Information processing apparatus and recording medium

• US 10,148,768 B2
• Filed: 06/16/2014
• Issued: 12/04/2018
• Est. Priority Date: 06/20/2013
• Status: Active Grant

• Current Assignee: Konica Minolta Inc.
• Original Assignee: Konica Minolta Inc.
• Inventors: Kano, Takahiro
• Primary Examiner(s): Cox, Natisha D
• Application Number:
  US14/305,175
• Publication Number:
  US 20140379917A1
• Time in Patent Office: 1,632 Days
• Field of Search: None
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04N 1/00127 Connection or combination of a still picture apparatus with another apparatus, e.g. for storage, processing or transmission of still picture signals or of information associated with a still picture
• CPC Class Codes: H04N 1/00204 with a digital computer or a digital computer system, e.g. an internet server programmed control between transmitter and receiver or between image input and image output device H04N1/32561
• CPC Class Codes: H04N 1/00244 with a server, e.g. an internet server fax-servers or the like for store and forward H04N1/324
• CPC Class Codes: H04N 1/00408 Display of information to the user, e.g. menus
• CPC Class Codes: H04N 1/00413 using menus, i.e. presenting the user with a plurality of selectable options H04N1/00464 takes precedence
• CPC Class Codes: H04N 1/00464 using browsers, i.e. interfaces based on mark-up languages

Abstract

An information processing apparatus capable of displaying information acquired by accessing a web server, by using a web browser, includes a communication control part for receiving a cookie write request from an access destination accessed by the web browser, a discrimination part for discriminating whether the cookie write request is sent from the first type of access destination or from a second type of access destination, and a cookie control part for controlling processing on a cookie shared by a plurality of users. The cookie control part performs write operation of a predetermined cookie when the cookie control part receives the cookie write request from the second type of access destination. The cookie control part deletes the predetermined cookie at a timing when access to the second type of access destination is ended with access transition from the second type of access destination to the first type of access destination.

Claims

1. An information processing apparatus capable of displaying information acquired by accessing a web server, by using a web browser, comprising:

a registration part for registering a first type of access destination;

a communication control part for receiving a cookie write request from an access destination accessed by said web browser;

a discrimination part for discriminating whether said cookie write request is sent from said first type of access destination or from a second type of access destination which is an access destination corresponding to a domain which is different from a domain of an access destination registered as said first type of access destination in advance; and

a cookie control part for controlling processing on a cookie shared by a plurality of users in accordance with a discrimination result of said discrimination part,

wherein said cookie control part performs write operation of a predetermined cookie in response to said cookie write request when said cookie control part receives said cookie write request from said second type of access destination, and

said cookie control part deletes said predetermined cookie which is once written into said information processing apparatus by said write operation, at a timing when access to said second type of access destination is ended with access transition from said second type of access destination to said first type of access destination.

2. The information processing apparatus according to claim 1, wherein

said registration part registers said first type of access destination prior to start of execution of an application for accessing said first type of access destination and said second type of access destination by using said web browser, and

said communication control part receives said cookie write request from an access destination accessed by said web browser during execution of said application.

3. The information processing apparatus according to claim 1, wherein

a cookie to be stored in response to a write request from said first type of access destination is a cookie for holding therein first information for each user, and

a cookie to be stored in response to a write request from said second type of access destination is a cookie for holding therein second information in no distinction of user.

4. The information processing apparatus according to claim 3, wherein

said first information is non-security information, and

said second information is security information.

5. The information processing apparatus according to claim 1, wherein

said first type of access destination is an internal server which is a web server provided inside said information processing apparatus, and

said second type of access destination is an external server which is a web server provided outside said information processing apparatus.

6. The information processing apparatus according to claim 1, wherein

even if said cookie write request is a request from said second type of access destination, when a target cookie of said cookie write request is determined not to include security information, said cookie control part does not perform delete operation of said target cookie at said timing, and

when said cookie write request is a request from said second type of access destination and a target cookie of said cookie write request is determined to include security information, said cookie control part performs delete operation of said target cookie at said timing.

15. The information processing apparatus according to claim 1, wherein the cookie control part performs a second write operation of a predetermined cookie in response to the cookie write request when the cookie control part receives the cookie write request from the first type of access destination, and the cookie control part does not delete the predetermined cookie written into the information processing apparatus by the second write operation, at the timing when access to the second type of access destination is ended with access transition from the second type of access destination to the first type of access destination.

7. A non-transitory computer-readable recording medium for recording therein a program to be executed by a computer embedded in an information processing apparatus which is capable of displaying information acquired by accessing a web server, by using a web browser, to cause said computer to perform the steps of:

a) receiving a cookie write request from an access destination accessed by said web browser;

b) discriminating whether said cookie write request is sent from a first type of access destination or from a second type of access destination which is an access destination corresponding to a domain which is different from a domain of an access destination registered as said first type of access destination in advance; and

c) controlling processing on a cookie shared by a plurality of users in accordance with a discrimination result in said step b),

wherein said step c) has the steps of;

c-1) executing write operation of a predetermined cookie in response to a cookie write request when said cookie write request is received from said second type of access destination; and

c-2) deleting said predetermined cookie which is once written into said information processing apparatus by said write operation, at a timing when access to said second type of access destination is ended with access transition from said second type of access destination to said first type of access destination.

