KR100713079B1 - System for blocking harmful site using a vlan and method thereof - Google Patents

Abstract

According to the present invention, a system for providing a blocking service of a harmful site by using a virtual LAN includes a DHCP server for allocating an IP connection for an Internet access subscriber and an IP blocking service subscriber using a virtual LAN, and using a virtual LAN. An L2 switch that groups IP for Internet-facing subscribers and harmful site blocking subscribers into a virtual LAN, a DHCP server that allocates different IP bands for each virtual LAN, an aggregation switch that aggregates traffic of a lower L2 or IP-DSLAM, Harmful Site Blocking A load balancing switch that separates the IP band granted by the subscriber and the IP band granted by the Internet access subscriber, and a blocking server that performs the harmful site blocking function for the subscriber traffic group, in an Ethernet environment such as VDSL. By assigning IP bands for each virtual LAN using the virtual LAN, the IP band granted by the subscriber without additional authentication It is to provide a service that blocks harmful traffic by separating subscriber traffic.

Description

System and method for blocking harmful sites using virtual LAN {SYSTEM FOR BLOCKING HARMFUL SITE USING A VLAN AND METHOD THEREOF}

1 is a flowchart showing a flow of blocking a conventional harmful site.

2 is a block diagram showing in detail the configuration of a system for blocking a harmful site using a virtual LAN according to the present invention.

3 is a flowchart illustrating a method of blocking a harmful site using a virtual LAN according to the present invention.

The present invention relates to a system for blocking a harmful site, and more particularly, to a system and a method for blocking a harmful site by allocating an IP band for each virtual LAN using a virtual LAN in an Ethernet-based subscriber network.

Today, the Internet is growing phenomenal enough to change the existing lifestyle and thinking paradigm. Accordingly, countries around the world are competing to revitalize the use of the Internet through the construction of high-speed networks, the development of various multimedia contents, and the expansion of competition in the telecommunications market.

While the Internet is recognized as a great place for information exchange by providing a variety of useful information, it is open to the public and does not provide a screening function for users who access each Internet site. The dysfunctional side of the Internet, which may be of concern, is also highlighted.

At present, in order to provide network-based additional services to subscribers of harmful information blocking services, the corresponding traffic must be separated, and for this purpose, a subscriber authentication procedure using a subscriber MAC address or ID is generally required.

However, Ethernet-based subscriber network access method (including IP-VDSL) simply assigns IP using the function of DHCP server, and there is no subscriber authentication procedure, so it is difficult to provide network-based supplementary services through traffic separation.

Therefore, there is a need to separate traffic in order to block harmful sites in the Ethernet environment.

In order to solve the above problems, an object of the present invention is to allocate an IP band for each virtual LAN using a virtual LAN in an Ethernet environment such as VDSL to separate subscriber traffic by the IP band granted by the subscriber without a separate authentication procedure. It is to provide a system and method for providing a blocking service of harmful sites.

In order to achieve these objects, a system for providing a blocking service of a harmful site using a virtual LAN according to the present invention, a DHCP server for allocating an IP band for Internet access subscribers and an IP blocking service subscriber using a virtual LAN. And a L2 switch that groups Internet access subscriber IPs and harmful site blocking subscriber IPs into virtual LANs using a virtual LAN, a DHCP server that allocates different IP bands to each virtual LAN, and aggregates traffic of the Howe L2 switch. A aggregation switch, a load balancing switch that separates the IP band granted by the harmful site blocking subscriber and the IP band granted by the Internet access subscriber, and a harmful blocking server that performs the harmful site blocking function on the subscriber traffic group. It is done.

According to the present invention, a method of providing a blocking service of a harmful site using a virtual LAN includes providing different IP bands to a harmful site blocking service subscriber and an unsubscribed subscriber among Internet subscribers, and for a harmful site blocking service subscriber. Grouping the IP and the IP for the Internet accessor into the virtual LAN, determining whether the subscriber has attempted to access the harmful site, and when attempting to access the harmful site at the determining step, Characterized in that it comprises a step of separating.

In the present invention, the traffic separation step, characterized in that to provide a service for blocking the Internet access by the harmful blocking server in the case of the harmful blocking target IP band.

In the present invention, the traffic separation step, characterized in that the Internet connection is performed in the case of the non-blocking target IP band.

In the present invention, the IP bandwidth is different for Internet access subscribers and harmful site service subscribers.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 shows a flowchart of blocking a harmful site by a conventional user ID.

Referring to FIG. 1, in the conventional harmful site blocking method, when an individual or a group first subscribes to a harmful site access blocking service (S1), the Internet service provider includes a blocking target ID and a non-blocking target ID at the request of a subscriber. A plurality of IDs are assigned to the subscriber (S2).

When the user wants to access the Internet, the user requests an access by inputting a user ID (S3). The access server checks the user ID to determine whether the ID is a blocking target ID or a non-blocking target ID.

According to the determination result, the blocking target ID is allocated to the blocking target ID (S5), and routed to the blocking system. The blocking system determines whether the user attempts to access the harmful information site (S6). If the URL is included in the harmful information site list when the user connects, the blocking system transmits a no access message to the user (S9). If not contained within, routing to the Internet is made to surf the Internet (S8).

