WO2011013617A1

WO2011013617A1 - Cookie processing device, cookie processing method, cookie processing program, cookie processing system and information communication system

Info

Publication number: WO2011013617A1
Application number: PCT/JP2010/062519
Authority: WO
Inventors: 誠一芝元
Original assignee: 楽天株式会社
Priority date: 2009-07-31
Filing date: 2010-07-26
Publication date: 2011-02-03
Also published as: TW201121275A

Abstract

The cookie processing device, cookie processing method, cookie processing program, cookie processing system, and information communication system can enable cookie information issued at a terminal device in a certain first domain to be used by a server device belonging to a second domain having a domain name different from that of the first domain, whereby the server device belonging to the second domain can perform, for example, personalization, on the basis of the same information as the first domain. The cookie processing device is provided with a reception means for receiving request information, including a cookie that has been stored in correspondence with the first domain by way of the terminal device, that has been transmitted by the terminal device on the basis of acquisition command information for commanding resource acquisition that has been received by the terminal device from a predetermined server device; and a transmission means for transmitting, to the terminal device, command information for commanding retransmission of the request information, together with identification information as identification information that is to be included in the request information; wherein the identification information includes a domain name of a second domain that is different from the domain name of the first domain, and in which cookie information that has been included in the received request information has been added.

Description

Cookie processing device, cookie processing method, cookie processing program, cookie processing system, and information communication system

The present invention relates to a technical field of a cookie processing device, a cookie processing method, a cookie processing program, a cookie processing system, and an information communication system that receives a cookie from a terminal device and performs processing based on the received cookie information.

2. Description of the Related Art Conventionally, there are known systems in which various services are provided through a Web page provided from a server device by connecting to a network such as the Internet using a terminal device such as a personal computer. In such a system, a cookie is used as a technique for managing a state during a session between a terminal device and a server device.

Cookies can contain various information as well as the state during the session. For example, information related to the user such as personal information of the user of the terminal device, information related to the user's preference, product purchase history, service usage history, and the like can be included in the cookie. Then, the server device creates personal information by using the cookie information transmitted from the terminal device together with the request for the web page, and transmits the personal information to the user. it can.

Also, if a plurality of server devices belong to the same domain, these server devices can share cookie information. For example, Patent Document 1 discloses a single sign-on system including a first web server and a second web server. In this system, when the user computer accesses the first website, the first web server transmits a cookie including a personal customer code, an expiration date, and a session ID to the user computer after password authentication. Thereafter, when the user computer accesses the second website, the second web server obtains a cookie from the user computer, and permits access to the site if the personal customer code included in the cookie is valid.

JP 2003-323409 A

However, when the domain to which the server device belongs is different, for example, the first cookie stored in the terminal device by accessing the website of a certain first domain accesses the website of another second domain. Will not be sent. Therefore, in the second domain website, the second cookie information stored in the terminal device is obtained by accessing the second domain website, but the first cookie information is obtained. Therefore, personalized information cannot be provided to the user under the same conditions as in the first domain.

On the other hand, personalized information in the second domain can be provided by the server device performing user authentication when the terminal device accesses the Web site of the second domain.

However, even if the user is specified by authentication, the first domain and the second domain are not in an environment where information related to the user can be shared between the first domain and the second domain. And cannot be personalized under the same conditions. Furthermore, not all information stored in the terminal device as cookies is necessarily held on the server device side of the first and second domains. Therefore, in the second domain, it has been difficult to provide personalized information under the same conditions as the first domain.

The present invention has been made in view of the above points. A server belonging to a second domain having a domain name different from that of the first domain is used to store information on cookies issued to a terminal device in a certain first domain. Cookie processing device, cookie processing method, and cookie processing that can be used by the device and that allows a server device belonging to the second domain to perform personalization based on the same information as the first domain, for example An object is to provide a program, a cookie processing system, and an information communication system.

In order to solve the above-described problem, the invention described in claim 1 is configured such that request information having identification information including a domain name indicating a request destination domain is included in a domain indicated by the domain name as identification information of a requested resource. The terminal device that transmits to the server device to which it belongs is a cookie processing device that can be accessed via the network, and is based on the acquisition command information that orders the resource acquisition received by the terminal device from the preset server device. Included in the request information is a receiving means for receiving the request information including the transmitted cookie stored corresponding to the first domain by the terminal device, and command information for ordering retransmission of the request information The identification information to be included includes a domain name of a second domain having a domain name different from that of the first domain. Transmitting means for transmitting together with the identification information cookie information is added to the terminal device included in has been requested information, characterized in that it comprises a.

According to the present invention, request information including a cookie corresponding to the first domain is transmitted to the cookie processing server based on the acquisition command information received by the terminal device. When the cookie processing device receives request information including a cookie corresponding to the first domain from the terminal device, the terminal device includes the identification information including the domain name of the second domain and appended with the cookie information together with the command information. Send to. The terminal device that has received the command information and the identification information transmits request information having the identification information based on the command information. Here, since the identification information includes the domain name of the second domain, the request information is transmitted to the server apparatus belonging to the second domain. Further, since the cookie information is added to the identification information, the server device belonging to the second domain that has received the request information can acquire the information.

Accordingly, the information of the cookie issued to the terminal device in the first domain can be used by the server device belonging to the second domain having a domain name different from that of the first domain, and is the same as that of the first domain. For example, personalization can be performed based on the information.

According to a second aspect of the present invention, in the cookie processing apparatus according to the first aspect, the cookie information includes a plurality of item correspondence information each corresponding to a preset item, and the transmission means Transmits, together with the command information, the identification information to which item correspondence information corresponding to an item associated in advance with the second domain among the plurality of item correspondence information included in the cookie information is added. It is characterized by that.

According to the present invention, when a plurality of pieces of information are included in one cookie, information that can be acquired and used by a server device belonging to the second domain can be restricted.

The invention according to claim 3 is the cookie processing apparatus according to

claim

1 or 2, wherein the cookie information is transmitted based on the cookie name of the cookie included in the received request information. And determining means for determining whether or not the transmission means transmits the identification information to which the information of the cookie determined to be transmitted by the determining means is added together with the command information.

According to the present invention, information that can be acquired and used by server devices belonging to the second domain can be limited in units of cookies.

According to a fourth aspect of the present invention, in the cookie processing device according to any one of the first to third aspects, the request information including a cookie stored corresponding to the first domain is preliminarily stored in the cookie processing apparatus. Based on the acquisition command information included in the preset hypertext data received by the terminal device from the set server device, the second hypertext data includes the second hypertext data. It includes a link to hypertext data transmitted by a server device belonging to the domain.

According to this invention, the page is displayed on the screen based on the preset hypertext data received by the terminal device, and the cookie corresponding to the first domain is included based on the acquisition command information included in the hypertext data. Request information is sent to the cookie processing server. Thereafter, when the user selects a link on the page displayed on the screen, the request information is transmitted from the terminal device to the server device belonging to the second domain, and from the server device belonging to the second domain to the terminal device. Hypertext is sent. And the screen display of a terminal device changes to the page of a 2nd domain.

Therefore, immediately before the server device belonging to the second domain may use the cookie information corresponding to the first domain, the server device belonging to the second domain may use the cookie information corresponding to the first domain. Therefore, the server device belonging to the second domain can perform processing based on the latest information, and the cookie information corresponding to the first domain is stored in the second domain until it is unnecessary. The probability of being transmitted to the server apparatus to which it belongs can be reduced.

The invention according to claim 5 is a terminal device for transmitting request information having identification information including a domain name indicating a requested domain as identification information of a requested resource to a server device belonging to the domain indicated by the domain name. Is a cookie processing method executed by a cookie processing device accessible via a network, and transmitted by the terminal device based on acquisition command information for instructing resource acquisition received by the terminal device from a preset server device And receiving the request information including the cookie stored corresponding to the first domain by the terminal device, and including the command information instructing the retransmission of the request information in the request information. The identification information includes a domain name of a second domain having a domain name different from that of the first domain, Together with the identification information cookie information is added that is included in the serial received request information and the transmission step of transmitting to the terminal device, characterized by having a.

