JP3740038B2 - Public content provision system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
  The present invention makes it possible to cope with content tampering when publishing content via the Internet.PublicOpen content provision systemToRelated.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, with the development of communication technologies such as the Internet, a public content providing system (WWW: World Wide Web) capable of publishing various information (contents) on a global scale has been constructed. According to this public content providing system, various contents can be obtained through the Internet using a terminal device such as a personal computer. These various contents can be viewed through, for example, a web page (homepage) composed of text data and image data, and any person who has a terminal device having a function of connecting to the Internet can obtain the desired contents. Is available.
[0003]
[Problems to be solved by the invention]
By the way, with the spread of terminal devices and the spread of computer technology in recent years, a so-called cracker who has entered a public content server (web server) in a public content providing system and falsified content has appeared, and this has a negative effect. It is a problem. This problem becomes particularly serious when, for example, an official document provided by a public organization such as a government office is tampered with, resulting in a decline in the credibility of information or loss of prestige. Recently, some people have been falsified against public order and morals, making the problem even more serious.
[0004]
Therefore, conventionally, measures to prevent unauthorized tampering have been taken, such as providing a barrier to prevent such intrusion by a cracker. However, there are not a few crackers with advanced technical skills related to computers, and they break through various barriers established on the server operator side and enter the server to illegally tamper with data. There have been many reports of cases.
[0005]
  The present invention has been made in view of such problems, and its purpose is to effectively prevent harmful effects caused by unauthorized tampering of web pages.PublicOpen content provision systemTheIt is to provide.
[0006]
[Means for Solving the Problems]
  Public content of the present inventionProvision systemStores content and publishes content in response to requests made over the InternetAnd monitor whether the content has been tampered withPublic content serverAnd a network connection device that connects the content server to the Internet, and power control that disconnects the public content server from the Internet by interrupting the power supply to the network connection device when an unauthorized content tampering is detected by the public content server And a device.
[0007]
  Public content of the present inventionProvision systemThenWhether or not the content is illegally altered by the public content server is monitored, and when the illegal content alteration is detected by the public content server, the power supply to the network connection device is interrupted by the power supply control device. The public content server is disconnected from the Internet.
[0030]
BookPublished content of inventionProvision systemThenPublic content serverUnauthorized content alteration may be detected by monitoring at least one of a change in update date / time, a change in size, or a change in the number of files constituting the content. Especially if the content consists of multiple pages,Public content serverIt is preferable to monitor a change in the number of files constituting the content for each page.
[0038]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0039]
[First Embodiment]
<Configuration of public content provision system>
  First, the configuration of the public content providing system according to the first embodiment of the present invention will be described with reference to FIG. 1 and FIG. FIG. 1 illustrates a schematic configuration of the public content providing system 1, and FIG. 2 illustrates an example of a content file F1 (A) and file management data D (B) managed in the public content providing system 1. is there.
[0040]
The public content providing system 1 according to the present embodiment mainly publishes content (web page) to users through the Internet 40 and appropriately copes with content tampering. As shown in FIG. 1, the public content providing system 1 includes a web server 10 that publishes content (for example, a homepage) to users via the Internet 40, a router 20 that connects the web server 10 to the Internet 40, And a power supply control device 30 that controls power supply to the router 20. The user can obtain the content by accessing the public content providing system 1 through the Internet 40 using, for example, a general-purpose personal computer 50 (hereinafter simply referred to as “PC”) having a communication function. . The content is viewed by the user through a monitor 51 connected to the personal computer 50. Here, the web server 10 corresponds to a specific example of “public content server” in the present invention.
[0041]
<Web server configuration>
The web server 10 is a database server that mainly stores and manages content, and includes a server controller 11 that controls the entire server, a storage device 12 that stores a content file F1 that constitutes content, and a server controller 11. And a communication interface (I / F) 13 for connecting the router 20 and the router 20.
