Method for processing reliability of sites within intranet on virtual machine outside intranet

Abstract

To allow the reliability of sites within an intranet to be verified using a cloud browser on a virtual machine outside the intranet.SOLUTION: An information processing device provides a drawing result of a web page based on a request from a communication terminal connected to an intranet. The information processing device receives a root certificate of a website within the intranet from the communication terminal. When drawing the web page on the website within the intranet, the information processing device uses the root certificate to verify the reliability of the website within the intranet.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present invention relates to a processing system and an information processing method for checking the reliability of a site within an intranet on a virtual machine outside the intranet. [Background technology]

[0002] Currently, communication devices equipped with a web browser (hereafter referred to as a browser) that can view web pages composed of HTML documents are in widespread use. By displaying the web pages of external services running on external servers through the browser, communication devices can link with external services.

[0003] One type of browser is called a cloud browser, which generates web page rendering results on a cloud server. By performing computationally intensive processes such as web page analysis and execution on the server, the computational load on the communication device is reduced.

[0004] In a cloud browser, the browser engine that analyzes web pages and generates rendering results is hosted on a virtual machine running on a cloud server. The browser engine hosted on the cloud server renders the web page and converts the rendering results into an image, and the resulting image data is provided to the communications device, where the image data is displayed, allowing the user to view the web page. In addition, input information from the communications device (input events from the keyboard, mouse, touch panel, etc.) can be sent to the cloud server and passed to the browser engine running there, allowing the browser to be operated, making it appear as if the browser is running on the communications device. The virtual machine is virtually allocated various device resources required for a PC. This allows the browser engine running on the virtual machine to operate in the same way as if it were running on a PC.

[0005] The processing performed by the browser includes connecting to sites within the intranet, rendering the site's web pages, and providing the rendered image data to the communication terminal. Sites within the intranet may be issued with a dedicated server certificate and a dedicated root certificate, and security may be enhanced by, for example, encrypting communications via HTTPS connections.

[0006] In order to connect from an application in an image forming device such as an MFP to a site within an intranet that issues a dedicated server certificate and root certificate, a method has been proposed in which a dedicated root certificate is additionally registered in a common area within the image forming device (Patent Document 1). [Prior art documents] [Patent documents]

[0007] [Patent Document 1] Japanese Patent Application Publication No. 2019-49799 Summary of the Invention [Problem to be solved by the invention]

[0008] By implementing the above-described technology, when connecting to a site within an intranet that has issued a dedicated server certificate and a dedicated root certificate from an application on the image forming device, such as a browser, the image forming device can verify the reliability of the site within the intranet.

[0009] However, the above-mentioned technology does not allow a cloud browser on a virtual machine outside the intranet to verify the reliability of a site within the intranet.

[0010] In view of the above-mentioned problems, one of the objects of the present invention is to enable verification of the reliability of sites within an intranet using a cloud browser on a virtual machine outside the intranet. [Means for solving the problem]

[0011] In order to achieve the above-mentioned object, an information processing device according to one embodiment of the present invention is an information processing device that provides a rendering result of a web page based on a request from a communication terminal connected to an intranet, and has: a receiving means that receives a root certificate of a website within the intranet from the communication terminal; and a verification means that, when rendering a web page on the website within the intranet, verifies the reliability of the website within the intranet using the root certificate. [Effects of the Invention]

[0012] According to the present invention, the reliability of a site within an intranet can be verified in a cloud browser on a virtual machine outside the intranet. [Brief explanation of the drawings]

[0013] [Figure 1] FIG. 1 is a block diagram illustrating an example of a configuration of an information processing system. [Figure 2] FIG. 2 is a block diagram illustrating an example of a hardware configuration of a communication terminal. [Figure 3] FIG. 1 is a block diagram illustrating an example of a hardware configuration of a virtual machine. [Figure 4] 10 is an example of a flowchart illustrating a flow of processing by a communication terminal. [Figure 5] 10 is an example of a flowchart showing a processing flow of the image generation system. [Figure 6] 10 is an example of a flowchart illustrating a flow of processing by a communication terminal. [Figure 7] 10 is an example of a flowchart showing a processing flow of the image generation system. DETAILED DESCRIPTION OF THE INVENTION

[0014] Hereinafter, examples of the present invention will be described with reference to the drawings. Note that the following embodiments do not limit the scope of the present invention as defined in the claims, and not all of the combinations of features described in the embodiments are necessarily essential to the solution of the present invention. Note that the same components will be described with the same reference numerals.

