the present invention for solving the above-described problem is a method executed by a client device having an application having an advertisement display function, and includes the following steps. That is, the application control method includes a falsification detection data generation step for generating falsification detection data for detecting falsification of content based on the content scheduled to be displayed on the application, and the generated falsification detection. Based on an instruction from the server device when the server device detects falsification of the content based on the falsification detection data transmitted by the client device, A restriction execution step for restricting the display of an advertisement on the application or restricting the function of the application. In this way, the server device monitors the integrity of the content stored in the client device, and when the integrity is broken, for example, the advertisement is displayed simultaneously with the content. Will not be done. By performing control not to display advertisements, it is possible to effectively avoid a reduction in advertising effectiveness, a downsizing of the advertiser's image, a loss of social position, and the like. In addition, the content creator can be effectively protected (copyright infringement deterrence effect), that is, the content infringement and redistribution of the content author can be effectively prevented.

Here, restrictions on the display of advertisements include, for example, prohibition of display of advertisements on the application. The application function restriction includes, for example, at least one of prohibiting activation of the application and erasing content from the client device.

The application having the advertisement display function may be, for example, a widget that is a kind of application.

Also, a user information providing program according to an embodiment of the present invention that solves the above-described problem is a program for causing a computer (server device or client device) to execute the user information providing method described above.

In addition, a server device according to an aspect of the present invention that solves the above problem is a device that communicates with a client device having an application having an advertisement display function and distributes an advertisement displayed on the application to the client device. It is characterized by having the following components. That is, the server device communicates with the client device at a predetermined timing, and detects falsification of the content stored in the client device that is scheduled to be displayed on the application, and falsification of the content. And a restriction instructing unit which makes a client device a restriction on displaying an advertisement on an application or a function restriction on the application when an application is detected.

The server device according to the present invention is transmitted from the client device when communicating with the content delivery means for delivering the content to the client device together with the content-specific first content certification data, and the client device at a predetermined timing. Further comprising authenticity confirmation means for confirming the authenticity of the first content certification data based on the first content certification data and the second content certification data corresponding to the first content certification data Configuration is desirable. In such a configuration, the restriction instructing unit instructs the client device even when it is confirmed that the first content certification data is not authentic. The server device may further include content proof data storage means for generating first and second content proof data based on the content and storing them in a predetermined database. The first content certification data may be generated, for example, by encrypting the second content certification data.

In addition, the server device according to the present invention may be configured to further include a content update unit that communicates with the client device and executes an update process of the content stored in the client device. Here, the predetermined timing is, for example, a content update processing timing or a predetermined periodic timing.

In addition, a client device according to an embodiment of the present invention that solves the above-described problem is a device having an application having an advertisement display function, and has the following components. That is, the client device includes a falsification detection data generation unit that generates falsification detection data for detecting falsification of the content based on the content scheduled to be displayed on the application, and the generated falsification detection data. On the application based on an instruction from the server device when the alteration detection of the content based on the alteration detection data transmitted by the alteration detection data transmitted by the alteration detection data transmitted to the predetermined server device And a restriction execution means for executing restriction on application display or restriction on application functions.

An application control system according to an aspect of the present invention that solves the above problems includes a server device according to any one of the above and a client device according to any of the above. It is.

Also, an apparatus having an application having an advertisement display function according to another embodiment of the present invention that solves the above-described problems, is characterized by having the following components. That is, the client device is based on the falsification detection data receiving means for receiving the first falsification detection data transmitted from the predetermined server device and the content scheduled to be displayed on the application. Comparing the tamper detection data generation means for generating the second tamper detection data for detecting the first tamper detection data received with the generated second tamper detection data It is characterized by having a falsification detection means for detecting falsification of contents, and a restriction execution means for executing restrictions on display of advertisements on applications or function restrictions of applications when the falsification of contents is detected. Device.

According to the present invention, a client device suitable for a system that effectively detects tampering of redistributable Web content such as a widget and protects the interests of both an administrator and an advertiser, A server device connected via a network and an application control system having both of the devices are provided. Specifically, according to the present invention, the server device monitors the integrity of the content stored in the client device, and when the integrity is broken, for example, the restriction on the display of the advertisement is performed. Ads are no longer displayed at the same time as content. By performing control not to display advertisements, it is possible to effectively avoid a reduction in advertising effectiveness, a downsizing of the advertiser's image, a loss of social position, and the like. In addition, the content creator can be effectively protected (copyright infringement deterrence effect), that is, the content infringement and redistribution of the content author can be effectively prevented. In addition, an application control program for executing such processing that the client device and the server device effectively detect falsification of redistributable Web content such as a widget and protect the interests of both the administrator and the advertiser, And an application control method corresponding to the application control program.