[0042]
The storage device 12 is configured by a storage device such as a hard disk device, for example. The content file F1 stored in the storage device 12 is composed of a plurality of data files DF (for example, abc.html) that constitute the content. These data files DF are, for example, each page of the homepage (for example, P1 to P1). P4 page). Each data file DF is composed of information such as file name, data, size, update date and time, type (file format), and the like. Also, information indicating the number of files included in each page is added.
[0043]
  The server controller 11 includes, for example, a CPU (Central Processing Unit) and the like, and has a program R1 for operating itself and foul management data D for use in collating the content file F1. . The file management data D is a collation ledger file for determining whether or not the content file F1 has been tampered with illegally, and the file name, size, and update of the data file DF included in the content file F1 The date and time, the number of files, and the total number of files (for example, 38) are included. The file management data D is updated every time the content file F1 is properly updated by the server administrator who manages the web server 10, for example..
[0044]
When the server controller 11 is accessed by the user through the personal computer 50 in order to obtain the content, the server controller 11 reads the content file F1 corresponding to the content from the storage device 12 and opens the content to the user.
[0045]
  Further, the server controller 11 has a function of monitoring whether or not the content file F1 has been tampered with by checking the content of the content file F1 periodically with the content of the file management data D. Specifically, for example, the server controller 11 collates the update date and time of each data file DF included in the file management data D with the update date and time of each data file DF included in the content file F1, When a data file DF (for example, mnp.gif) whose update date / time does not match is detected, it is determined that the content file F1 has been falsified. Further, when the server controller 11 detects a tampering action, the server controller 11 outputs a stop signal N1 to the power supply control device 30 and interrupts the supply of power from the power supply control device 30 to the router 20, thereby causing the web server 10. Is also disconnected from the Internet 40 and has a function of controlling the browsing of the altered content. The server controller 11 interrupts the monitoring function and the stop control function described above when, for example, the content of the content is updated by a server administrator or the like..
[0046]
<Router configuration>
The router 20 includes a packet processing unit 21 for performing a predetermined process on the data packet sent to the web server 10. The packet processing unit 21 mainly extracts a URL (Uniform Resource Locaters) address representing an access destination from the header part to the transmitted data packet, and the URL address is for the web server 10. Passes the data packet, otherwise it discards (or ignores) the data packet.
[0047]
<Configuration of power supply control device>
The power supply control device 30 controls power supply to the router 20. The power supply controller 31 that controls the entire device, the switch unit 32 for switching the power supply state to the router 20, and the power supply control device 30 are commercially available. It includes a plug 33 for connecting to a power outlet. Normally, the switch unit 32 is connected, and the power supplied from the commercial power outlet through the plug 33 is supplied to the router 20 via the power control device 30.
[0048]
When the stop signal N1 is output from the web server 10, the power controller 31 has a function of cutting off the switch unit 32 according to the stop signal N1 and interrupting the power supply to the router 20. Note that power is supplied to the power supply controller 31 via the plug 33 regardless of the state (connected or disconnected) of the switch unit 32.
[0049]
<Operation of public content providing system>
Next, the operation of the public content providing system 1 will be described with reference to FIGS. FIG. 3 is a flowchart for explaining the operation of the public content providing system 1.
[0050]
In the public content providing system 1, when a data packet including a URL address corresponding to the web server 10 is input to the web server 10 through the router 20, the server controller 11 reads the content file F 1 from the storage device 12. Publish content to users.
