JP2000076191A - Security method for intranet system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method for instantaneously issuing an alarm and interrupting access in the signs or execution stage of illegal access to a WWW server device. SOLUTION: In a job application constituted of a series of job relating HTML files, in the case of detecting the signs of the illegal access, red card HTML is called from the WWW server device to a WWW browser device, a warning sentence is presented to an end user interface and a red card issuance previous record is recorded in the cookie file storage area of the WWW browser device. The record presence/absence of the red card issuance previous record in the cookie file storage area of the WWW browser device is checked at the beginning of the program operation for all the series of the job relating HTML files, and in the case that the record is present, by calling an HTML file turned away from the door, the utilization of the job application is stopped.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a business application particularly for an intranet system.
The present invention relates to a security method suitable for finding and suppressing signs of unauthorized access.

[0002]

2. Description of the Related Art As a conventional technique of a security method of an application for providing a business such as a search in an intranet or the Internet system, there are password authentication, auditing such as recording resource access to a WWW server device, WWW server device and WWW. Methods such as encryption of communication between browser devices, methods such as firewalls to prevent intrusion of third parties by performing packet filtering at the network boundary of the intranet, and prevention of tampering and spoofing by digital signature using public key encryption. Are known. However, in the password authentication method and the encryption method, the management of the password and the encryption key tends to be a burden on the end user, and as a result, the end user who puts the paper on which the password is written in the WWW browser device in an office where there is a traffic. In addition, there is a problem that security is lost in terms of use, such as an end user who leaves the seat while logging in to the WWW server device with a password. In an auditing method such as recording resource access to the WWW server device, an IP address that is statistically suspected to be an unauthorized access can be analyzed and found based on the record. There is no known way to give immediate alerts or block access.

[0003]

SUMMARY OF THE INVENTION An object of the present invention is to provide a method for issuing an immediate warning or blocking access to a WWW server device in an intranet system or an Internet system for providing business applications, at the time of a sign or execution of unauthorized access to the WWW server device. To provide.

[0004]

The concept of a red card in a soccer game, which has become widely known in Japan at the 1998 World Cup and the like, is incorporated into an intranet security method. In a business application composed of a series of business-related HTML files, there is a phenomenon such as illegal storage of an HTML file for inputting a password in a storage device of a WWW browser device as a serious precursor of unauthorized access. Pay attention. At this time, a case where an HTML file for inputting a password is started from the storage device of the WWW browser device or the like is detected as a sign of unauthorized access, and the red card HTML is called from the WWW server device to the WWW browser device. A warning message is displayed on the user interface, and the previous red card issuance record is recorded in the cookie file storage area of the WWW browser device. At the beginning of the program operation, a series of business-related HTML files are checked in the cookie file storage area of the WWW browser device for the presence or absence of a record of red card issuance, and if there is a record, a front-paid HTML is recorded.
By stopping the use of the business application by calling the file, an immediate warning can be issued or the access can be blocked in the intranet system or the Internet system at the sign or execution stage of the unauthorized access to the WWW server device.

[0005]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described based on embodiments with reference to the drawings.

[0006]

An embodiment of the present invention will be described below. First Figure 1
6 will be described, and the operation will be described with reference to FIG.

FIG. 1 shows the components of the present embodiment and their related drawings. This embodiment includes a WWW browser device 1100, a network 1200, and a WWW server device 1300.

[0008] WWW browser device 1100 comprises a commercially available personal computer known to those skilled in the art as a DOS / V compatible machine. An end user interface 1110, a network interface 1120, and a storage device 1130 are provided. Network 1200
And the network interface 1120 of the WWW browser device 1100 are a 10BASE-T cable 1140
Are connected by using. An operating system program 1131 is installed on the storage device 1130. Operating system program 113
1 has a WWW browser program 1132 installed therein and a cookie file storage area 1133.
And a temporary file storage area 1134 are set. Here the operation You are using the operating system program. W
WW browser program 1132 has NetscapeCom manufactured by Netscape Communications Japan.
Municipator is used.