It is a network block diagram for demonstrating embodiment of this invention. It is the figure which showed the external appearance of the mobile telephone terminal of embodiment of this invention. It is the block diagram which showed schematic structure of the mobile telephone terminal of embodiment of this invention. It is the figure which showed notionally the widget execution environment for operating the various widgets mounted in the mobile telephone terminal of embodiment of this invention. It is an example of a display of the widget displayed on the display of embodiment of this invention. It is a figure which shows the flow of a process when the mobile telephone terminal of embodiment of this invention downloads a desired widget package from a widget delivery system. It is a figure which shows the flow of the process which the mobile telephone terminal and widget delivery system of embodiment of this invention perform. It is a figure which shows the flow of the process which the mobile telephone terminal and widget delivery system of another embodiment perform.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

First, terms used in this specification will be defined.
・ Videos, images, sounds, and documents viewed by users that are transmitted via various communication networks and content networks including mobile communication networks, intranets, and the Internet of network mobile communication carriers, or stored locally Is a form of a set of information / Web content content composed of information such as a worksheet, or a combination thereof, and is a form of a set of information / Web page Web content transmitted via a network, The entire content to be displayed when the user specifies a Uniform Resource Identifier (URI). That is, the entire content that can be displayed by scrolling through the images on the display. Web pages are not limited to being browsed online, but include those browsed offline. Web pages browsed offline include, for example, pages transmitted via the Internet and cached by information browsing software (for example, a web browser), pages saved in a local folder of the terminal device, etc. . The Web page is composed of various data (Web page data) such as an HTML (Hyper Text Markup Language) document, an XHTML (Extensible Hyper Text Markup Language) document, an image file, and audio data.

According to the above definition, content includes Web content, and Web content includes Web pages.

FIG. 1 is a network configuration diagram for explaining an embodiment of the present invention. As shown in FIG. 1, a network system 1 according to the present embodiment includes a widget distribution system 3, each client terminal (mobile phone terminal 10, notebook PC (Personal Computer)) via a network 2 including the Internet and a carrier communication network. 11, desktop PCs 12) are connected so as to be capable of bidirectional communication. The widget distribution system 3 and each client terminal are connected via an infinite number of network devices and base stations scattered on the network 2. The client terminal can be replaced with another type of terminal in which information browsing software is installed, such as a PDA (Personal Digital Assistant), a PHS (Personal Handy Phone System), a portable game machine, or a home appliance.

Each client terminal performs necessary data exchange with the widget delivery system 3 and other web servers not shown via the network 2 to provide various web services to the user. Hereinafter, the mobile phone terminal 10 is taken as an example of a client terminal that communicates with various servers, and this embodiment will be described in detail.

FIG. 2 is an external view of the mobile phone terminal 10 of the present embodiment. FIG. 3 is a block diagram showing a schematic configuration of the mobile phone terminal 10. As illustrated in FIG. 3, the mobile phone terminal 10 includes a CPU (Central Processing Unit) 103 that performs overall control of the apparatus. Each element constituting the mobile phone terminal 10 is connected to the CPU 103 via the system bus 119. Each element constituting the mobile phone terminal 10 includes a flash memory 105, a RAM (Random Access Memory) 107, a network interface 109, a display 111, a user input device 113, and a VRAM (Video Random Access Memory) 115. The system bus 119 includes a power supply line in addition to the data line. Each element of the cellular phone terminal 10 including the CPU 103 is supplied with power from a battery (not shown) via a power line.

The CPU 103 accesses necessary hardware via the system bus 119 after the mobile phone terminal 10 is powered on. For example, immediately after the mobile phone terminal 10 is turned on, the CPU 103 accesses the flash memory 105 to read the firmware 200, loads it into the RAM 107, and activates the firmware 200. As a result, each element performs various processes in cooperation with each other as necessary under the management of resources and processes by the firmware 200.

For example, when an operation for starting a Web browser (not shown) is performed by the user input device 113, the firmware 200 loads the Web browser into the RAM 107 and starts it in order to operate the Web browser on the firmware 200. The web browser activated by the firmware 200 performs processing in cooperation with hardware such as the CPU 103 in accordance with an operation for accessing web content by the user. As a result of such processing, the user can browse the web through the display 111, that is, browse web content.

The mobile phone terminal 10 is provided with a 5-way key 113a, a numeric keypad 113b, and the like as user input devices 113. The 5-way key 113a is a composite key composed of four directional keys (up / down / left / right) and an enter key. When the user performs a key operation on the user input device 113, an input signal corresponding to the key operation is input to the CPU 103. Various functions such as Web browsing are realized in the mobile phone terminal 10 by the CPU 103 executing processing according to the input signal. During web browsing, the user can scroll the web content being browsed by operating either the 5-way key 113a or the numeric keypad 113b. In addition, by operating the 5-way key 113a or the numeric keypad 113b, it is possible to select a form, a link or the like on the content.

Note that the user input device 113 does not need to be a mechanical key such as the 5-way key 113a and the numeric keypad 113b, and may be configured with another type of key such as a membrane key or a touch panel.

When the user input device 113 is configured by a touch panel, for example, the operation screen corresponding to the operation key is configured as a screen integrated with the display 111 or a separate screen. In the former case, the display 111 itself is composed of a touch panel. In the latter case, the mobile phone terminal 10 has a two-screen configuration including a display 111 and an operation touch panel. In the latter case, whether or not the display 111 is also configured by a touch panel is appropriately selected according to the design specifications.