[0015] Example 1 FIG. 1 is an example of a configuration diagram of a system according to this embodiment.

[0016] The information processing system 100 includes a communication terminal 101 and an image generation system 106. A user views and operates the screen of the communication terminal 101. The communication terminal 101 is connected to the image generation system 106 via a network, and transmits operation information and a request to acquire an image of the drawing result to the image generation system 106. The network in this embodiment may be, for example, a combination of the Internet, a wide area network (WAN), and a local area network (LAN). Furthermore, there may be multiple communication terminals.

[0017] Reference numeral 102 denotes an intranet, which includes a communication terminal 101 connected to the intranet 102 and a website A 103 published within the intranet. The website A 103 stores web pages specified by URLs and files linked from the web pages. Reference numeral 104 denotes a website B located on the Internet outside the intranet, which is a general external service such as a search site or a news site. Like website A 103, website B 104 also stores web pages specified by URLs and files linked from the web pages. The image generation system 106 includes a virtual machine 105, a storage service 109, and a gateway 110. The image generation system 106 may be any information processing device capable of accessing a web page specified by a URL and obtaining a rendering result of the web page. For example, the image generation system 106 may have at least the functions of the virtual machine 105, the storage service 109, and the gateway 110, or may be configured to have each of these functions as separate entities. The virtual machine 105 includes a communication terminal cooperation module 107 and a browser engine 108 .

[0018] Here, the basic processing of the cloud browser up to the point where a web page is displayed on the communication terminal 101 will be described.

[0019] When the user inputs a URL on communication terminal 101, it is passed to communication terminal link module 107 of image generation system 106, and communication terminal link module 107 requests browser engine 108 to acquire and analyze the web page specified by the URL and generate an image of the drawing result. Browser engine 108 accesses website A 103 or website B 104 via gateway 110, acquires and analyzes the web page specified by the URL, and generates an image of the drawing result. It notifies communication terminal link module 107 that generation of the image of the drawing result is complete. Upon receiving a notification of completion of generation of the image of the drawing result from browser engine 108, communication terminal link module 107 acquires the image of the drawing result from browser engine 108 and saves it in storage service 109 connected via the network. Then, communication terminal link module 107 notifies communication terminal 101 that saving of the image of the drawing result is complete. When the communication terminal 101 receives a notification from the communication terminal cooperation module 107 that the image of the drawing result has been saved, it requests the storage service 109 to acquire the image of the drawing result, and displays the acquired image of the drawing result.

[0020] Next, a process will be described in which the website A 103 and the website B 104 enhance security by encrypted communication via HTTPS connection.

[0021] Website B104 is located on the Internet, outside the intranet, and is a common external service such as a search site or news site. Therefore, when a web browser on a PC or other device accesses website B104, the server certificate of website B104 is verified using a root certificate to verify the reliability of website B104. The root certificate used here is generally publicly available and is typically installed in the operating system or web browser on the PC in advance. Even in a cloud browser, the root certificate of website B104 is stored in the operating system or browser engine 108 of the virtual machine 105, so the reliability of website B104 can be verified and website B104 can be accessed.

[0022] On the other hand, website A103 is a website published within the intranet, and has been issued a dedicated server certificate and dedicated root certificate, enhancing security through encrypted communication via HTTPS connection.If a PC is on the same intranet, the dedicated root certificate for website A103 can be additionally registered, so the reliability of website A103 can be verified on the PC and it can be accessed.

[0023] However, in a cloud browser, it is necessary to verify the reliability of website A103 on a virtual machine 105 outside the intranet, but verification cannot be performed unless the dedicated root certificate of website A within the intranet is held, and access cannot be made as is.

