Cookie termination processing program and relay device

Abstract

To improve convenience regarding the use of cookies when each terminal device connected to a LAN uses a Web page, even if a user is not aware of the use of cookies.SOLUTION: When a request to access a Web page is received from PC3 connected to a LAN, in an acquisition step, consent / disagreement storage means is referenced to on the basis of the domain of a server device to which an access request is sent, and stored information is acquired (Step S103). When the stored information is acquired in the acquisition step, an access request including information indicating consent / disagreement to the use of cookies contained in the stored information is sent to the server device that provides the Web page in a request transmission step (Steps S107, S110, and S111).SELECTED DRAWING: Figure 7

Description

[Technical Field]

[0001] The present invention relates to a program used in a relay device for connecting a plurality of terminal devices connected to a LAN (Local Area Network) to a WAN (Wide Area Network), and to the relay device. [Background technology]

[0002] When browsing web pages (websites), information called cookies is often used. Cookies are information provided by the server device that provides the web page to the browsing PC (Personal Computer) or smartphone and stored in the browser used for browsing. Specifically, (1) when browsing a web page, the server device passes an identifier that distinguishes the browser's status to the browser in the HTTP (Hyper Text Transfer Protocol) header. (2) The browser retains this identifier, and the next time it communicates with the server device, it sends the retained identifier in the HTTP header. (3) The server device uses the identifier to customize the content to suit the user who sent it and passes it to the browser. In this case, if necessary, a new identifier is also included in the HTTP header. The identifier above corresponds to a cookie.

[0003] A terminal device such as a PC receives cookies (cookie information), which are information about the browsing status of a web page, from a server device and stores this information in the browser, allowing the cookie to be passed on to the server device for subsequent processing. By using cookies, even if you log in to a website once by entering your ID (identification) and password, you can access the website again after a while without having to enter your ID and password again. Also, suppose you are shopping on a shopping site and log out with items still in your cart. In this case, if cookies are used, when you log in to the same shopping site again after a while, the items in your cart will remain and you will be able to continue shopping.

[0004] As such, cookies are useful information for improving the user experience of web pages. However, because cookies contain information about users (personal information) when using a web page, their use requires the user's consent. For this reason, when using a web page, the server device providing the web page provides a selection screen (pop-up screen) to the user's PC or smartphone, prompting the user to select whether to agree or disagree to the use of cookies. However, when a user receives services from multiple linked domains (server devices), responding to requests for selection from each domain can be cumbersome. For this reason, Patent Document 1, described below, discloses an invention relating to an information processing device and program that, when a user receives services from multiple linked domains, does not require the user to obtain consent for the use of cookies each time the user accesses each domain. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Publication No. 2023-170155 Summary of the Invention [Problem to be solved by the invention]

[0006] The invention disclosed in Patent Document 1 is useful when a user receives services from multiple linked domains. However, for example, in a LAN system established in a company, even when multiple terminal devices such as PCs connected to the LAN each access the same web page, the user must input a selection of whether to agree or disagree to the use of cookies on each terminal device. This is because cookies must be used separately for each terminal device connected to the LAN. Thus, it is inefficient to have to input a selection of whether to agree or disagree to the use of cookies on each terminal device connected to the LAN.

[0007] Furthermore, there are cases where it is undesirable to retain cookies in the browsers of terminal devices connected to a LAN. Terminal devices, such as PCs used in a company, are loaned to employees by the company and are primarily used by the employees within the company. However, if for some reason the terminal device loaned to an employee is taken outside the company and used, if cookies remain in the browser, it becomes possible to determine what web pages the employee used and how, which is undesirable. Of course, the above-mentioned problem does not arise if the cookies stored in the browser of the terminal device are deleted. However, there are also cases where employees do not know how to delete cookies stored in the browser, or do not even realize the need to delete cookies stored in the browser.

[0008] In view of the above, an object of the present invention is to improve convenience regarding the use of cookies when each terminal device connected to a LAN uses a web page, without the user being aware of the use of cookies. [Means for solving the problem]

[0009] In order to solve the above problem, the cookie termination processing program of the invention described in claim 1 is: A cookie termination processing program executed on a computer installed in a relay device that relays between a WAN (Wide Area Network) and a LAN (Local Area Network), the relay device includes consent / non-consent storage means for storing a domain of a server device that provides a web page and information indicating consent / non-consent to the use of cookies in association with each other; an acquisition step of, when an access request including terminal identification information of the terminal device and a URL (Uniform Resource Locator) of a web page is received from a terminal device connected to the LAN, referencing the consent / disagreement storage means and acquiring stored information based on the domain of the server device to which the access request is sent; a request transmission step of including information indicating consent / non-consent to the use of cookies, which is information included in the stored information, in the access request and transmitting the request to the server device when the stored information is successfully acquired in the acquisition step; The present invention is characterized by having the following.

[0010] According to the cookie termination processing program of the invention described in claim 1, suppose that a request to access a web page is received from a terminal device connected to a LAN. In this case, in an acquisition step, the consent / disagreement storage means is referenced based on the domain of the URL included in the access request (the domain of the destination server device), and stored information is acquired. If the stored information is acquired in the acquisition step, an access request including information indicating consent / disagreement to the use of cookies included in the stored information is sent to the server device that provides the web page in a request transmission step.

[0011] This eliminates the need to select whether to agree or disagree to the use of cookies on the terminal device that sent the access request, if the agreement / disagreement storage means contains information indicating whether to agree or disagree to the use of cookies. As is well known, a URL consists of protocol, host, domain, directory, and file information, of which the domain is information indicating the storage location of the target web page, i.e., the server device that provides the target web page. The directory and file are information identifying the target web page. [Effects of the Invention]

[0012] According to the present invention, it is possible to improve convenience in terms of the use of cookies when using a web page in each of the terminal devices connected to a LAN. [Brief explanation of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram illustrating an example of a configuration of a network system according to an embodiment. [Figure 2] FIG. 1 is a block diagram illustrating an example of the configuration of a UTM (Unified Threat Management) device used in a network system according to an embodiment. [Figure 3] 3 is a diagram illustrating an example of data stored in an agreement / disagreement information storage unit of the UTM device according to the embodiment. FIG. [Figure 4] 10 is a diagram illustrating an example of data stored in a terminal-specific URL-specific cookie storage unit of a UTM device according to an embodiment. FIG. [Figure 5] FIG. 2 is a sequence diagram illustrating a basic operation of the network system according to the embodiment. [Figure 6] This is a sequence diagram continuing from FIG. 5. [Figure 7] 10 is a flowchart illustrating processing performed by a program executed in a UTM device according to an embodiment. [Figure 8]8 is a flowchart continuing from FIG. 7. DETAILED DESCRIPTION OF THE INVENTION

[0014] An embodiment of a program and device according to the present invention will be described below with reference to the drawings. In the embodiment described below, the program according to the present invention will be described as being executed by a UTM device. The device according to the present invention will be described as being applied to a UTM device. In this specification, WAN refers to a network that covers a wider area than a LAN or a MAN (Metropolitan Area Network), and is synonymous with the Internet in this specification. In addition, the LAN will be described as being formed within a specific company.