When the user input device 113 is configured as a touch panel in this way, a GUI (Graphical User Interface) environment is provided in which operations such as screen scrolling and link selection are performed by pen touch or finger touch on operation keys arranged on the screen. The It is also possible to provide a GUI environment in which various operations are performed, for example, by directly touching a screen on which Web content is displayed. Under such a GUI environment, for example, when the touch panel surface is traced up and down and left and right with an arbitrary position on the screen display of the Web content being finger touched, the screen display is scrolled accordingly (for example, the touch panel surface is moved upward). If you trace your finger in the direction, the web content scrolls down). That is, in this case, the screen is scrolled according to the movement of the stylus, finger, etc., so that more intuitive operability is provided to the user.

Further, the mobile phone terminal 10 may have a configuration having another type of operation key such as a jog dial. In this case, the user can operate the jog dial or the like to perform screen scrolling or link selection operation.

Also, the user input device 113 may be configured by appropriately combining various types of keys such as mechanical keys, membrane keys, and touch panels. Further, the user input device 113 may be configured by a controller independent of the mobile phone terminal 10 main body.

Furthermore, components other than mechanical keys, membrane keys, touch panels, and the like can be provided as part of the user input device 113. Examples of such components include a gyro sensor, an acceleration sensor, and a jerk sensor. In this case, for example, the CPU 103 monitors the output of various sensors to measure the tilt angle, angular velocity, acceleration, jerk (time change rate of acceleration), etc. of the mobile phone terminal 10 main body, and screen scrolling according to the measured value is performed. This is realized by a cooperative operation between the CPU 103 and the Web browser. For example, when the user moves or tilts the mobile phone terminal 10 main body up, down, left, or right, screen scrolling is performed according to the moving direction, speed, tilt angle, and the like. Therefore, the user can scroll the display area of the Web content more intuitively.

Further, the mobile phone terminal 10 has a screen aspect ratio of, for example, 3: 4 (in other words, when the mobile phone terminal 10 is directed so that the vertical direction in FIG. (Vertical orientation). When the orientation of the mobile phone terminal 10 is changed from this state, the CPU 103 detects a change in the orientation of the mobile phone terminal 10 based on the output of the gyro sensor or the like. Based on the detection result by the CPU 103, the Web browser performs rendering according to the attitude of the mobile phone terminal 10 with respect to the Web content being displayed on the display 111. For example, when the mobile phone terminal 10 is rotated 90 degrees in the paper from the posture shown in FIG. 2, the aspect ratio of the screen is 4: 3 (the screen is landscape when expressed in another way). At this time, the Web browser re-renders the Web content being displayed on the display 111 in accordance with the landscape screen. When the orientation of the screen is changed in this way, for example, a difference occurs in the text wrapping position at the time of rendering and the appearance of the Web content changes.

As shown in FIG. 2, the mobile phone terminal 10 is a so-called straight type mobile phone terminal that holds the display 111 and the user input device 113 with an integrally formed body. It may be a mobile phone terminal having another structure such as a type, a cycloid type, and a swing type. For example, a cycloid-type or swing-type mobile phone terminal is configured such that the display-side body holding the display 111 can be rotated in a plane parallel to the display 111 with respect to the body-side body holding the user input device 113. ing. In such a mobile phone terminal, the orientation of the screen changes according to the rotation angle of the display-side body. In this case, the Web browser re-renders the Web content being displayed on the display 111 according to the direction so as to be interlocked with the change in the screen direction.

By the way, when browsing a Web content, the user usually uses a Web browser corresponding to various Web services. On the other hand, when it is desired to browse only specific content such as weather forecast, map information, route search, etc., individual widgets equipped with a browsing function for the specific content are convenient. Here, the widget is a standard Web technology such as HTML (Hyper Text Markup Language), XHTML (Extensible Text Hyper Markup Language), CSS (Cascading Style Styles), JavaScript (registered trademark), Ajax (Asynchronous JavaScript + XML), or the like. This is an application that supports a specific web service that can be used in a desktop environment. The widget may be a mini-app with a light processing load. In such a case, once activated, the widget may reside on the desktop (standby screen or the like) of the terminal device. Therefore, such a widget has an advantage that specific content can be quickly provided to the user with a small amount of resource consumption. In the present embodiment, the widget resides on the desktop of the mobile phone terminal 10 after the firmware 200 is activated. However, the widget can be set to be activated as needed.

FIG. 4 is a diagram conceptually showing a widget execution environment 300 for operating various widgets mounted on the mobile phone terminal 10. In the upper layer of the firmware 200, a widget engine 210 that is a rendering engine for browsing specific Web content is installed. On the upper layer of the widget engine 210, a widget manager 220 and a widget player 240 that operate based on the widget engine 210 are mounted. The widget manager 220 and the widget player 240 can be obtained from, for example, the widget distribution system 3 of a vendor operating a community site that distributes widgets (hereinafter referred to as “community site vendor 3 '” for convenience of explanation).

As shown in FIG. 1, the widget distribution system 3 has a gateway server 31. The gateway server 31 has switching and routing functions, and can interconnect each information device in the widget distribution system 3 and communicate with each client terminal connected via the network 2.