[0024] In this embodiment, we will explain the process of verifying the reliability of website A103, which is required when accessing website A103 in a cloud browser, which is located within an intranet and has enhanced security through encrypted communication via HTTPS connection.

[0025] In addition, the intranet 102 may monitor access from outside the intranet by installing a proxy, etc. There are various methods for accessing the intranet from outside, such as tunneling communication, but in this embodiment, a detailed description of the method for accessing the intranet from outside will be omitted. In this embodiment, the image generation system 106 will be described on the premise that it can access the communication terminal 101 and website A 103 via the gateway 110.

[0026] 2 is a block diagram showing an example of the hardware configuration of the communication terminal 101 in this embodiment. The communication terminal 101 mainly comprises a controller unit 201 that controls the entire device, an interface device 202, a hard disk 203, and a touch panel display 207. The controller unit 201 comprises a CPU 204, a ROM 205, a RAM 206, etc.

[0027] The interface device 202 is an interface that connects the communication terminal 101 to a network, etc. Through the interface device 202, the communication terminal 101 can connect to the image generation system 106, website A 103, and website B 104 and send and receive data.

[0028] The CPU 204 executes the processing of each processing unit in the communication terminal 101. The ROM 205 stores various programs executed by the CPU 204, data required by the programs, etc. Some programs and data are stored in advance in the hard disk 203, which is an external storage device, and are read into the RAM 206 for execution. The program for controlling the function of sending a root certificate of a site within the intranet in the present invention is saved in the ROM 205 or the hard disk 203, and is executed by the CPU 204. The RAM 206 is a working area for each processing unit in the communication terminal 101, and temporarily stores data used during program execution.

[0029] In this embodiment, the touch panel display 207 is a device that serves as both a display unit and an operation unit, and displays various image information in a display area and accepts input by touching by the user. In this embodiment, the touch panel display 207 displays an execution screen of a viewer, which is an application that acquires and displays an image of a rendered web page. Furthermore, UI operation items such as buttons that respond to input operations from the user and a software keyboard required for character input are displayed as a GUI (Graphical User Interface). The touch panel display 207 includes a touch sensor that is installed in correspondence with the display area. When touched by a user's finger or the like, a signal detected by the touch sensor is processed by a touch sensor program stored in the ROM 205, and the touched position is calculated as coordinates on the touch panel display 207. The touched UI operation item and the operation content are acquired from the calculated coordinates and the coordinates of the UI operation items that constitute the GUI displayed on the touch panel display 207 by a program that displays the GUI.

[0030] 3 is a block diagram showing an example of the hardware configuration of the virtual machine 105 in this embodiment. The virtual machine 105 mainly includes a controller unit 301 that controls the entire device, an interface device 302, and a hard disk 303. The controller unit 301 includes a CPU 304, a ROM 305, a RAM 306, etc.

[0031] The CPU 304 executes the processing of each processing unit in the virtual machine 105. The ROM 305 stores various programs executed by the CPU 304, data required by the programs, and the like. Some programs and data are stored in advance in the hard disk 303, which is an external storage device, and are read into the RAM 306 for execution. A program for controlling verification of the reliability of the website A 103 using the root certificate sent from the communication terminal 101 in the present invention is saved in the ROM 305 or the hard disk 303. The processing is then executed by the CPU 304. The RAM 306 is a working area for each processing unit in the virtual machine 105, and temporarily stores data used during program execution.

[0032] The interface device 302 is an interface that connects the virtual machine 105 to a network, etc. The virtual machine 105 can connect to the communication terminal 101, website A 103, website B 104, and storage service 109 via the interface device 302 to send and receive data.

[0033] Next, the overall flow of processing in this embodiment executed by the communication terminal 101 will be described with reference to the flowchart shown in Fig. 4. The processing of each flowchart explained in Fig. 4 is realized by the CPU 204 storing a program stored in the ROM 205 in the RAM 206 and executing it. Hereinafter, each process (step) in the flowchart will be explained with an S added to the beginning of the reference numeral.

