KR100453408B1 - The web-access managing system and the web-access managing method through packet checking interval - Google Patents

Abstract

The present invention relates to a web connection management method and system for variable check packet intervals between an external Internet network and a terminal computer via a server. In a real Internet connection, the information contained in one packet is a small amount from the user's point of view, and at least one web packet is composed of at least tens to tens of thousands of packets. Extraction and comparison access have the disadvantage of adding only the time of the processing. Accordingly, the present invention discloses a method and system for managing web access with variable check packet intervals to minimize unnecessary processing time by performing IP at a variable interval instead of extracting and managing IP of a received packet every packet.

Description

Web access management method and system of variable check packet intervals {THE WEB-ACCESS MANAGING SYSTEM AND THE WEB-ACCESS MANAGING METHOD THROUGH PACKET CHECKING INTERVAL}

The Internet is a computer communication network that enables companies, research institutes, libraries, schools, and individuals around the world to search or exchange information with each other using computers. With the widespread use of high-speed communication networks, the usage trend is rapidly spreading, such that the Internet can be used on a regular basis in ordinary homes. As a result, users with computers connected to a communication network can obtain a variety of information provided by servers scattered around the world through the Internet with a simple operation. It is an essential element.

On the other hand, on the other hand, the Internet is flooding with non-educated harmful information along with educational or business-wide useful information such as news, economics, culture, arts, society, religion, science, technology and entertainment. In addition, such harmful information is exposed to teenagers without any restriction due to the openness of the Internet.

To this end, there have been various techniques for preventing access to the harmful site in recent years as measures to solve the dysfunction of the Internet. That is, by installing a software for preventing harmful site access separately prepared on the information user's computer, or by using the harmful site list owned by the software or a list obtained from a remote server, the user can access the harmful site included in this list. If you want to access it, block it, or place the software and device that blocks this function in the relay server that relays Internet access, and block the access of the harmful site to the harmful site by blocking the access to the harmful site. The way is an example.

The proxy-based connection blocking method using such a well-known packet filtering technique has to be blocked by comparing a large amount of harmful sites for a large number of user connections, the load of the relay server has been a problem. In addition, it is difficult to apply because the criterion for harmful site is ambiguous and a method of managing it systematically is difficult, and there has been a problem that additional efforts are required for continuous update of harmful site IP.

In addition, packet filtering has a fatal disadvantage of delaying the time required for real-time access of packet data because a separate processing time is required for every packet.

Therefore, the web management methods and systems using a software installation or a relay server in the computer which are conventionally attempted still do not effectively block access to any site.

The present invention discloses a method and system for managing a web connection with variable check packet intervals, which selectively manages a packet-based web connection in an Internet connection such as a PC and can effectively minimize the disadvantage of time delay caused by filtering.

SUMMARY OF THE INVENTION An object of the present invention is to provide a method and system for managing a connection to an allowed IP by comparing an IP attempting to access a separate allowed IP when the computer accesses the Internet, and minimizes the time delay of the connection processing. It also features a web access management method and system with variable check packet intervals that allows only new access allowed IPs to be updated continuously.

The above and other objects are achieved by minimizing the time-delay of the connection process by performing IP extraction and comparison process on a computer basis at arbitrary variable packet intervals, and allowing only IPs to be allowed to access.

According to an aspect of the present invention, there is provided a web access management method and system having a variable check interval, the interface unit being connected to an internet network; A serial-to-parallel converter for converting data and data transmitted from the interface unit into a serial-parallel; An IP storage unit (EEPROM or hard disk, etc.) for storing IP data for determining whether to connect; A computer main body including an I / O slot, a CPU and a main memory, and a display; The CPU reading the access permission IP list and the check packet interval data and storing them in the main memory; Receiving packet data with an internet connection and storing the packet data in main memory; Extracting IP from the received packet by the CPU for the checking packet interval for the storing in the main memory, comparing the access allowed IP list with the allowed packets, and discarding the unacceptable packets; It is characterized by implementing a method and system for managing web access with variable check intervals.

In addition, the object of the present invention may be achieved by allowing the list of allowed IP addresses to be stored and updated in an IP storage unit (EEPROM or a hard disk, etc.) provided in an Internet access card or mounted on a computer main board.

The allowed IP address list includes all types of recording media on which programs and data are read and executed by a computer. Examples include a memory element, an optical recording / reproducing apparatus, a magnetic recording / reproducing apparatus, and the like, and also include being implemented in the form of a download (for example, transmission over the Internet).

1 is a configuration of a web access management system with variable check packet intervals

2 is a process flow diagram of the system of the present invention.