The widget distribution system 3 has a Web server 32. The Web server 32 has a community site that distributes widgets, that is, a Web page group displayed on the Web browser of each client terminal. The Web server 32 accesses various databases in the widget distribution system 3 in response to the request transmitted from the client terminal, acquires necessary information, processes the information, and returns a response to the client terminal.

The widget distribution system 3 has a storage 33 that stores a large number of widget packages in which files constituting the widget are stored. Specifically, the widget package is data obtained by packaging an XML (Extensible Markup Language) manifest and Web contents (for example, HTML + CSS) in a ZIP format. The standards for widget packages are defined in W3C Widgets 1.0 Requirements (http://www.w3.org/TR/2007/WD-widgets-reqs-20070209/). The XML manifest is a file for defining necessary information of the widget, and has information such as the name of the widget and the creator of the widget.

Widget packages are provided not only by the community site vendor 3 'but also by users registered on the community site. The community site vendor 3 ′ examines the widget provided by itself or the widget provided by the registered user in accordance with a predetermined check item (for example, “whether the widget does not include an expression that is unfavorable for social reasons”). Only those that pass are registered in the community site (stored in the storage 33).

The widget distribution system 3 has a widget management database 34 that manages various widget packages (that is, various widgets). The widget management database 34 manages various widget packages in association with information related to widgets (hereinafter referred to as “widget information”). The widget information includes, for example, a widget name, widget ID, widget version, package URL, package size, and the like. The widget ID is a unique ID assigned to identify the widget on the computer. The old and new widgets having different versions are assigned the same widget ID and different widget versions.

In order to download a desired widget package to the mobile phone terminal 10, the user must first register as a user on the community site of the widget distribution system 3. The user performs user registration by inputting necessary information on the online form of the community site. Information required for user registration includes, for example, a user name, password, address, age, gender, e-mail address, and the like. The input information is registered in the user database 35 included in the widget distribution system 3. The user database 35 manages input information by each user in units of records.

The user who has completed user registration operates the widget manager 220 to access the community site (that is, the Web server 32). The user logs in to the community site by entering a user name and password. After logging in to the community site, the user can select a desired widget package in the community site and download it to the mobile phone terminal 10.

For example, when a widget package is selected by a user operation, the widget manager 220 downloads widget information of the widget package prior to downloading the selected widget package. The widget manager 220 compares the downloaded widget information (widget ID) with the widget information (widget ID) of each widget already installed in the widget storage 230, and the widget package selected in the community site is already installed. Determine whether or not. If no widget ID that matches the downloaded widget ID is detected, the widget manager 220 downloads the widget package and installs it in the widget storage 230. In the installation process, the widget manager 220 stores the widget in the widget storage 230 in association with the widget information, XML manifest, etc. so that the installed widget can be managed.

On the other hand, when a widget ID that matches the downloaded widget ID is detected in the widget storage 230, the widget manager 220 compares the widget versions with each other and compares the widget contents on the community site (that is, the widget package). It is determined whether the packaged Web content is a new version. The widget manager 220 updates the widget content by downloading and installing the widget package only when the widget content on the community site is a new version. The widget manager 220 displays a predetermined message on the display 111 notifying that the latest version of the widget content has been installed when the widget versions are the same or the widget package on the community site is an old version. Do not execute the download process.

Note that the widget content update timing is not limited to the timing when the widget is selected on the community site. The widget content update process may be periodically executed by the widget manager 220 for each widget installed in the widget storage 230.

The widget player 240 loads a specified widget in the widget storage 230 under the management of the widget manager 220 immediately after the firmware 200 is started or when a user operation is performed. Specifically, the widget player 240 uses a progress process to analyze the markup document by the widget engine 210 with respect to the widget content, and a DOM (Document Object model) tree representing the logical structure of the markup document based on the analysis result. Creation processing, layout determination processing of each node (element) of the DOM tree based on the set display magnification, rendering processing of each element whose layout is determined to the image buffer 1071, execution of JavaScript (registered trademark), etc. And a window smaller than the screen size of the display 111 is created for each widget content. Next, a rendering process is performed so that the content rendered in the image buffer 1071 is displayed in a window created for each widget content. Among the contents subjected to such drawing processing, a rendering result scheduled to be displayed on the display 111 is written in the VRAM 115. Note that the VRAM 115 is a memory that holds content directly displayed on the display 111 and has an image area corresponding to the screen size of the display 111. The contents rendered in the image buffer 1071 are written in the VRAM 115 together with an image such as a toolbar. Through the above processing by the widget engine 210, the widget is activated and the widget content is displayed on the desktop of the display 111.

The widget player 240 controls the window display of the widget content, such as the widget content maximizing display processing and the minimizing display processing, the widget content display position changing processing according to the operation, and the display processing when the widget content is superimposed. Do the general.

The XML manifest included in the widget package has information that defines whether or not the widget content is an advertisement display compatible content having a space for displaying an advertisement. In the advertisement display compatible content, a JavaScript (registered trademark) advertisement tag for designating a predetermined advertisement display space on the widget content is described.