[0034] In S401, the communication terminal 101 transmits an instruction to start the cloud browser to the image generation system 106.

[0035] In S402, a cloud browser startup result is received from the image generation system 106.

[0036] In S403, it is determined from the result received in S402 whether the cloud browser has been launched. If it has been launched (YES in S403), the process proceeds to S404. If it has not been launched (NO in S403), the process ends.

[0037] In S404, the communication terminal 101 sends the root certificate of the site within the intranet held by the communication terminal 101 to the cloud browser started by the image generation system 106, that is, the virtual machine 105. For example, the communication terminal 101 stores the root certificate in its own common area. If the communication terminal 101 holds multiple root certificates, it sends all of them.

[0038] In S405, a user operation on the screen of the communication terminal 101 is detected.

[0039] In S406, it is determined whether the operation detected in S405 is input of a URL for accessing a website. In this embodiment, it is assumed that a URL for accessing website A103 is input in S405. If the operation in S405 is URL input (YES in S406), the process proceeds to S407. If the operation is not URL input (NO in S406), the process proceeds to S408. The user may input the URL directly using a software keyboard displayed on the screen, or may specify the URL using a function equivalent to a bookmark in a general web browser; this is not limited to this embodiment.

[0040] In S407, the URL input by the user on the communication terminal 101 is transmitted to the image generation system 106.

[0041] In S409, information sent from the image generation system 106 is received. This information includes a status indicating that drawing has been completed, a URL for accessing the drawing results in the storage service 109 of the image generation system 106 that stores the drawing results, error information indicating that drawing was not possible, etc.

[0042] In S410, it is determined whether the information received in S409 includes information indicating that rendering for the URL transmitted in S407 by the image generation system 106 has been completed. If it does (YES in S410), the process proceeds to S411. If it does not (NO in S410), the process proceeds to S412.

[0043] In S411, the URL for accessing the rendering result in the storage service 109 received in S409 is used to access the storage service 109 of the image generation system 106, and the rendering result stored therein is acquired.

[0044] In S412, the rendering result acquired in S411 is displayed on the display 207 of the communication terminal 101. That is, the user can see the screen of the website that would appear if accessed using the URL entered by the user.

[0045] In S413, it is determined whether the information received in S409 includes error information indicating that drawing was not possible. If it does (YES in S413), the process proceeds to S414. If it does not include error information, the process returns to S405.

[0046] In S414, the error information received in S409 is displayed on the display 207 of the communication terminal 101.

[0047] In S408, it is determined whether the operation detected in S405 is an instruction to terminate the cloud browser. If it is an instruction to terminate (YES in S408), the process proceeds to S415. If it is not an instruction to terminate (NO in S408), the process returns to S405.

[0048] In S415, the root certificate deletion instruction sent in S404 is sent to the image generation system 106.

[0049] Next, the overall processing flow of this embodiment of the image generation system 106 on the cloud server will be described with reference to the flowchart shown in Fig. 5. Note that the processing of each flowchart in Fig. 5, which explains the processing of the virtual machine 105 and the browser engine 108, is realized by the CPU 304 storing a program stored in the ROM 305 in the RAM 306 and executing it. Hereinafter, each process (step) in the flowchart will be described with an S added to the beginning of the reference numeral.

[0050] In S501, the gateway 110 of the image generation system 106 receives a cloud browser startup instruction sent from the communication terminal 101.

[0051] In S502, a function of the gateway 110, such as a load balancer, selects an available virtual machine at the timing when the cloud browser startup instruction notification is received from the communication terminal 101 in S501. In other words, the image generation system 106 can use multiple virtual machines and can select a virtual machine that is not in use at the time of the notification. In this embodiment, the following description will be given assuming that virtual machine 105 is selected.

[0052] In S503, the communication terminal cooperation module 107 of the virtual machine 105 selected in S502 executes the cloud browser startup process based on the cloud browser startup instruction. Note that for the steps from S503 onwards, the processing flow of the virtual machine 105 will be described.