[0015] [Network system configuration example] FIG. 1 is a diagram illustrating an example of the configuration of a network system according to an embodiment. In FIG. 1, the Internet 4 shown in the center represents a computer network interconnected using Internet Protocol Suite technology, also known as a WAN. A large number of server devices 5(1), 5(2), 5(3), ... are connected to the Internet 4. Each of the server devices 5(1), 5(2), 5(3), ... is also called a web server, and is a group of server devices that provide web pages (websites) according to HTTP. In other words, a web server is a service program that provides browsers with the display of HTML (HyperText Markup Language) and objects (images, etc.), or a server computer on which the service runs.

[0016] A UTM device 1 is also connected to the Internet 4. A plurality of PCs 3(1), 3(2), 3(3), ... are connected to the UTM device 1 via a LAN 2, thereby constituting a LAN system. The UTM device 1 integrates a plurality of different security functions into a single piece of hardware, enabling centralized security management of networks, etc. In other words, the UTM device 1 efficiently and comprehensively protects a LAN system formed within a company from threats such as computer viruses and hacking. As shown in FIG. 1, the UTM device 1 of this embodiment also functions as a relay device that monitors, controls, and manages communications between the Internet (WAN) 4 and the LAN 2 and communications between PCs connected to the LAN 2.

[0017] As is well known, each of PCs 3(1), 3(2), 3(3), ... is an information processing device that can execute various application software (hereinafter referred to as "apps") to process information. For example, a word processing app can be executed to create documents, or a spreadsheet app can be executed to create charts and graphs. Each of PCs 3(1), 3(2), 3(3), ... is also equipped with a communication function. Therefore, each of PCs 3(1), 3(2), 3(3), ... can send and receive e-mail using email software. Each of PCs 3(1), 3(2), 3(3), ... can use a browser (browsing software) to view web pages stored on server devices 5(1), 5(2), 5(3), ... provided on the Internet 4.

[0018] Sending and receiving e-mails and browsing of web pages through each of PCs 3(1), 3(2), 3(3), ... are performed via UTM device 1. In this embodiment, UTM device 1 functions as a termination point with regard to the use of cookies when each of PCs 3(1), 3(2), 3(3), ... connected to LAN 2 browses a web page using a browser. In other words, cookies from a server device that provides a web page are not stored in the browsers of PCs 3(1), 3(2), 3(3), ... connected to LAN 2, and UTM device 1 handles cookie-related processing.

[0019] This prevents PC3(1), PC3(2), PC3(3), etc. connected to LAN2 from having to individually choose whether to agree or disagree to the use of cookies when viewing the same web page. More specifically, suppose a web page is first viewed through, say, PC3(1). In this case, if the choice of whether to agree or disagree to the use of cookies is made through PC3(1), then when the same web page is subsequently viewed through PC3(2) or PC3(3), the choice of whether to agree or disagree to the use of cookies will not have to be made again.

[0020] Furthermore, the UTM device 1 manages cookies from the server device for each of the PCs 3(1), 3(2), 3(3), etc. connected to the LAN 2, allowing them to be used separately. Therefore, there is no need to store and manage cookies in the browsers of each of the PCs 3(1), 3(2), 3(3), etc. This prevents the benefits of using cookies for each of the PCs 3(1), 3(2), 3(3), etc. from being hindered. Moreover, because there is no need to manage cookies in the browsers of each of the PCs 3(1), 3(2), 3(3), etc., information about the user's web page browsing status will not be leaked even if the PCs 3(1), 3(2), 3(3), etc. are taken out.

[0021] The following describes the configuration and operation of the UTM device 1 used in the network system of this embodiment. In this embodiment, each of PCs 3(1), 3(2), 3(3), ... is a commercially available, general-purpose PC, and therefore a detailed description of their configuration and operation will be omitted. Furthermore, unless otherwise necessary, PCs 3(1), 3(2), 3(3), ... will be collectively referred to as PCs 3. Furthermore, PCs 3(1), 3(2), 3(3), ... connected to the UTM device 1 via the LAN 2 may be referred to as PCs 3 subordinate to the UTM device 1. Furthermore, server devices 5(1), 5(2), 5(3), ... are already installed on the Internet 4, and therefore a detailed description of their configuration and operation will be omitted. Furthermore, unless otherwise necessary, server devices 5(1), 5(2), 5(3), ... will be collectively referred to as server devices 5.

[0022] [UTM device 1 configuration] FIG. 2 is a block diagram illustrating an example of the configuration of a UTM device 1 used in a network system according to an embodiment. A connection terminal 101T constitutes a connection terminal with the Internet (WAN) 4. A WAN I / F (Interface) 101 is a part that processes communications via the Internet 4. The WAN I / F 101 converts signals addressed to the device itself that are transmitted via the Internet 4 into signals in a format that can be processed by the device itself and then imports these signals. The WAN I / F 101 also converts signals to be transmitted from the device itself into signals in a format for transmission and sends them over the Internet 4 to the destination. Therefore, when communicating with a destination connected to the Internet 4, the communication is performed via the connection terminal 101T and the WAN I / F 101.

[0023] Although not shown, the control unit 102 is a microprocessor configured with a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), non-volatile memory, etc., and controls each part of the UTM device 1. The storage device 103 is a device unit consisting of a recording medium such as an HDD (Hard Disk Drive) or SSD (Solid State Drive) and its driver, and records, reads, modifies, deletes, etc., various data on the recording medium. In addition to storing and holding necessary data and programs, the storage device 103 is also used as a working area for temporarily storing intermediate data generated in various processes.

[0024] The connection terminal 104T constitutes the connection terminal with the LAN2. The LANI / F (Interface) 104 is a part that performs communication processing via the LAN2. That is, the LANI / F 104 converts signals sent to the device itself via the LAN2 into signals in a format that can be processed by the device itself and then imports these signals. The LANI / F 104 also converts signals to be sent from the device itself into signals in a format for transmission and sends them to the LAN2 to be transmitted to the other party. Therefore, when communication with the PC3 connected to the LAN2 is performed, it is performed via the connection terminal 104T and the LANI / F 104.

[0025] The consent / disagreement storage unit 111 stores and holds information indicating consent / disagreement to the use of cookies for each server device 5 that provides a web page. Fig. 3 is a diagram for explaining an example of data stored in the consent / disagreement storage unit 111 of the UTM device 1. As shown in Fig. 3, the consent / disagreement storage unit 111 has a storage field for the server domain and a storage field for information indicating consent / disagreement to the use of cookies (consent / disagreement classification).

