KR20120070403A - Method and apparatus for searching and intercepting web browsing action of smartphone - Google Patents

Abstract

PURPOSE: A web browsing action detection and access blocking method and apparatus thereof are provided to block harmful sites by detecting web browsing action by managing a harmful site list. CONSTITUTION: A history statics unit(130) monitors a web browsing action. The history statics unit stores log information including URL(Uniform Resource Locator) in other data base. A core module(110) determines a list stored in a local database or a user definition database according to URL determination policy for the web browsing action. The core module determines an age or a category range according to the URL determination policy. The core module determines blocking states.

Description

Method and Apparatus for Detecting and Blocking Web Browsing Actions {Method and Apparatus for Searching and Intercepting Web Browsing Action of Smartphone}

The present invention relates to a method and apparatus for controlling web browsing of a terminal, and in particular, an application that is installed and operated in a user terminal such as a smart phone adaptively to a user environment regardless of various access networks such as WCDMA, WIBRO, and WiFi. The present invention relates to a web browsing control method and apparatus for providing a secure web browsing by detecting a web browsing action by analyzing a system log and managing a harmful site list based on an agent.

Smartphones are open OS (Operating System) environment, it is easy to expose harmful sites to teenagers. In such smartphones, there are currently apps for blocking some harmful sites, but the blocking accuracy is significantly reduced. The reason is that it uses only the technique of http intent filtering.

In the existing intent filtering method, the OS detects an action by interrupting a packet or an http protocol session in the network to detect an action and blocks a harmful site by filtering the intent.However, the intent filtering method uses all intents in the web browser. There is a problem that efficient blocking is not possible because it is not created.

In addition, traffic blocking in various networks is currently limited. For example, in the case of WiFi, the presence of a private network and the absence of a traffic filtering system make it impossible to provide traffic filtering in a network, and thus it is impossible to block harmful sites of a desired type.

As such, existing intent-based web browsing blocking technology can block some harmful sites only in certain browsing environment of smartphone OS such as Android phone. There is a need for technology.

Accordingly, the present invention is to solve the above-described problems, the object of the present invention, regardless of the various access networks, such as WCDMA, WIBRO, WiFi is installed in the user terminal, such as a smart phone adaptively adapted to the user environment (application) Provides web browsing control method and device for analyzing web logs and managing harmful site list to detect web browsing action and block access of harmful site to provide safe web browsing. have.

First, to summarize the features of the present invention, according to an aspect of the present invention, the web browsing control method for detecting a web browsing action in the user terminal to block access to the harmful site, the list of harmful sites managed by the user stored Maintaining a user-defined database or a local database storing a list of harmful sites updated from a management server; Setting a discrimination policy for selecting a database or a blocking policy for selecting a blocking range; And monitoring the web browsing action and storing log information including the access attempt URL in another database, wherein the access attempt URL is included in a list stored in the user-defined database or the local database according to the determination policy, and the blocking policy. And determining whether to be blocked by determining whether it is included in an age or a category range.

The discrimination policy includes a policy for selecting and setting a database managed by an external discrimination server, requesting harmfulness determination to the discrimination server for the access attempt URL, and receiving a discrimination result of the discrimination server to determine whether to block. The method may further include determining.

The web browsing action may be performed by inputting a URL into an address input box, inputting a URL by selecting from a list of bookmarks, inputting a linked URL by selecting from a list on a web page screen, or selecting an icon of an installed app. It may include a connection attempt by the URL input method.

Installed and driven in the form of a harmful site blocking app on a user terminal to perform the web browsing control method, log information about the installation and running of the harmful site blocking app is stored in the other database, driving the harmful site blocking app Authentication for a preset password may be performed for the termination request.

In response to the request to delete the harmful site blocking app, authentication of a preset password may be performed.

And, according to another aspect of the present invention, a web browsing control device for detecting a web browsing action in the user terminal to block access to the harmful site, a user-defined database that stores a list of harmful sites managed by the user, or management A blocking target recorder including a local database storing a list of harmful sites updated from a server; A policy manager for setting a discrimination policy for selecting a database or a blocking policy for selecting a blocking range; A history statistic unit configured to monitor web browsing actions and store log information including a corresponding access attempt URL in another database; And determining whether the access attempt URL is included in a list stored in the user-defined database or the local database according to the determination policy and included in the age or category range according to the blocking policy. It includes a core module for determining whether or not.