[0053] In S504, the communication terminal cooperation module 107 transmits to the communication terminal 101 a startup completion notification indicating that the startup of the cloud browser has been completed.

[0054] In S505, the communication terminal link module 107 receives the root certificate of the site within the intranet from the communication terminal 101.

[0055] In S506, the root certificate received in S505 is placed in a common area of ​​the virtual machine 105 that can be used by the communication terminal cooperation module 107 and the browser engine .

[0056] In S507, the communication terminal link module 107 receives an operation from the communication terminal 101.

[0057] In S508, it is determined whether the operation received in S507 is an operation to access a URL. If it is an operation to access a URL (YES in S508), the process proceeds to S509. If it is not an operation to access a URL (NO in S508), the process proceeds to S510.

[0058] In S509, the terminal link module 107 passes the URL to the browser engine 108, and the browser engine 108 accesses the URL received in S507 via the gateway 110. In this embodiment, the URL received in S507 is a URL for accessing the website A103. The website A103 is a website published within an intranet, and has issued a dedicated server certificate and a dedicated root certificate to enhance security through encrypted communication via HTTPS connection. Therefore, when the browser engine 108 accesses the website A103, the server certificate of the website A103 can be obtained.

[0059] In S511, the browser engine 108 verifies the reliability of the website A103 accessed in S509. The browser engine 108 performs verification using the server certificate of the website A103 acquired in S509 and the root certificate for the website A103 from among the root certificates placed in S506.

[0060] In S512, the result of the verification in S511 is judged. If the verification confirms the reliability of the website (YES in S512), the process proceeds to S513. If the reliability cannot be confirmed (NO in S512), for example, if an error occurs during the reliability verification, the process proceeds to S514.

[0061] In S513, the browser engine 108 generates a rendering result image of the Web site A 103, and when the rendering is complete, notifies the communication terminal link module 107 of the rendering completion.

[0062] In S515 , the communication terminal cooperation module 107 transmits the drawing result image to the storage service 109 .

[0063] In S516, the communication terminal cooperation module 107 transmits to the communication terminal 101 a URL for accessing the rendering result image transmitted to the storage service 109 in S515.

[0064] In S514, the communication terminal link module 107 transmits verification error information to the communication terminal 101.

[0065] In S510, it is determined whether the operation received in S507 is an operation to instruct deletion of the root certificate. If it is an operation to instruct deletion (YES in S510), the process proceeds to S517. If it is not an operation to instruct deletion (NO in S510), the process returns to S507.

[0066] In S517, the communication terminal link module 107 deletes the root certificate that was placed in S506.

[0067] As described above, by the processing on the communication terminal 101 side in Figure 4 and the processing on the image generation system 106 side in Figure 5, the reliability of website A103 within the intranet of 102 can be verified using the cloud browser of the image generation system 106, and access to it becomes possible.

[0068] In this embodiment, an example has been described in which a dedicated root certificate is sent when a command to start a cloud browser on a communication terminal is issued as the starting point. Alternatively, the dedicated root certificate may be sent from the communication terminal to the image generation system in advance, and the image generation system may place the certificate on a specified virtual machine when the cloud browser is started.

[0069] Example 2 In this embodiment, it is determined whether or not the URL entered by the user at the communication terminal 101 in the first embodiment is for access to a website within the intranet, and the processing when it is a URL for access to a website within the intranet will be described with reference to Figures 6 and 7. Note that in this embodiment, the description of parts that overlap with the processing in the first embodiment will be omitted.

[0070] Fig. 6 is a description using a part of the flowchart of Fig. 4, and the description of the overlapping processing will be omitted. The flowchart of Fig. 6 shows the flow of processing after the determination of YES in S406 in the flowchart of Fig. 4. Note that in this embodiment, step S404 described as the processing in embodiment 1 is unnecessary.

[0071] In S601, the communications terminal 101 determines whether the URL entered by the user is for accessing a website within the intranet, i.e., whether a dedicated root certificate is required. If a dedicated root certificate is required (YES in S601), the process proceeds to S602. If a dedicated root certificate is not required (NO in S601), the process proceeds to S407. To determine whether a dedicated root certificate is required, the URL character string can be analyzed, or information about websites within the intranet can be stored in advance and analyzed by comparing it with that information, but this is not limited to this method.

