JP2007164676A - Information collecting software management system, management server, and management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To surely prevent secret information from flowing out and leaking by information-collecting software such as spyware without spoiling useful and beneficial functions to firms and users in business, by enabling classification-management of information-collecting software conforming to a certain standard. <P>SOLUTION: In an information-collecting software management system, information-collecting software is retrieved by a retrieval means 11 in each user terminal 10A, and the result of the retrieval is reported to a management server 20A by a reporting means 12. Meanwhile, in the management server 20A, an information-collecting software holding state in each user terminal 10A is extracted from the result of the retrieval reported from each user terminal 10A, and registered with a database 22a to enter the state in a register. Then, a management means 23A manages the information-collecting software in the user terminal 10A based on the holding state of the information-collecting software which is recorded to the register. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to information collecting software in a user terminal such as a personal computer connected to an in-house LAN (Local Area Network) in a company [a user who collects information in a user terminal and transmits it to a specific device. The present invention relates to a technique for managing a program for operating a terminal.

  In general, in a company or the like, in order to monitor assets and operation status of user terminals connected to an in-house LAN, information on assets held in the user terminals and operation logs / Software that collects Internet browsing history and notifies the management server (for example, see Patent Documents 1 and 2 below) is used. This software is usually executed during the normal operation of the user terminal, regardless of the user's operation, in response to an instruction from the management server or automatically or in the background to make the user aware. Instead, the user terminal is made to automatically execute information collection and collection result transmission.

In addition to the software that collects information as described above, information collecting software called Spyware has been spreading in recent years as performing the same information collecting / sending function. Spyware, if defined strictly, collects information in the user terminal without giving sufficient explanation to the user or without consent, and the specific company / organization / individual that has been set in advance. Software sent to (information collector).

  Many spywares seem to have various conveniences at first glance, let them download / install themselves, or browse a specific site or unknowingly by unknowingly It is sent directly to the user terminal and installed by using a system problem. Spyware originally has rarely noticeable behavior on the surface, and often operates without the user's knowledge other than slowing down the operation of the computer. In addition, spyware often makes a computer malfunction due to a design defect, and even if spyware is detected and deleted, malfunctioning computer operation may be stabilized.

Some spyware performs functions that are useful to the user, but spyware is usually installed without the user's consent as described above, causing the computer system to become unstable or undesired to leak information. There are many things that cause problems such as waking up. In particular, spyware that collects Internet browsing history, key input information, etc., is used for various personal information of users (address, name, telephone number, e-mail address, credit card number, account number, password, etc.) and specific sites The identification number and password used when logging in to the user may be leaked outside without the user's knowledge. However, unlike computer viruses, spyware usually does not have a proliferation function that allows self-replication and distribution without permission.
JP 2003-196248 A JP 2005-032158 A

By the way, as described above, it is desirable to avoid using spyware because it leads to information leakage and system instability. In particular, if spyware is installed on a user terminal used in a company, confidential information such as personal information in the user terminal may be leaked or leaked outside due to the spyware. If this happens, the corporate image and reliability may be reduced.

  Therefore, it is desired to develop a technology for managing information collection software including spyware in a user terminal connected to a network such as an in-house LAN in a company, etc., and deleting information collection software which is not desirable for the company. .

  At that time, as described above, the information collection software held in the user terminal is useful for collecting information necessary for the company to manage the user terminal, as well as the user and management such as spyware. It is installed maliciously without the user's consent, leading to information leakage and system instability, so it is desirable to avoid using it, so all the information collection software on the user terminal is malicious. If it is determined that it is present and immediately deleted, it is not preferable because a function that is useful and useful for business and users cannot be used.

  Therefore, rather than managing and simply deleting information collection software, it provides a system environment that can determine whether the information collection software to be managed is useful or useful for business or users. Therefore, it is desired to enable management of information collection software according to certain standards.

  The present invention was devised in view of such a situation, and provides a system environment in which it is possible to determine whether the information collection software to be managed is useful and useful for business or users. It enables the management of information collection software according to certain standards, and leaks and leaks confidential information by using information collection software such as spyware without compromising functions useful and useful for businesses and users. Its purpose is to prevent it reliably.

  In order to achieve the above object, an information collection software management system according to the present invention (claim 1) is connected to a user terminal and the user terminal so that they can communicate with each other, and manages the user terminal. Information collection software for operating the user terminal so that the user terminal collects information in the user terminal and transmits it to a specific device. A search means for searching from the inside, and a notification means for notifying the management server of the search result of the information collection software by the search means, and the management server is notified from the user terminal Extraction means for extracting the status of possession of the information collection software in the user terminal from the search result by the retrieval means, and possession of the information collection software extracted by the extraction means Registration means for registering the status in the database in association with the user terminal, and management for managing the information collection software in the user terminal based on the possession status of the information collection software registered in the database It is characterized by having a means.

  In such an information collection software management system, the management server refers to the possession status of the information collection software registered in the database, and is retained in the user terminal according to a preset criterion. The information collection software is configured to include a determination unit that determines whether or not the information collection software is to be held in the user terminal, and the information collection software is not to be held by the determination unit. If determined, the management means of the management server sends a deletion command to the user terminal to delete the information collection software from the user terminal and forces the information collection software from the user terminal. It may be configured to be deleted (claim 2).

In the information collection software management system, the management server has a list (white list) in which information related to information collection software necessary for business is registered, and the status of possession of the information collection software registered in the database The information collection software held in the user terminal is compared with the information registered in the list, and the information corresponding to the information collection software held in the user terminal is And determining means for determining whether or not the information is registered in the list. When the determining means determines that the information corresponding to the information collection software is not registered in the list, the management means The management means of the server sends a deletion command to the user terminal to delete the information collection software from the user terminal. It may be configured to force the removal of the information collection software (claim 3).

  Further, in the information collection software management system, the management server has a list (black list) in which information related to information collection software unnecessary for business is registered, and possession of the information collection software registered in the database. Information corresponding to the information collection software held in the user terminal by referring to the situation, collating the information collection software held in the user terminal with the information registered in the list And determining means for determining whether or not information is registered in the list, and when it is determined by the determining means that information corresponding to the information collection software is registered in the list, The management means of the management server sends a deletion command to the user terminal to delete the information collection software from the user terminal. It may be configured to force the removal of Luo the information gathering software.

  An information collection software management system according to the present invention (claim 5) includes a user terminal and a management server which is connected to the user terminal so as to be able to communicate with each other and manages the user terminal. Search means for searching information collecting software for operating the user terminal so that the terminal collects information in the user terminal and transmits the information to a specific device, from the software of the user terminal; The history recording means for recording the web browsing history in the user terminal, the search result of the information collection software by the search means, and the history recording means between the previous search result notification and the current search result notification. And a notification means for notifying the management server of the recorded web browsing history, and the management server uses the search means notified from the user terminal. And extracting the information collection software possession status in the user terminal, and registering the information collection software possession status extracted by the extraction means in the database in association with the user terminal. New registration to the user terminal by matching the difference between the search means notified last time from the user terminal and the search result notified this time and the web browsing history notified this time Based on the source site specifying means for specifying the source site of the collected information collection software, the possession status of the information collection software registered in the database, and the source site specified by the source site specifying means, A user terminal and management means for managing the information collection software in the user terminal. It is set to.

  In such an information collection software management system, the management server refers to the possession status of the information collection software registered in the database, and is retained in the user terminal according to a preset criterion. The information collection software is configured to include a determination unit that determines whether or not the information collection software is to be held in the user terminal, and the information collection software is not to be held by the determination unit. If determined, the management means of the management server sends a deletion command to the user terminal to delete the information collection software from the user terminal and forces the information collection software from the user terminal. To the source site specified by the source site specifying means corresponding to the information collection software. It may be configured so as to prohibit the access forcibly (claim 6).

  Further, in the information collection software management system, the management server refers to a list in which information related to information collection software necessary for business is registered, and the possession status of the information collection software registered in the database, The information collection software held in the user terminal is collated with the information registered in the list, and information corresponding to the information collection software held in the user terminal is registered in the list And determining means for determining whether or not the information is collected by the determining means when the information corresponding to the information collecting software is not registered in the list. Means sends a deletion instruction to the user terminal to delete the information collection software from the user terminal, and the information collection software from the user terminal. And the user terminal may be forcibly prohibited from accessing the source site specified by the source site specifying means corresponding to the information collection software. (Claim 7).

  Further, in the information collection software management system, the management server refers to a list in which information related to information collection software unnecessary for business is registered, and the possession status of the information collection software registered in the database. The information collection software held in the user terminal is collated with the information registered in the list, and information corresponding to the information collection software held in the user terminal is stored in the list. And determining means for determining whether or not it is registered. When it is determined by the determining means that information corresponding to the information collection software is registered in the list, the management server The management means sends a deletion command to the user terminal to delete the information collection software from the user terminal, and the information collection software is sent from the user terminal. And the user terminal may be forcibly prohibited from accessing the source site specified by the source site specifying means corresponding to the information collection software. (Claim 8).

  The management server collects information about information collection software through a network connected to the management server, and the determination is made based on the information about the information collection software collected by the information collection unit. It may be configured to include a reference or a reference / list setting means for setting the list (claim 9). The management server includes an installation unit that installs a search program that causes the user terminal to function as the search unit and the notification unit in the user terminal, and the user terminal includes the installation unit. By executing the search program installed according to the above-mentioned configuration, the search unit and the notification unit may be configured to serve as the search unit (claim 10). Further, the management server is configured to include download means for downloading a program for searching information retrieval software provided from a providing site through a network connected to the management server, and the installation means includes the download means. The program downloaded by the means may be installed in the user terminal as the search program (claim 11).

On the other hand, an information collection software management system according to the present invention (claim 12) includes a user terminal and a management server that is connected to the user terminal so as to communicate with each other and manages the user terminal. The user terminal includes a history recording unit that records a web browsing history in the user terminal, and a notification unit that notifies the management server of the web browsing history recorded by the history recording unit. The management server extracts from the web browsing history notified from the user terminal, information related to the site accessed by the user terminal, and information extracted by the access site extracting means Access means for accessing the site accessed by the user terminal, and after the access to the site by the access means, Information collecting software for operating the management server so as to collect information in the server and send it to a specific device, search means for searching the software of the management server, and information collecting software by the search means When the software is searched, based on the information on the information collection software and the source site of the information collection software, the user terminal and management means for managing the information collection software on the user terminal are provided. It is characterized by being configured.