[0026] The server domain storage field stores the domain of the server device 5 that provides the web page and that has sent the consent / denial selection screen for the use of cookies. The domain is information that indicates the location of the server device 5 on the Internet 4. In this embodiment, the storage field for information indicating consent / denial to the use of cookies (agree / deny classification) stores "1" if consent is selected on the consent / deny selection screen for the use of cookies, and stores "0" if no consent is selected.

[0027] The consent / disagreement storage unit 111 shown in Fig. 3 stores information that consent has been given to the use of cookies for a server device 5 whose domain is "AAAA.co.jp". Also, information that consent has been given to the use of cookies for a server device 5 whose domain is "BBBB.com" is stored. The information shown in Fig. 3 is normally stored in the browser of the PC 3 that uses the web page, but in this embodiment, it is stored in the UTM device 1.

[0028] The terminal-specific URL cookie storage unit 112 stores and holds, for each PC 3 connected to the LAN 2, a cookie from the server device 5 that is the provider of a viewed web page, for each URL (Uniform Resource Locator) of the web page. Fig. 4 is a diagram for explaining an example of data stored in the terminal-specific URL cookie storage unit of the UTM device according to the embodiment. As shown in Fig. 4, the terminal-specific URL cookie storage unit 112 has a storage field for terminal identification information, a storage field for URLs, and a storage field for cookies.

[0029] The terminal identification information storage field stores terminal identification information that enables identification of the PC 3 that requested viewing of a web page. In this embodiment, a MAC (Media Access Control) address is used as the terminal identification information. The URL storage field stores the URL of the web page that is information for uniquely identifying the web page requested to be viewed. The cookie storage field stores cookie information provided by the server device 5 that provides the web page when the web page is viewed through the PC 3. This makes it possible to know what cookie information was provided when which web page was viewed by which PC 3.

[0030] The terminal-specific URL cookie storage unit 112 shown in Figure 4 stores cookie information provided when a web page identified by the URL "www.xxx.xx.xx..." is viewed by a PC 3 identified by the MAC address "aa-bb-11." Cookie information provided when a web page identified by the URL "www.AAA.AA..." is viewed by a PC 3 identified by the MAC address "aa-bb-12." The information shown in Figure 4 is also typically stored in the browser of the PC 3 that uses the web page, but in this embodiment, it is stored in the UTM device 1.

[0031] The consent / disagreement storage unit 111 and the terminal-specific URL-specific cookie storage unit 112 are created on a recording medium of a device unit consisting of a recording medium and its driver, such as an HDD or SSD. The consent / disagreement storage unit 111 and the terminal-specific URL-specific cookie storage unit 112 may be formed on recording media of different device units, or may be formed on a recording medium of the same device unit in different recording areas.

[0032] The security function unit 120 realizes the function of centralizing security management. Specifically, although not shown, the security function unit 120 is configured to include, for example, a P2P countermeasure unit, an HP access control unit, an anti-virus unit, an anti-mail unit, an IPS / IDS unit, and a firewall unit. In other words, the security function unit 120 realizes the function of prohibiting P2P connections with parties that have not implemented security measures or with malicious parties (function as a P2P countermeasure unit). Note that "P2P" stands for "Peer to Peer," meaning that equal parties communicate directly with each other via the Internet.

[0033] Furthermore, the security function unit 120 realizes a function of prohibiting access to homepages that fall into a desired category by selecting the desired homepage category in advance (a function as a homepage access control unit). The security function unit 120 also verifies (virus checks) responses to web pages (a function as an anti-virus unit). More specifically, the security function unit 120 realizes a function of monitoring communications when browsing web pages and verifying (checking) whether images to be viewed or files to be downloaded contain viruses. The security function unit 120 also realizes a function of blocking received e-mails that contain unwanted advertisements or viruses (a function as an e-mail anti-virus unit).

[0034] The security function unit 120 also functions to prevent inappropriate intrusions and notify users of inappropriate intrusions (functioning as an IPS / IDS unit). Here, IPS is an abbreviation for Intrusion Prevention System, and IDS is an abbreviation for Intrusion Detection System. The security function unit 120 can defend against attacks by so-called malware such as worms and Trojan horses. The security function unit 120 also determines whether to supply data to LAN2 based on the data communication status, the software used, etc., and realizes a function to protect the system from attacks and unauthorized access from external networks (functioning as a firewall unit).

[0035] The cookie termination processor 130 performs processing to collectively manage and operate cookies used when browsing web pages for each PC 3 connected to the LAN 2. That is, the cookie termination processor 130 performs processing to enable the UTM device 1 to function as a termination for the use of cookies. As shown in FIG. 2, the cookie termination processor 130 includes an agreement / disagreement acquisition unit 131, an access request transmission unit 132, a cookie acquisition unit 133, a cookie recording unit 134, and a web page providing unit 135. Furthermore, the cookie termination processor 130 includes a selection screen providing unit 136, a selection information receiving unit 137, an agreement / disagreement recording unit 138, and an agreement / disagreement transmission unit 139.

[0036] The consent / disagreement acquisition unit 131 functions under the control of the control unit 102 when it receives an access request transmitted via LAN2 via the connection terminal 104T and LANI / F 104. The access request includes at least the MAC address of the sender PC 3, which is information identifying the requester (sender), and the URL of the web page that is requested to be viewed. In this case, the consent / disagreement acquisition unit 131 refers to the consent / disagreement storage unit 111 based on the domain of the URL of the target web page included in the received access request, and acquires stored information corresponding to the domain.

[0037] The access request sending unit 132 performs processing to transmit the received access request to the target server device. If the consent / disagreement acquisition unit 131 has acquired storage information, the access request sending unit 132 includes information indicating consent / disagreement to the cookie in the acquired storage information in the received access information and transmits the same to the target server device. If the consent / disagreement acquisition unit 131 has not acquired storage information, the access request sending unit 132 transmits the received access information to the target server device without adding any information. Furthermore, if the cookie acquisition unit 133, which will be described later, has acquired a cookie, the access request sending unit 132 includes the acquired cookie in the received access information and transmits the same to the target server device. Therefore, if the consent / disagreement acquisition unit 131 has acquired storage information and the cookie acquisition unit 133 has acquired a cookie, the access request sending unit 132 processes the access request to include both pieces of information and transmits it to the target server device.

[0038] Cookie acquisition unit 133 functions when stored information is acquired through consent / non-consent acquisition unit 131 and the stored information contains information indicating consent to the use of cookies. In this case, cookie acquisition unit 133 acquires a cookie by referencing terminal-specific URL-specific cookie storage unit 112 based on the terminal identification information of PC 3 that has provided the access request and the URL of the target web page, which are information contained in the received access request. As described above, in this embodiment, the terminal identification information is the MAC address of PC 3 that has provided the access request.

