KR100717287B1 - System for detecting and dividing local IP of a client computer in inner network from outer network - Google Patents

Abstract

The present invention relates to a system for detecting and distinguishing a local IP of a client computer in a network from the outside, and recognizes whether or not a user is installed / operated in a client computer to be detected previously, or does not recognize a router or a firewall. Overcomes the limitations of not being able to obtain the private IP of the client computer existing in the internal network configuration device, such as detecting the IP address of the client computer in the internal network at a remote location, and bringing the detected information to the public IP, private IP, proxy The present invention relates to a system for classifying IPs and detecting and classifying local IPs of client computers in a network from the outside.

Public IP, Private IP, Proxy IP, Internet IP, TCP / IP, Applet, Socket, Stream, Java API Functions, Session

Description

System for detecting and dividing local IP of a client computer in inner network from outer network}

1 is a diagram illustrating a process of detecting a local IP between a client and a server in a system for detecting and distinguishing a local IP of a client computer in a network from the outside according to the present invention.

FIG. 2 is a diagram illustrating an example of a database in which IP information detected through the process of FIG. 1 is stored.

3 is a diagram for explaining a process of obtaining an IP set in an Internet protocol by requesting a local IP from a client through a web browser.

4 is a diagram for explaining the order and progress of calling a function by operating an actual applet.

5 is a diagram illustrating a source program for detecting a local IP.

The present invention detects a local IP address of a client computer in a private network using applet and socket communication in a notification window in a web server that transmits and manages a notification. The present invention relates to a system that detects and distinguishes a local IP of a client computer in a network from the outside by classifying whether the IP address is set in a client computer's NIC).

More specifically, it detects the IP currently set on the client computer of the Internet user and builds its own IP address system inside the private network constructed by using an IP router or using a NAT configuration or an ISP network. Even though it relates to a system for identifying and distinguishing the local IP of the client computer in the network from the outside by making a database so that the IP address of the client computer in the private network can be distinguished from the outside.

Recently, subscribers frequently use IP routers to use the network. There is a growing number of companies that use NAT in the company or company. These are causing serious problems such as increased network traffic, hacking, viruses, and worms.

However, in order to track down the user who is experiencing this problem, the real user's IP address must be known, but the user's real IP address inside the NAT or IP router is converted to a public IP address when traversing the NAT or IP router. The problem is that the real IP cannot be tracked from outside.

In order to solve this problem, it is necessary to install a separate application that informs the user's IP address in the internal network, but there is a problem that the user can recognize and reject the installation / operation.

SUMMARY OF THE INVENTION The present invention has been made to solve such a problem, and a user using a client computer that wants to detect an IP address knows whether it is installed / operated or does not have an authentication / authorization procedure. It overcomes the limitation that private IP of private IP and private IP can't be converted to get public IP to access the Internet, and by detecting and distinguishing IP address of client computer inside private network from external network, It is an object to provide a system for detecting and distinguishing local IP.

In order to achieve the above object, the present invention includes a client computer located inside the network based on the Internet protocol, and a server existing outside the network, the system for detecting a local IP of the client computer After the client computer is connected to the server and the socket, the client computer detects an IP address and an Internet IP address set in its Internet protocol, and transmits the IP address to the server, and the server maintains a session with the client computer as a socket. Detects the public IP address by requesting an IP address, and separates the received public IP address, the IP address set in the Internet protocol, and the Internet IP address into a public IP address, a private IP address, and a proxy IP address, respectively. Store in

If the public IP address, the private IP address, and the proxy IP address are all the same, the server determines that the client computer is using a public IP address, and only the private IP address and the public IP address and the private IP address. If it is different from the proxy IP address, the client computer determines that it is using a private IP address. If only the proxy IP address is different from the public IP address and the private IP address, the client computer is a public IP address. It is determined that a proxy web server is used while using the Internet, and if the public IP address, the private IP address, and the proxy IP address are all different, the client computer is assigned a public IP address, and the public IP address. We are using a proxy web server while building and using a private network. It is determined to be.