[0051]
In addition, the server controller 11 is supplied with power from the power supply control device 30 to the router 20, and an update signal that is input when the content is updated in a state where the content can be disclosed to the user from the web server 10 through the Internet 40. The server administrator periodically checks whether or not regular content update processing is being performed (step S101). When the regular update process is in progress (step S101Y), the content update process confirmation operation (step S101) is continued. On the other hand, when the regular update process is not in progress (step S101N), the update date / time of each data file DF included in the file management data D, the update date / time of each data file DF included in the content file F1, and Are collated (step S102). Here, if the update date and time of each data file DF match (step S103Y), it is determined that the content file F1 has not been tampered with, and the process returns to the content update processing confirmation operation (step S101). On the other hand, when a data file DF (for example, mnp.gif) whose update date / time does not match is detected (step S103N), it is determined that the content file F1 has been falsified (step S104). When the falsification of the content file F1 is detected, a stop signal N1 is output to the power controller 31 of the power controller 30. Receiving this stop signal N1, the power supply controller 31 interrupts the supply of power to the router 20 by disconnecting the switch unit 32. As a result, the web server 10 is disconnected from the Internet 40, and browsing of the altered content is stopped (step S105).
[0052]
<Operation and Effect of First Embodiment>
As described above, in the public content providing system 1 according to the present embodiment, the web server 10 (server controller 11) monitors the falsification of the content file F1 by checking the file management data D and the content file F1. Then, when the tampering action is detected, the power supply control device 30 is used to control the operation of the router 20, so that the web server 10 can be disconnected from the Internet 40. Thereby, browsing of the altered content can be stopped immediately. As a result, for example, even if a third party has altered the content against public order and morals, the altered content will not be visible to the user. Thereby, information provider's information credibility and prestige can be secured.
[0053]
In the present embodiment, since the above effect can be obtained by attaching the power control device 30 to the existing web server 10 and the router 20, the existing router 20 can be used to simplify and reduce the cost. The public content providing system 1 can be configured.
[0054]
<Modification of the first embodiment>
<< Modification 1 >>
In the present embodiment, when the tampering action is detected, the update date and time of the data file DF included in the content file F1 is collated. However, the present invention is not necessarily limited to this. Thus, the file name, size, number of files, type, and the like of the data file DF may be collated, or a combination of any two or more of these items may be collated. When collating the number of files, the total number of files may be collated, or the number of files for each page may be collated in order to examine the content file F1 in more detail. In the latter case, the reliability regarding the detection of tampering is increased. Even in such a case, the same effect as in the case of the above-described embodiment can be obtained. However, in order to ensure the reliability regarding the detection of the tampering action, it is preferable to check at least the update date and time. This is because if the size and the number of files of the data file DF are collated, the size and the number of files of the data file DF coincide with each other before and after the falsification, and the falsification may be missed. On the other hand, in the case of the update date and time, the falsification action is not missed.
[0055]
<< Modification 2 >>
In the present embodiment, the public content providing system 1 is configured to include the power supply control device 30 that controls the power supply to the router 20, but the present invention is not necessarily limited to this. For example, as shown in FIG. As described above, the public content providing system 101 may be configured to include the router 60 having the same function as the power supply control device 30. In this case, the router 60 includes the packet processing unit 61, the power supply controller 62, the switch unit 63, and the plug 64. These packet processing unit 61, power supply controller 62, switch unit 63, and plug 64 have the same functions as the packet processing unit 21, power supply controller 31, switch unit 32, and plug 33 in the above embodiment, for example. .
[0056]
In the public content providing system 101, when the server controller 11 detects the tampering action of the content, the power supply to the packet processing unit 61 is performed according to the stop signal N <b> 2 output from the server controller 11 to the power supply controller 62. Interrupted, the web server 10 is disconnected from the Internet 40. For this reason, as in the case of the above-described embodiment, browsing of the altered content can be immediately stopped. In particular, unlike the case of the above embodiment (see FIG. 1), a connection line or the like for connecting the router 20 and the power supply control device 30 is not necessary, and the configuration of the public content providing system 101 is further simplified. Can be
[0057]
<< Modification 3 >>
In the present embodiment, when a falsification of content is detected, the web server 10 is disconnected from the Internet 40 using a hardware forcible process of interrupting the power supply to the router 20. It is not limited. For example, as shown in FIG. 5, the public content providing system 201 may be configured to include a router 70 having a general configuration including a packet processing unit 71 and a logical switch 72 by software. In this public content providing system 201, when a falsification of content is detected, the packet processing unit 71 switches the logical switch 72 in response to the stop signal N3 output from the server controller 11 using the original function of the router 70. By disconnecting (that is, not allowing all data packets to pass), the web server 10 is disconnected from the Internet 40. Since the browsing stop of the altered content can be realized only by the software (logical switch 72), the configuration of the public content providing system 201 can be further simplified in this case.