[0039] If cookie acquisition unit 133 is able to acquire a cookie, access request transmission unit 132 functions as described above to include the acquired cookie in the accepted access request and transmit the request to the target server device. Therefore, assume that consent / disagreement acquisition unit 131 is able to acquire corresponding stored information from consent / disagreement storage unit 111, and that the stored information is information indicating consent to the use of cookies. In this case, access request transmission unit 132 transmits the access information, including both the acquired information indicating consent to the use of cookies and the acquired cookie, to server device 5 that provides the target web page.

[0040] When access request sending unit 132 functions to send an access request from a subordinate PC 3 to the target server device 5, the requested web page is provided from that server device 5. In this case, cookie acquisition unit 133 extracts a cookie if one has been added to the provided web page. Cookie recording unit 134 associates the extracted cookie with the terminal identification information of PC 3 that requested the web page and the URL of the web page, and records them in terminal-specific URL-specific cookie storage unit 112.

[0041] As described above, when the web page providing unit 135 receives a web page including a cookie from the server device 5, it removes the cookie from the web page and provides the web page from which the cookie has been removed to the requesting PC 3. This is done by sending the web page to the LAN 2 via the LAN I / F 104 and the connection terminal 104T. Note that if a cookie has not been added to the received web page, the web page providing unit 135 provides the web page as is to the requesting PC 3.

[0042] Assume that the consent / disagreement acquisition unit 131 is unable to acquire stored information corresponding to the domain acquired from the URL of the target web page included in the access request from the consent / disagreement storage unit 111. The absence of the stored information means that, if the server device 5 providing the web page uses cookies, consent / disagreement to the use of cookies has not been selected. In this case, since there is no information indicating consent / disagreement to the use of cookies, the access request transmission unit 132 transmits the access request from PC 3 to the target server device 5 without including the information, as described above.

[0043] In this case, if the server device 5 uses cookies, the server device 5 provides a selection screen for consenting or refusing to use cookies in addition to the desired web page. When a selection screen for consenting or refusing to use cookies is provided in addition to the web page, the selection screen providing unit 136 performs processing to provide the web page and the selection screen to the PC 3 that provided the access request. This provision is also performed by sending the web page to the LAN 2 via the LAN I / F 104 and the connection terminal 104T.

[0044] As described above, when a selection input is made on the PC 3 that has been provided with the selection screen for consent / denial of cookie use and information indicating consent / denial of cookie use is transmitted, the selection information receiving unit 137 performs processing to accept this information. The information indicating consent / denial of cookie use includes the domain of the server device 5 that is the source of the web page. The domain may be extracted from the URL of the web page provided to the PC 3 that has transmitted the information indicating consent / denial of cookie use.

[0045] The consent / disagreement recording unit 138 associates the information indicating consent / disagreement to the use of cookies received by the selection information receiving unit 137 with the domain of the provider of the web page, and records the information in the consent / disagreement storage unit 111. The consent / disagreement sending unit 139 performs processing to send the information indicating consent / disagreement to the use of cookies received by the selection information receiving unit 137 to the server device 5 that is the provider of the web page.

[0046] In this way, suppose that since this is the first time a web page is accessed, there is no corresponding stored information in the consent / disagreement storage unit 111, and that a selection screen for consenting or disabling the use of cookies is provided in addition to the web page. In this case, the selection screen providing unit 136, selection information receiving unit 137, consent / disagreement recording unit 138, and consent / disagreement transmitting unit 139 function. This allows information indicating consent or disagreement to the use of cookies to be received from the requesting PC 3, and the necessary information to be prepared in the consent / disagreement storage unit 111. In addition, information indicating consent or disagreement to the use of cookies can be provided to the server device 5 that provided the selection screen, allowing the user to express their consent or disagreement to the use of cookies.

[0047] In this way, information indicating consent / denial of consent to the use of cookies is centrally managed in the consent / denial storage unit 111 of the UTM device 1. Therefore, not only when the same PC 3 views the same web page, but also when other PCs 3 view the same web page, users will not be prompted to select consent / denial regarding the use of cookies.

[0048] Furthermore, when a web page is viewed by any of the PCs 3 subordinate to the UTM device 1 and a cookie is provided by the server device 5 that provides that web page, the cookie is recorded in the terminal-specific URL cookie storage unit 112 of the UTM device 1. Therefore, when a web page is viewed through any of the PCs 3 subordinate to the UTM device 1, the corresponding cookie can be read from the terminal-specific URL cookie storage unit 112 and provided to the server device that provides that web page. This allows the PC 3 that made the access request to enjoy the benefits of using cookies, such as being provided with a web page edited according to the cookie information.

[0049] The information indicating consent / non-consent to the use of cookies is stored in the consent / non-consent storage unit 111 of the UTM device 1, and the cookies are stored in the terminal-specific URL-specific cookie storage unit 112 of the UTM device 1. Therefore, neither the information indicating consent / non-consent to the use of cookies nor the cookies themselves are provided to the PC 3 under the control of the UTM device 1 from which the web page is viewed. Therefore, the use of cookies does not increase the load on the PC 3.

[0050] [Basic Operation of Network System of Embodiment] 5 and 6 are sequence diagrams for explaining the basic operation of the network system according to the embodiment. Here, the explanation is given taking as an example a case where a user accesses a web page A that has never been accessed before via PC3(1) and PC3(2) under the control of UTM device 1.

[0051] First, when an operation to access Web page A is performed via PC3(1), PC3(1) forms an access request for Web page A and sends it to UTM device 1 via LAN2 (step S1). UTM device 1 extracts the domain from the URL of Web page A included in the access request from PC3, and references consent / disagreement storage unit 111 based on this domain to obtain information indicating consent / disagreement to cookie use (step S2). In this example, it is assumed that no information indicating consent / disagreement to cookie use has been registered. In this case, UTM device 1 sends the access request from PC3(1) to server device 5 identified by the URL without adding any other information (step S3).

[0052] Web page A is provided from server device 5, and if server device 5 uses cookies, a selection screen (pop-up screen) for consenting or refusing to use cookies is also provided (step S4). UTM device 1 provides this selection screen for consenting or refusing to use cookies, along with Web page A, to requesting PC 3(1) (step S5). PC 3(1), which has received the selection screen for consenting or refusing to use cookies, displays it on its own display unit and accepts a selection input of consent or refusal from the user. PC 3(1) transmits the accepted selection input (information indicating consent or refusal) to UTM device 1 as a response for consenting or refusing to use cookies (step S6).

[0053] The UTM device 1 associates the received consent / disagreement response with the domain of the server device 5 that is the provider of the desired web page A, and saves (records) this in the consent / disagreement storage unit 111 (step S7). The domain of the server device 5 can be extracted from the URL of web page A included in the access request. Furthermore, the UTM device 1 transmits the consent / disagreement response from PC3(1) to the server device 5 (step S8). In this embodiment, the consent / disagreement response transmitted from PC3(1) to the UTM device 1 in step S6 and transmitted from the UTM device 1 to the server device 5 in step S8 indicates consent to the use of cookies. As a result, the server device 5 is enabled to use cookies for web page A viewed by PC3(1).

