JP6499461B2 - Information processing device - Google Patents

Description

  The present invention relates to a technique for improving the safety of transactions performed via a telecommunication line.

  While the spread of the Internet improves the convenience of social life, there are many cases where users of computers and mobile terminals connected to the network are damaged by malware due to the spread of the Internet. Malware refers to a generic term for malicious malicious programs and malicious malicious codes that perform illegal and harmful operations, such as computer viruses, spyware, and Trojan horses. Countermeasures against such malicious programs are taken by introducing anti-virus software into the computer and updating the regular software and operating system.

  On the other hand, the damage caused by so-called phishing that increases the damage by illegally obtaining the personal information of users by using fake websites and e-mails on the Internet, rather than just harming computers by malicious programs. Yes. For phishing, a malicious third party impersonates a legitimate business operator, sends an e-mail that directs the user to a fake website that pretends to be a legitimate website, and bank account information (account number and password). The purpose is to steal personal information such as credit card information.

  In order to prevent damages caused by such network fraud, the domain name of the link destination accessed by the user is compared with the white list registered in advance (the list where the regular domain name is registered). A fraud prevention device and a program for judging are disclosed (see Patent Document 1). Further, there is disclosed a website determination device and a determination program for storing screen image data of a website as a white list and determining whether the image is a counterfeit site compared with an image of a determination destination website. (See Patent Document 2). In addition, when an e-mail with an embedded URL is received, in order to determine whether or not the guidance is acceptable, at least two secret words that only the user can know are declared. A method is disclosed in which one is added to an e-mail and transmitted to a user, and another secret word declared by the user is displayed on a website to which a URL attached to the e-mail is directed. (See Patent Document 3).

JP 2007-18385 A JP 2009-087226 A JP 2008-310473 A

  However, the reality is that the tricks of fraud using the network have changed and become more sophisticated. For example, even though the user intends to access a legitimate website, there is a technique for rewriting DNS (Domain Name System) settings and leading to a fake website without knowing it. If it gets into this trick, a bona fide user will be financially damaged by a fictitious claim, refund of deposit, and fraudulent remittance.

  FIG. 10 shows an example in which an unauthorized program enters the terminal device of the user X and unauthorized remittance is made without knowing it. It is assumed that a certain site 901 is loaded with a fraudulent program by an actor Y who organizes fraudulent remittance. If the user X accesses the specific site 901 without knowing that the malicious program is loaded, the malicious program is written in the terminal device of the user X. The user X usually does not know that the malicious program has entered the terminal device. Next, when the user X accesses the authorized site 902 such as a financial institution and tries to execute login, an unauthorized program is detected and started. For example, an unauthorized program is programmed to automatically execute when it detects that a resource location identifier including a login directory name is included in a message.

  The malicious program is appropriately changed and can be executed in various forms. For example, the unauthorized program causes the terminal device of user X to access the C & C server 905 (command & control server), and obtains a fake website display or a Java Script (registered trademark) file for Web injection. As a result, an unauthorized remittance request 903 is generated at the terminal device of user X. As a result, the user X is unfamiliar with the damage of unauthorized money transfer. Furthermore, fully automatic fraud programs that do not require communication with the C & C server have also appeared, making it difficult to take effective measures against fraudulent tricks that become more sophisticated every day.

  In view of such a situation, an embodiment of the present invention has an object of preventing damage caused by fraud via a network.

  According to one embodiment of the present invention, a receiving unit that receives a processing request message including a resource location specifier from a terminal device, a response message creating unit that creates a response message for the processing request message, and a resource location specifier A conversion unit that changes a part or the whole, and a transmission unit that transmits the response message created by the response message creation unit to the terminal device together with the resource location specifier changed by the conversion unit. The information processing apparatus is provided that changes the resource location specifier based on a unique value recorded in the processing request message.

