JP4675924B2 - Web page authenticity confirmation device, web page authenticity confirmation method and program - Google Patents

Description

  The present invention relates to a web page authenticity confirmation apparatus, a web page authenticity confirmation method, and a program, and more particularly to a web page authenticity confirmation apparatus, a web page authenticity confirmation method, and a program that use information embedded in an image with a digital watermark.

In an electronic payment system that displays a web page distributed by a web server on a terminal and purchases goods or pays for it, bank payments and card payments of goods are performed by sending account numbers, card numbers, etc. to the web server However, there is a crime that illegally obtains and misuses account numbers, card numbers, etc., using a technique called phishing that disguises these settlement procedures. This technique called phishing is, for example, in a web page provided by a malicious web server administrator, a web page user who mistakes a web page provided by a legitimate administrator inputs an account number, a card number, etc. It is done by procedures such as sending. In order to prevent leakage of personal information such as account numbers and card numbers by these procedures (preventing phishing), a program that authenticates the legitimacy of the page on the user's terminal etc. and a browser plug-in, etc. For example, a system described in the following non-patent literature has been devised.
Further, as an authentication method, a method in which information is embedded in a web page provided from a web server with a digital watermark, and a program such as a terminal and a browser authenticate using the embedded information can be considered.
“SecureBrain PhishWall”, SecureBrain Corporation, “online”, “March 7, 2007 search”, Internet <URL: http://www.securebrain.co.jp/products/phishwall/index.html>

  However, in the method of performing the determination using the digital watermark, when the data amount of the image data of the web page is large, such as a large number of images included in the web page or a large image, Since the detection process of the digital watermark is performed on all the image data, the load of the detection process is increased, and the web page is displayed after the detection process. Therefore, there is a problem that it takes time to complete the display of the web page. . For example, if a digital watermark requires 1 second for detection processing for 1 megabyte image data, a web page including three 1 megabyte images requires 3 seconds for the digital watermark detection processing. Display completion is delayed by 3 seconds required for detection.

  The present invention has been made in view of such circumstances, and the purpose thereof is a web page authenticity confirmation device that suppresses the time required for digital watermark detection processing for a web page having a large amount of image data, The object is to provide a web page authenticity confirmation method and program.

The present invention has been made to solve the above-described problems, and a web page authenticity confirmation device according to the present invention includes digital watermark information generation means for generating digital watermark information including at least identification information of a designated digital watermark. A transmission instruction detection process for detecting that a character string has been input into the character input field of the received web page and that transmission of the character string has been instructed; and when the transmission instruction detection process detects a transmission instruction, the reception When calculating the hash value of the image included in the web page and determining whether there is a value that matches the hash value in the hash value list, the web page is determined from the web page said received electronic watermark identification information included in the digital watermark information embedded in the image of the hash value Send a web page authenticity determination request information including at least identification information to the web page authenticity checking apparatus destined, and authenticity determination request processing of receiving authenticity determination result is returned to this transmission, the receiving When the true / false determination result is true, the transmission is instructed when it is determined that there is no matching value in the character string transmission process for transmitting the character string instructed for transmission and the digital watermark presence / absence determination process. It is determined whether there is a character string that matches the specified character string in the pre-stored important character string, and if there is a matching character string, the user selects whether to defer transmission of the character string and authenticity determination request information transmission program transmitting means for transmitting a reserving process for the authenticity determination request information transmission program to be executed by at least the terminal computer to the terminal, the said electronic watermark identification information U A true / false determination table storage means for storing a true / false determination table indicating a normal correspondence relationship with the identification information of the page, the digital watermark identification information included in the web page authenticity determination request information received from the terminal, and the It is determined whether or not the correspondence relationship with the identification information of the web page is recorded in the authenticity determination table. As a result, when it is determined that the correspondence relationship is recorded, the web page is true. The authenticity determination result indicating that the web page is false is transmitted to the terminal when it is determined that the correspondence relationship is not recorded. Authenticity determination means.
Further, the web page authenticity confirmation device of the present invention is the above-described web page authenticity confirmation device, wherein the character string transmission processing is instructed to transmit when the received authenticity determination result is true. A character string is transmitted, and the character string is stored as the important character string

  A web page authenticity confirmation device according to the present invention is the above-described web page authenticity confirmation device, which calculates a hash value of a specified image and generates a hash value list including the hash value. In addition to the processing, the authenticity determination request information transmission program includes a generation unit, and receives the hash value list from the web page authenticity confirmation device and stores the hash value list in the storage unit of the terminal. A terminal computer is used.

  Further, the web page authenticity confirmation device of the present invention is any one of the above-described web page authenticity confirmation devices, and each means included in the web page authenticity confirmation device is connected via a communication network. The web page authenticity determination request information is provided by one or a plurality of servers, and is transmitted to the server having the authenticity determination means.

The web page authenticity confirmation method of the present invention is a web page authenticity confirmation method in a web page authenticity confirmation device, wherein the web page authenticity confirmation device includes at least identification information of a designated digital watermark. A first process of generating digital watermark information, and transmission in which the web page authenticity confirmation device detects that a character string has been input to the character input field of the received web page and the transmission of the character string has been instructed When the instruction detection process and the transmission instruction detection process detect a transmission instruction, a hash value of an image included in the received web page is calculated, and whether or not a value matching the hash value is in the hash value list an electronic watermark existence determination process of determining, electrons when it is determined that there is a matching value contained in the digital watermark information embedded in the image of the hash value However, the web page authenticity determination request information including at least the identification information and the identification information of the web page determined from the received web page is transmitted to the web page authenticity confirmation device, and the reply is sent to the transmission A true / false determination request process for receiving a true / false determination result, a character string transmission process for transmitting the character string instructed to be transmitted when the received true / false determination result is true, and the digital watermark presence / absence determination When it is determined that there is no matching value in the process, it is determined whether or not a character string that matches the character string that is instructed to be transmitted is in an important character string that is stored in advance. the transmitting the authenticity determination request information transmitting program for executing a hold process and to select whether to suspend transmission of the string to the user in at least terminal computer to the terminal if there is And the correspondence relationship between the digital watermark identification information included in the web page authenticity determination request information received from the terminal by the web page authenticity confirmation device and the identification information of the web page is the digital watermark. It is determined whether or not it is recorded in a true / false determination table indicating a normal correspondence between the identification information and the identification information of the web page, and if it is determined that the correspondence is recorded as a result, the web The authenticity determination result indicating that the page is true is transmitted to the terminal, and if it is determined that the correspondence is not recorded, the authenticity determination result indicating that the web page is false And a third process of transmitting to the terminal.