[0054] Thereafter, Web page A provided by server device 5 is used via PC3(1), and operation information corresponding to the operation input made to Web page A via PC3(1) is sent from PC3(1) to UTM device 1 (step S9). UTM device 1 sends the operation information to server device 5, the provider of Web page A (step S10). Examples of operation information include input information for a member ID and password to access a members-only Web page, or input information when adding a product to a cart if Web page A is a shopping site.

[0055] In this way, when operation information from PC3(1) is provided to server device 5, server device 5 responds by transmitting cookies related to the use of web page A and a new web page to PC3(1) (step S11). UTM device 1 does not provide the cookies from server device 5 to PC3(1). UTM device 1 associates the MAC address of PC3(1), the URL of web page A to be used, and the cookie provided in step S11, and stores (records) them in terminal-specific URL-specific cookie storage unit 112 (step S12). If a web page is also provided in step S11, UTM device 1 removes the cookies from the web page and provides it to PC3(1). In this example, it is assumed that only cookies are provided in step S11.

[0056] As described above, suppose that while web page A from server device 5 is being used through PC3(1), an operation to access web page A is also performed through PC3(2). In this case, an access request for web page A is formed from PC3(2) and sent to UTM device 1 through LAN2 (step S13). UTM device 1 extracts the domain from the URL of web page A included in the access request from PC3, and based on this domain, refers to consent / disagreement storage unit 111 to obtain information indicating consent / disagreement to the use of cookies (step S14).

[0057] As described above, Web page A provided by server device 5 has already been viewed through PC3(1), and as described above, consent to the use of cookies has also been given. Therefore, information indicating consent to the use of cookies is also recorded in consent / disagreement storage unit 111 in association with the domain of server device 5 providing Web page A. Therefore, in step S14, information indicating consent to the use of cookies is acquired. In other words, in step S14, information indicating consent to the use of cookies (that cookies may be used when using Web page A) is acquired from server device 5 providing Web page A.

[0058] Furthermore, the UTM device 1 performs processing to refer to the terminal-specific URL cookie storage unit 112 and acquire the corresponding cookie based on the MAC address of PC3(2), which is the source of the current access request, and the URL of Web page A, which is the target of the request (step S15). In this embodiment, as described above, PC3(2) has never accessed Web page A, so there is no corresponding cookie in the terminal-specific URL cookie storage unit 112. Therefore, no corresponding cookie can be acquired in step S15. The UTM device 1 transmits the access request from PC3(2) to the server device 5, including information indicating consent to the use of the cookie acquired in step S14 (step S16). After this, the processing proceeds to the processing shown in FIG. 6.

[0059] Upon receiving the access request sent from the UTM device 1 in step S16, the server device 5 provides PC3(2) with web page A in response to the access request (step S17). The access request sent from the UTM device 1 in step S16 also includes information indicating consent to the use of cookies, so in step S17, a selection screen for consent / denial of consent to the use of cookies is not provided. However, because the access request includes information indicating consent to the use of cookies, cookies may be provided in addition to the web page in step S17, if necessary.

[0060] In step S17, if a cookie is provided together with the web page, the UTM device 1 does not provide the cookie to PC3(2), but instead saves (records) the cookie in the terminal-specific URL cookie storage unit 112 (step S18). That is, in step S18, the MAC address of PC3(2), the URL of web page A, and the cookie provided in step S17 are associated with each other, and saved (recorded) in the terminal-specific URL cookie storage unit 112. Thereafter, the UTM device 1 removes the cookie from the web page provided in step S17, and transmits the web page to the requesting PC3(2) (step S19).

[0061] Thereafter, Web page A provided by server device 5 is used via PC3(2), and operation information corresponding to the operation input made to Web page A via PC3(2) is sent from PC3(2) to UTM device 1 (step S20). UTM device 1 sends the operation information to server device 5, the provider of Web page A (step S21). As mentioned above, examples of operation information include input information for a member ID and password to access a members-only Web page, or input information when adding a product to a cart if Web page A is a shopping site.

[0062] In this way, when operation information from PC3(2) is provided to server device 5, server device 5 responds by transmitting cookies related to the use of web page A and a new web page to PC3(1) (step S22). UTM device 1 does not provide the cookies from server device 5 to PC3(2). UTM device 1 associates the MAC address of PC3(2), the URL of web page A to be used, and the cookie provided in step S22, and stores (records) them in terminal-specific URL-specific cookie storage unit 112 (step S23). If a web page is also provided in step S22, UTM device 1 removes the cookies from the web page and provides it to PC3(2) (step S24).

[0063] Assume that the use of Web page A using PC3(2) has ended, and an operation to end the use of Web page A has been performed through PC3(2). In this case, a termination request is sent from PC3(2) to UTM device 1 (step S25). UTM device 1 sends a termination request from PC3(2) to server device 5, the provider of Web page A (step S26). This ends the use of Web page A using PC3(2).

[0064] After this, it becomes necessary to use Web page A again using PC3(2), and an operation to access Web page A is performed through PC3(2). In this case, PC3(2) forms an access request for Web page A and sends it to UTM device 1 via LAN2 (step S27). UTM device 1 extracts the domain from the URL of Web page A included in the access request from PC3, and based on this domain, references consent / disagreement storage unit 111 to obtain information indicating consent / disagreement to the use of cookies (step S28).

[0065] As described above, Web page A provided by server device 5 has already been used through PC3(1), and as described above, consent to the use of cookies has also been given. Therefore, information indicating consent to the use of cookies is also recorded in consent / disagreement storage unit 111 in association with the domain of server device 5 providing Web page A. Therefore, in step S28, information indicating consent to the use of cookies is acquired. In other words, in step S28, information indicating consent to the use of cookies (that cookies may be used when using Web page A) is acquired from server device 5 providing Web page A.

[0066] Furthermore, the UTM device 1 performs processing to refer to the terminal-specific URL-specific cookie storage unit 112 and acquire the corresponding cookie based on the MAC address of PC3(2), which is the source of the current access request, and the URL of Web page A, which is the target of the request (step S29). As described above, Web page A has already been used through PC3(2), and the MAC address of PC3(2), the URL of Web page A, and the cookie are associated with each other and stored in the terminal-specific URL-specific cookie storage unit 112 in step S23.

[0067] Therefore, in step S29, information associating the MAC address of PC3(2), the URL of Web page A, and the cookie is acquired, and the cookie provided when Web page A was accessed using PC3(2) can be acquired. Therefore, the UTM device 1 forms an access request including the information indicating consent to the use of the cookie acquired in step S28 and the cookie acquired in step S29, and transmits this to the server device 5 (step S30).