[0072] In S602, the communication terminal 101 transmits the URL input by the user and a dedicated root certificate to the image generation system 106.

[0073] Fig. 7 is a description using a part of the flowchart of Fig. 5, and a description of overlapping processing will be omitted. The flowchart of Fig. 7 shows the flow of processing after the determination of YES in S508 in the flowchart of Fig. 5. Note that in this embodiment, steps S505 and S506 described as processing in embodiment 1 are unnecessary.

[0074] In S701, it is determined whether the operation information received in S507 also includes a dedicated root certificate. If it does (YES in S701), the process proceeds to S702. If it does not (NO in S701), the process proceeds to S509.

[0075] In step S702, the communication terminal interaction module 107 places the received dedicated root certificate in a common area of ​​the virtual machine 105 that can be used by the communication terminal interaction module 107 and the browser engine .

[0076] From the above results, it is possible to transmit a dedicated root certificate from the communication terminal 101 to the image generation system 106 only when a URL requiring a dedicated root certificate is entered. If all dedicated root certificates held by the communication terminal 101 are sent when the cloud browser shown in the first embodiment is started, the more root certificates there are, the longer it takes to send the root certificates, and the longer the startup time of the cloud browser becomes. Therefore, this embodiment makes it possible to prevent the startup time of the cloud browser from becoming slow.

[0077] If the URL entered by the user is a website within an intranet and a dedicated root certificate is required for access, the communication terminal 101 may check with the image generation system 106 whether the dedicated root certificate is already available. If the result of the check shows that the dedicated root certificate is not available, the communication terminal 101 may transmit the dedicated root certificate.

[0078] Alternatively, the image generation system 106 may transmit error information indicating that the reliability could not be confirmed and the URL information in question to the communication terminal 101, and the communication terminal 101 may check whether or not there is a dedicated root certificate corresponding to the URL, and if there is, send it. By performing this processing, it becomes possible to handle cases where a dedicated root certificate is required when, for example, link information to another website is described in the web content of a website and the link information is accessed by touching it.

[0079] (Other Examples) Alternatively, a recording medium storing software program code for implementing the above-described functions may be supplied to a system or device, and the computer (CPU, MPU) of the system or device may read and execute the program code stored in the recording medium. In this case, the program code itself read from the recording medium will implement the functions of the above-described embodiments, and the recording medium storing the program code will constitute the above-described device.

[0080] Examples of storage media that can be used to supply the program code include flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, magnetic tapes, non-volatile memory cards, ROMs, and DVDs.

[0081] In addition, the above-mentioned functions may be realized not only by the computer executing the read program code, but also by the operating system (OS) running on the computer performing some or all of the actual processing based on the instructions of the program code. OS is an abbreviation for Operating System.

[0082] Furthermore, the program code read from the storage medium may be written to a memory provided on a function expansion board inserted into a computer or a function expansion unit connected to the computer, and a CPU provided on the function expansion board or function expansion unit may then perform some or all of the actual processing based on the instructions of the program code to realize the above-mentioned functions.

[0083] The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program.The present invention can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0084] The disclosure of each of the above-described embodiments also includes the following configurations.

[0085] (Configuration 1) An information processing device that provides a rendering result of a web page based on a request from a communication terminal connected to an intranet, a receiving means for receiving a root certificate of a website within the intranet from the communication terminal; a verification unit that verifies the reliability of the website within the intranet by using the root certificate when rendering a web page on the website within the intranet; An information processing device comprising:

[0086] (Configuration 2) The method further includes a deletion means for deleting the root certificate. 2. The information processing device according to configuration 1,

[0087] (Configuration 3) The method further includes a notification unit that, when the receiving unit receives from the communication terminal a notification of confirmation of the presence or absence of the root certificate of the website within the intranet, notifies the communication terminal of the presence or absence of the root certificate. 3. The information processing device according to configuration 1 or 2.

