KR100696752B1 - Control method of unauthorized application program and recording medium recorded the same method can be read by computer - Google Patents

Abstract

The present invention provides a method of controlling execution of an unauthorized application program of each client in a network system including a server provided with a database and at least one client connected to the server through a wired / wireless communication network and in which an explorer is basically employed. A first data information of an unauthorized application is stored in the database, and a) comparing the first data information with second data information of a scheduled application to be delivered to the explorer of each client; b) when the first data information and the second data information coincide with each other, an instruction for controlling execution of the scheduled application program is transmitted from the explorer of each client; It provides a method for controlling the execution of an unauthorized application comprising the step of transmitting the command.

Unlicensed Applications, Hooking Modules, Explorer

Description

Control method of unauthorized application program and recording medium recorded the same method can be read by computer}

1 is a network diagram of a method for controlling execution of an unauthorized application according to the present invention;

Figure 2 is a conceptual diagram of the execution control method of an unauthorized application in accordance with the present invention.

Figure 3 is a flow chart of the execution control method of an unauthorized application in accordance with the present invention.

<Description of Symbols for Main Parts of Drawings>

2: hooking module 4: explorer

C: client S: server

DB: Database

The present invention relates to an execution control method of an unauthorized application and a computer-readable recording medium on which the method is recorded. More particularly, the present invention relates to a server and a wired / wireless communication network provided with a database storing data information on an unauthorized application. In a network system including each client computer in a connected Windows environment, a method for controlling execution of unauthorized applications among the application programs executed on each client, and a program for the method is recorded and executed by the computer. It is about the medium.

In recent years, as the era has entered the full-fledged informatization society, efficient information management has emerged as a very important problem. Accordingly, the spread of computers capable of storing and processing large amounts of information is rapidly spreading.

In general, an operating system (OS) and a number of applications are used for easier and faster operation in managing information using a computer. A dual operating system is a system that is loaded into a computer by a bootstrap program and then loaded with other applications. A program provided to manage application programs, and the application program is a program having a function specialized to enable information processing according to a user's purpose, such as a word processor.

In particular, the most widely used operating system is the Windows environment developed by Microsoft, which is used for work and other purposes on most computers, and is basically a browser application that allows access to the World Wide Web (WWW). Explorer is built in as a program.

Therefore, computer users can use Internet Explorer to access e-mail, remote computer connections (telnet), file transfers (FTP), Usenet News, Internet search, Internet conversations and discussions (IRC), I have enjoyed various Internet services such as electronic bulletin boards (BBS), hypertext information viewing, and online games.

On the other hand, businesses using two or more computers and other peripherals use local area networks (LANs) to connect each computer via wired or wireless network to effectively use each computer and other equipment. A network operating system is a collection of programs that manages the main server and its many clients.

Therefore, the server can check the names and authorizations of multiple clients connected to the network, process each client's requirements, and send them. The network operating system can also be basically used in a Windows environment.

However, with the rapid increase in the dissemination and use of computers, various purposes of applications and Internet services are provided through legal and illegal channels, which leads to various closures.

In other words, the efficiency of work is frequently observed by using a variety of applications limited to personal use for a long time using a public computer at a workplace, and unregistered illegal copying applications are distributed indiscriminately so that valuable Infringement of intellectual property rights and copyrights is also common.

Moreover, these pirated applications are indefinite in their replication and distribution process, so they can't believe their quality, which can threaten the entire computer system, threaten the security system due to indiscriminate e-mails and file transfers, and greatly increase the likelihood of penetration of various malicious viruses. There is a situation.

Therefore, there is a need to actively control and manage the use of these unauthorized applications. Currently, there is no proper measure, and each client is manually searched. Therefore, it is very inefficient and cumbersome. It is causing a number of side problems.

Accordingly, the present invention has been made to solve the above problems, in a network system including a server and a plurality of clients connected to the wired and wireless communication network, the execution control method of the unauthorized application of each client and the computer Its purpose is to provide a computer readable recording medium having recorded thereon a program for execution.

