KR100921712B1 - Method and system for protecting harmful web site - Google Patents

Abstract

The present invention relates to a harmful site blocking method and system, wherein when a user attempts to access a web site through a client terminal, the client terminal first searches for a harmful site in a buffer database, and the address information received from the user is buffered. If not retrieved from the database, the web site address information is transmitted to the harmful site blocking service server to provide the harmful site blocking method and system configured for the harmful site blocking service server to detect whether the harmful site is secondary in the harmful site database. .

According to the present invention, even when it is impossible to determine whether a harmful site is found in the buffer database, a method and a system for blocking harmful sites can be provided using address information stored in the harmful site database.

Malicious Sites, Buffer Databases, Malicious Site Blocking Service Servers

Description

Hazardous site blocking method and system {METHOD AND SYSTEM FOR PROTECTING HARMFUL WEB SITE}

The present invention relates to a harmful site blocking method and system, and more particularly, when a user wants to access a web site through a client terminal, the client terminal first searches for a harmful site in a buffer database, and receives If the address information is not retrieved from the buffer database, the malicious site blocking method is configured to send the website's address information to the harmful site blocking service server so that the harmful site blocking service server detects the harmful site secondarily in the harmful site database. It's about the system.

Recently, thanks to the rapid development of Internet technology and the spread of computers, the number of users who use the Internet is increasing exponentially, and these users can easily access the Internet at home or at work, so that the social, political, economic, cultural, art and shopping You can get information on various fields such as. In particular, the use of the Internet is rapidly increasing in the adolescents, and even the middle-aged users who are not familiar with computers can use the Internet simply by learning a simple method. After all, due to the widespread use of the Internet, it can be said that the quality of life of many users has been improved regardless of gender and age.

However, there are many advantages of the spread of the Internet, but there are also side effects. The side effects of the Internet, such as illegal pornography, violence and crime, and gambling sites that cause incidence of indiscriminate access is possible. In particular, due to the rapidly increasing social trend of the Internet users in children and adolescents, these children and adolescents easily access such harmful sites, causing a number of social problems such as delinquency and derailment. Therefore, parents with children of children and adolescent ages need various methods to protect their children from harmful Internet sites.

As such a method for blocking harmful Internet sites, there are methods performed in a server and methods performed in a client terminal. First of all, the method of the server is based on the network, and the information about the web site to which the Internet user wants to access is determined by the harmful site blocking server to determine whether it corresponds to the harmful site and to access the user's web site. It is a way to block. This method has to provide information about the web site to the server every time the Internet is connected, which can cause a load problem on the network, and the bandwidth of the physical connection link to the server must be large. On the other hand, in the case where the client terminal accesses a specific web site, when the client terminal accesses a specific web site, the blocking is set in advance on the web for the harmful site, and when the web site is downloaded, the specific web site turns out to be a harmful site. The way that the site is automatically blocked. This method has a problem in that it is difficult to adequately cope with various harmful sites which are growing at a very high speed, and needs to be updated manually.

The present invention has been made to overcome the above-described problems, the client terminal is primarily in the harmful database from the buffer database using the buffer database included in the client terminal and the harmful site database included in the harmful site blocking service server The purpose of the present invention is to provide a method and system for blocking harmful sites by searching whether they are harmful sites and blocking the harmful sites using the results of searching the harmful site database.

In addition, in the present invention, when a user wants to access a web site, first, the user searches for a harmful site in a buffer database included in the client terminal, and blocks the user's access to the web site if the malicious site corresponds. Hazardous Site Blocking Service It aims to reduce the load on the server while providing unnecessary services by preventing unnecessary access to the server.

In addition, the present invention by connecting the harmful terminal blocking service server at a predetermined time point to the client terminal to update the address information of the buffer database, the harmful site that can block various forms of harmful sites using the quickly updated information It is an object of the present invention to provide a blocking method and system.