  According to one embodiment of the present invention, the conversion unit may use a value unique to the terminal device as the unique value recorded in the processing request message. The conversion unit may change a specifier other than the protocol display, domain name, and subdomain name included in the resource location specifier.

  According to one embodiment of the present invention, a receiving unit that receives a processing request message including a resource location specifier from a terminal device, a response message creating unit that creates a response message for the processing request message, and a specific resource location specifier , A conversion unit that does not execute a change when the resource location specifier received by the receiving unit together with the processing request message is the same as the specific resource location specifier stored in the storage unit, and a response message An information processing apparatus is provided that includes a transmission unit that transmits a response message created by the creation unit to a terminal device together with a resource location specifier.

  According to one embodiment of the present invention, a receiving unit that receives a processing request message including a variable name changed from the terminal device, and a changed variable name of the processing request message received by the receiving unit according to a specific rule. An information processing apparatus is provided that includes a conversion unit that performs decoding, and a transmission unit that transmits a response message based on the input value indicated by the input value name decoded by the conversion unit and the processing request message to the terminal device.

  According to one embodiment of the present invention, the changed variable name may be created based on a value unique to the terminal device recorded in the processing request message.

  According to one embodiment of the present invention, a resource location specifier is attached from a terminal device, a receiving unit that receives a processing request message including a changed variable name, and a part or all of the resource location specifier The conversion unit that decodes the changed variable name of the processing request message received by the receiving unit according to a specific rule, the resource location specifier changed by the conversion unit, and the input value decoded by the conversion unit An information processing apparatus is provided that includes a transmission unit that transmits a response message to a terminal device based on an input value indicated by a name and a processing request message.

  A receiving unit that receives a processing request message from the terminal device, a response message generating unit that generates a response message for the processing request message, a storage unit that stores resource location identifiers having a plurality of different structures, and a processing request message A conversion unit that selects one selected from resource identifiers having a plurality of different structures using a value obtained from a parameter included in the incidental information, and a conversion unit that converts the response message created by the response message creation unit An information processing apparatus is provided that includes a transmission unit that transmits to the terminal device together with the resource location specifier selected by the above.

  According to an embodiment of the present invention, an unauthorized program can be invalidated and communication can be secured by changing a part or the whole of a message transmitted from an information processing device to a terminal device.

It is a block diagram explaining the structure of the information processing apparatus which concerns on one Embodiment of this invention. It is a figure explaining the aspect of the message transmission / reception with the information processing apparatus and terminal device which concern on one Embodiment of this invention. It is a figure explaining an aspect which changes the resource position designator transmitted with the message concerning one embodiment of the present invention. It is a flowchart explaining the aspect of the message transmission / reception with the information processing apparatus and terminal device which concern on one Embodiment of this invention. It is a figure explaining the aspect of the message transmission / reception with the information processing apparatus and terminal device which concern on one Embodiment of this invention. It is a figure explaining the one aspect which changes the variable name in the message | telegram which concerns on one Embodiment of this invention. It is a flowchart explaining the aspect of the message transmission / reception with the information processing apparatus and terminal device which concern on one Embodiment of this invention. It is a figure explaining the structure of the message | telegram which concerns on one Embodiment of this invention. It is a figure explaining the system which allocates the resource location identifier which concerns on one Embodiment of this invention. It is a figure explaining an example in which a user's terminal device is fraudulently performed by an unauthorized program.

  Embodiments of the present invention will be described below with reference to the drawings. However, the present invention can be implemented in many different modes and should not be construed as being limited to the description of the embodiments exemplified below. In order to make the description clearer, the drawings may be abstracted and schematically represented in comparison with actual modes, but this is merely an example and does not limit the interpretation of the present invention. In addition, in the present specification and each drawing, elements similar to those described above with reference to the previous drawings are denoted by the same reference numerals, and detailed description may be omitted as appropriate.

