KR20210153263A - Online game server and the controlling method thereof - Google Patents

Abstract

Disclosed is an online game server. The online game server includes: a receiver for receiving data from each of a plurality of client devices; and a processor which determines whether received data is data related to an online game and a client device which is a subject of a hacking attack among a plurality of client devices based on the number of the data received. Accordingly, it is possible to determine whether the corresponding client device is the subject of a hacking attack based on data received from the client device.

Description

ONLINE GAME SERVER AND THE CONTROLLING METHOD THEREOF

The present invention relates to an online game server and a method for controlling the same, and more particularly, to an online game server for determining a subject of a hacking attack and a method for controlling the same.

Recently, due to the development of computer technology and information and communication technology, computer games are also developing mainly on online games in which a large number of users connect online and play together from the existing offline games played alone. These online games are generally provided in such a way that a terminal such as a user's PC or smart phone connects to a game server.

Accordingly, in an online game in which a plurality of computers are connected by a computer communication network, a hacking tool or malicious code that remotely accesses a game server with malicious intent and changes game data in a file or memory has appeared.

In particular, attacks that paralyze a server or other client devices through mass distribution of data unrelated to the running game among malicious codes are examples of hacking attacks that often occur. It is a hacking attack that can occur frequently and easily.

Accordingly, the need for detecting and blocking the mass distribution of such unnecessary data has increased.

An object of the present invention is to provide an online game server for determining the subject of a hacking attack and a method for controlling the same.

To achieve this object, an online game server according to an embodiment of the present invention includes a receiving unit for receiving data from each of a plurality of client devices, whether the received data is data related to the online game, and the number of times the data is received and a processor for determining a client device to be a subject of a hacking attack from among the plurality of client devices based on the .

Here, the processor may determine the client device corresponding to the received data as the subject of the hacking attack if the number of times of receiving the data is greater than or equal to a preset number of times even if the received data is data related to the online game.

Also, when the received data is not data related to the online game, the processor may determine a client device corresponding to the received data as a subject of a hacking attack.

Meanwhile, in a method for controlling an online game server according to an embodiment of the present invention, receiving data from each of a plurality of client devices and determining whether the received data is data related to the online game and the number of times the data is received and determining a client device to be a subject of a hacking attack from among the plurality of client devices based on the plurality of client devices.

Here, in the determining step, even if the received data is data related to the online game, if the number of times of receiving the data is greater than or equal to a preset number, it is possible to determine the client device corresponding to the received data as the subject of the hacking attack. have.

In addition, the determining may include determining a client device corresponding to the received data as a subject of a hacking attack when the received data is not data related to the online game.

Meanwhile, the computer-readable recording medium according to an embodiment of the present invention includes program instructions for implementing the above-described method for controlling an online game server.

According to various embodiments of the present invention as described above, it is possible to determine whether the corresponding client device is the subject of a hacking attack based on data received from the client device.

1 is a block diagram illustrating the configuration of an online game server according to an embodiment of the present invention.
2 is a diagram of an online game system including an online game server and a plurality of client devices according to an embodiment of the present invention.
3 is a flowchart illustrating a method of controlling an online game server according to an embodiment of the present invention.
4 is a detailed flowchart for determining the subject of a hacking attack according to an embodiment of the present invention.
FIG. 5 is a block diagram showing a detailed configuration of the online game server shown in FIG. 1 .
6 is a diagram of a software module stored in a storage unit according to an embodiment of the present invention.

Hereinafter, the present invention will be described in more detail with reference to the drawings. In the description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. And, the terms to be described later are terms defined in consideration of functions in the present invention, which may vary depending on the intention or relationship of a user or an operator. Therefore, the definition should be made based on the content throughout this specification.

1 is a block diagram illustrating the configuration of an online game server according to an embodiment of the present invention.

Referring to FIG. 1 , the online game server 100 includes a receiver 110 and a processor 120 .

The receiver 110 receives data from each of a plurality of client devices. Here, the receiver 110 may communicate with a plurality of client devices according to various types of communication methods. Specifically, the receiver 110 provides various communication methods such as BT (BlueTooth), WI-FI (Wireless Fidelity), Zigbee, IR (Infrared), Serial Interface, USB (Universal Serial Bus), NFC (Near Field Communication), etc. Through this, it is possible to communicate with a plurality of client devices.

Here, the plurality of client devices may be implemented as various types of electronic devices such as PCs, smart phones, tablet PCs, etc. that access the online game server, install and run online games, and electronic devices that can access the online game server Includes all ramen.

In addition, the processor 120 determines whether the received data is data related to an online game and a client device that is a subject of a hacking attack among a plurality of client devices based on the number of times the data is received.

