Device, method and program for preventing information leakage

• US 9,251,367 B2
• Filed: 03/16/2012
• Issued: 02/02/2016
• Est. Priority Date: 03/25/2011
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Aoki, Satoshi, Kameda, Manabu
• Primary Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US14/007,175
• Publication Number:
  US 20140026226A1
• Time in Patent Office: 1,418 Days
• Field of Search: 726/26, 726/1, 726/2, 726/22, 726/23, 713/201
• US Class Current: 1/1
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

Provided is a device for preventing information leakage including: a storage unit that stores message time, request source information, and request destination information in relation to each information requesting message; a unit that suspends a response message containing personal information in response messages in response to the information requesting messages, for a predetermined suspended time from a message time of the corresponding information requesting message; a unit that counts the number of information requesting messages transmitted from the same request source to the same destination and corresponding to the suspended response message on the basis of information stored in the storage unit; and a unit that, in the case where the counted number of the information requesting messages exceeds a predetermined threshold value, applies a protection process to the suspended response message so that the personal information contained in the suspended response message is not received by the request source.

Claims

1. A device for preventing information leakage, comprising:

a request information storage configured to store a message time, request source information, and request destination information in relation to each information requesting message transmitted from a client terminal to a server device;

at least one memory operable to store program code; and

at least one hardware processor operable to read said program code and operate as instructed by said program code, said program code comprising;

suspending processing code configured to suspend a response message containing personal information in response messages transmitted from the server device in response to the information requesting messages, for a predetermined suspended time from the message time of the corresponding information requesting message, and output a response message not containing the personal information in the response messages without suspending the response message not containing the personal information;

counting code configured to, based on information concerning the information requesting message stored in the request information storage, count the number of information requesting messages indicating a same request source and a same request destination and corresponding to the suspended response message containing the personal information; and

response processing code configured to, in a case where the number of the information requesting messages counted by the counting code exceeds a predetermined threshold value, apply a protection process to the suspended response message so the personal information contained in the suspended response message is not received by the client terminal serving as the request source.

2. The device for preventing information leakage according to claim 1, said program code further comprising:

personal information judging code configured to judge whether the response message contains the personal information, wherein

the suspending processing code deletes, from the request information storage, information concerning the information requesting message corresponding to the response message judged by personal information judging code as not containing the personal information and suspends the response message judged by the personal information judging code to contain the personal information.

3. The device for preventing information leakage according to claim 2, wherein

the suspending processing code cancels the suspension of the response message corresponding to the information requesting message, and deletes the information concerning the information requesting message from the request information storage in a case where the number of the information requesting messages counted by the counting code does not exceed the predetermined threshold value, and an elapsed time from the message time stored in the request information storage and related to the information requesting message corresponding to the suspended response message is more than or equal to the predetermined suspended time.

4. The device for preventing information leakage according to claim 2, said program code further comprising:

request information acquiring code configured to acquire information concerning the information requesting message;

first target determining code configured to store, in the request information storage, only the information concerning the information requesting message containing request destination information matching predetermined request destination information stored in advance, in the information concerning the information requesting message acquired by the request information acquiring code; and

second target determining code configured to determine a response message other than the response message in response to the information requesting message having the request source information and the request destination information stored in the request information storage, from among the response messages transmitted from the server device, to be a response message outside a target of inspection, wherein

the personal information judging code does not judge the response message outside the target of inspection, and

the suspending processing code deletes, from the request information storage, information concerning information requesting message corresponding to the response message outside the target of inspection, and outputs the response message outside the target of inspection without suspending the response message outside the target of inspection.

8. The device for preventing information leakage according to claim 1, wherein

as the protection process, the response processing code does not output the suspended response message, or applies a process of deleting the personal information to the suspended response message or a process of editing the personal information to the suspended response message, and then, outputs the response message to which the process is applied.

5. A device for preventing information leakage, comprising:

at least one memory operable to store program code; and

at least one hardware processor operable to read said program code and operate as instructed by said program code, said program code comprising;

suspending processing code configured to suspend a response message containing personal information in response messages transmitted from a server device in response to information requesting messages transmitted from a client terminal to the server device, for a predetermined suspended time from a message time related to each response message, and output a response message not containing the personal information in the response messages without suspending the response message not containing the personal information;

counting code configured to count the number of response messages related to a same request source and a same request destination in the suspended response message containing the personal information; and

response processing code configured to, in a case where the number of the response messages counted by the counting code exceeds a predetermined threshold value, apply a protection process to the suspended response message so the personal information contained in the suspended response message is not received by the client terminal serving as the request source.

6. The device for preventing information leakage according to claim 5, said program code further comprising:

personal information judging code configured to judge whether the response message contains the personal information, wherein

the suspending processing code suspends the response message judged by the personal information judging code to contain the personal information.

7. The device for preventing information leakage according to claim 6, wherein

in a case where the number of the response messages counted by the counting code does not exceed the predetermined threshold value, and an elapsed time from the message time related to the suspended response message is more than or equal to the predetermined suspended time, the suspending processing code cancels the suspension of the response message having the elapsed time more than or equal to the predetermined suspended time.

9. A method for preventing information leakage, which is executed by a computer, the method including:

storing, in a request information storage, a message time, request source information, and request destination information in relation to each information requesting message transmitted from a client terminal to a server device;

suspending a response message containing personal information in response messages transmitted from the server device in response to the information requesting messages, for a predetermined suspended time from a message time of the corresponding information requesting message, and outputting a response message not containing the personal information in the response messages without suspending the response message not containing the personal information;

counting the number of information requesting messages indicating a same request source and a same request destination and corresponding to the suspended response message containing the personal information, based on information concerning the information requesting message stored in the request information storage; and

in a case where the counted number of the information requesting messages exceeds a predetermined threshold value, applying a protection process to the suspended response message so the personal information contained in the suspended response message is not received by the client terminal serving as the request source.

10. A non-transitory computer-readable storage medium storing a program for causing the computer to realize:

a request information storage that stores a message time, request source information, and request destination information in relation to each information requesting message transmitted from a client terminal to a server device;

a suspending processor that suspends a response message containing personal information in response messages transmitted from the server device in response to the information requesting messages, for a predetermined suspended time from the message time of the corresponding information requesting message, and outputs a response message not containing the personal information in the response messages without suspending the response message not containing the personal information;

a counter that, based on information concerning the information requesting message stored in the request information storage, counts the number of information requesting messages indicating a same request source and a same request destination and corresponding to the suspended response message containing the personal information; and

a response processor that, in a case where the number of the information requesting messages counted by the counter exceeds a predetermined threshold value, applies a protection process to the suspended response message so the personal information contained in the suspended response message is not received by the client terminal serving as the request source.

11. A method for preventing information leakage, which is executed by a computer, the method including:

suspending a response message containing personal information in response messages transmitted from a server device in response to information requesting messages transmitted from a client terminal to the server device, for a predetermined suspended time from a message time related to each response message, and outputting a response message not containing the personal information in the response messages without suspending the response message not containing the personal information;

counting the number of response messages related to a same request source and a same request destination in the suspended response message containing the personal information; and

in a case where the counted number of the response messages exceeds a predetermined threshold value, applying a protection process to the suspended response message so the personal information contained in the suspended response message is not received by the client terminal serving as a request source.

12. A non-transitory computer-readable storage medium storing a program for causing the computer to realize:

a suspending processor that suspends a response message containing personal information in response messages transmitted from a server device in response to information requesting messages transmitted from a client terminal to the server device, for a predetermined suspended time from a message time related to each response message, and outputs a response message not containing the personal information in the response messages without suspending the response message not containing the personal information;

a counter that counts the number of response messages related to a same request source and a same request destination in the suspended response message containing the personal information; and

a response processor that, in a case where the number of the response messages counted by the counter exceeds a predetermined threshold value, applies a protection process to the suspended response message so the personal information contained in the suspended response message is not received by a client terminal serving as the request source.