[First Embodiment]
<Information processing device>
FIG. 1 shows functional configurations of the information processing apparatus 100 and the terminal apparatus 112 according to an embodiment of the present invention. The information processing apparatus 100 has a function as a server that receives a processing request message and transmits a response message. These functions are realized by cooperation of hardware resources such as a CPU (Central Processing Unit), a memory (recording medium), and a transmission / reception device. In order to realize this function, the information processing apparatus 100 receives a processing request message transmitted from the terminal device 112, and creates a response message that creates a message in response to the processing request message received by the receiving unit 102. Unit 104, a message conversion unit 106 that performs change processing on part or all of the response message, and a transmission unit 110 that transmits the response message.

  In the information processing apparatus 100, the reception unit 102 receives a processing request message including a resource location specifier. The resource location specifier is structured by a protocol display, a domain name, a subdomain name, a directory name, a subdirectory name, a file name, and the like. In the resource location specifier, the protocol display, domain name, and subdomain name correspond to the upper layer portion, and the directory name, subdirectory name, file name, and the like correspond to the lower layer portion. The information processing apparatus 100 creates a message to be returned to the terminal device 112 by the response message creating unit 104 in response to the processing request message. The response message created by the response message creation unit 104 has various contents, and may be, for example, a message including screen information for instructing the user of the terminal device 112 to perform the next operation.

  The information processing apparatus 100 performs a process of changing some information included in the response message in the message conversion unit 106 before transmitting the response message. For example, the message conversion unit 106 performs a process of changing the resource location specifier included in the message. This change process includes a process of disassembling the resource position specifier as a first process and creating a resource position specifier having a new structure, and a process of changing a part of the resource position specifier as a second process. . The message conversion unit 106 changes the resource location specifier by performing one or both of the first processing and the second processing.

  The first processing includes processing for changing the order of the resource position specifiers included in the message, such as protocol display, domain name, subdomain name, directory name, subdirectory name, and file name. This first process may be changed for the entire configuration of the resource location specifier, or may be executed only for the lower layer portion. This change in the arrangement order of the resource position specifiers can be restored by reconversion if a change rule program is set in the information processing apparatus 100 and predetermined. In this case, no load is given to the terminal device 112.

  The second process includes a process of adding a new character to a part of the resource location specifier included in the message and changing the number of characters such as the domain name, subdomain name, directory name, subdirectory name, and file name. . For example, one or more characters in a specific directory name may be added to change to a different directory name as a whole. As the character added in the first process, a specific character included in the electronic message may be selected. For example, a character added to a part having a resource location specifier is identification information such as a user ID and a source IP address included in a message. By using identification information unique to the user included in such a message, it is possible to omit registering and managing the changed characters in the information processing apparatus 100 in advance.

  The information processing device 100 transmits a response message in which the resource location specifier is changed from the transmission unit 110 to the terminal device 112. In this case, the information processing apparatus 100 only needs to have the conversion information of the resource location specifier, and the terminal apparatus 112 is not affected by the transmission / reception of the response message.

<Terminal device>
The terminal device 112 shown in FIG. 1 is specified by a receiving unit 102 that receives a response message transmitted by the information processing device 100, a response message processing unit 116 that decodes the received response message and executes file processing, and the like. A display unit 118 that opens and displays a file, an input unit 120 that allows a user to input information in accordance with a screen display instruction, a processing request message generation unit 112 that generates a message according to the input content, and a transmission unit 124 that transmits a processing request message Contains. Such a terminal device 112 is realized by a terminal device called a personal computer, a tablet terminal, or a smartphone that is operated by an input device such as a keyboard, a pointing device, or a touch panel.

  Note that the information processing apparatus 100 and the terminal apparatus 112 are placed in a state where they can communicate bidirectionally via an electric communication line such as the Internet. Further, the information processing apparatus 100 and the terminal apparatus 112 are not limited to a one-to-one connection relationship. The information processing apparatus 100 may be connected simultaneously with a plurality of terminal apparatuses 112.

