Web page falsification detection apparatus and storage medium

1. A Web page falsification detection apparatus provided in a Web server device including an application logic module capable of communicating with a user terminal which displays a Web page, the Web page falsification detection apparatus including a characteristic information storage module, being capable of communicating with a manager terminal, and executing falsification checking processing for Web page information to display the Web page on the user terminal,

the Web page falsification detection apparatus comprising:

a first extraction module which receives a Web page generation program configured to generate the Web page information and including a dynamic information calculation program configured to calculate dynamic information to display a changed part in the Web page, comment information including dynamic characteristic information indicating a characteristic including a range of change of the dynamic information, and a plurality of static information items to display an unchanged part in the Web page, and extracts the comment information from the received Web page generation program;

a dynamic characteristic information extraction module which extracts the dynamic characteristic information from the extracted comment information;

a second extraction module which extracts the static information items from the received Web page generation program;

a first generation module which couples the extracted static information items, and generates first static characteristic information that indicates a characteristic of the static information, based on the coupled static information and function information that indicates a predetermined unidirectional function;

a first writing module which correlates identification information for identifying the Web page information, the extracted dynamic characteristic information, and the generated first static characteristic information, and writes the correlated information items in the characteristic information storage module;

a second writing module which writes the received Web page generation program in a storage module in the Web server device;

a third extraction module which extracts the dynamic information from Web page information transmitted from the application logic module, the Web page information being generated from the Web page generation program in the storage module by the application logic module which has received a Web page obtaining request from the user terminal, and including the dynamic information, the comment information, and the static information items;

a dynamic information falsification determination module which reads the extracted dynamic characteristic information from the characteristic information storage module based on the identification information for identifying the Web page information generated by the application logic module, and determines whether the extracted dynamic information corresponds to the dynamic characteristic information read from the characteristic information storage module;

a fourth extraction module which extracts the static information items from the transmitted Web page information, when a result of determination by the dynamic information falsification determination module indicates that the dynamic information corresponds to the dynamic characteristic information;

a second generation module which couples the extracted static information items, and generates second static characteristic information that indicates a characteristic of the coupled static information, based on the coupled static information and the function information;

a static information falsification determination module which determines whether the first static characteristic information stored in the characteristic information storage module matches with the generated second static characteristic information; and

a transmission module which transmits the transmitted Web page information to the user terminal, when a result of determination by the static information falsification determination module indicates that the first static characteristic information matches with the generated second static characteristic information.

2. The Web page falsification detection apparatus according to claim 1 , wherein

the comment information includes information which includes a maximum value and a minimum value of the change of the dynamic information, and

the dynamic characteristic information extraction module includes a fifth extraction module which extracts the information including the maximum value and the minimum value of the change of the dynamic information from the comment information, as the dynamic characteristic information.

3. A non-transitory computer-readable storage medium which stores a program executed by a processor of a Web page falsification detection apparatus provided in a Web server device including an application logic module capable of communicating with a user terminal which displays a Web page, the Web page falsification detection apparatus including a characteristic information storage module, being capable of communicating with a manager terminal, and executing falsification checking processing for Web page information to display the Web page on the user terminal,

the program comprising:

first program code which causes the processor to execute first extraction processing of extracting comment information from a Web page generation program received from the manager terminal, the Web page generation program configured to generate the Web page information and including a dynamic information calculation program configured to calculate dynamic information to display a changed part in the Web page, the comment information, and a plurality of static information items to display an unchanged part in the Web page, the comment information including dynamic characteristic information indicating a characteristic including a range of change of the dynamic information;

second program code which causes the processor to execute dynamic characteristic information extraction processing of extracting the dynamic characteristic information from the extracted comment information;

third program code which causes the processor to execute second extraction processing of extracting the static information items from the received Web page generation program;

fourth program code which causes the processor to execute first generation processing of coupling the extracted static information items, and generating first static characteristic information that indicates a characteristic of the static information, based on the coupled static information and function information that indicates a predetermined unidirectional function;

fifth program code which causes the processor to execute first writing processing of correlating identification information for identifying the Web page information, the extracted dynamic characteristic information, and the generated first static characteristic information, and writing the correlated information items in the characteristic information storage module;

sixth program code which causes the processor to execute second writing processing of writing the received Web page generation program in a storage module in the Web server device;

seventh program code which causes the processor to execute third extraction processing of extracting the dynamic information from Web page information transmitted from the application logic module, the Web page information being generated from the Web page generation program in the storage module by the application logic module which has received a Web page obtaining request from the user terminal, and including the dynamic information, the comment information, and the static information items;

eighth program code which causes the processor to execute dynamic information falsification determination processing of reading the extracted dynamic characteristic information from the characteristic information storage module based on the identification information for identifying the Web page information generated by the application logic module, and determining whether the extracted dynamic information corresponds to the dynamic characteristic information stored in read from the characteristic information storage module;

ninth program code which causes the processor to execute fourth extraction processing of extracting the static information items from the transmitted Web page information, when a result of determination in the dynamic information falsification determination processing indicates that the dynamic information corresponds to the dynamic characteristic information;

tenth program code which causes the processor to execute second generation processing of coupling the extracted static information items, and generating second static characteristic information that indicates a characteristic of the coupled static information, based on the coupled static information and the function information;

eleventh program code which causes the processor to execute static information falsification determination processing of determining whether the first static characteristic information stored in the characteristic information storage module matches with the generated second static characteristic information; and

twelfth program code which causes the processor to execute transmission processing of transmitting the transmitted Web page information to the user terminal, when a result of determination in the static information falsification determination processing indicates that the first static characteristic information matches with the generated second static characteristic information.