The Web server 32 distributes advertisement data to be displayed on the widget content to the mobile phone terminal 10, for example, periodically while the widget content is activated, or at the timing when the widget content is activated. Such advertisement data is stored in the advertisement management database 36 of the widget distribution system 3. In the advertisement management database 36, a lot of advertisement data put out by various advertisers is accumulated. The advertisement data is also examined according to a predetermined check item in the same manner as the widget. Only the advertisement data that has passed the examination is stored in the advertisement management database 36.

The advertisement management database 36 stores each advertisement data in association with the advertisement display compatible content in which the advertisement is to be displayed. In general, at least one or more pieces of advertisement data are associated with the advertisement display compatible content. However, the matching between the advertisement display compatible content and the advertisement data is determined, for example, after the community site vendor 3 'or the advertiser compares and examines the content contents and the advertisement contents. Therefore, the advertisement display compatible content may not be associated with any advertisement data depending on the time and content.

When the advertisement data is distributed from the Web server 32, the widget player 240 inserts the advertisement data into the advertisement tag of the advertisement display compatible content. Next, various processing and window generation processing are performed by the widget engine 210, and the rendered content is displayed on the window. FIG. 5 is a display example of widgets displayed on the display 111. According to the example of FIG. 5, a weather forecast widget W 1, a restaurant search widget W 2, and a map search widget W 3 are displayed on the desktop of the display 111. In the example of FIG. 5, the weather forecast widget W1 and the map search widget W3 are advertisement display compatible contents. Advertisements AD1 and AD2 are incidentally displayed on the weather forecast widget W1 and the map search widget W3, respectively. When the advertisement data is distributed from the Web server 32, the widget manager 220 may instruct the widget player 240 to insert and display the advertisement data in the advertisement tag.

Here, as described above, conventionally, when a redistributable Web content such as a widget has been tampered with, it has not been possible to effectively avoid the disadvantage to the content manager or the advertiser. It is. However, the widget distribution system 3 of the present embodiment has a mechanism for effectively detecting tampering with widget contents in order to protect the interests of both content managers and advertisers. Hereinafter, this mechanism will be described in detail.

The community site vendor 3 ′ uses a terminal in the widget distribution system 3, for example, to obtain a key pair (public key, private key) using a standard public key cryptosystem algorithm such as RSA (Rivest Shamir Adleman). Generate and hold. The community site vendor 3 ′ submits the owner information (name of the community site vendor 3 ′, whereabouts, contact information, etc.) and the generated public key to the certificate authority to a trusted third party authority. Apply for issuance of an electronic certificate. If there is no problem after confirming the contents of the owner information, the certificate authority attaches the digital signature of the certificate authority to the owner information and the public key. Create and issue an electronic certificate converted to electronic data with specifications according to 509. A certificate list having an electronic certificate issued in this way is preinstalled in the widget manager 220. Such a certificate list is not limited to a preinstalled certificate list, and the widget manager 220 may download and install the certificate list at a predetermined timing. The digital certificate issued here is information used to authenticate the authenticity of the widget content, that is, whether the publisher of the content is a regular publisher. Such an electronic certificate is not limited to the one shown in the present embodiment as long as it has information necessary for authenticating the publisher of the content. In addition, the electronic certificate is not an essential component. An electronic certificate is not particularly required in a system that does not authenticate whether the publisher of the widget content is a regular publisher.

As shown in FIG. 1, the widget distribution system 3 has a content certification data issuing server 37. The content certification data issuing server 37 accesses the storage 33 when a widget that has passed the examination is registered in the community site. The content certification data issuing server 37 generates a message digest (hash value) of the registered widget content using a predetermined hash function. The content certification data issuing server 37 manages the secret key secretly, and encrypts the generated message digest with the secret key. The content certification data issuing server 37 uses the message digest before encryption as content certification data on the widget delivery system side held by the widget delivery system 3, and the client terminal side content certification held by the client terminal on the encrypted message digest. Data is stored and managed in a database (not shown) provided in the content certification data issuing server 37 in association with the registered widget. The content certification data issuing server 37 also generates a message digest (widget delivery system side content certification data) and stores it for each version even when the latest version of the widget content is registered. The widget distribution system side content certification data and the client terminal side content certification data generated by the content certification data issuing server 37 can be stored in the widget management database 34 and managed.

FIG. 6 is a diagram showing a flow of processing when the mobile phone terminal 10 (widget manager 220) downloads a desired widget package from the widget distribution system 3 (Web server 32). In the following description and drawings in the text, the processing step is abbreviated as “S”.

When the widget manager 220 selects a widget package by accessing the community site (that is, the Web server 32) by a user operation, for example, the widget manager 220 requests the widget package (S1). The Web server 32 accesses the storage 33 and acquires the selected widget package. In addition, the content certification data issuing server 37 is accessed to acquire the client terminal side content certification data corresponding to the selected widget package. The Web server 32 returns the acquired widget package together with the client terminal side content certification data to the widget manager 220 (S2).

The widget manager 220 executes installation processing of the downloaded widget package, and associates the client terminal-side content certification data with the installed widget content and stores it in the widget storage 230.

At this time, the widget manager 220 acquires an electronic certificate in communication with the Web server 32. The widget manager 220 uses the certificate list public key to decrypt the electronic signature of the electronic certificate to authenticate that the widget package publisher is a legitimate publisher, that is, the community site vendor 3 ′. It can be carried out.

