JP4750497B2 - Content falsification handling system - Google Patents

Description

  The present invention relates to a system that deals with falsification of content provided from a web server on the Internet, and in particular, copes with reducing load on the web server, detecting falsification of content, and preventing falsified content from being provided. The present invention relates to a content falsification handling system.

  Conventionally, there are various techniques for detecting falsification with respect to content provided from a web server and preventing the falsified content from leaking onto the web.

The first (prior art 1) is Japanese Patent Application Laid-Open No. 2001-282619 “Content falsification detection method, its mounting device, and a recording medium recording its processing program”.
Prior Art 1 is a method for detecting falsification of content, by embedding a hash value of the file contents of HP (homepage) into a page, and periodically finding and comparing the hash value of the file contents of the current page to detect falsification (Patent Document 1).
Note that [0049] of prior art 1 states that it is possible to perform a check when browsing the content of the viewer.

The second (conventional technology 2) is Japanese Patent Application Laid-Open No. 2002-149495 “Web server device”.
Prior art 2 compares the characteristic information of the pre-registered content with the characteristic information obtained for the provided content when providing Web content to the user, and detects a tampering if there is a mismatch (patent) Reference 2).
As the characteristic information, [0021] includes the data length, the data at a specific position, or the number and position of the character “A”.

The third (conventional technology 3) is JP 2002-175010 “Homepage falsification prevention system”.
Prior art 3 connects the original Web server and the public Web server through a firewall, generates an authenticator using the original data and the secret key, and publishes the data received from the original side on the public side An authenticator is generated using a key, and the tampering is detected by comparing the authenticators (Patent Document 3).

JP 2001-282619 A JP 2002-149497 A JP 2002-175010 A

[Regarding Prior Art 1]
However, in Embodiment 1 of Prior Art 1, a single Web server embeds a hash value in a HP page and compares it with a hash value that is obtained by obtaining a hash value from the page periodically or at the time of browsing by a viewer. There is a problem in that the configuration and processing of the Web server are complicated.
In addition, since the hash value is simply embedded in the page, there is a high risk of falsification when the hash value is decrypted.

  In the second embodiment of the prior art 1, tampering detection is performed by the EXIT gate, but a page in which the hash value is embedded is received from the server device of the Web server, and the hash value is read and received. Since the hash value is obtained from the page and compared, the EXIT gate can detect the falsified page, but it is not provided by replacing it with a regular page.

[Conventional technology 2]
Further, in the related art 2, the pre-registered content characteristic information and the content characteristic information obtained at the time of provision are compared to detect falsification, and if the falsification is made, the original content is provided. In this case, it is necessary to perform processing for falsification detection and store the original content, complicate the processing and configuration of the Web server, and if the original content is falsified, there is a problem that the replacement does not function.
Further, if the characteristic information obtained in advance is decoded, it is easy to tamper with the content.

  In the prior art 2, it is not considered that the falsification detection function is separated from the Web server. If it is separated, it is necessary to further improve the security and the configuration becomes complicated. It was.

[Conventional technology 3]
Moreover, in the prior art 3, the web file of the public web server provided to the user is encrypted, and is decrypted and transmitted according to the user's request. Create and detect falsification in comparison with the authenticator created in the same way on the public web server, and send the authenticator generated from the original web server transmission message and private key to the public web server as message authentication technology However, since the public web server generates an authenticator from the received message and the public key and detects the falsification of the message compared with the received authenticator, the configuration of the falsification detection becomes complicated. There was a point.

  In addition, the above-described prior art has a problem that when content is falsified in the company that manages the web server, it is regarded as a normal content update and the falsification cannot be detected.

  The present invention has been made in view of the above circumstances, and with a simple configuration, when browsing content on a Web server, it is reliably detected that content has been tampered with from the outside or inside and has been tampered with in place of the tampered content. The present invention relates to a content falsification countermeasure system that can easily provide falsified content and reliably prevent falsification.