Further, the program of the present invention includes a computer provided in the web page authenticity confirmation device, a digital watermark information generating means for generating digital watermark information including at least identification information of a designated digital watermark, and character input of the received web page A transmission instruction detection process for detecting that a character string is input in the column and the transmission of the character string is instructed; and when the transmission instruction detection process detects a transmission instruction , an image of the image included in the received web page is detected . A digital watermark presence / absence determination process for calculating a hash value and determining whether there is a value that matches the hash value in the hash value list; Electronic watermark identification information included in the embedded digital watermark information and identification information of the web page determined from the received web page Send a web page authenticity determination request information to the web page authenticity checking device destined containing even without the authenticity determination request processing of receiving authenticity determination result is returned to this transmission, the received authenticity When the determination result is true, the character string transmission process for transmitting the character string for which the transmission is instructed and the character for which the transmission is instructed when it is determined that there is no matching value in the digital watermark presence / absence determination process Determining whether or not a character string that matches the string is in an important character string that is stored in advance, and if there is a matching character string, the user selects whether to defer transmission of the character string the authenticity determination request information transmission program to be executed by at least the terminal computer the door, authenticity determination request information transmission program transmitting means for transmitting to the terminal, the web page authenticity determination Yi received from the terminal The correspondence between the digital watermark identification information included in the information and the identification information of the web page is the normal correspondence between the digital watermark identification information stored in the authenticity determination table storage means and the identification information of the web page. It is determined whether or not it is recorded in the authenticity determination table shown, and as a result, when it is determined that the correspondence is recorded, the authenticity determination result indicating that the web page is true When it is determined that the correspondence relationship is not recorded, it is made to function as authenticity determination means for transmitting the authenticity determination result indicating that the web page is false to the terminal.

In the program of the present invention, a computer of a terminal device that receives a web page and inquires of the web page authenticity confirmation device about the authenticity of the web page is input to the character input field of the received web page. A transmission instruction detection unit that detects that the transmission of the character string has been instructed; and when the transmission instruction detection unit detects a transmission instruction, a hash value of an image included in the received web page is calculated, and the hash electronic watermark presence determining unit determines whether the value that matches the value in the hash value list, embedded in the image of the hash value when the electronic watermark existence determination unit determines that there is a value that matches A web including at least the digital watermark identification information included in the digital watermark information and the identification information of the web page determined from the received web page Sends over di authenticity determination request information to the web page authenticity checking device addressed, authenticity judgment request unit for receiving the authenticity determination result is returned to this transmission, the received authenticity determination result is true A character string transmitting unit that transmits the character string instructed to transmit, and a character that matches the character string instructed to transmit if the digital watermark presence / absence determining unit determines that there is no matching value. It is determined whether or not the string is an important character string stored in advance, and if there is a matching character string, it is made to function as a transmission hold unit that allows the user to select whether or not to hold the transmission of the character string .

  According to this invention, the hash value of the image included in the web page is calculated, it is determined whether there is a value that matches the hash value in the hash value list, and if it is determined that there is a matching value, The digital watermark information embedded in the image of the hash value is acquired. In this way, since image data including digital watermark information is specified by calculating a hash value that is significantly smaller than the detection of digital watermark information, even for web pages with a large amount of image data. The time required for the digital watermark detection process can be suppressed.

Hereinafter, a web page authenticity confirmation system according to an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a web page authenticity confirmation system according to the embodiment. In this figure, reference numeral 1 denotes a management server that generates various information and programs used for web page authenticity confirmation and transmits the information to other devices. Reference numeral 2 denotes a true / false determination server that determines the authenticity of a web page based on a request from a terminal. Reference numeral 3 denotes a hash value list distribution server that distributes a hash value list, which is a list of hash values of image data in which digital watermark information is embedded, based on a request from the terminal 6. Reference numeral 4 is a regular web server, and 5 is a fake web server that illegally distributes a copy of the web page distributed by the regular web server 4. Reference numeral 6 denotes a terminal such as a PC, a mobile phone, or a PDA. The management server 1, authenticity determination server 2, hash value list distribution server 3, regular web server 4, fake web server 5, and terminal 6 are connected via a communication network, and the fake web server 5 is excluded. Each server constitutes a web page authenticity confirmation system. Although the management server 1, the authenticity determination server 2, the hash value list distribution server 3, and the regular web server 4 are shown as separate servers, the processing of any of a plurality of servers may be configured on the same server. Good.
The hash value described above is a value calculated by using a predetermined hash function for target image data among MD (Message Digest Algorithm) 4, MD5, SHA (Secure Hash Algorithm) -1, and the like.

FIG. 2 is a diagram showing functional blocks of each server.
In the management server 1 in this figure, reference numeral 11 denotes a communication processing unit that transmits and receives information to and from other servers and the terminal 6. A control unit 12 controls each processing unit of the management server 1. Reference numeral 13 denotes a digital watermark information generation unit that generates digital watermark information embedded in a web page distributed by the regular web server 4. Reference numeral 14 denotes a true / false determination request program distribution unit that distributes a program (hereinafter referred to as a true / false determination request program) for determining the authenticity of a web page received by the terminal 6. Reference numeral 15 denotes creation of a true / false determination table used by the true / false determination server 2 for authenticating a web page, and when the user of the terminal 6 enters a character string in the character input field of the web page, the character string is displayed. It is a management unit that creates an important character string specifying table (important character string specifying information) that is used to specify whether or not it is important, and transmits the generated digital watermark information to the regular web server 4. . Reference numeral 16 denotes a database for storing various information. Reference numeral 17 denotes a hash value to be added to the hash value list of the hash value table stored in the database 16 while calculating the hash value of the image data in which the digital watermark information is embedded and transmitting it to the hash value list distribution server 3. It is a calculation part.

  In the authenticity determination server 2, reference numeral 21 denotes a communication processing unit that transmits and receives information to and from other servers and the terminal 6. Reference numeral 22 denotes a control unit that controls each processing unit of the authenticity determination server 2. Reference numeral 23 denotes a true / false determination processing unit that performs a true / false determination process for the web page. A database 24 stores various information. Reference numeral 25 denotes a warning information notification unit that notifies the terminal 6 of the warning information (or may be notified to the regular web server 4 or the like) when the web page is determined to be false in the web page authenticity determination.

In the hash value list distribution server 3, reference numeral 31 denotes a communication processing unit that transmits / receives information to / from each server and the terminal 6. A control unit 32 controls each processing unit of the hash value list distribution server 3. Reference numeral 33 denotes a hash value list distribution unit that distributes a hash value list in response to a request from the terminal 6. A database unit 34 stores a hash value table storing a hash value list and its update date. A hash value list management unit 35 receives a hash value from the management server 1 and adds it to the hash value list, and updates the update date of the hash value list to the current date.
In the regular web server 4, reference numeral 41 denotes a communication processing unit that transmits information to each server and the terminal 6. A control unit 42 controls each processing unit of the regular web server 4. Reference numeral 43 denotes a web server processing unit that performs processing of the web server. Reference numeral 44 denotes a storage unit.