For the non-blocking target ID, the access server allocates the non-blocking target IP (S10) and is transmitted to the authentication server for user authentication. The authentication server performs user authentication (S11), and a user of an unauthenticated ID is not allowed to access the Internet, and a user who has passed the authentication is connected to an ISP to which the customer has subscribed (S12, S13).

As such, in order to provide a conventional harmful site blocking service, a subscriber authentication procedure is essential.

Hereinafter, a system for blocking a harmful site using a virtual LAN according to the present invention will be described with reference to FIG. 2.

Referring to FIG. 2, when a subscriber requests an IP, the system for blocking a harmful site using the virtual LAN according to the present invention uses the virtual LAN to connect an IP “10.XXX” for an Internet access subscriber and an IP for a harmful blocking service subscriber. DHCP server 21 for allocating the "20.XXX" band, and L2 for grouping IP "10.XXX" for Internet access subscribers into Virtual LAN 100 and IP "20.XXX" for harmful blocking service subscribers into Virtual LAN 200. Subscriber with switch 20, aggregation switch 22 that aggregates traffic of lower L2 or IP-DSLAM, IP band " 10.XXX " for Internet access subscriber and IP band " 20.XXX " A load balancing switch 25 for separating the traffic group and a harmful blocking server 23 for passing the harmful blocking service subscriber IP "20.XXX" in accordance with the separated traffic group.

Subscriber PCs 20a, 20b, 20c, and 20d are assigned IP by the DHCP server 21. As shown in Fig. 2, the Internet access subscriber is assigned an IP "10.XXX", and the harmful blocking service subscriber is assigned an IP "20.XXX". For example, subscribers 20a and 20b who have entered the harmful blocking service are given an IP of "20.XXX", and Internet access subscribers 20c and 20d are assigned an IP of "10.XXX".

The L2 switch 20 groups the assigned IPs into the virtual LAN. For example, the harmful blocking service subscriber IP "20.XXX" is grouped into the virtual LAN 200, and the Internet service subscriber IP "10.XXX" is grouped into the virtual LAN 100.

The load balancing switch 25 separates subscriber traffic according to different IP bands for each virtual LAN. Accordingly, the IP "20.XXX" of the virtual LAN 200 for the harmful parental service subscriber passes through the harmful blocking server 23, and the IP "10.XXX" of the virtual LAN 100 for the Internet access subscriber is the ISP to which the customer has subscribed. Routing through the router 24 is to surf the Internet.

3 is a flowchart illustrating a method of providing a blocking service of a harmful site using a virtual LAN according to the present invention.

Referring to FIG. 3, the DHCP server 21 assigns IPs of different bands to the harmful site blocking service subscribers and non-subscribers among the Internet subscribers (S301).

The harmful site blocking service subscriber and the non-subscriber are grouped into the virtual LAN by the L2 switch 20 (S302).

When the subscriber tries to access the harmful site (S303), the traffic is separated for each virtual LAN IP band (S304).

According to the traffic separation result, the harmful blocking service is provided by the harmful blocking server 23 in the case of the harmful blocking target IP band (S305, S306).

In the case of the IP band for the Internet access subscriber, it connects to the ISP which is the customer and surfs the Internet (S307 and S308).

As described above, although a system for providing a harmful site blocking service according to an embodiment of the present invention has been described, the scope of protection of the present invention is not limited to such an embodiment, and the scope of the present invention can be easily modified by those skilled in the art. Will understand that it is crazy.

As described above, the present invention can be provided with a harmful site blocking service by separating subscriber traffic by an IP band granted by a subscriber using a virtual LAN without an authentication procedure using a subscriber MAC address or ID.

Claims (4)

As a system that provides a blocking service of harmful sites using a virtual LAN, DHCP server which assigns IP of different band to internet access subscriber and harmful site blocking service subscriber, An L2 switch that groups the IP for Internet access subscribers and the IP for harmful site blocking services into a virtual LAN using a virtual LAN; A load balancing switch that separates the traffic of subscribers according to the IP band granted by the harmful site blocking service subscriber and the IP band granted by the Internet access subscriber; The harmful site blocking system comprising a harmful blocking server that performs a harmful site blocking function on the traffic of the separated harmful site blocking service subscriber. As a method of providing a blocking service of a harmful site using a virtual LAN, Assigning IPs of different bands by a DHCP server to Internet access subscribers and harmful site blocking service subscribers; Grouping the harmful site blocking service subscriber IP and the Internet access subscriber IP into the virtual LAN; Determining whether the subscriber attempted to access the harmful site; And attempting to access a harmful site in the determining step, separating traffic by virtual LAN IP bands. The harmful site blocking method according to claim 2, wherein in the traffic separation step, a service for blocking Internet access by the harmful blocking server in the case of the harmful blocking target IP band is provided. The harmful site blocking method of claim 2, wherein in the traffic separation step, Internet access is performed when the non-blocking target IP band is used.

Images