The present invention for solving the problems of the above-described conventional example is a content falsification handling system that receives a browsing request and provides a content to be stored, a content, and a hash value for the content using a hash function. And a falsification handling server that stores a certificate encrypted with a private key, and when the web server receives a browsing request, it calculates a hash value for the stored content using a hash function, and sends it to the falsification handling server. Request the certificate issuance of the content, decrypt the certificate received from the falsification handling server with the public key, obtain the hash value, and perform the first comparison that compares the calculated hash value with the acquired hash value If they match, the content to be stored is provided, and the falsification handling server converts the content from the web server to the content. Upon receiving a certificate request to respond, is intended to send the corresponding certificate to the web server, web server, doing a comparison of the first, if they do not match, back up the content to be stored, When content delivery is requested from the falsification handling server and content is received from the falsification handling server, the content is stored, a hash value is calculated for the stored content using a hash function, and a certificate of the content is issued to the falsification handling server The certificate received from the falsification handling server is decrypted with the public key to obtain the hash value, and the second comparison is performed to compare the calculated hash value with the obtained hash value. When the falsification handling server receives a content distribution request from the web server, the stored content is provided. And transmitting the Ntsu.

  The present invention is characterized in that, in the content falsification handling system, the web server performs a second comparison and provides a maintenance screen if they do not match.

The present invention provides an administrator for receiving and storing content input from the outside and performing content update registration processing in the content alteration system, and the administrator calculates a hash value for the stored content using a hash function. and to generate a certificate encrypted by a secret key, and transmits the generated certificate and the content tampering addressed server, tampering addressed server, the certificate store certificates and the content transmitted from the administrator and content It is characterized by updating.

  In the content falsification handling system, the present invention is characterized in that the falsification handling server and the administrator are configured as an integrated device.

The present invention is a computer program that operates on a web server, and upon receiving a browse request, calculates a hash value using a hash function for the stored content, requests the falsification handling server to issue a certificate for the content, The certificate received from the falsification handling server is decrypted with the public key to obtain a hash value, and a first comparison is performed to compare the calculated hash value with the obtained hash value. Perform the provided process, compare the first time, and if they do not match, back up the stored content, request content distribution from the falsification handling server, and store the content when receiving the content from the falsification handling server The hash value is calculated for the stored content using a hash function, and the Requesting certificate issue of content, decrypting the certificate received from the falsification handling server with the public key to obtain the hash value, and performing the second comparison to compare the calculated hash value with the acquired hash value, If they match, a process of providing the stored content is performed, and a second comparison is performed. If they do not match, a process of providing a maintenance screen is performed.

According to the present invention, a web server that receives a browsing request and provides content to be stored, the content, a hash value for the content using a hash function, and a certificate that is encrypted with a private key is stored. When a web server receives a browsing request, it calculates a hash value for the stored content using a hash function, requests the falsification handling server to issue a certificate for the content, and receives it from the falsification handling server The certificate is decrypted with the public key to obtain a hash value, the calculated hash value is compared with the obtained hash value for the first time, and if they match, the content to be stored is provided. When the falsification handling server receives a certificate issuance request corresponding to the content from the web server, the corresponding certificate is sent to the web server. Is intended to send, web server, doing a comparison of the first, if they do not match, back up the content to be stored, requested the content delivered to the falsification deal server, upon receiving the content from tampering deal server, Stores the content, calculates a hash value for the stored content using a hash function, requests the falsification handling server to issue a certificate for the content, decrypts the certificate received from the falsification handling server with the public key The hash value is acquired, the calculated hash value is compared with the acquired hash value for the second time, and if they match, the stored content is provided, and the falsification handling server receives the content from the web server. When a distribution request is received, the content is altered so that the content is sent. Can back to analyze the content, there is an effect that can detect an alteration also further content stored in the falsification addressed server.

  According to the present invention, if the web server performs the second comparison and if it does not match, the content falsification handling system provides the maintenance screen, the content stored in the falsification handling server is also falsified. Even if it is, there is an effect that a maintenance screen can be provided.

According to the present invention, an administrator is provided that receives and stores content input from the outside, and performs update registration processing of the content. The administrator calculates a hash value for the stored content using a hash function, and the in the encrypted to generate a certificate, and transmits the generated certificate and the content tampering addressed server, tampering address server updates the certificate and the content store certificates and the content transmitted from the administrator Since it is a content falsification handling system, when the content is updated, a corresponding certificate can be generated to easily update the data on the falsification handling server, and the update can only be done from the administrator, improving the system security There is an effect that can be done.