FIG. 3 is a diagram showing functional blocks of the terminal 6.
In this figure, reference numeral 61 denotes a communication processing unit that transmits / receives information to / from each server. A control unit 62 controls each processing unit in the terminal 6. A web browser processing unit 63 performs web browser processing. In addition, 64 calculates the hash value of the image data included in the received web page, and whether the digital watermark information is embedded based on whether or not the same value as the hash value is in the hash value list stored in the own device It is a digital watermark presence / absence determination unit that determines whether or not. Reference numeral 65 denotes a hash value list acquisition unit that checks the update date of the hash value list when the web browser processing unit 63 is activated, and receives the hash value list from the hash value list distribution server 3 if it has been updated and stores it in the hash value table of the storage unit 69. It is. Reference numeral 66 denotes a true / false determination request process for detecting a transmission instruction of a character string input in the character input field of the received web page and a process for transmitting web page authenticity determination request information to the authenticity determination server 2. Part. Further, 67 is a character string transmission or character string transmission based on the result of whether or not the digital watermark information is embedded in the received web page and the result of the authenticity determination obtained from the authenticity determination server 2. This is a character string transmission availability determination unit that performs processing for displaying a warning for holding or transmitting a character string, and processing for outputting the result of the authenticity determination in a received web page. 68 is a process of recording the important character string specifying table received together with the true / false determination result in the storage unit 69, or an important character string specifying stored in the important character string specifying table on the web page received before transmitting the character string. Processing to determine whether information is embedded or when important character string identification information is embedded in the received web page, the important character string identification information and the characters entered in the character input field of the web page This is an important character string registration unit that performs processing of associating a column with each other and recording it in the storage unit 69. Reference numeral 69 denotes a storage unit for storing various information.

  In the web page authenticity confirmation system, the authorized web server 4 distributes the web page in which the digital watermark information generated by the management server 1 is embedded, and the terminal 6 that receives the distribution of the web page receives the received web page. Whether or not digital watermark information is embedded in the page is automatically determined based on whether or not the hash value of the image data in the web page is in the hash value list. Further, the terminal 6 detects a transmission instruction of a character string input in the character input field of the received web page. The terminal 6 transmits web page authenticity determination request information to the authenticity determination server 2 when digital watermark information is embedded in the received web page. Further, when the watermark information is not embedded in the received web page, the terminal 6 determines whether or not the character string input in the character input field is stored as an important character string, and the character according to the result is determined. Sends a string or puts a string on hold or displays a string transmission warning. The terminal 6 permits transmission of a character string when the authenticity determination result returned in response to the web page authenticity determination request information indicates true. Further, when the authenticity determination result returned in response to the web page authenticity determination request information indicates false, the terminal 6 suspends the transmission of the character string and displays a warning of the transmission of the character string. In the authenticity determination server 2, whether or not the correspondence relationship between the digital watermark identification information included in the web page authenticity determination request information received from the terminal 6 and the web page identification information is recorded in the authenticity determination table. If it is determined that the corresponding relationship is recorded, a true / false determination result indicating that the web page is true is transmitted to the terminal 6, and it is determined that the corresponding relationship is not recorded. Transmits a true / false determination result indicating that the web page is false to the terminal 6.

  Further, when the watermark information is embedded in the received web page, the terminal 6 prompts the web page authenticity confirmation device before inputting the character string in the character input field, that is, immediately after receiving the web page. Web page authenticity determination request information is transmitted. Then, the terminal 6 outputs the authenticity determination result returned in accordance with the authenticity determination request information on a screen such as a web page that has received it.

  Further, the terminal 6 receives the information of the important character string specifying table together with the authenticity determination result, and records the information in the storage unit 69. Then, before transmitting the character string input in the character input field of the web page, it is determined whether or not the important character string specifying information stored in the important character string specifying table is embedded in the web page. When the important character string specifying information is embedded in the received web page, the terminal 6 associates the important character string specifying information with the character string input in the character input field of the web page in the storage unit 69. Record.

  The hash value list acquisition unit 65 of the terminal 6 confirms the update date of the hash value list with the hash value list distribution server 3 at the time of activation, and is updated after the update date of the hash value list stored in the storage unit 69. The hash value list transmitted from the hash value list distribution server 3 and the update date of the hash value list are received and recorded in the hash value table of the storage unit 69. Details of the hash value list acquisition process will be described in detail with reference to FIG.

Next, details of processing of the web page authenticity confirmation system will be described.
FIG. 4 is a conceptual diagram showing the flow of registration setting processing of the web page authenticity confirmation system.
First, the administrator of the authorized web server 4 opens a character input field for inputting an important character string that should not be leaked to the outside (for example, a field for inputting a character string such as a password, ID, account number, or credit card number). When the prepared web page is created, the management server 1 is accessed using the authorized web server 4 (or any server) to perform registration processing of the web page in the authenticity confirmation system, and the digital watermark information Direct the request. At this time, a request for requesting digital watermark information is transmitted from the regular web server 4 to the management server 1 (step S101). When the digital watermark information generation unit 13 of the management server 1 accepts a request for digital watermark information via the communication processing unit 11, the digital watermark information generation unit 13 issues a digital watermark ID, and the digital watermark ID, the expiration date of the digital watermark, Digital watermark information including the URL of the fake determination server 2 is generated (step S102).

  Next, the digital watermark information generation unit 13 of the management server 1 accepts, for example, information on a web page that stores digital watermark information from the regular web server 4 and applies digital watermark to at least one of the image data of the web page. The process of embedding information is performed, and the hash value calculation unit 17 calculates the hash value of the image data in which the digital watermark information is embedded (step S103), and the web page data in which the digital watermark information is embedded is sent to the regular web server 4. A reply is made (step S104). The management unit 15 of the management server 1 adds the hash value calculated in step S103 to the hash value list stored in the database 16 and transmits the added hash value to the hash value list distribution server 3 (S105). ). In response to this, the hash value list management unit 35 of the hash value list distribution server 3 adds the received hash value to the hash value list.

Alternatively, in the process of step S104, the digital watermark information generation unit 13 transmits the digital watermark information to the regular web server 4, and performs processing for embedding the digital watermark information in the target web page in the regular web server 4, and the embedded image. A hash value of data may be calculated, and the hash value may be transmitted to the hash value list distribution server 3 via the management server 1 or directly. Also in this case, the hash value list management unit 35 of the hash value list distribution server 3 receives this and adds the received hash value to the hash value list.
Alternatively, in the process of step S105, the management unit 15 updates the hash value list stored in the database 16 by adding the hash value calculated in step S103, and updates the updated hash value list to the hash value list distribution server. 3 may be transmitted. In this case, the hash value list management unit 35 receives this hash value list and records it in the database 34.
As a result, the digital watermark information is embedded in at least one of the web pages distributed by the regular web server 4, and the hash value of the image data in which the digital watermark information is embedded is added to the hash value list.

The digital watermark information embedded in the web page may be information in which the digital watermark ID, the expiration date of the digital watermark, and the URL of the authenticity determination server 2 are encrypted. Further, the management server 1 may generate other information such as a QR code instead of the digital watermark information, and embed the information in a web page. The management server 1 records the digital watermark ID included in the digital watermark information and the digital watermark expiration date in the server issue table of the database 16 in association with each other. The digital watermark information is generated for each target web page for which a request is made.
Further, the management unit 15 of the management server 1 adds and updates the hash value to the hash value list, and records the date (update date) when the hash value list is updated in the database 16.

  When the web page in which the digital watermark information is embedded is transmitted to the regular web server 4, the management unit 15 of the management server 1 next executes a check program for performing web page authenticity determination previously recorded in the database 16 or the like. It is read and transmitted from the regular web server 4 to the specified authenticity determination server 2 (step S106). If the check program has already been transmitted to the authenticity determination server 2, this process is omitted. The authenticity determination server 2 may be a server designated by the administrator of the regular web server 4 or a predetermined server. Then, the management unit 15 includes a digital watermark ID, a URL of a web page in which the digital watermark information is embedded, and a validity period of the digital watermark included in the digital watermark information transmitted to the regular web server 4. Is transmitted to the authenticity determination server 2 (step S107).