Here, the end user interface 11
10, the functions of the network interface 1120, the storage device 1130, the WWW browser program 1132, the cookie file storage area 1133, and the temporary file storage area 1134 are realized in cooperation with the operating system program 1131.
As described above, the transmission request is transmitted to the WWW server device via the one display device, one or a plurality of storage devices, and the network by indicating the file name as the "WWW browser device" in claim 1. A function for receiving a file transmitted from the WWW server device via the network, a function for displaying a screen on a display device in accordance with a program described in the file, a network address of a storage location when the file is transmitted, and the like. (Hereinafter referred to as a WWW browser device) having a function of temporarily storing the information and a function of recording the contents specified by the program together with the information such as the address in the storage device, or referring to the recorded contents or updating the recorded contents. Is composed.

Note that the operating system program 1131 includes an end user interface 1110, a network interface 1120, a storage device 1130,
WWW browser program 1132, cookie file storage area 1133, temporary file storage area 113
The functions of managing the P.4 and the like and mediating the input and output are obvious to those skilled in the art, and the detailed operation of the operating system program 1131 is omitted in the specification to make the text unnecessarily complicated.

Network 1200 is known to those skilled in the art as Ethe.
one 10BASE- known as rnet HUB
It is composed of a hub device compliant with IEEE802.3 for the T segment, and has a packet communication relay function compliant with TCP / IP.

[0012] The WWW server device 1300 is provided to those skilled in the art by DO.
It is configured using a commercially available personal computer known as an S / V compatible machine, but has a network interface 1310 and a storage device 1320.
The network interface 1310 between the network 1200 and the WWW server device 1300 is 10BASE-T.
They are connected using a cable 1330. Storage device 1
The operating system program 13
21 is installed. A WWW server program 1322 is installed on the operating system program 1321. Microsoft on operating system program 1321 ing.

Here, the network interface 13
10, storage device 1320, WWW server program 13
22, the HTML library 1323, the CGI program library 1324, and the function of the password file 1325 are realized by cooperating with the operating system program 1321.

According to the above description, "one or a plurality of storage devices and a function of storing a plurality of files such as HTML in the storage device are stored in response to a request via a network connected to the storage device. An apparatus having a function of selecting a file, adding network address information of the storage location of the file, and transmitting the same (hereinafter referred to as a WWW server apparatus) ". In this embodiment, CG is stored on the operating system program 1321.
An I program library 1324 and a password file 1325 are also set. Note that the operating system program 1321 is connected to the network interface 1
310, storage device 1320, WWW server program 1
The functions of managing the H.322, the HTML library 1323, the CGI program library 1324, the password file 1325, etc., and mediating the input / output are obvious to those skilled in the art, and the description in the specification is omitted to make the text unnecessarily complicated. I have.

The HTML library 1323 includes an in-house menu HTML 13231 (alias: shn_menu.h).
tml. A flowchart is shown in FIG. 2) and a red card HTML13232 (alias: red car
d. html. The flowchart is shown in Fig. 3)
And authentication input HTML13233 (alias is nnsh n
yrk. html. A flowchart is shown in FIG. 4) and a front payment HTML13234 (alias is mnzn)
br. html. (The flowchart is shown in FIG. 5). A total of four HTML files are stored.

According to the present embodiment, the HTML files stored in the 1323 HTML library are stored in the storage device of the WWW server device and stored in the WWW server device.
(A means (such as a program described in HTML format) that is transmitted via a network in response to a request from a WW browser device). The CGI program library 1324 stores the authentication CGI program 13241.
Is stored. (Alias is nnsh.exe.
The flowchart is shown in FIG. 6) Password file 13
Reference numeral 25 denotes a text-format file in which an ID and a password of the end user are recorded in combination for the purpose of managing the access right to the confidential information. An example of use is shown in FIG.

FIG. 2 shows a flowchart of the in-house menu HTML13231. The execution place of the file such as the in-house menu HTML stored in the HTML library is the WWW browser apparatus 1100. START2
000 is the WW of the in-house menu HTML program operation
This indicates that the W browser program 1132 is to be started.

Reference numeral 2100 denotes a cookie file storage area 11
33 "red The operation determines whether or not the symbol “card issue” is recorded together with the address of the storage location of the HTML file when the WWW browser device is started. In the case of "", 2120 is executed.