FIG. 7 is a diagram showing a flow of processing executed by the mobile phone terminal 10 (widget manager 220) and the widget distribution system 3 (Web server 32). The widget manager 220 is installed in the widget storage 230 in accordance with a predetermined timing (for example, timing when communication with the web server 32 occurs, such as timing for updating widget content or periodic timing, or timing according to user operation). The advertisement display compatible content is detected with reference to the XML manifest of each widget that is present (S11). If no advertisement display compatible content is detected, no advertisement is displayed on any widget content. Therefore, the widget manager 220 notifies the Web server 32 of the end of the session and ends the process of FIG. On the other hand, when advertisement display compatible content is detected, the Web server 32 is inquired about the presence or absence of advertisement data corresponding to each detected advertisement display compatible content (S12).

The Web server 32 accesses the advertisement management database 36 in response to an inquiry from the widget manager 220. Next, the presence / absence of advertisement data corresponding to the inquired advertisement display compatible content is confirmed (S13). If there is no advertisement data corresponding to the advertisement display compatible content, the web server 32 notifies the widget manager 220 of the end of the session (S14), and the process of FIG. On the other hand, when the advertisement data corresponding to the advertisement display compatible content is confirmed, the confirmation result is notified to the widget manager 220 (S14).

Since the widget manager 220 is a legitimate application, it holds in advance the same hash function as that of the content certification data issuing server 37 side. Using the hash function, the widget manager 220 generates a message digest of each advertisement display compatible content for which the presence of corresponding advertisement data is confirmed (S15). Here, a message digest of the advertisement display compatible content of the version currently installed in the widget storage 230 is generated. Next, the widget manager 220 acquires the client terminal side content certification data of the advertisement display compatible content that is the basis of each message digest from the widget storage 230. The widget manager 220 sends the generated message digest, the version information of the advertisement display compatible content that is the basis of the message digest, and the set of client terminal side content certification data corresponding to the advertisement display compatible content to the Web server 32. Transmit (S16).

The Web server 32 performs the following security check in order to confirm the authenticity and completeness of the advertisement display compatible content of the mobile phone terminal 10 (S17). That is, the Web server 32 decrypts the client terminal side content certification data received from the mobile phone terminal 10 using the public key. Next, the content certification data issuing server 37 is accessed to match the decrypted data with the widget delivery system side content certification data (that is, message digest). When the two match, it is determined that the security check has succeeded, and when they do not match, it is determined that the security check has failed. At this time, it is also possible to perform a predetermined calculation using the decrypted data and the content certification data on the widget delivery system side, and make a security check success / failure determination based on the result (for example, the calculation result is true) If successful, false if failed). If the security check is successful, the Web server 32 detects that the client terminal-side content certification data is authentic, and the publisher of the widget content corresponding to the certification data is the community site vendor 3 '. On the other hand, if the security check fails, the Web server 32 indicates that the client terminal side content certification data is not authentic (for example, forged or another issuer), and the widget corresponding to the certification data It is detected that the content publisher is not legitimate (that is, community site vendor 3 ′).

In addition, the database provided in the content certification data issuing server 37 stores message digests (contents certification data on the widget distribution system side) of advertisement display compatible contents of the past several generations including the latest version. The Web server 32 matches the message digest transmitted from the widget manager 220 with the version of the message digest corresponding to the transmitted version information in the content certification data issuing server 37. When the two match, it is determined that the security check has succeeded, and when they do not match, it is determined that the security check has failed. Also at this time, as in the confirmation of authenticity, determination may be made based on a predetermined calculation result. When the security check is successful, the Web server 32 detects that the advertisement display compatible content has not been tampered with. On the other hand, if the security check fails, the Web server 32 detects that the advertisement display compatible content has been tampered with.

When the Web server 32 detects that the content certification data on the client terminal side is authentic and the advertisement display compatible content has not been tampered with, that is, the authenticity and integrity of the advertisement display compatible content is guaranteed. If it is, control data permitting the display of the advertisement on the advertisement display compatible content is returned to the widget manager 220 (S18). On the other hand, if at least one of the client terminal-side content certification data is not authentic and / or the advertisement display-compatible content has been tampered with is detected, control to prohibit the display of advertisements on the advertisement display-compatible content The data is returned to the widget manager 220 (S18). The widget manager 220 stores the received control data in the widget storage 230 (S19).