  In addition, after the transmission of the web page in which the digital watermark information is embedded, the management unit 15 associates the digital watermark ID and the digital watermark expiration date recorded in the server issue table, The ID of the check program to be used, the expiration date of the check program, the URL of the web page in which the digital watermark information is embedded, and the URL of the authenticity determination server that is the destination of the check program are recorded in association with each other. The authenticity determination server 2 writes the digital watermark ID, the web page URL, and the digital watermark expiration date received from the management server 1 in association with the authenticity determination table stored in the database 24. When there are a plurality of web pages in which digital watermark information is embedded, a plurality of correspondence relationships of the digital watermark ID, the web page URL, and the digital watermark expiration date are recorded in the authenticity determination table.

  The management server 1 also includes a digital watermark ID for identifying the digital watermark information, identification information of the web page in which the digital watermark information is embedded (information on the correspondence between the URL of the web page and the web page name), An important character string specifying table in which identification information of the character input field in the web page (information on the correspondence between the field ID of the character input field and the input field name) is recorded is recorded in the database 16. This important character string specifying table is registered in the management server 1 in accordance with an instruction from the administrator of the regular web server 4. In the subsequent processing, it is determined at the terminal 6 whether the character string input to the character string input field of the web page received by the terminal 6 is an important character string from the identification information of the web page and the identification information of the character input field. If it is an important character string, registration of the character string input in the character input field to the terminal 6 is processed. The important character string specifying table is transmitted from the management server 1 to the authenticity determination server 2 (step S108) and registered in the database 24 of the authenticity determination server 2. With the above processing, the setting of the web page authenticity confirmation system on the server side is completed.

FIG. 5 is a diagram illustrating information recorded in the server issue table.
As shown in the figure, the server issue table held in the database 16 is used by the digital watermark ID embedded in the web page distributed by the regular web server 4, the digital watermark expiration date, and the authenticity determination server 2. The check program ID, the expiration date of the check program, the URL of the web page in which the digital watermark information is embedded, and the URL of the authenticity determination server that is the transmission destination of the check program are recorded in association with each web page. The

  FIG. 6 shows a hash value table stored in the database 16 of the management server 1, the database 34 of the hash value list distribution server 3, and the storage unit 69 of the terminal 6. As shown in FIG. 6, the hash value table records the update date of the hash value list and a hash value list that is a list of hash values of the image data in which the digital watermark is embedded. The hash value table stored in the storage unit 69 of the terminal 6 stores the last date when the terminal 6 confirmed the update date of the hash value table with the hash value list distribution server 3 as the hash value list confirmation date. The

FIG. 7 is a diagram showing information recorded in the important character string specifying table.
As shown in FIG. 7, in the management server 1, a digital watermark ID for specifying the digital watermark information and identification information of the web page in which the digital watermark information is embedded (information on the correspondence between the URL of the web page and the web page name). And an important character string specifying table in which the identification information of the character input column in the web page (information on the correspondence between the field ID of the character input column and the input column name) is associated with each web page. ing. In addition, a character input field for inputting one or a plurality of important character strings can be set in one web page, and depending on the web page, a web page having a character input field for inputting an important character string, and the character Some web pages do not have an input field. The information registered in the important character string specifying table is a combination of the identification information of the web page for the web page having the character input field for inputting the important character string and the identification information of the character input field in the web page. Information of this important character string specifying table is transmitted to the authenticity determination server 2 and stored in the database 24 of the authenticity determination server 2. The web page name is information on a character string that can identify a web page transmitted by the regular web server 4 such as “top page”. Further, the field ID of the character input field is a tag ID for identifying the character input field in the description of the markup language when the web page is described in a markup language such as HTML, for example. . The input field name is, for example, a character string for specifying the character input field in the description of the markup language.

  While the management server 1, the authenticity determination server 2, the hash value list distribution server 3, and the regular web server 4 perform the processing from step S101 to step S108, on the terminal 6 side, the user operates the terminal 6 to operate the terminal 6 accesses the management server 1 and notifies the download request of the authenticity determination request program (step S109). When the management server 1 receives this notification, the authenticity determination request program distribution unit 14 reads the authenticity determination request program from the database 16 and distributes it to the terminal 6 (step S110). Here, the authenticity determination request program is executed in the terminal 6, whereby the electronic watermark presence / absence determination unit 64, the hash value list acquisition unit 65, the authenticity determination request processing unit 66, and the character string transmission permission / inhibition in the terminal 6. Each processing function of the determination part 67 and the important character string registration part 68 is comprised.

  When the authenticity determination request program is executed by the user's operation on the terminal 6, the program first determines whether the authenticity determination request program is already installed (step S111). Next, if the confirmation date of the hash value list recorded in the storage unit 69 is not the current date, the hash value list acquisition unit 65 of the terminal 6 transmits the update date of the hash value list to the hash value list distribution server 3. (Step S112), the hash value list distribution unit 33 of the hash value list distribution server 3 that has received the request compares it with the update date of the hash value list stored in the database 34. The stored hash value list and its update date are distributed to the terminal 6 (S113). Receiving this, the hash value list acquisition unit 65 records the received hash value list and its update date in the storage unit 69 and changes the confirmation date to the current date.

  Then, the authenticity determination request processing unit 66 then performs a process of constantly monitoring the web page reception process in the web browser processing unit 63 (step S114). Here, in the authenticity determination request program, information on the ID and expiration date of the program is stored, and such information is also recorded in the database 16 of the management server 1 as a setting file (terminal issue table). The authenticity determination request program may be a program in a format such as a plug-in installed in a web browser, or may be a format such as a program resident in the computer of the terminal 6. With the above processing, the setting of the web page authenticity confirmation system on the terminal side is completed.

FIG. 8 is a diagram showing information recorded in the terminal issue table.
As shown in FIG. 8, the management unit 15 of the management server 1 associates the ID of the authenticity determination request program, the validity period of the authenticity determination request program, and the IP address of the transmission destination terminal in the terminal issue table. Store and register in database 16.

FIG. 9 is a conceptual diagram showing the flow of web page authenticity determination processing.
FIG. 10 is a diagram showing a processing flow for checking the authenticity of a terminal when reading a web page.
FIG. 11 is a diagram showing a process of confirming authenticity of a terminal at the time of transmitting a character string.
Next, web page authenticity determination processing will be described with reference to FIGS.
First, the authenticity determination request program is executed in the terminal 6, and the electronic watermark presence / absence determination unit 64, the hash value list acquisition unit 65, the authenticity determination request processing unit 66, the character string transmission availability determination unit 67, the important character string registration unit 68, each function part of the memory | storage part 69 shall be comprised. In such a situation, it is assumed from FIG. 9 that the web browser processing unit 63 transmits a web page distribution request to the regular web server 4 or the fake web server 5 when the user operates the terminal 6. Then, the web server processing unit 43 of the regular web server 4 or the fake web server 5 distributes the web page designated by the terminal 6 to the terminal 6 (step S201). In the terminal 6, the web browser processing unit 63 displays the web page distributed from the regular web server 4 or the fake web server 5 on the display unit.