The invention according to claim 6 is a terminal device that transmits request information having identification information including a domain name indicating a request destination domain as identification information of a requested resource to a server device belonging to the domain indicated by the domain name. The terminal included in the cookie processing device accessible via the network is transmitted by the terminal device based on acquisition command information for instructing resource acquisition received by the terminal device from a preset server device As the identification information for causing the request information to include the receiving means for receiving the request information including the cookie stored corresponding to the first domain by the device, and the command information for requesting retransmission of the request information. Including a domain name of a second domain that is different in domain name from the first domain and received Transmitting means for transmitting to said terminal device together with the identification information cookie information is added in the request information, wherein the function as.

The invention according to claim 7 is a terminal device that transmits request information having identification information including a domain name indicating a request destination domain as identification information of a requested resource to a server device belonging to the domain indicated by the domain name. The terminal included in the cookie processing device accessible via the network is transmitted by the terminal device based on acquisition command information for instructing resource acquisition received by the terminal device from a preset server device As the identification information for causing the request information to include the receiving means for receiving the request information including the cookie stored corresponding to the first domain by the device, and the command information for requesting retransmission of the request information. Including a domain name of a second domain that is different in domain name from the first domain and received Transmitting means for transmitting to said terminal device together with the identification information cookie information is added in the request information, the cookie processing program to function as is characterized by being recorded in a computer-readable.

The invention according to claim 8 is a terminal device that transmits request information having identification information including a domain name indicating a requested domain as identification information of a requested resource to a server device belonging to the domain indicated by the domain name. A cookie processing system comprising: a cookie processing device belonging to a first domain accessible via a network; and a server device belonging to a second domain having a domain name different from that of the first domain, The cookie processing device is stored in correspondence with the first domain by the terminal device, transmitted by the terminal device based on acquisition command information for instructing resource acquisition received by the terminal device from a preset server device. Receiving means for receiving the request information including a cookie and command information for ordering retransmission of the request information. Is transmitted to the terminal device together with the identification information including the domain name of the second domain and the cookie information included in the received request information as the identification information to be included in the request information. Request information for receiving the request information having the identification information to which the cookie information is added from the terminal device that has received the command information. Receiving means; and cookie sending means for sending information added to the identification information included in the received request information as a cookie to the terminal device.

According to the present invention, request information including a cookie corresponding to the first domain is transmitted to the cookie processing server based on the acquisition command information received by the terminal device. When the cookie processing device receives the request information including the cookie corresponding to the first domain from the terminal device, the identification information including the domain name of the second domain and appended with the cookie information is transmitted together with the command information. . The terminal device that has received the command information and the identification information transmits request information having the identification information based on the command information. Here, since the identification information includes the domain name of the second domain, the request information is transmitted to the server apparatus belonging to the second domain. Further, since the cookie information is added to the identification information, the server device belonging to the second domain that has received the request information can acquire the information. The server device belonging to the second domain transmits the acquired information as a cookie to the terminal device. The terminal device that has received the cookie stores the cookie. Thereafter, when the terminal device transmits the request information to the server device belonging to the second domain, the request information is transmitted including the stored cookie.

Accordingly, the server device belonging to the second domain can acquire the information of the cookie issued in the first domain from the terminal device as the cookie issued by itself, so that the cookie issued in the first domain This information can be used by a server device belonging to a second domain having a domain name different from that of the first domain, and for example, personalization can be performed based on the same information as the first domain.

The invention according to claim 9 is the cookie processing system according to claim 8, wherein the server device belonging to the second domain includes condition information storage means for storing condition information indicating a cookie issuing condition, and the condition Issuing means for determining whether to issue the cookie information added to the identification information included in the received request information as a cookie based on the information; and in the second domain The cookie transmitting unit of the server apparatus to which the server belongs belongs transmits information to the terminal device as a cookie, which is determined to be issued as a cookie by the issue determining unit.

According to this invention, when the information of the cookie added to the request information transmitted from the terminal device is information that is not necessary for the server device belonging to the second domain, the cookie is excluded from being issued. Can do.

According to a tenth aspect of the present invention, in the cookie processing system according to the ninth aspect, the condition information includes cookie identification information for identifying a cookie, and the transmission means of the cookie processing device receives the received request. The cookie information included in the information and the identification information to which the cookie identification information of the cookie is added are transmitted together with the command information, and the issue determination means of the server device belonging to the second domain includes the condition information The cookie information added to the identification information is issued as a cookie based on the cookie identification information included in the request information and the cookie identification information added to the identification information included in the received request information It is characterized by determining whether or not.

According to the present invention, information that is not required by the server device belonging to the second domain can be excluded from cookie issue targets in units of cookies.

According to an eleventh aspect of the present invention, in the cookie processing system according to the ninth or tenth aspect, the condition information includes domain identification information for identifying a domain, and the transmission unit of the cookie processing apparatus includes: The cookie information included in the received request information and the identification information added with the domain identification information of the first domain are transmitted together with the command information, and the issuance of the server device belonging to the second domain Based on the domain identification information included in the condition information and the domain identification information added to the identification information included in the received request information, the determination unit determines the cookie added to the identification information. It is characterized by determining whether information is issued as a cookie.

According to the present invention, information that is not required by the server device belonging to the second domain can be excluded from the cookie issue target in units of domains from which the cookie is issued.

A twelfth aspect of the present invention is the cookie processing system according to any one of the eighth to eleventh aspects, wherein the cookie processing device belonging to the first domain and the server device belonging to the second domain. Each of a plurality of preset domains having different domain names includes the cookie processing device and the server device belonging to the domain, and the transmission means of the cookie processing device includes the domain to which the cookie processing device belongs and the domain The identification information including a domain name of a domain that is a domain having a different name and previously associated with the identification information included in the received request information is transmitted together with the command information.

According to the present invention, the cookie information and the server device belonging to each domain can share the cookie information between the domains.

The invention according to claim 13 is a terminal device that transmits request information having identification information including a domain name indicating a request destination domain as identification information of a requested resource to a server device belonging to the domain indicated by the domain name. An information communication system comprising: a cookie processing device belonging to a first domain accessible by the terminal device via a network; and a server device belonging to a second domain having a domain name different from that of the first domain The cookie processing device receives the request information including the cookie stored by the terminal device corresponding to the first domain from the terminal device, and retransmits the request information. Including the domain name of the second domain as the identification information for causing the command information to be included to be included in the request information, Transmission means for transmitting to the terminal device together with the identification information to which the cookie information included in the received request information is added, and the server device belonging to the second domain receives the command information Request information receiving means for receiving the request information including the identification information to which the cookie information is added from a terminal device, and the terminal using the information added to the identification information included in the received request information as a cookie. Cookie transmission means for transmitting to a device, wherein the terminal device stores storage means for storing cookies, acquisition command information receiving means for receiving acquisition command information for instructing resource acquisition from a preset server device, and The request information including a cookie stored in the storage means corresponding to the first domain based on the received acquisition command information On the basis of the received command information, first request information transmitting means for transmitting the cookie processing device, command information receiving means for receiving the command information and the identification information transmitted from the cookie processing device, and A second request information transmitting means for transmitting the request information having the received identification information to a server device belonging to the second domain; and a cookie for receiving a cookie transmitted from the server device belonging to the second domain. Receiving means; and storage control means for storing the received cookie in the storage means corresponding to the second domain.

According to the present invention, the cookie issued to the terminal device in the first domain when the server device belonging to the second domain receives the request information to which the cookie information issued by the first domain is added. This information can be used by a server device belonging to a second domain having a domain name different from that of the first domain, and for example, personalization can be performed based on the same information as the first domain.