[0068] The access request provided to server device 5 in step S30 includes the cookie and information indicating consent to the use of cookies. Therefore, server device 5 does not provide PC3(2) with a selection screen for consent / denial to the use of cookies. Furthermore, server device 5 customizes the web page to be provided to PC3(2) in accordance with the cookie included in the access request, and transmits this customized web page to PC3(2) (step S31). The customized web page is received by UTM device 1, and then transmitted to PC3(2), the requestor (step S32).

[0069] As a result, PC3(2) can reuse Web page A that it has already used, customized for that use, through the processing of steps S13 to S26. Moreover, PC3(1) and PC3(2) under the control of UTM device 1 are not provided with information indicating consent / non-consent to the use of cookies, or with cookies themselves.

[0070] [Processing performed by UTM device 1] 7 and 8 are flowcharts for explaining the processing performed by a program executed in the UTM device 1 of the embodiment. The processing shown in Fig. 7 and 8 is executed in the control unit 102 of the UTM device 1, and is performed by the control unit 102 controlling each unit of the UTM device 1. While the UTM device 1 is operating, the processing shown in Fig. 7 and 8 is performed under the control of the control unit 102.

[0071] The control unit 102 receives an access request from a subordinate PC 3 via the connection terminal 104T and the LAN I / F 104 (step S101), and determines whether or not the access request has been received (step S102). If it is determined in the determination process of step S102 that an access request has not been received, the control unit 102 repeats the process from step S101 and waits for the arrival of an access request. Assume that it is determined in the determination process of step S102 that an access request has been received from a subordinate PC 3. In this case, the control unit 102 controls the consent / disagreement acquisition unit 131 and performs a process of acquiring information indicating consent / disagreement to the use of cookies by referring to the consent / disagreement storage unit 111 (step S103).

[0072] In step S103, the consent / disagreement acquisition unit 131 extracts the domain from the URL of the target web page included in the access request received in step S101. Based on the extracted domain, the consent / disagreement acquisition unit 131 references the consent / disagreement storage unit 111 and acquires information indicating consent / disagreement to the use of cookies. As a result, if the web page that the PC 3 that sent the access request is attempting to view has been viewed in the past by any PC 3 under the UTM device 1 and consent / disagreement to the use of cookies has been set, this information can be acquired.

[0073] After the process of step S103, the control unit 102 determines whether or not there is information indicating consent / non-consent to the use of cookies (whether or not it has been acquired) (step S104). Assume that in the determination process of step S104, it is determined that there is no information indicating consent / non-consent to the use of cookies (whether or not it has been acquired). In this case, the control unit 102 controls the access request sending unit 132 to send the received access request, without adding any information, to the server device 5 that provides the target Web page (step S105).

[0074] Furthermore, suppose that the determination process in step S104 determines that information indicating consent / non-consent to the use of cookies is present (has been acquired). In this case, the control unit 102 determines whether the acquired information indicating consent / non-consent to the use of cookies is information indicating consent (step S106). In the determination process in step S106, suppose that the information acquired in step S103 is not information indicating consent (information indicating non-consent). In this case, the control unit 102 controls the access request sending unit 132 to add information indicating non-consent to the use of cookies to the received access request and send it to the server device 5 that provides the target Web page (step S107).

[0075] Also, assume that it is determined in the determination process of step S106 that the acquired information is information indicating consent. In this case, control unit 102 controls cookie acquisition unit 133 to perform a process of acquiring a corresponding cookie by referring to terminal-specific URL-specific cookie storage unit 112 (step S108). In step S108, cookie acquisition unit 133 extracts the MAC address and URL of PC 3, the source of the access request, included in the access request received in step S101. Based on the extracted MAC address and URL, cookie acquisition unit 133 refers to terminal-specific URL-specific cookie storage unit 112 and acquires the corresponding cookie. As a result, if PC 3, the source of the access request, has previously viewed the web page and received a cookie at that time, this cookie can be acquired.

[0076] After the process of step S108, the control unit 102 determines whether a cookie exists (whether the cookie has been acquired) (step S109). It is assumed that the determination process of step S109 determines that a cookie does not exist. In this case, the control unit 102 controls the access request sending unit 132 to add information indicating consent to the use of cookies to the received access request, and transmits the request to the server device 5 that provides the target Web page (step S110). It is assumed that the determination process of step S109 determines that a cookie exists. In this case, the control unit 102 controls the access request sending unit 132 to add information indicating consent to the use of cookies and the acquired cookie to the received access request, and transmits the request to the server device 5 that provides the target Web page (step S111).

[0077] As described above, the access request sent in step S105 is for a web page that has never been viewed before. Therefore, if server device 5, which provides the web page, uses cookies, it will send a selection screen (pop-up screen) for agreeing or disagreeing to the use of cookies along with the web page. Furthermore, since the access request sent in step S107 includes information indicating disagreement to the use of cookies, the selection screen for agreeing or disagreeing to the use of cookies will not be displayed, and cookies will not be used.

[0078] Furthermore, since the access request sent in step S110 has information indicating consent to the use of cookies attached, a screen for selecting whether to consent or not to the use of cookies will not be displayed, but cookies will still be used. Furthermore, the access request sent in step S111 has information indicating consent to the use of cookies and cookies attached. Therefore, a screen for selecting whether to consent or not to the use of cookies will not be displayed, and a web page customized according to the cookies provided up to that point will be displayed.

[0079] As described above, when an access request is sent to the server device 5 that provides the target web page through any of steps S105, S107, S110, and S111, the server device 5 sends the web page. The control unit 102 of the UTM device 1 receives the web page from the server device 5 through the connection terminal 101T and the WAN I / F 101 (step S112). After that, the control unit 102 determines whether a selection screen (pop-up screen) for agreeing / disabling the use of cookies has been provided in addition to the web page (step S113). If it is determined in the determination process of step S113 that the selection screen has not been provided, the process proceeds to step S114 in FIG. 8, and if it is determined that the selection screen has been provided, the process proceeds to step S118 in FIG. 8.

[0080] First, a case where it is determined in the determination process of step S113 that the selection screen has not been provided will be described. In this case, control unit 102 determines whether a corresponding cookie has been added to the provided web page (step S114). If it is determined in the determination process of step S114 that a cookie has been added, control unit 102 controls cookie recording unit 134 to store (record) the cookie in terminal-specific URL-specific cookie storage unit 112 (step S115). In step S115, the MAC address of PC 3 that made the access request, the URL of the requested and provided web page, and the cookie are associated and stored in terminal-specific URL-specific cookie storage unit 112.