According to the present invention, when a browsing request is received from a computer program that operates on a web server , a hash value is calculated for a stored content by using a hash function, and a certificate issuance of the content is requested to the falsification handling server. Then, the certificate received from the falsification handling server is decrypted with the public key to obtain the hash value, and the first comparison for comparing the calculated hash value with the obtained hash value is performed. When the content is processed, the first comparison is performed and the contents do not match, the stored content is backed up, the content distribution request is made to the falsification handling server, and the content is received from the falsification handling server. The hash value is calculated using a hash function for the stored content, and the falsification handling server Request the certificate issuance of the content, decrypt the certificate received from the falsification handling server with the public key to obtain the hash value, and compare the calculated hash value with the obtained hash value for the second time If it matches, the stored content is processed, and the second comparison is performed. If it does not match, the computer program performs the process of providing the maintenance screen. The content can be detected, backed up to analyze the altered content, and the content stored in the alteration handling server can be detected.

Embodiments of the present invention will be described with reference to the drawings.
In the content falsification handling system according to the embodiment of the present invention, the WWW server compares the hash value calculated from the content with the hash value obtained by decrypting the certificate with the public key in response to the content browsing request from the client PC (1 The first comparison) detects the falsification of the content, and if it has been falsified, the hash value is calculated by copying the content stored in the falsification handling server to the recovery area and decrypting the certificate with the public key. (2nd comparison) to detect falsification of content. If it has not been falsified, the content will be provided, and if it has been falsified, a maintenance screen will be provided. Content that can be easily detected, backed up to analyze tampered content, and stored on a tampering server It is those that can detect tampering even with.

  In addition, the content falsification handling system according to the embodiment of the present invention includes an administrator. When the administrator receives the update registration of the content, the administrator calculates a hash value with the hash function for the content, and further encrypts the content with the secret key. Generate a certificate, send the content and certificate to the falsification handling server, and the falsification handling server updates the certificate and the content, so when the content is updated, the corresponding certificate is It is possible to easily generate and update the data in the falsification handling server, and the update can be performed only by an administrator, so that the security of the system can be improved.

[Entire system configuration]
Next, the configuration of the content tampering countermeasure system according to the embodiment of the present invention will be described with reference to FIG. FIG. 1 is a configuration block diagram of a content tampering countermeasure system according to an embodiment of the present invention.
As shown in FIG. 1, a content falsification handling system (this system) according to an embodiment of the present invention includes a WWW server (web server) 1, a Web DB (web database) 2, a maintenance screen storage unit 3, A falsification handling server 4, a handling DB (handling database) 5, an administrator 6, a staging DB (staging database) 7, a content creation PC 8, and a plurality of client PCs (clients) connected to the WWW server 1 via the Internet 9 Personal computer) 10.

  The WWW server 1 is connected to the Internet 9 and is connected to the falsification handling server 4 and the administrator 6, and the falsification handling server 4 is connected to the administrator 6.

[Each part]
Next, each part of this system is demonstrated concretely.
[WWW server]
A WWW (World Wide Web) server (web server) 1 receives a content browsing request from a client PC 10 via the Internet 9 and provides the content stored in the content area 2 a of the Web DB 2 to the client PC 10.
In addition, when the WWW server 1 cannot provide content to the client PC 10, the WWW server 1 provides a maintenance screen stored in the maintenance screen storage unit 3.

The WWW server 1 is a computer having a configuration as shown in FIG. FIG. 2 is a schematic block diagram of the server.
As shown in FIG. 2, the server includes a control unit 11 including a central processing unit (CPU), a main memory 12, a storage unit 13, and an interface 14.

The control unit 11 reads the processing program stored in the storage unit 13 and loads it into the main memory 12 to operate the processing program.
The main memory 12 is a memory that temporarily stores processing programs and data.
The storage unit 13 is a memory that stores processing programs, data, parameters, and the like.
The interface 14 converts the data format and the like in order to connect the inside and outside of the server. The interface 14 is connected to a network and an external storage device, and usually uses a separate interface.
The falsification handling server 4, the administrator 6, and the client PC 10 have the same configuration as that shown in FIG. In addition, a display interface is necessary to connect to the display device.