3 is a detailed control flowchart of FIG.

4 is an IP packet structure based on RFC (request for comments)

5 is an example of a configuration of an IP list allowing access

6 is a process for updating the IP list allowing access

7 is a system configuration for storing the access allowable IP list and the check packet interval data in a separate memory provided on the Internet access card.

8 is a system configuration for storing the access allowable IP list and the check packet interval data in a separate memory inside the PC.

9 is a system configuration for storing a connection allowable IP list and check packet interval data in a hard disk

<Explanation of symbols for main parts of drawing>

DETAILED DESCRIPTION Hereinafter, the present invention will be described with reference to embodiments in order to specifically describe the present invention. Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. However, embodiments according to the present invention may be modified in many different forms, and the scope of the present invention should not be construed as being limited to the embodiments described below.

The invention may be practiced on a number of computers or collections of computers run by a number of different operating systems (OSs). For example, such a computer can be a personal computer (PC), a mini computer, a mainframe computer or a computer running within a distributed network of other computers.

1 is a diagram illustrating a configuration of a method and system for managing a web connection with a variable check packet interval between an external Internet network and a terminal computer through a server according to an exemplary embodiment of the present invention. Referring to FIG. 1, a system according to an embodiment of the present invention includes a terminal computer having a function of storing and managing access IP data, and an access network connecting the terminal computer and the Internet network. A terminal computer is a computer of an information user using the Internet, and means a terminal device that can access the Internet, such as a personal computer (PC). The terminal computer is an access network or a wireless Internet network formed of a coaxial cable or an optical cable. It is connected to the high-speed Internet network through the terminal computer to request access to the desired Internet Web site (Internet Web-site), and to access the Internet website connected to the Internet network.

2 is a flowchart illustrating a process and method for managing a web connection of a variable check packet interval according to the present invention. 1, a system according to an embodiment of the present invention, the computer power-up step (1000); CPU 2000, in the step of powering on the computer, reads a connection allowable IP list and check packet interval data from an IP storage unit (EEPROM, hard disk, etc.) and stores them in main memory (2000); A step 3000 of receiving and storing packet data in main memory together with an internet connection as a next step of the storing step; CPU 4000 extracts the IPs from the stored packets at intervals of the check packets, compares them with the access permission IP list, and determines whether or not to pass them through or discards them (4000). Determining whether or not to allow the pass or discarding (4000) will be described in detail with reference to Figure 3, first, the CPU for the packet stored in the step 3000 of storing in the main memory in the received packet IP Extracting 4101; The CPU comparing the extracted IP with the connection list (4102); If the extracted IP is in the access IP list in the comparing step, display (4105) a received packet; A step 4106 of the CPU following the above step to the simple packet counting and display without extracting the IP by the set packet interval; In the comparison step 4102, if the extracted IP is not in the access IP list, the CPU 4108 performing simple packet counting and discarding without extracting the IP by the set packet interval; And (4107) extracting, by the CPU, the IP of the first packet after the packet counting step is completed, wherein the processing step is repeated until the internet connection is terminated. .

4 shows an IP packet by request for comments (RFC), which is an Internet data standard. In FIG. 4, numerals 0 to 7 at the top represent each bit and are separated by bytes immediately below. Therefore, since the access IP in the received packet becomes the source address in the drawing, it is 4 bytes from the 25th byte from the beginning of the packet in the drawing. Therefore, IP extracted from the received packet is 32 bits (4 bytes) of data each time.

5 shows an example of the configuration of a connection allowable IP list. Since each IP stored in the connection allowance IP list is a unit of 4 bytes, when the CPU reads it from the storage device, it reads from the first address to four address intervals. In the embodiment of the figure, the first 4 bytes are set to the check packet interval. The storage space of the check packet interval data can vary the size of the space (bytes) as necessary, and can be located anywhere in or near the IP list for access.

6 is a diagram illustrating an update process of an IP list allowing access, wherein each IP data of the IP list allows access to the first 4 bytes of packet interval data, and the stored IP data is 4 bytes apart. The address in the figure is given one by one for every byte, and as a result, the address of the IP data increases by four. Referring to the drawings, an example of IP data extracted from a packet is compared with an IP address allowed for access, and when it is determined to be IP10, which is an allowed packet access IP, IP10, which is a 4 byte access allowed IP, is stored in the access allowed IP list. The IPs at the front are filled sequentially. At this time, since the first IP in the access permission IP list becomes the 4 bytes immediately after the first 4 bytes of the check packet interval data, IP10, which is the packet access permission IP determined after sequentially moving the IPs, is stored. Through this update process, the first part of the access allowable IP list is always filled with frequently accessed IP data, thereby reducing the time required for comparison in the frequent access process.