[0081] Thereafter, control unit 102 controls web page providing unit 135 to first remove cookies added to the received web page (step S116), and then provide the web page from which the cookies have been removed to requesting PC 3 (step S117). On the other hand, if it is determined in the determination process of step S114 that cookies have not been added, control unit 102 controls web page providing unit 135 to provide the received web page to requesting PC 3 (step S117). In this case, since cookies are not disabled on the received web page, the received web page can be provided to requesting PC 3 as is.

[0082] Next, a case where it is determined in the determination process of step S113 that the selection screen has been provided will be described. First, the control unit 102 controls the web page providing unit 135 to provide the received web page to the PC 3 that requested the web page, and also controls the selection screen providing unit 136 to provide the received selection screen to the PC 3 that requested the web page (step S118). Next, the control unit 102 controls the selection information receiving unit 137 to receive and accept selection information for the selection screen from the PC 3 that provided the selection screen, which arrives via the connection terminal 104T and the LAN I / F 104 (step S119). This selection information is selection information for the selection screen for agreeing / refusing to agree to the use of cookies, and is information indicating whether or not to agree to the use of cookies.

[0083] Next, control unit 102 controls consent / disagreement recording unit 138 to associate the selection information received in step S119 with the domain of the server device that is the source of the Web page, and store (record) it in consent / disagreement storage unit 111 (step S120). After that, control unit 102 controls consent / disagreement transmission unit 139 to transmit the selection information (information indicating consent / disagreement to the use of cookies) stored in step S120 to server device 5 that is the source of the Web page (step S121). This allows the server device that is the source of the Web page to know whether PC 3 that provided the Web page consented to or disagreed to the use of cookies.

[0084] After the processes of steps S117 and S121, the requested web page is provided to the PC 3 that requested the web page. In addition, information indicating consent / non-consent to the use of cookies for that web page is grasped by both the UTM device 1 and the server device 5 that provides the web page.

[0085] The control unit 102 of the UTM device 1 receives a request from PC3 that provided the web page, arriving via the connection terminal 104T and LAN I / F 104 (step S122), and determines whether or not a request from PC3 has been received (step S123). If it is determined in the determination process of step S123 that a request from PC3 has not been received, the control unit 102 repeats the process from step S122 and waits for the arrival of a request from PC3. If it is determined in the determination process of step S123 that a request from PC3 has been received, it determines whether or not the request is for another web page (step S124).

[0086] Assume that in the determination process of step S124, it is determined that the received request is a request for another Web page. In this case, the control unit 102 sends the request to the Internet 4 via the WAN I / F 101 and the connection terminal 101T, and transmits it to the target server device 5 (step S125), and repeats the process from step S112 shown in FIG. 7. Also, assume that in the determination process of step S124, it is determined that the received request is not a request for another Web page. In this case, the control unit 102 determines whether the received request is a request to end browsing of the Web page (an end instruction) or not (step S126).

[0087] If it is determined in the determination process of step S126 that the received request is not an end request, control unit 102 performs other processing in response to the request from PC 3 (step S127), and then repeats the processing from step S122. Note that the other processing of step S127 is intended to be processing other than a request to provide a web page, such as adding an item to a cart on a shopping site or changing registration information or setting information. Also in the other processing of step S127, if a request is sent to server device 5 that provides the web page and a cookie is provided, the cookie is stored in terminal-specific URL-specific cookie storage unit 112.

[0088] Therefore, the process of step S127 is to send a request to server device 5, receive a response from server device 5, extract and save a cookie if one is included, and provide information that does not include a cookie to the requesting PC 3. Thus, except for the fact that the request is not for the provision of another web page, the process is the same as the process when the process from step S112 is repeated after the process of step S125.

[0089] Also, assume that the received request is determined to be a termination request in the determination process of step S126. In this case, the control unit 102 executes a predetermined termination process, such as disconnecting the link between the requesting PC 3 and the server device 5 that provides the Web page (step S128), and ends the process shown in the flowcharts of FIGS.

[0090] [Function to notify the administrator of your choice to agree or disagree to the use of cookies] As explained with reference to FIGS. 7 and 8, suppose that the destination of the access request is a server device being accessed for the first time, and information indicating consent / disagreement to the use of cookies is not stored in the consent / disagreement storage unit 111. In this case, a request to access a web page is sent to the target server device (step S105). In response, if a selection screen for consent / disagreement to the use of the web page and cookies is provided (step S112), this is provided to the requesting PC 3 (step S118), and the selection information can be received from the PC 3 (step S119). This selection information is also managed in the consent / disagreement storage unit 111 of the UTM device 1 (step S120) and is also provided to the requested server device 5 (step S121).

[0091] In this case, if the selection information received in step S119 indicates consent to the use of cookies, the control unit 102 has a function to notify the administrator of this. The administrator's email address is stored, and the notification is sent by email via an external mail server device on the Internet 4 so that it can be received by the administrator's PC 3 under the UTM device 1. Alternatively, the notification may be sent via an internal mail server device connected to the LAN 2. Furthermore, if the UTM device 1 has a function that allows it to send information directly to the PC 3 connected to the LAN 2, the notification may be sent directly to the administrator's PC 3, which is identified by identification information such as a MAC address.

[0092] This allows the administrator to understand, via the PC 3 under the UTM device 1, for which web pages the user has consented to the use of cookies. Therefore, the server device 5 that provides the web pages for which the user has consented to the use of cookies can cancel consent to the use of cookies for undesirable server devices, thereby denying consent to the use of cookies. In this case, the data stored in the consent / disagreement storage unit 111 of the UTM device 1 is also rewritten to associate the domain of the server device 5 with information indicating the user's denial of consent to the use of cookies.

[0093] [Applying the cookie termination program] The functions of the various components constituting the cookie termination processing unit 130 described using Fig. 2 can be realized as functions of the control unit 102 by a program executed by the control unit 102. In other words, a program that executes the processing of the flowcharts shown in Figs. 7 and 8 corresponds to one embodiment of the cookie termination processing program according to the present invention. For this reason, by creating a program that executes the processing of the flowcharts shown in Figs. 7 and 8 and making it executable by the control unit 102 of the UTM device 1, the UTM device 1 described using Fig. 2 can be configured.

[0094] [Effects of the embodiment] As described above, when the UTM device 1 of the embodiment receives a request to access a web page, it references the consent / disagreement storage unit 111 and acquires stored information based on the domain of the server device to which the access request is sent. If the stored information is acquired, it sends an access request including information indicating consent / disagreement to the use of cookies to the server device that is providing the web page. This makes it possible to avoid having to repeatedly select whether to consent or disagree to the use of cookies when a web page that has been viewed by one of the PCs 3 subordinate to the UTM device 1 is viewed by another PC 3.

[0095] As described above, it is assumed that stored information is acquired by referring to consent / non-consent storage unit 111, and that the stored information indicates consent to the use of cookies. In this case, cookie information is acquired by referring to terminal-specific URL-specific cookie storage unit 112 based on the MAC address of PC3, the source of the access request, and the URL included in the access request. If the cookie is acquired, the acquired cookie is included in the access request and sent to the server device. Furthermore, when a web page including the cookie is provided, the cookie is recorded in terminal-specific URL-specific cookie storage unit 112, and the web page from which the cookie has been removed is provided to PC3.