It is a figure which shows an example of schematic structure of the information provision system S which concerns on one Embodiment. It is a figure which shows the example of a description of the HTML document of a cookie transfer page. It is a block diagram which shows an example of schematic structure of the cookie processing server 1 which concerns on one Embodiment. 2 is a block diagram illustrating an example of a schematic configuration of a Web server 1-i and a Web server 2 according to an embodiment. FIG. It is a sequence diagram which shows the process example of the information provision system S which concerns on one Embodiment. It is a sequence diagram which shows the process example of the information provision system S which concerns on one Embodiment. (A) to (f) are examples of contents of requests and responses transmitted and received between the user terminal 3-j and the server device. It is a sequence diagram which shows the process example of the information provision system S which concerns on one Embodiment.

Hereinafter, the best embodiment of the present invention will be described in detail with reference to the drawings. The embodiment described below is an embodiment when the present invention is applied to an information providing system.

[1. First Embodiment]
[1.1 Configuration and function overview of information provision system]
First, the configuration and outline function of the information providing system S according to the first embodiment will be described with reference to FIG.

FIG. 1 is a diagram illustrating an example of a schematic configuration of the information providing system S according to the present embodiment.

As shown in FIG. 1, the information providing system S includes a cookie processing server 1 belonging to a domain D1, a plurality of Web servers 1-i (i = 1, 2,... M), a Web server 2 belonging to a domain D2, , A plurality of user terminals 3-j (j = 1, 2,... N). In the domain D1, for example, there are devices such as an SSL (Secure Sockets Layer) accelerator and a load balancer, but the illustration is omitted. Any one of the Web servers 1-i may also serve as the cookie processing server 1.

The cookie processing server 1, the Web server 1-i, the Web server 2, and the user terminal 3-j can transmit / receive data to / from each other via the network NW, for example, using TCP / IP as a communication protocol. It has become. The network NW is constructed by, for example, the Internet, a dedicated communication line (for example, a CATV (CommunityCommunAntenna Television) line), a mobile communication network (including a base station, etc.), a gateway, and the like.

In the information providing system S having such a configuration, the cookie processing server 1 and the Web servers 1-1 to 1-m are installed, for example, for a certain company to operate a Web site that provides various services. It is a server device. Examples of services provided on this Web site include online shopping, auctions, accommodation reservations, ticket sales, blogs, social networking services, and affiliates. Each Web server 1-i is responsible for providing information regarding a specific service. Each Web server 1-i transmits content such as a Web page that constitutes a Web site related to a service that the Web server 1-i owns to the user terminal 3-j in response to a request from the user terminal 3-j.

The cookie processing server 1 and the Web servers 1-1 to 1-m are server devices belonging to the domain D1 (an example of the first domain) acquired by the company. For example, a domain name “abc.co.jp” is assigned to the domain D1. A host name including the domain name “abc.co.jp” is assigned to each of the cookie processing server 1 and the Web servers 1-1 to 1-m. For example, a host name “cookie.abc.co.jp” is assigned to the cookie processing server 1. Each Web server 1-i has, for example, “www.abc.co.jp”, “auction.abc.co.jp”, “travel.abc.co.jp”, “ticket.abc.co.jp”. jp "," bank.abc.co.jp ", etc. are assigned. Although the host name is also a domain name, in the present embodiment, in order to make the explanation easier to understand, there is a subdomain below the domain indicated by the domain name (for example, “www.abc.co.jp”, “Grp01.xd.abc.co.jp” is a subdomain of “abc.co.jp”)), which is called a domain name and has no subdomain below the domain indicated by the domain name. In other words, when the domain name indicates a specific server device (host), it is referred to as a host name.

On the other hand, the Web server 2 (an example of a server device belonging to the second domain), for example, operates a Web site that provides a service set in advance by an affiliated company that operates the Web site in the domain D1. It is an installed server device. In response to a request from the user terminal 3-j, the Web server 2 transmits content such as a Web page constituting a Web site related to a preset service to the user terminal 3-j.

The Web server 2 is a server device belonging to a domain D2 (an example of a second domain) having a domain name different from that of the domain D1. For example, a domain name “xyz.co.jp” is assigned to the domain D2. For example, a host name “www.xyz.co.jp” is assigned to the Web server 2.

User terminal 3-j (an example of a terminal device) transmits an HTTP (Hyper Text Transfer Protocol) request (an example of request information) to Web server 1-i or Web server 2 to acquire information such as a Web page, It is displayed on the screen. This HTTP request includes a request URL (Uniform Resource Locator: an example of identification information) for identifying a requested resource. A resource may be specific or abstract, such as URI (Uniform に Resource Identifier), which is a general syntax specification of URI (Uniform Resource Identifier) 3896. It is generally defined that it can be identified by (URL in this embodiment). However, the resource identified by the request URL in the HTTP GET method means information acquired by the user terminal 3-j as a client. Examples of resources include HTML (Hyper Text Markup Language) documents, XML (Extensible Markup Language) documents, other electronic documents, text data, image data, video data, audio data, and the like. Hereinafter, the HTTP request is simply referred to as “request”. The user can receive various services through information displayed on the screen. For example, a preset operating system, a Web browser program, and the like are installed in the user terminal 3-j. For example, a personal computer, a PDA (Personal Digital Assistant), an STB (Set Top Box), a mobile phone, or the like is applied to the user terminal 3-j.

[1.2 Use and transfer of cookie information]
Next, use and transfer of cookies in the domains D1 and D2 will be described with reference to FIG.

FIG. 2 is a diagram showing a description example of the HTML document of the cookie transfer page.

Each Web server 1-i issues a cookie. That is, each Web server 1-i transmits a response including a Set-Cookie header as necessary in response to a request from the user terminal 3-j. This cookie information (specifically, the cookie value set in association with the cookie name) is basically information related to the user who uses the user terminal 3-j. As information of this cookie, for example, identification information for specifying a user after user authentication is performed, a user profile (for example, name, nickname, age, address, telephone number, etc.), It may be service usage history, product purchase history, or questionnaire response information. Each cookie includes one or more pieces of information corresponding to items set in advance, for example, depending on the content of the service, the purpose of use, and the like.

When each Web server 1-i issues “Cookie” and designates “.abc.co.jp” as the domain attribute in the Set-Cookie header, the user terminal 3-j receives the cookie received from the Web server 1-i. Is stored in association with “.abc.co.jp” (that is, domain D1). Thereafter, a request from the user terminal 3-j to the Web servers 1-1 to 1-m and the cookie processing server 1 belonging to the domain D1 includes a cookie stored in association with the domain D1. As a result, the Web servers 1-1 to 1-m can share the cookie issued by any one of the Web servers 1-i. By sharing cookies, the Web servers 1-1 to 1-m can personalize Web pages and the like based on the same conditions (based on the same cookie information).

On the other hand, the Web server 2 may want to personalize a Web page or the like under the same conditions as the domain D1 in relation to the service provided on the website of the domain D1. In this case, for example, when the Web page of the domain D1 that introduces the Web site of the domain D2 is displayed on the screen of the user terminal 3-j, the user transitions to the Web page of the domain D2 by selecting a link or the like. In this case, if the Web server 2 can use the information of the cookie issued in the domain D1, personalization under the same conditions as the domain D1 is possible.

For example, if it is possible to use the user's name or nickname, etc., it is possible to generate a Web page, such as "○○'s, Hello". Also, for example, when a Web page including an input form for performing user registration for a service provided in the domain D2 is generated, if the user's personal information can be used, the information is included in the form in advance. An input Web page can be generated. For example, if information such as user profile information, service usage history, product purchase history, and the like can be used, a web page that recommends (recommends) a service or product that meets the user's preference may be generated. it can.