The determination policy includes a policy for selecting and setting a database managed by an external determination server, and the core module requests a harmfulness determination to the determination server for the access attempt URL and receives a determination result of the determination server. You can also decide whether to block.

According to the method and apparatus for controlling web browsing according to the present invention, regardless of various access networks such as WCDMA, WIBRO, WiFi, an application agent which is installed and operated in a user terminal such as a smartphone adaptively according to a user environment Based on the system log analysis and harmful site list management, web browsing actions can be detected and harmful sites can be blocked to provide more secure and accurate web browsing.

Currently, the WCDMA network of mobile operators can apply the blocking of harmful sites because the network can filter traffic, but the WiFi network cannot provide traffic filtering in the network due to the existence of a private network and the absence of a traffic filtering system. Therefore, this disadvantage can be compensated for through the web agent control based on the app agent of the present invention installed in the terminal.

1 is a view for explaining a web browsing system according to an embodiment of the present invention.
2 is a view for explaining a blocking target list according to an embodiment of the present invention.
3 is a flowchart illustrating an operation of a web browsing system according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout.

1 is a view for explaining a web browsing system according to an embodiment of the present invention.

Referring to FIG. 1, a web browsing system according to an embodiment of the present invention includes a user terminal 100 including a harmful site blocking module installed and driven in a harmful site blocking application, and wired / wireless internet or WCDMA. And a determination server 200 and a management server 300 communicating with the user terminal 100 through various access networks such as mobile communication networks according to WIBRO, WiFi, and the like.

As shown in FIG. 1, the harmful site blocking module installed and driven in the form of a harmful site blocking app on the user terminal 100 may include a core module 110, a module protection unit 120, a history statistics unit 130, and a blocking target recording unit. 140, and a policy manager 150. The components of the harmful site blocking module may be made of software, hardware, or a combination thereof.

Here, the user terminal may be a smart phone, but is not limited thereto, and may include a notebook PC, a desktop PC, a palm personal computer, and the like, which may communicate with the determination server 200 and the management server 300 through a network. Or cellular phone, PCS phone (Personal Communications Services phone), synchronous / asynchronous IMT-2000 (International Mobile Telecommunication-2000) capable of wireless communication, personal digital assistant (PDA), It can be a portable or mobile terminal with a WAP phone (Wireless application protocol phone), mobile play-station, other Portable Multimedia Player (PMP), or an entire home or business society that can communicate with other electronic devices. It may include a variety of electronic devices or devices.

The core module 110 is a core control part of the installed harmful site blocking app, and overall control of each component of the module protection unit 120, the history statistics unit 130, the blocking target recording unit 140, and the policy management unit 150 is performed. It is responsible for the, and according to the information set or registered in each component can be detected or determined harmful to the web browsing action performed on the user terminal, and can be appropriately blocked harmful sites. The web browsing action performed on the user terminal includes a method of inputting a Uniform Resource Locator (URL) into an address input box, a method of inputting a URL by selecting from a list of bookmarks, and a method of inputting a linked URL by selecting from a list of web page screens. Or all attempts to access an internet web server, such as a URL input method through selecting an icon of an app installed in a user terminal.

The module protection unit 120 manages a password for proper operation of the installed harmful site blocking app, and accordingly changes the operation setting of the harmful site blocking app (automatically runs at boot, update cycle, etc.), and deletes the harmful site blocking app. If you need to terminate the app while the app is running or other additional functions, you can use the password to verify the change and delete. As an additional feature, when the mobile carrier provides the above harmful site blocking app, when the corresponding app is installed on the subscriber's subscriber terminal, the mobile carrier provides the subscriber terminal with necessary information such as various information or discount benefits for the harmful site. It may be provided to the (user terminal), the policy management unit 150 may store in advance the age information of the terminal user to be used for the blocking policy. For example, when you install a harmful site blocking app, you may be able to obtain adult information by obtaining an adult certification (for example, over 19 years old) through an accredited agency server, but in some cases when you install a harmful site blocking app, The server providing the app in response to the request extracts the phone number of the user terminal and obtains information on the age at the time of joining the mobile carrier from the predetermined subscriber management server and stores the information in the module protection unit 120 by providing it to the user terminal. And keep it.

The history statistics unit 130 stores log information including a corresponding access URL in a predetermined database when accessing a harmful site, using other apps installed on a user terminal, or installing or running a harmful site blocking app when there is a web browsing action as described above. And statistical information including information such as how many connections there are. The log information managed by the history statistics unit 130 may be reference information for the user to later check and add to the user-defined database of the blocking target recorder 140 as a list of harmful sites to be blocked.

The blocking target recording unit 140 includes a user-defined database storing a harmful site list managed by a user, or a local database storing a harmful site list updated from the management server 300. As shown in FIG. 2, the blocking target harmful site list may be an Internet Protocol (IP) address, and in some cases, may include a MAC (Media Access Control) address or a Korean Internet address. The harmful target site list of the local database may be updated periodically or at the request of the user terminal through the management server 300.

The policy manager 150 selects a blocking policy, such as an age or a category, for a determination policy for selecting any one or more of the above-described user-defined database or a local database according to a user input, and a list of harmful sites to be blocked in each database. You can set up a blocking policy.

The list of harmful sites to be blocked in the user-defined database or the local database can be stored in each category such as adult sites, non-adult sites, parental interest sites, and education sites, and the user can set an age for each category or all categories. It can be selected to be accessible to the site only if the age is older than the set and information about the blocking range, such as age or category selected by the user is managed by the policy manager 150 as a blocking policy.

When installing the harmful site blocking app, the adult authentication (for example, 19 years old or older) is performed through the server of the authorized institution for the social security number, and the harmful site blocking app is installed only when the authentication is successful. In operation 120, information about the corresponding age (or adult authentication information) may be stored and managed. This is one embodiment and the information about the age can be managed in various forms, for example, may change the age information of the terminal user managed by the module protection unit 120 after the password authentication, Therefore, when installing the harmful site blocking app, the server providing the app extracts the phone number of the user terminal to obtain information about the age at the time of subscribing to the mobile carrier from the predetermined subscriber management server to the module protection unit 120 It can also be stored and maintained.

According to such an operation, the history statistics unit 130 may monitor the web browsing action performed on the user terminal, and store the log information including the corresponding connection attempt URL during the web browsing action in a predetermined database. 110) is determined whether the access attempt URL at the time of the web browsing action is included in the list stored in the user defined database or the local database according to the above-described determination policy, and is included in the age or category range according to the blocking policy. By determining the hazard, it is possible to determine whether to block.

The policy manager 150 may set a determination policy to refer to a database managed by the determination server 200 according to a user input. Accordingly, the core module 110 determines the connection attempt URL at the time of a web browsing action. Request 200 to determine the harmfulness and accordingly receive the determination result transmitted by the determination server 200 after determination may determine whether to block.

As described above, the history statistics unit 130 may store log information about the installation and operation of the harmful site blocking app in the database, and the module protection unit 120 may be executed while the harmful site blocking app is running. When there is a request for termination of driving by a user, authentication for a preset and managed password can be performed. Accordingly, a user of an under age user terminal such as a teenager may stop attempting to access a harmful site after terminating driving of a harmful site blocking app. In addition, even if there is a request by the user to delete the harmful site blocking app itself, the module protection unit 120 may perform authentication for a preset and managed password. Prevents users from attempting to access harmful sites after they stop running harmful site blocking apps.

As described above, in the present invention, regardless of various access networks such as WCDMA, WIBRO, and WiFi, the system analyzes system logs and manages harmful sites list based on an app agent that is installed and operated in a user terminal such as a smart phone adaptively to a user environment. By detecting the browsing action and blocking access to harmful sites, it is possible to provide more secure and accurate web browsing. Accordingly, even when there is a private network such as WiFi network or there is no traffic filtering system, App agent-based web browsing control makes it possible to block harmful sites collectively. In addition, it does not merely detect URL browsing actions, but also detects and authenticates the user even if the user wants to terminate or delete the installed harmful site blocking app so that adolescents can properly exclude attempts to access harmful sites.

Hereinafter, an operation of the web browsing system according to an embodiment of the present invention will be described in more detail with reference to the flowchart of FIG. 3.

First, the harmful site blocking app is installed in the user terminal 100 to operate the harmful site blocking module (S10). The harmful site blocking app may be downloaded and installed from a server or other web server of a mobile carrier, and according to the installed harmful site blocking app, the core module 110 as shown in FIG. 1, the module protection unit 120, and the historical statistics. The harmful site blocking module may include a unit 130, a blocking target recording unit 140, and a policy manager 150.

Accordingly, the user may change or set various information so that the installed harmful site blocking module operates properly according to the user environment (S20). The password entered or changed by the user is managed by the module protection unit 120, and accordingly, the module protection unit 120 changes the operation settings of the harmful site blocking app (automatically runs at boot, update cycle, etc.), and harmful site blocking app. If you need to delete or terminate the running of the app, or other additional functions (such as benefits to the mobile carrier subscriber terminal, storage of age information, etc.) is required to make a change, delete, etc. after authentication through the password.

In addition, the user may input the blocking target harmful site list to be managed in the user-defined database of the blocking target recording unit 140. The history statistics unit 130 stores log information including a corresponding access URL in a predetermined database when accessing a harmful site, using other apps installed on a user terminal, installing or running a harmful site blocking app, and the like when there is a web browsing action. Since it also provides statistical information including information such as the number of times of connection, the user can refer to the above log information provided by the history statistics unit 130 on the screen according to the selection of a predetermined inquiry menu of the screen, and the corresponding IP (Internet Protocol). By selecting and entering a URL such as a) address, a MAC (Media Access Control) address, or an Korean Internet address, a malicious site to be blocked can be added to the user-defined database.

The blocking target harmful site list in the local database of the blocking target recording unit 140 may be updated periodically or at the request of the user terminal through the management server 300 (S21).

The policy manager 150 selects a blocking policy, such as an age or a category, for a determination policy for selecting any one or more of the above-described user-defined database or a local database according to a user input, and a list of harmful sites to be blocked in each database. You can set up a blocking policy. The list of harmful sites to be blocked in the user-defined database or the local database can be stored in each category, such as adult sites, non-adult sites, parental interest sites, and education sites. For example, 19 years old, etc.) can be selected to access the site only if the age is more than the age. Information about the blocking range, such as the age or category selected by the user can be selected as the blocking policy by the policy manager 150. Managed.

After various settings for proper operation of the harmful site blocking app are made, the user inputs a URL in the browser address input window, selects a URL from a list of bookmarks, or a URL linked from a list on a web page screen. By selecting the information, or by selecting the icon of the app installed on the user terminal, you can attempt a web browsing action to access the Internet web server through a method such as connecting to the web server (S30), access to harmful sites such as teenagers The prohibited user may attempt to access the blocking target harmful site of the blocking target recording unit 140 (S31).

Accordingly, the history statistics unit 130 may monitor the web browsing action performed on the user terminal, and while the log module including the corresponding access attempt URL during the web browsing action is stored in a predetermined database, the core module 110 may perform the corresponding operation. The URL attempt attempt at the time of the web browsing action is included in a list stored in the user defined database or the local database according to the determination policy set in the policy management unit 150, and according to the blocking policy set in the policy management unit 150. It is possible to determine whether or not blocked by determining whether or not included by determining whether or not included (S40).

The policy manager 150 may set a determination policy to refer to a database managed by the determination server 200 according to a user input. Accordingly, the core module 110 determines the connection attempt URL at the time of a web browsing action. It may be requested to determine the hazard (200) (S41). Accordingly, the determination server 200 may determine whether the list is included in the list by referring to the database managing the harmful site list, and may respond to the core module 110 as a determination result of the information on whether the information is included in the list (S42). .

The harmfulness determination result determined as being included in the user defined database or the local database of the blocking target recording unit 140 for the web browsing action as described above, satisfies the corresponding blocking policy, or is managed in the harmful site list through the determination server 200. If is received (S50), the core module 110 may block the access to the URL for the web browsing action (S60).