8. An information processing apparatus capable of displaying information acquired by accessing a web server, by using a web browser, comprising:

a registration part for registering a first type of access destination;

a communication control part for receiving a cookie write request from an access destination accessed by said web browser;

a discrimination part for discriminating whether said cookie write request is sent from said first type of access destination or from a second type of access destination which is an access destination corresponding to a domain which is different from a domain of an access destination registered as said first type of access destination in advance; and

a cookie control part for controlling processing on a cookie shared by a plurality of users in accordance with a discrimination result of said discrimination part,

wherein said cookie control part rejects said cookie write request when said cookie write request is determined to be sent from said second type of access destination and a cookie to be stored in response to said cookie write request is a cookie for holding therein second information in no distinction of user, and

wherein said cookie control part accepts said cookie write request when said cookie write request is determined to be sent from said first type of access destination and a cookie to be stored in response to said cookie write request is a cookie for holding therein first information for each user.

9. The information processing apparatus according to claim 8, wherein

said registration part registers said first type of access destination prior to start of execution of an application for accessing said first type of access destination and said second type of access destination by using said web browser, and

said communication control part receives said cookie write request from an access destination accessed by said web browser during execution of said application.

10. The information processing apparatus according to claim 8, wherein

said first information is non-security information, and

said second information is security information.

11. The information processing apparatus according to claim 8, wherein

said first type of access destination is an internal server which is a web server provided inside said information processing apparatus, and

said second type of access destination is an external server which is a web server provided outside said information processing apparatus.

12. An information processing apparatus capable of displaying information acquired by accessing a web server, by using a web browser, comprising:

a registration part for registering a first type of access destination;

a communication control part for receiving a cookie write request from an access destination accessed by said web browser;

a discrimination part for discriminating whether said cookie write request is sent from said first type of access destination or from a second type of access destination which is an access destination corresponding to a domain which is different from a domain of an access destination registered as said first type of access destination in advance; and

a cookie control part for controlling processing on a cookie shared by a plurality of users in accordance with a discrimination result of said discrimination part,

wherein said cookie control part rejects said cookie write request when said cookie write request is determined to be sent from said second type of access destination, and said cookie control part accepts said cookie write request when said cookie write request is determined to be sent from said first type of access destination,

wherein a cookie to be stored in response to a write request from said first type of access destination is a cookie for holding therein first information for each user,

wherein a cookie to be stored in response to a write request from said second type of access destination is a cookie for holding therein second information in no distinction of user,

wherein even if said cookie write request is a request from said second type of access destination, when a target cookie of said cookie write request is determined not to include security information, said cookie control part does not reject said cookie write request and perform write operation of said target cookie, and

wherein when said cookie write request is a request from said second type of access destination and a target cookie of said cookie write request is determined to include security information, said cookie control part rejects said cookie write request and does not perform write operation of said target cookie.

13. A non-transitory computer-readable recording medium for recording therein a program to be executed by a computer embedded in an information processing apparatus which is capable of displaying information acquired by accessing a web server, by using a web browser, to cause said computer to perform the steps of:

a) receiving a cookie write request from an access destination accessed by said web browser;

b) discriminating whether said cookie write request is sent from a first type of access destination or from a second type of access destination which is an access destination corresponding to a domain which is different from a domain of an access destination registered as said first type of access destination in advance; and

c) controlling processing on a cookie shared by a plurality of users in accordance with a discrimination result in said step b),

wherein said step c) has the steps of;

c-1) rejecting said cookie write request when said cookie write request is determined to be sent from said second type of access destination and a cookie to be stored in response to said cookie write request is a cookie for holding therein second information in no distinction of user, and

c-2) accepting said cookie write request when said cookie write request is determined to be sent from said first type of access destination and a cookie to be stored in response to said cookie write request is a cookie for holding therein first information for each user.

14. An information processing apparatus capable of displaying information acquired by accessing a web server, by using a web browser, comprising:

a registration part for registering a first type of access destination;

a communication control part for receiving a cookie write request from an access destination accessed by said web browser;

a discrimination part for discriminating whether said cookie write request is sent from said first type of access destination or from a second type of access destination which is an access destination corresponding to a domain which is different from a domain of an access destination registered as said first type of access destination in advance;

a cookie control part for controlling processing on a cookie shared by a plurality of users in accordance with a discrimination result of said discrimination part; and

a storage part for storing a data table which selectively specifies a first control technique and a second control technique as a control technique to be executed correspondingly to each of a plurality of applications using said web browser,

wherein said first control technique is a control to perform write operation of a predetermined cookie in response to said cookie write request when said cookie write request from said second type of access destination is received, and to delete said predetermined cookie which is once written into said information processing apparatus by said write operation, at a timing when access to said second type of access destination is ended with access transition from said second type of access destination to said first type of access destination,

said second control technique is a control to reject said cookie write request when said cookie write request is determined to be a request from said second type of access destination, and

said cookie control part performs processing on said cookie by selectively using a control technique registered in said data table in association with an application being executed, among said first control technique and said second control technique, when said cookie write request is determined to be sent from said second type of access destination.