KR102407637B1 - Apparatus for advertising interception and control method thereof - Google Patents

Abstract

The present invention can block unnecessary advertisements from being received to the terminal by determining whether to block the advertisements linked in the content and received to the terminal by tracking the DNS query for data service use of the terminal and the DNS response accordingly. An advertisement blocking device and its operation method are proposed.

Description

ADVERTISING INTERCEPTION AND CONTROL METHOD THEREOF

The present invention relates to a method for determining whether to block an advertisement that is linked in content and received to a terminal by tracking a DNS query for use of a data service of a terminal and a DNS response corresponding thereto.

Recently, a terminal such as a smart pad, a tablet PC, or a smart phone can use a data service through an existing 3G communication system or a Long Term Evolution (LTE) communication system.

The above data service may be understood as, for example, a video streaming service, a portal service, and the like, so that the terminal can receive various contents according to the use of the data service from each content server that provides these data services.

On the other hand, as these data services are popularized, the advertising market is also expanding at a fast pace. Accordingly, in the content server, according to its own advertising policy, the linked advertisement is displayed in the terminal receiving the content by linking the advertisement in the content for a certain period of time. It is being processed so that it can be exposed.

However, in the case of advertisements inserted into the content, it is common to be exposed to the terminal regardless of the intention of the terminal subscriber. In particular, when the advertisement linked in the content is in the form of a video or image, the portion of the advertisement in the total traffic increases, There is a problem in that the terminal's data service use is restricted or slowed down.

The present invention was created in view of the above circumstances, and the purpose of the present invention is to track the DNS query and DNS response according to the data service use of the terminal, and link within the content to the advertisement received by the terminal. It is up to you to decide whether to block.

In order to achieve the above object, in an advertisement blocking apparatus according to an embodiment of the present invention, when a DNS query for an advertisement domain is received from a terminal, the domain from which the DNS query is received from the terminal in relation to the DNS query for the advertisement domain a selection unit for grouping and selecting domain groups; a determining unit for determining whether a domain pattern of the domain group corresponds to an advertisement blocking domain pattern based on a domain type previously defined in relation to whether advertisements are blocked for each domain in the domain group; and a processing unit configured to block the terminal from receiving an advertisement from the advertisement domain when it is determined that the domain pattern corresponds to the advertisement blocking domain pattern.

More specifically, the selector is configured to group and group DNS log pairs whose time interval with a neighboring DNS log pair is within a threshold based on a DNS log pair that is a pair of a DNS query and a DNS response of a domain including the advertisement domain. It is characterized in that each domain in the DNS log pair is selected as the domain group.

More specifically, the domain type includes a blocking type in which advertisements must be blocked and an unblocking type in which advertisements are allowed, and the determining unit includes: the number of domains defined as the blocking type in the domain group; The domain group is determined based on at least one of a ratio of domains defined as the blocked type to the domains defined as the unblocked type in the domain group, and whether a main domain in the domain group is defined as the blocked type. It is characterized in that it is determined whether the domain pattern corresponds to the ad blocking domain pattern.

More specifically, when there is a predefined advertisement blocking domain pattern, the determining unit compares the predefined advertisement blocking domain pattern with the domain pattern of the domain group so that the domain pattern of the domain group is the predefined domain pattern. If it is the same as at least a part of the advertisement blocking domain pattern, it is characterized in that it is determined that the domain pattern of the domain group corresponds to the advertisement blocking domain pattern.

More specifically, the processing unit blocks the terminal from receiving advertisements from the advertisement domain by replying to the local loopback address of the terminal as a DNS response according to the DNS query for the advertisement domain or by replying an address of another domain. It is characterized in that it becomes possible.

In order to achieve the above object, there is provided a method of operating an advertisement blocking device according to an embodiment of the present invention, comprising: confirming that a DNS query for an advertisement domain is received from a terminal; a selection step of grouping domains from which a DNS query is received from the terminal in relation to the DNS query for the advertisement domain and selecting a domain group; a determining step of determining whether a domain pattern of the domain group corresponds to an advertisement blocking domain pattern based on a domain type previously defined in relation to whether advertisements are blocked for each domain in the domain group; and when it is determined that the domain pattern corresponds to the advertisement blocking domain pattern, a processing step of processing to block the terminal from receiving an advertisement from the advertisement domain.

More specifically, in the selecting step, based on a DNS log pair that is a pair of a DNS query and a DNS response of a domain including the advertisement domain, a DNS log pair having a time interval with a neighboring DNS log pair within a threshold is grouped, It is characterized in that each domain in the grouped DNS log pair is selected as the domain group.