The WWW server 1 includes an adapter 1a, and the adapter 1a operates to establish communication connection with the falsification handling server 4 and the administrator 6.
Specifically, the adapter 1a is realized when the control unit 11 in the WWW server 1 reads a processing program from the storage unit 13 and operates the processing program.
Here, the adapter 1a is realized by using a part of the configuration of the WWW server 1, but without using the configuration of the server 1, a separate configuration including a dedicated control unit, a main memory, and a storage unit. You may make it.

  Upon receiving a content browsing request from the client PC 10, the adapter 1a calculates a hash value from the content in the content area 2a, decrypts the certificate acquired from the falsification handling server 4 with the public key, extracts the hash value, and both hashes. If the values are compared (the first comparison) and match, the content is browsed and provided.

  If the hash values do not match, the adapter 1a backs up the content in the content area 2a to the backup area 2b, copies the content in the content area 5b to the recovery area 2c, and then hashes the content from the recovery area 2c. A value is calculated, and the certificate acquired from the falsification handling server 4 is decrypted with the public key and taken out from the hash value. If both hash values are compared (the second comparison), the contents are browsed and provided.

Further, in the second comparison, the adapter 1a provides the maintenance screen of the maintenance screen storage unit 3 if both hash values do not match.
Here, the adapter 1a may also stop the display function itself if both hash values do not match in the second comparison. In this case, an error screen is displayed on the client PC 10.
The processing operation of the adapter 1a will be described later.

[Web DB]
The Web DB (web database) 2 is a database connected to the WWW server 1, and includes a content area 2a for storing content, a backup area 2b for saving the altered content for analysis, and a content area 5b of the corresponding DB 5. And a recovery area 2c for temporarily storing a copy of the content stored in the storage area.
The Web DB 2 is an external storage device of the WWW server 1, but each area may be provided in a storage unit inside the WWW server 1.

[Maintenance screen memory]
The maintenance screen storage unit 3 is a storage unit that stores a maintenance screen to be provided instead of the content when the content that has not been tampered with can be provided to the client PC 10.
Although the maintenance screen storage unit 3 is an external storage device of the WWW server 1, a maintenance screen may be provided in the storage unit inside the WWW server 1.

[Falsification server]
The falsification handling server 4 has the same configuration as that of the server shown in FIG. 2, and a handling DB 5 is connected as an external storage device.
The communication with the WWW server 1 and the administrator 6 is encrypted.

  When the falsification handling server 4 receives a certificate issuance request from the adapter 1a of the WWW server 1, it reads the certificate stored in the stamp area 5a of the handling DB 5 and sends it to the adapter 1a.

  Further, upon receiving a content distribution request for the content area 5b from the adapter 1a, the falsification handling server 4 reads the content stored in the content area 5b of the handling DB 5 and transmits it to the adapter 1a.

Further, when the certificate and content are transmitted from the administrator 6, the falsification handling server 4 stores the certificate in the stamp area 5 a of the handling DB 5 and stores the content in the content area 5 b of the handling DB 5.
The specific processing operation of the falsification handling server 4 will be described later.

[Action DB]
The handling DB (handling database) 5 is a database connected to the falsification handling server 4 and includes a stamp area 5a for storing a certificate (stamp) and a content area 5b for storing content.
The countermeasure DB 5 is an external storage device of the falsification countermeasure server 4, but each area may be provided in a storage unit inside the falsification countermeasure server 4.

The stamp area 5a is an area in which a certificate generated by the administrator 6 and stored in the stamp area 7a of the staging area 7 'is stored.
The content area 5b is an area in which the content stored in the content area 7b of the staging area 7 ′ is stored.

[Administrator]
The administrator 6 has the same configuration as that of the server shown in FIG. 2, and a staging DB 7 is connected as an external storage device.
Further, the content creation PC 8 is connected to the administrator 6, and the content created by the content creation PC 8 is input and stored in the content area 7 b in the staging area 7 ′ of the staging DB 7.