As another method, there are a variety of methods, such as setting a predetermined period of time and rearranging in order of the most frequently accessed IP within that period.

Hereinafter, an embodiment of the present invention will be described in detail with reference to FIG. 7. FIG. 7 shows an example of a system configuration for storing the access allowable IP list and the check packet interval data in a separate memory provided on the Internet access card in the web access management method and system of the variable check packet interval according to the present invention. The Internet access card of the present invention converts the parallel data serially to the interface unit 100 and the interface unit 100 connected to the Internet network, and converts the serially received data in parallel and supplies them to the system bus 400. The serial-to-parallel conversion unit 200 is provided. In particular, the received Internet data packet is stored in the main memory 700 by the CPU 600 through the system bus 400. The Internet access card includes an EEPROM 300 through which a CPU 600 can read or write data through a system bus. The EEPROM 300 records access IP data which is not lost even when the power is cut off. have. A detailed operation of the above configuration will be described below with reference to the flowcharts of FIGS. 2 and 3.

System in accordance with an embodiment of the present invention, the computer power-up step (1000); In the step of powering on the computer, the CPU 600 reads the access permission IP list and the check packet interval data from the EEPROM 300, which is an IP storage unit, and stores them in the main memory (2000); When the packet data is received along with the internet speed following the storing step, the CPU 600 stores the received packet in the main memory 700 (3000); At this time, the CPU 600 extracts IP from the packets stored in the main memory 700 at intervals of the inspection packet, and compares the IP data extracted from the packets of the main memory 700 with the access permission IP list stored in the EEPROM 300. After that, only allowed packets are passed (4000). The step (4000) of passing only the allowed packet will be described in detail. First, the CPU extracts (4101) an IP for a received packet stored in the main memory; The CPU performs step 4102 of comparing the extracted IP with the connection list stored in the EEPROM 300; If the extracted IP is in the access IP list in the comparing step, display 4105 from the received packet to the packet immediately before the next check packet; If the extracted IP is not in the access IP list in the comparing step, discarding the received packet from the packet immediately before the next check packet (4104); Manage your web access.

To this end, the present invention, following the processing steps from the IP extraction process 4101 to the display processing 4105 or the disk 4104, the CPU sends to the simple packet counting and display without extracting the IP as much as the set packet interval, or Discarding step 4106 is provided. At this time, the interval between the check packet and the next check packet is preferably stored in the EEPROM 300 together with the access IP list, which is set by the CPU after the power is turned on. When the packet counting step is completed, the CPU extracts the set packet interval + IP of the first packet (4107); and the processing step is repeated continuously until the internet connection is terminated. . The access IP list stored in the EEPROM 300 may be rearranged in the order in which they are connected as needed to further reduce the time for searching for frequently accessed IP. In addition, since the EEPROM 300 can be read and written by the CPU 600, the EEPROM 300 can be updated by a user assigned with a separate ID or password.

Hereinafter, another embodiment of the present invention will be described in detail with reference to FIG. 8. 8 is a diagram illustrating a system configuration for storing a connection allowable IP list and check packet interval data in a separate memory provided on a main board of a computer in a method and system for managing a web of variable check packet intervals according to the present invention. The Internet access card of the present invention converts the parallel data serially to the interface unit 100 and the interface unit 100 connected to the Internet network, and converts the serially received data in parallel and supplies them to the system bus 400. The serial-to-parallel conversion unit 200 is provided. In particular, the received Internet data packet is stored in the main memory 700 by the CPU 600 through the system bus 400. The main board of the computer is provided with an EEPROM 900 through which the CPU 600 can read or write data through the bus, and the EEPROM 900 records access IP data which is not lost even when the power is cut off. . A detailed operation of the above configuration will be described below with reference to the flowcharts of FIGS. 2 and 3.

System in accordance with an embodiment of the present invention, the computer power-up step (1000); In the step of powering on the computer, the CPU 600 reads the access permission IP list and the check packet interval data from the EEPROM 900 and stores them in the main memory (2000); When the packet data is received along with the Internet connection following the storing step, the CPU 600 stores the received packet in the main memory 700 (3000); At this time, the CPU 600 extracts IP from the packets stored in the main memory 700 at intervals of the inspection packet, and compares the IP data extracted from the packets of the main memory 700 with the access permission IP list stored in the EEPROM 300. After that, only allowed packets are passed (4000). The step (4000) of passing only the allowed packet will be described in detail. First, the CPU extracts (4101) an IP for a received packet stored in the main memory; The CPU performs step 4102 of comparing the extracted IP with the connection list stored in the EEPROM 900; If the extracted IP is in the access IP list in the comparing step, display 4105 from the received packet to just before the next check packet; If the extracted IP is not in the access IP list in the comparing step, discarding from the received packet to just before the next check packet (4104); Manage your web access.

To this end, as in the configuration of FIG. 7, the present invention provides a simple process without extracting IP as much as the packet interval set by the CPU following the IP extraction process 4101 to display process 4105 or diskette 4104 and the processing step. Packet counting and displaying or discarding 4106. At this time, the interval between the check packet and the next check packet is preferably stored in the EEPROM 300 together with the access IP list, and the CPU reads the power and sets it. When the packet counting step is completed, the CPU extracts the set packet interval + IP of the first packet (4107); and the processing step is repeated continuously until the internet connection is terminated. . The access IP list stored in the EEPROM 300 may be rearranged in the order in which they are connected as needed to further reduce the time for searching for frequently accessed IP. In addition, since the EEPROM 300 can be read and written by the CPU 600, the EEPROM 300 can be updated by a user assigned with a separate ID or password.

Hereinafter, another embodiment of the present invention will be described in detail with reference to FIG. 9. 9 is a diagram illustrating a system configuration of storing a connection allowable IP list and check packet interval data in a hard disk 310 of a computer in the method and system for managing a variable check packet interval web access according to the present invention. The Internet access card of the present invention converts the parallel data serially to the interface unit 100 and the interface unit 100 connected to the Internet network, and converts the serially received data in parallel and supplies them to the system bus 400. The serial-to-parallel conversion unit 200 is provided, and in particular, the received Internet data packet is stored in the main memory 700 by the CPU 600 through the system bus 400. The connection IP data is recorded on the hard disk 310 of the computer. A detailed operation of the above configuration will be described below with reference to the flowcharts of FIGS. 2 and 3.

System in accordance with an embodiment of the present invention, the computer power-up step (1000); In the step of powering on the computer, the CPU 600 reads the access permission IP list and the check packet interval data from the hard disk 310 and stores them in the main memory (2000); When the packet data is received along with the Internet connection following the storing step, the CPU 600 stores the received packet in the main memory 700 (3000); At this time, the CPU 600 extracts the IPs from the packets stored in the main memory 700 at intervals of the inspection packets, and extracts IP data extracted from the packets of the main memory 700 and the access permission IP list stored in the hard disk 310. After the comparison, only allowed packets are passed (4000). The step (4000) of passing only the allowed packet will be described in detail. First, the CPU extracts (4101) an IP for a received packet stored in the main memory; The CPU performs step 4102 of comparing the extracted IP with the connection list stored in the hard disk 310; If the extracted IP is in the access IP list in the comparing step, display 4105 from the received packet to the packet immediately before the next check packet; If the extracted IP is not in the access IP list in the comparing step, discarding from the received packet to just before the next check packet (4104); Manage your web access. At this time, if the IP of the received packet is performed in every packet unit, processing time from the IP extraction process 4101 to the display process 4105 or the discard card 4104 is required in every packet unit. Therefore, as in the configuration of Figs. 4 and 5, following the processing steps from the IP extraction process 4101 to the display processing 4105 or the diskette 4104, the CPU simply extracts the packet without the IP extraction by the set packet interval. Counting and displaying or discarding 4106. At this time, the interval between the check packet and the next check packet is stored in the hard disk 310 together with the access IP list, and the CPU reads the power and sets it. When the packet counting step is completed, the CPU extracts the IP of the set packet interval + l th packet (4107); and the processing step is repeated continuously until the internet connection is terminated. . The list of access IPs stored in the hard disk 310 may be rearranged in the order in which they are connected as needed, thereby further reducing the time for searching for frequently accessed IPs. In addition, the connection IP list of the hard disk 310 and the number of packets sent to the simple packet counting and display without extracting the IP may be configured as a hidden file or may be updated by a user having a separate ID or password. .

According to the present invention configured as described above, the user can easily and surely manage the access to the Internet site by analyzing the user's Internet connection IP for each packet number at a predetermined interval so that the connection can be made without wasting processing time. There is an advantage that can be minimized.

Although the foregoing description has been described with reference to the configuration of a single system, the present invention can be applied to any method of connection that may be between the terminal computer and the external Internet.

While the invention has been shown and described with respect to particular embodiments, those skilled in the art will understand that the invention may be practiced in other environments. For example, although the above-described invention can be easily implemented in a general purpose computer selectively reconfigured or operated by software, those skilled in the art can use the invention in hardware, firmware form. It will be appreciated that it may be used in any combination of software, firmware or hardware, including special purpose devices specifically designed to carry out the invention described above. Accordingly, changes may be made in form and detail without departing from the spirit and scope of the invention as set forth in the appended claims.