Specifically, the processor 120 analyzes and processes data received from each of the plurality of client devices, executes a function or command corresponding to each data, and transmits the result value back to each of the plurality of client devices.

In this case, the processor 120 determines whether the data received from each of the plurality of client devices is data related to an online game managed by the online game server 100 .

Here, the processor 120 compares the data received from each of the plurality of client devices with a list or lookup table that records all of the online game related data or commands managed by the online game server 100 and determines whether they match each other, It may be determined whether the received data is data related to an online game managed by the online game server 100 .

Alternatively, the processor 120 determines whether a specific code used in an online game managed by the online game server 100 is included in the data received from each of a plurality of client devices, and the received data is transmitted to the online game server 100 . It can be determined whether the data is related to an online game controlled by .

In addition, the processor 120 may determine whether the received data is data related to an online game managed by the online game server 100 by comparing the frame structure in which the data is stored, the order of packets, etc. It is natural to be able to judge.

Accordingly, when the received data is not data related to the online game, the processor 120 may determine the client device corresponding to the received data as the subject of the hacking attack.

That is, when the received data is not data related to an online game, the processor 120 may specify a client device that has transmitted the received data, and determine the specified client device as a subject of a hacking attack.

In addition, the processor 120 may block the client device determined as the subject of the hacking attack from accessing the online game server 100 any longer. For example, the processor 120 blocks access to the online game server 100 by blocking the IP (Internet Protocol) address or address of the client device from accessing the online game server 100 so that the game cannot be executed. can

On the other hand, even if it is determined that the received data is data related to an online game, the processor 120 may determine the client device corresponding to the received data as the subject of a hacking attack if the number of times of receiving such data is greater than or equal to a preset number of times. have.

Specifically, the processor 120 may determine the number of reception even if it is determined that the received data is data related to the online game as described above, and if the number of reception is, for example, 50 times per second or more , it is determined that excessive traffic is caused to the online game server 100 , and the client device that has transmitted the received data may be specified, and the specified client device may be determined as the subject of the hacking attack.

Here, the processor 120 may set the number of receptions for determining the subject of the hacking attack, and may set variably according to the progress and environment of the online game, the server state, and the like.

Accordingly, the processor 120 can determine that the client device corresponding to the data is the subject of a hacking attack, even if the received data is data related to an online game, when the number of times of reception is equal to or greater than a preset number of times.

And, as described above, the processor 120 may block the client device determined to be the subject of the hacking attack from accessing the online game server 100 any longer.

2 is a diagram of an online game system including an online game server and a plurality of client devices according to an embodiment of the present invention.

Referring to FIG. 2 , the online game system includes an online game server 100 and a plurality of client devices 101 , 102 , 103 , 104 , 105 , 106 .

The online game server 100 stores an installation file for installing an online game, and a plurality of client devices 101, 102, 103, 104, 105, and 106 download and install the corresponding installation file and install the corresponding installation file on the online game server ( 100) and creating an account to run the game, the online game server 100 stores information about the account, and when access is made to the account, it determines whether a match is made and transfers the access right to the client device. can be transferred

In addition, the online game server 100 receives and processes commands transmitted by the plurality of client devices 101 , 102 , 103 , 104 , 105 , and 106 while executing the online game, and returns the result to the plurality of clients to the devices 101 , 102 , 103 , 104 , 105 , 106 .

However, for example, if it is determined that the data received from the second client device 102 at this time is not data related to the online game, the online game server 100 determines that the second client device 102 is the subject of the hacking attack. By judging, the second client device 102 may be blocked from accessing the online game server 100 any longer.

Also, for example, even if it is determined that the data received from the third client device 103 is data related to the online game at this time, when it is determined that the data received from the third client device 103 is received more than a preset number of times, online The game server 100 may determine that the third client device 103 is the subject of the hacking attack and block the third client device 103 from accessing the online game server 100 any longer.

In FIG. 2 , six client devices 101 , 102 , 103 , 104 , 105 , and 106 are illustrated as connecting to the online game server 100 , but a larger number of client devices may connect to the online game server 100 . It is natural to have

3 is a flowchart illustrating a method of controlling an online game server according to an embodiment of the present invention.

Referring to FIG. 3 , in the method of controlling an online game server according to an embodiment of the present invention, the step of receiving data from each of a plurality of client devices ( S110 ), and whether the received data is data related to an online game, and whether the data are and determining a client device to be a subject of a hacking attack among a plurality of client devices based on the number of receptions (S120).

Here, the process of determining whether the received data is data related to the online game includes a list or lookup table in which all online game related data or commands managed by the online game server 100 are recorded and data received from each of the plurality of client devices may be compared to determine whether they match each other, and it may be determined whether the received data is data related to an online game managed by the online game server 100 .

Alternatively, in the process of determining whether the received data is data related to an online game, it is determined whether a specific code used in an online game managed by the online game server 100 is included in the susinodin data from each of a plurality of client devices. By judging, it may be determined whether the received data is data related to an online game managed by the online game server 100 .

On the other hand, based on whether the received data is data about the online game and the number of times the data is received, the step of determining the client device that is the subject of the hacking attack among the plurality of client devices ( S120 ) is that the received data is related to the online game. Even if it is determined that the data is received, the client device corresponding to the received data may be determined as the subject of the hacking attack if the number of times of receiving such data is greater than or equal to the preset number of times.

Specifically, based on whether the received data is data related to an online game and the number of times the data is received, the step of determining the client device to be the subject of the hacking attack among the plurality of client devices ( S120 ) includes the data received as described above. Even if it is determined that the data is related to the online game, the number of receptions can be determined. , a client device that has transmitted the received data may be specified, and the specified client device may be determined as the subject of a hacking attack.

As described above, in the determining step ( S120 ), when the received data is not data related to an online game, the client device corresponding to the received data may be determined as the subject of the hacking attack, and the received data may be Even for data related to an online game, if the number of times of data reception is greater than or equal to a preset number, a client device corresponding to the received data may be determined as the subject of a hacking attack.

4 is a detailed flowchart for determining the subject of a hacking attack according to an embodiment of the present invention.

Referring to FIG. 4 , when data is received from each of a plurality of client devices ( S210 ), it may be determined whether the received data is data related to an online game ( S220 ).

Here, when it is determined that the received data is not data related to the online game, the client device corresponding to the received data may be determined as the subject of the hacking attack (S240).

Meanwhile, when it is determined that the received data is data related to an online game, it may be determined whether the number of times of reception of the received data is equal to or greater than a preset number (S230).

And, if the number of times of data reception is greater than or equal to the preset number, it is possible to determine the client device corresponding to the received data as the subject of the hacking attack (S240).

In addition, access to the online game server may be blocked for the client device determined to be the subject of the hacking attack.

Also, if the number of times of data reception is less than or equal to the preset number, it may be determined that the client device corresponding to the received data is not the subject of the hacking attack (S250).

Meanwhile, the above-described method for controlling an online game server according to an embodiment of the present invention may be implemented as a program command for implementing the above-described method, and a computer-readable recording medium in which the program command is recorded is, for example, a ROM or a RAM. , CD-ROM, magnetic tape, floppy disk, and optical media storage.

FIG. 5 is a block diagram illustrating a detailed configuration of the online game server shown in FIG. 1 .

The online game server 100 includes a receiving unit 110 , a processor 120 , and a storage unit 130 .

The processor 120 controls the overall operation of the online game server 100 for determining the subject of the hacking attack.

Specifically, the processor 120 includes the RAM 121 , the ROM 122 , the main CPU 123 , the graphic processing unit 124 , the first to n interfaces 125-1 to 125-n, and the bus 126 . include

The RAM 121 , the ROM 122 , the main CPU 123 , the graphic processing unit 124 , the first to n interfaces 125 - 1 to 125 -n, etc. may be connected to each other through the bus 126 .

The first to n-th interfaces 125-1 to 125-n are connected to the various components described above. One of the interfaces may be a network interface connected to an external device through a network.

The main CPU 123 accesses the storage unit 130 and performs booting using the O/S stored in the storage unit 130 . Then, various operations are performed using various programs, contents, data, etc. stored in the storage unit 130 .

In particular, the main CPU 123 may determine a client device that is a subject of a hacking attack among a plurality of client devices based on whether the received data is data related to an online game and the number of times the data is received.

The ROM 122 stores an instruction set for system booting and the like. When the turn-on command is input and power is supplied, the main CPU 123 copies the O/S stored in the storage unit 110 to the RAM 121 according to the command stored in the ROM 122, and executes the O/S. Boot the system. When booting is completed, the main CPU 123 copies various application programs stored in the storage unit 110 to the RAM 121 , and executes the application programs copied to the RAM 121 to perform various operations.

The graphic processing unit 124 generates a screen including various objects such as icons, images, and texts by using a calculation unit (not shown) and a rendering unit (not shown). A calculation unit (not shown) calculates attribute values such as coordinate values, shape, size, color, etc. at which each object is to be displayed according to the layout of the screen based on the received control command. The rendering unit (not shown) generates screens of various layouts including objects based on the attribute values calculated by the calculation unit (not shown).

In particular, the graphic processing unit 124 may implement the object generated by the main CPU 123 as a graphic user interface (GUI), an icon, a user interface screen, and the like.

