KR20010036603A - Total reservation program with compensated information security on the web - Google Patents

Abstract

PURPOSE: A synthetic reservation program supplementing security of information on a web is provided to gain the maximum profit with analyzing the taste of users automatically by that the information about users is stored in the database file of a server CONSTITUTION: A synthetic reservation program supplementing security of information on a web includes a few stages. In the first stage, a user is input. In the second stage, it is tested if the essential field is empty or not. In the third stage, the input of the input data is modified to the header to be sent in the encoding program. In the fourth stage, the input data in the encoding program are encoded. In the fifth stage, it is decided if sending from the user is carried out or not. If so, the data are sent to the server. Otherwise, the cancel message is output.

Description

Total reservation program with compensated information security on the web}

It is a program that encrypts data sent over the Internet and automatically updates it in the database to protect important user information.

In the existing homepage, the process of transmitting data through the Internet is as follows.

First, when a user enters content in a form tag, the content is gathered in the Internet Protocol header.

Secondly, the collected data is transmitted in addition to U.L.L. (URL) through action method. This makes it possible for anyone to intercept the data that is transmitted because of the openness of the Internet. Therefore, to solve this problem and encrypt the data transmitted to keep the user's information securely in the database.

ㆍ Protecting CGI Programs from User Input

The first thing to think about when programming on the web is to prevent attempts to break into the server and steal or corrupt files. In terms of CGI's security, most of the problems are forgotten to check the user input for errors. When a CGI program accepts dynamic data in any form, there is a potential risk of accepting incorrect data. In other words, data can come from places you know and care about, such as <input type = text> or <textarea>, as well as places you don't recognize well, such as Query_String or hidden fields.

Therefore, all programs should not use the data received from the user through the input form. In other words, you shouldn't search through the loop until the search finds a match. The search must be based on the maximum number of group entries. Keeping the number of loops according to the maximum number of group entries prevents the program from indexing beyond the correct memory area.

Another method is to search for metacharacters before using user input data in CGI programs. Before invoking the shell with the user's input data, the metacharacters are retrieved using the following alternative pattern:

$ var == s / ([; 〈〉 ＼ * ＼ ｜ '& ＼ $! # ＼ (＼) ＼ [＼] ＼ {＼}:' ″]) /

If it finds one of the above characters in the message, it will display a strong warning message to the client who sent the message and record its domain name in a file.

• If a reservation is made, the customer's name, contact information, and other personal details are encrypted and sent to the server, and the record in the database file is updated.

From the database file created in this way, each customer's disposition is analyzed automatically for the convenience of member companies. In this case, mail is automatically sent to each member company and manager.

ㆍ Encryption Program

The encryption program is designed to solve security problems that occur when sending important personal information and details of the customer through the Internet. Data entered by the user is encrypted by the encryption program. If the encryption program is not installed, it is automatically sent from the server and installed on the client as a plug-in.

1 is a flow chart of a reservation method and transmission in a client.

2 is a flow chart for encryption restoration at the server and automatic update of database files and automatic mail transfer.

Encryption program for the security of the comprehensive reservation program

Algorithm to automatically update the database

Program that automatically analyzes records in the database

After enough information is provided on the Internet, the user can use the reservation and various e-commerce of the desired place with confidence because the user's information is encrypted.

In addition, companies can maximize customer profits by keeping customer information safe and analyzing the customer's disposition to guide future improvement.

Claims (3)

When transmitting data on the Internet, the encryption program automatically detects if the program is not installed on the client and is sent from the server to the client for installation. Algorithm for transmitting encrypted data to the server and restoring it automatically if no error occurs Customer management program that analyzes user types and tastes from stored database files