KR101523708B1 - The system which manages a selective blocking process about a web-site - Google Patents

Abstract

The present invention relates to a system for managing a selective blocking process of a web-site (WS). The system comprises: a user authentication event occurrence message receipt module; a WS operation server attribution category recognizing module; an authentication process blocking determining module; an authentication process blocking/allowing treating module; an authentication process blocking adding treating module; and a blocking object category setting guide module.

Description

[0001] The present invention relates to a web site selection blocking management system,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system for selectively blocking access to a harmful web site (WS), and more particularly, to a system for protecting a user's name Even if an unauthorized authentication process or an unauthorized access to the harmful WS (for example, an adult WS, an adult game WS, a game WS, a gambling WS, etc.) is attempted by sneaking in secretly, It is possible to prevent a variety of mental / physical damages caused by access to harmful WSs of additional users (for example, children, acquaintances, etc.) without any difficulty on the user side by making it possible to block them in accordance with the category setting information And more particularly, to a WS screening management system capable of performing screening.

2. Description of the Related Art [0002] Recently, with the rapid development of electric / electronic / communication technologies, various types of web services (e.g., a location tracking web service, a game web, etc.) utilizing a wired / wireless online network Services, messaging web services, social networking web services, financial utilization web services, product purchase web services, cultural contents provision web services, etc.) are developed / It is also showing a wide increase trend.

For example, Japanese Patent Application Laid-Open No. 10-2004-99641 (entitled: Mobile Game System and Mobile Game Execution Method) (published on Dec. 2, 2004), Korean Patent Publication No. 10-2008-82234 Transmission method and mobile message transmission device using the same), Published Korean Patent Application No. 10-2012-89934 (Name: Mobile location tracking system and method of providing service of mobile location tracking system) (Aug. 16, 2012) Korean Patent Laid-Open No. 10-2013-96060 (titled "Movie recommendation service providing method and system thereof") (published on March 23, 2013), Korean Patent Laid-Open No. 10-2013-108049 (titled: Simplified A method of providing a smart banking service, and a bank server) (published on Oct. 2, 2013) disclose an example of web service-related back-up techniques according to the related art in more detail.

On the other hand, the use of various user information devices (e.g., a computer, a notebook, a smart phone, a tablet PC, a wireless game machine, a wireless notebook, etc.) capable of accessing a web site (WS: But also by additional users such as an acquaintance, a family member (for example, a child), and the like.

Of course, under this circumstance, it is needless to say that, on the side of an additional user such as an acquaintance, a family (for example, a child), the user's identification data (e.g., ID card, driver's license, resident registration card / Since it is common to be freely exposed in the space, if the management of this identification data is not strictly carried out, additional users such as acquaintances, family members (for example, children) (For example, an adult WS, an adult game WS, a game WS, a gaming WS, and the like) so that the user can not prevent the harmful WS from being blocked in advance.

Despite this situation, however, conventional web service-related back-up technologies have also implemented additional services that can naturally block harmful WS access problems by additional users such as acquaintances, family members (e.g., children) , The user was forced to take various mental / material damages caused by the harmful WS access of the additional users (eg, children, acquaintances, etc.), unless other measures were taken.

Korean Patent Laid-Open No. 10-2004-99641 (Title: Mobile Game System and Mobile Game Execution Method) Korean Patent Laid-Open No. 10-2008-82234 (Name: Mobile Message Transmission Method and Mobile Message Transmission Device Using It) Korean Patent Laid-Open No. 10-2012-89934 (Name: Mobile location tracking system and method of providing service of mobile location tracking system) Korean Patent Laid-Open No. 10-2013-9360 (titled: Movie recommendation service providing method and system) (published on January 23, 2013) Korean Patent Laid-Open No. 10-2013-108049 (Name: Method of providing simplified smart banking service and bank server) (Published on October 2, 2013)

Accordingly, an object of the present invention is to provide a method and system for transmitting a user authentication event occurrence message corresponding to a service request user previously set from a user authentication support server side in a communication pipeline of a WS operation server, a user information device, A computer module capable of receiving / storing the user authentication event occurrence message and a user authentication event occurrence message are read to confirm the registration information of the WS operation server and then the registration information of the confirmed WS operation server is stored (Eg, an online market category, a school category, a social group category, a newspaper category, a broadcasting station category, an adult category) of the WS operation server that is attempting the user authentication process Category, adult game category, game category, banker (For example, an adult category includes setting information that is an object to be blocked in the authentication process, information about a category to be blocked, etc.) The setting information for setting the category of the adult game to be subjected to the authentication process blocking target category, the setting information of the game category of the authentication process blocking target category, etc.) After confirming the result of judging whether or not the user authentication process is blocked by the WS operation server, it is necessary to communicate with the user authentication support server, block the user authentication process by the WS operation server, And thereby, on the side of additional users such as acquaintances, family members (e.g., children), etc., (Unauthorized user authentication) against the harmful WS (for example, the adult WS, the adult game WS, the game WS, the gambling WS, etc.) by stealthily stealing the name , Thereby guiding the user to easily avoid various mental / physical damages caused by harmful WS access of additional users (for example, children, acquaintances, etc.) without any difficulty on the user side.

Other objects of the present invention will become more apparent from the following detailed description and the accompanying drawings.

In order to accomplish the above object, the present invention provides a method and system for communicating with a user authentication support server supporting a user authentication process by a WS operation server operating a web site (WS) A user authentication event occurrence message reception module for receiving the user authentication event occurrence message when a user authentication event occurrence message corresponding to the set service request user is transmitted; Reads the user authentication event occurrence message, confirms the registration information of the WS operation server, compares the registered registration information of the WS operation server with the registered affiliation category matching information of each WS operation server registration information, A WS operation server attribution category grasping module for grasping the attribution category of the WS operation server that is attempting the authentication process; Communicating with the WS operating server attribution category identification module to identify the attribution category of the WS operating server and comparing the confirmed attribution category with the stored inhibition category setting information, An authentication process blocking determination module that determines whether the authentication process is blocked; Communicates with the WS operation server authentication blocking determination module to confirm the result of the blocking operation of the user authentication process by the WS operation server and then communicates with the user authentication support server to perform a user authentication process by the WS operation server Block or allow the authentication process blocking / allowing processing module; When the blocking target category setting request message is transmitted from the user information device, after reading the blocking target category setting request message, it is confirmed whether or not the user is entitled to set the blocking target category. And transmits the request message to the user information device. When the user identification information corresponding to the blocking subject category setting eligibility confirmation confirmation message is transmitted from the user information device, it is checked whether the corresponding identification information is legitimate, And a blocking target category setting guide module for generating a blocking target category setting guide frame and transmitting the generated blocking target category setting guide frame to the user information device.

According to another aspect of the present invention, there is provided a web server for communicating with a web hosting server that provides resources necessary for operating a web site (WS: Web-Site) A WS access event occurrence message reception module for receiving a WS access event occurrence message when an event occurrence message is transmitted; After the address of the WS is confirmed by reading the WS access event occurrence message, the address of the WS thus confirmed is compared with the attribution category matching information of each stored WS address, and the attribution category of the WS attempted by the user An access WS attribution category grasping module for identifying the access WS belonging category; Communicates with the WS attribution category identification module to identify the attribution category of the WS that is attempted to be accessed by the user and then compares the attribution category of the confirmed WS with the previously stored category information of the obstacle category, A WS access blocking determination module for determining whether or not to block the WS access; Communicates with the WS access blocking determination module to confirm whether or not the WS access is blocked by the user, and then communicates with the web hosting server to block the WS access by the user or block the WS access, A module; When the blocking target category setting request message is transmitted from the user information device, after reading the blocking target category setting request message, it is confirmed whether or not the user is entitled to set the blocking target category. And transmits the request message to the user information device. When the user identification information corresponding to the blocking subject category setting eligibility confirmation confirmation message is transmitted from the user information device, it is checked whether the corresponding identification information is legitimate, And a blocking target category setting guide module for generating a blocking target category setting guide frame and transmitting the generated blocking target category setting guide frame to the user information device.

In the present invention, when a user authentication event generation message corresponding to a service application user previously set from the user authentication support server side is transmitted in the communication pipeline of the WS operation server, the user information device, the user authentication support server, <Computation module capable of receiving / storing the authentication event occurrence message> <User authentication event occurrence message is read, the registration information of the WS operation server is confirmed, and the registration information of the confirmed WS operation server is stored in the WS operation (E.g., online market category, school category, social group category, newspaper category, broadcast station category, adult category, adult game, etc.) of the WS operation server that is attempting the user authentication process Category, game category, bank category, enterprise Category setting information (for example, setting information that the adult category is an object to be blocked in the authentication process, category information of an adult game category A computer module capable of judging whether or not the user authentication process is blocked by the WS operating server by comparing the setting information with the setting information of the authentication process blocking target category, After confirming the result of judging whether or not the user authentication process is blocked by the WS operation server, it communicates with the user authentication support server and blocks the user authentication process by the WS operation server or systematically arranges the allowable computer module , So that, under the implementation environment of the present invention, additional users such as acquaintances, family members (e.g., children) (Unauthorized user authentication) against the harmful WS (for example, the adult WS, the adult game WS, the game WS, the gambling WS, etc.) by stealthily stealing the user's name, It is possible to prevent various mental / material damages caused by access to harmful WS of additional users (for example, children, acquaintances, etc.) without any difficulty on the user side .

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a conceptual illustration of a communication environment of a WS screening block management system according to an embodiment of the present invention; FIG.
BACKGROUND OF THE INVENTION 1. Field of the Invention [0001]
3 is a conceptual diagram illustrating a detailed function execution procedure of the WS screening block management system according to one embodiment of the present invention.
4 is a diagram conceptually illustrating a communication environment of a WS screening block management system according to another embodiment of the present invention.
FIG. 5 is an exemplary view conceptually showing a detailed configuration of a WS screening block management system according to another embodiment of the present invention; FIG.
FIG. 6 is an exemplary diagram conceptually illustrating a detailed function execution procedure of a WS screening block management system according to another embodiment of the present invention; FIG.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a WS screening block management system according to the present invention will be described in detail with reference to the accompanying drawings.

1, on the side of the WS operating server 4 that operates the WS, the user authentication support server 2, the user information device (hereinafter, referred to as &quot; 1) (e.g., a computer, a notebook, a smart phone, a tablet PC, a wireless game machine, a wireless notebook, etc.).

When a series of user authentication times come on the side of the WS operation server 4 under the enforcement of the web service, the user authentication support server 2 (for example, a credit information management company server, a mobile communication company server, a financial institution server, (Or on the basis of a professional communication) based on the user authentication library module after communicating with the user authentication library module (e.g., the authentication authority server), calling the user authentication library module (or after performing specialized communication via the closed network) A series of user authentication procedures are attempted / proceeded.

At this time, on the WS operating entity side, various kinds of information (for example, URL information, ID information, WS personality information, membership information, WS operation instructions Information, etc.) to the user of the user authentication support server 2, and based on this, the user authentication library module is issued in advance, so that a series of web service procedures (user authentication procedures) So that it can proceed normally without a problem.

On the other hand, under the situation of the web service being operated by the WS operating server 4, the user information device 1 (for example, a computer, a notebook, a smart phone, a tablet PC, , A wireless notebook, etc.) is often performed not only by the user himself, but also by an additional user such as an acquaintance, a family member (e.g., a child), and the like.

Of course, under this circumstance, an additional user such as an acquaintance, a family member (for example, a child) may secretly steal the user's identification data (e.g., ID card, driver's license, resident registration, WS, an adult game WS, a game WS, a gambling WS, etc.), the user can not prevent it at all.

1, in the present invention, a user who is a member of a communication pipeline of a WS operation server 4, a user information device 1, a user authentication support server 2, (WS), an adult game WS, a game WS, a game WS, a gambling WS, etc.) by an additional user such as a user And to take measures to

2, the WS screening block management system 100 according to the present invention includes a user authentication support server 2 via a interface module 101, a wired / wireless on-line network 3, An operation information storage module 102 communicatively connected to the information device 1, a user authentication event occurrence message reception module 103, an attachment category matching information storage module 104 for each WS operation server registration information, Module 105, a WS operation server attribution category identification module 106, an authentication process blocking determination module 107, an authentication process blocking / permission processing module 108, an authentication process blocking additional processing module 109, The setting guide module 110, and the authentication process interrupt history processing module 111 are closely combined.

Here, when the user authentication process is performed by the WS operating server 4, the user authentication support server 2 provides the user authentication library module to the WS operating server 4 as described above, The user authentication support server 2 supports the user authentication process by the operation server 4. In this situation, the user who is in the process of authentication through the WS operation server 4 receives the WS screening blocking service of the present invention (In the present invention, information related to the service application user is provided to the user authentication support server 2 in advance in order to facilitate the determination process smoothly) , A user authentication event occurrence message including the corresponding < WS operation server registration information (e.g., URL information, ID information), user information, etc. To the system 100 of the invention.

In this situation, the operation information storage module 102 side can provide various operation information necessary for the WS screening blocking service inherent to the present invention, for example, registration information of the user authentication support server 2, registration information of the user information device 1, Image / graphic / link / video / setting information for generating various messages / guide frames, resource status information of the system 100, system information (for example, 100), which are necessary for the computation process of the respective computation modules, and program information for establishing / maintaining the communication / session, in its own information storage area (of course, Each operation information can be flexibly added / deleted or changed depending on the situation of the system 100).

In addition, as shown in FIG. 3, the affiliate category matching information storing module 104 side of each WS operating server registration information stores in its own information storage area attribution category matching information (for example, http: // m .aaa.b / cc......, which are classified into the newspaper category, the WS operating server having http: //m.kgame.b/dfd. Matching information indicating that the WS operating server having the URL as http: //m.adultmov.b/ff.fm is classified as an adult category, matching information such that KLWEAA is classified as an adult game category, (E.g., matching information indicating that the WS operating server is classified into a shopping mall category), thereby assisting the WS-blocking management process according to the present invention to proceed normally without any problem , Such as WS-specific properties attributed category matching information is data relating to the operating server WS 4 provided at the time of issuing the user authentication, the library modules that may be widely utilized width).

Further, the blocking target category setting information storage module 105 stores the blocking target category setting information (for example, the setting information of the adult category as the blocking target of the authentication process, the adult game category as the blocking process category of the authentication process) And setting information such as a setting category information, a setting category information, and a game category setting information, which are referred to as an authentication process blocking target category, are stored and managed so that a series of WS screening management procedures according to the present invention can be performed normally without any problem 3).

The user authentication event occurrence message receiving module 103 communicates with the user authentication support server 2 via the interface module 101 and the wired / wireless on-line network 3 , It is checked whether or not a user authentication event occurrence message including <WS operating server registration information (for example, URL information, ID information), user information, etc. is transmitted from the mobile communication server 2 side 3).

At this time, when it is confirmed that the user authentication event occurrence message including the <WS operation server registration information (for example, URL information, ID information), user information, etc. is transmitted from the user authentication support server 2 side, The occurrence message receiving module 103 side receives the received user authentication event message and then proceeds to a series of information storage routines to store / manage the received user authentication event occurrence message in its own information storage area, so that a series of subsequent procedures according to the present invention So that it can be normally performed without any problem (refer to FIG. 3).

Thus, when the user authentication event occurrence message including the WS operation server registration information (e.g., URL information, ID information), user information, and the like is received, the WS operation server belonging category identification module 106 receives the user authentication event (E.g., URL information, ID information), user information, and the like through the communication with the occurrence message receiving module 103 by reading the user authentication event occurrence message (See FIG. 3).

When the WS operation server registration information (for example, URL information, ID information), user information, and the like are checked through the above-described procedure, the WS operation server belonging category identification module 106 side, (For example, http: //m.aaa.b/cc...) For each WS operating server registration information previously stored in the information storing area by communicating with the matching information storing module 104 The WS operation server having the URL as the URL of the matching information that the WS operating server is categorized into the newspaper category, the matching information that the WS operation server having the URL as the URL is classified into the adult game category , the WS operating server that has http: //m.adultmov.b/ff.fr as the URL is classified as an adult category, and the WS operating server that has KLWEAA as its ID is classified as a shopping mall category Matching information Etc.) with the confirmed WS operation server registration information (for example, URL information and ID information), and proceeds to the process of grasping the attribution category of the WS operation server 4 that is attempting the user authentication process 3).

In this way, the WS-operation server 4 that is attempting to authenticate the user can receive the WS-operation server 4's attribution category (e.g., online market category, school category, social group category, newspaper category, broadcast station category, adult category, , The enterprise category, etc.) is grasped, the authentication process blocking determination module 107 side communicates with the WS operating server attribution category identification module 106 to identify the attribution category of the WS operating server 4 that is attempting the user authentication process (See FIG. 3).

Through the above-described procedure, it is possible to determine whether or not the WS-operation server 4 that is attempting the user authentication process is registered with the affiliated category (e.g., online market category, school category, social group category, newspaper category, broadcast station category, adult category, , Bank category, enterprise category, etc.) is confirmed, the authentication process blocking determination module 107 reads the user authentication event occurrence message and confirms the user information (the reason for confirming the user authentication event occurrence message is that, Which is set by the user in advance, to the blocking target category setting information storage module 105, and communicates with the blocking target category setting information storage module 105 and stores blocking target category setting information (For example, the adult category is set to be an object of blocking the authentication process , The setting information of the adult game category to be subjected to the authentication process blocking target category, the setting information of the game category of the authentication process blocking target category, and the like) with the attribution category of the WS operating server 4 The process goes to a step of judging whether or not the user authentication process by the WS operating server 4 is blocked (refer to FIG. 3).

Under this procedure, for example, the attribution category of the WS operating server 4 that is attempting the user authentication process is the adult category, and the description of the block target category setting information < the adult category is the authentication process blocking object & The WS access blocking status determination module 107 determines that the WS operation server 4 is an object of blocking the user authentication process.

Thus, in a situation where the result of determining whether or not the user authentication process is blocked by the WS operation server 4 is derived, the authentication process blocking / permission processing module 108 communicates with the authentication process blocking determination module 107, (For example, the result of the determination that the WS operation server 4 is the object of blocking the user authentication process or the WS operation server 4) 4) proceeds to a process of reading / confirming the result of the determination result that the user authentication process is acceptable (see FIG. 3).

(For example, the WS operation server 4 determines whether the user authentication process is blocked by the WS operation server 4) derived by the authentication process block determination module 107 through the above- The WS operation server 4 judges that the process is to be intercepted, or the WS operation server 4 determines that the user authentication process is acceptable, etc.) is read / confirmed, the authentication process interception / According to the result, communication with the user authentication support server 2 is performed, and the process of blocking or allowing the user authentication process by the WS operation server 4 is performed (refer to FIG. 3).

Of course, under this procedure, when the result of the determination that the WS operation server 4 is the object of intercepting the user authentication process is read / confirmed, the authentication process interception / permission processing module 108 side, The user authentication process by the WS operation server 4 is severely blocked by communication with the authentication support server 2. Eventually, the user (the service application user of the present invention) (Eg, adult WS, adult game WS, game WS, gambling WS, etc.) by an additional user such as a child (for example, a child)

As described above, in the embodiment of the present invention, the communication pipeline of the WS operation server 4, the user information device 1, the user authentication support server 2, A computer module capable of receiving / storing the user authentication event occurrence message when the user authentication event occurrence message corresponding to the service application user is transmitted, < &lt; user authentication event occurrence message & Compares the registered information of the confirmed WS operating server 4 with the stored attribution category matching information for each WS operating server registration information, and confirms that the WS operating server 4 (E.g., online market category, school category, social group category, newspaper category, broadcast station category, adult category, adult game category (For example, an adult category is registered as an authentication category) in which the attribution category of the WS operation server 4 that has been confirmed / confirmed is stored The setting information of the adult game category, the setting information of the adult game category, the setting information of the adult game category, and the game category, the setting information of the authentication process blocking target category) The WS operation server 4 communicates with the user authentication support server 2 to confirm whether or not the WS operation server 4 has blocked the user authentication process, The user authentication process by the user can be blocked or the computation module allowing the user to be allowed to be systematically arranged and so on. Therefore, under the implementation environment of the present invention, The unauthorized access (unauthorized user authentication) to the harmful WS (for example, the adult WS, the adult game WS, the game WS, the gambling WS, etc.) by stealthily stealing the user's name on the side of the additional user, The authentication procedure can be blocked at the source in accordance with the blocking target category setting information. As a result, it is possible to prevent the user Various mental / material damages can be easily avoided.

2, in addition to the above-described respective computation modules, the WS screening blocking system 100 of the present invention includes an authentication process blocking additional processing module 109, a blocking target category setting guide module 110 ), An authentication process interrupt history processing module 111, and the like.

At this time, the authentication process interruption addition processing module 109 communicates with the authentication process interception / permission processing module 108 to determine whether the user authentication process by the WS operation server 4 has been blocked, (See FIG. 3).

At this time, when it is confirmed that the user authentication process by the WS operation server 4 is blocked, the authentication process blocking additional processing module 109 advances a series of message generation routines to transmit a personal identification confirmation request message Of course, when the user who has received the authentication process interception cancellation request message normally inputs a series of user identification information and the validity of the user identification information is normally confirmed, the WS operation server 4 The user can normally proceed to the authentication process for the user in spite of the setting of the blocking target category and eventually the user can access the desired WS in the end) And then proceeds to a procedure for transmitting the request message to the user information device 1 connected to the wired / wireless on-line network 3 Reference).

In this case, the identity confirmation request message for blocking the authentication process can be variously modified depending on the situation, such as a callback message type, an e-mail type, and an ARS message type.

In this way, in the situation where the authentication process interception cancellation request confirmation message is transmitted, the user identification information (for example, password information for identifying the user, The image information for identifying the user, the image arrangement information for identifying the user, the mobile phone related information for identification, the credit card related information for identifying the user, the information related to the authorized certificate for identifying the user, etc.) The authentication process blocking additional processing module 109 has a series of legitimacy checking procedures (for example, a procedure for checking whether a password set in the personal identification information set by the user matches the password described in the personal identification information and confirming the legitimacy of the user, It is checked whether or not the response information for identity verification corresponding to the previously set question matches the response information described in the identity verification information, A procedure for checking whether the image is authentic or not, a procedure for checking whether the image for identification of the user set by the user matches the image described in the identification information of the user and confirming the legitimacy, the image arrangement for identifying the user, A procedure of checking whether the image arrangement described in the information is matched and confirming the legitimacy, a procedure of communicating with the mobile communication company server to confirm whether or not the mobile phone related information for confirming the identity is legitimate, A procedure for confirming whether the information related to the credit card is legitimate, a procedure for communicating with the server of the authorized certificate issuer and confirming the legitimacy of the information related to the authentication certificate for the authentication of the user, and the like) (See FIG. 3).

In this way, the user identification information (for example, password information for identifying the user, question / response information for identifying the user, image information for identifying the user, image arrangement information for identifying the user, , The authentication process interception addendum processing module 109 side communicates with the user authentication support server 2 at the side of the authentication process interception addition processing module 109. [ (That is, the authentication process can be canceled) by the WS operation server 4, and eventually the user side performs WS operation The user can normally access the desired WS by stepping on the authentication process by the server 4 normally.

On the other hand, on the side of the blocking target category setting guide module 110 operating in cooperation with the above-mentioned respective computing modules, the user information device (1) communicating with the user information device (1) 1), it is checked whether or not a blocking target category setting request message (that is, a request message for resetting, setting, or changing a blocking target category) has been transmitted (see FIG. 3).

At this time, when it is determined that the blocking target category setting request message (that is, the request message for resetting, setting new, or changing the blocking target category) is transmitted from the user information device 1, On the side of the guide module 110, after reading this, a series of message generating routines are advanced to generate a block authentication request confirmation request message for confirming whether or not the user is entitled to set the blocking target category, The process proceeds to a step of transmitting the completion confirmation category setting eligibility confirmation request message to the user information device 1 connected to the wired / wireless on-line network 3 (refer to FIG. 3). Even in this case, the identity confirmation request message for confirming the blocking target category setting can be variously modified depending on the situation, such as a callback message type, an e-mail type, and an ARS message type.

In this way, in the situation where the identity verification request message for confirming the blocking target category setting has been transmitted, the user identification information (for example, identity verification Password information for identity verification, question / response information for identity verification, image information for identity verification, image arrangement information for identity verification, mobile phone information for identity verification, credit card information for identity verification, The blocking target category setting guide module 110 checks whether or not the password for the person identification password set by the user matches the password described in the person identification information and confirms the legitimacy of the password Procedure, the response information for the identity verification corresponding to the user's preset question, and the information A procedure for checking whether or not the response information is matched, a procedure for confirming the legitimacy, a procedure for checking whether or not the image for identification of the user set by the user matches the image described in the identification information of the user and confirming the legitimacy, A procedure for checking whether the images are identical to the image arrangement for identifying the identity and the image arrangement described in the identity confirmation information and checking whether the images are legitimate or not, a procedure for confirming whether the information related to the mobile phone for identification is valid by communicating with the mobile communication company server, A procedure for confirming the validity of the information related to the credit card for identifying the user by communicating with the card issuer server, a procedure for communicating with the server of the authorized certificate issuing entity to confirm the legitimacy of the information related to the authorized certificate for authentication, etc.) Through this, it is confirmed whether or not the user-side identification information is valid (refer to FIG. 3).

(For example, password information for identifying the user, question / response information for identifying the person, image information for identifying the person, image arrangement information for identifying the person, mobile phone related information for identifying the person, , The blocking target category setting guide module 110 advances a series of information generating routines to generate a blocking target category setting guide frame , And then proceeds to a procedure of transferring the created block target category setting guide frame to the user information device 1 (refer to FIG. 3).

Of course, under the transmission condition of the blocking target category setting guide frame, on the user side, while various menus included in the blocking target category setting guide frame are computationally manipulated, a series of setting actions desired by the user (for example, (For example, an action to be added, an action to add, a process to delete a specific category from the blocking target category, etc.) (of course, such user setting information is transmitted to the system 100 in the future and is reflected in the blocking target category setting information ).

On the other hand, the authentication process interrupt history processing module 111, which operates in cooperation with each of the above-described computation modules, communicates with the user information device 1 via the interface module 101, the online / , It is checked whether or not the authentication process interruption history provision request message is transmitted from the user information device 1 (refer to FIG. 3).

At this time, when it is confirmed that the authentication process interception history providing request message is transmitted from the user information device 1, the authentication process interception history processing module 111 receives / reads the message, (For example, a WS list whose authentication process is blocked, a list of authentication process cutoff times, an attribution category of an authentication process cutoff WS, etc.) corresponding to the user described in the authentication process cutoff history provision request message (Refer to FIG. 3).