  Here, the digital watermark presence / absence determination unit 64 of the terminal 6 reads the received web page from the web browser processing unit 63, calculates the hash value of the image data of the web page, and the hash value that matches the hash value is hashed. It is determined whether or not digital watermark information is embedded based on whether or not it is in the value list (step S202). Then, if the digital watermark information is embedded, the authenticity determination request processing unit 66 notifies the user of the start of authenticity determination by displaying “authenticating authenticity” or the like on the display unit of the terminal 6, and the web page It is determined whether or not the digital watermark information embedded in is digital watermark information. If the digital watermark information is encrypted, the digital watermark information is decrypted. Next, it is determined whether or not it is within the expiration date from the digital watermark information. If it is within the expiration date, web page authenticity determination request information is generated (step S203). The authenticity determination request processing unit 66 may encrypt the web page authenticity determination request information.

  The web page authenticity determination request information includes the IP address of the terminal 6, the authenticity determination request program ID and expiration date, the authenticity determination server URL, the ID and expiration date of the digital watermark information embedded in the web page, the web page And the creation date and time information of the web page authenticity determination request information are stored. Such information is read from digital watermark information, a web page, or a setting file held in the storage unit 69. When the web page authenticity determination request information is generated, the authenticity determination request processing unit 66 sends the web page authenticity determination request information to the authenticity determination server URL held in the web page authenticity determination request information. Is transmitted (step S204), and a first authenticity determination request is made.

  In the authenticity determination server 2, when the web page authenticity determination request information is received, the authenticity determination processing unit 23 decrypts the web page authenticity determination request information if encrypted, and the web page The ID and validity period of the authenticity determination request program stored in the authenticity determination request information, the ID of the digital watermark information, the URL of the web page in which the digital watermark information is embedded, and the expiration date of the digital watermark are read. Further, the authenticity determination processing unit 23 reads the Web page URL and electronic watermark expiration date recorded in the authenticity determination table in association with the ID of the electronic watermark information read from the Web page authenticity determination request information. Then, it is determined whether or not the ID system (such as the number of ID characters) of the authenticity determination request program ID is correct, whether or not the validity period of the authenticity determination request program has passed, and the ID system of the digital watermark ID is Correspondence relationship between the electronic watermark ID read from the web page authenticity determination request information and the URL of the web page in which the electronic watermark is embedded, whether or not it is correct, whether or not the expiration date of the electronic watermark has passed Web page authenticity is determined by determining whether or not is recorded in the authenticity determination table (step S205).

  In each determination, the authenticity determination processing unit 23 determines whether the ID system of each ID of the authenticity determination request program and the electronic watermark is correct, and the correspondence between the electronic watermark ID and the web page URL is within the validity period. If it is recorded in the table, it is determined that the web page with the web page URL stored in the web page authenticity determination request information is a true web page provided from the authorized web server 4. Also, the authenticity determination processing unit 23 stores the correspondence between the electronic watermark ID and the web page URL in the authenticity determination table when the ID system of each ID of the authenticity determination request program and the electronic watermark is not correct or within the expiration date. When any of the cases such as the case of not being recorded is determined, it is determined that the web page of the web page URL stored in the web page authenticity determination request information is false. If it is determined that the web page is false, the warning information notification unit 25 stores information indicating that a false page has been detected in the database 24 of the authenticity determination server 2. Information indicating that a fake page has been detected may be transmitted to the management server 1.

Next, the authenticity determination processing unit 23 creates authenticity result data when the authenticity determination of the web page is completed (step S206). This true / false result data includes at least the determined web page URL and information indicating whether the web page of the URL is true or false. The authenticity determination processing unit 23 reads the important character string specifying table (FIG. 7) from the database 24.
Then, the authenticity determination processing unit 23 transmits authenticity result data to the terminal 6 (step S207), and transmits an important character string specifying table to the terminal 6 (step S208). At this time, the authenticity determination processing unit 23 may encrypt and transmit the authenticity result data and the information of the important character string specifying table.

In the terminal 6, when the authenticity result data and the information of the important character string specifying table are received, the important character string registration unit 68 stores the important character string specifying table in the storage unit 69 (step S209). The information in the important character string specifying table may be registered after being encrypted.
In addition, the character string transmission availability determination unit 67 decrypts the authenticity determination result data if it is encrypted, and reads “true” and “false” information of the web page included in the authenticity result data. Then, when the true / false determination result is “true”, the character string transmission availability determination unit 67 displays the result on a screen such as a web page (for example, a toolbar) and proceeds to the next processing. Determine. On the other hand, if the true / false determination result is “false”, the fact that the true / false determination result is “false” is output on the received web page screen (for example, a toolbar) (step S210). According to the above processing, when the terminal 6 makes a first authenticity determination request to the authenticity determination server 2 and the result of the authenticity determination received by the terminal 6 is “false”, The true / false determination result “false” is displayed on the web page received by the terminal 6. Accordingly, since the user of the terminal 6 can recognize that the web page is false before inputting characters on the web page, the user inputs the act of inputting characters into the character input field in the web page. Can be deterred before. Therefore, for example, when a terminal receives a web page that stores spyware, or when spyware is running on the terminal, the user can be prevented from inadvertently entering important characters. The risk of character leakage can be reduced, thereby improving the security of the terminal.

  FIG. 10 is a processing flow for explaining the operation of the terminal 6 in S202 described above, that is, the operation of the terminal when reading a web page. First, when the web browser processing unit 63 reads web data, the digital watermark presence / absence determination unit 64 reads image data in the web data (S401). Next, the digital watermark presence / absence determining unit 64 calculates a hash value of the image data read in step S401, and whether or not a value that matches the calculated hash value is in the hash value list recorded in the storage unit 69. Is determined (S402). If it is determined in step S402 that there is no match, if there is other image data whose hash value has not been calculated in the web data, the process returns to step S401, and if there is no image data, the process is terminated (S403). If it is determined in step S402 that there is a match, it is assumed that there is a digital watermark, and the processing from step S203 described above is performed.

As described above, the digital watermark presence / absence determination unit 64 of the terminal 6 calculates whether or not the digital watermark is embedded in the image data in the web page, calculates the hash value of these image data, and hash these hash values. Since the determination can be made by comparing with the value list, the amount of calculation can be suppressed and the time to display the web page can be shortened as compared with the case of directly detecting the digital watermark of each image data. Note that it takes approximately 10 ² to 10 ³ times longer to detect a digital watermark than to calculate a hash value for image data having the same data amount.