[0088] (Configuration 4) When rendering the web page on the website within the intranet, The method further comprises a transmitting means for transmitting, to the communication terminal, when an error occurs in the verification of the reliability of the website, the error information and the URL of the website where the error occurred. 4. The information processing device according to any one of configurations 1 to 3.

[0089] (Configuration 5) A communication terminal that requests a rendering result of a web page from an information processing device, a connection means for connecting to an intranet; an acquisition means for acquiring a URL for accessing the web page; an analysis means for, when the URL is acquired, analyzing whether the URL is a URL of a website within an intranet and whether a dedicated root certificate is required to access the URL; a transmitting means for transmitting the dedicated root certificate to the information processing device when the dedicated root certificate is required as a result of the analysis by the analyzing means; A communication terminal comprising:

[0090] (Configuration 6) If the result of the analysis by the analyzing means indicates that the dedicated root certificate is necessary, the information processing device further comprises a confirming means for confirming whether or not the dedicated root certificate is present. 6. The communication terminal according to configuration 5. [Explanation of symbols]

[0091] 100 Information Processing Systems 101 Communication terminal 102 Intranet 103 Website A 104 Website B 105 Virtual Machines 106 Image Generation System 107 Communication terminal link module 108 Browser Engine 109 Storage Services 110 Gateway 201 Controller 202 Interface Device 203 Hard Disk 204 CPU 205 ROM 206 RAM 207 Display 301 Controller 302 Interface Device 303 Hard Disk 304 CPU 305 ROM 306 RAM

Claims

1. An information processing device that provides a rendering result of a web page in response to a request from a communication terminal connected to an intranet, a receiving means for receiving a root certificate of a Web site within the intranet from the communication terminal; a verification unit that verifies the reliability of the website within the intranet by using the root certificate when rendering a web page on the website within the intranet; An information processing device comprising:

2. The method further includes a deletion means for deleting the root certificate.

2. The information processing apparatus according to claim 1, wherein:

3. The system further includes a notification unit that, when the receiving unit receives from the communication terminal a notification of confirmation of the presence or absence of the root certificate of the Web site within the intranet, notifies the communication terminal of the presence or absence of the root certificate.

3. The information processing apparatus according to claim 2, wherein:

4. When rendering the web page on the web site within the intranet, The system further comprises a transmitting means for transmitting, when an error occurs in the verification of the reliability of the site, the error information and the URL of the website where the error occurred to the communication terminal.

3. The information processing apparatus according to claim 2, wherein:

5. A communication terminal that requests a rendering result of a web page from an information processing device, a connection means for connecting to an intranet; an acquisition means for acquiring a URL for accessing the web page; an analysis means for analyzing, when the URL is acquired, whether the URL is a URL of a website within an intranet and whether a dedicated root certificate is required for access; a transmitting means for transmitting the dedicated root certificate to the information processing device when the dedicated root certificate is required as a result of the analysis by the analyzing means; A communication terminal comprising:

6. If the result of the analysis by the analyzing means indicates that the dedicated root certificate is necessary, the information processing device further comprises a confirming means for confirming whether or not the dedicated root certificate is present.

6. The communication terminal according to claim 5.

7. An information processing system having a communication terminal connected to an intranet and an information processing device that provides a rendering result of a web page based on a request from the communication terminal, The communication terminal an analysis means for, when a URL for accessing the web page is input, analyzing whether the URL is a URL for a web site within an intranet and whether a dedicated root certificate is required for accessing the web page; a transmitting means for transmitting a dedicated root certificate to the information processing device if a result of the analyzing means indicates that a dedicated root certificate is required; The information processing device includes: a receiving means for receiving a root certificate of a Web site within the intranet from the communication terminal; When rendering a web page on a site within the intranet, a verification unit that verifies the reliability of the web site within the intranet using the root certificate, The information processing device accesses a website within the intranet where the communication terminal is located, and provides the communication terminal with a rendering result of the web page on the intranet website. An information processing system comprising:

Images