Reference numeral 2110 denotes an operation for requesting the WWW server apparatus 1300 to transmit an HTML file serving as the front-end payment HTML 13234. Reference numeral 2200 indicates that the program operation ends. According to the above, Claim 1
“WWW stored on the storage device of the WWW server
"WWW files transmitted via a network in response to a request from the WWW browser device and operated to program the functions of the WWW browser device" in "WWW".
A program for requesting transmission of an arbitrary file name on the WWW server device by using the function of the WWW browser device if the presence or absence of a symbol signifying unauthorized access is checked by referring to the storage device of the browser device. Means. " Here, the WWW server device 1
The request to 300 is made by the WWW server program 132
Since it is functionally synonymous with the request to the request 2, the name of the request destination WWW server 1
300 was used.

Reference numeral 2120 denotes a cookie file storage area 11
33 "Shanai This indicates that the symbol “menu used” is recorded together with the address (IP address of the WWW server device 1300 or the name of the storage source directory) when the program function of the HTML file is activated.

As described above, according to the second aspect, "WWW stored on a storage device of a WWW server device and transmitted via a network in response to a request from a WWW browser device"
Address information such as a storage location of the file in a WWW server device (hereinafter referred to as a legitimate server) of the source of the file on a storage device of the WWW browser device in a file in an HTML format or the like that causes a function of the browser device to perform a program operation. And means for recording a symbol that means regular registration. "

Reference numeral 2130 denotes an end user interface 1
An operation of displaying a screen “select a menu: desire confidential information” for 110 is shown.

Reference numeral 2140 denotes whether or not the end user has performed a click operation on "menu selection: secret information desired". If yes, the operation 2150 is performed; if no, the display is continued.

Reference numeral 2150 denotes an operation for requesting the WWW server apparatus 1300 to transmit an IITML file serving as the authentication input HTML 13233. 2200 indicates the end of the program operation as described above.

FIG. 3 shows a flow chart of the red card HTML 13232. START 3000 indicates that the WWW browser program 1132 starts the program operation of the red card HTML.

Reference numeral 3100 denotes a cookie file storage area 11
33 "red The symbol "card issue" represents the address of the file storage location when the program function of the HTML file is started (the WWW server device 130).
0 and the storage source directory name).

As described above, the first aspect of the present invention realizes "means such as a program for recording a sign indicating unauthorized access to a storage device of a WWW browser device".

Reference numeral 3110 denotes an end user interface 1
A warning message for unauthorized access is issued to 110. Here, "We will present you with a red card because your action is allegedly a violation of the Unfair Competition Prevention Act. We will notify you that your access to this business has been blocked. Your action will be recorded as an audit trail I can also tell you. "

As described above, the "means such as a program for causing a function for displaying a screen of a WWW browser apparatus to perform a display indicating a warning of an unauthorized access" according to claim 1
Has been realized.

Reference numeral 3200 denotes completion of the program operation described in the HTML file. However, since this HTML file does not have a description for requesting another HTML file on the WWW server device, the display result by 3110 indicates the end user. Launches another HTML file using the function of the WWW browser device, or
The display is continued until an operation such as stopping the operation of the browser device is performed.

FIG. 4 shows a flowchart of the authentication input HTML 13233. 4000 indicates that the WWW browser program 1132 starts the program operation of the authentication input HTML.

Reference numeral 4100 denotes a cookie file storage area 11
33 "red The operation determines whether or not the symbol “card issue” is recorded together with the storage source address of the HTML file when the WWW browser device is started.If “yes”, 4110 is executed and “absent” In the case of, 4120 is executed.

Reference numeral 4110 denotes an operation for requesting the WWW server apparatus 1300 to transmit an HTML file serving as the front-end payment HTML 13234. 4200 indicates that the program operation ends.

41.20 is cookie file storage area 1
133 to "Shanai The symbol "menuused" indicates that the authentication input HTML is the WWW browser device 110.
It is determined whether or not 0 is recorded together with the storage location address of the HTML file at the time of starting using the function. At this time, for example, assuming that the HTML file is improperly placed in the temporary file storage area and has been activated in association with the WWW browser program 1132 from there, the search result becomes “none” and 4130 is performed. At this time, the HTML file is stored in the in-house menu HTML132.
WWW server device 130 which stores the same
If it is assumed from 0 that the program operation has been transmitted to the WWW browser apparatus 1100 before starting the program operation, the search result becomes “Yes” and 4140 is performed.