The widget manager 220 accesses the control data stored in the widget storage 230 periodically while the advertisement display compatible content is activated, or at the timing of starting the advertisement display compatible content. If the control data is data that permits display of an advertisement, the widget manager 220 requests the Web server 32 for advertisement data corresponding to the advertisement display-compatible content being activated or activated (S20). The web server 32 accesses the advertisement management database 36 in response to the request and searches for corresponding advertisement data. The Web server 32 delivers the retrieved widget manager 220 (S21). Here, when a plurality of pieces of advertisement data are associated with one advertisement display compatible content, for example, the web server 32 randomly selects one or more advertisement data from the searched advertisement data. Delivered to the widget manager 220. The widget manager 220 inserts the downloaded advertisement data into the advertisement tag of the advertisement display compatible content that is being activated or activated. Next, various processing and window generation processing are performed by the widget engine 210, and the rendered content is displayed on the window (S22). Thereby, as shown in FIG. 5, the advertisement is incidentally displayed on the advertisement display compatible content. When a plurality of advertisement data are distributed, the advertisement display space may be divided into a plurality of parts and the advertisements may be displayed simultaneously, or each advertisement may be displayed in a time division manner. Since the advertisement display compatible content displayed here is not falsified, it has contents suitable for the displayed advertisement. Therefore, the advertisement exhibits a high advertising effect. Advertisers can appeal their products and encourage users to use and purchase products. In addition, the provider of advertisement display compatible content (and the community site vendor 3 ') can obtain affiliate income in accordance with a click on the advertisement or the like. Since the advertiser's target audience has a higher probability of clicking on the advertisement than other general audiences, it is expected that affiliate revenue will increase. The advertisement data is automatically deleted when the advertisement display compatible content is closed to prevent the advertisement from being posted on a website or the like not intended by the advertiser due to redistribution. The terminal 10 may not remain.

On the other hand, when the control data is data that prohibits the display of the advertisement, the widget manager 220 activates (or has already been activated) the advertisement display-compatible content without executing the request transmission process of S20. According to another expression, the Web server 32 does not deliver an advertisement to the widget manager 220 based on the control data when the altered content is used on the mobile phone terminal 10. Since the advertisement display compatible content is activated (or already activated) without downloading advertisement data, no advertisement is displayed in the advertisement display space. That is, if the publisher of the advertisement display compatible content is not authorized or the advertisement display compatible content has been tampered with, the widget manager 220 does not display the advertisement, thereby reducing the advertising effectiveness and the advertiser. It effectively avoids the loss of image and social position. In addition, the content creator can be effectively protected (copyright infringement deterrence effect), that is, the content infringement and redistribution of the content author can be effectively prevented. Further, the community site vendor 3 ′ can examine future countermeasures and take appropriate measures by detecting falsification of the advertisement display compatible content.

By the way, depending on the vendor, a web content (widget content according to the present embodiment) is distributed free of charge, and a system for collecting investment in development costs etc. by affiliate revenue of advertisements displayed on the widget content is constructed. ing. In such a system, when the display of an advertisement on the widget content is prohibited when tampering of the widget content is detected, the vendor cannot obtain affiliate income. For this reason, when tampering with the widget content is detected, the widget content in the client terminal may be deleted, the widget may be prohibited from starting, or the function may be restricted in place of the advertisement display prohibition. Such prohibition of the activation of the widget, for example, prohibits or restricts the use of the user's widget, and thus acts as a deterrent against tampering with the widget content. The prohibition of the activation of the widget may be instructed by the Web server 32, or may be instructed by the widget manager 220.

The present invention is not limited to these embodiments, and various modifications are possible within the scope of the technical idea of the present invention. For example, the configuration of the widget distribution system 3 is not limited to the configuration of the present embodiment. The widget distribution system 3 may be configured by a single server device, for example, or may be configured by a large number of server devices distributed from the configuration of the present embodiment.

FIG. 8 shows a flow of processing executed by the mobile phone terminal 10 (widget manager 220) and the widget distribution system 3 (Web server 32) in another embodiment. In another embodiment, the widget manager 220 and the web server 32 perform the same processing as S1 and S2 in FIG. However, in the process of S2, a message digest of the content is included in the XML signature attached to the widget content (advertisement display compatible content) of the widget package downloaded to the widget manager 220. As shown in FIG. 8, the widget manager 220 executes the same processing as S11 to S14 in FIG. 7 (S31 to S34). In the subsequent process of S35, the widget manager 220 generates a message digest of the advertisement display compatible content. Next, a tampering check is performed in conjunction with the message digest of the XML signature (S36). When tampering with advertisement display-compatible content is detected, the widget manager 220 reduces the effectiveness of the advertisement, reduces the advertiser's image, avoids loss of social position, protects the content creator, etc. Any processing such as prohibition of display of advertisements, prohibition of deletion or activation of the content, or function restriction is executed. On the other hand, if tampering with the advertisement display compatible content is not detected, the message digest generated by the process of S35 and the client terminal side content certification data are transmitted to the Web server 32 (S37). Thereafter, the same processing as S17 to S22 in FIG. 6 is executed between the widget manager 220 and the Web server 32 (S38 to S43). As described above, the alteration check function on the mobile phone terminal 10 side has a deterrent effect on alteration and redistribution of content within a range that cannot be managed by the content creator, the community site vendor 3 ', or the like.