In order to achieve the above object, according to an aspect of the present invention, in the harmful site blocking service server comprising a client terminal and a harmful site database including a buffer database, the client terminal is Searching whether the same address information as the address information of the web site received from the user exists in the buffer database, and as a result of the client terminal searching, the same address information exists in the buffer database, and the address information is normal. Connecting to a web site desired by the user in the case of the address information of the site, and blocking the user's access when the address information is the address information of the harmful site; as a result of the client terminal searching, the same address in the buffer database Information Transmitting the address information received from the user to the harmful site blocking service server, if the address information received from the client terminal is present in the harmful site database. Transmitting the search result to the client terminal; and receiving the search result from the harmful site blocking service server by the client terminal, and the same address information exists in the harmful site database according to the received result. When the information is the address information of a normal site, the user can provide a harmful site blocking method comprising the step of connecting to a desired website and blocking the user's access when the address information is the address information of the harmful site. .

Here, the client terminal receives the search result from the harmful site blocking service server, the same address information exists in the harmful site database according to the received result, the address information is the address information of the normal site In the case where the user connects to a desired web site and the user information is blocked when the address information is address information of a harmful site, the client terminal may be included in a search result received from the harmful site blocking service server. And storing the address information in a buffer database. In addition, when the client terminal checks whether the buffer database is updated at a predetermined time point and the buffer database is not updated, the client terminal accesses the harmful site blocking service server to access the address of the buffer database. It may be configured to further include updating the information. In addition, when the client terminal checks whether the buffer database is updated at a predetermined time point and the buffer database is not updated, the client terminal accesses the harmful site blocking service server to access the address of the buffer database. The updating of the information may be performed when the client terminal deletes and initializes harmful site address information stored in the buffer database when the number of harmful site address information stored in the harmful site database is greater than a specific number. Can be configured to In addition, when the client terminal checks whether the buffer database is updated at a predetermined time point and the buffer database is not updated, the client terminal accesses the harmful site blocking service server to access address information of the buffer database. The updating may include: when the number of harmful site address information stored in the harmful site database is less than a specific number, the client terminal accesses the harmful site blocking service server and updates the address information of the harmful site database. It can be configured to receive by storing in the buffer database. In addition, the address information of the web site may be configured to include a serial number of the harmful site, encrypted site information, and information on whether filtering is applied.

According to another aspect of the present invention, a harmful site blocking system providing a harmful site blocking method, comprising a buffer database for storing the address information of the normal site and the harmful site, the address received from the user by searching the buffer database And a harmful site database for determining whether the information is a normal site or a harmful site, and for storing a client terminal for connecting or blocking a user to a web site and address information of the harmful site, and including the address information received from the client terminal. A harmful site blocking service server for searching the harmful site database and transmitting a search result to the client terminal, wherein the client terminal receives the search result from the harmful site blocking service server and receives the received result. If the same address information exists in the harmful site database, and the address information is the address information of the normal site, the user connects to the desired website, and if the address information is the address information of the harmful site, It is possible to provide a harmful site blocking system characterized in that the connection is blocked.

According to the present invention, by using the buffer database included in the client terminal and the harmful site database included in the harmful site blocking service server, the first step is to detect whether the harmful site corresponds to the harmful site in the buffer database, and then block 2 By blocking the harmful site by using the search result in the harmful site database, even if it is impossible to determine whether the harmful site in the buffer database can be provided by using the address information stored in the harmful site database method and system can be provided.

In addition, according to the present invention, when a user wants to access a web site, a buffer database included in the client terminal is first searched for whether it is a harmful site, and when the user corresponds to a harmful site, the user is blocked from accessing the web site. By doing so, it is possible to prevent unnecessary access to the harmful site blocking service server, thereby reducing the load on the server and providing a quick service.

In addition, according to the present invention, the client terminal connects to the harmful site blocking service server at predetermined time points, and newly updates the address information of the buffer database, thereby automatically using updated information without any action such as blocking registration. It is possible to provide a harmful site blocking method and system that can block various types of harmful sites.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view showing the configuration of a harmful site blocking system for providing a harmful site blocking method according to an embodiment of the present invention.