  In such an information collection software management system, when the management server retrieves the information collection software by the retrieval means, the information collection software is held in the user terminal in accordance with a preset criterion. If the determination means determines that the information collection software is not to be held by the determination means, the management means of the management server In order to delete the information collection software from the user terminal, a deletion instruction is sent to the user terminal to forcibly delete the information collection software from the user terminal, and the source site of the information collection software The access to the user terminal may be forcibly prohibited (claim 13).

  Further, in the information collection software management system, when the management server searches for information collection software by a list in which information related to information collection software necessary for business is registered and the search means, the information collection software And a judgment means for judging whether or not the information corresponding to the information collection software is registered in the list. When it is determined that the information corresponding to the information collection software is not registered in the list, the management unit of the management server uses a deletion command to delete the information collection software from the user terminal. To the user terminal to forcibly delete the information collection software from the user terminal and To the site may be configured to forcibly prohibit access of the user terminal (claim 14).

  Furthermore, in the information collection software management system, when the management server searches for information collection software by a list in which information related to information collection software unnecessary for business is registered and the search means, the information collection And a judging means for collating the software with the information registered in the list and judging whether or not the information corresponding to the information collecting software is registered in the list. When it is determined that the information corresponding to the information collection software is registered in the list, the management unit of the management server issues a deletion command to delete the information collection software from the user terminal. Sent to the user terminal to forcibly delete the information collection software from the user terminal, and the information collection software For Tokoro site may be configured to forcibly prohibit access of the user terminal (claim 15).

  The management server collects information about information collection software through a network connected to the management server, and the determination is made based on the information about the information collection software collected by the information collection unit. It may be configured to include a reference or a reference / list setting means for setting the list (claim 16). In addition, the management server is configured to include download means for downloading a program for searching information retrieval software provided from a providing site through a network connected to the management server, and downloaded by the download means. You may comprise so that the function as this search means may be fulfilled by running this program (Claim 17).

According to the information collection software management system of the present invention described above (claims 1 to 4), the information collection software is retrieved by the retrieval means at each user terminal, and the retrieval result is notified to the management server by the notification means. On the other hand, in the management server, the holding status of the information collection software in each user terminal is extracted from the search result notified from each user terminal, registered in the database, and stored in the ledger. Then, the information collection software in the user terminal is managed by the management means based on the possession status of the information collection software in the form of a ledger.

  This makes it possible to determine whether the information collection software to be managed is useful or necessary (necessary) for business and users, rather than managing and simply deleting the information collection software. An environment is provided. More specifically, it is determined whether or not the information collection software held in the user terminal should be held in the user terminal in accordance with a preset judgment criterion, white list or black list. For information collection software that should not be held, a delete command is sent to the user terminal and is forcibly deleted from the user terminal. In this way, it becomes possible to manage and manage information collection software according to certain standards, and it is possible to delete only unnecessary information collection software such as spyware, which is useful and useful for businesses and users ( It is possible to reliably prevent leakage or leakage of confidential information by information collection software such as spyware without impairing necessary functions.

  According to the information collection software management system of the present invention (claims 5 to 8), the information collection software is searched by the search means in each user terminal, and the web browsing history in the user terminal is recorded by the history recording means. Is recorded and the web browsing history recorded from the previous search result notification to the current search result notification is notified to the management server by the notification means, while in the management server, from each user terminal From the notified search results, the possession status of the information collection software in each user terminal is extracted and registered in the database to create a ledger. The search result notified last time from the user terminal and the search notified this time The information newly added to the user terminal by combining the difference with the result and the web browsing history notified this time. Collection software of the source site is identified. Then, the information collection software in the user terminal is managed by the management means based on the possession status of the information collection software in the ledger and the identified source site.

  This makes it possible to determine whether the information collection software to be managed is useful or necessary (necessary) for business and users, rather than managing and simply deleting the information collection software. An environment is provided. More specifically, it is determined whether or not the information collection software held in the user terminal should be held in the user terminal in accordance with a preset judgment criterion, white list or black list. For information collection software that should not be held, a deletion command is sent to the user terminal and it is forcibly deleted from the user terminal, and access of the user terminal to the source site is forcibly prohibited. . In this way, it becomes possible to manage and manage information collection software according to certain standards, and it is possible to delete only unnecessary information collection software such as spyware, which is useful and useful for businesses and users ( It is possible to reliably prevent leakage or leakage of confidential information by information collection software such as spyware without impairing necessary functions. In addition, if information collection software (spyware, etc.) that should not be held is installed on a user terminal by accessing a site such as the Internet from the user terminal, the source site is specified. Since access to the source site is forcibly prohibited, once the source site of unnecessary information collection software such as spyware is identified, the user terminal cannot access the source site. Thereafter, it is possible to reliably prevent unnecessary information collection software such as spyware from being taken into the user terminal.

Furthermore, according to the information collecting software management system of the present invention (claims 12 to 15), the web browsing history in the user terminal is recorded by the history recording means in each user terminal, and the web browsing history is recorded by the notifying means. While the management server is notified, the management server extracts information related to the site accessed by the user terminal from the web browsing history notified from the user terminal, and the user terminal accesses based on the extracted information. Access to the selected site is executed, and after the access, the information collection software is searched by the search means in the management server. And when the information collection software is searched, naturally, it is considered that there is almost no doubt that the information collection software is installed in the user terminal accessing the same site and browsing, etc. Based on the information on the information collection software and the source site of the information collection software to be accessed, the management means manages the information collection software on the user terminal.

  This makes it possible to determine whether the information collection software to be managed is useful or necessary (necessary) for business and users, rather than managing and simply deleting the information collection software. An environment is provided. More specifically, it is determined whether or not the information collection software searched by the management server should be held in the user terminal according to a preset determination criterion, white list or black list. For information collection software that should not be executed, a deletion command is sent to the user terminal and is forcibly deleted from the user terminal, and access of the user terminal to the source site is forcibly prohibited. In this way, it becomes possible to manage and manage information collection software according to certain standards, and it is possible to delete only unnecessary information collection software such as spyware, which is useful and useful for businesses and users ( It is possible to reliably prevent leakage or leakage of confidential information by information collection software such as spyware without impairing necessary functions. In addition, the management server accesses a site such as the Internet accessed by the user from the user terminal, and determines whether or not the site is a site for installing unnecessary information collecting software such as spyware. Recognizes. And if the site is a site that installs unnecessary information collection software such as spyware, access to the source site is forcibly prohibited, so once unnecessary information collection software such as spyware is installed. If it is recognized as a software source site, the user terminal can no longer access the source site, and after that, unnecessary information collection software such as spyware is taken into the user terminal. It becomes possible to suppress it reliably.

  In the management server, by collecting information related to information collection software such as spyware over the network, by setting judgment criteria and lists (white list, black list) based on the collected information related to information collection software, Administrators can always set judgment criteria and lists based on the latest information on information collection software such as spyware (information provided from a specific site through the network), and the information collection software based on the latest information can be set. Necessary / unnecessary judgment can be made (claims 9 and 16).

  In addition, the management server installs a search program that causes the user terminal to function as a search unit or a notification unit in the user terminal, and the user terminal executes the search program to use the functions as the search unit and the notification unit. The user terminal does not require the user to install a search program at his / her own will and can be used as a search means and a notification means at each user terminal under the management of the management server. The function can be reliably realized (claim 10).

  Further, the management server downloads a program for searching information retrieval software provided free of charge from the provided site through the network, and uses the program to realize the search means on the user terminal or the management server, so that the administrator Can search for the latest spyware or the like using a program that can always search for the latest spyware or the like without creating a special program (claims 11 and 17).

Embodiments of the present invention will be described below with reference to the drawings.
[1] Description of First Embodiment FIG. 1 is a block diagram showing the overall configuration of an information collection software management system as a first embodiment of the present invention. As shown in FIG. 1, information of the first embodiment is shown. The collection software management system 1A is provided inside a company or the like (or on campus), and includes a management server 20A and a proxy server 30 in addition to a plurality of user terminals 10A. Servers 20A and 30 are connected to each other via an in-house LAN 40 so that they can communicate with each other.

  Each user terminal 10A is constituted by a terminal device such as a personal computer (PC) used by each employee (user) in the company or the like, and has a function (described later) for searching for information collection software such as spyware. A detailed functional configuration of the user terminal 10A when a search program (described later) for implementation is installed from the management server 20A as described later will be described later with reference to FIG.

  In the present embodiment, when the user terminal 10A is connected to the in-house LAN 40, the search program may not be installed in each user terminal 10A, or the search program is installed from the beginning. May be. Each user terminal 10A can access the Internet outside the company (browsing various sites, downloading various software, collecting various information, etc.) via the in-house LAN 40 and the proxy server 30.

  Here, the information collection software searched by the search program (search means 11 described later; see FIG. 2) collects information in the user terminal 10A (storage unit 10b; see FIG. 2) to identify the specific device ( For example, the user terminal 10A (CPU 10a; see FIG. 2) is operated so as to be transmitted to a creator who created the software or a terminal device of an information collector such as a specific company, organization, or individual. is there.

  As such information collection software, first, as described above, each user terminal 10A is owned by each user terminal 10A in order to monitor assets and operation statuses of all user terminals 10A connected to the in-house LAN 40 in the company. Software that collects information related to assets (hardware and software) and operation logs / Internet browsing history of each user terminal 10A and notifies the administrator terminal (or management server) It is done.

  This software is pre-installed in the user terminal 10A or installed from a management server or the like when connected to the in-house LAN 40, and usually during the normal operation of the user terminal 10A, regardless of the user's operation. It is executed in the background in response to an instruction from the management server or the like, and automatically causes the user terminal 10A to execute information collection and collection result transmission without making the user aware of it. Such information collection software is necessary (useful / beneficial) for business for companies.

  In order to perform the same information collection / transmission function, the user browses a specific site on the Internet or is directly sent to the user terminal by e-mail, and enters the user terminal 10A without the user's knowledge. There is also a so-called spyware that collects information in a user terminal and sends the information to a specific company, organization, individual, etc. (information collector) set in advance.

This spyware may be useful or necessary (necessary) for the user's business depending on how it is used, but in addition to the user's personal information, the identification number / login used when logging in to a specific site There is also malicious information that leaks passwords and other important information (such as confidential information including personal information) in the user terminal 10A (storage unit 10b; see FIG. 2) to the outside without the user's knowledge. .

  In the present embodiment, as will be described later, by executing the search program on the user terminal 10A (CPU 10a; see FIG. 2), software held in the user terminal 10A (storage unit 10b; see FIG. 2). Among them, the information collection software as described above is searched regardless of necessity / unnecessity, and is notified to the management server 20A. The search program belongs to the information collection software, and is naturally handled as a business necessity (useful / beneficial).

  The management server 20A is communicably connected to each user terminal 10A via the in-house LAN 40, and manages each user terminal 10A. In particular, as described later with reference to FIG. It has a functional configuration for managing the information collection software searched by the search program. The management server 20A can access the Internet outside the company (browsing various sites, downloading various software, collecting various information, etc.) via the in-house LAN 40 and the proxy server 30.

  The proxy server 30 is connected to the Internet in place of the user terminal 10A and the management server 20A that are provided at the boundary between the in-house LAN 40 and the Internet and cannot be directly connected to the Internet. It is used to centrally manage incoming and outgoing access, permit only specific types of connections from the inside, and block unauthorized access from outside.

FIG. 2 is a block diagram showing functional configurations of the user terminal 10A and the management server 20A in the information collection software management system 1A of the first embodiment. In FIG. 2, the proxy server 30 and the in-house LAN 40 are not shown.
The user terminal 10A is a CPU (Central Processing Unit) 10a that executes various processes.
And a storage unit (for example, RAM, ROM, hard disk, etc.) 10b for storing / saving various software including information collecting software executed and used by the CPU 10a and various data.

  The CPU 10a in the user terminal 10A according to the first embodiment functions as the search unit 11 and the notification unit 12, and these functions execute a search program installed from the management server 20A as described later. It is realized by doing.

The search means 11 collects information in the storage unit 10b of the user terminal 10A and searches the information collection software as described above from software held in the user terminal 10A (storage unit 10b). It is.
The notification means 12 is a search result of the information collection software by the search means 11 (in addition to information on the presence / absence of the corresponding software, if there is, the software name, version information, installation / download date and time, etc. for the software (Including various types of information) to the management server 20A through the in-house LAN 40.

  Also, the management server 20A is created based on the CPU 20a that executes various processes, various software including information collection software that is executed and used by the CPU 20a, and the search results notified from each user terminal 10. And a storage unit (for example, RAM, ROM, hard disk, etc.) 20b for storing and saving various data including a database 22a (described later).

  The CPU 20a functions as an extraction unit 21, a registration unit 22, a management unit 23A, a determination unit 24, an information collection unit 25, a reference / list setting unit 26, a download unit 27, and an installation unit 28. The CPU 20a is realized by executing a management program. Here, the management program may include a program (search program) to be installed in the user terminal 10A so that the user terminal 10A functions as the search unit 11 and the notification unit 12 described above. In the embodiment, the search program downloaded from the outside is used.

  When the retrieval means 21 is notified of the search result by the retrieval means 11 from each user terminal 10A, the extraction means 21 determines the corresponding information in each user terminal 10A as the possession status of the information collection software in each user terminal 10A. In addition to the presence / absence of software and the number of possessions, various information such as the software name, version information, and installation / download date / time for each corresponding software is extracted.

  The registration unit 22 associates the possessed status extracted by the extraction unit 21 with each user terminal 10A, registers it in the database 22a of the storage unit 20b, and creates a ledger. In the present embodiment, the database 22a is stored in the storage unit 20b in the management server 20A. However, in the external server connected to the management server 20A or another server connected via the in-house LAN 40, The storage unit may be provided with the database 22a.

The management means 23A manages the information collection software in each user terminal 10A and each user terminal 10A, as will be described later, based on the possession status of the information collection software registered in the database 22a.
The judging means 24 refers to the possession status of the information collecting software registered in the database 22a and, as will be described later, retained in each user terminal 10A in accordance with preset judgment criteria or list 24a / list 24b. It is determined whether or not the information collection software should be held in the user terminal 10A connected to the in-house LAN 40.

The information collecting means 25 collects information related to information collecting software through the Internet (network) connected to the management server 20A via the proxy server 30.
The reference / list setting unit 26 sets the above-described determination criteria and the list 24a / list 24b based on the information related to the information collection software collected by the information collection unit 25.

The download unit 27 downloads the latest information search software search program provided free of charge from a predetermined providing site via the Internet (network) connected to the management server 20A via the proxy server 30. is there.
The installation unit 28 installs a search program that causes each user terminal 10A to function as the search unit 11 and the notification unit 12 in each user terminal 10A. In the present embodiment, at least the user unit 10A as the search unit 11 is installed. The program downloaded by the download means 27 is used as a program for causing the function to function.

The program that causes the user terminal 10 </ b> A to function as the notification unit 12 may be used as it is when included in the program downloaded by the download unit 27, or may be managed when it is not included. On the server 20A side, a program for causing the user terminal 10A to function as the notification means 12 is added. Each user terminal 10A functions as the above-described search unit 11 and notification unit 12 by executing the search program installed by the installation unit 28 as described above.

  Here, the above-mentioned judgment criteria and the list 24a / list 24b are set for each company by an administrator or the like or the criteria / list setting means 26. In the judgment means 24, the information collection software in each user terminal 10A is operated. It is a standard for judging whether or not it is necessary (useful / beneficial). That is, as the above judgment criteria and the list 24a / list 24b, information according to the company's policy or business may be set as needed by an administrator in the company, but in this embodiment, information including spyware and the like. Since it is possible to always obtain the latest information on the collected software from related sites on the Internet free of charge, based on the information obtained by the information collecting means 25, the above judgment criteria and the list 24a / list 24b Is determined and set by an administrator or the like, or automatically set by the reference / list setting means 26.

  If the information collecting software is determined not to be held in the user terminal 10A by the determination means 24 according to the above-described determination criteria [that is, it is determined that the information is not necessary (useful / beneficial) for business) Case] The management means 23A sends a deletion command to the user terminal 10A to delete the information collection software from the user terminal 10A, and forcibly deletes the information collection software from the user terminal 10A. ing.

  When a list (white list) 24a in which information related to information collection software necessary for business is registered is set as the above-mentioned determination criteria, the determination means 24 refers to the possession status of the information collection software registered in the database 22a. Then, the information collection software held in the user terminal 10A and the information registered in the white list 24a are collated, and the information corresponding to the information collection software held in the user terminal 10A is displayed in the white list 24a. It is determined whether or not it is registered. If the information corresponding to the information collection software is determined not to be registered in the white list 24a by the determination unit 24 [that is, the information collection software is not necessary (useful / beneficial) for business purposes. If determined, the management unit 23A sends a deletion command to the user terminal 10A to delete the information collection software from the user terminal 10A, and forcibly deletes the information collection software from the user terminal 10A. It is like that.

  Further, when the list (black list) 24b in which information related to information collection software unnecessary for business is registered is set as the determination judgment criterion, the judgment unit 24 uses the information collection software registered in the database 22a. The information collection software held in the user terminal 10A is referred to the information registered in the black list 24b to match the information collection software held in the user terminal 10A. It is determined whether the information to be registered is registered in the black list 24b. When the determination unit 24 determines that the information corresponding to the information collection software is registered in the black list 24b [that is, the information collection software is not necessary for business (useful / beneficial). If determined, the management unit 23A sends a deletion command to the user terminal 10A to delete the information collection software from the user terminal 10A, and forcibly deletes the information collection software from the user terminal 10A. It is like that.

Next, the operation of the management server 20A in the first embodiment will be described according to the flowchart shown in FIG. 3 (steps S101 to S114).
In the management server 20A, first, the download unit 27 downloads the latest information search software search program from a predetermined providing site free of charge via the Internet (step S101), and the program downloaded by the download unit 27 is downloaded. , Or a predetermined process (notification means 12) on the management server 20A side.
Are added to each user terminal 10A by the installation means 28 (step S102). This download / installation operation is initially executed when the information collection software management system 1A is installed / started up, when the user terminal 10A is connected to the in-house LAN 40, or when it is regularly updated. .

  In parallel with or before or after the above download / installation work (steps S101, S102), the information collection means 25 provides the latest information on information collection software including spyware free of charge from related sites via the Internet. Based on the information related to the information collection software downloaded and collected by the information collection means 25 (step S103), the criteria / list setting means 26 uses the judgment criteria and the list 24a / list used by the judgment means 24. 24b is set (step S104).

  At this time, as described above, the judgment criteria and the list 24a / list 24b may be set by the administrator's judgment based on the information obtained by the information collecting means 25, or obtained by the information collecting means 25. It may be automatically set by the reference / list setting means 26 based on the information. When setting the white list 24a, information that the administrator or the reference / list setting unit 26 permits use in the company while referring to the information about the information collecting software collected by the information collecting unit 25 Information on the collection software is set / added to the white list 24a. Further, when setting the black list 24b, the administrator or the reference / list setting means 26 permits the use within the company while referring to the information about the information collecting software collected by the information collecting means 25. Information related to information collection software that is not to be set is added to the black list 24b.

  Thereafter, in each user terminal 10A, the installed search program is executed automatically (periodically) by the function of the search means 11 or in response to a search instruction from the management server 20A. The information in the storage unit 10b of the user terminal 10A is collected, the information collection software is searched from the software held in the storage unit 10b of the user terminal 10A, and the search result is in-house by the notification means 12 The management server 20A is notified through the LAN 40.

  When the management server 20A receives the notification of the search result from the user terminal 10A (YES route in step S105), the extraction unit 21 determines that the search result notified from each user terminal 10A is the user terminal 10A. As the information collection software possession status, various information such as the software name, version information, and installation / download date / time of each applicable software is extracted in addition to the presence / absence and number of the corresponding software in each user terminal 10A. (Step S106).

  When the possession status extracted by the extraction means 21 is referred to and there is information collection software to be newly registered (YES route in step S107), the registration means 22 provides information on the new information collection software (retention status). ) Is associated with the user terminal 10A, registered in the database 22a of the storage unit 20b, and made into a ledger (step S108).