Claims

An application control method executed by a server device that communicates with a client device having an application having an advertisement display function and distributes an advertisement displayed on the application to the client device,
Falsification detecting step of detecting falsification of content scheduled to be displayed on the application, which is stored in the client device by communicating with the client device at a predetermined timing;
A restriction instruction step for restricting the display of the advertisement on the application or a function restriction instruction of the application to the client device when alteration of the content is detected;
An application control method comprising:
A content distribution step of distributing the content to the client device together with first content certification data unique to the content;
Based on the first content certification data transmitted from the client device and the second content certification data corresponding to the first content certification data when communicating with the client device at the predetermined timing An authenticity confirmation step of confirming the authenticity of the first content certification data;
Further including
2. The application control method according to claim 1, wherein in the restriction instruction step, the client apparatus is instructed even when it is confirmed that the first content certification data is not authentic. 3.
3. The application control method according to claim 2, further comprising a content certification data storage step of generating the first and second content certification data based on the content and storing the first and second content certification data in a predetermined database.
4. The application control method according to claim 3, wherein the first content certification data is generated by encrypting the second content certification data.
A content update step of communicating with the client device and executing an update process of content stored in the client device;
5. The application control method according to claim 1, wherein the predetermined timing is a timing of the content update processing or a predetermined periodic timing. 6.
An application control method executed by a client device having an application having an advertisement display function,
A falsification detection data generation step for generating falsification detection data for detecting falsification of the content based on the content scheduled to be displayed on the application;
A falsification detection data transmission step of transmitting the generated falsification detection data to a predetermined server device;
When the server device detects falsification of the content based on the transmitted falsification detection data, based on an instruction from the server device, restrictions on display of the advertisement on the application, or functions of the application A restriction execution step for executing the restriction;
An application control method comprising:
A content receiving step of receiving the content and the first content certification data unique to the content from the server device;
A content storage step of associating the content with the first content certification data and storing the content in a predetermined storage;
The application control method according to claim 6, wherein, in the tampering detection data transmission step, the first content certification data is transmitted to the predetermined server device together with the tampering detection data.
The application control method according to any one of claims 1 to 7, wherein the restriction relating to display of the advertisement includes prohibition of display of the advertisement on the application.
9. The function restriction of the application includes at least one of prohibition of activation of the application or erasure of the content from the client device, according to any one of claims 1 to 8. Application control method.
The application control method according to any one of claims 1 to 9, wherein the application having the advertisement display function is a widget.
An application control program for causing a computer to execute the application control method according to any one of claims 1 to 10.
A server device that communicates with a client device having an application having an advertisement display function and distributes an advertisement displayed on the application to the client device,
Falsification detection means for communicating with the client device at a predetermined timing and detecting falsification of the content stored in the client device and scheduled to be displayed on the application;
Restriction instruction means for setting a restriction on display of the advertisement on the application or a function restriction instruction of the application to the client device when alteration of the content is detected;
The server apparatus characterized by having.
Content distribution means for distributing the content to the client device together with first content certification data unique to the content;
Based on the first content certification data transmitted from the client device and the second content certification data corresponding to the first content certification data when communicating with the client device at the predetermined timing Authenticity confirmation means for confirming the authenticity of the first content certification data;
Further comprising
13. The server apparatus according to claim 12, wherein the restriction instructing unit instructs the client apparatus even when it is confirmed that the first content certification data is not authentic.
14. The server apparatus according to claim 13, further comprising content proof data storage means for generating the first and second content proof data based on the content and storing the first and second content proof data in a predetermined database.
15. The server device according to claim 14, wherein the first content certification data is generated by encrypting the second content certification data.
Further comprising content update means for communicating with the client device and executing update processing of the content stored in the client device;
The server device according to any one of claims 12 to 15, wherein the predetermined timing is a timing of update processing of the content or a predetermined periodic timing.
A client device having an application having an advertisement display function,
Falsification detection data generation means for generating falsification detection data for detecting falsification of the content based on the content scheduled to be displayed on the application;
Falsification detection data transmitting means for transmitting the generated falsification detection data to a predetermined server device;
When the server device detects falsification of the content based on the transmitted falsification detection data, based on an instruction from the server device, restrictions on display of the advertisement on the application, or functions of the application Restriction execution means for executing restriction;
A client device comprising:
Content receiving means for receiving the content and the first content certification data specific to the content from the server device;
Content storage means for storing the content and the first content certification data in association with each other;
18. The client device according to claim 17, wherein the falsification detection data transmission unit transmits the first content certification data to the predetermined server device together with the falsification detection data.
The server device according to any one of claims 12 to 16, or the claim 17 or claim 17, wherein the restriction regarding the display of the advertisement includes a prohibition of displaying an advertisement on the application. Item 19. The client device according to Item 18.
20. The function limitation of the application includes at least one of prohibition of activation of the application and erasure of the content from the client device. 20. The server device according to claim 1, or the client device according to any one of claims 17 to 19.
21. The server device according to claim 12, wherein the application having the advertisement display function is a widget, or claim 20 or claim 20 or claim 20. The client device according to any one of claims 17 to 20.
A server device according to any one of claims 12 to 16, and 19 to 21;
The client device according to any one of claims 17 to 21, and
An application control system characterized by comprising:
A client device having an application having an advertisement display function,
Falsification detection data receiving means for receiving first falsification detection data transmitted from a predetermined server device;
Falsification detection data generating means for generating second falsification detection data for detecting falsification of the content based on the content scheduled to be displayed on the application;
Falsification detection means for detecting falsification of the content by comparing the received first falsification detection data with the generated second falsification detection data;
Restriction execution means for executing restriction on display of the advertisement on the application or function restriction of the application when alteration of the content is detected;
A client device comprising: