KR102613911B1 - Electronic terminal apparatus capable of preventing access to url addresses of harmful sites inserted as hyperlinks in document files and operating method thereof - Google Patents

Abstract

An electronic terminal device and a method of operating the same are disclosed. The present invention provides an electronic terminal device and an operating method that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file, thereby preventing the user of the electronic terminal device from accessing the URL address of a harmful site when viewing an electronic document. We can provide support to minimize access to .

Description

Electronic terminal device capable of preventing access to URL addresses of harmful sites inserted as hyperlinks in document files and method of operating the same METHOD THEREOF}

The present invention relates to an electronic terminal device and a method of operating the same that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file.

Recently, as computers, smartphones, and tablet PCs have become widely available, various types of electronic document-related programs that allow users to view, create, and edit electronic documents using these electronic terminal devices have been released.

These electronic document-related programs include word processors that support the creation and editing of basic documents, spreadsheets that assist in data input, arithmetic operations, and data management, and presentation programs that assist presenters in their presentations.

Usually, a user can store document files for various electronic documents in an electronic terminal device, and among these many electronic documents, there may be an electronic document in which the URL address of a harmful site is inserted as a hyperlink.

Here, a harmful site refers to a site that contains information that is deemed necessary for review, such as security-threatening activities, gambling, pornography, illegal drug sales, etc.

Meanwhile, if such a harmful site is a phishing site, the user's account information and password may be stolen unintentionally, so it is necessary to prepare preventive measures.

In this regard, it determines whether the URL address inserted as a hyperlink in an electronic document is the URL address of a harmful site, and at the same time, if the URL address is determined to be the URL address of a harmful site, it blocks access to the URL address. method can be considered.

The present invention provides an electronic terminal device and an operating method that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file, thereby preventing the user of the electronic terminal device from accessing the URL address of a harmful site when viewing an electronic document. We would like to provide support to minimize access to .

According to an embodiment of the present invention, an electronic terminal device capable of preventing access to the URL (Uniform Resource Locator) address of a harmful site inserted as a hyperlink in a document file stores the URL addresses of a plurality of preset harmful sites. After the URL address storage unit, the first document file for the first electronic document in which the first URL address is inserted as a hyperlink is executed by the first user of the electronic terminal device and the first document file is viewed, , when a connection command to the first URL address is approved by the first user, a determination unit that refers to the URL address storage unit and determines whether the first URL address is a URL address of a harmful site; and 1 If the URL address is determined to be the URL address of a harmful site, access to the first URL address is blocked, and then a warning message is displayed on the screen informing that the first URL address is the URL address of a harmful site. Includes a message display unit.

In addition, according to an embodiment of the present invention, a method of operating an electronic terminal device that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file stores the URL addresses of a plurality of preset harmful sites. maintaining a URL address storage unit, executing a first document file for a first electronic document in which a first URL address is inserted as a hyperlink by a first user of the electronic terminal device, so that the first document file is After being viewed, when a connection command to the first URL address is authorized by the first user, referring to the URL address storage unit, determining whether the first URL address is a URL address of a harmful site; If it is determined that the first URL address is the URL address of a harmful site, access to the first URL address is blocked, and then a warning message is displayed on the screen informing that the first URL address is the URL address of a harmful site. It includes steps to:

The present invention provides an electronic terminal device and an operating method that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file, thereby preventing the user of the electronic terminal device from accessing the URL address of a harmful site when viewing an electronic document. We can provide support to minimize access to .

Figure 1 is a diagram illustrating the structure of an electronic terminal device capable of preventing access to the URL address of a harmful site inserted as a hyperlink in a document file according to an embodiment of the present invention.
Figure 2 is a flowchart showing a method of operating an electronic terminal device that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file according to an embodiment of the present invention.

Hereinafter, embodiments according to the present invention will be described in detail with reference to the attached drawings. This description is not intended to limit the present invention to specific embodiments, but should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention. In describing each drawing, similar reference numerals are used for similar components, and unless otherwise defined, all terms used in this specification, including technical or scientific terms, are within the scope of common knowledge in the technical field to which the present invention pertains. It has the same meaning as generally understood by those who have it.

In this document, when a part "includes" a certain component, this means that it may further include other components rather than excluding other components, unless specifically stated to the contrary. Additionally, in various embodiments of the present invention, each component, functional block, or means may be composed of one or more subcomponents, and the electrical, electronic, and mechanical functions performed by each component may be electronic. It may be implemented with various known elements or mechanical elements such as circuits, integrated circuits, and ASICs (Application Specific Integrated Circuits), and may be implemented separately or by integrating two or more into one.

Meanwhile, the blocks in the attached block diagram or the steps in the flow chart are computer program instructions that are mounted on the processor or memory of equipment capable of data processing, such as general-purpose computers, special-purpose computers, portable laptop computers, and network computers, and perform designated functions. It can be interpreted to mean. Because these computer program instructions can be stored in a memory provided in a computer device or in a computer-readable memory, the functions described in the blocks of a block diagram or the steps of a flow diagram can be produced as a manufactured product containing instruction means to perform them. It could be. In addition, each block or each step may represent a module, segment, or portion of code that includes one or more executable instructions for executing specified logical function(s). Additionally, it should be noted that in some alternative embodiments, it is possible for functions mentioned in blocks or steps to be executed in a different order. For example, two blocks or steps shown in succession may be performed substantially simultaneously or in reverse order, and in some cases, some blocks or steps may be omitted.

1 is a diagram showing the structure of an electronic terminal device according to an embodiment of the present invention.