In order to solve the above technical problem, the execution control method of the unauthorized application program according to the present invention includes a server provided with a database and at least one or more clients of the Windows environment that is connected to the server and the wired and wireless communication network and the explorer is basically employed. A method of controlling execution of unauthorized applications of each client in a network system, wherein the database stores first data information of unauthorized applications, and a) transmits the first data information to the explorer of each client. Comparing second data information of the application program; b) when the first data information and the second data information coincide with each other, an instruction for controlling execution of the scheduled application program is transmitted from the explorer of each client; And a step of transmitting a command.

 Before or after step a) or step b) of the execution control method of the unauthorized application program according to the present invention, c) the first data information and the third data information of the application program previously executed in each client are compared with each other. If the match is further characterized in that it further comprises the step of stopping the previously executed application program.

 The first to third data information of the execution control method of the unauthorized application program according to the present invention are characterized in that the file size, file internal name, and file original name of the corresponding application program are included.

 The file size, file internal name, and file original name of the execution control method of the unauthorized application program according to the present invention are sequentially compared, and if any one of them is identical, it is determined that they are matched with each other.

 In the execution control method of the unauthorized application program according to the present invention, the command for execution control is characterized in that there is no file associated with the application program.

The computer-readable recording medium having recorded thereon the execution control method of the unauthorized application program according to the present invention is a computer-readable recording medium having recorded thereon a program for executing the execution control method of the unauthorized application program on the computer. do.

Hereinafter, a method for controlling execution of an unauthorized application and a computer-readable recording medium on which the method is recorded will be described in detail with reference to the accompanying drawings.

First, FIG. 1 is a diagram illustrating a network in which an unauthorized application execution control method according to the present invention can be used, and includes a server S and at least one client C connected thereto via a wired or wireless communication network.

The server (S) and at least one client (C) can be interconnected with each other in a local area network (LAN), and the server (S) can be wired or wirelessly connected to a public switched telephone network (PSTN), in particular the Internet. Each client (C) uses a Windows environment that uses Explorer as its operating system.

In addition, the server (S) is provided with a database (DB) that stores a variety of data information for unauthorized applications that are subject to execution control, various data information for such unauthorized applications can be updated and stored from time to time through the public telephone network (PSTN) have.

In addition, each client (C) is controlled to execute an unauthorized application scheduled to be executed on the client (C) based on various data information about the unauthorized application stored in the database (DB) of the server (S), and at the same time. An unauthorized application is stopped.

For this purpose, a hooking module in the form of a program encrypted in a predetermined language may be used. The hooking module is named for convenience as a conceptual definition according to a function.

More specifically, the accompanying Figure 2 is a conceptual diagram showing the operation relationship of the hooking module 2 to easily understand the function and role, the hooking module 2 may have the form of a program encrypted in a predetermined language. The foregoing may have been mentioned above and may be stored in each client (C). The hooking module 2 is a part of the explorer 4 which is basically employed in the window environment that is the operating system of the client C, and operates under the "system" account authority of the internal user under the window environment.

On the other hand, in the Windows environment, various applications are executed in two cases, one of which is whether information about the application to be executed is transmitted to the exploiter 4 and then whether a file exists for execution of the application. Therefore, it is the case that is executed, and another one is the case that is executed by directly creating (Process) for the processing of the application.

Therefore, the hooking module 2 is designed to control all these cases, and the data information about the unauthorized application from the database DB of the server S and the scheduled or executed in the client C. The data information of the application programs is compared with each other, and if they match, execution control or stop is performed.

For convenience, according to each case of the above-described application program execution, first, the hooking module 2 operates as a part of the explorer 4, so that the application to be executed is transmitted to the explorer 4 for execution of the application program. The data information of the program is compared with the data information of the unauthorized application stored in the server (S) database (DB), and when it is matched, for example, a command for controlling execution of the point of 'no such file' is generated. .

Therefore, the execution of the application is controlled.

On the other hand, in the case of an application program that does not go through the explorer 4, the execution itself cannot be controlled, but the hooking module 2 has the authority of the "system" account, which is an internal user of the Windows environment, so After comparing the data information with the data information of the unauthorized application stored in the database (DB) of the server (S) from time to time, the execution of the application is stopped if a match.

At this time, the reason why the hooking module 2 has the authority of the "system" account is that the concept of authority exists for each process in the case of Windows NT, 2000, XP, 2003 version. You can ask for permission. It is therefore intended to be able to manage and process all processes including the same level by having the rights of the "system" account, which is the top administrator.

Thus, you can stop an unauthorized application that has already run.

Meanwhile, in the above description, the hooking module 2 compares the data information of the unauthorized application program stored in the database DB of the server S with the data information of the scheduled or pre-executed application program, and controls or stops it. These data information may preferably be file size, file internal name, file original name.

This is to reduce the possibility of avoiding the execution control by the artificial manipulation of each client C user. For example, when only the names are compared, the user can artificially change the application program name to avoid the execution control.

Therefore, the hooking module 2 is characterized by comparing all of the file size, file internal name, and file source name. Particularly, even if the file sizes are different, the hooking module 2 compares the internal file names and the file internal names are different. If all of the file names are matched and any one of them is matched, it is desirable to determine whether the corresponding application and the unauthorized application match each other.

For reference, the file size and the name inside the file are hidden by the developer, so it is impossible to artificially change them. By comparing these, the reliability of unauthorized application execution control can be greatly improved and the file source name can be added even though it is possible to artificially change. Compared with, we get higher accuracy.

Hereinafter, a flow chart of a method for controlling execution of an unauthorized application program according to the present invention in place of the theorem will be described with reference to FIGS. 1 to 3.

First, the execution control method of an unauthorized application according to the present invention is connected to a server (S) having a database (DB) and a wired / wireless communication network (PSTN) and at least one or more clients of a window environment in which an Explorer 4 is basically employed. Requires a network system that includes (C)

At this time, the data information of the unauthorized application is stored in the database DB. The data information of the unauthorized application is compared with the data information of the scheduled application to be delivered to the explorer 4 of each client C. st1)

And if they match each other, the command to control the execution by transmitting a command for execution control of the scheduled application to be executed from the explorer (4) of each client (C), if the discrepancy is a command for the execution of the scheduled application to be executed Will be sent to execute (st2)

In addition, when the data information of the unauthorized application and the data information of the previously executed application program are compared with each other before or after the selected one of st1 and st2 described above, the previously executed application program is matched. It is preferable that this stopping step st3 proceeds from time to time.

At this time, the data information includes the file size, the file internal name, and the file original name of the corresponding application program, and the data information is sequentially compared. In addition, the aforementioned command for execution control may be the point that there is no file associated with the application.

In addition, the execution control method of the unauthorized application program according to the present invention can be executed in a conventional computer in the form of a program encrypted in a predetermined language, a computer-readable recording medium having such a program recorded therein also It should be within the scope of the right.

The present invention has the advantage that can be used for home or other purposes, as well as the workplace, depending on the data information of the unauthorized application stored in the database of the server.

In other words, when used at home, it is an unauthorized application that stores data information of adult or recreational applications to correct the child's computer usage habits. By properly controlling programs, applications, and indispensable e-mail and file transfer functions, not only can you build a more stable computer system but also significantly improve your work efficiency.

In addition, the method for controlling an application program according to the present invention has an advantage of being able to proceed quickly, accurately, and simply because it can proceed automatically according to activation of a server and a client.

Claims (6)

A method of controlling execution of unauthorized applications of each client in a network system including a server provided with a database and at least one client connected to the server through a wired / wireless communication network and in which an explorer is basically employed. The database stores the first data information of the unauthorized application, a) the first data information and the second data information of the scheduled application to be delivered to the explorer of each client, or the third data information of the application program which is already executed in each of the clients by the hooking module of each client. Comparing the step; b) when the first data information and the second data information coincide with each other, an instruction for execution control of the scheduled application program is transmitted from the explorer of each client, and when the first data information and the second data information match, the second data information is executed for the execution of the scheduled application program. When the command is transmitted or when the first data information and the third data information match, the previously executed application program is stopped by the hooking module, And the first to third data informations each include a file size, a file internal name, and a file source name of the corresponding application program. delete delete The method of claim 1, In step a), the file size, file internal name, and file original name are sequentially compared. If any one of the file size, file internal name, and file original name is the same in step b), it is determined that the first data information and the second data information, or the first data information and the third data information match each other. Execution control method of an unauthorized application, characterized in that. delete A computer-readable recording medium having recorded thereon a program for executing the execution control method according to claim 1 or 4 on a computer.

Images