[0058]
<< Modification 4 >>
In the present embodiment, the server controller 11 of the web server 10 executes the monitoring function and the stop control function. However, the present invention is not necessarily limited to this, and the monitoring function and the stop function are exemplified as follows. The execution body of the control function can be freely changed.
[0059]
  For example, as shown in FIG. 6, the public content providing system 301 is configured to include a router 80 including a packet processing unit 81, a logical switch 82, and a falsification monitoring unit 83 made of, for example, a CPU. The monitoring unit 83 may execute a monitoring function and a stop control function. The falsification monitoring unit 83 executes a monitoring function and a stop control function based on the built-in program R2, and disconnects the web server 10 from the Internet 40 by disconnecting the logical switch 82 when detecting a falsification action of the content. In this case, unlike the above-described embodiment in which the server controller 11 executes the monitoring function and the stop control function, the falsification monitoring unit 83 executes the monitoring function and the stop control function. The processing burden can be reduced.
[0060]
<< Modification 5 >>
  Further, for example, as shown in FIG. 7, the web server 10 includes an unauthorized access monitoring unit 91 that prevents unauthorized access by a third party, a logical switch 92, and a falsification monitoring unit 93. The public content providing system 401 may be configured to include a firewall 90 including a computer or the like, and the falsification monitoring unit 93 may execute a monitoring function and a stop control function. For example, when an access request to the web server 10 is made, the unauthorized access prevention unit 91 determines whether or not the access request is unauthorized based on the address of the access source (whether it is by a person who has a legitimate access right). And authorize only legitimate access requests. The falsification monitoring unit 93 executes the monitoring function and the stop control function based on the built-in program R3, and when the falsification action of the content is detected, the web server 10 is disconnected from the Internet 40 by disconnecting the logical switch 92. Since the monitoring function and the stop control function are executed by the falsification monitoring unit 93 instead of the server controller 11, the processing load on the server controller 11 can be reduced even in this case..
[0061]
<< Modification 6 >>
Further, for example, as shown in FIG. 8, it includes a mail server 100 that manages mail transmitted and received by the user through the personal computer 50 and a switcher 110 that switches the connection destination of the Internet 40 to the web server 10 or the mail server 100. In addition, the public content providing system 501 is configured such that the switcher 110 includes a logical switch 111 for switching a connection line with the Internet 40 and a falsification monitoring unit 112, and is monitored by the falsification monitoring unit 112. The function and the stop control function may be executed. In addition to the mail server 100, the switcher 110 may be connected to one or more other servers such as a DNS (Domain Name System) server in which information related to addresses is stored.
[0062]
  For example, the logical switch 111 allows the web server 10 to be connected to the personal computer 50 in a normal state, and enables the mail server 100 to be connected to the personal computer 50 when the user accesses the mail server 100 through the personal computer 50. Switch to. The tampering monitoring unit 112 executes a monitoring function and a stop control function based on the built-in program R4. When the tampering action of the content is detected in a state where the web server 10 and the personal computer 50 are connected, the logic switch 111 The server 10 is disconnected from the Internet 40. Note that when the web server 10 is disconnected from the Internet 40 when a tampering action is detected, the mail server 100 or another server may be connected to the Internet 40. Since the monitoring function and the stop control function are executed by the falsification monitoring unit 112 instead of the server controller 11, the processing load on the server controller 11 can be reduced even in this case..
