KR20000074864A - Method and apparatus for blocking access to illegal and harmful internet contents on the distributed environment - Google Patents

Abstract

PURPOSE: A method and apparatus for interrupting internet harmful information in distributed environment is provided to interrupt internet users' harmful information approach through access list filtering on client/server. CONSTITUTION: An interrupting program loads an access-allowed access list in the main memory(401) and monitors the internet access of a user(402). If the user attempts internet access(403), the interrupting program searches the access list of the client PC and checks whether a user access site is illegal or harmful(404). If the user access site is found in the access list(405), the interrupting program allows the site access of the user(406). However, in case that the user access site is not found in the access list, the interrupting program inquires of an interrupting list server to discriminate whether the user access site is harmful(407). The interrupting list server searches whether the address of the inquired user access site exists in its interrupting list and outputs a result(408). If a response result of the interrupting list server is a harmful site, the interrupting program interrupts the user's site access(409).

Description

METHOD AND APPARATUS FOR BLOCKING ACCESS TO ILLEGAL AND HARMFUL INTERNET CONTENTS ON THE DISTRIBUTED ENVIRONMENT}

The present invention relates to a technique for blocking harmful Internet information in a distributed environment, and more particularly, to a method for blocking access to harmful information by Internet user through access list filtering.

Today's people are getting a lot of information useful for their lives through the Internet. However, the Internet, which is called a sea of information, can provide not only beneficial information for Internet users but also unhealthy information such as pornography, violence, drugs, gambling, and the like.

However, due to the openness of the Internet, such harmful harmful information is exposed to minors. Therefore, it is recommended that a computer be equipped with Internet harmful information blocking means to protect minors from harmful information coming from the Internet. It is required.

Therefore, a black list filtering method has been used as a conventional technique for blocking harmful information on the Internet. The conventional block list filtering method uses a block list to determine whether a site that a user attempts to access is harmful. For example, a blacklist may consist of the address of a site with harmful information such as pornography, violence, drugs, or gambling, and will block Internet users from attempting to access Internet harmful information sites listed on the blacklist. do.

FIG. 1 is a flowchart illustrating the operation of the Internet harmful information blocking system applying the block list filtering according to the prior art. Referring to FIG. 1, the harmful information blocking system to which the conventional block list filtering is applied is composed of an internet harmful site search system 100 and an internet harmful information blocking program 120.

Since harmful sites continue to increase in the Internet 130, the harmful site search system 100 automatically retrieves harmful information sites through the search engine 111 to build a block list 110. Thus, the conventional Internet harmful information blocking program 120 is supported every time a user requests a block list update of a service of the block list server 112 which searches for harmful information sites existing on the Internet 130. On the other hand, the Internet harmful information blocking program 120 monitors the user's access to the Internet and determines whether or not to determine whether harmful.

2 is a flowchart illustrating an algorithm for blocking harmful Internet information according to the prior art. Referring to FIG. 2, the harmful information blocking algorithm will be described. First, when the user attempts to access the Internet site 200, the Internet harmful information blocking program 120 that monitors the user site access 201 may access the site. If 202, the address of the Internet site to be accessed is encrypted (203).

Subsequently, it is searched 204 whether the address of the encrypted Internet site exists in the encrypted block list of the client PC, and if the Internet site address that the user wants to access is found in the block list 205, it is determined as a harmful information site and accessed. Block 206. On the other hand, if it does not exist in the encrypted block list, access to the Internet site is allowed (207).

However, the above-described harmful information blocking method according to the related art uses a huge size block list 122 already stored in the client PC, and thus the following problem occurs.

First, since the harmful site search system 100 according to the prior art continuously searches for harmful information sites to build a block list, the block list server 112 may add up to thousands of harmful information sites per day. . However, since the Internet harmful information blocking program 120 is installed and operated in the client PC, the encrypted block list 122 may have difficulty in quickly reflecting the harmful site list newly updated by the harmful site search system 100.

Second, the Internet harmful information blocking technology according to the prior art has a problem in the security of the block list. That is, the conventional block list filtering method is maintained by storing a block list composed of addresses of harmful information sites in the user's PC 140. Since such a block list may be leaked to the outside by an impure user, it is generally used by encrypting 122 to prevent exposure. However, such a security method by encryption has a problem that generates a huge load in the block list search.

Third, the Internet harmful information blocking technology according to the prior art has a problem of reducing the performance of the client PC due to the filtering load. Currently, conventional block list filtering techniques are constructed by encrypting harmful information sites of hundreds of thousands of sites. However, the block list is too large to be loaded into the main memory of the client PC to perform internal searches.

Therefore, the conventional blocking program attempts to check the harmfulness of the user's access site by externally searching the block list. The Hypertext Transfer Protocol (HTTP), which is used when a user accesses a particular web, establishes a connection for each document and image on the website. Conventional blocking programs encrypt the destination address and block list for each connection to establish. Will perform an external search for. Thus, this process leads to a huge increase in the filtering cost, which degrades the overall performance of the client PC.

Accordingly, it is a first object of the present invention to provide a method and apparatus for blocking an Internet harmful information site, which solves the problem of updating a block list of the prior art.

A second object of the present invention is to provide a method and apparatus for blocking an Internet harmful information site, which solves a security problem of a block list, which has been known in the art, in addition to the first object.

It is a third object of the present invention to provide a method and apparatus for blocking an Internet harmful information site in addition to the first object, which solves the problem of overload caused by filtering of a client PC.

1 is a view showing the Internet harmful information blocking technology according to the prior art.

2 is a flow chart showing the Internet harmful information blocking technology according to the prior art.

3 is a view showing the Internet harmful information blocking technology according to the present invention.

4 is a flowchart illustrating the Internet harmful information blocking technology according to the present invention.

<Explanation of symbols for the main parts of the drawings>

100, 300: Internet harmful site screening system

120, 310: Internet harmful information blocking program

140: client PC

110, 301: Block List

112, 302: Block List Server

122: encrypted block list

111, 303: search engine

311: access list

In order to achieve the above object, the present invention comprises the steps of loading an access list into the first storage means; Searching whether the site to which the Internet user attempts to access exists in the access list loaded in the first storage means; Loading the block list into the second storage means; And searching whether or not the site to which the Internet user attempts to access is present in the block list loaded in the second storage means.

Hereinafter, a method and apparatus for blocking harmful information of the Internet according to the present invention will be described in detail with reference to FIGS. 3 and 4.

3 is a view showing a harmful information blocking method according to the present invention. Referring to FIG. 3, the harmful information blocking method according to the present invention does not load the block list 301 on the client PC 340 unlike the related art. This is because conventional block list filtering techniques cause various problems because they use a block list stored on the client PC.

The harmful information blocking method according to the present invention stores and maintains the block list 301 only in the block list server 302. In a preferred embodiment of the harmful information blocking method according to the present invention, in the distributed environment of the client / server, the Internet harmful information blocking program 310 is harmful to the user access site to the block list server 302 to determine the harmfulness of the user access site Query whether or not

The block list server 302 searches the block list 301 for the query of the block program 310 and responds with the result. The blocking program 310 determines whether to access the user access site according to the response result from the blocking list server 302.

Therefore, the harmful information blocking method according to the present invention is continuously updated by the search engine 303 because filtering is performed by using the block list 301 of the block list server 302 whenever the user accesses the Internet site. And the content of the added block list 301 has the advantage that can be used immediately.

In addition, compared to the prior art, it is possible to reduce the risk of exposing the block list 301 to a general user, and to block list server 302 to apply a more advanced method instead of encrypting the block list. Maintaining 301 solves the block list security problem and the encryption overload problem. In a preferred embodiment according to the present invention, the block list server 302 may use a firewall or an authentication system for the security of the block list.

However, in the method for blocking an Internet harmful information site according to the present invention, whenever a user accesses an Internet site, the blocking program 310 receives a user access permission only through a query to the block list server 302 through a network. As a result, communication loads between the client PC and the block list server can cause serious communication delays.

In order to solve this problem, the harmful information blocking system according to the present invention incorporates an access list 311 in the client PC. The access list 311 may be composed of addresses of non-hazardous sites that users frequently access. In general, since the number of sites frequently accessed by Internet users tends to be concentrated within hundreds to thousands of sites, the size of the access list 311 can be small enough to be loaded into the main memory of the client PC.

Therefore, in the harmful information blocking method according to the present invention, an internal search may be performed using a client PC when searching for an access list.

4 is a flowchart illustrating a method of blocking harmful internet information according to the present invention. The present invention using an access list and a block list server may be referred to as an access list filtering on client / server technology. Referring to FIG. 4, the blocking program according to the present invention loads (401) a main access list into the main memory and monitors (402) the user's Internet access.

When the user attempts to access the Internet (403), the blocker program internally searches the client PC's access list and checks (404) whether the user's access site is legitimate and harmful. At this time, if the user access site is found 405 in the access list, the blocking program allows the user access to the site 406.

If the user access site is not found in the access list, the query 407 is queried to determine whether the user access site is harmful. The block list server retrieves from the block list whether the address of the queried user access site exists and responds 408 with the result.

At this time, if the response result of the block list server is a harmful site, the block program blocks 409 the user's access to the site. If not, the user accesses the site (410), and adds the user access site address to the access list as a new item (411).

The foregoing has outlined rather broadly the features and technical advantages of the present invention to better understand the claims of the invention which will be described later. Additional features and advantages that make up the claims of the present invention will be described below. It should be appreciated by those skilled in the art that the conception and specific embodiments of the invention disclosed may be readily used as a basis for designing or modifying other structures for carrying out similar purposes to the invention.

In addition, the inventive concepts and embodiments disclosed herein may be used by those skilled in the art as a basis for modifying or designing other structures for carrying out the same purposes of the present invention. In addition, such modifications or altered equivalent structures by those skilled in the art may be variously changed, substituted, and changed without departing from the spirit or scope of the invention described in the claims.

As described above, the Internet harmful information blocking method and apparatus according to the present invention is an access list filtering technology using an access list and a block list server, unlike the prior art, and since the block list is stored and used in the block list server, the block list filtering step There is an effect that does not generate the encryption load required in.

In addition, the Internet harmful information blocking method and apparatus according to the present invention performs an internal search through the access list loaded on the client PC in the first step instead of searching for a block list of a large size, so that the user can quickly access the Internet. Can be done.

In addition, the cost of communication with the blacklist server and the cost of querying from the blacklist server when the user's access site is not found in the access list is greatly reduced as the proportion of user access sites found in the access list increases. The filtering cost is reduced.

Claims (9)

Loading the access list into the first storage means; Searching whether the site to which the Internet user attempts to access exists in the access list loaded in the first storage means; Loading the block list into the second storage means; Retrieving whether the site to which the Internet user attempts to access exists in the block list loaded in the second storage means. Internet site access restriction method comprising a. The method of claim 1, wherein said first storage means comprises a main memory of a client computer. The method of claim 1, wherein searching for whether the site to which the Internet user attempts to access exists in the access list comprises: Allowing internet access if the site attempting to access is present in the access list; Querying and searching for a site which attempts to access the block list server when the site which attempts to access does not exist in the access list. Internet site access restriction method further comprising. The method of claim 1, wherein searching for whether the site to which the Internet user tries to access exists in the block list is performed. Blocking the user's access to the site when present in the block list; Allowing the user to access the site if it does not exist in the block list, and adding an address of the site attempting to access the access list. Internet site access restriction method further comprising. The method of claim 1, wherein the second storage means is periodically updated with an Internet site address retrieved through a search engine. 2. The Internet access of claim 1, wherein the step of searching for whether it is in the access list is performed at a client computer, and the step of searching for whether it is in the block list is performed using a block list server. Limitation method. A search engine for searching the Internet harmful information site; A block list in which the harmful information site retrieved by the search engine is loaded; A block list server for determining whether to allow access to the access request of an Internet user compared to the block list; An access list loaded with sites allowing access to the access request of the Internet user Internet access restriction device comprising a. 8. The apparatus of claim 7, wherein the access list is embedded in a client computer. 8. The apparatus of claim 7, wherein the access list adds an address of the internet access site to the access list whenever an access request of the internet user is permitted.