Meanwhile, the above-described operation of the processor 120 may be performed by a program stored in the storage unit 130 .

The storage unit 130 drives the online game server 100 that determines whether the received data is data related to the online game and the number of times the data is received, which determines a client device that is a subject of a hacking attack among a plurality of client devices. It stores various data such as O/S (Operating System) software module for various multimedia contents.

In particular, the storage unit 130 may include a software module for determining whether the received data is data about an online game and a client device that is the subject of a hacking attack among a plurality of client devices based on the number of times the data is received have.

6 is a diagram of a software module stored in a storage unit according to an embodiment of the present invention.

Referring to FIG. 6 , the storage unit 130 may store programs such as a game-related data matching module 131 , a reception count detection module 132 , and a hacking subject determination module 133 .

Meanwhile, the above-described operation of the processor 120 may be performed by a program stored in the storage unit 130 . Hereinafter, detailed operations of the processor 120 using the program stored in the storage unit 130 will be described in detail.

Specifically, the game-related data matching module 131 may determine whether data received from a plurality of client devices is data related to an online game.

For example, the game-related data matching module 131 compares data received from each of a plurality of client devices with a list or lookup table in which all online game-related data or commands managed by the online game server 100 are recorded, and matches each other It can be determined whether or not the received data is data related to an online game managed by the online game server 100 .

Alternatively, the game-related data matching module 131 determines whether a specific code used in an online game managed by the online game server 100 is included in the data received from each of the plurality of client devices, and the received data is online. It may be determined whether the data is related to the online game managed by the game server 100 .

In addition, the game-related data matching module 131 may determine whether the received data is data related to an online game managed by the online game server 100 by comparing the frame structure in which the data is stored, the order of packets, etc. It goes without saying that judgments can be made in various ways.

Meanwhile, when the received data is data related to an online game, the reception frequency detection module 132 may detect whether the number of reception times of the corresponding data is equal to or greater than a preset reception number.

And, the hacking subject determination module 133 determines the number of times of reception of the received data even if the data received from the plurality of client devices is not data related to the online game or the data received from the plurality of client devices is data related to the online game. If the number of times is greater than the preset number, the corresponding client device may be determined as the subject of the hacking attack.

Meanwhile, a non-transitory computer readable medium in which a program for sequentially performing the control method according to the present invention is stored may be provided.

The non-transitory readable medium refers to a medium that stores data semi-permanently, rather than a medium that stores data for a short moment, such as a register, cache, memory, and the like, and can be read by a device. Specifically, the various applications or programs described above may be provided by being stored in a non-transitory readable medium such as a CD, DVD, hard disk, Blu-ray disk, USB, memory card, ROM, and the like.

In addition, the above description for an online game server that determines whether the data received from the plurality of client devices is data related to the online game and whether the data is received from among the plurality of client devices based on the number of times the data is received Although a bus is not shown in one block diagram, communication between each component in the online game server may be achieved through a bus. In addition, each device may further include a processor such as a CPU or a microprocessor that performs the various steps described above.

In addition, although preferred embodiments of the present invention have been illustrated and described above, the present invention is not limited to the specific embodiments described above, and the technical field to which the present invention pertains without departing from the gist of the present invention as claimed in the claims In addition, various modifications are possible by those of ordinary skill in the art, and these modifications should not be individually understood from the technical spirit or perspective of the present invention.

100: online game server 110: receiver
120: processor 130: storage

Claims (7)

In the online game server,
a receiving unit for receiving data from each of a plurality of client devices; and
and a processor configured to determine a client device to be a subject of a hacking attack from among the plurality of client devices based on whether the received data is data related to the online game and the number of times the data is received. According to claim 1,
The processor is
Even if the received data is data related to the online game, if the number of times the data is received is equal to or greater than a preset number, it is determined that a client device corresponding to the received data is the subject of a hacking attack. According to claim 1,
The processor is
When the received data is not data related to the online game, the client device corresponding to the received data is determined as the subject of the hacking attack. A method for controlling an online game server, the method comprising:
receiving data from each of a plurality of client devices; and
Determining a client device to be a subject of a hacking attack among the plurality of client devices based on whether the received data is data related to the online game and the number of times the data is received; . 5. The method of claim 4,
The determining step is
Even if the received data is data related to the online game, if the number of times of receiving the data is greater than or equal to a preset number of times, determining a client device corresponding to the received data as a subject of a hacking attack. . 5. The method of claim 4,
The determining step is
If the received data is not data related to the online game, determining a client device corresponding to the received data as a subject of a hacking attack. A computer-readable recording medium in which program instructions for implementing the method of controlling an online game server according to any one of claims 4 to 6 are recorded.

Images