  Further, the administrator 6 calculates a hash value for the content stored in the content area 7b using a hash function, encrypts it with a private key, and generates an electronic certificate (simply called “certificate” or “stamp”). . Then, the administrator 6 stores the generated certificate in the stamp area 7a of the staging area 7 ′.

The administrator 6 also stores the certificate stored in the stamp area 7a of the staging area 7 'and the content stored in the content area 7b in the falsification handling server 4 in order to store them in the stamp area 5a and the content area 5b of the handling DB 5. Send.
The administrator 6 transmits the certificate and content to the falsification handling server 4 but does not receive data such as the content from the falsification handling server 4, and therefore changes the contents of the staging DB 7 from the falsification handling server 4. Security can be improved.
The specific processing operation of the administrator 6 will be described later.

[Staging DB]
The staging DB (staging database) 7 includes a staging area 7 ', and the staging area 7' includes a stamp area 7a and a content area 7b.

The stamp area 7a is an area for storing a certificate generated by the administrator 6.
The content area 7b is an area for storing content created by the content creation PC 8.

[Content creation PC]
The content creation PC 8 creates content provided by the WWW server 1 and transmits the created content to the administrator 6.
Communication between the content creation PC 8 and the administrator 6 is encrypted.
The configuration of the content creation PC 8 is the same as that shown in FIG.

[Client PC]
A client PC (client personal computer) 10 accesses the WWW server 1 via the Internet 9, outputs a content browsing request (request), receives content from the WWW server 1, and displays the content on the display unit.

[Processing behavior of this system]
Next, the processing operation in this system will be described.
The adapter 1a of the WWW server 1 detects the falsification of the content by comparing the hash value calculated from the content in response to the content browsing request from the client PC 10 and the hash value obtained by decrypting the certificate with the public key. If the content of the countermeasure DB 5 is copied to the recovery area 2c, a hash value is calculated, and the certificate is compared with the hash value obtained by decrypting the certificate with the public key. If it has been tampered with, provide a maintenance screen.

  When the administrator 6 receives the update registration of the content, the administrator 6 calculates a hash value for the content with a hash function and further encrypts the content with a secret key to generate a certificate. Then, the administrator 6 transmits the content and the certificate to the falsification handling server 4 and stores the falsification handling server 4 in the handling DB 5.

[Adapter processing]
The processing operation of the adapter 1a incorporated in the WWW server 1 will be described with reference to FIG. FIG. 3 is a flowchart showing the processing operation of the adapter.
The adapter 1a determines whether or not a content browsing request (request) has been received from the client PC 10 (S1). If the request has not been received (in the case of No), the determination processing S1 is repeated.

  If a request is received in the determination process S1 (in the case of Yes), a hash value (referred to as a hash value A) is calculated based on the requested content from the content area 2a of the Web DB 2 (S2).

  Next, the adapter 1a requests a certificate from the falsification handling server 4, and reads and stores the certificate corresponding to the request target content stored in the stamp area 5a of the handling DB 5 transmitted by the falsification handling server 4. Decrypt with the public key to extract the hash value (referred to as hash value B) (S3).

Then, the adapter 1a compares the calculated hash value A with the extracted hash value B (first comparison) (S4), and determines whether or not both values match (S5).
If the two hash values match (Yes), the requested content is provided to the client PC 10 from the content area 2a (S6).
If the hash values do not match (No), the falsification handling process (S7) is performed and the process is terminated. The falsification handling process will be described later.

  In FIG. 3, the public key is held in the adapter 1a and decrypted in the adapter 1a. However, the public key is held in the falsification handling server 4 and decrypted in the falsification handling server 4. It may be. However, decryption by the adapter 1a is superior in terms of security because tampering during communication can be prevented.

[Falsification processing]
The falsification countermeasure processing in the adapter 1a will be described with reference to FIG. FIG. 4 is a flowchart of the tampering countermeasure process in the adapter.
First, the adapter 1a stores the content (modified content) in the content area 2a in the backup area 2b of the Web DB 2 (S11).
Normally, all content stored in the content area 2a is backed up in the backup area 2b, but only the content portion determined to be falsified may be backed up in the backup area 2b.