In the Internet connection, the information contained in one packet is a small amount from the user's point of view, and at least one web packet is composed of at least tens to tens of thousands of packets. Extracting and comparing connections has the disadvantage of only adding time to the processing. In addition, in the packet filtering of the Internet, if the IP of the received packet is performed in every packet unit, processing time from the IP extraction process to the display processing process is required in every packet unit. That is, since a separate processing time is required for every packet in a packet unit, there is a fatal disadvantage of delaying time in real time access of packet data.

Therefore, in the present invention, the IP of the received packet is not extracted and managed in every packet unit, so that it is performed at variable intervals, and the packet checking interval can be set to minimize unnecessary processing time and time required for connection processing. Minimize the number and at the same time enable effective web access management.

Claims (8)

In a computer system for preventing access to a site for harmful or non-business purposes, the interface unit 100 connected to the Internet network; and the parallel unit converts and transmits parallel data serially to the interface unit 100, and serially receives the data received in parallel. Internet connection card is provided with a serial-to-parallel conversion unit 200 to convert and supply to the system bus 400; A main memory 700 in which the received Internet data packet is stored by the CPU 600 via the system bus 400; An IP storage unit 300 capable of reading or writing data by the CPU 600 via the system bus; The IP storage unit 300 stores the access allowable IP list and the check packet interval data. After extracting the IP by the check packet interval from the received packet and comparing it with the access allowable IP list, if the extracted IP is in the access IP list in the comparing step, the received packet is displayed (4105). Send simple packet counting and up to the packet immediately before the next check packet without IP extraction by the set packet interval; If the extracted IP is not in the access IP list in the comparing step, the received packet is discarded (4104), and following the discarding step, the CPU performs simple packet counting and next check packet without extracting the IP by the set packet interval. Web connection management system of check packet interval characterized by disking up to the last packet The method of claim 1, The access permission IP list and the check packet interval data stored in the IP storage unit 300 are updated by a user assigned with a separate ID or password. The method of claim 1, The access permission IP list and the check packet interval data stored in the IP storage unit 300 are rearranged by the CPU 600 according to the frequency of use. The method according to any one of claims 1 to 3, Web access management system with a variable check packet interval, characterized in that the IP storage unit 300 is provided on one of the Internet access card, main board, hard disk The method according to any one of claims 1 to 3, When the power is supplied, the IP storage unit 300 records and reads data from the CPU 600, and when the power is cut off, the IP storage unit 300 is a storage means for maintaining the recorded data. An interface unit 100 connected to an internet network; and a serial-to-parallel conversion unit for converting serial data into serial data and transmitting the serial data received in parallel to the system bus 400. 200 is provided with an internet access card; In a computer system in which received Internet data packets are stored in the main memory 700 by the CPU 600 via the system bus 400, An IP storage unit 300 capable of reading or writing data by the CPU 600 via the system bus; The IP storage unit 300 stores the access allowable IP list and the check packet interval data; Computer power on step 1000; In the step of powering on the computer, the CPU 600 reads the access permission IP list and the check packet interval data from the IP storage unit 300 and stores them in the main memory (2000); If the packet data is received along with the internet connection following the storing step, the CPU 600 storing the received packet in the main memory 700 (3000); Extracting (4101) the IP by the CPU 600 from the packet stored in the main memory 700 in the above step; The CPU comparing the extracted IP with the connection list stored in the IP storage 300 (4102); If the extracted IP is in the access IP list in the comparing step, the received packet is processed (displayed 4105), and following the processing step, the CPU performs simple packet counting and the packet immediately before the next check packet without extracting the IP by the set packet interval. Perform step 4106 of sending to a display; If the extracted IP is not in the access IP list in the comparing step, the received packet is discarded (4104), and following the discarding step, the CPU performs simple packet counting and next check packet without extracting the IP by the set packet interval. Discarding the last packet (4108); A CPU 4107 extracting, by the CPU, the IP of the first packet interval + the first packet when the packet counting step is completed; Web access management method of the variable check packet interval, characterized in that repeated including The method of claim 6, In the IP storage unit 300, the CPU 600 records and reads the data when the power is supplied, and stores the data in the variable check packet interval when the power is cut off. Method and system The method according to any one of claims 6 to 7, Web access management method and system of a variable check packet interval, characterized in that the access permission IP list stored in the IP storage unit 300 is rearranged according to the access frequency