In this way, when the authentication process interruption history corresponding to the user described in the authentication process interruption history provision request message (for example, the list of the WS whose authentication process has been blocked, the list of the authentication process interruption times, the attribution category of the authentication process interception WS, , The authentication process blocking history processing module 111 proceeds to a series of information generation routines based on the generated information and generates an authentication process interrupt history report information in which the authentication process interrupt history is represented by table / character / graph / chart / image (See FIG. 3), and finally, the user does not have to worry about the past authentication process interception history (for example, authentication process The list of blocked WS lists, the list of blocked processes of the authentication process, the blocked WS of the authentication process, etc.).

On the other hand, as shown in FIG. 4, in another embodiment of the present invention, the WS operating entity operating the WS rents a part of the web hosting server 5 to implement various types of web services. In this case, the web hosting server 5 side provides / manages various resources (for example, hardware resources, software resources, communication resources, etc.) necessary for operating the WS.

It is needless to say that even when the web service is being executed by the web hosting server 5 as described above, the user information device 1 (for example, a computer, a notebook, a smart phone, a tablet PC, Game machines, wireless notebooks, etc.) may be used not only by the user himself, but also by additional users such as acquaintances, family members (e.g., children), and the like.

Of course, even under this circumstance, an additional user such as an acquaintance, a family member (for example, a child) can secretly steal a user's identification data (e.g., ID card, driver's license, resident registration, The adult WS, the adult game WS, the game WS, the gambling WS, etc.), the user can not prevent this at all.

4, in another embodiment of the present invention, an additional user such as a family member (e.g., a child) within a communication pipeline of the web hosting server 5, the user information appliance 1, etc., To additionally install the WS screening block management system 200 according to another aspect of the present invention that can inherently prevent unauthorized access (for example, adult WS, adult game WS, game WS, gaming WS, etc.) .

5, the WS screening block management system 200 according to the present invention includes a web hosting server 5 via a interface module 201, a wired / wireless on-line network 3, An operation information storage module 202, a WS access event generation message reception module 203, a WS-address specific attribute matching information storage module 204, a blocking object category setting information storage module 205, An access WS attribution category identification module 206, a WS access blocking determination module 207, a WS access blocking / permission processing module 208, a WS access blocking addition processing module 209, a blocking target category setting guide module 210 ), And the WS access blocking history processing module 211 are closely combined with each other.

Here, on the side of the web hosting server 5, when the user information device 1 attempts to access the WS, the information (for example, IP address, mobile phone number, etc.) of the user information device 1 is read / , When it is determined that the user who has attempted to access the WS is a service application user who requested the WS screening blocking service of the present invention (of course, in order to facilitate such a determination process, in the present invention, A WS access event occurrence message including <WS address information (URL information), user information (IP address, mobile phone number, etc.) corresponding thereto, To the system 200 of FIG.

In this situation, the operation information storage module 202 side may provide various kinds of operation information required for the WS screening blocking service inherent to the present invention, such as the registration information of the web hosting server 5, the registration information of the user information device 1, Image / graphic / link / video / setting information for generating various message / guide frames, resource status information of the system 200, system 200 ) Component information necessary for the computation process of each computation module in the computer, and program information for establishing / maintaining the communication / session in the information storage area of its own (of course, The operational information may be added / deleted or changed in a flexible manner depending on the situation of the system 200).

Also, as shown in FIG. 6, the affiliate category matching information storing module 204 for each WS address stores the affiliated category matching information (for example, http: //m.aaa.b/ cc..., matching information that WS is classified as a newspaper category, matching information such that WS having http: //m.kgame.b/dfd.... is classified into adult game category, http: / / / RTI &gt; &lt; RTI ID = 0.0 &gt; /m.adultmov.b/ff.&, &lt; / RTI &gt; is classified as an adult category) so that a series of WS screening management procedures according to the present invention can proceed normally And it plays a supporting role.

In addition, the blocking target category setting information storage module 205 sets the blocking target category setting information (for example, the setting information of the adult category as the access blocking target, the setting of the adult game category as the access blocking target category Information and a game category are stored and managed such as setting information such as an access-blocking target category), thereby assisting a series of WS screening management procedures according to the present invention to proceed normally without any problem (see FIG. 6 ).

The WS access event occurrence message receiving module 203 communicates with the web hosting server 5 through the interface module 201 and the wired / wireless on-line network 3, , It is checked whether or not a WS access event generation message corresponding to the WS access event of the user information device 1 has been transmitted from the web hosting server 5 (see FIG. 6).

At this time, when it is determined that the WS access event is generated by the user information device 1 and the WS access event generation message is transmitted from the web hosting server 5 side, the WS access event generation message reception module 203 side A series of information storage routines are performed to store and manage the received WS access event occurrence message in its own information storage area so that a series of subsequent procedures according to the present invention can be performed normally without any problem (See FIG. 6).

In this way, when the WS access event generation message corresponding to the WS access event of the user information device 1 is received, the access WS attribution category identification module 206 side communicates with the WS access event generation message reception module 203 , The WS access event occurrence message is read and the process of confirming the <address information of the WS attempted to be accessed by the user>, the <number information of the user information device 1>, and the like are proceeded (see FIG. 3) ).

When the address information of the WS attempted access by the user, the number information of the user information device 1, and the like are confirmed through the above-described procedure, the access WS attribution category grasp module 206 side, based on this, Address-based attribution category matching information storage module 204, and assigns attribution category matching information (for example, http: //m.aaa.b/cc./... Matching information that the WS is classified as a newspaper category, WS, which has http: //m.kgame.b/dfd./, is categorized into the adult game category, http://m.adultmov. b / ff... is matched with the address information of the WS attempted to be accessed by the user), and thereby, the WS Let's go through the process of identifying the attribution category of (See Fig. 6).

Thus, the attribution category (e.g., online market category, school category, social group category, newspaper category, broadcast station category, adult category, adult game category, game category, bank category, enterprise category, etc.) The WS access blocking determination module 207 communicates with the WS attribution category identification module 206 and proceeds with the procedure of confirming the attribution category of the WS that is attempted to be accessed by the user ).

Through the above-described procedure, it is possible to determine whether or not the attribution category (e.g., online market category, school category, social group category, newspaper category, station category, adult category, adult game category, Category, etc.) is confirmed, the WS access blocking status determination module 207 reads the above-described WS access event occurrence message and confirms <number information of the user information device 1> To specify which of the various blocking target category setting information is the blocking target category setting information that the user has set in advance), communication with the blocking target category setting information storage module 205 is performed and stored in the information storing area thereof The blocking category setting information (for example, the adult category is referred to as an access blocking subject) Setting information for setting an access blocking target category for an adult game category, setting information for setting an access blocking target category for a game category, etc.) is compared with the attribution category of a WS that is attempted to be accessed by a user who has been confirmed, Through this, a process of determining whether to block the access of the WS that is attempted by the user is performed (refer to FIG. 6).