  After the new information collection software is registered, the judging means 24 selects one of the newly registered software in the database 22a (step S109), and the possession status of the selected software is referred to. It is determined whether or not the selected information collection software should be held in the user terminal 10A connected to the in-house LAN 40 in accordance with the above-described determination criteria or the list 24a / list 24b (step S110). .

  At this time, when the white list 24a is used, when the determination unit 24 determines that the information corresponding to the information collection software is not registered in the white list 24a [that is, the information collection software is If it is determined that it is not necessary (useful / beneficial); NO route in step S111], the management unit 23A sends a deletion command to the user terminal 10A, and the information collection software is forced from the user terminal 10A. (Step S112).

  Further, when the black list 24b is used, when the determination unit 24 determines that information corresponding to the information collection software is registered in the black list 24b [that is, the information collection software is necessary for business purposes] When it is determined that it is not (useful / beneficial); NO route in step S111], the management unit 23A sends a deletion command to the user terminal 10A to delete the information collection software from the user terminal 10A. The information collection software is forcibly deleted from the user terminal 10A (step S112).

  As a result of the determination by the determination means 24, if the selected information collection software is not registered in the white list 24a or the black list 24b (YES route in step S111), or after sending a deletion command, It is determined whether or not there is unselected new information collection software (step S113). If there is any unselected one (YES route in step S113), the process returns to step S109 to return to the unselected information collection software. One piece of wear is selected, and processing similar to that described above (steps S110 to S113) is executed.

  On the other hand, when there is no unselected item (NO route in step S113), when it is determined in step S105 that notification of the search result is not received from the user terminal 10A (NO route), or in step S107 When it is determined that there is no information collection software to be registered (NO route), it is determined whether it is time to update information about the information collection software and the search program (at the time of regular update) (step) S114). If it is determined that it is time for regular update (YES route of step S114), the process returns to steps S101 and S103, and the same processing as described above is performed. (NO route of step S114), it returns to step S105 and the process similar to the above-mentioned is performed.

  As described above, according to the information collection software management system 1A as the first embodiment of the present invention, the information collection software is searched by the search unit 11 in each user terminal 10A, and the search result is displayed by the notification unit 12. While the management server 20A is notified, the management server 20A extracts the information collection software possession status in each user terminal 10A from the search result notified from each user terminal 10A and registers it in the database 22a. And ledger. Then, the information collection software in the user terminal 10A is managed by the management means 23A on the basis of the possession status of the information collection software in the form of a ledger.

This makes it possible to determine whether the information collection software to be managed is useful or necessary (necessary) for business and users, rather than managing and simply deleting the information collection software. An environment is provided. More specifically, whether or not the information collection software held in the user terminal 10A should be held in the user terminal 10A in accordance with a preset judgment criterion, the white list 24a or the black list 24b. The information collection software that should not be held is sent to the user terminal 10A to forcibly delete it from the user terminal 10A. In this way, it becomes possible to manage and manage information collection software according to certain standards, and it is possible to delete only unnecessary information collection software such as spyware, which is useful and useful for businesses and users (
It is possible to reliably prevent leakage or leakage of confidential information by information collection software such as spyware without impairing necessary functions.

  The management server 20A collects information related to information collection software such as spyware via the Internet, and sets the judgment criteria and the list 24a / list 24b based on the collected information related to the information collection software. Can always set judgment criteria and list 24a / list 24b based on the latest information (information provided from a specific site through the Internet) regarding information collecting software such as spyware, and information collecting software based on the latest information The necessity / unnecessity of the wear can be determined.

  Further, the management server 20A installs a search program that causes the user terminal 10A to function as the search unit 11 and the notification unit 12 in the user terminal 10A, and the user terminal 10A executes the search program so that the search unit 11 and By configuring the user terminal 10A to have the function as the notification unit 12, the user terminal 10A does not need to install a search program at his / her own will, and under the management of the management server 20A, The function as the search means 11 and the notification means 11 can be reliably realized by the user terminal 10A.

  Furthermore, the management server 20A downloads a program for searching information retrieval software provided free of charge from the provided site through the Internet, and uses the program to implement the search means 11 on the user terminal 10A, thereby enabling the administrator Can search for the latest spyware or the like using a program that can always search for the latest spyware or the like without creating a special program.

[2] Description of Second Embodiment FIG. 4 is a block diagram showing the overall configuration of an information collection software management system 1B as a second embodiment of the present invention. As shown in FIG. As in the first embodiment, the information collection software management system 1B is also provided in-house (or on campus) such as a company, and includes a management server 20B and a proxy server 30 in addition to a plurality of user terminals 10B. These terminals 10B and servers 20B and 30 are connected to each other via an in-house LAN 40 so that they can communicate with each other. In FIG. 4, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof will be omitted.

  Each user terminal 10B is configured by a terminal device such as a personal computer (PC) used by each employee (user) in the company or the like in the same manner as the user terminal 10A of the first embodiment. Detailed functions of the user terminal 10B when a search program (a program similar to the first embodiment) for realizing a function (search means 11) for searching for information collection software is installed from the management server 20B The configuration will be described later with reference to FIG.

  In the present embodiment, when the user terminal 10B is connected to the in-house LAN 40, the search program may not be installed in each user terminal 10B, or the search program is installed from the beginning. May be. Each user terminal 10B can also access the outside Internet via the in-house LAN 40 and the proxy server 30 (browsing various sites, downloading various software, collecting various information, etc.).

The management server 20B is communicably connected to each user terminal 10B via the in-house LAN 40, and manages each user terminal 10B. In particular, as described later with reference to FIG. It has a functional configuration for managing the information collection software searched by the search program. The management server 20B can also access the external Internet (browsing various sites, downloading various software, collecting various information, etc.) via the in-house LAN 40 and the proxy server 30.

  FIG. 5 is a block diagram showing functional configurations of the user terminal 10B and the management server 20B in the information collection software management system 1B of the second embodiment. In FIG. 5, the proxy server 30 and the in-house LAN 40 are not shown. In FIG. 5, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof is omitted.

Similarly to the user terminal 10A of the first embodiment, the user terminal 10B includes a CPU 10a and a storage unit 10b.
The CPU 10a in the user terminal 10B according to the second embodiment functions as the search means 11 similar to that in the first embodiment, and also functions as the history recording means 13 and the notification means 14, and these functions are The CPU 10a is realized by executing a search program installed from the management server 20A and a program for realizing the history recording unit 13 and the notification unit 14 as will be described later. The program for realizing the history recording unit 13 and the notification unit 14 may also be installed from the management server 20B together with the search program.

Similar to the first embodiment, the search means 11 collects information in the storage unit 10b of the user terminal 10B and stores the information collection software as described above in the software held in the user terminal 10B (storage unit 10b). Search from the wear.
The history recording means 13 records a web browsing history (site browsing history via the Internet) in the user terminal 10B.

  The notification means 14 is a search result of the information collection software by the search means 11 similar to that of the first embodiment (in addition to the information on the presence / absence of the software, the software name and version information about the software, if any) Web browsing history recorded by the history recording means 13 from the previous search result notification to the current search result notification to the management server 20B through the in-house LAN 40. To do.

The management server 20B is also configured with a CPU 20a and a storage unit 20b, as with the management server 20A of the first embodiment.
The CPU 20a functions as the extraction unit 21, the registration unit 22, the determination unit 24, the information collection unit 25, the reference / list setting unit 26, the download unit 27, and the installation unit 28, as well as the management unit, as in the first embodiment. 23B and the function as the source site specifying means 29, and these functions are realized by the CPU 20a executing the management program. Here, the management program includes a program to be installed in the user terminal 10B in order to cause the user terminal 10B to function as the search means 11, the history recording means 13, and the notification means 14 (for the search program and the means 13, 14). Program) may be included, but in this embodiment, the search program is downloaded from the outside.

The source site specifying means 29 adds the difference between the search result notified last time from the user terminal 10B (stored in the database 22a) and the search result notified this time, and the web browsing history notified this time. In combination, the source site of the information collection software newly added to the user terminal 10B is specified.
That is, in the source site specifying means 29 of the present embodiment, it is assumed that the search results and web history history are notified from each user terminal 10B periodically (every fixed time interval), and during the fixed time interval, The installation / download timing of the newly added information collection software is combined with the browsing time of the website browsed on the user terminal 10B during the same time interval. As a result, when the newly added information collection software is installed by intruding into the user terminal 10B without the user's knowledge because the specific site was browsed on the Internet, the information collection software It is possible to specify the source site of which spyware is installed when browsing the web site. When performing identification using such a method, as the time interval is shortened, the accuracy of identifying the source site can be increased, and the risk (threat) caused by malicious information collection software (spyware) can be reduced. .

  As will be described later, the management means 23B, based on the holding status of the information collection software registered in the database 22a and the source site specified by the source site specifying means 29, each user terminal 10B and each user terminal Information management software in 10B is managed.

  Then, when it is determined that the information collection software is not to be held in the user terminal 10A by the determination unit 24 similar to the first embodiment [that is, it is determined that it is not necessary for business (useful / beneficial). When the management unit 23B deletes the information collection software from the user terminal 10B, the management unit 23B sends a deletion command to the user terminal 10B to delete the information collection software from the user terminal 10B. The access restriction forcibly prohibiting the access of the user terminal 10B (all user terminals 10B in the system 1B) to the source site specified by the source site specifying means 29 corresponding to the information collection software. To do.

  As a determination criterion, a list (white list) 24a in which information relating to information collection software necessary for business is registered is set, and the determination unit 24 determines that information corresponding to the information collection software is not registered in the white list 24a. If it is determined [that is, if it is determined that the information collection software is not necessary (useful / beneficial) for business], the management unit 23B deletes the information collection software from the user terminal 10B. A command is sent to the user terminal 10B to forcibly delete the information collection software from the user terminal 10B, and the user corresponding to the source site specified by the source site specifying means 29 corresponding to the information collection software Force access of terminal 10B (all user terminals 10B in system 1B) It is adapted to carry out the access restrictions that prohibited.

  Further, a list (black list) 24b in which information related to information collection software unnecessary for business is registered is set as a judgment judgment criterion, and information corresponding to the information collection software is registered in the black list 24b by the judgment unit 24. [In other words, when it is determined that the information collection software is not necessary (useful / beneficial) for business), the management unit 23B sends the information collection software from the user terminal 10B. A deletion command is sent to the user terminal 10B to delete it, and the information collection software is forcibly deleted from the user terminal 10B, and the source site specified by the source site specifying means 29 corresponding to the information collection software To the user terminal 10B (all user terminals 10B in the system 1B) And performs the access restriction to forcibly prohibit scan.