More specifically, the domain type includes a blocking type in which advertisements must be blocked and an unblocking type in which advertisements are allowed, and the determining step includes: the number of domains defined as the blocking type in the domain group; The domain group based on at least one of a ratio of domains defined as the blocked type to the domains defined as the unblocked type in the domain group, and whether a main domain in the domain group is defined as the blocked type. This branch is characterized in that it is determined whether the domain pattern corresponds to the advertisement blocking domain pattern.

More specifically, in the determining step, when a predefined ad blocking domain pattern exists, the predefined ad blocking domain pattern is compared with the domain pattern of the domain group so that the domain pattern of the domain group is the predefined If it is the same as at least a part of the advertisement blocking domain pattern, it is characterized in that it is determined that the domain pattern of the domain group corresponds to the advertisement blocking domain pattern.

More specifically, the processing step may include returning the local loopback address of the terminal as a DNS response according to the DNS query for the advertising domain, or replying an address of another domain so that the terminal receives an advertisement from the advertising domain It is characterized in that it is blocked.

Accordingly, according to the apparatus for blocking advertisements of the present invention and the method of operation thereof, by determining whether to block advertisements linked in the content and received to the terminal by tracking the DNS query for data service use of the terminal and the DNS response corresponding thereto , it is possible to block unnecessary advertisements from being received to the terminal, so that subscriber satisfaction with the data service can be improved.

1 is an exemplary diagram illustrating a data service environment according to an embodiment of the present invention;
2 is a view for explaining the configuration of an advertisement blocking device according to an embodiment of the present invention.
3 is an exemplary diagram for explaining a type of a DNS query and a DNS response according thereto according to an embodiment of the present invention;
4 and 5 are exemplary views for explaining a DNS log according to an embodiment of the present invention.
6 is an exemplary diagram for explaining a time interval between DNS log pairs according to an embodiment of the present invention.
7 is an exemplary diagram illustrating a result of selecting a domain group based on a time interval between DNS log pairs in a graph according to an embodiment of the present invention.
8 is an exemplary diagram for explaining a domain type defined for a domain according to an embodiment of the present invention.
9 is an exemplary diagram for explaining an example of a method for determining whether a domain pattern corresponds to an advertisement blocking domain pattern according to an embodiment of the present invention;
10 is a view for explaining an operation flow in the advertisement blocking device according to an embodiment of the present invention.

Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings.

1 is an exemplary diagram illustrating a data service environment according to an embodiment of the present invention.

As shown in FIG. 1 , the data service environment according to an embodiment of the present invention includes a terminal 10 that receives content from a domain that provides a data service through a network 1 , and a content within the content. It may have a configuration including the advertisement blocking device 20 for determining whether to block the linked advertisement.

The terminal 10 refers to a mobile device that uses a data service, and may include, for example, a smart pad, a tablet PC, a smart phone, etc. All of these possible devices can be included.

The advertisement blocking device 20 refers to a server for blocking a linked advertisement in the content received by the terminal 10, and tracks a DNS query for using the data service of the terminal 10 and a DNS response accordingly. You can decide whether to block ads or not.

The advertisement blocking device 20 may be understood as, for example, a Domain Name System (DNS) server that returns an access address (eg, IP) to a domain DNS query from the terminal 10 .

For reference, the network 1 refers to a series of communication networks through which traffic is transmitted and processed according to the data service use of the terminal 10, for example, a base station device (eNodeB), a mobility management entity (MME), It may be composed of a serving gateway device (SGW, Serving Gateway), a packet gateway device (PGW, Packet Data Network Gateway), a policy management device (PCRF, Policy Control and Charging Rules Function), and a subscription information management device.

On the other hand, in the data service environment according to an embodiment of the present invention, advertisements linked in the content and received to the terminal 10 are blocked through the above-described configuration.

Here, the linked advertisement in the content may be, for example, HTML, a video, an image, or another domain (eg, an advertiser domain) linked to the content.

In the existing advertisement blocking method, by analyzing traffic transmitted and received with the terminal 10, it is determined in which domain the terminal 10 requests a data service, what content is being viewed, and whether the content is an advertisement. By doing so, there is a packet analysis method (DPI, Deep Packet Inspection) that blocks advertisements that the terminal 10 receives.

This packet analysis method analyzes all packets actually transmitted and received in relation to the terminal 10 and deletes domain information or advertisement information in specific content in the packet. Inevitably, such excessive time consumption causes a bottleneck, impeding smooth traffic flow.

Moreover, in recent data services, the use of encrypted traffic has become common, and when the traffic is encrypted as such, it is impossible to analyze the encrypted packet, so there is also a limitation in that it is impossible to block advertisements through the aforementioned packet analysis method. .

Accordingly, in one embodiment of the present invention, in order to solve the above problem, we propose a new method that can block advertisements linked in the content only by tracking the DNS query from the terminal 10 and the DNS response accordingly. Hereinafter, the configuration of the advertisement blocking device 20 for this will be described in detail.

