System and method for URL risk assessment, and computer product

• US 20060206571A1
• Filed: 07/29/2005
• Published: 09/14/2006
• Est. Priority Date: 03/14/2005
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Kuwahara, Soichi
• Application Number:
  US11/192,139
• Publication Number:
  US 20060206571A1
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A client device requests a server device to assess a risk of a URL included in an email received. The server device stores the URL for which the request was received, in correspondence with the user information, in a storage unit. Risk of the URL is assessed based on whether other client devices received the same URL, by referring to the information stored in the storage unit. A risk assessment result is notified to the client device.

Claims

1. A URL risk assessment system that assesses a risk of a URL included in an email that is received by a client device, comprising:

a URL information storage unit that stores the URL in correspondence with user information, wherein the user information identifies any one of the client device that received the email, and the user that received the email; and

a URL risk assessing unit that assesses the risk of the URL based on whether other client devices have received the same URL, by referring to the user information stored.

2. The URL risk assessment system according to claim 1, wherein

the URL risk assessing unit assesses the risk of the URL based on whether a number of client devices that received the same URL, other than the client device having received the email, is at least equal to a predetermined number.

3. The URL risk assessment system according to claim 1, wherein

the URL information storage unit further stores a reception date and time of the email, and

the URL risk assessing unit assesses the risk of the URL based on whether other client devices received the same URL within a predetermined period, by referring to the reception date and time of the URL included in the email.

4. The URL risk assessment system according to claim 1, wherein

the URL information storage unit further stores at least one of high risk URLs and URLs having no risk, and

the URL risk assessing unit assesses the risk of the URL by preferentially referring to the URLs stored.

5. The URL risk assessment system according to claim 1, wherein

the URL information storage unit stores an email address, a phone number, an IP address, and a base station ID as the user information.

6. A URL risk assessment system comprising:

a client device; and

a server device that assesses a risk of a URL included in an email received by a client device, wherein

the client device includes a URL risk assessment requesting unit that sends a request to perform the URL risk assessment, and the URL included in the email, to the server device, and

the server device includes

a URL information storage unit that stores the URL for which a request for risk assessment is received, in correspondence with the user information for identifying the client device that sent the request,

a URL risk assessing unit that assesses the risk of the URL based on whether other client devices have received a same URL, identical to the URL for which the request for risk assessment is received, by referring to the user information stored, and

a URL risk notifying unit that notifies the client device of a URL risk assessment result.

7. The URL risk assessment system according to claim 6, wherein

the URL risk assessing unit assesses the risk of the URL based on whether a number of client devices that received the same URL, other than the client device having received the email, is at least equal to a predetermined number.

8. The URL risk assessment system according to claim 6, wherein

the URL information storage unit further stores a reception date and time of the email, and

the URL risk assessing unit assesses the risk of the URL based on whether other client devices received the same URL within a predetermined period, by referring to the reception date and time of the URL included in the email.

9. The URL risk assessment system according to claim 6, wherein

the URL information storage unit further stores at least one of high risk URLs and URLs having no risk, and

the URL risk assessing unit assesses the risk of the URL by preferentially referring to the URLs stored.

10. The URL risk assessment system according to claim 6, wherein

if a number of the requests for URL risk assessment from predetermined client devices within a certain period is more than a predetermined number, the URL information storage unit does not store the URL and the user information.

11. The URL risk assessment system according to claim 6, wherein

the URL information storage unit stores an email address, a phone number, an IP address, and a base station ID as the user information.

12. The URL risk assessment system according to claim 6, wherein

the client device receives notification that a predetermined URL is of high risk, and

the server device further comprises:

a URL safety confirmation notifying unit that notifies the client device of safety of the predetermined URL, if the safety of the predetermined URL is confirmed after storing the predetermined URL in the URL information storage unit.

13. The URL risk assessment system according to claim 6, wherein

the URL risk assessment request unit in the client device requests for URL risk assessment to the server device via a browser function, when an access to the URL included in the email is instructed.

14. The URL risk assessment system according to claim 6, wherein the client device further comprises:

a URL accessing unit that accesses the URL, if the URL risk assessment result notified by the server device indicates safety of the URL.

15. The URL risk assessment system according to claim 6, wherein the client device further comprises:

a URL assessment information storage unit that stores risk assessment information for at least one of a predetermined sender email address and a predetermined URL, and

the URL risk assessment request unit refers to the risk assessment information stored in the URL assessment information storage unit, and requests for URL risk assessment to the server device, if the risk of any one of the sender'"'"'s email address and the URL included in the email is unknown.

16. A method for assessing a risk of a URL included in an email that is received by a client device, comprising:

storing the URL in correspondence with user information, wherein the user information identifies any one of the client device that received the email, and the user that received the email; and

assessing the risk of the URL based on whether other client devices have received the same URL, by referring to the user information stored.

17. A computer-readable recording medium that stores therein, a computer program for assessing a risk of a URL included in an email that is received by a client device, the computer program including instructions, which when executed, cause the computer to execute:

storing the URL in correspondence with user information, wherein the user information identifies any one of the client device that received the email, and the user that received the email; and

assessing the risk of the URL based on whether other client devices have received the same URL, by referring to the user information stored.

18. A method of URL risk assessment in which a server device assesses a risk of a URL included in an email received by a client device, comprising:

sending, from the client device to the server device, a request to perform the URL risk assessment, and the URL included in the email;

storing, in the server device, the URL for which a request for the URL risk assessment is received, in correspondence with the user information for identifying the client device that sent the request;

assessing the risk of the URL based on whether other client devices have received a URL identical to the URL for which the request for risk assessment is received, by referring to the user information stored at the storing, wherein the assessing is executed by the server device; and

notifying the client device of a URL risk assessment result, the notifying being executed by the server device.

19. A computer-readable recording medium that stores therein, a computer program for performing URL risk assessment in which a server device assesses a risk of a URL included in an email received by a client device, the computer program including instructions, which when executed, cause the computer to execute:

sending, from the client device to the server device, a request to perform the URL risk assessment, and the URL included in the email;

storing, in the server device, the URL for which a request for the URL risk assessment is received, in correspondence with the user information for identifying the client device that sent the request;

assessing the risk of the URL based on whether other client devices have received a URL identical to the URL for which the request for risk assessment is received, by referring to the user information stored at the storing, wherein the assessing is executed by the server device; and

notifying the client device of a URL risk assessment result, the notifying being executed by the server device.