Next, the operation of the management server 20B in the second embodiment will be described according to the flowchart shown in FIG. 6 (steps S201 to S216).
Also in the management server 20B, as in the first embodiment, first, the download unit 27 downloads the latest information search software search program from the predetermined providing site free of charge via the Internet (step S201). 27, the program downloaded by the server 27B is processed as it is or after the predetermined processing (addition of a program for realizing the function as the history recording unit 13 or the notification unit 14) is performed on the management server 20B side, Installed in each user terminal 10B (step S202). This download / installation operation is initially executed when the information collection software management system 1B is installed / started up, when the user terminal 10B is connected to the in-house LAN 40, or when it is regularly updated. .

  In parallel with the download / installation operations (steps S201 and S202) described above, the latest information on information collection software including spyware, etc. is provided free of charge from related sites via the Internet by the information collection means 25. In step S203, based on the information about the information collection software collected by the information collection unit 25, the reference / list setting unit 26 uses the determination unit 24 as in the first embodiment. Determination criteria and list 24a / list 24b are set (step S204).

  Thereafter, in each user terminal 10B, the installed search program is executed automatically (periodically) by the function of the search means 11 or in response to a search instruction from the management server 20B. The information in the storage unit 10b of the user terminal 10B is collected, the information collection software is searched from the software held in the storage unit 10b of the user terminal 10B, and the search result is in-house by the notification means 14 The management server 20B is notified through the LAN 40.

  Further, in the present embodiment, in each user terminal 10B, the history recording means 13 also records the web browsing history (site browsing history via the Internet) in the user terminal 10B, and the notifying means 14 causes the search means 11 to Along with the search result, the web browsing history recorded by the history recording means 13 between the previous search result notification and the current search result notification is notified to the management server 20B.

  When the management server 20B receives a notification of the search result and the web browsing history from the user terminal 10B (YES route in step S205), the extraction means 21 uses the search result notified from each user terminal 10B. As the possession status of the information collecting software in the user terminal 10B, various information such as the presence / absence of the corresponding software in each user terminal 10B and the number of possessed software, software name, version information, installation / download date and time, etc. Information is extracted (step S206).

  When the possession status extracted by the extraction means 21 is referred to and there is information collection software to be newly registered (YES route in step S207), the registration means 22 provides information on the new information collection software (retention status). ) Is associated with the user terminal 10B, registered in the database 22a of the storage unit 20b, and made into a ledger (step S208).

  After the new information collection software is registered, the judging means 24 selects one of the newly registered software in the database 22a (step S209), and the possession status of the selected software is referred to. It is determined whether or not the selected information collection software should be held in the user terminal 10B connected to the in-house LAN 40 in accordance with the above-described determination criteria or the list 24a / list 24b (step S210). . Since the determination procedure in step S210 is the same as the determination procedure performed in step S110 of the first embodiment, description thereof is omitted.

  When it is determined that the information collection software selected in step S209 should not be held in the user terminal 10B connected to the in-house LAN 40 [that is, the information collection software is necessary for business (useful / beneficial) ) If it is determined that it is not; NO route of step S211], the search result (stored in the database 22a) notified last time from the user terminal 10B is notified by the source site specifying means 29 this time The difference from the search result and the web browsing history notified this time are combined to identify the source site of the information collection software (step S212).

  Thereafter, the management means 23B forces the access of the user terminal 10B (all user terminals 10B in the system 1B) to the source site specified by the source site specifying means 29 corresponding to the information collection software. The access restriction is prohibited (step S213), and a deletion command is sent to the user terminal 10B to forcibly delete the information collection software from the user terminal 10B (step S214).

If the source site cannot be specified by the source site specifying means 29,
Since it is considered that the information collection software is not installed by browsing a specific site on the Internet, the process of step S214 is performed without skipping the process of step S213.

  As a result of determination by the determination means 24, when it is determined that the selected information collection software is not necessary (useful / beneficial) for business (YES route in step S211), or after the deletion command is transmitted, It is determined whether there is unselected information collection software (step S215). If there is unselected software (YES route in step S215), the process returns to step S209 to return to the unselected information collection software. Is selected, and the same processing (steps S210 to S215) as described above is executed.

  On the other hand, when there is no unselected item (NO route in step S215), or when it is determined in step S205 that the search result and web browsing history are not notified from the user terminal 10B (NO route), step If it is determined in S207 that there is no information collection software to be newly registered (NO route), it is determined whether it is time to update information about the information collection software and the search program (at the time of regular update). (Step S216). If it is determined that it is a periodical update (YES route in step S216), the process returns to steps S201 and S203, and the same processing as described above is performed. On the other hand, if it is determined that it is not a periodical update, (NO route of step S216), it returns to step S205 and the same process as the above-mentioned is performed.

  Thus, according to the information collection software management system 1B as the second embodiment of the present invention, the information collection software is searched by the search means 11 in each user terminal 10B and the user is recorded by the history recording means 13. While the web browsing history in the terminal 10B is recorded, the search result and the web browsing history recorded from the previous search result notification to the current search result notification are notified to the management server 20B by the notification means 14, while the management server In 20B, the possession status of the information collection software in each user terminal 10B is extracted from the search result notified from each user terminal 10B, registered in the database 22a, and made into a ledger, and the user terminal 10B. The source site of the newly added information collection software is identified. Then, the information collection software in the user terminal 10B is managed by the management means 23B based on the possession status of the information collection software in the form of a ledger and the identified source site.

As a result, as in the first embodiment, the information collection software is not managed and simply deleted, but whether the information collection software to be managed is useful and necessary (necessary) for business or users. A system environment capable of determining whether or not More specifically, in the second embodiment, the information collection software held in the user terminal 10B should be held in the user terminal 10B in accordance with a preset judgment criterion, the white list 24a or the black list 24b. For information collection software that should be determined whether or not it should be retained, a deletion command is sent to the user terminal 10B to forcibly delete it from the user terminal and the user for the source site Access to the terminal 10B is forcibly prohibited.

  In this way, it becomes possible to manage and manage information collection software according to certain standards, and as in the first embodiment, only unnecessary information collection software such as spyware can be deleted, and companies and users can be deleted. For example, it is possible to reliably prevent leakage or leakage of confidential information by information collection software such as spyware without impairing functions useful and necessary (necessary) for business.

  In the second embodiment, when a user browses a site from the user terminal 10B via the Internet or the like, information collection software (spyware or the like) that should not be held enters the user terminal 10B and is installed. In this case, the source site is identified and access to the source site is forcibly prohibited, so once a source site for unnecessary information collection software such as spyware is identified, the source site is identified. On the other hand, the user terminal 10B cannot access, and thereafter it is possible to reliably prevent unnecessary information collection software such as spyware from being taken into the user terminal.

[3] Description of Third Embodiment FIG. 7 is a block diagram showing the overall configuration of an information collection software management system 1C as a third embodiment of the present invention. As shown in FIG. As in the first embodiment, the information collection software management system 1C is also provided in-house (or on-campus) such as a company, and includes a management server 20C and a proxy server 30 in addition to a plurality of user terminals 10C. These terminals 10C and servers 20C and 30 are connected to each other via an in-house LAN 40 so as to communicate with each other. In FIG. 7, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof will be omitted.

  Each user terminal 10C is configured by a terminal device such as a personal computer (PC) used by each employee (user) in the company or the like in the same manner as the user terminal 10A of the first embodiment. Each user terminal 10C can also access the Internet outside the company (browsing various sites, downloading various software, collecting various information, etc.) via the in-house LAN 40 and the proxy server 30.

  The management server 20C is communicably connected to each user terminal 10C via the in-house LAN 40, and manages each user terminal 10C. In particular, as described later with reference to FIG. It has a functional configuration for managing the user terminal 10C and information collection software. The management server 20C can also access the Internet outside the company (browsing various sites, downloading various software, collecting various information, etc.) via the in-house LAN 40 and the proxy server 30.

  FIG. 8 is a block diagram showing functional configurations of the user terminal 10C and the management server 20C in the information collection software management system 1C of the third embodiment. In FIG. 8, the proxy server 30 and the in-house LAN 40 are not shown. In FIG. 8, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof will be omitted.

Similarly to the user terminal 10A of the first embodiment, the user terminal 10C includes a CPU 10a and a storage unit 10b.
The CPU 10a in the user terminal 10C of the third embodiment functions as the history recording means 13 similar to the second embodiment and also functions as the notification means 15, and these functions are performed by the CPU 10a. This is realized by executing a program for realizing the recording unit 13 and the notification unit 15. Note that the program for realizing the history recording unit 13 and the notification unit 15 may be installed by a user or may be installed from the management server 20C.

The history recording means 13 records a web browsing history (site browsing history via the Internet) at the user terminal 10C.
The notification unit 15 notifies the management server 20C of the web browsing history recorded by the history recording unit 13 through the in-house LAN 40. The notification operation is performed automatically by the function of the notification means 15 or periodically at predetermined time intervals in response to an instruction from the management server 20C.

In addition, the management server 20C is configured to include a CPU 20a and a storage unit 20b, similarly to the management server 20A of the first embodiment.
The CPU 20a functions as an access site extraction unit 201, an access unit 202, a search unit 203, a management unit 204, a determination unit 205, an information collection unit 206, a reference / list setting unit 207, and a download unit 208. The function is realized by the CPU 20a executing a management program. Here, the search means 203 is the same as the search means 11 of the first and second embodiments. In this embodiment, the CPU 10a is realized by executing a search program downloaded from the outside as will be described later. It is a function.

The access site extraction unit 201 extracts information related to a site accessed (viewed) by each user terminal 10C from the web browsing history notified from each user terminal 10C.
The access unit 202 accesses a site accessed by each user terminal 10C based on the information extracted by the access site extraction unit 201. More specifically, using the URL (Uniform Resource Locator) of the browsing site extracted from the web browsing history by the access site extracting unit 201, the browsing site is accessed (connected / viewed). If the browsing site is to install information collection software such as spyware on a browsing terminal or the like, the information collection software such as spyware has entered the management server 20C along with the access by the access means 202. Will be installed.