The client computer detects a server IP address of a destination to which the Internet protocol IP address is to be transmitted, detects a server port number of the destination having the IP address of the server, and sockets to a server of the destination having the detected server port number. Request to detect the IP address set in the Internet Protocol, and transmit the detected IP address to the server.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

First, look at the definition of the various IP addresses used in the present specification are as follows.

A public IP address is an IP address that enables a client computer to use the Internet. It means an IP address set in an institution network, a router, a firewall, a NAT, and an IP provided by an Internet service provider (ISP).

The IP address set in the Internet protocol means a private IP address set in the client computer in the internal network and an IP address set in the network interface card (NIC) of the client computer.

The Internet IP address is a proxy IP address, which means a web server address used as a waypoint, or a server in a firewall for transmitting or operating a web server for security reasons.

1 is a diagram illustrating a process of detecting a local IP between a client and a server in a system for detecting and distinguishing a local IP of a client computer in a network from the outside according to the present invention.

As shown in Fig. 1, in order to detect a local IP of a client computer in a private network in an external network, first, a plurality of client computers constituting a private network and a web server on the Internet are based on the TCP / IP protocol. It is connected to communicate with.

At this time, when the client 10 uses the Internet using the Http protocol, the server 20 transmits a notification window from the notification web server, retrieves the Internet IP address, stores the information in a variable, and stores the client computer using an applet. Mechanism is used to establish session-based socket communication state between web server and web server.

To this end, the client computer 10 detects a server IP address of a destination to be transmitted (S1), detects a server port number of a destination to be transmitted (S2), and connects a socket to the corresponding destination server (S2). S3).

These steps S1 to S3 detect the information of the server 20 to which the client's IP address is to be transmitted, and accurately transmit the IP address to the server 20.

Next, the client computer 10 requests the IP address set in the Internet Protocol (TCP / IP) (S4), and streams the detected information, that is, the Internet IP address, the IP address set in the Internet Protocol (TCP / IP). Streaming the data is sent to the server 20.

Thereafter, the server 20 receives the information (IP address set in the Internet IP address and TCP / IP) transmitted to the set port and stores the parameter value in a variable (S6).

Then, the server 20 obtains the public IP by requesting the client IP address in a state in which the client 10 and the server 20 are connected to the socket by the session (S7).

The server 20 distinguishes and determines a public IP address, an IP address set in an Internet protocol (TCP / IP), and a detected IP address of the Internet IP address (S8).

Next, the separated IP address is stored as a database as shown in FIG. 2 (S9).

By performing these steps, it is possible to detect the public IP address, the IP address set in the Internet Protocol (TCP / IP), the Internet IP address, and to accurately identify the IP of the Internet user by classifying the detected IPs.

In addition, the applet used in the present invention is a Java applet, which uses a feature of a language called Java and a technology of obtaining and storing an Internet source IP of a client.

2 is a public IP address that is detected IP information stored in a DB, an IP address set in an Internet protocol (TCP / IP), a public IP corresponding to an Internet IP address, a private IP, a proxy (a web server address used as a waypoint, or security). Fig. 1 shows a diagram in which a server IP in a firewall for operating a web server or transmitting data is compared and determined.

As shown in FIG. 2, when looking at the stored DB table, each detected IP address is stored in a public IP, a private IP, and a proxy IP column among a plurality of column names. will be.

If you analyze the records stored in the database, you will see four kinds of cases.

First, if all three columns of public IP, private IP, and proxy IP are stored with the same IP address, the detected Internet user is identified as the public IP address user. Mark this as Real.

Second, if only the private IP column is detected as another IP address in the private IP band out of the three public IP, private IP, and proxy IP columns, the detected Internet user is a private IP user configured with a firewall or NAT used by the institution, or a router. This is determined as a private IP user. Mark this as Virtual.

Third, the IP of the other column is the same but only the IP of the proxy IP column is different. In this case, the Internet IP is used as a public IP and is identified as a user who has passed / bypassed using a proxy web server. Mark this as a Proxy.

Fourth, if the IP address of the public IP, private IP, and proxy IP columns are different, the public IP address is assigned using a firewall, NAT, router, etc., and a private network is constructed and used as the IP address. It is determined as a user who has passed / bypassed using the server. Mark this as Mix.

After this process, the detected public IP address, the IP address set in the Internet Protocol (TCP / IP), and the Internet IP address can be classified and identified as public IP, private IP, and proxy IP, so that they can be meaningful actual information.

3 illustrates a process of detecting an IP address set in an Internet protocol (TCP / IP) of a NIC by requesting a local IP of a remote place through a web browser, and FIG. 4 illustrates that the above-described detection process of FIG. 3 is executed through an applet. This is a diagram to explain the order and progress of calling a function. In this way, the local IP can be requested within the web browser to detect the IP address set in the Internet Protocol (TCP / IP) of the NIC.

FIG. 5 shows a source program that can detect the IP address set in the Internet Protocol (TCP / IP) of the NIC by requesting a local IP within the web browser described in FIG.

In the above, certain preferred embodiments of the present invention have been illustrated and described. However, the present invention is not limited to the above-described embodiments, and various modifications can be made by those skilled in the art without departing from the gist of the present invention as claimed in the claims. will be.

According to the IP detection system of the present invention, the existing network has overcome the limitation that the private IP of the client computer in the internal private network cannot be obtained.

In addition, the client computer to be detected may recognize whether the user is installed / operated or obtain a private IP of the client computer without an authentication / authorization procedure.

In addition, by classifying the detected private IP public IP and private IP, it is possible to use the IP sharer, NAT configuration, firewall, ISP network, etc. to make a database of the IP information of the user who has built its own IP system inside the network. have.

According to the IP classification system of the present invention, a private IP address set to a client computer in the internal network (IP address set to the NIC of the client computer) and the Internet enable the Internet by a four-step IP address classification algorithm. Addresses (eg, IPs set in institution networks, routers, firewalls, NATs, public IPs of Internet services, etc.) and proxy IP addresses (web server addresses used as waypoints, or within a firewall for security purposes to operate web servers or transmit data). Servers) to track and charge users who use the Internet for unhealthy or unauthorized purposes.

Claims (4)

A system comprising a client computer located inside a network based on an Internet protocol and a server existing outside the network, wherein the system detects and distinguishes a local IP of the client computer. The client computer After the socket connection with the server, the IP address and the Internet IP address set in the Internet protocol of the client computer is detected by the server and transmitted to the server, The server is The IP address is detected again by requesting an IP address while maintaining a session with the client computer and a socket, and the received public IP address, the IP address set in the Internet protocol, and the Internet IP address are public IP addresses and private addresses, respectively. It is regarded as IP address and proxy IP address and stored in the database. By comparing the IP addresses of the stored database with each other, the server determines that the client computer is using a public IP address when the public IP address, the private IP address, and the proxy IP address are all the same. If only the private IP address is different from the public IP address and the proxy IP address, the client computer determines that the private IP address is used. If only the proxy IP address is different from the public IP address and the private IP address, it is determined that the client computer is using a proxy web server while using the Internet as a public IP address. If the public IP address, the private IP address, and the proxy IP address are all different, the client computer is assigned a public IP address, and uses a proxy web server while constructing and using a private network with the public IP address. A system for detecting and classifying a local IP of a client computer in a network from the outside, characterized in that it is discriminated. delete The method of claim 1, The server detects the local IP of the client computer in the network from the outside by transmitting a notification window to the client computer, and then establishes a session-based socket communication state between the client computer and the server using an applet. System to distinguish. The method of claim 3, wherein By the applet, the client computer Detect the server IP address of the destination to which the Internet Protocol IP address will be sent, Detect a server port number of the destination having the IP address of the server, A socket connection to the server of the destination having the detected server port number, Request to detect the IP address set in the Internet Protocol, And detecting and distinguishing a local IP of a client computer in a network from the outside, wherein the detected IP address is transmitted to the server.

Images