2 shows a schematic configuration of an advertisement blocking device 20 according to an embodiment of the present invention.

As shown in FIG. 2 , the advertisement blocking device 20 according to an embodiment of the present invention includes a verification unit 21 that checks a DNS query received from the terminal 10 and a DNS response corresponding thereto, the terminal 10 . A selection unit 22 for selecting a domain group grouping domains from which a DNS query is received, a determination unit 23 for determining whether a domain pattern of the domain group corresponds to an advertisement blocking domain pattern, and a terminal 10 It may have a configuration including the processing unit 24 for blocking the reception of advertisements.

The entire configuration or at least a part of the advertisement blocking device 20 including the above checking unit 21, selection unit 22, determining unit 23, and processing unit 24 is implemented in the form of a software module or a hardware module. Alternatively, the software module and the hardware module may be implemented in a combined form.

Here, the software module may be understood as, for example, a command executed by a processor that performs an operation in the advertisement blocking device 20 , and these commands may have a form mounted in a memory in the advertisement blocking device 20 . There will be.

As a result, the advertisement blocking device 20 according to an embodiment of the present invention can block the linked advertisement in the content received by the terminal 10 through the above configurations. Hereinafter, the advertisement blocking device 20 for this purpose Each configuration will be described in more detail.

On the other hand, prior to the detailed description, the advertisement blocking device 20, for example, by linking with the subscriber information management device and the policy management device constituting the network network (1), for specific subscriber classification, for each service, for each terminal, for each purpose, Control by domain is possible, and according to a predefined advertisement blocking policy, for example, when a specific subscriber uses a data service of a specific domain through a specific terminal at a specific time and location, specific advertisements are displayed according to a specific service (eg, plan). It is assumed that blocking is possible.

The verification unit 210 performs a function of verifying a DNS query received from the terminal 10 .

More specifically, the verification unit 210 checks a DNS query for a domain received from the terminal 10 and a corresponding DNS response in order to receive the content and receive the advertisement linked in the content.

In this case, in the case of a DNS query received from the terminal 10, as shown in FIG. 3 , a DNS query for a main domain, a DNS query for a subdomain related to the main domain, a DNS query for an advertisement domain, and an advertisement domain It can be divided into DNS queries for related subdomains.

Here, the main domain refers to the domain of the content provider to which the terminal 10 initially accessed to use the data service, and the sub-domain related to the main domain renders content received according to the access of the main domain (eg, HTML). It refers to the domain connected for parsing, DOM/Javascript loading).

In addition, the advertisement domain refers to a domain of an advertisement linked to the content, and similarly, the sub-domain related to the advertisement domain refers to a domain to which the terminal 10 must access in order to render an advertisement (advertisement resource).

For reference, FIG. 4 shows an example of a DNS log that is checked when the terminal 10 accesses a main domain corresponding to, for example, 'www.xxxx.com' to use a data service.

As shown in FIG. 4 , the terminal 10 receives a DNS response following a DNS query for 'www.xxxx.com' in order to access the main domain (www.xxxx.com) (A) , after DNS query for sub domains (nxlog.xxxx.com, nps. xxxx.com, image.xxxx.com, etc.) for content rendering according to main domain access, DNS responses are received (B~F) ). Next, the terminal 10 receives, for example, a DNS response (IP address of the advertisement domain) after a DNS query (G) for an advertisement domain (www.ad.com) in order to receive an advertisement linked to a video. After that, it can be confirmed that a DNS response is received after a DNS query for a subdomain to render an advertisement.

In addition, FIG. 5 shows an example of a DNS log that is checked when the terminal 10 accesses a main domain corresponding to, for example, 'www.yyyy.com' to use a data service.

Here, it is assumed that an advertisement of the same advertisement domain (www.ad.com) as in FIG. 4 is linked to content provided from the main domain (www.yyyy.com).

5, the terminal 10 receives a DNS response after a DNS query for 'www.yyyy.com' in order to access the main domain (www.yyyy.com) (H), In order to render content according to access to the main domain, a DNS response is received after a DNS query for a sub-domain is made. Thereafter, the terminal 10 receives, for example, a DNS response after (X) a DNS query for an advertisement domain (www.ad.com) in order to receive an advertisement linked to a video according to a selection for viewing a video, etc. can be verified.

The selection unit 22 performs a function of selecting a domain group.

More specifically, when it is confirmed that a DNS query for an advertisement domain is received from the terminal 10 ('G' in FIG. 4 , 'X' in FIG. 5 ), the selector 22 queries the advertisement domain for DNS Domains for which a DNS query has been received from the terminal 10 before the time of receiving are grouped and selected as a domain group.

At this time, the selector 22 sets a specific DNS log in which a time interval with a neighboring DNS log pair is equal to or greater than a threshold among DNS log pairs that are a pair of a domain DNS query and a DNS response corresponding to the DNS query for the advertisement domain before the time when the DNS query is received. When a pair exists, each domain to which a DNS query is received during a time from the time a DNS query for an advertisement domain is received to the specific DNS log pair may be selected as a domain group.

Here, each domain selected as a domain group may include a main domain, subdomains thereof, and advertisement domains, and among them, one or more main domains may basically exist in the domain group.

6 shows an example of a time interval (Gap Time) between DNS log pairs in the previous example with reference to FIGS. 4 and 5 .

Here, if it is assumed that the threshold of the time interval between pairs of DNS responses for selecting a domain group is '18.0s', domains A to G, whose time interval between pairs of DNS responses is within the threshold, is one domain group (Group 1), and domains H to X may be selected as another domain group (Group 2).

As such, in the case of the range of the threshold value (g) of the time interval, which is the criterion for the selection of the domain group, 'min_time < g < max_time', if the 'min_time' value is greater than 0, each DNS log pair is aberration (Sequential), and conversely, if the 'min_time' value is less than 0, it may include a meaning that each DNS log pair is parallel. Meanwhile, 'max_time' means the maximum value that can select a domain group.

For reference, FIG. 7 shows as a graph the results of domain group selection based on the time interval between DNS log pairs.

Here, the number of domain groups may vary depending on the time interval between DNS log pairs, and the smaller the number of domain groups (the larger the time interval between DNS log pairs), the greater the number of domains in the domain group. Conversely, as the number of domain groups increases (the shorter the time interval between DNS log pairs), it can be inferred that fewer domains belong to the domain group.

The correlation between the time interval between the DNS log pairs and the number of domains belonging to the domain group may be an operation/policy-related parameter in the advertisement blocking device 20, and thus the time interval between the DNS log pairs is the result of the advertisement blocking. In order to increase accuracy, it may be determined with various setting values according to operation/policy.

The determining unit 23 performs a function of determining whether the domain pattern corresponds to the advertisement blocking domain pattern.

More specifically, when the selection of the domain group for the DNS query of the advertising domain received from the terminal 10 is completed, the determination unit 23 determines the corresponding domain type based on a domain type previously defined for each domain in the domain group. It is determined whether the domain pattern of the domain group corresponds to the ad blocking domain pattern.

Here, the domain type predefined for each domain in the domain group is related to whether advertisements are blocked, and may be defined, for example, as shown in FIG. 8 .

As shown in FIG. 8 , domain type '0' is defined as a domain that is not related to whether or not advertisements are blocked, domain type '1' is an advertisement non-blocking target domain, and conversely, domain type (Type) '2' may be defined as an advertisement blocking target domain and a domain type '3' advertisement domain itself.

Accordingly, if all domains in the domain group are defined as blocking type (Type 2), the determining unit 23 may determine that the domain pattern of the domain group is an advertisement blocking domain pattern, and conversely, all domains in the domain group If it is defined as the non-blocking type (Type 1), it can be determined that the domain pattern of the domain group corresponds to the advertisement allowed domain pattern.

However, when the main domain in the domain group is defined as a blocking type (Type 2) while at least some of the remaining domain groups are defined as an unblocked type (Type 1), or the main domain in the domain group is defined as an unblocked type (Type 1) ), while at least some of the remaining domain groups are defined as a blocking type (Type 2).

In this case, the determining unit 23, for example, the number of domains defined as the blocking type (Type 2) in the domain group, and the blocking type (Type 2) compared to the domains defined as the non-blocking type (Type 1) in the domain group It can be determined whether the domain pattern of the domain group corresponds to the ad blocking domain pattern based on at least one of the proportion of domains defined as have.

For example, while the main domains in the domain group are defined as non-blocking type (Type 1), the number of domains defined as blocking type (Type 2) among the remaining domain groups is greater than or equal to the threshold (select_threshold), or unblocked in the domain group. If the ratio of the domain defined as the blocking type (Type 2) to the domain defined as the blocking type (Type 1) is greater than or equal to the threshold (pattern_threshold), even though the main domain is defined as the non-blocking type (Type 1) Even so, it can be determined that the domain pattern of the selected domain group corresponds to the advertisement blocking domain pattern.

Conversely, while the main domain in the domain group is defined as a blocking type (Type 2), the number of domains defined as an unblocked type (Type 1) among the remaining domain groups (select_threshold) is greater than or equal to a threshold, or a blocking type ( When the ratio of domains defined as non-blocking type (Type 1) to domains defined as Type 2) is greater than or equal to a threshold (pattern_threshold), even if the main domain is defined as blocking type (Type 2), selection is made It may be determined that the domain pattern of the selected domain group corresponds to the advertisement allowed domain pattern.

Here, it goes without saying that the thresholds (select_threshold, pattern_threshold), which are the criteria for determining whether or not the advertisement blocking domain pattern is applicable, may be determined as various setting values according to operation/policy in order to increase the accuracy of the advertisement blocking result.

On the other hand, the determination of whether the domain pattern of the domain group corresponds to the advertisement blocking domain pattern can also be made through a method of comparing the predefined advertisement blocking domain pattern (or advertisement allowed domain pattern) with the domain pattern of the domain group. can

For convenience of explanation, it is assumed that the predefined ad blocking domain pattern consists of only domains of the blocking type (Type 2), and on the contrary, in the case of the ad allowed domain pattern, it is assumed that only domains of the non-blocking type (Type 1) are formed.

9 shows an example of a method of comparing a predefined ad blocking domain pattern (or ad permitted domain pattern) with a domain pattern of a domain group.

In FIG. 9 (a), with respect to the example (A: main domain-www.xxxx.com) with reference to FIG. 4 above, the domain "F, E, D, C, B, A" for the advertisement domain 'G' is It shows a case defined as an advertisement allowed domain pattern (Group 1), and on the contrary, in FIG. 9 (b), the advertisement domain 'X' in relation to the example (H: main domain-www.yyyy.com) with reference to FIG. 5 above Domain "W,V,U,T,S,R,Q,P,O,N,M,L,K,J,I,H" represents the case where the ad blocking domain pattern (Group 2) is defined, In addition, in FIG. 9(c) , with respect to the advertisement domain 'X', in relation to the example with reference to FIG. 5, the domain "W,V,U,H" is defined as the advertisement blocking domain pattern (Group 3).

First, when the domain pattern of the domain group selected in FIG. 9 (a) is “F,E,D,C,A”, the predefined advertisement allowed domain pattern “F,E,D,C,B,A” "Compared to ", all other domain patterns except for domain 'B' match, so it can be determined that the corresponding domain pattern is an advertisement-allowed domain pattern. Similarly, the domain pattern of the selected domain group is "F, E" In the case of , compared with "F,E,D,C,B,A", which is a predefined ad allowed domain pattern, the remaining domain patterns except for the domain "D,C,B,A" match, so the corresponding domain pattern It can be determined that it is an advertisement allowed domain pattern.

On the other hand, when the domain pattern of the domain group selected in FIG. 9 (b) is "W, V, U, T, S, R, J, I, H", the predefined ad blocking domain pattern "W, V,U,T,S,R,Q,P,O,N,M,L,K,J,I,H" compared to domain 'Q,P,O,N,M,L,K,' Since all domain patterns except Compared to the domain pattern "W,V,U,T,S,R,Q,P,O,N,M,L,K,J,I,H"", the domain "W,V,U,T, S,R,Q,P,O,N,M,L,K,J" will match the remaining domain patterns, so it can be determined that the corresponding domain pattern is an ad blocking domain pattern.

And, in FIG. 9 (c), when the domain pattern is "W,V,H", the other domain patterns except for the domain 'U' are identical compared to the predefined ad blocking domain pattern "W,V,U,H" Therefore, it can be determined that the corresponding domain pattern is an advertisement blocking domain pattern.

On the other hand, in Fig. 9 (c), when the domain pattern is "W, V, U, H, F, E, A", the terminal 1 is the main domain of the unblocked type (Type 1) in the example with reference to FIG. 4 . In the example with reference to FIG. 5 after access to "www.xxxx.com", a case in which the block type (Type 2) main domain "www,yyyy.com" is continuously accessed is shown.

In this case, although the terminal 10 initially accesses the unblocked type main domain, the number of blocked type domains (4) is greater than the number of unblocked type domains (3), and in particular, the DNS query of the advertising domain is After connecting to the main domain (H) of the blocking type (Type 2) at a time close to the time of reception, the connection to the subdomains (W, V, U) of the blocking type (Type 2) is continuously made, It can be determined that the corresponding domain pattern is an advertisement blocking domain pattern.

On the other hand, in FIG. 9(c), when the domain pattern is "W,U,H,F,E,A", after accessing the main domain www.xxxx.com of the unblocked type (Type 1), It shows a case of connecting to a subdomain of the blocking type (Type 2).

In this case, the number of unblocked type domains (4) is greater than the number (2) of blocked type domains, and only access to the unblocked type main domain (A) is made, so the corresponding domain pattern is an advertisement It can be determined that it is an allowed domain pattern.

The processing unit 24 performs a function of blocking the terminal 10 from receiving an advertisement.

More specifically, when it is determined that the domain pattern of the selected domain group corresponds to the advertisement blocking domain pattern, the processing unit 24 blocks the terminal 10 from receiving advertisements from the advertisement domain.

At this time, the processing unit 24 returns the local loopback address (eg, 127.0.0.1) of the terminal 10 as a DNS response to the DNS query of the advertisement domain received from the terminal 10, or the address (IP) of the advertisement domain. By processing an address of a domain other than , to be returned, it is possible to block the terminal 10 from receiving an advertisement from the advertisement domain.

For reference, referring to the previous example of FIG. 4 , in the case of index '4262', it can be confirmed that an actual advertisement domain address (IP) is being returned as a DNS response to a DNS query of an advertisement domain. According to the embodiment, when the domain pattern of the domain group selected for the terminal 10 is determined as the advertisement blocking domain pattern, the local loopback address of the terminal 10 (eg, 127.0) is not the address (IP) of the actual advertisement domain. .0.1) or addresses from other domains can be returned.

Similarly, referring to the previous example of FIG. 5 , in the case of index '1313', it can be confirmed that an actual advertisement domain address (IP) is returned as a DNS response to a DNS query of an advertisement domain. According to an example, when the domain pattern of the domain group selected for the terminal 10 is determined as the advertisement blocking domain pattern, the local loopback address of the terminal 10 (eg, 127.0. 0.1) or the address of another domain may be returned.

As such, the terminal 10 receiving the local loopback address (eg 127.0.0.1) through the DNS response requests an advertisement (advertisement resource) to the corresponding local loopback address, but the advertisement (resource) does not exist in the local loopback address. Therefore, the advertisement cannot be loaded, and if an address of a domain other than the address (IP) of the advertisement domain is received through the DNS response, an alternative advertisement provided from the address of the other domain can be rendered.

Meanwhile, referring to the previous example with reference to FIGS. 4 and 5 , the terminal 10 receives an advertisement from the same advertisement domain (www.ad.com), but the main domain to which the terminal 10 accesses for data service use. It can be seen that whether to block advertisements can be determined differently according to a domain pattern determined according to a combination of (www.xxxx.com, www.yyyy.com) and subdomains accessed for content rendering.

As described above, according to the configuration of the advertisement blocking device 20 according to an embodiment of the present invention, a DNS query for using the data service of the terminal 10 and a DNS response according to the DNS query are tracked to the terminal 10 ) by determining whether to block a linked advertisement in the received content, it is possible to block the reception of unnecessary advertisements by the terminal 10, so that subscriber satisfaction with the data service can be improved. In addition, in the advertisement blocking device 20 according to an embodiment of the present invention, instead of directly analyzing the traffic of the terminal 10, the DNS query from the terminal 10 and the DNS response thereof are tracked. Since the advertisement is blocked through the method, the effect of blocking the advertisement is achieved even when the traffic transmitted and received from the terminal 10 is encrypted.

After the description of the configuration of the advertisement blocking device 20 according to an embodiment of the present invention has been completed, with reference to FIG. 10, an operation flow in the advertisement blocking device 20 according to an embodiment of the present invention will be described. do.

First, when it is confirmed that a DNS query for an advertisement domain has been received from the terminal 10 through the verification unit 21 according to step 'S10', the selection unit 22 determines the advertisement domain according to step 'S20'. The domains for which the DNS query is received from the terminal 10 before the time when the DNS query is received are grouped and selected as a domain group.

At this time, the selector 22 sets a specific DNS log in which a time interval with a neighboring DNS log pair is equal to or greater than a threshold among DNS log pairs that are a pair of a domain DNS query and a DNS response corresponding to the DNS query for the advertisement domain before the time when the DNS query is received. When a pair exists, each domain to which a DNS query is received during a time from the time a DNS query for an advertisement domain is received to the specific DNS log pair may be selected as a domain group.

Next, when the selection of the domain group for the DNS query of the advertisement domain received from the terminal 10 through the previous step 'S20' is completed, the determination unit 23 is selected according to the steps 'S30' and 'S40' Based on the domain type predefined for each domain in the domain group, it is determined whether the domain pattern of the corresponding domain group corresponds to the advertisement blocking domain pattern.

At this time, when all domains in the domain group are defined as blocking type (Type 2), it can be determined that the domain pattern of the domain group is an advertisement blocking domain pattern. ), it can be determined that the domain pattern of the domain group corresponds to the allowed advertisement domain pattern.

However, when the main domain in the domain group is defined as a blocking type (Type 2) while at least some of the remaining domain groups are defined as an unblocked type (Type 1), or the main domain in the domain group is defined as an unblocked type (Type 1) ), while at least some of the remaining domain groups are defined as a blocking type (Type 2).

In this case, the determining unit 23, for example, the number of domains defined as the blocking type (Type 2) in the domain group, and the blocking type (Type 2) compared to the domains defined as the non-blocking type (Type 1) in the domain group Based on at least one of the proportion of domains defined as can

For example, while the main domains in the domain group are defined as non-blocking type (Type 1), the number of domains defined as blocking type (Type 2) among the remaining domain groups is greater than or equal to the threshold (select_threshold), or unblocked in the domain group. If the ratio of the domain defined as the blocking type (Type 2) to the domain defined as the blocking type (Type 1) is greater than or equal to the threshold (pattern_threshold), even though the main domain is defined as the non-blocking type (Type 1) Even so, it can be determined that the domain pattern of the selected domain group corresponds to the advertisement blocking domain pattern.

Conversely, while the main domain in the domain group is defined as a blocking type (Type 2), the number of domains defined as an unblocked type (Type 1) among the remaining domain groups (select_threshold) is greater than or equal to a threshold, or a blocking type ( When the ratio of domains defined as non-blocking type (Type 1) to domains defined as Type 2) is greater than or equal to a threshold (pattern_threshold), even if the main domain is defined as blocking type (Type 2), selection is made The domain pattern of the selected domain group may be determined to correspond to the advertisement allowed domain pattern.

On the other hand, when the ad blocking domain pattern (or ad-allowing domain pattern) previously defined in step 'S30' exists, the determination unit 23 determines the domain pattern and group pattern of the domain group selected according to step 'S50'. It can be determined whether the domain pattern of the selected domain group corresponds to the advertisement blocking domain pattern (or the advertisement allowed domain pattern) through a method of comparing the defined ad blocking domain patterns (or advertisement allowed domain patterns).

At this time, the determining unit 23 compares a predefined ad blocking domain pattern (or an advertisement permitted domain pattern) with the domain pattern of the selected domain group, and the domain pattern of the selected domain group has a predefined ad blocking domain pattern ( Alternatively, if it is the same as at least a part of the advertisement allowed domain pattern), it may be determined that the domain pattern of the domain group corresponds to the advertisement blocking domain pattern (or advertisement permitted domain pattern).

Thereafter, when it is determined that the domain pattern of the domain group selected through the preceding steps 'S40' and 'S50' corresponds to the advertisement blocking domain pattern, the processing unit 24 performs steps 'S60' and 'S70' to the terminal (10) process to block receiving advertisements from this advertisement domain.

At this time, the processing unit 24 returns the local loopback address (eg, 127.0.0.1) of the terminal 10 as a DNS response to the DNS query of the advertisement domain received from the terminal 10, or the address (IP) of the advertisement domain. By processing an address of a domain other than , to be returned, it is possible to block the terminal 10 from receiving an advertisement from the advertisement domain.

As such, the terminal 10 receiving the local loopback address (eg 127.0.0.1) through the DNS response requests an advertisement (advertisement resource) to the corresponding local loopback address, but the advertisement (resource) does not exist in the local loopback address. Therefore, the advertisement cannot be loaded, and if an address of a domain other than the address (IP) of the advertisement domain is received through the DNS response, an alternative advertisement provided from the address of the other domain can be rendered.

On the other hand, when it is determined that the domain pattern of the domain group selected through the previous steps 'S40' and 'S50' corresponds to the advertisement allowed domain pattern, the processing unit 24 performs steps 'S60' and 'S80' to the terminal according to steps 'S60' and 'S80'. (10) process to be allowed to receive advertisements from this advertisement domain.

At this time, the processing unit 24 processes the actual advertisement domain address (IP) to be returned as a DNS response to the DNS query of the advertisement domain received from the terminal 10, so that the terminal 10 receives the advertisement from the advertisement domain. allow that

As described above, according to the flow of operation in the advertisement blocking device 20 according to an embodiment of the present invention, a DNS query for using the data service of the terminal 10 and a DNS response corresponding thereto are tracked to the terminal. By determining whether to block the advertisement linked in the content received by ( 10 ), it is possible to block the reception of unnecessary advertisements by the terminal 10 , so that the subscriber satisfaction with the data service can be improved. In addition, in the operation flow according to the advertisement blocking device 20 according to an embodiment of the present invention, the DNS query from the terminal 10 and the DNS response thereof are tracked, not in a method of directly analyzing the traffic of the terminal 10 . Since advertisements are blocked through a tracking method, an effect of blocking advertisements is achieved even when traffic transmitted and received from the terminal 10 is encrypted.

On the other hand, the steps of the method or algorithm described in relation to the embodiments presented herein may be directly implemented in hardware or may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the present invention, or may be known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic such as floppy disks. - includes magneto-optical media, and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

Although the present invention has been described in detail with reference to preferred embodiments so far, the present invention is not limited to the above-described embodiments, and without departing from the gist of the present invention as claimed in the following claims, the technical field to which the present invention pertains It will be said that the technical idea of the present invention extends to a range where various modifications or corrections are possible by anyone having ordinary knowledge in the present invention.

According to the apparatus for blocking advertisements and the method of operation thereof according to the present invention, it is possible to determine whether to block advertisements linked in the content and received to the terminal by tracking the DNS query for data service use of the terminal and the DNS response accordingly. In this regard, as it goes beyond the limits of the existing technology, not only the use of the related technology but also the possibility of marketing or business of the applied device is sufficient, and it is an invention with industrial applicability because it can be clearly implemented in reality.

10: terminal
20: Ad blocking device
21: confirmation unit 22: selection unit
23: determination unit 24: processing unit

Claims (10)

When a DNS query for an advertisement domain is received from the terminal, in relation to the advertisement domain, the main domain from which the DNS query is received for data service use of the terminal, and the sub domain from which the DNS query is received for content rendering of the terminal a selection unit for selecting a domain as a domain group; and
Determining whether or not the domain pattern of the domain group, which is differently determined according to the combination of the main domain and the sub-domain, corresponds to the advertisement blocking domain pattern, based on the domain type defining whether to block advertisements for each domain in the domain group discrimination unit; and
and a processing unit configured to block the terminal from receiving an advertisement from the advertisement domain when it is determined that the domain pattern corresponds to the advertisement blocking domain pattern. The method of claim 1,
The selection unit,
Each domain in the grouped DNS log pair is grouped by grouping DNS log pairs whose time interval with the neighboring DNS log pairs is within a threshold based on the DNS log pair, which is a pair of DNS query and DNS response for a domain including the advertising domain. Ad blocking device, characterized in that selected as the domain group. The method of claim 1,
The domain type is
It includes a blocking type in which advertisements should be blocked and an unblocking type in which advertisements should be allowed,
The determining unit,
The number of domains defined as the blocked type in the domain group, the ratio of domains defined as the blocked type compared to the domains defined as the unblocked type in the domain group, and the number of domains defined as the blocked type in the domain group Advertisement blocking device, characterized in that it is determined whether the domain pattern of the domain group corresponds to the advertisement blocking domain pattern based on at least one of whether it is defined as a type. The method of claim 1,
The determining unit,
When a predefined ad blocking domain pattern exists, the predefined ad blocking domain pattern is compared with the domain pattern of the domain group so that the domain pattern of the domain group is at least a part of the predefined ad blocking domain pattern and If they are the same, the advertisement blocking device, characterized in that it is determined that the domain pattern of the domain group corresponds to the advertisement blocking domain pattern. The method of claim 1,
The processing unit,
Ad blocking, characterized in that the terminal is blocked from receiving advertisements from the advertisement domain by replying a local loopback address of the terminal as a DNS response according to a DNS query for the advertisement domain or by returning an address of another domain Device. a confirmation step of confirming that a DNS query for an advertisement domain is received from the terminal;
a selection step of selecting, as a domain group, a main domain from which a DNS query is received for data service use of the terminal, and a sub-domain from which a DNS query is received for content rendering of the terminal, in relation to the advertisement domain;
Determining whether or not the domain pattern of the domain group, which is differently determined according to the combination of the main domain and the sub-domain, corresponds to the advertisement blocking domain pattern, based on the domain type defining whether to block advertisements for each domain in the domain group discrimination step; and
and a processing step of processing the terminal to block reception of an advertisement from the advertisement domain when it is determined that the domain pattern corresponds to the advertisement blocking domain pattern. 7. The method of claim 6,
The selection step is
Each domain in the grouped DNS log pair is grouped by grouping DNS log pairs whose time interval with a neighboring DNS log pair is within a threshold based on a DNS log pair that is a pair of DNS query and DNS response of a domain including the advertising domain. Method of operation of an advertisement blocking device, characterized in that selected as the domain group. 7. The method of claim 6,
The domain type is
It includes a blocking type in which advertisements should be blocked and an unblocking type in which advertisements should be allowed,
The determination step is
The number of domains defined as the blocked type in the domain group, the ratio of domains defined as the blocked type to the domains defined as the unblocked type in the domain group, and the number of domains defined as the blocked type in the domain group An operation method of an advertisement blocking device, characterized in that it is determined whether the domain pattern of the domain group corresponds to the advertisement blocking domain pattern based on at least one of whether the domain group is defined as a type. 7. The method of claim 6,
The determination step is
When a predefined ad blocking domain pattern exists, the predefined ad blocking domain pattern is compared with the domain pattern of the domain group so that the domain pattern of the domain group is at least a part of the predefined ad blocking domain pattern and If identical, the method of operating an advertisement blocking device, characterized in that it is determined that the domain pattern of the domain group corresponds to the advertisement blocking domain pattern. 7. The method of claim 6,
The processing step is
Ad blocking, characterized in that the terminal is blocked from receiving advertisements from the advertisement domain by replying a local loopback address of the terminal as a DNS response according to a DNS query for the advertisement domain or by returning an address of another domain How the device works.

Images