Program and method for restricting data entry

• US 7,949,940 B2
• Filed: 06/09/2004
• Issued: 05/24/2011
• Est. Priority Date: 08/08/2003
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Uchida, Masaru
• Primary Examiner(s): Hong; Stephen S.
• Assistant Examiner(s): TSUI, WILSON W
• Application Number:
  US10/864,536
• Publication Number:
  US 20050034032A1
• Time in Patent Office: 2,540 Days
• Field of Search: 715/514, 715/515, 715/209, 715/250, 715/206, 715/207, 715/221, 715/234, 709/206, 709/207, 707/2
• US Class Current: 715/234
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow

Abstract

A data entry restriction program capable of rejecting invalid structured documents out of structured documents of a general-purpose format with great flexibility. When a structured document is entered, a data entry restriction apparatus compares the structure of the structured document with flexibility requirements (step S1). When the structured document does not meet the flexibility requirements, the data entry restriction apparatus records error information in association with the sending client of the document (step S2). After the error information associated with the client exceeds prescribed limits, the data entry restriction apparatus rejects structured documents from the client (step S3). Structured documents which meet the flexibility requirements and the data entry restriction apparatus has accepted are entered into a data processing apparatus and analyzed (step S4).

Claims

1. A data entry restriction method for determining whether to accept or rejected entered structured markup documents, comprising the steps of:

Comparing a structure of a structured markup document entered with previously defined flexibility requirements indicating allowable ranges for document structure;

Adding, when the structured markup document entered does not meet the flexibility requirements which define a numeric value indicative of aggression for every item, a numeric value indicative of aggression corresponding to an item violated by the structured markup document entered to a total calculated by summing numeric values indicative of aggression of past structured markup documents sent from the client computer, the total associated with an IP address of a client computer that is a sender of the structured markup document entered;

Extracting the IP address from a connection request for transfer of a structured markup document from the client computer when the connection request is received from the client computer; and

Rejecting connection requests which include the IP address of the client computer without receiving a message following the connection requests and without establishing a connection for receiving the structured markup documents, when a total of the numeric values indicative of aggression associated with the IP address becomes a prescribed value or greater.

2. The data entry restriction method according to claim 1, wherein said rejecting rejects the connection request from the client computer after a number of errors caused by past structured markup documents from the client computer becomes a prescribed number or greater.

3. The data entry restriction method according to claim 1, wherein said comparing discards the structured markup document entered when the structure of the structured markup document does not meet the flexibility requirements.

4. A data entry restriction apparatus for determining whether to accept or reject entered structured markup documents, comprising:

A processor; and

A memory storing computer-readable instructions which are executed by the processor,

Wherein the processor performs the functions including;

Executing a flexibility check unit to compare a structure of a structured markup document with previously defined flexibility requirements indicating allowable ranges for document structure;

Executing an error information recording unit to add, when the structured markup document entered does not meet the flexibility requirements which define a numeric value indicative of aggression for every item, a numeric value indicative of aggression corresponding to an item violated by the structured markup document entered to a total calculated by summing numeric values indicative of aggression of past structured markup documents sent from the client computer, the total associated with an IP address of a client computer that is a sender of the structured markup document entered;

Executing an IP address extracting unit to extract the IP address from a connection request for transfer of a structured markup document from the client computer when the connection request is received from the client computer; and

Executing a rejecting unit to reject connection requests which include the IP address of the client computer, without receiving a message following the connection requests and without establishing a connection for receiving the structured markup documents, when a total of the numeric values indicative of aggression associated with the IP address becomes a prescribed value or greater.

5. The data entry restriction apparatus according to claim 4, wherein said rejecting unit rejects the connection request from the client computer after a number of errors caused by past structured markup documents form the client computer becomes a prescribed number or greater.

6. The data entry restriction apparatus according to claim 5, wherein said flexibility check unit discards the structured markup document entered when the structure of the structured markup document does not meet the flexibility requirements.

7. A computer-readable recording medium storing a data entry restriction program to determine whether to accept or reject entered structured markup documents, the data entry restriction program causing a computer to execute functions comprising:

Comparing a structure of a structured markup document with previously defined flexibility requirements indicating allowable ranges for document structure;

Adding, when the structured markup document does not meet the flexibility requirements which define a numeric value indicative of aggression for every item, a numeric value indicative of aggression corresponding to an item violated by the structured markup document entered to a total calculated by summing numeric values indicative of aggression of past structured markup documents sent from the client computer, the total associated with an IP address of a client computer that is a sender of the structured markup document entered;

Extracting the IP address from a connection request for transfer of a structured markup document from the client computer when the connection request is received from the client computer; and

Rejecting connection requests which include the IP address of the client computer, without receiving a request following the connection requests and without establishing a connection for receiving the structured markup documents, when a total of the numeric values indicative of aggression associated with the IP address becomes a prescribed value or greater.

8. The computer-readable medium of claim 7, wherein said rejecting rejects the structured markup documents from the client after a number of errors caused by past structured markup documents from the client becomes a prescribed number or greater.

9. The computer-readable medium of claim 7, wherein said comparing discards the structured markup document entered when the structure of the structured markup document does not meet the flexibility requirements.