  Next, after receiving the authenticity result data corresponding to the first authenticity determination request from FIG. 11, the authenticity determination request processing unit 66 waits for the input of the character string in the character input field (step S301). In the received web page, it is detected whether or not a transmission instruction for the character string input in the character input field has been input (step S302). When the transmission instruction of the character string is detected, the authenticity determination request processing unit 66 notifies the user of the start of authenticity determination by displaying “authenticating authenticity” or the like on the display unit of the terminal 6, and again hashes the image data. A value is calculated, and it is determined whether or not the same value as the calculated hash value is in the hash value list recorded in the storage unit 69 (step S303). Next, when it is determined that the same value as the hash value calculated in step S303 is in the hash value list, it is determined whether or not the expiration date is within the expiration date from the digital watermark information acquired from the image data of the hash value. If it is, the web page authenticity determination request information is generated (step S304). The authenticity determination request processing unit 66 may encrypt the web page authenticity determination request information. When the web page authenticity determination request information is generated, the authenticity determination request processing unit 66 transmits the web page authenticity determination request information to the authenticity determination server URL held in the web page authenticity determination request information. (Step S305), a second authenticity determination request is made.

  In the authenticity determination server 2, when the web page authenticity determination request information is received, the authenticity determination processing unit 23 decrypts the web page authenticity determination request information if encrypted, and the web page The ID and validity period of the authenticity determination request program stored in the authenticity determination request information, the ID of the digital watermark information, the URL of the web page in which the digital watermark information is embedded, and the expiration date of the digital watermark are read. Further, the authenticity determination processing unit 23 reads the Web page URL and electronic watermark expiration date recorded in the authenticity determination table in association with the ID of the electronic watermark information read from the Web page authenticity determination request information. Then, it is determined whether or not the ID system (such as the number of ID characters) of the authenticity determination request program ID is correct, whether or not the validity period of the authenticity determination request program has passed, and the ID system of the digital watermark ID is Correspondence relationship between the electronic watermark ID read from the web page authenticity determination request information and the URL of the web page in which the electronic watermark is embedded, whether or not it is correct, whether or not the expiration date of the electronic watermark has passed Is recorded in the true / false determination table.

  In each determination, the authenticity determination processing unit 23 determines whether the ID system of each ID of the authenticity determination request program and the electronic watermark is correct, and the correspondence between the electronic watermark ID and the web page URL is within the validity period. If it is recorded in the table, it is determined that the web page with the web page URL stored in the web page authenticity determination request information is a true web page provided from the authorized web server 4. Also, the authenticity determination processing unit 23 stores the correspondence between the electronic watermark ID and the web page URL in the authenticity determination table when the ID system of each ID of the authenticity determination request program and the electronic watermark is not correct or within the expiration date. When any of the cases such as the case of not being recorded is determined, it is determined that the web page of the web page URL stored in the web page authenticity determination request information is false. When it is determined that the web page is false, the warning information notification unit 25 uses a predetermined mail address or IP address to notify a predetermined server that a false page has been detected. May be. Next, the authenticity determination processing unit 23 generates authenticity result data when the authenticity determination of the web page is completed. Then, the authenticity determination processing unit 23 transmits authenticity result data to the terminal 6. At this time, the authenticity determination processing unit 23 may encrypt and transmit information of the authenticity result data. Note that the processing in the authenticity determination server 2 is the same as the processing in steps S203 to S207 described above.

    Next, in the terminal 6, when the authenticity determination result data is received by the character string transmission permission determination unit 67, if the information is encrypted, the information is decrypted and stored in the truth result data Is read to determine whether it is “true” or “false” (step S306). If the true / false result data is “true”, it is determined whether or not an important character string registration process, which will be described later, is performed (step S307). The character string input in the input field is registered in the storage unit 69 (step S308), and the web browser processing unit 63 is notified to cancel the suspension of the character string transmission and continue the character string transmission process (step S308). Step S309). And the web browser process part 63 transmits the character string input into the web page to the regular web server 4 via a communication network. If the truth / false result data is “false” in step S306, the transmission of the character string input in the character input field is suspended and a warning message for the transmission of the character string is displayed (step S310). For example, in the processing of step S310, (1) hold and display a warning, or (2) display a warning and select whether or not to hold, and if hold is selected, hold and select not to hold If so, send the string.

  As another embodiment, for example, since the authenticity result data includes at least the determined web page URL and whether the web page of the URL is true or false, the above-described step S203 is performed. After step S208, if the terminal 6 holds the true / false result data in a memory or the like, it is already executed by the URL of the web page stored in the web page true / false determination request information generated in step S304. The true / false result data of the passed true / false judgment can be specified. In other words, without sending the web page authenticity determination request information to the authenticity determination server 2 in step S305, the authenticity result data corresponding to the web page authenticity determination request information generated in step S304 is stored in the terminal 6 inside the terminal 6. In step S306, whether or not the true / false result data is “true” or “false” is read from the cache memory 6 or the like and stored in the true / false result data. You may make it perform the process of.

  Here, the determination as to whether or not to perform the important character string registration process in step S307 described above is performed first by the important character string registration unit 68 of the terminal 6 inputting the web page URL and all the characters in which the character strings are input. The field ID of the column is read from the received web page. An important character string in which information on the correspondence between the web page URL and one field ID (when there are a plurality of field IDs read from one web page, the correspondence is plural) is already stored in the storage unit 69. It is determined whether or not it is registered in the specific table (important character string specific table stored in step S209). If the correspondence (important character string specifying information) between the web page URL and the field ID of the character input field in which the character string is input is registered in the important character string specifying table, the process of step S308, That is, the character string input in the character input field is registered in the important character string storage table of the storage unit 69. If the correspondence (important character string specifying information) between the web page URL and the field ID of the character input field in which the character string is input is not registered in the important character string specifying table, the process of step S309, That is, a process of notifying the web browser processing unit 63 to cancel the suspension of the transmission of the character string and continue the transmission process of the character string is performed.

  Here, the administrator of the regular web server 4 creates a web page, embeds digital watermark information in the web page, and the character string input in the character input field of the web page is an important character string (for example, a user The URL and web page name of the web page, the field ID of the character input column and the input column name, and the digital watermark ID of the digital watermark information embedded in the web page, It is registered in the management server 1 as an important character string specifying table. Then, this important character string specifying table is transmitted from the management server 1 to the terminal 6 via the authenticity determination server 2 and registered in the terminal 6 in step S209. Therefore, when the character string input to the web page displayed on the terminal 6 is identified as the important character string in step S307 described above and registered in the process of step S308, it is the administrator of the authorized web server 4 This means that all the character strings input in the character input field of the web page designated by the above are stored in the terminal 6. That is, according to the processing of the above-described steps S307 to S308, the character string input to the character input field of the web page designated by the administrator of the regular web server 4 and important from the viewpoint of security is obtained. Registration can be made by the intention of the administrator of the authorized web server 4 without the operation of the user using the terminal 6. As a result, the work of registering the important character string by the user can be reduced, and since there is no need to inform the user of the terminal 6 what the important character string is, the user does not know what the important character string is. , Leakage of information about important character strings can be reduced.

  If it is determined in step S303 that there is no match between the hash value of the image data and the value of the hash value list, the character string transmission availability determination unit 67 stores the character string input in the character input field as the storage unit 69. Whether or not it is stored in the important character string storage table (step S311). If the character string is not stored, the suspension of the transmission of the character string is canceled and the character string transmission process is continued. The web browser processing unit 63 is notified (step S312). If it is determined in step S311 that the character string input in the character input field is stored in the storage unit 69, the transmission of the character string is suspended or a warning message for the transmission of the character string is displayed (step S311). S313). For example, in the process of step S313, as in step S310, (1) hold and display a warning, or (2) display a warning and select whether or not to hold, and if hold is selected, hold If it is selected not to hold, a character string is transmitted.