  When the terminal device 112 is operated by a user and information is input from the input unit 120, a processing request message creation unit 122 creates a processing request message. In addition to the input information, the processing request message includes a resource location specifier indicating a domain name, a directory name, a file name, and the like. The resource location specifier is included in a state in which a part or the whole structure is changed by the information processing apparatus 100. The processing request message includes individual identification information that can identify the user or the terminal device 112 such as a user ID, a password, and a source IP address.

  The terminal device 112 transmits the processing request message changed by the processing request message creation unit 122 from the transmission unit 124 to the information processing device 100. The information processing apparatus 100 receives the processing request message by the receiving unit 102.

  According to the present embodiment, even if a malicious program that identifies and executes a specific URL has entered the terminal device 112, if the configuration of the resource location specifier in the message is changed, Execution can be prevented. The details will be described below.

<Communication between information processing device and terminal device>
FIG. 2 shows a mode in which a message is transmitted and received between the user terminal device 112 and the information processing apparatus 100. In FIG. 2, a screen for requesting login to a specific site by a Web browser is displayed on the display screen of the terminal device 112. When the user selects login from the screen display of the Web browser, the terminal device 112 transmits a processing request message for transitioning to the login screen to the information processing apparatus 100.

  The information processing apparatus 100 that has received the processing request message from the terminal device 112 transmits a response message to the terminal device 112. In the example illustrated in FIG. 2, the information processing apparatus 100 transmits a response message that displays a login screen to the terminal device 112. The response message transmitted by the information processing apparatus 100 includes a resource location specifier. The resource location specifier has been changed by the message conversion unit 106 described with reference to FIG. In FIG. 2, when the message conversion unit 106 performs the first change process, the arrangement of the domain name, subdomain name, directory name, subdirectory name, file name, etc. is changed with respect to the original resource location specifier. A response message including the specified resource location specifier is transmitted from the information processing apparatus 100 to the terminal apparatus 112.

  In FIG. 2, part or all of the resource location specifier may be changed by the second change process performed by the message conversion unit 106. Information included in a message may be used as an identifier used to change a part of the resource location specifier. By using information in a specific range included in the electronic message, information to be changed can be shared between the terminal device 112 and the information processing device 100, and there is no need for special management separately. That is, by extracting specific information serving as an identifier from information in a message according to a predetermined rule, it is possible to omit storing and managing information used for change in a storage device.

  In this case, the individual identification information belonging to the terminal device 112 or the user who handles the terminal device 112 can be used as information for changing part or all of the resource location specifier. A user ID or a source IP address can be used as such individual identification information. Since the user ID and the source IP address of the transmission source are also included in the message, management is possible without using special storage means. Further, the number of characters used as an identifier is arbitrary, and the position to be added in the directory name or subdirectory name can also be set arbitrarily.

  FIG. 3 shows an example of a resource location specifier included in a message transmitted from the information processing apparatus 100 to the terminal device 112. FIG. 3A shows the structure of a normal resource location specifier, where (1) is a protocol display, (2) is a subdomain name, (3) is a domain name, and (4) is a directory name and subdirectory name. , (5) indicate display file names. FIG. 3B shows a resource location specifier after the change, and shows a case where the domain name, directory name, and subdirectory name are changed to an arbitrary array. Note that the resource location specifier can be changed arbitrarily, including the protocol display, subdomain name, domain name, directory name and subdirectory name, and display file name, and the arrangement may be arbitrarily changed.

  By changing the resource location specifier as shown in FIG. 3B, even if a malicious program exists in the terminal device 112, execution of the malicious program can be prevented. For example, if the malicious program is programmed to match “bk.abc.jp/idb/dfw/APLIN/06howtu/login” when the login screen transitions to the target URL, FIG. If the resource location specifier is changed as in (), a match cannot be determined even by collation. Thereby, even if the terminal device 112 executes the login process on the information processing apparatus 100, the unauthorized program is not executed, and the unauthorized process can be prevented.