Referring to FIG. 1, the client terminal 10 includes a buffer database 20, the harmful site blocking service server 30 includes a harmful site database 40, and the client terminal 10 and the harmful site blocking service. The server 30 is connected via an internet communication network.

The client terminal 10 refers to a device that can receive an Internet service, and includes a PC, a mobile phone, a PDA, and the like. The client terminal 10 receives address information of a web site to be accessed from an Internet user, and determines whether the received address information corresponds to a harmful site by searching address information stored in the buffer database 20. In this case, if the address information received from the user is a normal site, access is allowed, but if it is a harmful site, access is blocked.

As described above, the buffer database 20 is included in the client terminal 10. Since the buffer database 20 stores address information of the normal site and the harmful site, the client terminal 10 determines whether the address information of the web site received from the user is the normal site or the harmful site. Information can be determined by searching.

The harmful site blocking service server 30 is connected to the client terminal 10 through an internet communication network. The harmful site blocking service server 30 does not retrieve the same address information from the buffer terminal 20 as the client terminal 10 receives from the user, the address of the web site transmitted by the client terminal 10. It receives the information, and searches the harmful site database 40 and transmits the determination result of whether the web site is a normal site or a harmful site to the client terminal 10. On the other hand, the harmful site blocking service server 30 is connected to the client terminal serves to update the address information of the buffer database 20 included in the client terminal 10, which will be described later with reference to FIG. Shall be.

The harmful site database 40 is included in the harmful site blocking service server 30 and stores address information of various web sites. As described above, the malicious site database 40 receives the address information from the client terminal 10 when the address information on the web site received by the client terminal 10 is not stored in the buffer database 20. The harmful site blocking service server 30 searches for the address information received from the harmful site database 40 to determine whether it corresponds to a harmful site.

FIG. 2 is a diagram illustrating an embodiment of a procedure of a harmful site blocking method performed by the configuration of FIG. 1.

Referring to FIG. 2, the client terminal 10 receives address information of a web site that a user wants to access from the user (S201), and searches whether the same address information as the received address information exists in the buffer database 20. (S203). If the client terminal 10 searches for address information stored in the buffer database 20, and there exists address information identical to the received address information, whether the address information stored in the buffer database 20 is address information of a normal site. It is determined whether or not (S205), if the normal site is connected to the website that the user wants to access (S207), but if the address information stored in the buffer database 20 is the address information of the harmful site of the user's website Block the access to (S209).

On the other hand, when the client terminal 10 retrieves the address information stored in the buffer database 20, and if the same address information as the received address information does not exist, the client terminal 10 deletes the address information received from the user. It transmits to the site blocking service server 30 (S211).

The harmful site blocking service server 30 searches whether the address information received from the client terminal 10 exists in the harmful site database 40, and transmits the search result to the client terminal 10 (S213).

The client terminal 10 receiving the search result from the harmful site blocking service server 30 has the same address information in the harmful site database 40, and the web site desired by the user when the address information is the address information of the normal site. In operation S215, when the address information is address information of a harmful site, access to the user's web site is blocked at step S217. In addition, the client terminal 10 stores the search result received from the harmful site blocking service server 30 in the buffer database 20.

On the other hand, if the address information is stored in both the buffer database 20 and the harmful site database 40, or whether it is a normal site, it is determined directly whether the harmful site, and in this way received from a website It is possible to use a method of determining whether or not the harmful word is included in the data to be identified as a harmful site when the harmful word is more than a predetermined number.

3 is a diagram illustrating a procedure of a harmful site blocking method when the address information of a web site that a user wants to access and the same address information exist in a buffer database.

3 is for explaining the steps 203 to 209 described in FIG. 2, the client terminal 10 receives the address information of the web site from the user (S301), and the same address information as that of the received web site is received. It is searched whether the buffer database 20 exists (S303). When the client terminal 10 searches the buffer database 20 as a result of the same address information, the client terminal 10 determines that the address information stored in the buffer database 20 is address information of a normal site. The user connects to the desired web site (S305), and blocks the user's access in the case of address information of the harmful site (S307).