  Next, the adapter 1a requests the falsification handling server 4 to provide content that has not been falsified from the content area 5b, receives the content in the content area 5b of the handling DB 5 from the falsification handling server 4, and sends the content to the recovery area. 2c is stored (S12).

  Then, the adapter 1a calculates a hash value (referred to as hash value C) from the content stored in the recovery area 2c by using a hash function, and the certificate stored in the stamp area 5a of the countermeasure DB 5 is stored in the falsification countermeasure server 4. Is received, the certificate of the stamp area 5a is received, decrypted with the public key to obtain a hash value (referred to as a hash value D), and the hash value C and the hash value D are compared (second comparison). (S13).

  If both hash values match in the comparison process S13 (in the case of Yes), the adapter 1a copies the content of the recovery area 2c in the Web DB 2 to the content area 2a (S15), and the content copied to the content area 2a Is provided to the client PC 10 (S16).

If both hash values do not match in the comparison process S13 (in the case of No), the adapter 1a provides the maintenance screen stored in the maintenance screen storage unit 3 to the client PC 10 (S17).
When the two hash values do not match, the content stored in the recovery area 2c is falsified. In this case, since the regular content cannot be provided, a maintenance screen is provided. .
The adapter 1a may stop the display function itself without providing a maintenance screen.

  When the content stored in the recovery area 2c is falsified, it is highly likely that the content of the content area 5b of the countermeasure DB 5 has been falsified. This is because the content created by the content creation PC 8 is the administrator 6 This may be the case where the content is stored and updated in the content area 5b without going through the above process.

[Content update registration processing]
Next, content update registration processing in the administrator 6 when content is created by the content creation PC 8 will be described with reference to FIG. FIG. 5 is a flowchart showing content update registration processing in the administrator.
When the administrator 6 receives the content created from the content creation PC 8 (external) (S21), the administrator 6 stores the received content in the content area 7b in the staging area 7 'of the staging DB 7 (S22).

  The administrator 6 calculates a hash value from the content stored in the content area 7b, generates a certificate by encrypting it with a secret key held inside, and stores it in the stamp area 7a (S23).

  Then, the administrator 6 falsifies the certificate stored in the stamp area 7a in the staging area 7 'of the staging DB 7 and the content stored in the content area 7b in order to copy them to the stamp area 5a and the content area 5b of the countermeasure DB 5. It transmits to the coping server 4 (S24).

  Further, the administrator 6 transmits the content stored in the content area 7b to the Web server 1 for copying to the content area 2a (S25), and ends the process.

  As a result, the certificate is stored in the stamp area 5a of the countermeasure DB 5, the updated content is stored in the content area 5b, and the updated content is also stored in the content area 2a of the Web DB 2. It will be.

[Application example]
In the system of FIG. 1, a single WWW server provides content. However, the same content is provided by a plurality of WWW servers and a Web DB connected thereto, and a falsification handling server and an administrator are connected to each WWW server. It is also possible to adopt a configuration.
In this case, if the adapter of each WWW server is also connected to the falsification handling server and the administrator connected to the other WWW server, even if one falsification handling server or the administrator goes down, the other falsification handling server Alternatively, the administrator can operate to deal with falsification and ensure the stability of the system.
A plurality of WWW servers may provide different contents.

[Effect of the embodiment]
According to this system, when there is a content browsing request from the client PC 10, the adapter 1 a of the WWW server 1 calculates a hash value from the content in the content area 2 a of the Web DB 2 and acquires a certificate from the falsification handling server 4. Thus, decryption with the public key is performed to extract the hash value, and by comparing the two hash values, the alteration of the content in the content area 2a is detected, so that the content can be easily altered.

  Further, according to the present system, when alteration of the content in the content area 2a is detected, the content in the content area 2a is backed up in the backup area 2b, the content in the content area 5b of the countermeasure DB 5 is copied to the recovery area 2c, The hash value is calculated from the content in the recovery area 2c, the certificate is obtained from the falsification handling server 4, the hash value is extracted by decrypting with the public key, and the falsification of the content is detected again by comparing both hash values. Therefore, it is possible to detect content falsification of the content area 5b of the countermeasure DB 5, particularly content falsification from the inside rather than from the outside.

  Also, according to the present system, if no alteration of the content in the content area 5b is detected, the content in the recovery area 2c is copied to the content area 2a to provide the content, and the alteration of the content in the content area 5b is detected. Then, since the maintenance screen stored in the maintenance screen storage unit 3 is provided, even if the content in the content area 2a is falsified, the content is provided if the content in the content area 5b is not falsified. Since the maintenance screen is provided if the content in the content area 5b is falsified, it is possible to provide the content that has not been falsified or the maintenance screen, thereby improving the security.

  The present invention, with a simple configuration, reliably detects falsification of content from the outside or inside when browsing content on a Web server, and easily provides content that has not been falsified in place of the falsified content. This is suitable for a content falsification countermeasure system that can be surely prevented.

1 is a configuration block diagram of a content falsification handling system according to an embodiment of the present invention. It is a schematic block diagram of a server. It is a flowchart which shows the processing operation of an adapter. It is a flowchart of the tampering countermeasure processing in the adapter. It is a flowchart which shows the content update registration process in an administrator.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... WWW server, 2 ... Web DB, 2a ... Content area, 2b ... Backup area, 2c ... Recovery area, 3 ... Maintenance screen memory | storage part, 4 ... Falsification handling server, 5 ... Dealing DB, 5a ... Stamp area, 5b ... Content area 6 ... Administrator 7 ... Staging DB 7 '... Staging area 7a ... Stamp area 7b ... Content area 8 ... Content creation PC 9 ... Internet 10 ... Client PC

Claims (5)

A web server that receives browsing requests and provides stored content;
A content and a falsification handling server for storing a certificate obtained by obtaining a hash value for the content using a hash function and encrypted with a secret key;
When the web server receives a browsing request, it calculates a hash value for the stored content using a hash function, requests the falsification handling server to issue a certificate for the content, and receives the certificate received from the falsification handling server Is decrypted with a public key to obtain a hash value, the calculated hash value is compared with the obtained hash value for the first time, and if they match, content to be stored is provided.
When the falsification handling server receives a certificate issuance request corresponding to the content from the web server, the corresponding certificate is transmitted to the web server,
The web server, by performing a comparison of the first, if they do not match, if to back up the content to be stored, the requesting tampered content distribution to cope server receives the content from the tampering addressed server, the content And calculates a hash value for the stored content using a hash function, requests the falsification handling server to issue a certificate for the content, and decrypts the certificate received from the falsification handling server with a public key. The hash value is acquired, the calculated hash value is compared with the acquired hash value for the second time, and if they match, the stored content is provided.
The tampering Action server, the receives a content distribution request from the web server, wherein the to Turkey content tampering remedied system sending the content. Web server, performs a comparison of the second, must match, claim 1 Symbol placement content tampering address system and providing a maintenance window. An administrator is provided to receive and store content input from outside, and perform content update registration processing,
The administrator calculates a hash value using a hash function for the stored content, generates a certificate by encrypting with a secret key, and transmits the generated certificate and content to the falsification handling server,
The tampering Action server, according to claim 1 or 2 SL placing content tampering address system and updates the certificate and the content store certificates and content sent from the administrator. Tampering addressed server and claim 3 Symbol placement content tampering address system is characterized by being configured as an integrated device and the administrator. A computer program that runs on a web server , and upon receiving a browsing request, calculates a hash value for the stored content using a hash function, requests the falsification handling server to issue a certificate for the content, and the falsification handling server A process for obtaining a hash value by decrypting a certificate received from a public key, comparing the calculated hash value with the acquired hash value, and providing content to be stored if they match When the first comparison is made and the contents do not match, the stored content is backed up, content distribution is requested from the falsification handling server, and when the content is received from the falsification handling server, the content is stored. The hash value is calculated for the stored content using a hash function, and the falsification handling server A request for certificate issuance of the content, a certificate received from the falsification handling server is decrypted with a public key to obtain a hash value, and a second comparison is performed to compare the calculated hash value with the obtained hash value. A computer program characterized in that if it matches, a process for providing the stored content is performed, a second comparison is performed, and if it does not match, a process for providing a maintenance screen is performed.

Images