However, the Web server 2 cannot obtain a cookie issued in the domain D1. This is because the domain name of the domain D1 is different from the domain name of the domain D2. That is, since the domain attribute of the cookie issued in the domain D1 and the request host name when the user terminal 3-j transmits a request to the Web server 2 do not match backward, the user terminal 3-j The issued cookie is not transmitted to the Web server 2.

Therefore, in the present embodiment, the cookie processing server 1 (an example of a cookie processing device) belonging to the domain D1 transmits the cookie information transmitted from the user terminal 3-j to the Web server 2 by the user terminal 3-j. Control to be done.

Specifically, when the cookie processing server 1 receives a request including a cookie issued in the domain D1 from the user terminal 3-j, the cookie processing server 1 sends a location header (command) to the user terminal 3-j to redirect the request to the Web server 2. A response including an example of information is transmitted. In this Location header, a URL including the host name of the Web server 2 is set. Also, the received cookie information is added to this URL as a parameter. For example, when “http://www.xyz.co.jp?cookie=XXXXXXXXX” is set in the URL of the Location header, the “XXXXXXXXX” portion is information added as a parameter. Then, the user terminal 3-j that has received the response transmits a request having the URL indicated by the Location header as the request URL, and the request is received by the Web server 2. Since the cookie information is added as a parameter to the request URL, the Web server 2 issues a new cookie with the value of the cookie information as a value. Cookie information can be acquired as cookie information issued by the user.

In order to give the cookie processing server 1 the timing for performing the above processing, it is necessary to send a request including a cookie from the user terminal 3-j to the cookie processing server 1. For this reason, the information processing system S uses a Web page for request transmission. Hereinafter, this Web page is referred to as a “cookie transfer page”.

The cookie transfer page is, for example, a web page that displays information that introduces services provided on the website of the domain D2. The HTML document (an example of hypertext data) of the cookie transfer page is described as shown in FIG. 2, for example. In the HTML document of the cookie transfer page, an anchor tag indicating a link to the Web page of domain D2 is described so that the user can select the Web page of domain D2. The URL of the Web page including the host name of the Web server 2 is described in the src attribute of this anchor tag.

Also, an iframe tag (an example of acquisition command information) is described in the HTML document of the cookie transfer page. In the src attribute of the iframe tag, a URL including the host name of the cookie processing server 1 is described as the URL of the Web page of the inline frame. Further, in this src attribute, a service ID is described as a parameter. This service ID is identification information for designating a cookie to be transferred. When there are a plurality of cookies to which information is to be transferred, a plurality of service IDs are also described. For example, when “http://cookie.abc.co.jp?id=A2” is described as the src attribute of the iframe tag, the “A2” portion indicates the service ID.

When the HTML document of the cookie transfer page is read by the Web browser program installed in the user terminal 3-j, the user terminal 3-j transmits a request to the cookie processing server 1 by the described iframe tag. As a result, the cookie processing server 1 performs the above-described processing, so that the cookie issued by the Web server 2 is stored in the user terminal 3-j at almost the same timing as when the user terminal 3-j displays the cookie transfer page. Is done.

When a request for a web page of the domain D2 linked from the cookie transfer page is transmitted from the user terminal 3-j to the web server 2 in the state where the cookie transfer page is displayed, the web server 2 The issued cookie is also transmitted to the Web server 2. Therefore, the Web server 2 can personalize the Web page to be transmitted as necessary based on the received cookie value. Thereafter, since the cookie issued by the Web server 2 is included in the request from the user terminal 3-j to the Web server 2, the Web server 2 can personalize the Web page whenever necessary.

Note that the HTML document itself of the cookie transfer page may be transmitted from any of the Web servers 1-i or may be transmitted from the Web server 2. Alternatively, the HTML document of the cookie transfer page may be transmitted from a preset Web server that does not belong to the domain D1 or the domain D2.

[1.3 Configuration and function of cookie processing server]
Next, the configuration and function of the cookie processing server 1 will be described with reference to FIG.

FIG. 3 is a block diagram showing an example of a schematic configuration of the cookie processing server 1 according to the present embodiment.

As shown in FIG. 3, the cookie processing server 1 includes a communication unit 11, a storage unit 12, an input / output interface unit 13, and a system control unit 17. The system control unit 17 and the input / output interface unit 13 are connected via a system bus 18.

The communication unit 11 is connected to the network NW and controls the communication state with the user terminal 3-j and the like. The storage unit 12 includes, for example, a hard disk drive and the like, and stores various programs such as an operating system and a WWW server program (including an example of a cookie processing program), as well as various data. Yes. For example, the various programs may be acquired from another server device or the like via a network, or may be recorded on a recording medium and read via a drive device. The input / output interface unit 13 performs interface processing between the communication unit 11 and the storage unit 12 and the system control unit 17.

The system control unit 17 includes a CPU (Central Processing Unit) 14, a ROM (Read Only Memory) 15, a RAM (Random Access Memory) 16, and the like. The system control unit 17 controls the entire apparatus by the CPU 14 reading and executing various programs stored in the ROM 15 and the storage unit 12. The system control unit 17 functions as a receiving unit, a transmitting unit, and the like by executing a WWW (World Wide Web) server application program.

For example, the system control unit 17 as a receiving unit receives a request including a cookie corresponding to the domain D1 from the user terminal 3-j.

Further, when receiving a request including a cookie from the user terminal 3-j, the system control unit 17 as a transmission unit transmits a response including a Location header to the user terminal 3-j. Specifically, the system control unit 17 acquires the value of the cookie included in the received request, and generates a URL including the host name of the Web server 2 and adding the acquired value as a parameter. Then, the system control unit 17 sets the generated URL as a redirect destination URL in the Location header.

[1.4 Web server configuration and functions]
Next, configurations and functions of the Web server 1-i and the Web server 2 will be described with reference to FIG.

FIG. 4 is a block diagram showing an example of a schematic configuration of the Web server 1-i and the Web server 2 according to the present embodiment.

As shown in FIG. 4, each of the Web server 1-i and the Web server 2 includes a communication unit 21, a storage unit 22, an input / output interface unit 23, and a system control unit 27. The system control unit 27 and the input / output interface unit 23 are connected via a system bus 28.

The communication unit 21 is connected to the network NW and controls the communication state with the user terminal 3-j and the like. The storage unit 22 includes, for example, a hard disk drive, and stores various programs such as an operating system and a WWW server program, as well as various data. For example, the various programs may be acquired from another server device or the like via a network, or may be recorded on a recording medium and read via a drive device. In the storage unit 22, a database is registered in which information related to services handled by each Web server 1-i or Web server 2 is registered. The input / output interface unit 23 performs interface processing between the communication unit 21 and the storage unit 22 and the system control unit 27.

The system control unit 27 includes a CPU 24, a ROM 25, a RAM 26, and the like. The system control unit 27 performs overall control of the entire apparatus when the CPU 24 reads and executes various programs stored in the ROM 25 and the storage unit 22.

In the Web server 2, the system control unit 27 functions as a request information receiving unit, a cookie transmitting unit, and the like by executing a WWW (World Wide Web) server program.

For example, the system control unit 27 as request information receiving means receives a request transmitted from the user terminal 3-j by redirection of the cookie processing server 1.

Also, the system control unit 27 as a cookie transmission means issues a cookie. Specifically, the system control unit 27 acquires a value added as a parameter from the request URL included in the request received from the user terminal 3-j, and sets the acquired value as a new cookie value as a Set-Cookie header. Is transmitted to the user terminal 3-j. As a result, a new cookie is stored by the user terminal 3-j.

[1.5 Operation of information provision system]
Next, the operation of the information providing system S will be described with reference to FIGS.