Reference numeral 4130 denotes an operation for requesting the WWW server apparatus 1300 to transmit an IHTML file, which is a red card HTML 13232. Reference numeral 4200 indicates that the program operation ends as described above. As described above, the "predetermined file" in claim 1 is defined as "a file in an HTML format or the like which is stored on a storage device of a WWW server device and transmitted via a network in response to a request from the WWW browser device and operates a function of the WWW browser device as a program". Means (hereinafter referred to as a referee function) for requesting to send out the red card HTML on the WWW server device by using the function of the WWW browser device if the conditions are met. At the same time, the "WWW file stored in the storage device of the WWW server device and transmitted through the network in response to a request from the WWW browser device and transmitted in a network to program the function of the WWW browser device" in "WWW" 2. A red card HTM on the WWW server device according to claim 1, wherein it is verified whether or not the address of the start of the file and a symbol signifying regular registration are recorded on the storage device of the browser device.
Means for requesting to send L using the function of the WWW browser device ”.

4140 is an end user interface 1
This indicates that an input form display for performing an input operation for indicating an ID input, a password input, and an input completion to 110 is performed. Reference numeral 4150 denotes an operation for determining whether or not a submit operation has been performed on the input form displayed at 4140. If it is determined that the submit operation has been performed, the operation of 4160 is performed. If the submit operation is not performed, the operation of 4140 is continued.

Reference numeral 4160 denotes an operation for requesting the WWW server apparatus 1300 to execute a program as an authentication input CGI using the ID and password submitted in 4150 as environmental conditions and return the result. 420
0 indicates that the program operation ends as described above.

FIG. 5 shows a flowchart of the front-end payment HTML 13234. 5000 indicates that the WWW browser program 1132 starts the program operation of the front-end payment HTML. 5100 issues an unauthorized access warning message to the end user interface 1110. Here, it states, "You have access to this service because you have been issued a red card. Please also note that your actions have been recorded as an audit trail." Reference numeral 5200 indicates that the program operation ends.

FIG. 6 shows a flowchart of the authentication CGI program 13241. 6000 is a WWW server device 1
300 WWW server program 1322 cooperates with the operating system program 1321 to perform authentication CG.
This means that the I program 13241 is started. Here, the activation of the authentication CGI program 13241 is performed by WWW.
It is assumed that the request is based on a request from the browser device 1100. 6100 is an authentication CGI program 1324
1 indicates that environment parameters such as an ID and a password are received from the activation source.

Reference numeral 6110 denotes an operation of judging whether or not the contents matching the combination of the ID and the password received at 6100 are registered in the password file 1325. If it is determined that the matching content is not registered, 6120 is performed, and if it is determined that the matching content is registered, 6130 is performed. Reference numeral 6120 indicates an operation of returning to the WWW server program 1322 an HTML-format text including a program for displaying a text message “Failed in authentication. Enter ID and password correctly.”. In response to this operation, the WWW server program 1322 operates the operating system program 1
HTM to the WWW browser device 1100 which has requested the activation of the CGI program in cooperation with H.321 or the like.
The text in the L format is transferred in a packet format via the network 1200. Upon receiving this, the WWW browser program 1132 displays a text on the end user interface 1110 as "Failed authentication. Please enter your ID and password correctly."

6130 is an HT including a program for displaying a text sentence "I recognize you as a legitimate user. The balance of bad assets which is our company secret is XX yen."
ML format text to WWW server program 1322
Represents the operation of returning to. The WWW browser program 1132 receives this operation in the same manner as 6120, and displays the text on the end user interface 1110. Reference numeral 6200 indicates that the operation of the authentication input CGI program ends.

FIG. 7 is a sequence diagram showing an operation example of the present embodiment. In the horizontal direction, an end user interface 1110, a WWW browser program 1132, a cookie file storage area 1133, a temporary file storage area 1134, and a WWW server program 1322 are shown. The vertical axis indicates the passage of time. Here, the operating system program 1131 is 1
It is obvious to a person skilled in the art that the interworking and communication between 110, 1120, 1130, 1132, 1133, etc. are mediated, and are not particularly described to avoid complication of description. Network interfaces 1120 and 1
The operation of 130 is obvious to those skilled in the art, and is not described for the sake of simplicity. Similarly, operating system programs 1321 are 1310, 1320, 132
It is obvious to those skilled in the art that the mutual cooperation and communication such as 2, 1323, 1324, 13241, and 1325 are mediated, and the description is omitted to avoid complication of description.

First, a legitimate user normally activates the authentication CGI, and the WWW browser program 1132 prompts the end user interface 1110 "Accepts you as a legitimate user. The balance of bad assets, which is our company secret, is XX yen. "Until the text sentence" is displayed. In addition, as the initial condition, the WWW browser program 1132
In-house menu HT for W server program 1322
It is assumed that an ML13231 transmission request has been made. 7110 indicates that the WWW server program 1322 is a WW
In-house menu H for W browser program 1132
Indicates that TML13231 is to be transferred. 7111 is W
The WW browser program 1132 stores “red” in the cookie file storage area 1133. card issue ”
Indicates that the presence / absence of the record is checked and determined.
Here, it is assumed that there is “none”. Reference numeral 7112 denotes a WWW browser program 1132 that stores the cookie file storage area 11
33 along with the address information of the WWW server device 1300, etc. Reference numeral 7113 denotes an operation in which the WWW browser program 1132 displays a screen on the end user interface 1110 as "menu selection: secret information desired". Reference numeral 7114 denotes a click operation of the end user for “menu selection: secret information request”. 7
115 is an authentication input H to the WWW server program 1322
An operation of requesting transmission of an HTML file of TML13233 will be described.

7120 is a WWW server program 132
2 to WWW browser program 1132 for authentication input H
The operation of transmitting the HTML file of TML13233 will be described. 7121 is a WWW browser program 113
2 is "red" in the cookie file storage area 1133. c
This indicates that the presence / absence of the recording of the symbol “ard issued” is checked and determined. In this case, “none”. 712
No. 2 indicates that the WWW browser program 1132 stores “shanai” in the cookie file storage area 1133 together with the address information of the WWW server apparatus 1300. menuuse
An operation for investigating and determining whether or not the symbol "d" is recorded is shown. Here, "Yes" is set. 7123 is W
This indicates that the WW browser program 1132 displays an input form on the end user interface 1110 for performing an input operation indicating an ID input, a password input, and input completion. 7124 is the end user ID
Indicates that the submit operation indicating input, password input, and input completion has been performed. Reference numeral 7125 designates a program 71 as an authentication input CGI for the WWW server program 1322.
24 shows an operation of executing the submitted ID and password as environmental conditions and requesting to return the result.

7130 is an HT including a program for displaying a text message such as "I recognize you as a legitimate user. The balance of bad assets which is our company secret is XX yen."
ML format text to WWW server program 1322
Is transferred to the WWW browser program 1132. 7131 is a WWW browser program 1132
Displays a text on the end-user interface 1110 stating "I recognize you as a legitimate user. The balance of bad assets that is our company secret is XX yen." In this way, a user having a legitimate access right can successfully perform authentication CGI.
And the WWW browser program 1132 can display a text on the end user interface 1110 as "Recognize you as a legitimate user. The balance of bad assets which is our company secret is XX yen."

Next, referring to FIG. 7 as well, a case where the end user stores the “authentication input HTML 13233” in the temporary file storage area 1134 for the purpose of unauthorized access such as falsification, and then starts the program in association with the WWW browser program 1132 The operation of the embodiment will be described. In this case, the URL of the WWW server device is stored in the cookie storage area together with the URL of “shangai”. Here, it is assumed that the symbol “menu used” is recorded. Here, the “authentication input HTML” stored in the temporary file storage area by using a file display function known as Explorer of the Windows 95 operating system of the end user PC is used. It is assumed that it has been activated in association with the WWW browser device program. It is considered that those skilled in the art know that the operating system of this embodiment has such a function.

Reference numeral 7210 denotes a WWW browser device 1100
Operating system program 1131
Stored in the temporary file storage area 1134
"Authentication input HTML" is WWW browser program 11
32 indicates that it has been activated. 1 in FIG.
Descriptions of 100 and 1131 have been omitted for simplicity.
is there. 7211 is temporary in the cookie storage area 1133
Shan with the address of the refile storage area 1134
ai Check for the presence of the menu used symbol
ing. This storage area is described in the earlier part of this embodiment.
Together with the address information of the web server 1300
hanai The menu used is recorded,
Along with the address of the temporary file storage area 1134
Is shanai Menu used is not recorded
No. Therefore, the reference result is "none". 7212 is WWW
Browser program 1132 is a WWW server program
Request 1322 Red Card HTML 13232
This shows the operation to be performed.

Reference numeral 7220 denotes a WWW server program 132
2 shows an operation of transmitting the red card HTML 13232 to the WWW browser program 1132. 7221 follows the program described in Red Card HTML,
"Red" is stored in the cookie file storage area 1133. car
"issued" symbol on the WWW server device 13.
This shows an operation of recording with address information of 00 and the like. 7
222 indicates to the end user interface 1110 that the WWW browser program 1132 has presented a red card because your action is suspected of violating the Unfair Competition Prevention Law. Notice that your access to this business has been blocked We also note that your actions have been recorded as an audit trail. "

As described above, in the present embodiment, the activation of the WWW browser program from the end-user local file, which is a sign of unauthorized access due to tampering, is detected, and an immediate warning and a subsequent action are suppressed during an attempted unauthorized access. can do. Further, as an effect peculiar to the present embodiment, “Red Card HT”
The access to “ML13232” from the WWW browser device is recorded as an audit trail. Also, using the function of the WWW server device, "Red Card FHT
It is also possible to filter access from a packet having a network address of the WWW browser device that has accessed “ML13232”.

Next, referring to FIG. 7 again, the “Red Card HTML 13232” is stored in the WWW server program 132.
2. The WWW browser device 1100 that has been received from the end user transmits the in-house menu HT to the WWW server device.
The operation when the transmission of the ML13231 is requested will be described. Here, the in-house menu HTML13231
Has already been requested to the WWW server program 1322.

Reference numeral 7310 denotes a WWW server program 132
2 shows an operation of transferring the in-house menu HTML 13231 to the WWW browser program 1132. 73
11, the WWW browser program 1132 redo the cookie file storage area 1133 along with the WWW server apparatus 1300 address information and the like. card issue
Indicates that the presence or absence of the record is checked. This time it is “Yes” due to the above. Reference numeral 7312 denotes an operation in which the WWW browser program 1132 requests the “gatefront payment HTML 13234” to the WWW server program 1322.

7320 is "Monthly payment HTML13234"
Shows an operation transmitted to the WWW browser program 1132 by the WWW server program 1322. 732
1 indicates that the WWW browser program 1132 indicates to the end user interface 1110 that "You have access to this service because you have been issued a red card. Your actions may be recorded as an audit trail. I will tell you. " For this reason, it becomes difficult for the WWW browser apparatus which has once received the Red Cart HTML to access a series of HTML files constituting the application provided in the WWW server apparatus which issued the red card. Further, as a unique function of the WWW server program used in the present embodiment, the WW that has accessed the “monkey pay HTML 13234”
The W browser can be left as an audit trail, so that network administrators can monitor that end-users who need attention, such as by issuing a red card, are subsequently performing actions leading to front-end payment. There is also an effect. In addition to the above, the request condition for the red card HTML may be, for example, a case where the password authentication fails seven consecutive times.

[0053]

As described above, according to the present embodiment, it is found that the storage in the end user local file, which is the precedent act of the unauthorized access due to the falsification, is found, the display of the subsequent work menu is stopped, and the content for warning instead is displayed. Can be displayed immediately.

Further, subsequent access by the user can be suppressed.

In this embodiment, the effect of accessing the "Red Card HTML 13232" from the IP address of the end user PC is recorded as an audit trail by the function of the WWW server device.

As described above, according to the present invention, in a business application in an intranet system or an Internet system, an improper access to a WWW server device can be detected at the sign or execution stage and an immediate warning can be issued or the access can be cut off.

[Brief description of the drawings]

FIG. 1 is a main view showing components of an embodiment and their relations;

FIG. 2 is a flowchart showing a program operation of an in-house menu HTML13231.

FIG. 3 is a flowchart showing a program operation of a red card HTML 13232;

FIG. 4 is a flowchart showing a program operation of an authentication input HTML 13233.

FIG. 5 is a flowchart showing a program operation of front gate payment HTML 13234;

FIG. 6 is a flowchart showing a program operation of an authentication CGI program 13241.

FIG. 7 is a sequence diagram illustrating an operation example of the embodiment.

[Explanation of symbols]

 1100 WWW browser device 1200 Network 1300 WWW server device 1110 End user interface 1132 WWW browser program 1133 Cookie file storage area 1134 Temporary file storage area 1322 WWW server program 1323 HTML library 13231 In-house menu HTML 13232 Red card HTML 13233 Authentication input HTML 32 HTML 1324 CGI program library 13241 Authentication CGI program

Claims (2)

[Claims] 1. A "network having a packet communication function such as TCP / IP (hereinafter referred to as a network)" and one or more "one or more storage devices connected to the network and one or more storage devices" It has a function of storing a plurality of files in HTML format or the like and a function of selecting a file stored in response to a request via a network to be connected, adding network address information of a storage location of the file, and transmitting the file. Device (hereinafter W
"WWW server device") and one or more "one display device and one or more storage devices connected to the network and a file name specified to the WWW server device via the network and transmitted." A function of transmitting a request, a function of receiving a file transmitted from the WWW server device via the network, a function of displaying a screen on a display device in accordance with a program described in the file, and a function of displaying the file. An apparatus having a function of temporarily storing information such as a network address of a storage place at the time of transmission and a function of recording contents specified by a program together with the information such as the address in a storage device, or referring to the recorded contents or updating the recorded contents. (Hereinafter referred to as “WWW browser device”) in a network configuration such as an intranet 1) “WWW browser "A means such as a program for causing a function for displaying a screen of the apparatus to display a warning indicating an unauthorized access" and "A means such as a program for recording a symbol indicating an unauthorized access in a storage device of a WWW browser apparatus""A means (such as a program described in HTML format) which is stored on a storage device of a WWW server device and transmitted via a network in response to a request from a WWW browser device" (hereinafter referred to as a red card HTML). 2) "WWW stored on the storage device of the WWW server device
If the file matches a predetermined condition, the red card HTML on the WWW server device is sent to the WWW file in the "file in HTML format or the like which is transmitted via the network in response to a request from the browser device and operates the function of the WWW browser device". Means such as a program for requesting transmission by using a function of a browser device (hereinafter referred to as a referee function) "and 3)" WWW stored on a storage device of a WWW server device.
Refers to the storage device of the WWW browser device and checks for a sign indicating unauthorized access to the file in an HTML file or the like transmitted via the network in response to a request from the browser device and programmed to operate the function of the WWW browser device. A means for requesting transmission of an arbitrary file name on the WWW server device using the function of the WWW browser device if the symbol is present ". 2. The configuration according to claim 1, 1) "WWW stored on a storage device of a WWW server device.
"Files in HTML format or the like that are transmitted via the network in response to a request from the browser device and operate the functions of the WWW browser device in a program" in "WWW server device (hereinafter referred to as" regular ") on the storage device of the WWW browser device that transmits the file. A means for recording address information such as a storage location of the file and a symbol signifying regular registration in the server) and 2) "WWW stored on the storage device of the WWW server device."
"File in HTML format etc. transmitted via network in response to a request from the browser device and programmed to operate the function of the WWW browser device" means "the starting address of the file and regular registration on the storage device of the WWW browser device" Means for verifying whether or not a symbol to be recorded is recorded, and if the record is not recorded, means for requesting transmission of the red card HTML on the WWW server device described in claim 1 using the function of the WWW browser device. " A security method for an intranet system, comprising: