KR101575136B1 - Server and method for managing access to harmful resource of device, and device - Google Patents

Abstract

A harmful resource access management server for managing access to harmful resources includes a management group generation unit for generating a management group including a first terminal and a second terminal having management authority for a second terminal, A policy information providing unit for receiving the policy information including the list of the harmful resources and the identifier of the second terminal, the policy information providing unit for providing the received policy information to the second terminal based on the identifier of the received second terminal, And a notification information receiving unit for receiving from the second terminal a notification message indicating that the terminal attempts to access any one of at least one of the harmful resources.

Description

[0001] The present invention relates to a harmful resource access management server and method for managing access to harmful resources of a terminal,

A malicious resource access management server and method for managing access to harmful resources of a terminal, and a terminal.

Currently, various services such as e-mail, file transfer, information retrieval, chatting, online games, video, and video conference are available through the Internet, and the use of such internet is becoming popular. In addition, through the various services of the Internet, anyone can easily produce and distribute contents, and it becomes easy to share and acquire contents. However, the number of content and harmful services that are as harmful as the variety of services are also varying, and the number thereof is also increasing.

Meanwhile, as smartphones become popular and generalized, a large number of users have used the Internet service using a smart phone, and a large number of applications can be used to conveniently use various services as well as the Internet service. However, applications for smartphones are also increasing in number of applications that are as harmful as the number of applications. Korean Patent Laid-Open Publication No. 2001-0097250 discloses a connection blocking service providing apparatus for a harmful site.

And a management target terminal is managed by grouping at least one terminal having at least one manager authority and a terminal to be managed into one management group. Also, in response to the access to the harmful resource of the managed terminal, the access to the harmful resource of the managed terminal is blocked and the administrator terminal is notified. It is to be understood, however, that the technical scope of the present invention is not limited to the above-described technical problems, and other technical problems may exist.

According to an aspect of the present invention, there is provided a method for managing a second terminal, the method comprising: generating a management group including a first terminal and a second terminal having a management right for a second terminal; Receiving policy information including a list of one or more harmful resources and an identifier of the second terminal, providing the received policy information to the second terminal based on the identifier of the received second terminal, The malicious resource access management server receiving the notification message informing that the malicious resource is attempting to access any one of the above harmful resources from the second terminal.

Also, in an embodiment of the present invention, the first terminal may be a terminal having management authority for the second terminal, and may be configured to create a management group including a first terminal and a second terminal, Receiving the policy information including the resource list, providing the received policy information to the second terminal based on the identifier of the received second terminal, attempting to access any one of the at least one noxious resource by the second terminal The notification message may be received from the second terminal and the received notification message may be provided to the first terminal.

In addition, it generates policy information including a list of harmful resources for the terminal, transmits the generated policy information and the identifier of the terminal, and receives a notification message informing that the terminal accesses at least one of the at least one harmful resource An administrator terminal can be provided.

According to any one of the above-mentioned objects of the present invention, a management group including a first terminal and a second terminal is created, policy information including a harmful resource list received from the first terminal is transmitted to a second A notification message indicating that the second terminal attempts to access the harmful resource in response to an access attempt to any one of the harmful resources by blocking the access to the harmful resource of the second terminal, And provide a server to the terminal. In addition, it is possible to provide more effective management by providing the details of the Internet and application of the second terminal to the first terminal, receiving the changed management policy from the first terminal, and providing the management policy to the second terminal in real time.

1 is a block diagram of a harmful resource access management system according to an embodiment of the present invention.
FIG. 2 is a configuration diagram of the harmful resource access management server shown in FIG. 1 according to an embodiment of the present invention.
FIG. 3 is a flowchart illustrating a process of transmitting and receiving data of each member shown in FIG. 1 according to an embodiment of the present invention.
FIG. 4 is a configuration diagram of any one terminal shown in FIG. 1 according to an embodiment of the present invention.
5 is a flowchart illustrating a process of transmitting and receiving data between terminals according to another embodiment of the present invention.
FIG. 6 is a flowchart illustrating a harmful resource access management method according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "comprising ", it means that it can include other elements as well, without departing from the other elements unless specifically stated otherwise.

1 is a block diagram of a harmful resource access management system according to an embodiment of the present invention. 1, a harmful resource access management system includes a harmful resource access management server 10 and a harmful resource access management server 10, a first terminal 31 and a second terminal 31 in a management group connected to the network 20, 2 < / RTI >

The network 20 refers to a connection structure in which information can be exchanged between nodes such as terminals and servers. The network 20 includes a network such as the Internet, a LAN (Local Area Network), a Wireless LAN (Wireless Local Area Network) (Wide Area Network), a PAN (Personal Area Network), a mobile communication network, and the like.

The plurality of terminals 300 including the first terminal 31 and the second terminal 32 may be implemented as a portable terminal capable of connecting to a remote server through a network. Here, the portable terminal is a mobile communication device with guaranteed portability and mobility. For example, the portable terminal may be a personal communication system (PCS), a global system for mobile communication (GSM), a personal digital cellular (PDC) PDA (Personal Digital Assistant), IMT (International Mobile Telecommunication) -2000, CDMA (Code Division Multiple Access) -2000, W-CDMA (W-CDMA), Wibro (Wireless Broadband Internet) ), And the like, for example.

In addition, the plurality of terminals 300 may include devices connected through a network such as an IPTV set-top box, a PC, and the like. However, since the terminal illustrated in FIG. 1 is merely an example for convenience of explanation, the terminal of the present invention is not limited to those shown in FIG.

The harmful resource access management server 10 can create a management group including the first terminal 31 and the second terminal 32 having the administrator authority. There may be a plurality of first terminals 31 and a plurality of second terminals 32 in the management group. For example, the harmful resource access management server 10 may create a smartphone of a parent user and a smartphone of a child user as a management group.

The harmful resource access management server 10 may receive the policy information including the at least one harmful resource list and the identifier of the second terminal 32 from the first terminal 31. At this time, the harmful resource list may be a harmful website selected by the first terminal 31 and a harmful application. For example, the harmful resource access management server 10 may receive a list of harmful websites or harmful applications selected by the smartphone of the parent user and an identifier indicating the smartphone of the child user.

The harmful resource access management server 10 manages the second terminal 32 based on the received policy information and transmits the received policy information to the second terminal 32 based on the identifier of the received second terminal 32, As shown in FIG. For example, the harmful resource access management server 10 manages the smartphone of the child user based on the policy information received from the smartphone of the parent user, and transmits policy information to the child user based on the identifier of the received child user It can be provided to a smart phone.

The harmful resource access management server 10 may block access to harmful resources in response to an access attempt to any one of the harmful resources by the second terminal 32. [ To this end, the harmful resource access management server 10 may receive a notification message from the second terminal 32 informing that the access to the harmful resource is attempted. For example, the harmful resource access management server 10 may block the harmful resource access in response to the smartphone of the child user accessing the harmful resource based on the policy information, and the user of the child may access the harmful resource From a child ' s smartphone. ≪ / RTI >

The operation of such a harmful resource access management server 10 will be described in detail below.

FIG. 2 is a configuration diagram of the harmful resource access management server shown in FIG. 1 according to an embodiment of the present invention. 2, the harmful resource access management server 10 includes a management group generating unit 11, a policy information receiving unit 12, a policy information providing unit 13, a notification information receiving unit 14, 15), and a usage history recording unit (16). However, the harmful resource access management server 10 shown in FIG. 2 is only an embodiment of the present invention, and various modifications can be made based on the components shown in FIG. 2. In the technical field The present invention can be understood by those skilled in the art.

The management group generating unit 11 may generate a management group including the first terminal 31 and the second terminal 32 having the management authority for the second terminal 32. [ The management group may include at least one first terminal 31 and at least one second terminal 32. The management group generating unit 11 may include at least one of the first terminals 31, 1 terminal 31 to generate a management group in response to a request signal for requesting generation of a management group.

For example, the first terminal 31 may be a mobile terminal of a parent user having management rights for a child's mobile terminal, and the second terminal 32 may be a mobile terminal of a child user. The management group generating unit 11 may generate a management group from the smartphone of the parent user in response to the request signal for requesting the generation of the management group including the smartphone of the child user. The created management group may include a mobile terminal of each of the parent user and a mobile terminal of the child user. In other words, a management group may include a plurality of parent mobile user terminals and a plurality of child user mobile terminals.

The policy information receiving unit 12 may receive the policy information including the list of at least one or more harmful resources and the identifier of the second terminal 32 from the first terminal 31. [ The policy information may include a list of harmful websites selected by the first terminal 31 and information on the connection of the second terminal 32 to the Internet website, A list of applications and an application use interruption time information of the second terminal 32. In addition, the policy information receiver 12 may receive the identifier of the first terminal 31 from the first terminal 31.

Toxic resources can be, for example, harmful websites and harmful applications, and more specifically include Internet websites and applications that can have adverse effects related to pornography, illegal advertising, drugs, suicide, etc., And may include web sites and applications that are addictive, such as online games, smartphone games, and the like. The policy information includes list information of web sites and applications judged to be harmful and selected by the first terminal 31, information on the internet website connection blocking time of the second terminal 32, and information on application use blocking time And the policy information may be generated differently for each of the plurality of second terminals 32. [ Meanwhile, the identifier may include Media Access Control (MAC) address information and Universally Unique Identifier (UUID) information as information for identifying the second terminal 32.

The policy information receiving unit 12 may also receive modified policy information including a list of at least one or more changed noxious resources from the first terminal 31. [ For example, the policy information receiving unit 12 may receive modified policy information including a deletion resource list and a blocking time information to which an online game site is added, in contrast to policy information previously received from a mobile terminal of a parent user.

The policy information providing unit 13 may provide the received policy information to the second terminal 32 based on the identifier of the received second terminal 32. [ The policy information may be policy information generated for the plurality of second terminals 32, respectively. The changed policy information may be provided to the second terminal 32 based on the identifier of the second terminal 32. For example, the policy information received from the mobile terminal of the parent user may be pushed in real time and applied to the mobile terminal of the child user, and the changed policy information may also be pushed in real time and applied to the mobile terminal of the child user.

In addition, the policy information providing unit 13 may block the harmful resource access in response to the harmful resource access attempt of the second terminal 32 based on the received policy information. For example, when an attempt is made to access the Internet through a mobile terminal of a child user, the mobile terminal identifies the terminal through the mobile terminal identifier of the child user, and if the connection blocking time of the Internet web site is based on the policy information, If the site to be accessed by the child user's mobile terminal is a harmful site, the connection can be blocked even when the time is not the blocking time.

The notification information receiving unit 14 may receive from the second terminal 32 a notification message informing that the second terminal 32 attempts to access any one of at least one of the harmful resources. In other words, the notification information receiving unit 14 can receive from the second terminal 32 a notification message about a malicious resource access attempt of the second terminal 32. For example, when an attempt is made to access an adult site through a mobile terminal of a child user, the notification information receiver 14 may receive a notification message from the mobile terminal of the child user indicating that an attempt is made to access the adult site.

The notification message providing unit 15 may provide the received notification message to the first terminal 31. [ For example, the notification message providing unit 15 may provide a notification message to the mobile terminal of the parent user informing that the child has attempted to access the adult site through the mobile terminal of the child user received from the mobile terminal of the child user, It can be notified that an attempt is made to access the adult site through the mobile terminal. The notification message can be pushed to the mobile terminal of the parent user in real time.

The usage history recording unit 16 can record the harmful resource access history of the second terminal 32, the internet website access history, and the application usage history. Also, the notification message providing unit 15 may provide at least one usage history to the first terminal 31 based on the usage history recorded in the usage history recording unit 16. [ For example, the usage history recording unit 16 can record the use history of the harmful site access record of the child user, the connectable web site access record, the harmful application usage record, and the usage history of the usable application, The studying unit 15 may provide at least one of various usage details to the mobile terminal of the parent user.

When an application is installed in the first terminal 31 and the second terminal 32 according to an embodiment of the present invention, the policy information receiver 12 receives the policy information from the first application installed in the first terminal 31, The policy information providing unit 13 provides the policy information received by the second application installed in the second terminal 32 and the notification information receiving unit 14 receives the policy information from the second application 32, Lt; / RTI > For example, from the application of the mobile terminal of the parent user, the policy information and the identifier to be applied to the mobile terminal of the child user can be received and the received policy information can be provided to the application of the mobile terminal of the child user. At this time, the policy information may include harmful web sites, harmful application list information, internet web site access blocking time information, and application use blocking time information, and different policy information may be provided to each mobile user terminal. Thereafter, when accessing the harmful resources through the mobile terminal of the child user, the notification information receiver 14 can receive the notification message from the application of the child user mobile terminal.

FIG. 3 is a flowchart illustrating a process of transmitting and receiving data of each member shown in FIG. 1 according to an embodiment of the present invention. 3, the harmful resource access management server 10 receives from the first terminal 31 a management group creation request signal for requesting generation of a management group including the first terminal 31 and the second terminal 32, (S301), and creates a management group including the first terminal 31 and the second terminal 32 (S302) in response thereto. After the management group is created, the harmful resource access management server 10 receives the policy information for the second terminal 32 from the first terminal 31 (S303) and transmits the received policy information to the second terminal 32 (S304). When the second terminal 32 accesses the noxious resource (S305), the noxious resource access management server 10 receives a notification message that the noxious resource has been accessed from the second terminal 32 (S306) And provides a notification message to the first terminal 31. Then, the harmful resource access management server 10 records the use history of the second terminal 32 (S308) and provides the recorded usage history to the first terminal 31, and the first terminal 31 The harmful resource access management server 10 receives the changed policy information from the first terminal 31 in step S310 and provides the changed policy information to the second terminal 32 And reflects it in real time.

However, the embodiment shown in FIG. 3 is only an embodiment of the present invention, and should not be construed as being limited thereto.

FIG. 4 is a configuration diagram of any one terminal shown in FIG. 1 according to an embodiment of the present invention. The terminal shown in FIG. 4 performs an operation through data transmission / reception with the harmful resource access management server 10 shown in FIG. Therefore, the contents described above with respect to the deleterious resource access management server 10 shown in FIG. 1 apply to the operation of the terminal shown in FIG. In other words, matters not described for the terminal shown in FIG. 4 can be easily deduced by those skilled in the art from the same or described contents of the terminal having the administrator authority through FIG. 1 to FIG. 2, do.

Referring to FIG. 4, any one of the terminals includes a policy information generation unit 311, a policy information transmission unit 312, and a notification message reception unit 313, which are terminals having administrator authority over a target terminal.

The policy information generation unit 311 can generate policy information including a list of harmful resources for the terminal. In addition, the policy information generation unit 311 may generate modified policy information including a list of at least one or more changed noxious resources from the generated policy information.

The policy information transmitting unit 312 may transmit the generated policy information and the identifier of the terminal. The policy information transmitting unit 312 may transmit the generated policy information and the terminal identifier to the harmful resource access management server 10 and may transmit the policy information to the terminal based on the identifier of the terminal. When a predetermined application is used, policy information generated based on the identifier of the terminal can be transmitted to a predetermined application of the terminal.

The notification message receiving unit 313 may receive a notification message informing that the terminal is approaching one of at least one or more harmful resources. In addition, the notification message receiving unit 313 can receive the notification message from the harmful resource access management server 10 and receive the notification message from the terminal. When a predetermined application is used, a notification message can be received from a predetermined application of the terminal.

The notification message receiving unit 313 can receive at least one usage history of the harmful resource access history of the terminal, the Internet web site access history, and the application usage history from the harmful resource access management server 10, And at least one usage history of the usage history including the resource access history.

5 is a flowchart illustrating a process of transmitting and receiving data between terminals according to another embodiment of the present invention. 5, the terminal 31 having the administrator authority transmits the generated policy information to the terminal 32 (S501). Thereafter, when the terminal 32 accesses the noxious resource (S502) The terminal 31 receives a notification message from the terminal 32 indicating that the terminal 32 has accessed the harmful resource based on the policy information provided to the terminal 32 in step S503. The administrator terminal 31 receives the usage details from the terminal 32 (S505) based on the usage history recording (S504) of the terminal 32. [

In this way, according to another embodiment of the present invention, the terminal 31 transmits the policy information directly to the terminal 32 without using the harmful resource access management server 10, . The operation or function of the harmful resource access management server 10 described above may be performed directly by the terminal 31 or the terminal 32 or may be performed by the terminal 31 or the terminal 32 May be performed by hardware or software.

FIG. 6 is a flowchart illustrating a harmful resource access management method according to an embodiment of the present invention. The harmful resource access management method according to the embodiment shown in FIG. 6 includes the steps of time-series processing in the harmful resource access management server 10 shown in FIG. Therefore, the contents described above with respect to the harmful resource access management server 10 shown in FIG. 2 are also applied to the harmful resource access management method shown in FIG.

Referring to FIG. 6, a harmful resource access management method for managing access to harmful resources includes creating a management group including a first terminal 31 and a second terminal 32 (S601) (S602), and receives an identifier for the second terminal (32) from the first terminal (S603). Then, the second terminal 32 provides the received policy information to the second terminal 32 based on the identifier of the received second terminal 32 (S604), and transmits the policy information to any one of the at least one noxious resource From the second terminal 32 (S605), and provides the received notification message to the first terminal 31 (S606).

The method of managing a harmful resource access in the embodiment described with reference to FIG. 6 may also be implemented in the form of a recording medium including instructions executable by a computer, such as a program module executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer-readable medium may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes any information delivery media, including computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism.

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be interpreted as being included in the scope of the present invention .

10: Hazardous resource access management server
11: Management group creation unit
13: Policy Information Offering
31:
32:

Claims (19)

A harmful resource access management server for managing access to harmful resources,
A management group generation unit for generating a management group including a first terminal having the management authority for the second terminal and the second terminal;
A policy information receiver for receiving policy information including a list of at least one or more harmful resources from the first terminal and an identifier of the second terminal;
A policy information provider for pushing the received policy information to the second terminal in real time based on the received identifier of the second terminal; And
And an announcement information receiver for receiving from the second terminal a notification message informing that the second terminal attempts to access any one of the at least one harmful resource,
Wherein the management group generation unit generates a management group including at least one of the first terminal and at least one second terminal,
Wherein the first terminal and the second terminal are mobile terminals,
Wherein the policy information receiver receives the policy information and the identifier of the second terminal from a first application installed in the first terminal,
The policy information providing unit may push the received policy information to a second application installed in the second terminal,
Wherein the notification information receiving unit receives the notification message from the second application,
Wherein the policy information is generated differently for each of the at least one second terminal,
Wherein the policy information providing unit pushes different policy information to each of the second terminals in real time.
The method according to claim 1,
And a notification message providing unit for providing the received notification message to the first terminal.
The method according to claim 1,
Wherein the policy information includes a list of harmful websites selected by the first terminal and information on a connection blocking time of the second terminal's Internet web site.
The method according to claim 1,
Wherein the policy information includes a list of harmful applications selected by the first terminal and application shutdown time information of the second terminal.
The method according to claim 1,
Wherein the identifier includes MAC (Media Access Control) address information, and UUID (Universally Unique Identifier) information.
delete 3. The method of claim 2,
Further comprising a usage history recording unit for recording the harmful resource access history of the second terminal, the internet website access history, and the application usage history,
Wherein the notification message providing unit provides at least one usage history to the first terminal based on the recorded usage history of the usage history recording unit.
The method according to claim 1,
Wherein the policy information receiving unit receives an identifier of the second terminal from the first terminal.
The method according to claim 1,
Wherein the policy information receiving unit receives modified policy information including a list of at least one or more changed noxious resources from the first terminal,
Wherein the policy information providing unit provides the received changed policy information to the second terminal based on the identifier of the received second terminal.
delete The method according to claim 1,
Wherein the management group generation unit generates the management group in response to a request signal received from any one of the at least one first terminals.
In a hazardous resource access management method for managing access to a harmful resource,
Creating a management group including a first terminal and a second terminal;
Receiving policy information including a list of at least one or more harmful resources from the first terminal;
Receiving an identifier for the second terminal from the first terminal;
Pushing the received policy information to the second terminal in real time based on the received identifier of the second terminal;
Receiving from the second terminal a notification message indicating that the second terminal attempts to access any one of the at least one or more harmful resources; And
Providing the received notification message to the first terminal,
Wherein the first terminal has management authority for the second terminal,
Wherein the generating of the management group comprises: generating a management group including at least one of the first terminal and the at least one second terminal,
Wherein the first terminal and the second terminal are mobile terminals,
The step of receiving the identifier for the second terminal may include receiving the policy information and the identifier of the second terminal from a first application installed in the first terminal,
Pushing the received policy information to the second terminal in real time may push the received policy information to a second application installed in the second terminal,
Receiving the notification message from the second terminal comprises receiving the notification message from the second application,
Wherein the policy information is generated differently for each of the at least one second terminal,
Wherein pushing the received policy information in real time to the second terminal pushes different policy information to each of the second terminals in real time.
13. The method of claim 12,
Wherein the step of providing the received notification message to the first terminal comprises:
Recording the harmful resource access history of the second terminal, the internet website access history, and the application usage history;
And providing at least one usage history to the first terminal based on the recorded usage history.
delete delete delete delete delete delete

Images