5 and 6 are sequence diagrams showing an example of processing of the information providing system S according to the present embodiment. FIG. 7 is an example of the contents of a request and a response that are transmitted and received between the user terminal 3-j and the server device. In FIG. 7, information necessary for describing the present embodiment is described, but description is appropriately omitted in other information.

5 and 6, the processing in the user terminal 3-j is performed by the control unit provided in the user terminal 3-j executing the Web browser program. Further, processing in each of the cookie processing server 1, the Web server 1-i, and the Web server 2 is performed by executing a WWW server program or the like by a system control unit included therein.

When the user terminal 3-j specifies a URL for logging in while the Web browser program is running, as shown in FIG. 5, the user terminal 3-j sends a login page request to the Web server. 1-i is transmitted (step S1). In response to this, the Web server 1-i transmits the HTML document of the login page to the user terminal 3-j (step S2).

When the user terminal 3-j receives the HTML document of the login page, the user terminal 3-j displays the login page on the screen. Therefore, when the user inputs the user ID and password, the user terminal 3-j transmits the input user ID and password to the Web server 1-i (step S3). When the Web server 1-i receives the input user ID and password, it performs password authentication (step S4).

When the password authentication is successful, the Web server 1-i transmits an HTML document of a Web page set in advance after login to the user terminal 3-j (Step S5). At this time, the Web server 1-i issues a cookie. Specifically, the Web server 1-i sets, as a response header, a Set-Cookie header having identification information for specifying a user who has succeeded in password authentication as a cookie value. Here, the Web server 1-i designates, for example, “A1” as the cookie name. Also, the cookie value itself is encrypted. Further, the Web server 1-i designates “.abc.co.jp” as the domain attribute and designates a date indicating an appropriate expiration date as the Expires attribute. The cookie issued here is referred to as “cookie A1”.

The user terminal 3-j that has received the response including the HTML document and the cookie A1 receives the Web page after login, and stores the cookie A1 in association with “.abc.co.jp” as the domain attribute. (Step S6).

Thereafter, when a certain web page is displayed on the screen of the user terminal 3-j, the user performs an operation of some action (for example, input or selection of information, purchase of a product, bid, reservation). The user terminal 3-j transmits a request to the Web server 1-i (step S7). The Web server 1-i that is the request destination at this time may not be the Web server 1-i that issued the cookie A1. Receiving the request, the Web server 1-i performs a process set in advance according to the user's action, and transmits the HTML document of the Web page as a result to the user terminal 3-j (step S8). At this time, the Web server 1-i issues a cookie. Specifically, the Web server 1-i sets, as a response header, a Set-Cookie header in which information related to a user action or a processing result corresponding to the action is a cookie value. Here, the Web server 1-i designates, for example, “A2” as the cookie name. The cookie value itself is encrypted. Further, the Web server 1-i designates “.abc.co.jp” as the domain attribute and designates a date indicating an appropriate expiration date as the Expires attribute. The cookie issued here is referred to as “cookie A2”.

Upon receiving the response including the HTML document and the cookie A2, the user terminal 3-j receives the Web page and stores the cookie A2 in association with “.abc.co.jp” as the domain attribute (step S9). ).

Thereafter, when a web page is displayed on the screen of the user terminal 3-j, the user selects a link to the cookie transfer page, so that the user terminal 3-j transfers the cookie to the Web server 1-i. A page request is transmitted (step S10). The Web server 1-i that is the request destination at this time may not be the Web server 1-i that issued the cookie A2. Receiving the request, the Web server 1-i transmits the HTML document of the cookie transfer page to the user terminal 3-j (step S11).

The user terminal 3-j that has received the HTML document analyzes the received HTML document and displays the cookie transfer page on the screen, and acquires the src attribute of the iframe tag described in the HTML document (step S12). Next, the user terminal 3-j transmits a request with the URL indicated by the acquired src attribute as a request URL (step S13). As shown in FIG. 2, since the host name of the cookie processing server 1 is described in the src attribute of the iframe tag, the request from the user terminal 3-j is transmitted to the cookie processing server 1. Further, since the host name of the cookie processing server 1 is the same as “.abc.co.jp”, the requests from the user terminal 3-j include cookies A1 and A2. The contents of the request at this time are as shown in FIG.

The cookie processing server 1 that has received the request confirms whether or not the cookie name of the cookie A1 or A2 matches the service ID specified as a parameter in the request URL. For example, when the designated service ID is “A2”, the cookie name of the cookie A2 matches the service ID. In this case, the cookie processing server 1 determines that the content information of the cookie A2 may be transferred to the Web server 2. Then, the cookie processing server 1 redirects the cookie processing server 1 again by SSL communication. This is to prevent the third party from intercepting or falsifying information to be transferred from here. Specifically, the cookie processing server 1 rewrites “http” indicating the protocol of the request URL to “https” (step S15), and sends a response including a Location header that specifies the rewritten URL as a redirect destination URL. 3-j is transmitted (step S16). The content of the response at this time is, for example, as shown in FIG.

Next, when an SSL session is established between the user terminal 3-j and the cookie processing server 1, the user terminal 3-j transmits a request including the cookies A1 and A2 to the cookie processing server 1 (step S17). . The content of the request at this time is, for example, as shown in FIG.

As shown in FIG. 6, when the cookie processing server 1 receives the request, the cookie processing server 1 acquires from the request the value of the cookie whose cookie name matches the service ID specified as a parameter in the request URL (step S18). Next, if the acquired cookie value is encrypted, the cookie processing server 1 decrypts this value, and then checks the cookie value (step S19). Here, it is checked whether or not the cookie value has been tampered with and whether or not the cookie value contains illegal characters. If the test result is normal, the cookie processing server 1 encrypts and encodes the cookie value (step S20).

Next, the cookie processing server 1 generates a URL specified in the Location header (step S21). Specifically, the cookie processing server 1 generates a URL by adding an encoded value as a parameter to a URL including the host name of the Web server 2 as a transfer destination. Next, the cookie processing server 1 transmits a response including a Location header indicating the generated URL as a redirect destination to the user terminal 3-j (step S22). The content of the response at this time is, for example, as shown in FIG.

The user terminal 3-j that has received the response transmits a request to the Web server 2 according to the Location header when an SSL session is established between the user terminal 3-j and the Web server 2 (step S23). The content of the request at this time is, for example, as shown in FIG. Since the request URL included in the request at this time is the same as the content of the Location header, a value to be transferred is added to the request URL as a parameter.

The Web server 2 that has received the request issues a cookie (step S24). Specifically, the Web server 2 sets, as a response header, a Set-Cookie header in which a parameter value added to the request URL is a cookie value. Here, the Web server 1-i specifies, for example, “B” as the cookie name. Further, the Web server 1-i designates “.xyz.co.jp” as the domain attribute and designates a date indicating an appropriate expiration date as the Expires attribute. Then, the Web server 2 transmits a response including the Set-Cookie header to the user terminal 3-j (Step S25). The cookie issued here is referred to as “cookie B”.

The user terminal 3-j that has received the response including the cookie B stores the cookie B in association with “.xyz.co.jp” as the domain attribute (step S26).

Thereafter, when the user selects a link to the Web page of the domain D2 while the cookie transfer page is displayed on the screen (step S27), the user terminal 3-j sends a request including the cookie B to the Web server 2. Transmit (step S28). The Web server 2 that has received the request generates a personalized HTML document based on the value of the cookie B (step S29), and transmits the generated HTML document to the user terminal 3-j (step S30).

[1.6 Modification]
In the description so far, the value of the cookie transferred to the Web server 2 can be reflected on the Web page for the first time after the screen display of the user terminal 3-j transitions from the cookie transfer page to the Web page of the domain D2. However, it can also be reflected on the cookie transfer page.

For example, write a script to rewrite a part of the cookie transfer page in the HTML document of the cookie transfer page. Specifically, the script is activated when reading of the entire HTML document including the inline frame is completed by the Web browser program. This can be realized, for example, by describing an onload attribute in the body tag. In the script, an instruction for acquiring content for rewriting a part of the cookie transfer page from the Web server 2 is described.