On the other hand, when the stored address information of the buffer database 20 is changed, the client terminal 10 accesses the harmful site blocking service server 30 at a predetermined time point and updates the address information (S309).

4 is a view showing a procedure of a harmful site blocking method when the address information of a web site that a user wants to access and the same address information do not exist in the buffer database.

4 is for explaining the steps 211 to 217 described in FIG. 2, the client terminal 10 receives the address information of the web site from the user (S401), and the same address information as that of the received web site is received. It is searched whether the buffer database 20 exists (S403). As a result, if the received address information does not exist in the buffer database 20, the client terminal 10 transmits the received address information to the harmful site blocking service server 30 (S405), the harmful site blocking service The server 30 searches whether the received address information exists in the harmful site database 40, and transmits the search result to the client terminal (S407).

The client terminal 10 receives a search result from the harmful site blocking service server 30, and when the address information received from the user is the address information of the normal site, the client terminal 10 connects to the web site desired by the user (S409). In the case of address information, the user's access is blocked (S411).

On the other hand, after step 409 or step 411, the client terminal 10 stores the address information included in the search result received from the harmful site blocking service server 30 in the buffer database 20. As such, by storing the address information received from the harmful service blocking service server 30 in the buffer database 20, the address information stored in the buffer database 20 is automatically updated, and the user frequently updates the preferred site. Since there is a tendency to connect easily, such a web site address information is frequently stored in the buffer database 20 to prevent unnecessary access to the harmful site blocking service server 30, thereby solving the load problem of the system.

FIG. 5 is a diagram illustrating an embodiment of a procedure in which a client terminal accesses a malicious site blocking service server and updates address information of a buffer database.

Initially, the harmful site blocking service according to the present invention has no address information stored in the buffer database 20. Here, the buffer database 20 updates the address information by storing the search result that the malicious site blocking service server 30 searches for and transmits the harmful site database 40, as described with reference to FIG. Meanwhile, the buffer database 20 may update the address information by the procedure described with reference to FIG. 5 as well as storing the search result received from the malicious site blocking server 30.

Referring to FIG. 5, the address update procedure of the present invention is performed at a certain time point, and this address update time point may be a case of booting the client terminal 10, or may be performed at a predetermined predetermined period.

Here, when the address information update procedure is looked at when booting the client terminal 10, when the user boots the client terminal 10, the client terminal 10 is updated with the updated date of the buffer database 20 ( In the case of the initial service, there is no updated date) and the address information stored in the harmful site database 40 included in the harmful site blocking service server 30 is compared with the updated date. If the updated date of the address information of the c) is later than the updated date of the buffer database 20, the address information update procedure is performed.

By comparing the updated date of the buffer database 20 and the harmful site database 40, when the address information update procedure is started (S501), the number of harmful site address information stored in the harmful site database 40 is specified. It is determined whether the number (eg 5,000 to 10,000) or more (S503). As a result of the determination, when the number of harmful site address information stored in the harmful site database 40 is equal to or more than a certain number, the address information stored in the buffer database 20 is deleted by initializing (S505). This is because the address information stored in the harmful site database 40 is considerably accumulated, so that the buffer database 20 may be deleted to solve the storage capacity and load problem of the harmful site blocking system.

On the other hand, when the number of harmful site address information stored in the harmful site database 40 is less than a certain number, the client terminal 10 receives the address information of the harmful site database 40 from the harmful site blocking service server 30. By receiving and storing in the buffer database 20, an update procedure is performed (S507).

FIG. 6 is a diagram for describing address information stored in the buffer database described with reference to FIG. 5.

Referring to FIG. 6, the address information stored in the buffer database 20 may be configured in a table form as shown in FIG. 6. Where idx represents the serial number of the malicious site and siteenc represents the information of the encrypted web site. Other details are detailed items of whether or not the filtering is performed when the client terminal 10 wants to search for address information in the buffer database 20. Since the filtering process is well known, the detailed description thereof will be omitted. . Such address information is initially stored in the harmful site database 40, and afterwards, the buffer database 20 receives address information from the harmful site database 40 and stores the address information.

1 is a view showing the configuration of a harmful site blocking system for providing a harmful site blocking method according to an embodiment of the present invention,

FIG. 2 is a diagram illustrating an embodiment of a procedure of a harmful site blocking method performed by the configuration of FIG. 1.

3 is a view showing a procedure of a harmful site blocking method when the address information of a web site that a user wants to access and the same address information exist in a buffer database.

4 is a view showing a procedure of a harmful site blocking method when the address information of a web site that a user wants to access and the same address information do not exist in the buffer database.

FIG. 5 is a diagram illustrating an embodiment of a procedure in which a client terminal accesses a malicious site blocking service server and updates address information of a buffer database. FIG.

FIG. 6 is a diagram for describing address information stored in the buffer database described with reference to FIG. 5.

Claims (7)

A harmful site blocking method in a harmful site blocking service server including a client terminal including a buffer database and a harmful site database, Searching, by the client terminal, whether the same address information as the address information of the web site received from the user exists in the buffer database; As a result of the search by the client terminal, the same address information exists in the buffer database, when the address information is the address information of a normal site, the user connects to a desired web site, and the address information is address information of a harmful site. Blocking the user's access in the case; Transmitting, by the client terminal, the address information received from the user to the malicious site blocking service server when the same address information does not exist in the buffer database; Searching, by the harmful site blocking service server, whether address information received from the client terminal exists in the harmful site database, and transmitting the search result to the client terminal; And When the client terminal receives the search result from the harmful site blocking service server, and the same address information exists in the harmful site database according to the received result, and the address information is the address information of the normal site, the user desires. Connecting to a website and blocking access to the user when the address information is address information of a harmful site Including, If the client terminal checks whether the buffer database is updated at a predetermined time point and the buffer database is not updated, the client terminal accesses the harmful site blocking service server and is stored in the harmful site database. If the number of harmful site address information is greater than a certain number, the harmful site address information stored in the buffer database is deleted and initialized. If the number of harmful site address information stored in the harmful site database is less than a specific number, the harmful site is deleted. The address information of the buffer database is updated by receiving the address information of the harmful site database and storing the received address information in the buffer database. How blocking harmful sites. The method of claim 1, When the client terminal receives the search result from the harmful site blocking service server, and the same address information exists in the harmful site database according to the received result, and the address information is the address information of the normal site, the user desires. Connecting to a website, and blocking the user's access when the address information is address information of a harmful site, Storing, by the client terminal, address information included in a search result received from the harmful site blocking service server in a buffer database. Harmful site blocking method further comprising a. delete delete delete The method of claim 1, The address information of the website is A harmful site blocking method comprising the serial number of the harmful site, encrypted site information, and information on whether filtering is applied. In the harmful site blocking system that provides a harmful site blocking method, It includes a buffer database for storing the address information of the normal site and harmful site, and searches the buffer database to determine whether the address information received from the user is a normal site or harmful site, to connect or block the user to the website A client terminal; And A harmful site blocking service server including a harmful site database that stores address information of a harmful site, and searches the harmful site database for the address information received from the client terminal and transmits a search result to the client terminal. Including but not limited to: The client terminal receives a search result from the harmful site blocking service server, and according to the received result, the same address information exists in the harmful site database, and when the address information is address information of a normal site, the user desires a web. Connect with the site, and block the user's access when the address information is that of the harmful site, If the client terminal checks whether the buffer database is updated at a predetermined time point and the buffer database is not updated, the client terminal accesses the harmful site blocking service server and is stored in the harmful site database. If the number of harmful site address information is greater than a certain number, the harmful site address information stored in the buffer database is deleted and initialized. If the number of harmful site address information stored in the harmful site database is less than a specific number, the harmful site is deleted. The address information of the buffer database is updated by receiving the address information of the harmful site database and storing the received address information in the buffer database. Harmful sites are blocked system.

Images