  According to the present embodiment, by dynamically changing the resource location specifier in the message on the information processing device 100 side, the user can be protected from unauthorized programs without affecting the terminal device 112 at all. Can do. Note that the resource location specifier to be changed is not limited as long as it is included in the message, and may be, for example, the resource location specifier included in the data portion of the IP packet. Further, since the resource location specifier can be changed using information in the message, the terminal device 112 and the information processing device 100 have an advantage that it is not necessary to manage an identifier used for the change.

<Message processing method>
FIG. 4 shows a flow of message processing in the terminal device 112 and the information processing apparatus 100. First, in the terminal device 112, a request for displaying a login screen is input (S200). The terminal device 112 creates a processing request message (S202), and transmits the processing request message to the information processing device 100 (S204).

  The information processing apparatus 100 receives a processing request message including a resource location specifier (S206), performs message processing, determines the content of the request (S208), and creates a response message (S210). Then, a process for changing the resource location specifier is performed (S212). This change process is performed by the first process for changing the structure of the resource position specifier as described above, the second process for changing a part or the whole of the resource position specifier, and the like. Then, a response message is transmitted from the information processing device 100 to the terminal device 112 together with the changed resource location specifier (S214).

  The terminal device 112 receives the response message (S216), processes the content (S218), and outputs it to the display unit (S220). In this way, transmission / reception of electronic messages is performed between the terminal device 112 and the information processing apparatus 100. At this time, even if the terminal device 112 receives from the information processing device 100 a message that makes a transition to the login screen, since the resource location specifier has been changed, even if an unauthorized program has entered the terminal device 112, the program Execution can be prevented.

[Second Embodiment]
In the first embodiment, the aspect of changing a part or the whole of the resource location specifier added to the message has been described, but the present invention is not limited to this, and variable names in a specific range included in the message You may perform the process to change.

  In the present embodiment, as the message change process, a part of the variable name included in the source code in the process request message is changed. The source code in the message contains multiple variable names. Among the plurality of variable names, a fixed variable unique to the terminal device 112, a variable name representing a password for identifying the user, and the like are included. In the present embodiment, in the information processing apparatus 100 shown in FIG. 1, the message conversion unit 106 performs a process of changing a variable name in a specific range included in the message, or encrypting or obfuscating it.

<Communication between information processing device and terminal device>
In FIG. 5, a screen for requesting login to a specific site by a Web browser is displayed on the display screen of the terminal device 112. When the user selects login from the screen display of the Web browser, the terminal device 112 transmits a processing request message for transitioning to the login screen to the information processing apparatus 100.

  The information processing apparatus 100 that has received the processing request message from the terminal device 112 transmits a response message to the terminal device 112. In the example illustrated in FIG. 5, the information processing apparatus 100 transmits a response message that displays a login screen to the terminal device 112. When the information processing apparatus 100 creates a processing request message, the information processing apparatus 100 performs a change process on a part of variable names included in the source code in the message. This change processing includes change of the variable name, encryption, obfuscation, and the like. The variable name to be changed can be selected as appropriate. For example, a variable name that requires input of a user ID or password can be selected.

  FIG. 5 shows a state in which a variable name having a password as an argument is changed and encrypted as a variable name included in the source code of the processing request message. This change process is executed, for example, by a process of adding an identifier such as a user ID or a source IP address to the variable name. Information included in a message may be used as an identifier for changing a variable name. According to this change method, it is only necessary to prescribe on the information processing apparatus 100 side which identifier is used in the electronic message, so that it is not necessary to perform special management in the terminal device 112. That is, by extracting specific information that becomes an identifier from information in a message according to a predetermined rule, information used for changing a variable name or encryption is stored in a storage device, and management is omitted. can do.

  As the identifier used to change the variable name, the individual identification information belonging to the terminal device 112 and the user who handles the terminal device 112 can be used. A user ID or a source IP address can be used as such individual identification information. Since the user ID and the source IP address of the transmission source are also included in the message, management is possible without using special storage means. Further, the number of characters used as the identifier can be an arbitrary length.

  The information processing apparatus 100 transmits a response message in response to the processing request message to the terminal device 112. The terminal device 112 performs processing such as screen display according to the processing request message. The terminal device 112 and the information processing apparatus 100 exchange messages with each other through such transmission / reception processing.

  According to the present embodiment, by changing the resource location specifier included in the message on the information processing device 100 side, it is possible to protect the user from unauthorized programs without affecting the terminal device 112 at all. It becomes. In addition, since the specific source code can be changed using information in the message, the terminal device 112 and the information processing apparatus 100 have an advantage that it is not necessary to manage characters used for the change.

  FIG. 6 shows an example of a processing request message transmitted from the terminal device 112 to the information processing apparatus 100. In the example shown in FIG. 6, the variable name “Password” with the password inputted at the time of login shown in (A) as an argument is changed by adding “Password 1345678” and the user ID as shown in (B). In addition, as shown in (C), an example is shown in which “Password123.45.678.90” and the source IP address are added and changed.

  According to this embodiment, a variable name is obtained by inserting an identifier including individual identification information such as a user ID or a source IP address into a part of a variable name included in a source code in a message as shown in FIG. Can be changed.

  By changing the variable name included in the source code in the message as shown in FIG. 6, even if the malicious program is hidden in the terminal device 112, the malicious program can be prevented from being activated and executed. it can. For example, a specific malicious program is configured to be executed when a target variable name is included in a message. Since it is effective to execute a malicious program at the time of login when a user starts a transaction using a specific site, there are cases where a variable name that can determine whether or not the user has logged in is a target of verification.

  However, as shown in the present embodiment, by dynamically changing the variable name in the message, the unauthorized program cannot verify the presence of login and cannot be executed in a timely manner. Therefore, even if an illegal program is hidden in the terminal device 112, the execution thereof can be suppressed. Furthermore, according to the present embodiment, the variable name in the message changed by the information processing apparatus 100 can be changed to the original state after the information processing apparatus 100 receives the message returned from the terminal device 112. The user may not perform any special operation. In addition, since the variable name in the changed message can be changed using the information in the message, the information processing apparatus 100 does not need to manage the identifier used for the change.

<Message processing method>
FIG. 7 shows a flow of message processing in the terminal device 112 and the information processing apparatus 100 in the present embodiment. First, a request for login or the like is input in the terminal device 112 (S200). Thereby, a process request message is created (S202), and the terminal device 112 transmits the process request message to the information processing apparatus 100 (S204).

  The information processing apparatus 100 receives the processing request message (S206), performs message processing, determines the content of the request (S208), and creates a response message (S210). Thereafter, a process of changing a part of the variable name of the source code included in the message is performed (S213). As described above, this change process is performed by a process of changing a specific variable name included in the electronic message. Then, a response message is transmitted from the information processing device 100 to the terminal device 112 together with the changed resource location specifier (S214).

  The terminal device 112 receives the response message (S216), processes the content (S218), and outputs it to the display unit (S220). In this way, transmission / reception of electronic messages is performed between the terminal device 112 and the information processing apparatus 100. At this time, even if the terminal device 112 receives from the information processing device 100 a message that makes a transition to the login screen, since the resource location specifier has been changed, even if an unauthorized program has entered the terminal device 112, the program Execution can be prevented.

  In addition, although this embodiment demonstrated the structure which changes the variable name contained in a message | telegram and prevents an unauthorized program from executing unintentionally, as further demonstrated in 1st Embodiment, resource position is demonstrated. You may combine the process which changes a part or whole of a designator. In this way, by combining a plurality of measures, it is possible to more reliably prevent the activation (sickness) of a virus.