The search unit 203 collects information in the storage unit 20b of the management server 20C after the access to the site by the access unit 202, similar to the search unit 11 in the user terminals 10A and 10B of the first and second embodiments. Thus, the information collection software as described above is searched from the software held in the management server 20C (storage unit 20b).
When the information collection software is searched for by the search means 203, the management means 204 includes information related to the information collection software and a source site of the information collection software [information extracted by the access site extraction means 201 (viewing The user terminal 10C and the information collection software in each user terminal 10C are managed based on the site URL)].

The determination unit 205 is the same as the determination unit 24 of the first and second embodiments, and the search unit 20
When the information collection software is searched according to No. 3, the searched information collection software is held in the user terminal 10C connected to the in-house LAN 40 in accordance with a predetermined criterion or white list 205a / black list 205b. It is to determine whether or not it should be. Note that the determination criteria and the list 205a / list 205b in the third embodiment are the same as the determination criteria and the list 24a / list 24b described in the first embodiment, and a description thereof will be omitted.

The information collecting means 206 is the same as the information collecting means 25 of the first and second embodiments, and information related to information collecting software is obtained through the Internet (network) connected to the management server 20C via the proxy server 30. To collect.
The reference / list setting unit 207 is the same as the reference / list setting unit 26 of the first and second embodiments, and the above determination is made based on the information related to the information collection software collected by the information collection unit 206. The reference and the list 205a / list 205b are set.

  The download unit 208 is the same as the download unit 27 of the first and second embodiments, and is provided free of charge from a predetermined providing site through the Internet (network) connected to the management server 20C via the proxy server 30. The latest information search software search program is downloaded, and in the management server 20C, the CPU 20a executes the above-mentioned program downloaded by the download means 208 so as to function as the search means 203. It has become.

  As in the first and second embodiments, when the determination unit 205 determines that the information collection software should not be held in the user terminal 10C [that is, what is necessary for business (useful / beneficial) If it is determined that the information collection software is not, the management unit 204 sends a deletion command to the user terminal 10C to delete the information collection software from the user terminal 10C, and forcibly causes the information collection software to be deleted from the user terminal 10C. At the same time, the user terminal 10C (all user terminals 10C in the system 1C) with respect to the source site of the information collection software (the site specified by the information (URL) extracted by the access site extracting means 201) Access restriction is forcibly prohibited.

Next, the operation of the management server 20C in the third embodiment will be described according to the flowchart shown in FIG. 9 (steps S301 to S317).
Also in the management server 20C, as in the first and second embodiments, first, the download unit 208 downloads the latest information search software search program from the predetermined providing site through the Internet free of charge (step S301). The program downloaded by the download unit 208 is installed in the management server 20C so that the CPU 20a of the management server 20C functions as the search unit 203 (step S302). This download / installation operation is initially executed when the information collection software management system 1C is introduced / started up or periodically updated.

  In parallel with the download / installation work (steps S301 and S302) described above, the latest information on information collection software including spyware is provided free of charge from the relevant sites via the Internet by the information collecting means 206. In the same manner as in the first and second embodiments, the reference / list setting unit 207 uses the information / software information collected and collected by the information collection unit 206 and based on the information about the information collection software collected by the information collection unit 206 (step S303). The judgment criteria and list 205a / list 205b used in the above are set (step S304).

On the other hand, at each user terminal 10C, a web browsing history (site browsing history via the Internet) at the user terminal 10C is recorded, and automatically (periodically) or according to an instruction from the management server 20C by the function of the notification means 15. Accordingly, the web browsing history recorded by the history recording unit 13 between the previous notification and the current notification is notified by the notification unit 15 to the management server 20C through the in-house LAN 40.

  When the management server 20C receives a notification of the search result and the web browsing history from the user terminal 10C (YES route in step S305), the web browsing history notified from each user terminal 10C by the access site extraction unit 201. Thus, information (URL) related to the site accessed (viewed) by each user terminal 10C is extracted (step S306).

  When the site browsed on the user terminal 10C is extracted by the access site extraction unit 201 (YES route in step S307), one of the extracted sites is selected by the access unit 202 (step S308), and the access site extraction is performed. Based on the information (URL) extracted by the means 201, the browsing site of each user terminal 10C is accessed (step S309). As described above, when the browsing site is to install information collecting software such as spyware on the browsing terminal or the like, the information collecting software such as spyware is managed by the management server along with the access by the access means 202. Installed by invading 20C.

  Thereafter, the information in the storage unit 20b of the management server 20C is collected by the search unit 203, and the information collection software is searched from the software held in the storage unit 20b of the management server 20C (step S310). When the information collection software is retrieved by the retrieval unit 203 (YES route in step S311), the retrieved information collection software is retrieved by the determination unit 205 in accordance with the above-described determination criteria or the list 205a / list 205b. It is determined whether or not the user terminal 10C connected to is to be held (step S312). Since the determination procedure in step S312 is the same as the determination procedure performed in steps S110 and 210 of the first and second embodiments, description thereof will be omitted.

  When it is determined that the retrieved information collection software is not to be held in the user terminal 10C connected to the in-house LAN 40 [that is, the information collection software is necessary for business (useful / beneficial) If NO, the NO route of step S313], the management means 204 forces the access of the user terminal 10C (all user terminals 10C in the system 1C) to the source site of the information collection software. Is restricted (step S314), and a deletion command is sent to the user terminal 10C to forcibly delete the information collection software from the user terminal 10C (step S315).

  As a result of the determination by the determination means 24, when it is determined that the retrieved information collection software is not necessary (useful / beneficial) for business (YES route in step S313), or the information collection software is determined by the search means 203. If no search is made (YES route in step S311) or after a delete command is sent, it is determined whether or not there is an unselected site extracted in step S306 (step S316). If there is one (YES route in step S316), the process returns to step S308, one unselected site is selected, and the same processing as described above (steps S309 to S316) is executed.

On the other hand, when there is no unselected item (NO route in step S316), when it is determined in step S205 that notification of the web browsing history is not received from the user terminal 10C (NO route), or in step S307 When it is determined that there is no browsing site on the user terminal 10C (NO route), it is determined whether or not it is time to update information about the information collection software and the search program (at the time of regular update) (step) S317). If it is determined that it is time for regular updating (YES route of step S317), the process returns to steps S301 and S303, and the same processing as described above is performed. On the other hand, if it is determined that it is not time for periodic updating, (NO route of step S317), it returns to step S305 and the process similar to the above is performed.

  Thus, according to the information collection software management system 1C as the third embodiment of the present invention, the web browsing history in the user terminal 10C is recorded by the history recording means 13 in each user terminal 10C, and the web browsing is performed. While the history is notified to the management server 20C by the notification means 15, the management server 10C extracts information (URL) related to the browsing site accessed by the user terminal 10C from the web browsing history notified from the user terminal 10C. Based on the extracted information, access to the site accessed by the user terminal 10C is executed. After the access, the information collection software is searched by the search means 203 in the management server 10C.

  When the information collection software is searched, it is natural that it is almost certain that the information collection software is installed in the user terminal 10C that accesses and browses the same site. Therefore, based on the information about the information collection software and the source site of the information collection software to be accessed, the management means 204 manages the information collection software at the user terminal.

  As a result, the system 1C of the third embodiment does not manage and simply delete the information collection software, but the information collection software to be managed is useful and necessary (necessary) for business and users. A system environment capable of determining whether or not there is provided. More specifically, whether or not the information collection software searched by the management server 20C is to be held in the user terminal 10C according to a predetermined determination criterion, the white list 205a or the black list 205b. For information collecting software that should not be determined and held, a deletion command is sent to the user terminal 10C to be forcibly deleted from the user terminal 10C, and access of the user terminal 10C to the source site is forced. Prohibited.

  In this way, it becomes possible to manage and manage information collection software according to certain standards, and as in the first and second embodiments, only unnecessary information collection software such as spyware can be deleted. It is possible to reliably prevent leakage or leakage of confidential information by information collection software such as spyware without impairing functions that are useful and necessary (necessary) for business purposes and users.

  In the system 1C of the third embodiment, the management server 20C accesses a site such as the Internet accessed by the user from the user terminal 10C, and unnecessary information collection software such as spyware is installed on the site. The management server 20C recognizes whether the site is an installation site. And if the site is a site that installs unnecessary information collection software such as spyware, access to the source site is forcibly prohibited, so once the unnecessary information collection software such as spyware is installed. When it is recognized that the site is the source site of the wearer, the user terminal 10C cannot access the source site, and thereafter unnecessary information collection software such as spyware is taken into the user terminal 10C. It becomes possible to deter this reliably.

The management server 20C collects information related to information collection software such as spyware over the Internet, and sets the judgment criteria and the list 205a / list 205b based on the collected information related to the information collection software. Can always set judgment criteria and list 205a / list 205b based on the latest information (information provided from a specific site through the Internet) regarding information collecting software such as spyware, and information collecting software based on the latest information The necessity / unnecessity of the wear can be determined.

  Further, the management server 20C downloads a program for searching information retrieval software provided free of charge from the providing site via the Internet, and uses the program to implement the search means 203 in the management server 20C, whereby the administrator can It is possible to search for the latest spyware or the like using a program that can always search for the latest spyware or the like without creating a special program.

[4] Others The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.
Further, the functions (all or part of the functions of each means) as the means 11 to 15, 21, 22, 23A, 23B, 24 to 29, 201 to 208 described above are computers (CPU, information processing apparatus, various terminals). Is implemented by executing a predetermined application program (management program).

  The program is, for example, a computer such as a flexible disk, CD (CD-ROM, CD-R, CD-RW, etc.), DVD (DVD-ROM, DVD-RAM, DVD-R, DVD-RW, DVD + R, DVD + RW, etc.). It is provided in a form recorded on a readable recording medium. In this case, the computer reads the management program from the recording medium, transfers it to the internal storage device or the external storage device, stores it, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a program recorded on a recording medium. The application program as the management program includes a program code for causing the above-described computer to realize the functions as the means 11 to 15, 21, 22, 23A, 23B, 24 to 29, and 201 to 208. Also, some of the functions may be realized by the OS instead of the application program.

  Furthermore, as a recording medium in the present embodiment, in addition to the flexible disk, CD, DVD, magnetic disk, optical disk, and magneto-optical disk described above, an IC card, ROM cartridge, magnetic tape, punch card, computer internal storage device (RAM) In addition, various computer-readable media such as an external storage device or a printed matter on which a code such as a barcode is printed can be used.