  In the warning display in the process of step S313, for example, the character string transmission availability determination unit 67 reads the web page name of the web page and tries to transmit an important character string on the screen of “Warning!“ Web page name ””. You may make it display on a screen information, such as. In determining whether or not the character string in step S311 is stored in the storage unit 69, it is determined whether or not the character string is stored in the storage unit 69 by registering the character string in step S308. In other words, if the digital watermark information is not embedded in the web page, if the character string entered in the character input field of the web page is not an important character string, the transmission process is performed as it is. The hold and warning are done. As a result, unnecessary character string transmission suspension and warning processing can be reduced.

  In addition, since the processing of steps S302 to S310 described above confirms the authenticity of the web page distributed from the web server according to the authenticity result of the authenticity determination server 2, and transmits the character information on the communication network, the terminal 6 The distribution of the character string important for security registered in the communication network to the communication network can be stopped when the web page is not a regular web page and is an important character string. Accordingly, it is possible to prevent leakage of important character strings (personal information such as IDs, passwords, credit card numbers, mail addresses, and other important information) input to the character input field of the fake web page. In this embodiment, the authenticity determination is performed based on whether or not the correspondence between the digital watermark ID and the URL of the web page is recorded in the authenticity determination table, but the web page URL is used instead of the web page URL. The IP address of the page may be used.

  In addition, according to the above-described mechanism, when the web page authenticity determination between the website and the terminal is implemented, if a different web page authenticity determination method is implemented for each website, the terminal Although a mechanism corresponding to the web page must be incorporated, the authenticity determination server 2 is added to perform the authenticity determination of the web page among the three parties so that the web pages distributed by a plurality of websites can be the same authentication mechanism. The authenticity can be determined with.

  FIG. 12 is a diagram showing a processing flow for acquiring a hash value list when the browser of the terminal 6 is activated. When the terminal 6 accepts an operation for starting a browser for browsing a web page, the hash value list acquisition unit 65 detects this and reads the hash value list confirmation date from the hash value table in the storage unit 69. The current date is compared (S501). If the date of confirmation and the date of the current date are the same in step S501, the hash value list acquisition unit 65 ends the process and proceeds to the browser activation process. On the other hand, if the confirmation date and the current date are different in step S501, the hash value list acquisition unit 65 acquires the hash value list update date from the hash value table of the storage unit 69, and the hash value list distribution server 3 (S502).

  The hash value list distribution unit 33 of the hash value list distribution server 3 receives this hash value list update date and compares it with the hash value list update date of the hash value table recorded in the database 34 (S503). If the two update dates are the same as a result of the comparison in step S503, the hash value list distribution unit 33 notifies the terminal 6 that the hash value list has not been updated (S505). The hash value list acquisition unit 65 of the terminal 6 that has received this notification updates the hash value list confirmation date of the hash value table stored in the storage unit 69 to the current date (S506), and the hash value list acquisition unit 65 End the process and start the browser. On the other hand, if the two update dates are different as a result of the comparison in step S503, the hash value list distribution unit 33 reads the hash value list and the hash value list update date from the hash value table of the database 34, and sends them to the terminal 6. Send. The hash value list acquisition unit 65 of the terminal 6 that has received this notification updates the hash value list and hash value list update date of the hash value table stored in the storage unit 69 to the received one (S504). The hash value list confirmation date is updated to the current date (S506), and the hash value list acquisition unit 65 ends the process and starts the browser activation process.

In this way, the terminal 6 checks whether the hash value list stored in its own device is the latest when the browser is activated, and obtains it from the hash value list distribution server 3 if it is not the latest. Therefore, the latest hash value list can be acquired each time the program is started. Thus, even when a new authorized web server 4 is newly added, an existing terminal is registered by registering the hash value of the image data in which the digital watermark information of the new authorized web server 4 is embedded in the hash value list. 6 can also correspond to the new regular web server 4.
In the present embodiment, the hash value list acquisition process of FIG. 12 has been described as being performed when the browser is started. However, the acquisition process may be performed periodically, or the browser acquires a web page. Thus, this acquisition process may be performed each time image data embedded with a digital watermark is detected.

  Previously, there was only a phishing site determination, but the web page was made public according to the result of the web page authenticity determination and whether or not a digital watermark was embedded in the web page. There is no product that controls the monitoring and transmission of the character string entered in the character entry field of the web page by judging the risk level of the website and the importance of the information to be transmitted. Therefore, even if the user recognizes the danger level of the website that publishes the web page, the user cannot make an accurate judgment and makes an incorrect judgment, and inadvertently sends important information to the dangerous website. It was. The present invention is a technique for solving these problems, displays whether or not a received web page is transmitted from a phishing site, and is important in a character input field designated by an authorized web server administrator. A method of recognizing a character string and controlling its transmission is used. This prevents erroneous self-determination by the user and prevents information leakage.

  Each of the above servers and terminals has a computer system inside. The process described above is stored in a computer-readable recording medium in the form of a program, and the above process is performed by the computer reading and executing this program. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

The program may be for realizing a part of the functions described above.
Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  Although described in detail with reference to the drawings, the specific configuration is not limited to this embodiment, and includes a design and the like within a scope not departing from the gist of the present invention.

  The present invention is suitable for use in a web page authenticity confirmation system for a web system via a communication network such as the Internet, but is not limited thereto.

It is a block diagram which shows the structure of the web page authenticity confirmation system in one Embodiment of this invention. It is a figure which shows the functional block of each server in the embodiment. It is a figure which shows the functional block of the terminal in the embodiment. It is a conceptual diagram which shows the flow of a registration setting process in the embodiment. It is a figure which shows the information recorded on the server issue table in the same embodiment. It is a figure which shows the information recorded on the hash value table in the embodiment. It is a figure which shows the information recorded on the important character string specific table in the embodiment. It is a figure which shows the information recorded on the terminal issue table in the same embodiment. It is a conceptual diagram which shows the flow of the process of web page authenticity determination in the embodiment. It is a figure which shows the processing flow of step S202 of the terminal 6 in the web page authenticity confirmation system in the embodiment. It is a figure which shows the processing flow of the terminal 6 in the web page authenticity confirmation system in the embodiment. It is a figure which shows the processing flow of the hash value list acquisition at the time of the browser starting of the terminal 6 in the embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Management server 2 ... True / false determination server 3 ... Hash value list distribution server 4 ... Regular web server 5 ... Fake web server 6 ... Terminal 11, 21, 31, 41, 61 ... Communication processing part 12, 22, 32, 42 , 62 ... control unit 13 ... digital watermark information generation unit 14 ... authenticity determination request program distribution unit 15 ... management unit 16 ... database 17 ... hash value calculation unit 23 ... authenticity determination processing unit 24 ... database 33 ... hash value list distribution Unit 34 ... Database 35 ... Hash value list management unit 43 ... Web server processing unit 44 ... Storage unit 63 ... Web browser processing unit 64 ... Digital watermark presence / absence determination unit 65 ... Hash value list acquisition unit 66 ... Authenticity determination request processing unit 67 ... Character string transmission availability determination unit 68 ... Important character string registration unit 69 ... Storage unit