[Third Embodiment]
In the first embodiment, as illustrated in FIG. 1, the information processing apparatus 100 may include a storage unit that stores a resource location specifier. In this case, the receiving unit 102 interprets the resource location specifier received together with the received processing request message. The receiving unit 102 searches whether or not the read resource location specifier is also stored in the storage unit 108. Here, the resource location specifier stored in the storage unit 108 is original information that has not been changed. Therefore, when it is determined that the resource location specifier received and read by the receiving unit 102 matches the resource location specifier stored in the storage unit 108, the change process is not executed. To do.

  By executing such processing, both the processing request message in which part or all of the resource location specifier is changed and the processing request message in which the resource location specifier is not changed are mixed. The processing request message can be received and a response message can be transmitted. Further, since the processing request message whose resource location specifier is not changed does not need to be changed, the processing speed can be improved by separating such processing message.

[Fourth Embodiment]
In this embodiment, as another example of dynamically changing the resource location identifier, a plurality of arbitrary resource location identifiers that are difficult to predict are prepared and assigned to the resource location identifier of the response message. For example, if each of the plurality of resource location identifiers has an arbitrary directory hierarchy and cannot be analyzed from known electronic message information, it is possible to make it difficult to execute a malicious program. In the present embodiment, when a message is communicated on the network, a plurality of resource location identifiers prepared in advance are assigned to the response message using supplementary information included in the message.

  FIG. 9A shows the structure of IP data constituting the processing request message. IP data includes an IP packet, a TCP packet, and an HTTP packet. Each packet includes various incidental information in the header portion. For example, as shown in FIG. 9B, the IP packet includes an IP header and IP data. The IP header includes a plurality of pieces of information (parameters) such as version, packet length, identifier, and address. As shown in FIG. 9C, the HTTP header includes a response line, a message header, and the like, and includes various information such as a version, a browser type, a data type, and a compression method. The same applies to a TCP packet, which includes a TCP header and TCP data. The TCP header includes information (parameters) such as a source and destination port number, a sequence number, and an acknowledgment number. In telegram communication on a TCP / IP network, a destination address is confirmed using these incidental information included in IP data, and a telegram is transmitted from one node to another.

  In the present embodiment, execution of an unauthorized program in message processing is prevented using incidental information included in IP data. For example, a specific parameter included in the IP data is selected, the parameter is converted into a unique value by arithmetic processing as character or numerical information, and a resource location identifier is assigned to the message using the unique value. The parameter selected from the IP data is preferably a value unique to the message. Further, if the parameter selected from the IP data does not change in one session, the resource location identifier may be assigned first in the same session, and the time for message processing can be shortened. The parameter selected from the IP data may be one or more. If a unique value is obtained by using a plurality of parameters and combining them, it is possible to further increase the difficulty of predicting the resource location identifier assigned to the message.

  As parameters included in the IP data, for example, a source address (source IP address) or a destination address (destination IP address) included in the IP header can be selected. In addition, a user agent included in the HTTP header can be used. Furthermore, date information, language information, version information, etc. included in the IP data can be combined.

  In the present embodiment, such parameters are digitized by a certain calculation procedure. In digitization, a unique numerical value may be calculated from one parameter, or a unique value may be calculated using a plurality of parameters. An example of a method for assigning a specific resource location specifier to a message using two parameters will be described below.

  Here, since the source address of the IP header and the user agent of the HTTP header are not changed in the same session (a period from login to logout), a case where both data are used will be described.

  In order to assign an arbitrary one from a plurality of resource location identifiers, the source address of the IP header and the user agent data of the HTTP header are digitized. For example, the hash value is obtained by adding the source address of the IP header and the bit string of the user agent value of the HTTP header. The hash value is constant regardless of the length of the original data, and the same hash value is always obtained from the same data, but a completely different hash value is obtained from even slightly different data, so it differs from session to session. A value can be obtained. In this case, in order to simplify the calculated value, the two bit strings are added and, for example, the remainder when dividing by 10 is obtained, 10 unique values (hash values) can be obtained.