[0063]
In addition, about a series of modifications which concern on the structure of the public content provision systems 101-501 shown in FIGS. 4-8, structures other than each above-mentioned characteristic part are the same as that of the case of the said embodiment, for example. When the web server 10 is disconnected from the Internet 40, the modification 2 uses hardware processing (physical connection switching by the switch unit) as in the above-described embodiment, and the modifications 3 to 6 use software processing. (Logical connection switching by a logic switch) is used.
[0064]
[Second Embodiment]
Next, a second embodiment of the present invention will be described.
[0065]
  First, the configuration of a public content providing system according to the second embodiment of the present invention will be described with reference to FIG. FIG. 9 shows a schematic configuration of the public content providing system 2 and corresponds to FIG. 1 described in the above embodiment. This public content providing system 2 differs from the first embodiment in which the web server 10 is disconnected from the Internet 40 when a content tampering action is detected, and a connection line between the web server 10 and the Internet 40 is provided. The reserved content is made to be viewed by the user in place of the falsified content while being secured..
[0066]
The web server 10 of the public content providing system 2 physically stores the spare content file F2 together with the content file F1 in one storage device 12. This spare content file F2 is prepared in preparation for the occurrence of tampering, and is composed of, for example, a landscape image. The read address of the storage device 12 by the server controller 11 is designated by the browsing pointer. The browsing point designates the content file F1 in normal times, and designates the spare content file C2 instead of the content file F1 in an emergency (when tampering occurs). The configuration of the public content providing system 2 other than the above-described characteristic portions is the same as that of the first embodiment (see FIG. 1), for example.
[0067]
In this public content providing system 2, the controller 11 of the web server 10 normally reads the content file F1 designated by the browsing pointer from the storage device 12, and publishes the content to the user. At this time, as in the case of the first embodiment, the server controller 11 monitors whether or not the content has been tampered with illegally. If the content tampering action is detected, the server controller 11 replaces the tampered content file F1. The spare content file F2 is read out, and the spare content is used for browsing by the user.
[0068]
In the public content providing system 2 according to the present embodiment, the spare content file F2 is stored in the storage device 12 together with the content file F1, and when a tampering action is detected, the content file F1 is switched to the spare content file. Therefore, browsing of the altered content is stopped, and instead, spare content such as a landscape image is used for browsing by the user. Accordingly, the content is not displayed at all when the falsification occurs, so that the content can be disclosed without making the user uncomfortable.
[0069]
In the present embodiment, when content tampering is detected, all of the content is switched to spare content. However, the present invention is not necessarily limited to this. For example, only the altered page in the content file F1 may be switched to the spare content file F2. In this case, since the user can view the pages other than the tampered page, the influence on the user when the tampering occurs can be minimized.
[0070]
In the present embodiment, both the content file F1 and the spare content F2 are physically stored in one storage device (storage device 12). However, the present invention is not limited to this. For example, as shown in FIG. 10, instead of the storage device 12, a storage device 600 including a RAID (Redundant Array of Independent Disks) including a plurality of hard disk drives (HDDs) 600 </ b> A and 600 </ b> B is used as a web server. 10, the content file F1 may be stored in the HDD 200A, and the spare content file F2 may be stored in the HDD 200B. In this case, the content file F1 and the spare content file F2 are read from physically different HDDs 200A and 200B, respectively, so that the switching from the content file F1 to the spare content file F2 can be performed reliably. .
[0071]
In this embodiment, the case where the preliminary content file F2 is composed of a landscape image has been described. However, the present invention is not necessarily limited to this. Alternatively, it may be a combination of a landscape image and a message image.
[0072]
The other configuration, function, operation, effect, and the like of the public content providing system 2 of the present embodiment are the same as those of the first embodiment.
[0073]
The present invention has been described with reference to some embodiments. However, the present invention is not limited to those described in the above embodiments, and various modifications can be made. In other words, the configuration, operation, function, and the like of each component constituting the public content providing system are not necessarily limited to those described in the above embodiment, and the content alteration activity is monitored and the alteration activity is detected. The content can be freely changed as long as it is possible to ensure the information credibility and prestige of the content provider by performing control to stop browsing the altered content.