Claims (6)

Digital watermark information generating means for generating digital watermark information including at least identification information of the designated digital watermark;
When a character string is input to the character input field of the received web page and transmission of the character string is instructed, a transmission instruction detection process detects the transmission instruction, and the transmission instruction detection process detects the transmission instruction . When the hash value of the image included in the web page is calculated, and it is determined that there is a digital watermark presence / absence determination process that determines whether or not the hash value list includes a value that matches the hash value, the web pages authenticity determination request information including at least identification information of the web page is determined from the web page said received electronic watermark identification information included in the digital watermark information embedded in the image of the hash value send the web page authenticity checking apparatus destined, and authenticity determination request processing of receiving authenticity determination result is returned to this transmission, authenticity determination that the received When the result is true, the character string transmission process for transmitting the character string for which the transmission is instructed and the character string for which the transmission is instructed when it is determined that there is no matching value in the digital watermark presence / absence determination process A holding process that determines whether or not a character string that matches the key string is stored in a pre-stored important character string, and if there is a matching character string, the user selects whether or not to hold the transmission of the character string. Authentication determination request information transmission program that causes at least the computer of the terminal to execute the authenticity determination request information transmission program transmission means for transmitting to the terminal,
A true / false determination table storage means for storing a true / false determination table indicating a normal correspondence between the digital watermark identification information and the identification information of the web page;
Determining whether the correspondence between the digital watermark identification information included in the web page authenticity determination request information received from the terminal and the web page identification information is recorded in the authenticity determination table; As a result, when it is determined that the correspondence is recorded, the authenticity determination result indicating that the web page is true is transmitted to the terminal, and it is determined that the correspondence is not recorded. Includes authenticity determination means for transmitting the authenticity determination result indicating that the web page is false to the terminal;
An apparatus for confirming authenticity of a web page, comprising: The character string transmission process transmits a character string instructed to be transmitted when the received authenticity determination result is true, and stores the character string as the important character string. The web page authenticity confirmation apparatus according to 1. A hash value list generating means for calculating a hash value of the designated image and generating a hash value list including the hash value;
In addition to the above processing, the authenticity determination request information transmission program causes the computer of the terminal to receive the hash value list from the web page authenticity confirmation device and store the hash value list in the storage unit of the terminal. The web page authenticity confirmation device according to claim 1 or 2 , wherein A web page authenticity confirmation method in a web page authenticity confirmation device,
A first step in which the web page authenticity confirmation device generates digital watermark information including at least identification information of a designated digital watermark;
The web page authenticity confirmation device transmits a transmission instruction detection process for detecting that a character string has been input to the character input field of the received web page and the transmission of the character string has been instructed, and the transmission instruction detection process is transmitted. Upon detection of the instruction to calculate a hash value of an image included in a web page that the received value that matches the hash value and determining the electronic watermark existence determination processing whether the hash value list, consistent When it is determined that there is a value, at least the watermark identification information included in the watermark information embedded in the image of the hash value and the identification information of the web page determined from the received web page are included. send a web page authenticity determination request information to the web page authenticity checking device destined to receive the authenticity determination result is returned to this transmission authenticity determination Lai and processing, when the received authenticity determination result is true when it is determined that the transmission is a string transmission process of transmitting the character string is instructed, for matching values in the digital watermark existence determination processing Determines whether there is a character string that matches the character string instructed to be transmitted in a pre-stored important character string, and if there is a matching character string, whether transmission of the character string is suspended A second step of transmitting to the terminal a truth determination request information transmission program that causes at least the computer of the terminal to execute a hold process that allows the user to select whether or not
The web page authenticity confirmation device has a correspondence relationship between the electronic watermark identification information included in the web page authenticity determination request information received from the terminal and the identification information of the web page. It is determined whether or not it is recorded in a true / false determination table indicating a normal correspondence relationship with the identification information of the web page. As a result, if it is determined that the correspondence relationship is recorded, the web page is true. The authenticity determination result indicating that the web page is false is transmitted to the terminal when it is determined that the correspondence relationship is not recorded. A third process to
A method for confirming authenticity of a web page, comprising: A computer provided with a web page authenticity confirmation device,
Digital watermark information generating means for generating digital watermark information including at least identification information of a specified digital watermark;
When a character string is input to the character input field of the received web page and transmission of the character string is instructed, a transmission instruction detection process detects the transmission instruction, and the transmission instruction detection process detects the transmission instruction . When the hash value of the image included in the web page is calculated, and it is determined that there is a digital watermark presence / absence determination process that determines whether or not the hash value list includes a value that matches the hash value, the web pages authenticity determination request information including at least identification information of the web page is determined from the web page said received electronic watermark identification information included in the digital watermark information embedded in the image of the hash value send the web page authenticity checking apparatus destined, and authenticity determination request processing of receiving authenticity determination result is returned to this transmission, authenticity determination that the received When the result is true, the character string transmission process for transmitting the character string for which the transmission is instructed and the character string for which the transmission is instructed when it is determined that there is no matching value in the digital watermark presence / absence determination process A holding process that determines whether or not a character string that matches the key string is stored in a pre-stored important character string, and if there is a matching character string, the user selects whether or not to hold the transmission of the character string. Authenticity determination request information transmission program for transmitting to at least the authenticity determination request information transmission program for causing the computer of the terminal to execute,
Correspondence between the digital watermark identification information included in the web page authenticity determination request information received from the terminal and the web page identification information is stored in the authenticity determination table storage unit and the digital watermark identification information It is determined whether or not it is recorded in a true / false determination table indicating a normal correspondence relationship with the identification information of the web page. As a result, if it is determined that the correspondence relationship is recorded, the web page is true. The authenticity determination result indicating that the web page is false is transmitted to the terminal when it is determined that the correspondence is not recorded. Authenticity determination means to transmit,
Program to function as. A terminal computer that receives a web page and inquires of the web page authenticity confirmation device whether the web page is true or false.
A transmission instruction detection unit that detects that a character string is input to the character input field of the received web page and that transmission of the character string is instructed;
When the transmission instruction detection unit detects a transmission instruction, the digital watermark for calculating a hash value of an image included in the received web page and determining whether or not a value matching the hash value is in the hash value list Presence / absence determination unit,
Wherein the web is determined from the web page said received electronic watermark identification information included in the digital watermark information embedded in the image of the hash value when the electronic watermark existence determination unit determines that there is a value that matches Web page authenticity determination request information including at least page identification information is transmitted to the web page authenticity confirmation device, and a true / false determination request unit that receives a true / false determination result returned in response to the transmission ,
When the received authenticity determination result is true, a character string transmitter that transmits the character string instructed to transmit,
When it is determined that there is no matching value in the digital watermark presence / absence determination unit, it is determined whether or not a character string that matches the character string instructed to be transmitted is in an important character string stored in advance, A program that causes a user to select whether or not to suspend transmission of a character string when there is a matching character string, and to function as a transmission suspension unit .

Images