  FIG. 9 shows an example in which the value (hash value) thus obtained is assigned to an arbitrary resource location identifier. A plurality of resource structure identifiers having different structures have arbitrary lengths and arbitrary directory hierarchies. Further, since it does not have special regularity, even if it is transmitted as a response message from the information processing apparatus to the terminal device, it cannot be determined by an unauthorized program, and execution of unauthorized processing can be prevented.

  Processing for obtaining a hash value from the source address of the IP header and the value of the user agent in the HTTP header can be executed by the message conversion unit 106 in the information processing apparatus 100 shown in FIG. Further, an arbitrary resource position specifier and a unique value (hash value) corresponding thereto may be stored in the storage unit 108.

  As described above, according to the present embodiment, the resource position specifier can be set to an arbitrary structure with an arbitrary length, and the resource position can be set by using the incidental information included in the message. The decipherability of the identifier can be made more difficult. Thereby, it is possible to prevent a malicious program from being executed and perform a safer transaction.

  Note that this embodiment can be implemented by being freely combined with the structures shown in the first to third embodiments.

[Fifth Embodiment]
In the first to fourth embodiments, the information processing apparatus has been described as having a specific function. However, such a function can be realized by executing a computer program on a computer.

  For example, the computer receives a processing request message including a resource location specifier transmitted from the terminal device, a response message creation unit that creates a response message for the processing request message, and a part of the resource location specifier A processing request transmission device comprising: a conversion unit that changes the whole, and a transmission unit that transmits the response message created by the response message creation unit to the terminal device together with the resource location specifier changed by the conversion unit It can be realized by a program that functions as:

  Further, the computer includes a receiving unit that receives a processing request message from the terminal device, a response message generating unit that generates a response message for the processing request message, and a storage unit that stores resource location identifiers having a plurality of different structures. Using a value obtained from at least one parameter included in the incidental information of the processing request message, created by a conversion unit and a response message creation unit that selects one selected from resource location identifiers having different structures And a transmission unit that transmits the received response message to the terminal device together with the resource location specifier selected by the conversion unit.

  By using the program as described above, a general-purpose computer that can communicate with a telecommunication line can obtain the same operations and effects as those shown in the first to fourth embodiments. it can.

DESCRIPTION OF SYMBOLS 100 ... Information processing apparatus, 102 ... Reception part, 104 ... Response message preparation part, 106 ... Message conversion part, 108 ... Memory | storage part, 110 ... Transmission part, 112 ... Terminal device, 114... Receiving unit, 116... Response message processing unit, 118... Display unit, 120... Input unit, 122.

Claims (5)

A receiving unit that receives a processing request message including a resource location specifier from the terminal device;
A response message creating unit for creating a response message for the processing request message;
A conversion unit for changing part or all of the resource location specifier;
A transmission unit that transmits the response message created by the response message creation unit to the terminal device together with the resource location specifier changed by the conversion unit;
The information processing apparatus, wherein the conversion unit changes the resource location specifier based on a unique value recorded in the processing request message.   The information processing apparatus according to claim 1, wherein the unique value recorded in the processing request message is a value unique to the terminal apparatus.   The information processing apparatus according to claim 1, wherein the conversion unit changes a specifier other than a protocol display, a domain name, and a subdomain name included in the resource location specifier.   The information processing apparatus according to claim 3, wherein the conversion unit changes at least a part of a directory name included in the resource location specifier. Computer
A receiving unit that receives a processing request message including a resource location specifier transmitted from the terminal device;
A response message creating unit for creating a response message for the processing request message;
A conversion unit for changing part or all of the resource location specifier;
A transmission unit that transmits the response message created by the response message creation unit to the terminal device together with the resource location specifier changed by the conversion unit;
A program that functions as an information processing apparatus.

Images