When the cookie transfer page is displayed on the screen based on such an HTML document, the cookie B is stored by the user terminal 3-j as shown in FIG. At this time, the user terminal 3-j has already received and stored the cookie B from the Web server 2 until the reading of the entire HTML document is completed. When the script is executed at the timing when reading of the entire HTML document is completed, a request is transmitted to the Web server 2 by the user terminal 3-j. Since Cookie B is stored at this point, Cookie B is included in the transmitted request. Therefore, the Web server 2 receives the cookie B. Then, the Web server 2 generates personalized content based on the received cookie B value, and transmits the generated content to the user terminal 3-j. The user terminal 3-j that has received the content rewrites a part of the cookie transfer page by executing the script. As a result, the content received from the Web server 2 is displayed on the cookie transfer page.

As described above, according to the present embodiment, the user terminal 3-j receives a request including a cookie corresponding to the domain D1 based on the iframe tag described in the cookie transfer page received from the Web server 1-i. Is transmitted to the cookie processing server 1. Upon receiving the request, the cookie processing server 1 sends a response including a Location header having a URL including the domain name of the domain D2 and having the cookie information included in the request as a parameter as a redirect destination URL. Send to 3-j. Receiving the response, the user terminal 3-j transmits a request including the URL specified in the Location header included in the response as a request URL to the Web server 2. The Web server 2 that has received the request transmits a response including the parameter information included in the request as a cookie to the user terminal 3-j. The user terminal 3-j that has received the response stores the cookie included in the response in association with the domain D2.

Accordingly, since the Web server 2 can acquire the information of the cookie issued in the domain D1 from the user terminal 3-j as the cookie issued by itself, the Web server 2 can acquire the information of the cookie issued in the domain D1. Can be used by the Web server 2 belonging to the domain D2 having a different domain name, and the Web page can be personalized based on the same information as the domain D1.

Further, since the HTML document of the cookie transfer page describes an anchor tag indicating a link to the Web page of the domain D2, the Web server 2 is displayed with the user terminal 3-j displaying the cookie transfer page on the screen. After the cookie issued by is saved by the user terminal 3-j, when the user selects a link on the cookie transfer page, the screen display changes to the Web page of the domain D2.

Therefore, immediately before the Web server 2 may use the cookie information corresponding to the domain D1, the Web server 2 acquires the cookie information corresponding to the domain D1, so that the Web server 2 is based on the latest information. And the probability that the information of the cookie corresponding to the domain D1 will be transmitted to the Web server 2 until it is unnecessary.

[2. Second Embodiment]
Next, a second embodiment will be described with reference to FIG.

As described above, a plurality of pieces of information (an example of a plurality of item correspondence information) may be collectively set in one cookie depending on the service content, purpose of use, and the like. For example, information corresponding to items such as the user's name, nickname, age, and gender are collected. In the first embodiment, all the information of the cookie designated by the service ID is transferred to the Web server 2 regardless of whether or not a plurality of pieces of information are set in the cookie. However, there are cases where it is desired to limit the information to be transferred. For example, when there is no capital relationship between the organization that operates the website of the domain D1 and the organization that operates the website of the domain D2, avoid unnecessarily leaking information related to the user. Therefore, it is desirable to transfer only necessary information. If this is the case, it is not impossible to divide the information to be transferred into different cookies, but for that purpose, it is necessary to modify the program on the Web server 1-i side. Also, since there is a restriction that the user terminal 3-j should not expect to store more than 20 cookies for one host or one domain, it is hesitated to increase cookies more than necessary. .

Therefore, in the second embodiment, the cookie processing server 1 performs processing so that only necessary information is transferred to the Web server 2 among the cookie information designated by the service ID. Therefore, for example, the cookie control information is stored in the storage unit 12 of the cookie processing server 1. The cookie control information includes a control ID as identification information of the cookie control information, a host name of a transfer destination Web server, a service ID indicating a cookie to be transferred, and an item as identification information of an item of information to be transferred. An ID, an encryption key for encrypting information to be transferred, and the like are set for each domain to which information is to be transferred. A plurality of item IDs are set as necessary. The cookie control information is preset by an administrator, for example. Since setting is possible for each transfer destination domain, it is possible to transfer cookie information to domains other than the domain D2.

Here, the significance of the encryption key included in the cookie control information will be explained. The information encrypted in the cookie processing server 1 is decrypted with the decryption key in the transfer destination domain, but the cookie value is encrypted in the domain D1 as an encryption key for encrypting the information to be transferred. If the same key as the encryption key is used, the decryption key for decrypting the value of the cookie in the domain D1 is shown outside the domain D1, which is not preferable in terms of security. Therefore, the encryption key for encrypting the information to be transferred is different from the encryption key for encrypting the value of the cookie in the domain D1.

Corresponding to the above cookie control information, in the HTML document of the cookie transfer page, for example, a control ID is described in the src attribute of the iframe tag instead of the service ID. This control ID indicates which cookie control information is used.

When the cookie processing server 1 receives a request including a cookie from the user terminal 3-j that acquired the HTML document of the cookie transfer page, the cookie processing server 1 processes based on the cookie control information corresponding to the control ID added as a parameter to the request URL. I do.

FIG. 8 is a sequence diagram showing a processing example of the information providing system S according to the present embodiment. In FIG. 8, elements similar to those in FIG. 5 or FIG. In the present embodiment, the processes in steps S1 to S12 and the processes in steps S23 to S29 are the same as those in the first embodiment, and therefore, these processes are not shown in FIG. .

As shown in FIG. 8, the cookie processing server 1 that has received a request including the cookies A1 and A2 from the user terminal 3-j that has acquired the HTML document of the cookie transfer page, receives the control ID specified as a parameter in the request URL. Cookie control information corresponding to is acquired (step S51). Next, the cookie processing server 1 checks whether or not the cookie name of the cookie A1 or A2 matches the service ID of the cookie control information (step S52). When the service ID is “A2”, the cookie name of the cookie A2 matches the service ID. Therefore, the cookie processing server 1 rewrites “http” indicating the protocol of the request URL to “https” (step S15), and sends a response including a Location header for designating the rewritten URL as a redirect destination URL. j (step S16).

When the cookie processing server 1 receives a request including the cookies A1 and A2 from the user terminal 3-j that has received the response while the SSL session is established (step S17), the control ID specified as a parameter in the request URL Cookie control information corresponding to is acquired (step S53).

Next, the cookie processing server 1 acquires the value of the cookie whose cookie name matches the service ID of the acquired cookie control information from the request (step S54).

Next, the cookie processing server 1 decrypts the acquired cookie value with the decryption key for the domain D1, and then checks the cookie value (step S55).

Next, the cookie processing server 1 acquires information corresponding to the item ID of the acquired cookie control information from the decrypted value (step S56). At this time, in the decrypted value, when the item ID and the information corresponding to the item are set in association with each other, for example, “data01 = XXXX”, the cookie processing server 1 An item ID that matches the item ID of the cookie control information is searched from the decrypted value, and information associated with the searched item ID may be acquired.

Next, the cookie processing server 1 encrypts and encodes the information corresponding to the item ID with the encryption key of the acquired cookie control information (step S57). If the item ID is not set in the cookie control information, the process in step S56 is skipped, and the entire cookie value is encrypted and encoded.

Next, the cookie processing server 1 generates a URL specified in the Location header (step S58). Specifically, the cookie processing server 1 generates a URL by adding an encoded value as a parameter to a URL including the host name of the acquired cookie control information. Next, the cookie processing server 1 transmits a response including a Location header indicating the generated URL as a redirect destination to the user terminal 3-j (step S22).