[5] Appendix [Appendix 1]
Information collection software that is connected to a user terminal so as to be able to communicate with each other, collects information in the user terminal, and operates the user terminal to transmit the information to a specific device. A management server that is informed of the search results searched by the search means from among the users and manages the user terminal,
Extraction means for extracting the information collection software possession status in the user terminal from the search result notified by the search means notified from the user terminal;
Registration means for registering the holding status of the information collection software extracted by the extraction means in a database in association with the user terminal;
A management server comprising management means for managing the information collection software in the user terminal based on the possession status of the information collection software registered in the database.

[Appendix 2]
Information collection software that is connected to a user terminal so as to be able to communicate with each other, collects information in the user terminal, and operates the user terminal to transmit the information to a specific device. A management server that is informed of search results searched by the search means from among the web browsing records in the user terminal and manages the user terminal,
Extraction means for extracting the information collection software possession status in the user terminal from the search result notified by the search means notified from the user terminal;
Registration means for registering the holding status of the information collection software extracted by the extraction means in a database in association with the user terminal;
Information collection software newly added to the user terminal by combining the difference between the search result notified last time from the user terminal and the search result notified this time and the web browsing history notified this time Source site identification means for identifying the wear source site,
Management for managing the user terminal and the information collection software in the user terminal based on the possession status of the information collection software registered in the database and the source site specified by the source site specifying means A management server characterized by comprising a means.

[Appendix 3]
A management server that is connected to a user terminal so as to communicate with each other, is notified of a web browsing record in the user terminal, and manages the user terminal,
An access site extracting means for extracting information related to a site accessed by the user terminal from the web browsing history notified from the user terminal;
Access means for accessing the site accessed by the user terminal based on the information extracted by the access site extraction means;
After the access to the site by the access means, search the information collection software for operating the management server so that the information in the management server is collected and transmitted to a specific device. Search means to
When the information collection software is searched by the search means, the user terminal and the information collection software in the user terminal based on the information about the information collection software and the source site of the information collection software A management server comprising management means for managing the management server.

[Appendix 4]
Information collection software that is connected to a user terminal so as to be able to communicate with each other, collects information in the user terminal, and operates the user terminal to transmit the information to a specific device. A management program for notifying the search result searched by the search means from among the above and causing the computer to function as a management server for managing the user terminal,
Extraction means for extracting the status of possession of the information collection software in the user terminal from the search result by the search means notified from the user terminal;
Registration means for registering the holding status of the information collection software extracted by the extraction means in a database in association with the user terminal; and
A management program for causing the computer to function as management means for managing the information collection software in the user terminal based on the possession status of the information collection software registered in the database.

[Appendix 5]
With reference to the possession status of the information collecting software registered in the database, the information collecting software retained in the user terminal should be retained in the user terminal in accordance with a preset criterion. As a judgment means for judging whether or not it is a thing, the computer is made to function,
If it is determined by the determination means that the information collection software should not be held, the management means sends a deletion command to the user terminal to delete the information collection software from the user terminal. The management program according to appendix 4, wherein the computer is caused to function so as to forcibly delete the information collection software from the user terminal.

[Appendix 6]
Reference is made to the possession status of the information collecting software registered in the database, information relating to the information collecting software retained in the user terminal and information necessary for business operations registered in the list in advance, As a judging means for judging whether or not information corresponding to the information collecting software held in the user terminal is registered in the list,
If it is determined by the determination means that the information corresponding to the information collection software is not registered in the list, the management means issues a deletion command to delete the information collection software from the user terminal. The management program according to appendix 4, wherein the computer is caused to function so as to be sent to a user terminal and forcibly delete the information collection software from the user terminal.

[Appendix 7]
Information on the information collection software registered in the database and information on the information collection software stored in the user terminal and information collection software that is previously registered in the list and is unnecessary for business As a judging means for judging whether or not information corresponding to the information collecting software held in the user terminal is registered in the list,
When it is determined by the determination means that information corresponding to the information collection software is registered in the list, the management means issues a deletion command to delete the information collection software from the user terminal. The management program according to appendix 4, wherein the computer is caused to function so as to be sent to a user terminal and forcibly delete the information collection software from the user terminal.

[Appendix 8]
Information collection software that is connected to a user terminal so as to be able to communicate with each other, collects information in the user terminal, and operates the user terminal to transmit the information to a specific device. A management program for notifying a search result searched by a search means from among the web browsing records in the user terminal and causing the computer to function as a management server for managing the user terminal,
Extraction means for extracting the status of possession of the information collection software in the user terminal from the search result by the search means notified from the user terminal;
Registration means for registering the holding status of the information collection software extracted by the extraction means in a database in association with the user terminal;
Information collection software newly added to the user terminal by combining the difference between the search result notified last time from the user terminal and the search result notified this time and the web browsing history notified this time Source site identification means for identifying the wear source site, and
Management for managing the user terminal and the information collection software in the user terminal based on the possession status of the information collection software registered in the database and the source site specified by the source site specifying means A management program which causes the computer to function as means.

[Appendix 9]
With reference to the possession status of the information collecting software registered in the database, the information collecting software retained in the user terminal should be retained in the user terminal in accordance with a preset criterion. As a judgment means for judging whether or not it is a thing, the computer is made to function,
If it is determined by the determination means that the information collection software should not be held, the management means sends a deletion command to the user terminal to delete the information collection software from the user terminal. The information collection software is forcibly deleted from the user terminal, and the access of the user terminal to the source site specified by the source site specifying means corresponding to the information collection software is forcibly The management program according to appendix 8, wherein the computer is caused to function so as to be prohibited.

[Appendix 10]
Reference is made to the possession status of the information collecting software registered in the database, information relating to the information collecting software retained in the user terminal and information necessary for business operations registered in the list in advance, As a judging means for judging whether or not information corresponding to the information collecting software held in the user terminal is registered in the list,
If it is determined by the determination means that the information corresponding to the information collection software is not registered in the list, the management means issues a deletion command to delete the information collection software from the user terminal. The information collection software is forcibly deleted from the user terminal and sent to the user terminal, and the user terminal corresponding to the information collection software is identified by the source site identification means. 9. The management program according to appendix 8, wherein the computer is caused to function so as to forcibly prohibit access.

[Appendix 11]
Information on the information collection software registered in the database and information on the information collection software stored in the user terminal and information collection software that is previously registered in the list and is unnecessary for business As a judging means for judging whether or not information corresponding to the information collecting software held in the user terminal is registered in the list,
When it is determined by the determination means that information corresponding to the information collection software is registered in the list, the management means issues a deletion command to delete the information collection software from the user terminal. The information collection software is forcibly deleted from the user terminal and sent to the user terminal, and the user terminal corresponding to the information collection software is identified by the source site identification means. 9. The management program according to appendix 8, wherein the computer is caused to function so as to forcibly prohibit access.

[Appendix 12]
Information collecting means for collecting information about the information collecting software through the network; and
Supplementary notes 5 to 7, wherein the computer is caused to function as the determination criteria or the criteria / list setting means for setting the list based on the information on the information collecting software collected by the information collecting means. , The management program according to any one of appendix 9 to appendix 11.

[Appendix 13]
13. The computer according to any one of appendix 4 to appendix 12, wherein the computer is caused to function as an installation unit that installs a search program that causes the user terminal to function as the search unit in the user terminal. Management program.

[Appendix 14]
As a download means for downloading a program for searching information retrieval software provided from a providing site through a network, the computer is caused to function,
14. The management program according to appendix 13, wherein the installation unit causes the computer to function so as to install the program downloaded by the download unit as the search program on the user terminal.

[Appendix 15]
A management program connected to a user terminal so as to be able to communicate with each other, being notified of a web browsing record in the user terminal, and causing a computer to function as a management server for managing the user terminal,
An access site extracting means for extracting information related to a site accessed by the user terminal from a web browsing history notified from the user terminal;
Access means for accessing the site accessed by the user terminal based on the information extracted by the access site extraction means;
After the access to the site by the access means, search the information collection software for operating the management server so that the information in the management server is collected and transmitted to a specific device. Search means to perform, and
When the information collection software is searched by the search means, the user terminal and the information collection software in the user terminal based on the information about the information collection software and the source site of the information collection software A management program for causing the computer to function as management means for managing

[Appendix 16]
When the information collection software is searched by the search means, as a determination means for determining whether or not the information collection software should be held in the user terminal according to a predetermined determination criterion, Make the computer work,
If it is determined by the determination means that the information collection software should not be held, the management means sends a deletion command to the user terminal to delete the information collection software from the user terminal. Forcibly deleting the information collecting software from the user terminal and causing the computer to function so as to forcibly prohibit access of the user terminal to the source site of the information collecting software. The management program according to supplementary note 15, which is characterized.

[Appendix 17]
When the information collecting software is searched by the searching means, the information collecting software is collated with information related to information collecting software necessary for business registered in the list in advance, and information corresponding to the information collecting software is checked. As a determination means for determining whether or not is registered in the list,
If it is determined by the determination means that the information corresponding to the information collection software is not registered in the list, the management means issues a deletion command to delete the information collection software from the user terminal. The computer is sent to the user terminal to forcibly delete the information collection software from the user terminal and to forcibly prohibit access of the user terminal to the source site of the information collection software. The management program according to appendix 29, wherein

[Appendix 18]
When the information collecting software is searched by the searching means, the information collecting software is collated with information relating to information collecting software unnecessary for business registered in the list in advance, and the information collecting software is handled. As a judging means for judging whether or not information is registered in the list, the computer is caused to function,
When it is determined by the determination means that information corresponding to the information collection software is registered in the list, the management means issues a deletion command to delete the information collection software from the user terminal. The computer is sent to the user terminal to forcibly delete the information collection software from the user terminal and to forcibly prohibit access of the user terminal to the source site of the information collection software. The management program according to supplementary note 15, characterized in that

[Appendix 19]
Information collecting means for collecting information about the information collecting software through the network; and
Supplementary Note 16 to Supplementary Note 18, wherein the computer is caused to function as the determination criterion or the criterion / list setting unit for setting the list based on the information on the information collecting software collected by the information collecting unit. The management program according to any one of the above.

