Patent ID: 8392987
Filing Date: 2013-03-05
Classification: G06F,H04L

Abstract:
1. A web page safety judgment system, comprising: a user terminal that is connected via a network to a service providing web server which publishes a target web page on said network, wherein said target web page includes an authentication information input field into which input authentication information is inputted by said user terminal, said user terminal comprises: a first validity judgment process part, a second validity judgment process part, a third validity judgment process part, a safety process part, a display unit that displays said target web page published on said network; and a storage unit that stores a login information list and a service group information list, said login information list registers a plurality of login history information respectively including a plurality of authentication information and browsed URL(Uniform Resource Locator)s identifying web pages browsed on said display unit before, said service group information list registers service groups each of which includes service URLs respectively identifying web pages for which authentication is performed based on a common authentication information, said first validity judgment process unit checks a target URL identifying said target web page displayed on said display unit with said browsed URLs and judges login history information of said plurality of login history information which includes a browsed URL agreeing with said target URL, is a first validity level, said second validity judgment process part selects, from said service groups, first service groups each of which includes a service URL agreeing with one of said browsed URLs, said second validity judgment process part checks said target URL with service URLs included in said first service groups and selects, from said first service groups, a second service group including a service in with said target URL, said second validity judgment process part judges login history information of said plurality of login history information, which includes a browsed URL agreeing with a service URL included in said second service group, is a second validity level, said third validity judgment process part judges login history information of said plurality of login history information, which is other than said login history information in said first validity level or said second validity level, is a third validity level, said safety process part selects a corresponding process from a plurality of predetermined processes for said input authentication information based on existence or absence of said login history information in said first validity level or in said second validity level and on a result of checking said input authentication information with login information in said login history information in said first to third validity levels, said safety process part executes said corresponding process, said service providing web server provides a predetermined service when transmission authentication information agrees with set authentication information retained in said service providing web server, said safe process part, based on existence or absence of said login history information in said first validity level or in said second validity level and on said result of checking said input authentication information with login information in said login history information in said first to third validity levels, transmits said input authentication information as said transmission authentication information in said corresponding process when judging it is safe to transmit said input authentication information for said target web page, and cancels a transmission of said transmission authentication information in said corresponding process when judging it is risky to transmit said input authentication information for said target web page, when said login history information in said first validity level or said second validity level exists, and said input authentication information does not agree with said authentication information of said login history information in said first validity level or said second validity level but agrees with said authentication information of said login history information in said third validity level, said safety process part displays an incorrect input notice and an incorrect input selection indicator on said display unit in said corresponding process, said incorrect input notice indicates that, since said target web page or a web page of a service related to said target web page was displayed on said display unit when said input authentication information was inputted before, said input authentication information is an incorrect input, said incorrect input selection indicator includes an incorrect input selection field in which a user of said user terminal selects, by using an input unit of said user terminal, whether or not said input authentication information is transmitted, and said safety process part transmits said input authentication information as said transmission authentication information when a transmission of said input authentication information is selected in said incorrect input selection field.