If the host name of the cookie control information is the host name of the Web server 2, then the same processing as in steps S23 to S30 in FIG. 6 is performed.

As described above, according to this embodiment, one of the cookies corresponding to the domain D1 includes a plurality of pieces of information each corresponding to a preset item, and the cookie processing apparatus 1 is Of the cookie information included in the request received from the terminal 3-j, a Location where the URL to which the information corresponding to the item previously associated with the domain D2 indicated by the cookie control information is added as a parameter is the redirect destination URL A response including the header is transmitted to the user terminal 3-j.

Therefore, when a plurality of pieces of information are included in one cookie, the information that can be acquired and used by the Web server 2 belonging to the domain D2 can be restricted.

In the second embodiment, the cookie information transferred to the Web server 2 is specified in units of items. However, the information may be specified in units of cookies. For example, the administrator sets the control ID, the host name of the transfer destination Web server, and the service ID indicating the cookie to be transferred in the cookie control information, and does not set the item ID. When there are a plurality of cookies to be transferred, the administrator sets a plurality of corresponding service IDs.

When the cookie processing server 1 receives a request in which the control ID is added to the request URL from the user terminal 3-j in the processing shown in FIG. 8, the cookie processing server 1 acquires cookie control information corresponding to the control ID. Next, the cookie processing server 1 determines whether there is a cookie included in the received request that has a cookie name that matches the service ID of the acquired cookie control information. The cookie processing server 1 acquires only the value of the cookie whose cookie name matches the service ID of the cookie control information from the received request. Then, the cookie processing server 1 transmits to the user terminal 3-j a response in which the URL added with the acquired cookie value as a parameter is specified in the Location header. On the other hand, when a cookie whose service ID matches the cookie name in the cookie control information is not included, there is no cookie to be transferred. In this case, the cookie processing server 1 transmits a response including, for example, the status code 204 to the user terminal 3-j. The user terminal 3-j that has received this response does not transmit a request to the Web server 2.

In the above embodiment, the cookie processing server 1 belongs to the domain D1, and the Web server 2 belongs to the domain D2. However, the cookie processing server 1 and the Web server 2 belonging to the domains may be provided in each of two or more domains having different domain names. Thereby, the information of the cookie issued in each domain can be mutually shared between domains. In this case, each cookie processing server 1 stores, as cookie control information, for example, the control ID and the host name of the transfer destination Web server 2 in association with each other. As the transfer destination Web server 2, a Web server 2 belonging to a domain different from the domain to which the cookie processing server belongs is specified. That is, a host name that does not match the domain name of the domain to which the cookie processing server that stores the cookie control information belongs is set in the cookie control information as the host name of the transfer destination Web server 2. The administrator or the like describes the control ID set in the cookie control information in the src attribute of the iframe tag in the HTML document of the cookie transfer page, so that the URL indicated by the src attribute and the cookie information It is associated with the transfer destination domain.

Further, when receiving a request transmitted from the user terminal 3-j based on the response including the Location header from the cookie processing device 1, the Web server 2 may determine whether to issue a cookie. As the Web server 2, unnecessary information may exist in the transferred cookie information. Therefore, the Web server 2 issues a cookie only for information necessary for each cookie among the transferred cookie information.

Therefore, in the Web server 2, condition information indicating a cookie issuing condition is stored in the storage unit 22 in advance. In this condition information, for example, a cookie name (an example of cookie identification information) of a cookie to be issued is set.

On the other hand, when generating the URL specified in the Location header in step S58 shown in FIG. 8, the cookie processing device 1 adds the cookie name of the cookie received from the user terminal 3-j as a parameter to the URL. For example, when “http://www.xyz.co.jp?cookie=A2:XXXXXXXXX” is set in the URL of the Location header, the part “A2” is the cookie name. The cookie processing device 1 may add all the cookies received from the user terminal 3-j as transfer targets and add the information to the URL. For example, if no service ID is set in the cookie control information, all cookies are subject to transfer.

When the Web server 2 receives a request including such a URL as a request URL from the user terminal 3-j, the Web server 2 determines whether the cookie name added to the request URL is set in the condition information. The Web server 2 issues a cookie when the cookie name added to the request URL is set in the condition information. Here, when a plurality of cookie names are added to the request from the user terminal 3-j by adding a plurality of cookie information, the Web server 2 performs determination for each cookie name. Then, the Web server 2 issues a cookie only for the cookie information corresponding to the cookie name determined to be set in the condition information.

Note that the cookie name of the cookie excluded from the issue target may be set as the condition information. In this case, the Web server 2 issues a cookie when the cookie name added to the request URL is not set in the condition information. As information for identifying a cookie, information obtained by hashing the cookie name, for example, instead of the cookie name may be set as the condition information and added to the URL of the Location header.

In addition, the Web server 2 may determine whether or not to issue a cookie for each domain from which the cookie information is transferred. In this case, for example, a domain name (an example of domain identification information) of a transfer source domain to be issued is set in the condition information.

On the other hand, when generating the URL specified in the Location header in step S58 shown in FIG. 8, the cookie processing device 1 adds the domain name of the domain to which the cookie processing device 1 belongs to the URL as a parameter. For example, when “http://www.xyz.co.jp?cookie=XXXXXXXXX&domain=abc.co.jp” is set in the URL of the Location header, “abc.co” of “domain = abc.co.jp” .jp "is the domain name.

When the Web server 2 receives a request including such a URL as a request URL from the user terminal 3-j, the Web server 2 determines whether the domain name added to the request URL is set in the condition information. Then, the Web server 2 issues a cookie when the domain name added to the request URL is set in the condition information.

Note that the domain name of the domain excluded from the issue target may be set as the condition information. In this case, the Web server 2 issues a cookie when the domain name added to the request URL is not set in the condition information. Further, as information for identifying a domain, information obtained by, for example, hashing the domain name instead of the domain name may be set as the condition information and added to the URL of the Location header.

Further, the Web server 2 may determine whether or not to issue a cookie based on a combination of a cookie information transfer source domain and a cookie name. That is, the Web server 2 may issue a cookie only for information on a specific cookie transferred from a specific domain, and does not issue a cookie for information on a specific cookie transferred from a specific domain. Anyway.

In each of the above embodiments, when the cookie processing server 1 receives a request from the user terminal 3-j, the request is redirected once in the SSL session. However, this processing may be omitted.

In each of the above embodiments, the cookie processing server 1 transmits a response including a Location header, but the command information is not limited to the Location header. For example, what is necessary is just to make the web server 2 transmit a request including a request URL to which cookie information is added.

Further, in each of the above embodiments, the request is transmitted to the cookie processing server 1 by the description of the iframe tag of the HTML document of the cookie transfer page, but the acquisition command information is not limited to the iframe tag. Absent. For example, the request may be transmitted to the user terminal 3-j, such as an instruction by an img tag or a script.

Also, the anchor tag indicating the link to the Web page of domain D2 does not have to be described in the HTML document of the cookie transfer page.

In each of the above embodiments, the relationship between the website operator of the domain D1 and the website operator of the domain D2 has been described. However, these descriptions are merely examples. That is, the relationship between operators is not limited to the above-described relationship.

In addition, the technical specification of the state management mechanism related to cookies is not limited to a specific specification. For example, it may be an initial specification proposed by Netscape 社 Communications, or a specification prescribed in RFC2965. May be.