[0074]
【The invention's effect】
  As described above, claims 1 to3The public content described in any one ofProvision systemAccording toPublic content serverUnjustly contentFalsificationMonitor whether or notBy its public content serverWhen unauthorized alteration of content is detected,The power supply controller disconnects the public content server from the Internet by interrupting the power supply to the network connection device.As a result, the public content server is disconnected from the Internet when tampering occurs, and browsing of the tampered content is immediately stopped. Therefore, since the altered content is not visible to the user, the information provider's information credibility and prestige can be secured.
[0076]
  Claims2Public content listedProvision systemAccording toPublic content serverBy monitoring at least one of changes in the update date / time, size change, or number change of the files that make up the content, it is possible to detect inappropriate content alterations. For example, monitor at least changes in the file update date / time. By doing so, the possibility of overlooking the tampering action is reduced, and the reliability regarding the detection of the tampering action can be ensured.
[0077]
  Claims3Public content listedProvision systemAccording toPublic content serverSince the change in the number of files constituting the content is monitored for each page, the reliability regarding the detection of the tampering action can be further increased.
[Brief description of the drawings]
FIG. 1 is a diagram showing a schematic configuration of a public content providing system according to a first embodiment of the present invention.
FIG. 2 is a diagram for explaining content files and file management data;
FIG. 3 is a flowchart for explaining the operation of the public content providing system according to the first embodiment of the present invention.
FIG. 4 is a diagram illustrating a modified example related to the configuration of the public content providing system according to the first embodiment of the present invention.
FIG. 5 is a diagram illustrating another modification example regarding the configuration of the public content providing system according to the first embodiment of the present invention.
FIG. 6 is a diagram showing still another modification example regarding the configuration of the public content providing system according to the first embodiment of the present invention.
FIG. 7 is a diagram showing still another modification example regarding the configuration of the public content providing system according to the first embodiment of the present invention.
FIG. 8 is a diagram showing still another modification example regarding the configuration of the public content providing system according to the first embodiment of the present invention.
FIG. 9 is a diagram showing a schematic configuration of a public content providing system according to a second embodiment of the present invention.
FIG. 10 is a diagram illustrating a modification example regarding the configuration of the public content providing system according to the second embodiment of the present invention.
[Explanation of symbols]
1, 2, 101, 102, 201, 301, 401, 501 ... public content providing system, 10 ... web server, 11 ... server controller, 12, 600 ... storage device, 13 ... communication I / F, 20, 60, 70 , 80 ... router, 30 ... power supply control device, 31 and 62 ... power supply controller, 32 and 62 ... switch unit, 33 and 64 ... plug, 40 ... internet, 50 ... personal computer, 51 ... monitor, 21, 61, 71, 81 ... packet processing unit, 72, 82, 92, 111 ... logical switch, 83, 93, 112 ... falsification monitoring unit, 90 ... firewall, 91 ... unauthorized access monitoring unit, 100 ... mail server, 110 ... switcher, 600A, 600B ... HDD, D ... file management data, DF ... data file, F1 ... content file, F2 ... spare Content file, N1, N2, N3 ... stop signal, R1, R2, R3, R4 ... program.

Claims (3)

A public content server that accumulates content and publishes the content in response to a request made via the Internet, and monitors whether the content has been tampered with;
A network connection device for connecting the public content server to the Internet;
And a power supply control device that disconnects the public content server from the Internet by interrupting power supply to the network connection device when unauthorized disclosure of the content is detected by the public content server. Content provision system. The public content server detects at least one of a change in update date, a change in size, or a change in the number of files constituting the content, thereby detecting an unauthorized content alteration.
The public content providing system according to claim 1. The content consists of a plurality of pages,
The public content server monitors a change in the number of files constituting the content for each page.
The public content providing system according to claim 2.

Images