[Appendix 20]
As a download means for downloading a program for searching information retrieval software provided from a providing site through a network, the computer is caused to function,
20. The management program according to any one of appendix 15 to appendix 19, wherein the program downloaded by the download unit is caused to execute the function as the search unit by causing the computer to execute the program.

1 is a block diagram showing an overall configuration of an information collection software management system as a first embodiment of the present invention. It is a block diagram which shows the function structure of the user terminal and management server in the information collection software management system of 1st Embodiment. It is a flowchart for demonstrating operation | movement of the management server in 1st Embodiment. It is a block diagram which shows the whole structure of the information collection software management system as 2nd Embodiment of this invention. It is a block diagram which shows the function structure of the user terminal and management server in the information collection software management system of 2nd Embodiment. It is a flowchart for demonstrating operation | movement of the management server in 2nd Embodiment. It is a block diagram which shows the whole structure of the information collection software management system as 3rd Embodiment of this invention. It is a block diagram which shows the function structure of the user terminal and management server in the information collection software management system of 3rd Embodiment. It is a flowchart for demonstrating operation | movement of the management server in 3rd Embodiment.

Explanation of symbols

1A, 1B, 1C Information collection software management system 10A, 10B, 10C User terminal 10a CPU
10b Storage section 11 Search means 12 Notification means 13 History recording means 14, 15 Notification means 20A, 20B, 20C Management server 20a CPU
20b Storage unit 21 Extraction unit 22 Registration unit 22a Database 23A, 23B Management unit 24 Judgment unit 24a List (white list)
24b List (Black List)
25 Information Collection Unit 26 Criteria / List Setting Unit 27 Download Unit 28 Installation Unit 29 Source Site Identification Unit 201 Access Site Extraction Unit 202 Access Unit 203 Search Unit 204 Management Unit 205 Judgment Unit 205a List (White List)
205b list (black list)
206 Information collection means 207 Standard / list setting means 208 Download means 30 Proxy server 40 Internal LAN

Claims (17)

A user terminal,
A management server that is communicably connected to the user terminal and manages the user terminal;
The user terminal is
Search means for searching for information collection software for operating the user terminal so as to collect information in the user terminal and transmit the information to a specific device, from the software of the user terminal;
And a notification means for notifying the management server of the search result of the information collection software by the search means,
The management server
Extraction means for extracting the information collection software possession status in the user terminal from the search result notified by the search means notified from the user terminal;
Registration means for registering the holding status of the information collection software extracted by the extraction means in a database in association with the user terminal;
An information collection software comprising management means for managing the information collection software in the user terminal based on the possession status of the information collection software registered in the database Management system. The management server
With reference to the possession status of the information collecting software registered in the database, the information collecting software retained in the user terminal should be retained in the user terminal in accordance with a preset criterion. Comprising judgment means for judging whether or not it is a thing,
When it is determined by the determination means that the information collection software should not be held, the management means of the management server uses a deletion command to delete the information collection software from the user terminal. 2. The information collecting software management system according to claim 1, wherein the information collecting software is forcibly deleted from the user terminal. The management server
A list of information related to information collection software necessary for business,
The information collection software registered in the database is referred to, the information collection software stored in the user terminal is collated with the information registered in the list, and the user terminal Comprising a judging means for judging whether or not the information corresponding to the held information collecting software is registered in the list,
If it is determined by the determination means that the information corresponding to the information collection software is not registered in the list, the management means of the management server should delete the information collection software from the user terminal. 2. The information collection software management system according to claim 1, wherein a deletion instruction is sent to the user terminal to forcibly delete the information collection software from the user terminal. The management server
A list of information related to information collection software that is unnecessary for business,
The information collection software registered in the database is referred to, the information collection software stored in the user terminal is collated with the information registered in the list, and the user terminal Comprising a judging means for judging whether or not the information corresponding to the held information collecting software is registered in the list,
If it is determined by the determination means that information corresponding to the information collection software is registered in the list, the management means of the management server should delete the information collection software from the user terminal. 2. The information collection software management system according to claim 1, wherein a deletion instruction is sent to the user terminal to forcibly delete the information collection software from the user terminal. A user terminal,
A management server that is communicably connected to the user terminal and manages the user terminal;
The user terminal is
Search means for searching for information collection software for operating the user terminal so as to collect information in the user terminal and transmit the information to a specific device, from the software of the user terminal;
A history recording means for recording a web browsing history in the user terminal;
Notification for notifying the management server of the search result of the information collection software by the search means and the web browsing history recorded by the history recording means between the previous search result notification and the current search result notification With a means,
The management server
Extraction means for extracting the information collection software possession status in the user terminal from the search result notified by the search means notified from the user terminal;
Registration means for registering the holding status of the information collection software extracted by the extraction means in a database in association with the user terminal;
Information collection software newly added to the user terminal by combining the difference between the search result notified last time from the user terminal and the search result notified this time and the web browsing history notified this time Source site identification means for identifying the wear source site,
Management for managing the user terminal and the information collection software in the user terminal based on the possession status of the information collection software registered in the database and the source site specified by the source site specifying means An information gathering software management system, characterized by comprising means. The management server
With reference to the possession status of the information collecting software registered in the database, the information collecting software retained in the user terminal should be retained in the user terminal in accordance with a preset criterion. Comprising judgment means for judging whether or not it is a thing,
When it is determined by the determination means that the information collection software should not be held, the management means of the management server uses a deletion command to delete the information collection software from the user terminal. The information collecting software is forcibly deleted from the user terminal, and the user terminal accesses the source site specified by the source site specifying means corresponding to the information collecting software. 6. The information collecting software management system according to claim 5, wherein the information is forcibly prohibited. The management server
A list of information related to information collection software necessary for business,
The information collection software registered in the database is referred to, the information collection software stored in the user terminal is collated with the information registered in the list, and the user terminal Comprising a judging means for judging whether or not the information corresponding to the held information collecting software is registered in the list,
If it is determined by the determination means that the information corresponding to the information collection software is not registered in the list, the management means of the management server should delete the information collection software from the user terminal. A deletion instruction is sent to the user terminal to forcibly delete the information collection software from the user terminal, and the source site specified by the source site specifying means corresponding to the information collection software is 6. The information collection software management system according to claim 5, wherein access to the user terminal is forcibly prohibited. The management server
A list of information related to information collection software that is unnecessary for business,
The information collection software registered in the database is referred to, the information collection software stored in the user terminal is collated with the information registered in the list, and the user terminal Comprising a judging means for judging whether or not the information corresponding to the held information collecting software is registered in the list,
If it is determined by the determination means that information corresponding to the information collection software is registered in the list, the management means of the management server should delete the information collection software from the user terminal. A deletion instruction is sent to the user terminal to forcibly delete the information collection software from the user terminal, and the source site specified by the source site specifying means corresponding to the information collection software is 6. The information collection software management system according to claim 5, wherein access to the user terminal is forcibly prohibited. The management server
Information collection means for collecting information about the information collection software through a network connected to the management server;
The reference / list setting means for setting the judgment criteria or the list based on the information on the information collecting software collected by the information collecting means is provided. The information collection software management system according to any one of claims 4 to 6-8. The management server
A search program that causes the user terminal to function as the search means and the notification means is configured to include an installation means for installing in the user terminal,
10. The user terminal functions as the search unit and the notification unit by executing a search program installed by the installation unit. Information collection software management system described in 1. The management server
Comprising download means for downloading a program for searching for information search software provided from a providing site through a network connected to the management server;
11. The information collection software management system according to claim 10, wherein the installation unit installs the program downloaded by the download unit in the user terminal as the search program. A user terminal,
A management server that is communicably connected to the user terminal and manages the user terminal;
The user terminal is
A history recording means for recording a web browsing history in the user terminal;
And a notification means for notifying the management server of the web browsing history recorded by the history recording means,
The management server
An access site extracting means for extracting information related to a site accessed by the user terminal from the web browsing history notified from the user terminal;
Access means for accessing the site accessed by the user terminal based on the information extracted by the access site extraction means;
After the access to the site by the access means, search the information collection software for operating the management server so that the information in the management server is collected and transmitted to a specific device. Search means to
When the information collection software is searched by the search means, the user terminal and the information collection software in the user terminal based on the information about the information collection software and the source site of the information collection software An information collecting software management system, characterized by comprising management means for managing the information. The management server
When the information collecting software is searched by the searching means, a judging means for judging whether or not the information collecting software should be held in the user terminal according to a preset judgment criterion is provided. Configured
When it is determined by the determination means that the information collection software should not be held, the management means of the management server uses a deletion command to delete the information collection software from the user terminal. And forcibly deleting the information collection software from the user terminal sent to the user terminal, and forcibly prohibiting the access of the user terminal to the source site of the information collection software, The information collection software management system according to claim 12. The management server
A list of information related to information collection software necessary for business,
When the information collecting software is searched by the search means, the information collecting software is compared with the information registered in the list, and whether the information corresponding to the information collecting software is registered in the list And judgment means for judging whether
If it is determined by the determination means that the information corresponding to the information collection software is not registered in the list, the management means of the management server should delete the information collection software from the user terminal. Sending a deletion command to the user terminal to forcibly delete the information collection software from the user terminal and forcibly prohibiting the user terminal from accessing the source site of the information collection software The information collection software management system according to claim 12, wherein: The management server
A list of information related to information collection software that is unnecessary for business,
When the information collecting software is searched by the search means, the information collecting software is compared with the information registered in the list, and whether the information corresponding to the information collecting software is registered in the list And judgment means for judging whether
If it is determined by the determination means that information corresponding to the information collection software is registered in the list, the management means of the management server should delete the information collection software from the user terminal. Sending a deletion command to the user terminal to forcibly delete the information collection software from the user terminal and forcibly prohibiting the user terminal from accessing the source site of the information collection software The information collection software management system according to claim 12, wherein: The management server
Information collection means for collecting information about the information collection software through a network connected to the management server;
13. The system according to claim 12, further comprising: a criterion / list setting unit configured to set the determination criterion or the list based on information about the information collecting software collected by the information collecting unit. The information collection software management system according to claim 15. The management server
By comprising download means for downloading a program for searching for information search software provided from a providing site through a network connected to the management server, and executing the program downloaded by the download means The information collection software management system according to any one of claims 12 to 16, wherein the information collection software management system fulfills a function as the search means.

Images