[0096] As a result, the UTM device 1 manages cookies for each terminal and URL, and each PC 3 can use these. In other words, when the requesting PC 3 browses the requested web page and is provided with a cookie, this is managed by the UTM device 1, so it can provide this to the server device 5 and receive a web page customized according to the cookie. Moreover, since each PC 3 does not need to manage cookies in its own browser, if it is not placed under the control of the UTM device 1, it will not be able to browse web pages that use cookies as before, which also contributes to the protection of personal information.

[0097] Furthermore, if the consent / denial storage unit 111 does not contain information indicating consent / denial to the use of cookies for the accessed server device 5, the access request is sent directly to the server device. In response, if the server device 5 provides a consent / denial selection screen in addition to the web page, the selection screen is provided to the PC 3 that provided the access request. The information indicating consent / denial to the use of cookies selected through the PC 3 is accepted, and the domain of the server device 5 that provided the selection screen is associated with the accepted information indicating consent / denial to the use of cookies, and the accepted information indicating consent / denial is recorded in the consent / denial storage unit 111. Furthermore, the accepted information indicating consent / denial is also sent to the server device 5 that provided the selection screen. In this way, when a web page that has not been viewed through any PC 3 subordinate to the UTM device 1 is viewed, the user is provided with the consent / denial selection screen for the use of cookies, selects consent / denial, and the UTM device 1 manages the selection, while also notifying the server device 5.

[0098] Furthermore, if the destination of the access request is a server device that is being accessed for the first time and information indicating consent to the use of cookies is sent to that server device, the UTM device 1 can notify the administrator of this. This allows the administrator to centrally manage the selection of consent / denial to the use of cookies.

[0099] [Variations] In the above embodiment, the cookie termination processing program according to the present invention has been described as being executed in the UTM device 1, but this is not limited to this. For example, the cookie termination processing program according to the present invention can be installed and made executable in various devices that relay between the WAN and LAN, such as a gateway device.

[0100] Furthermore, in the above-described embodiment, a MAC address is used as terminal identification information, but this is not limiting. For example, an IP address is assigned to a PC 3 connected to the UTM device 1 via a LAN 2 by a DHCP (Dynamic Host Configuration Protocol) server function installed in a higher-level device such as the UTM device 1. Therefore, the IP address assigned to each PC 3 under the control of the UTM device 1 can be used as terminal identification information. In other words, any information that can identify each PC 3 under the control of the UTM device 1 can be used as terminal identification information. [Explanation of symbols]

[0101] 1...UTM device, 101T...connection end, 101...WAN I / F, 102...control unit, 103...storage device, 104T...connection end, 104...LAN I / F, 111...agreement / disagreement storage unit, 112...terminal-specific URL-specific cookie storage unit, 120...security function unit, 130...cookie termination processing unit, 131...agreement / disagreement acquisition unit, 132...access request transmission unit, 133...cookie acquisition unit, 134...cookie recording unit, 135...web page providing unit, 136...selection screen providing unit, 137...selection information receiving unit, 138...agreement / disagreement recording unit, 139...agreement / disagreement transmission unit, 2...LAN, 3, 3(1), 3(2), 3(3)...PC, 4...Internet, 5, 5(1), 5(2), 5(3)...server device

Claims

1. A cookie termination processing program executed on a computer installed in a relay device that relays between a wide area network (WAN) and a local area network (LAN), the relay device includes consent / non-consent storage means for storing a domain of a server device that provides a web page and information indicating consent / non-consent to the use of cookies in association with each other; an acquisition step of, when an access request including terminal identification information of the terminal device and a URL (Uniform Resource Locator) of a web page is received from a terminal device connected to the LAN, referring to the consent / disagreement storage means and acquiring stored information based on the domain of the server device to which the access request is sent; a request transmission step of including information indicating consent / non-consent to the use of cookies, which is information included in the stored information, in the access request and transmitting the request to the server device if the stored information can be acquired in the acquisition step; A cookie termination processing program comprising:

2. 2. The cookie termination processing program according to claim 1, the relay device includes a cookie storage means for storing the terminal identification information, the URL of the browsed web page, and cookie information from a server device that provides the web page in association with each other; a cookie acquisition step of acquiring the cookie information by referring to the cookie storage means based on the terminal identification information of the terminal device included in the access request and the URL included in the access request, when the stored information acquired in the acquisition step indicates consent to the use of cookies; and If the cookie information is acquired through the cookie acquisition step, the access request including the acquired cookie information is transmitted to the server device in the request transmission step; a cookie recording step of, when a web page including cookie information is provided from the server device, recording the cookie information in the cookie storage means in association with the terminal identification information and the URL, which are information included in the access request; a web page providing step of, when a web page including cookie information is provided from the server device, providing the web page from which the cookie information has been removed to the terminal device that has made the request; A cookie termination processing program comprising:

3. 3. The cookie termination processing program according to claim 1, further comprising: If the storage information cannot be acquired in the acquisition step, the request transmission step transmits the access request from the terminal device to the server device; a selection screen providing step, when a selection screen for consent / denial of consent to the use of cookies is provided in addition to the web page provided by the server device in response to the access request, of providing the web page and the selection screen to the terminal device that has provided the access request; a receiving step of receiving information indicating consent / non-consent to the use of cookies from the terminal device to which the selection screen is provided through the selection screen providing step; a recording step of associating the domain of the server device that provides the selection screen with the information indicating consent / disagreement received through the receiving step and recording the information in the consent / disagreement storage means; an agreement / disagreement transmission step of transmitting information indicating the agreement / disagreement received through the reception step to the server device; A cookie termination processing program characterized by:

4. 4. The cookie termination processing program according to claim 3, a notification step of notifying a predetermined administrator that information indicating consent / non-consent to the use of cookies has been selected together with a URL included in the access request, when the information indicating consent / non-consent received through the receiving step is information indicating consent to the use of cookies. A cookie termination processing program comprising:

5. A relay device that relays between a WAN (Wide Area Network) and a LAN (Local Area Network), consent / non-consent storage means for storing the domain of a server device that provides a web page and information indicating consent / non-consent to the use of cookies in association with each other; an acquisition means for, when receiving an access request from a terminal device connected to the LAN, including terminal identification information of the terminal device and a URL (Uniform Resource Locator) of a web page, referencing the consent / disagreement storage means and acquiring stored information based on the domain of the server device to which the access request is sent; a request sending means for sending, when the acquisition means has acquired the stored information, the access request including information indicating consent / non-consent to the use of cookies, which is information contained in the stored information, to the server device; A relay device comprising:

Images