1 Cookie processing server 1-i, 2 Web server 3-

j User terminal

11, 21

Communication unit

12, 22

Storage unit

13, 23 Input /

output interface unit

14, 24 CPU
15, 25 ROM
16, 26 RAM
17, 27

System controller

18, 28 System bus NW Network S Information providing system

Claims

Cookie that can be accessed via a network by a terminal device that transmits request information having identification information including a domain name indicating a requested domain as a request resource identification information to a server device belonging to the domain indicated by the domain name A processing device comprising:
Includes a cookie stored in correspondence with the first domain by the terminal device, transmitted by the terminal device based on acquisition command information instructing resource acquisition received by the terminal device from a preset server device Receiving means for receiving the request information;
The request information for requesting retransmission of the request information includes, as the identification information to be included in the request information, a domain name of a second domain having a domain name different from the first domain, and the received request information Transmitting means for transmitting to the terminal device together with the identification information to which the information of the included cookie is added;
A cookie processing device comprising:
In the cookie processing apparatus according to claim 1,
The information of the cookie includes a plurality of item correspondence information each corresponding to a preset item,
The transmission means uses the command information to identify the identification information to which item correspondence information corresponding to an item previously associated with the second domain among the plurality of item correspondence information included in the cookie information is added. A cookie processing device characterized by being transmitted together.
In the cookie processing apparatus according to claim 1 or 2,
Based on the cookie name of the cookie included in the received request information, further comprising a determination means for determining whether to transmit the cookie information;
The said transmission means transmits the said identification information to which the information of the cookie determined to transmit by the said determination means was added with the said command information, The cookie processing apparatus characterized by the above-mentioned.
In the cookie processing apparatus according to any one of claims 1 to 3,
The request information including a cookie stored corresponding to the first domain is included in the acquisition command information included in preset hypertext data received by the terminal device from the preset server device. Transmitted by the terminal device based on
The cookie processing device, wherein the preset hypertext data includes a link to hypertext data transmitted by a server device belonging to the second domain.
Cookie that can be accessed via a network by a terminal device that transmits request information having identification information including a domain name indicating a requested domain as a request resource identification information to a server device belonging to the domain indicated by the domain name A cookie processing method executed by a processing device,
Includes a cookie stored in correspondence with the first domain by the terminal device, transmitted by the terminal device based on acquisition command information instructing resource acquisition received by the terminal device from a preset server device Receiving the request information; and
The request information for requesting retransmission of the request information includes, as the identification information to be included in the request information, a domain name of a second domain having a domain name different from the first domain, and the received request information A transmission step of transmitting to the terminal device together with the identification information to which the information of the included cookie is added;
And a cookie processing method.
Cookie that can be accessed via a network by a terminal device that transmits request information having identification information including a domain name indicating a requested domain as a request resource identification information to a server device belonging to the domain indicated by the domain name A computer included in the processing device,
Includes a cookie stored in correspondence with the first domain by the terminal device, transmitted by the terminal device based on acquisition command information instructing resource acquisition received by the terminal device from a preset server device Receiving means for receiving the request information; and
The request information for requesting retransmission of the request information includes, as the identification information to be included in the request information, a domain name of a second domain having a domain name different from the first domain, and the received request information Transmitting means for transmitting to the terminal device together with the identification information to which the information of the included cookie is added;
Cookie processing program characterized by functioning as
Cookie that can be accessed via a network by a terminal device that transmits request information having identification information including a domain name indicating a requested domain as a request resource identification information to a server device belonging to the domain indicated by the domain name A computer included in the processing device,
Includes a cookie stored in correspondence with the first domain by the terminal device, transmitted by the terminal device based on acquisition command information instructing resource acquisition received by the terminal device from a preset server device Receiving means for receiving the request information; and
The request information for requesting retransmission of the request information includes, as the identification information to be included in the request information, a domain name of a second domain having a domain name different from the first domain, and the received request information Transmitting means for transmitting to the terminal device together with the identification information to which the information of the included cookie is added;
A recording medium in which a cookie processing program that functions as a computer is recorded so as to be readable by a computer.
The terminal device that transmits request information having identification information including the domain name indicating the requested domain as the identification information of the requested resource to a server device belonging to the domain indicated by the domain name is accessible via the network. A cookie processing system comprising: a cookie processing device belonging to one domain; and a server device belonging to a second domain having a domain name different from that of the first domain,
The cookie processing device
Includes a cookie stored in correspondence with the first domain by the terminal device, transmitted by the terminal device based on acquisition command information instructing resource acquisition received by the terminal device from a preset server device Receiving means for receiving the request information;
As the identification information for causing the request information to include retransmission of the request information in the request information, the cookie information included in the received request information is added, including the domain name of the second domain. Transmitting means for transmitting to the terminal device together with the identification information;
With
The server device belonging to the second domain is
Request information receiving means for receiving the request information having the identification information to which the cookie information is added, from the terminal device that has received the command information;
Cookie transmission means for transmitting the information added to the identification information included in the received request information as a cookie to the terminal device;
A cookie processing system comprising:
In the cookie processing system according to claim 8,
The server device belonging to the second domain is
Condition information storage means for storing condition information indicating the cookie issuance conditions;
Issuing determination means for determining whether to issue, as a cookie, cookie information added to the identification information included in the received request information based on the condition information;
Further comprising
The cookie transmission system of the server apparatus belonging to the second domain transmits information determined to be issued as a cookie by the issue determination means to the terminal device as a cookie.
In the cookie processing system according to claim 9,
The condition information includes cookie identification information for identifying a cookie,
The transmission means of the cookie processing device transmits the cookie information included in the received request information and the identification information to which the cookie identification information of the cookie is added, together with the command information,
The issuance determination means of the server device belonging to the second domain includes the cookie identification information included in the condition information and the cookie identification information added to the identification information included in the received request information. Based on this, a cookie processing system for determining whether or not to issue the cookie information added to the identification information as a cookie.
In the cookie processing system according to claim 9 or 10,
The condition information includes domain identification information for identifying a domain,
The transmission unit of the cookie processing device transmits the cookie information included in the received request information and the identification information to which the domain identification information of the first domain is added together with the command information,
The issue determination unit of the server device belonging to the second domain includes the domain identification information included in the condition information and the domain identification information added to the identification information included in the received request information. Based on this, a cookie processing system for determining whether or not to issue the cookie information added to the identification information as a cookie.
The cookie processing system according to any one of claims 8 to 11,
The cookie processing device and server belonging to the domain for each of a plurality of preset domains having different domain names as the cookie processing device belonging to the first domain and the server device belonging to the second domain Equipped with equipment,
The transmission means of the cookie processing device is a domain whose domain name is different from the domain to which the cookie processing device belongs, and includes a domain name of a domain associated in advance with the identification information included in the received request information A cookie processing system, wherein the identification information is transmitted together with the command information.
As requesting resource identification information, a terminal device that transmits request information having identification information including a domain name indicating a request destination domain to a server device belonging to the domain indicated by the domain name, and the terminal device via a network An information communication system comprising: a cookie processing device belonging to a first domain that can be accessed; and a server device belonging to a second domain having a domain name different from the first domain,
The cookie processing device
Receiving means for receiving from the terminal device the request information including a cookie stored in correspondence with the first domain by the terminal device;
As the identification information for causing the request information to include retransmission of the request information in the request information, the cookie information included in the received request information is added, including the domain name of the second domain. Transmitting means for transmitting to the terminal device together with the identification information;
With
The server device belonging to the second domain is
Request information receiving means for receiving the request information having the identification information to which the cookie information is added, from the terminal device that has received the command information;
Cookie transmission means for transmitting the information added to the identification information included in the received request information as a cookie to the terminal device;
With
The terminal device
Storage means for storing cookies;
Acquisition command information receiving means for receiving acquisition command information for instructing resource acquisition from a preset server device;
First request information transmitting means for transmitting the request information including the cookie stored in the storage means corresponding to the first domain to the cookie processing device based on the received acquisition command information;
Command information receiving means for receiving the command information and the identification information transmitted from the cookie processing device;
Second request information transmitting means for transmitting the request information having the received identification information to a server device belonging to the second domain based on the received command information;
Cookie receiving means for receiving a cookie transmitted from a server device belonging to the second domain;
Storage control means for storing the received cookie in the storage means corresponding to the second domain;
An information communication system comprising: