JP2005293324A - Updating method for web contents - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To easily perform authentication of a transmitter of electronic mail and file registration and management of Web contents. <P>SOLUTION: When a file of the Web contents to be registered for updating are transmitted from a registrant client device 20 via E-mail to a Web server 10 through the Internet, the file of the Web contents are received via the E-mail by means of the Web server 10. After the registrant is authorized via the file of the Web contents, the file of the Web contents is registered. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a Web content update method for updating Web content by registering a file sent from a specific electronic mail address in the Web content.

  For updating Web contents, a method of logging in to a Web site and using file transfer software is generally used. However, this method is complicated because the updater of the Web content needs to log in to the Web server once, and it is not desirable to prepare a login environment from the viewpoint of security management even from the Web server side. . In addition, there is one aspect in which the management becomes complicated when the Web content consists of a plurality of creators.

  Here, in order to update the Web content, a person who wants to register the Web content is registered with the Web server that holds the content data, and the Web content registrant is registered in the file to be registered and the directory containing the file. In addition, the registrant needs to log in to the Web server using the file transfer software and transfer the file.

  However, in such a method, it is necessary to register a Web content registration office on the server, or to give an update right to the directory or file, and when further updating, the Web content registrant logs in to the server. The procedure of transferring files is necessary. Furthermore, when there are a plurality of Web contents to be registered, management of directory and file update rights becomes complicated. In this case, it takes time and a security vulnerability is likely to occur because a login environment for the registrant is created.

Incidentally, in Patent Document 1, an inquiry e-mail is transmitted from a terminal to a user inquiry e-mail address via a network, and an information disclosure server converts an inquiry e-mail transmitted from a user to a user inquiry e-mail address into html. The converted file is stored in a predetermined directory in a predetermined storage device, the html file name is added to the html format numbered list, and an inquiry e-mail is sent to the client terminal for the administrator. A Web document automatic updating method using an electronic mail that is transmitted to a user inquiry mail address in addition to a reply user address when replying to an inquiry electronic mail from a client terminal is proposed.
Japanese Patent Laid-Open No. 2003-04439

  However, the technique disclosed in Patent Document 1 focuses on automatically generating and storing user inquiry contents by e-mail and html contents such as FAQ collections, and for posting such information on a Web server. Since it aims to reduce work man-hours and improve user satisfaction, it has an email html conversion function and a function to store the converted html file, but it also authenticates the sender of the email. In addition, registration and management of attached files of e-mails are not considered.

  As described above, when the function of authenticating the sender of the electronic mail is not provided, it is impossible to cope with writing by mischief or erroneous operation, and DoS attack (in this case, SPAM mail to the inquiry mail address is applicable). End up. In addition, when there are a plurality of Web contents to be registered, it is easily predicted that not only the management of directory and file update rights will be complicated, but also the registration and management of attached files for e-mail will be complicated.

  The problem to be solved is that, when updating Web contents, if there is no function to authenticate the sender of the e-mail, writing by mischief or misoperation, DoS attack (in this case, SPAM to the inquiry mail address) It is impossible to deal with e-mails, etc., and if there are multiple Web contents to be registered, management of directory and file update rights becomes complicated, and e-mail attachments Registration and management become complicated.

According to the Web content update method of the present invention, the Web server receives a file for updating the Web content of the registrant by e-mail, and after the registrant is authenticated via the Web content file, the Web content is updated. The method includes a step of registering a content file and a step of transmitting the Web content file to be registered by a registrant client device connected to the Web server via the Internet.
In addition, the Web server includes a step of transmitting / receiving the e-mail to / from the registrant client device by a server-side mail transmitting / receiving unit operating on the Web server, and registration necessary for authentication of the registrant. Registered in the authentication database are the user information and the e-mail address of the registrant and the file path of the Web content necessary for updating the Web content, and the actual file of the Web content is stored in the Web content database. And authentication by the Web content registration unit based on information in the authentication database for the electronic mail received via the server-side mail transmission / reception unit, and to the Web content file in the Web content database Access using the file path And a step of distributing the Web content in the Web content database to the Internet by a Web distribution unit, and the registrant client device uses the electronic mail transmission / reception unit to transmit the electronic content. It is possible to have a step of sending / receiving mail and a step of browsing the Web content distributed by the Web distribution unit by the Web browsing unit.
The Web server has an encryption key and a decryption key on the Web server side, and the registrant client device has an encryption key and a decryption key on the registrant side that make a pair with the encryption key and the decryption key on the Web server side, respectively. When the electronic mail is transmitted and received, the encryption key and decryption key on the Web server side and the encryption key and decryption key on the registrant side can be used.
The Web content update system of the present invention receives a file for updating a Web content of a registrant by e-mail, and registers the Web content file after authenticating the registrant via the Web content file. A Web server having a function; and a registrant client device connected to the Web server via the Internet and having a function of transmitting a file of the Web content to be registered.
The Web server includes a server-side mail transmission / reception unit that operates on the Web server and has a function of transmitting / receiving the electronic mail to / from the registrant client device, and a registrant required for authentication of the registrant. An authentication database in which information and an e-mail address of a registrant and a file path of the Web content necessary for updating the Web content are registered; a Web content database in which a file of the Web content is stored; Authentication based on information in the authentication database for the e-mail received via the server-side mail transmitting / receiving unit and access using the file path to the web content file in the web content database are performed. Web content registration unit with functions and previous A Web distribution unit having a function of distributing the Web content in the Web content database to the Internet, and the registrant client device has a function of transmitting and receiving the electronic mail; A Web browsing unit that browses the Web content distributed by the Web distribution unit.
The Web server has an encryption key and a decryption key on the Web server side, and the registrant client device has an encryption key and a decryption key on the registrant side that make a pair with the encryption key and the decryption key on the Web server side, respectively. When the electronic mail is transmitted and received, the encryption key and decryption key on the Web server side and the encryption key and decryption key on the registrant side can be used.
In the Web content update method of the present invention, when a Web content file to be registered for update is transmitted via the Internet from the registrant client device to the Web server, the Web server causes the Web content to be registered. This file is received by e-mail, and after the registrant is authenticated via the Web content file, the Web content file is registered.

  In the Web content update method of the present invention, the Web content file is registered by the Web server after the Web content file is received by e-mail and the registrant is authenticated via the Web content file. As a result, it is possible to easily authenticate the sender of the e-mail and register and manage the web content file.

  By combining authentication with an electronic mail, encryption key, decryption key, and database, a registrant of Web content registered in advance can send an electronic mail in a specific format to the Web server without having to log in and transfer the file. Web content can be updated simply by sending it to the e-mail address.

  FIG. 1 is a diagram for explaining an outline of a web content update system according to a web content update method of the present invention, and FIG. 2 is a flowchart for explaining a web content update method by the web content update system of FIG. It is.

  As shown in FIG. 1, the Web content update system includes a Web server 10 and a registrant client device 20, which are connected to each other via the Internet 30.

  The Web server 10 has a function of accepting a file for updating the Web content of the registrant by e-mail and registering the Web content file after authenticating the registrant through the Web content file. A server-side mail transmission / reception unit 11, an authentication DB (database) 12, a Web content registration unit 13, a Web content DB (database) 14, and a Web distribution unit 15. Of course, one or more Web servers 10 may be used.

  The server-side mail transmission / reception unit 11 has a function of transmitting / receiving e-mail to / from the registrant client apparatus 20 using e-mail exchange software running on the Web server 10. When the server-side mail transmission / reception unit 11 transmits / receives an electronic mail, the encryption key 101 of the Web server 10 and the decryption key 202 of the registrant are used.

  The authentication DB 12 is a database on the Web server 10 and stores information necessary for authentication. Information necessary for authentication includes Web content registrant information, registrant's e-mail address, and the like. In the authentication DB 12, a file path of the Web content for updating the Web content after authentication is registered.

  The Web content registration unit 13 uses Web content registration software running on the Web server 10 to authenticate the electronic mail received via the server-side mail transmission / reception unit 11 based on the information in the authentication DB 12 and the Web content DB 14. It has a function of performing access to a web content file using a file path.

  The web content DB 14 is a content database on the web server 10. The Web content DB 14 stores a Web content entity file. This file can be viewed and updated only by users who have the respective rights.

  The Web distribution unit 15 has a function of distributing content on the Web content DB 14 to the Internet 30 using Web distribution software running on the Web server 10.

  The registrant client device 20 is a device used by a registrant of Web content. As the registrant client device 20, a terminal having a communication function such as a personal computer, a mobile phone, or a PDA can be used.

  The registrant client device 20 includes a client-side mail transmission / reception unit 21 and a Web browsing unit 22.

  The client-side mail transmission / reception unit 21 has a function of performing transmission / reception of electronic mail using mail software running on the registrant client device 20. When e-mail is transmitted / received by the client-side mail transmitting / receiving unit 21, the registrant's encryption key 201 and the decryption key 102 of the Web server 10 are used.

  The Web browsing unit 22 has a function of browsing Web content distributed by the Web distribution unit 15 using a Web browser.

  Note that the encryption key 101 and decryption key 102 on the Web server 10 side described above and the encryption key 201 and decryption key 202 on the registrant side make a pair, and are registered with the Web server 10 in a secure manner in advance. It is assumed that it is installed in the client client device 20 and is not known to a third party. The encryption key 201 on the registrant side is effective when performing entity authentication of electronic mail from the registrant client device 20.

Next, a Web content update method will be described.
First, as shown in FIG. 2, the web server 10 identifies the registrant of the web content, the e-mail address of the registrant, and the file path that can be updated by the registrant, and the identified information is authenticated. Registered in the DB 12 (step S1).

  Next, the client-side mail transmission / reception unit 21 of the registrant client apparatus 20 encrypts the Web content file to be registered with the registrant's encryption key 201 using the mail address of the server-side mail transmission / reception unit 11 of the Web server 10. And transmitted (step S2).

    When the server-side mail transmission / reception unit 11 receives the Web content file, the Web content file is decrypted with the decryption key 202 of the registrant, and the decrypted Web content file is passed to the Web content registration unit 13 ( Step S3). Here, the Web content file is decrypted with the decryption key 202 of the registrant, whereby the entity authentication of the electronic mail from the registrant client device 20 is performed.

  Then, the registrant through the received Web content file is authenticated by the Web content registration unit 13 by using the registrant information and the update right on the authentication DB 12 (step S4). If there is, the web content file is registered in the web content DB 14 using the file path in the authentication DB 12 (step S5).

  On the other hand, if the registrant information for the Web content file does not match or there is no update right as a result of authentication, registration in the Web content DB 14 is not performed (step S6).

  Thereafter, when the web content registration unit 13 sends a notification indicating whether or not registration is possible to the client side mail transmission / reception unit 21 by being encrypted with the encryption key 101 of the web server 10 (step S7). The registration permission / inhibition notification is decrypted by the client-side mail transmission / reception unit 21 using the decryption key 102 of the Web server 10 (step S8). Thereby, the registrant can confirm the notification of registration availability received by the client side mail transmitting / receiving unit 21.

  Next, the web content of the registrant registered in the web content DB 14 is published on the Internet 30 by the web distribution unit 15 (step S9). In addition, the content registered in the Web content DB 14 can be viewed through the Internet 30 by the Web browsing unit 22.

  As described above, in the present embodiment, when a file of a Web content to be registered for updating is transmitted from the registrant client device 20 to the Web server 10 via the Internet 30 by e-mail, the Web server 10 When the web content file is registered after the web content file is received by e-mail and the registrant through the web content file is authenticated, the web content is updated. The sender of the e-mail can be reliably identified.

  In this embodiment, since the sender of the e-mail can be surely specified, writing due to mischief or misoperation, DoS attack (in this case, SPAM mail to the inquiry mail address is applicable), etc. Coping can be easily performed.

  Further, in this embodiment, by combining authentication with an e-mail, an encryption key, a decryption key, and a database, a registrant of Web content registered in advance can be identified without involving the procedure of logging in and transferring a file. Since the Web content is updated only by sending the style e-mail to the e-mail address of the Web server, the registration and management of the Web content file can be easily performed with few procedures.

  Further, in this embodiment, when exchanging electronic mail between the Web server 10 and the registrant client device 20, the encryption key 101 and the decryption key 102 on the Web server 10 side, which are keys that make a pair, respectively. Since the registrant side encryption key 201 and decryption key 202 are used, the entity authentication of the e-mail can be reliably performed.

  In this embodiment, since it is not necessary to construct a login environment for file transfer in the Web server 10, it is possible to maintain the security level of the Web server 10.

  In the present embodiment, when the web content is updated, the web server 10 notifies the registrant client device 20 of the registration availability by e-mail, so that the web content update can be quickly confirmed. Can do.

  In the present embodiment, the case where the entity authentication of the e-mail mail is performed using the encryption key and the decryption key is described. However, the present invention is not limited to this, and the electronic certificate may be used.

  The present invention can be applied to the construction of a web site constructed by a plurality of web content creators.

It is a figure for demonstrating the outline | summary of the update system of the web content which concerns on the update method of the web content of this invention. 3 is a flowchart for explaining a Web content update method by the Web content update system of FIG. 1.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Web server 11 Server side mail transmission / reception part 13 Web content registration part 15 Web delivery part 20 Registrant client apparatus 21 Client side mail transmission / reception part 22 Web browsing part 30 Internet 101,201 Encryption key 102,202 Decryption key

Claims (6)

A step of receiving a file for updating the Web content of the registrant by an e-mail by the Web server and registering the Web content file after the registrant is authenticated via the Web content file;
A method of updating a Web content, comprising: a step of transmitting a file of the Web content to be registered by a registrant client device connected to the Web server via the Internet. The web server
A step of transmitting / receiving the e-mail to / from the registrant client device by a server-side mail transmitting / receiving unit operating on the Web server;
Registering registrant information and registrant e-mail address necessary for authentication of the registrant and a file path of the web content necessary for updating the web content in an authentication database;
A step of storing the Web content entity file in a Web content database;
Authentication based on information in the authentication database for the electronic mail received via the server-side mail transmission / reception unit by the Web content registration unit, and the file path to the file of the Web content in the Web content database Using the access process, and
A step of distributing the Web content in the Web content database to the Internet by a Web distribution unit;
The registrant client device is
A step of sending and receiving the e-mail by a client side mail sending and receiving unit;
The Web content update method according to claim 1, further comprising: browsing the Web content distributed by the Web distribution unit by a Web browsing unit. The Web server has an encryption key and a decryption key on the Web server side,
The registrant client device has an encryption key and a decryption key on the registrant side that are paired with an encryption key and a decryption key on the Web server side, respectively.
3. The Web content according to claim 1, wherein when the electronic mail is transmitted / received, an encryption key and a decryption key on the Web server side and an encryption key and a decryption key on the registrant side are used. Update method. A Web server having a function of accepting a file for updating the Web content of a registrant by e-mail and registering the Web content file after authenticating the registrant via the Web content file;
A Web content update system comprising: a registrant client device connected to the Web server via the Internet and having a function of transmitting the Web content file to be registered. The web server
A server-side mail transmission / reception unit operating on the Web server and having a function of transmitting / receiving the electronic mail to / from the registrant client device;
An authentication database in which registrant information and registrant e-mail address necessary for authentication of the registrant and a file path of the web content necessary for updating the web content are registered;
A Web content database in which files of the Web content are stored;
Authentication based on information in the authentication database for the electronic mail received via the server-side mail transmission / reception unit, and access using the file path to the web content file in the web content database A web content registration unit having a function to perform;
A web delivery unit having a function of delivering the web content in the web content database to the internet;
The registrant client device is
A client-side mail transmission / reception unit having a function of transmitting / receiving the electronic mail;
The Web content update system according to claim 4, further comprising: a Web browsing unit that browses the Web content distributed by the Web distribution unit. The Web server has an encryption key and a decryption key on the Web server side,
The registrant client device has an encryption key and a decryption key on the registrant side that are paired with an encryption key and a decryption key on the Web server side, respectively.
6. The Web content according to claim 4 or 5, wherein when the electronic mail is transmitted / received, an encryption key and a decryption key on the Web server side and an encryption key and a decryption key on the registrant side are used. Update system.

Images