On the other hand, the management server 300 manages harmful sites for updating the local database of the blocking target recording unit 140, and is stored in the local database of the blocking target recording unit 140 or the update request of the user terminal 100 or periodically You can update the list of harmful sites. When the core module 110 blocks the access to the URL with respect to the web browsing action as described above, the blocking information may be reported to the management server 300 (S61), whereby the management server 300 In response to the reason that the corresponding site is blocked, the user may be recognized through a pop-up window of the user terminal 100 (S62). In this case, if the site blocked by the core module 110 is wrong and receives information on the error stage report (S63), the management server 300 blocks the target unit 140 so that the error stage does not become a subsequent error stage. The URL may be managed to be deleted from the local database of the server (S64).

In addition, the management server 300 may manage a blocking policy such as age and category to notify the policy manager 150 to use the blocking policy when a local database of the blocking target recording unit 140 is selected. In addition, the management server 300 may manage the plurality of determination servers 200 to notify the policy management unit 150 of the corresponding list, and set the external determination server at the time of setting the determination policy in the policy management unit 150. In this case, by selecting one of the external determination servers 200 by selecting from a corresponding list, the core module 110 may request a hazard determination to the corresponding server and receive a determination result when determining the hazard.

As such, in the present invention, regardless of various access networks such as WCDMA, WIBRO, WiFi, the system logs are analyzed based on an app agent that is installed and operated in a user terminal such as a smart phone, and manages a harmful site list. The present invention is installed on a terminal even when there is no private network or a traffic filtering system, such as a WiFi network. It is possible to block harmful sites collectively through the control of web browsing based on App Agent. In addition, it does not merely detect URL browsing actions, but also detects and authenticates the user even if the user wants to terminate or delete the installed harmful site blocking app so that adolescents can properly exclude attempts to access harmful sites.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

Core module (110)
Module protection part 120
History statistics unit 130
Block target recorder 140
Policy management department (150)

Claims (7)

In the web browsing control method for detecting the web browsing action in the user terminal to block access to harmful sites,
Maintaining a user-defined database storing a harmful site list managed by a user or a local database storing a harmful site list updated from a management server;
Setting a discrimination policy for selecting a database or a blocking policy for selecting a blocking range; And
While monitoring the web browsing action and storing log information including the access attempt URL in another database, the access attempt URL is included in a list stored in the user-defined database or the local database according to the determination policy, and is stored in the blocking policy. Determining whether to block by determining whether it is included in the age or category range according to
Web browsing control method comprising a. The method of claim 1,
The discrimination policy includes a policy for selecting and setting a database managed by an external discrimination server, requesting harmfulness determination to the discrimination server for the access attempt URL, and receiving a discrimination result of the discrimination server to determine whether to block. Decision Step
Web browsing control method characterized in that it further comprises. The method of claim 1,
The web browsing action may be performed by inputting a URL into an address input box, inputting a URL by selecting from a list of bookmarks, inputting a linked URL by selecting from a list on a web page screen, or selecting an icon of an installed app. Web browsing control method comprising the connection attempt by the URL input method. The method of claim 1,
Installed and driven in the form of a harmful site blocking app on a user terminal to perform the web browsing control method, log information about the installation and running of the harmful site blocking app is stored in the other database, driving the harmful site blocking app Web browsing control method characterized in that for performing the authentication for the predetermined password for the termination request. The method of claim 4, wherein
Web browsing control method characterized in that for performing the authentication for a predetermined password for the request to delete the harmful site blocking app. In the web browsing control device for detecting a web browsing action in the user terminal to block access to harmful sites,
A blocking target recorder including a user-defined database storing a list of harmful sites managed by a user, or a local database storing a list of harmful sites updated from a management server;
A policy manager for setting a discrimination policy for selecting a database or a blocking policy for selecting a blocking range;
A history statistic unit configured to monitor web browsing actions and store log information including a corresponding access attempt URL in another database; And
Whether the access attempt URL is included in a list stored in the user-defined database or the local database according to the determination policy and included in an age or a category range according to the blocking policy; Core module to determine
Web browsing control device comprising a. The method of claim 6,
The determination policy includes a policy for selecting and setting a database managed by an external determination server, and the core module requests a harmfulness determination to the determination server for the access attempt URL and receives a determination result of the determination server. Web browsing control device, characterized in that for determining whether to block.

Images