Under this procedure, for example, if the attribution category of the WS that is attempted to be accessed by the user is an adult category and the description of &quot; the adult category is an access blocking subject &quot; is described in the blocking target category setting information, The determination module 207 makes a determination result that < WS that is attempted to be accessed by the user is an access blocking object >.

In this way, in a situation where the result of determining whether or not access is blocked by the user is derived, the WS access blocking / allowing processing module 208 side communicates with the WS access blocking judging module 207, (For example, < &lt; a result of the determination that the WS attempted to be accessed by the user is an access blocking target &gt;) or &lt; WS (The result of the determination that the access is to be permitted) &gt; (see FIG. 6).

Through the above-described procedure, it is possible to determine whether or not access to the access attempted by the user (for example, < The WS access denied / permitted processing module 208 determines that the WS access denied / permitted processing module 208 has read / confirmed &quot;, or &quot; According to the result, communication with the web hosting server 5 is performed, and the procedure of blocking access or allowing access by the user is attempted by the user (see Fig. 6).

Of course, under this procedure, when the result of the determination that the WS that is attempted to be accessed by the user is an access blocking target is read / confirmed, the WS access blocking / allowing processing module 208 side, (Or by the user information device 1) by strictly blocking the WS access by the user by taking communication with the server 5 and eventually adding the additional information such as the acquaintance, (For example, an adult WS, an adult game WS, a game WS, a gaming WS, etc.) unauthorized access by the user (including access attempts to the WS, authentication attempts, etc.) .

As described above, in another embodiment of the present invention, in the communication pipeline of the web hosting server 5, a <computation module capable of communicating with the web hosting server 5 and accepting the WS access event generation message>, < The access event occurrence message is read and the address information of the WS attempted to be accessed by the user is confirmed and then the address information of the WS that has been confirmed is compared with the attribution category matching information for each WS address stored, A computation module capable of identifying WS's attribution category (e.g., online market category, school category, social group category, newspaper category, broadcasting category, adult category, adult game category, game category, bank category, After confirming the attribution category of the WS that is attempted to be accessed by the user, the confirmed attribution category is stored (For example, setting information for an adult category as an access-blocking object, setting information for an adult game category as an access-blocking target category, setting information for a game category as an access-blocking target category, etc.) A computer module capable of judging whether or not the access attempted by the user is blocked by the WS, a result of judging whether or not the access attempted by the user is blocked, and then communicates with the web hosting server 5, (E.g., a child) or the like, even in a different implementation environment of the present invention, because it is possible to systematically arrange the computer module < RTI ID = 0.0 > (For example, an adult WS, an adult game WS, a game WS, a gambling WS, etc.) by stealthily stealing a user's name Even if an unauthorized access is attempted, the access can be blocked at the source according to the blocking target category setting information. As a result, it is possible to prevent the access from the additional user (e.g., child, acquaintance, etc.) It is possible to easily avoid various mental / material damages.

5, in the WS screening system 200 of the present invention, in addition to each of the above-described computation modules, a WS access blocking addition processing module 209, a blocking target category setting guide module 210 ), A WS access blocking history processing module 211, and the like.

At this time, the WS access blocking addition processing module 209 side communicates with the above-described WS access blocking / allowing processing module 208 to check whether or not the access attempted by the user is blocked or permitted (See FIG. 6).

At this time, if it is confirmed that the WS attempted to be accessed by the user is blocked, the WS access block addition processing module 209 advances a series of message generation routines to transmit a WS request block authentication revocation confirmation request message If the user who has received the block confirmation revocation confirmation message normally inputs a series of identification information and if the validity of the identification information is normally confirmed, the user himself / herself, The user is allowed to access the desired WS in a normal manner), and a process of transmitting the generated personal identification confirmation request message to the user information device 1 connected to the wired / wireless on-line network 3 (See FIG. 6). Even in this case, the WS-Access blocking revocation confirmation request message can be variously modified depending on the situation, such as a callback message type, an e-mail type, an ARS message type, and the like.

In this way, in the situation where the WS-Access-block-revocation-of-personal identification request message is transmitted, the user identification information (for example, password information for identifying the user, The image information for identifying the user, the image arrangement information for identifying the user, the mobile phone related information for identification, the credit card related information for identifying the user, the information related to the authorized certificate for identifying the user, etc.) The WS access blocking addition processing module 209 performs a process of checking whether a password for authentication of the user is identical to a password described in the user authentication information set by the user and confirming the legitimacy of the user, It is checked whether or not the response information for identity verification corresponding to the previously set question matches the response information described in the identity verification information, A procedure for checking whether the image is authentic or not, a procedure for checking whether the image for identification of the user set by the user matches the image described in the identification information of the user and confirming the legitimacy, the image arrangement for identifying the user, A procedure of checking whether the image arrangement described in the information is matched and confirming the legitimacy, a procedure of communicating with the mobile communication company server to confirm whether or not the mobile phone related information for confirming the identity is legitimate, A procedure for confirming whether the information related to the credit card is legitimate, a procedure for communicating with the server of the authorized certificate issuer and confirming the legitimacy of the information related to the authentication certificate for the authentication of the user, and the like) (See FIG. 6).

(For example, password information for identifying the user, question / response information for identifying the person, image information for identifying the person, image arrangement information for identifying the person, mobile phone related information for identifying the person, , The WS access blocking addition processing module 209 communicates with the WS access blocking / allowing processing module 208 and informs the user of the WS access blocking / The user is allowed to access the desired WS in spite of the previous blocking target category setting.

On the other hand, on the side of the blocking target category setting guide module 210 that operates in conjunction with the preceding computer modules, the user information device 1 communicating with the user information device 1 connected to the wireless online network 3, (I.e., a request message for resetting, setting a new category, or changing the category to be blocked) has been transmitted (see FIG. 3).

At this time, when it is determined that the blocking target category setting request message (that is, the request message for resetting, setting new, or changing the blocking target category) is transmitted from the user information device 1, On the guide module 210 side, after reading this, a series of message generating routines are advanced to generate a blockage category setting entitlement confirmation authentication request message for authenticating whether the user is entitled to set the blocking object category, The process proceeds to a step of transmitting the completion confirmation category setting eligibility confirmation request message to the user information device 1 connected to the wired / wireless on-line network 3 (refer to FIG. 3). Even in this case, the identity confirmation request message for confirming the blocking target category setting can be variously modified depending on the situation, such as a callback message type, an e-mail type, and an ARS message type.

In this way, in a situation where a confirmation message for confirming the blocking target category setting entitlement is transmitted, the user identification information (for example, the password for identification of the user) Information about the identity of the user, information about the identity of the user, image information for identifying the user, image arrangement information for identifying the user, mobile phone related information for identifying the user, information related to the credit card for identifying the user, , The blocking target category setting guide module 210 performs a series of legitimacy checking procedures (for example, a procedure for checking whether the password set in the personal identification information set by the user matches the password described in the personal identification information, The response information for identifying the user corresponding to the user's preset question and the response information A procedure for confirming whether the image is identical or not, a procedure for confirming whether or not the images are identical to each other, a procedure for checking whether the image for identifying the user is identical with the image described in the identification information set by the user and confirming the legitimacy, A procedure for checking whether the image arrangement for verification matches the image arrangement described in the identity confirmation information and confirming whether or not it is legitimate, a procedure for communicating with the mobile communication company server to confirm whether the information related to the mobile phone for identity verification is legitimate, A procedure for confirming whether the information related to the credit card for identification is validated or a procedure for communicating with the server of the authorized certificate issuing entity to confirm whether the information related to the authorized certificate for the authentication is authentic or not) , It is confirmed whether or not the user-side identification information is valid (see FIG. 6).

(For example, password information for identifying the user, question / response information for identifying the person, image information for identifying the person, image arrangement information for identifying the person, mobile phone related information for identifying the person, , The blocking target category setting guide module 210 advances a series of information generating routines to generate a blocking target category setting guide frame , And then proceeds to a procedure for transmitting the created block target category setting guide frame to the user information device 1 (refer to FIG. 6).

Of course, under the transmission condition of the blocking target category setting guide frame, on the user side, while various menus included in the blocking target category setting guide frame are computationally manipulated, a series of setting actions desired by the user (for example, (For example, an action to be added, an action to add a specific category, a process to delete a specific category from the block target category, etc.) (of course, such user setting information is transmitted to the system 200 in the future and is reflected in the blocking target category setting information ).

On the other hand, the WS access blocking history processing module 211, which operates in cooperation with the above-described computerized modules, communicates with the user information device 1 via the interface module 201, the wireless on-line network 3, It is checked whether or not the WS access blocking history provision request message is transmitted from the user information device 1 (see FIG. 6).

At this time, if it is confirmed that the WS access blocking history provision request message is transmitted from the user information device 1, the WS access blocking history processing module 211 side receives / reads the WS access blocking history provision request message, (For example, list of access-blocked WS, list of access-blocked times, attribution category of access blocking WS, etc.) corresponding to the user described in the WS access blocking history provision request message (See FIG. 6).

In this way, when the WS access blocking history corresponding to the user described in the WS access blocking history provision request message (for example, list of access blocked WS, list of access blocking date, attribution category of access blocking WS, etc.) On the side of the history processing module 211, a series of information generation routines are executed to generate WS access blocking history reporting information in which the WS access blocking history is represented by table / character / graph / chart / image, (See FIG. 6). As a result, the past WS access blocking history (for example, the list of access-blocked WSs, the access- Access block date and time, access blocking WS list, and so on).

The present invention is not limited to a specific field, and it has a generally useful effect in various fields requiring screening of online contents.

Although specific embodiments of the present invention have been described and illustrated above, it is to be understood that the present invention may be embodied in many other specific forms without departing from the spirit or essential characteristics thereof.

Such modified embodiments should not be understood individually from the technical idea and viewpoint of the present invention, and such modified embodiments should be included in the appended claims of the present invention.

1: user information device 2: user authentication support server 3: wired / wireless on-line network
4: WS Operations Server 5: Web Hosting Server
100, 200: WS screening block management system 101: Interface module
102,202: Operation information storage module 103: User authentication event message reception module
104: Attribution by WS operating server property category matching information storage module
105,205: Blocking target category setting information storage module
106: WS Operating Server Attribution Category Identification Module
107: module for judging whether or not the authentication process is blocked
108: Authentication process interception / permission processing module
109: Authentication process blocking additional processing module
110, 210: Blocking target category setting guide module
111: Authentication process interrupt history processing module
203: WS access event occurrence message reception module
204: Assignment category-matching information storage module by WS address
206: access WS attribution category identification module
207: WS access blocking determination module
208: WS Access Block / Allow Handling Module
209: WS Access Blocking Additional Processing Module
211: WS access blocking history processing module

Claims (8)

delete A user authentication server that supports a user authentication process by a WS operation server that operates a Web site (WS: Web-Site), receives user authentication corresponding to a service application user previously set up from the user authentication support server side A user authentication event occurrence message reception module for receiving the user authentication event occurrence message when the event occurrence message is transmitted;
Reads the user authentication event occurrence message, confirms the registration information of the WS operation server, compares the registered registration information of the WS operation server with the registered affiliation category matching information of each WS operation server registration information, A WS operation server attribution category grasping module for grasping the attribution category of the WS operation server that is attempting the authentication process;
Communicating with the WS operating server attribution category identification module to identify the attribution category of the WS operating server and comparing the confirmed attribution category with the stored inhibition category setting information, An authentication process blocking determination module that determines whether the authentication process is blocked;
Communicates with the WS operation server authentication blocking determination module to confirm the result of the blocking operation of the user authentication process by the WS operation server and then communicates with the user authentication support server to perform a user authentication process by the WS operation server Block or allow the authentication process blocking / allowing processing module;
Wherein the authentication process interception / permission process module transmits a user authentication request message for blocking the authentication process to the user information device in a situation where the user authentication process by the WS operation server is blocked, When the identification confirmation information corresponding to the process breakdown revocation confirmation request message is transmitted, it is checked whether the corresponding identification information is legitimate, and in accordance with the confirmation result, the user authentication support server is communicated with the WS operation server An authentication process blocking additional processing module for allowing a user authentication process by the user;
When the blocking target category setting request message is transmitted from the user information device, after reading the blocking target category setting request message, it is confirmed whether or not the user is entitled to set the blocking target category. And transmits the request message to the user information device. When the user identification information corresponding to the blocking subject category setting eligibility confirmation confirmation message is transmitted from the user information device, it is checked whether the corresponding identification information is legitimate, And a blocking target category setting guide module for generating a blocking target category setting guide frame and transmitting the generated blocking target category setting guide frame to the user information device. A user authentication server that supports a user authentication process by a WS operation server that operates a Web site (WS: Web-Site), receives user authentication corresponding to a service application user previously set up from the user authentication support server side A user authentication event occurrence message reception module for receiving the user authentication event occurrence message when the event occurrence message is transmitted;
Reads the user authentication event occurrence message, confirms the registration information of the WS operation server, compares the registered registration information of the WS operation server with the registered affiliation category matching information of each WS operation server registration information, A WS operation server attribution category grasping module for grasping the attribution category of the WS operation server that is attempting the authentication process;
Communicating with the WS operating server attribution category identification module to identify the attribution category of the WS operating server and comparing the confirmed attribution category with the stored inhibition category setting information, An authentication process blocking determination module that determines whether the authentication process is blocked;
Communicates with the WS operation server authentication blocking determination module to confirm the result of the blocking operation of the user authentication process by the WS operation server and then communicates with the user authentication support server to perform a user authentication process by the WS operation server Block or allow the authentication process blocking / allowing processing module;
When the blocking target category setting request message is transmitted from the user information device, after reading the blocking target category setting request message, it is confirmed whether or not the user is entitled to set the blocking target category. And transmits the request message to the user information device. When the user identification information corresponding to the blocking subject category setting eligibility confirmation confirmation message is transmitted from the user information device, it is checked whether the corresponding identification information is legitimate, And a blocking target category setting guide module for generating a blocking target category setting guide frame and transmitting the generated blocking target category setting guide frame to the user information device. A user authentication server that supports a user authentication process by a WS operation server that operates a Web site (WS: Web-Site), receives user authentication corresponding to a service application user previously set up from the user authentication support server side A user authentication event occurrence message reception module for receiving the user authentication event occurrence message when the event occurrence message is transmitted;
Reads the user authentication event occurrence message, confirms the registration information of the WS operation server, compares the registered registration information of the WS operation server with the registered affiliation category matching information of each WS operation server registration information, A WS operation server attribution category grasping module for grasping the attribution category of the WS operation server that is attempting the authentication process;
Communicating with the WS operating server attribution category identification module to identify the attribution category of the WS operating server and comparing the confirmed attribution category with the stored inhibition category setting information, An authentication process blocking determination module that determines whether the authentication process is blocked;
Communicates with the WS operation server authentication blocking determination module to confirm the result of the blocking operation of the user authentication process by the WS operation server and then communicates with the user authentication support server to perform a user authentication process by the WS operation server Block or allow the authentication process blocking / allowing processing module;
The authentication process interception history providing module communicates with the authentication process interception / permission process module to extract an authentication process interception history corresponding to the user described in the authentication process interception history provision request message, when the authentication process interception history provision request message is transmitted from the user information device, And an authentication process interrupt history processing module for generating an authentication process interrupt history report information corresponding to the extracted authentication process interrupt history and transmitting the generated authentication process interrupt history report information to the user information device. Blocking management system. delete When a WS access event generation message corresponding to a service application user previously set is transmitted from the web hosting server side while communicating with a web hosting server providing resources necessary for operation of a web site (WS: Web-Site) A WS access event occurrence message reception module for receiving the corresponding WS access event occurrence message;
After the address of the WS is confirmed by reading the WS access event occurrence message, the address of the WS thus confirmed is compared with the attribution category matching information of each stored WS address, and the attribution category of the WS attempted by the user An access WS attribution category grasping module for identifying the access WS belonging category;
Communicates with the WS attribution category identification module to identify the attribution category of the WS that is attempted to be accessed by the user and then compares the attribution category of the confirmed WS with the previously stored category information of the obstacle category, A WS access blocking determination module for determining whether or not to block the WS access;
Communicates with the WS access blocking determination module to confirm whether or not the WS access is blocked by the user, and then communicates with the web hosting server to block the WS access by the user or block the WS access, A module;
Wherein the WS access blocking / permission processing module transmits a WSIS access blocking confirmation revocation request message to the user information device in a situation where the WS access by the user is blocked by the WS access blocking / When the identity verification information corresponding to the identity verification request message is transmitted, it is checked whether the identity verification information is legitimate, and in accordance with the verification result, communication with the web hosting server is made so that WS access by the user is allowed A WS access blocking additional processing module;
When the blocking target category setting request message is transmitted from the user information device, after reading the blocking target category setting request message, it is confirmed whether or not the user is entitled to set the blocking target category. And transmits the request message to the user information device. When the user identification information corresponding to the blocking subject category setting eligibility confirmation confirmation message is transmitted from the user information device, it is checked whether the corresponding identification information is legitimate, And a blocking target category setting guide module for generating a blocking target category setting guide frame and transmitting the generated blocking target category setting guide frame to the user information device. When a WS access event generation message corresponding to a service application user previously set is transmitted from the web hosting server side while communicating with a web hosting server providing resources necessary for operation of a web site (WS: Web-Site) A WS access event occurrence message reception module for receiving the corresponding WS access event occurrence message;
After the address of the WS is confirmed by reading the WS access event occurrence message, the address of the WS thus confirmed is compared with the attribution category matching information of each stored WS address, and the attribution category of the WS attempted by the user An access WS attribution category grasping module for identifying the access WS belonging category;
Communicates with the WS attribution category identification module to identify the attribution category of the WS that is attempted to be accessed by the user and then compares the attribution category of the confirmed WS with the previously stored category information of the obstacle category, A WS access blocking determination module for determining whether or not to block the WS access;
Communicates with the WS access blocking determination module to confirm whether or not the WS access is blocked by the user, and then communicates with the web hosting server to block the WS access by the user or block the WS access, A module;
When the blocking target category setting request message is transmitted from the user information device, after reading the blocking target category setting request message, it is confirmed whether or not the user is entitled to set the blocking target category. And transmits the request message to the user information device. When the user identification information corresponding to the blocking subject category setting eligibility confirmation confirmation message is transmitted from the user information device, it is checked whether the corresponding identification information is legitimate, And a blocking target category setting guide module for generating a blocking target category setting guide frame and transmitting the generated blocking target category setting guide frame to the user information device. When a WS access event generation message corresponding to a service application user previously set is transmitted from the web hosting server side while communicating with a web hosting server providing resources necessary for operation of a web site (WS: Web-Site) A WS access event occurrence message reception module for receiving the corresponding WS access event occurrence message;
After the address of the WS is confirmed by reading the WS access event occurrence message, the address of the WS thus confirmed is compared with the attribution category matching information of each stored WS address, and the attribution category of the WS attempted by the user An access WS attribution category grasping module for identifying the access WS belonging category;
Communicates with the WS attribution category identification module to identify the attribution category of the WS that is attempted to be accessed by the user and then compares the attribution category of the confirmed WS with the previously stored category information of the obstacle category, A WS access blocking determination module for determining whether or not to block the WS access;
Communicates with the WS access blocking determination module to confirm whether or not the WS access is blocked by the user, and then communicates with the web hosting server to block the WS access by the user or block the WS access, A module;
When a WS access blocking history providing request message is transmitted from the user information device, the WS access blocking history providing module communicates with the WS access blocking / allowing process module to extract a WS access blocking history corresponding to the user described in the WS access blocking history providing request message, And a WS access blocking history processing module for generating WS access blocking history reporting information corresponding to the extracted WS access blocking history and for transmitting the generated WS access blocking history reporting information to the user information appliance. Blocking management system.

Images