The electronic terminal device 110 according to the present invention is a device that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file, and includes a URL address storage unit 111, a determination unit 112, and a warning. Includes a message display unit 113.

The URL address storage unit 111 stores URL addresses of a plurality of preset harmful sites.

Here, a harmful site refers to a site that contains information that is deemed necessary for review, such as security-threatening activities, gambling, pornography, illegal drug sales, etc.

In this regard, information may be stored in the URL address storage unit 111 as shown in Table 1 below.

Multiple harmful sites URL address Harmful site 1 www.777jackpot.com.kp Harmful site 2 www.betting247.com Harmful site 3 www.qwarad.com/ko/notice ... ...

The determination unit 112 determines that the first document file for the first electronic document in which the first URL address is inserted as a hyperlink is executed by the first user of the electronic terminal device 110, and the first document file is viewed. Thereafter, when a command to access the first URL address is approved by the first user, the URL address storage unit 111 is referred to to determine whether the first URL address is the URL address of a harmful site.

At this time, according to an embodiment of the present invention, the determination unit 112 may include an LCS length calculation unit 114, a ratio calculation unit 115, a confirmation unit 116, and a harmful site determination unit 117.

When a connection command to the first URL address is granted by the first user, the LCS length calculation unit 114 refers to the URL address storage unit 111 and determines each harmful site for each of the plurality of harmful sites. By calculating the length of the longest common subsequence (LCS) between the URL address of and the first URL address, the length of the LCS corresponding to each of the plurality of harmful sites is generated.

Here, LCS means a consecutive string that matches two strings. When there are 'ACAYKP' and 'CAPCAK', the LCS between the two strings is 'ACAK', and the length of the LCS at this time is '4'. .

When the length of the LCS corresponding to each of the plurality of harmful sites is generated, the ratio calculation unit 115 calculates, for each of the plurality of harmful sites, the total length of the string constituting the URL address of each harmful site. By calculating the ratio of the length of the LCS corresponding to the harmful site, a ratio calculation value corresponding to each of the plurality of harmful sites is generated.

When a ratio calculation value corresponding to each of the plurality of harmful sites is generated, the confirmation unit 116 checks whether there is a harmful site whose ratio calculation value exceeds a preset standard value among the plurality of harmful sites. .

When it is confirmed that a harmful site whose ratio calculation value exceeds the standard value exists among the plurality of harmful sites, the harmful site determination unit 117 determines that the first URL address is the URL address of the harmful site. .

Hereinafter, the operations of the LCS length calculation unit 114, ratio calculation unit 115, confirmation unit 116, and harmful site determination unit 117 will be described in detail using an example.

First, 'Document File 1' for 'Electronic Document 1' in which 'www.betting365.com' is inserted as a hyperlink is executed by 'User 1' of the electronic terminal device 110, and 'Document File 1' is Let's assume it has been viewed.

At this time, when a connection command to 'www.betting365.com' is granted by 'User 1', the LCS length calculation unit 114 refers to the URL address storage unit 111 as shown in Table 1 above, and determines the plurality of harmful For each of the sites 'Harmful Site 1, Harmful Site 2, Harmful Site 3, ...', the URL address of each harmful site 'www.777jackpot.com.kp, www.betting247.com, www.qwarad.com By calculating the length of the longest common partial sequence between '/ko/notice, ...' and 'www.betting365.com', the LCS corresponding to each of 'harmful site 1, harmful site 2, harmful site 3, ...' The length can be created as '9, 15, 8, ...'.

In this way, when the length of the LCS corresponding to each of 'harmful site 1, harmful site 2, harmful site 3, ...' is generated by the LCS length calculation unit 114, the ratio calculation unit 115 calculates 'harmful site 1, harmful site 3,...' For each of 'Site 2, Harmful Site 3, ...', the URL address of each harmful site 'www.777jackpot.com.kp, www.betting247.com, www.qwarad.com/ko/notice, ... By calculating the ratio of '9, 15, 8, ...', which is the length of the LCS corresponding to each harmful site, to '21, 18, 24, ...', which is the total length of the string that constitutes ', A ratio calculation value corresponding to each of 'Harmful Site 1, Harmful Site 2, Harmful Site 3, ...' can be generated.

In this regard, for 'Harmful Site 1', the total length of the string that constitutes 'www.777jackpot.com.kp', the URL address of 'Harmful Site 1', is '21', and the Since the length of the LCS is '9', the ratio calculation unit 115 can generate '0.43' as the ratio calculation value corresponding to 'harmful site 1'. In this way, the ratio calculation unit 115 can generate '0.43, 0.83, 0.33, ...' as ratio calculation values corresponding to each of 'harmful site 1, harmful site 2, harmful site 3, ...' there is.

In this way, when the ratio calculation unit 115 generates ratio calculation values corresponding to each of 'harmful site 1, harmful site 2, harmful site 3,...', the confirmation unit 116 generates 'harmful site 1, harmful site 3,...' Among 'Site 2, Harmful Site 3, ...', it is possible to check whether there is a harmful site whose ratio calculation value exceeds the preset standard.

If it is assumed that the preset standard value is '0.8', the confirmation unit 116 selects '0.8', the standard value, as the ratio calculation value among 'Harmful Site 1, Harmful Site 2, Harmful Site 3,...' You can check whether excessive harmful sites exist.

At this time, among 'Harmful Site 1, Harmful Site 2, Harmful Site 3, ...', 'Harmful Site 2' is confirmed to exist as a harmful site whose ratio calculation value exceeds the above standard value of '0.8'. The harmful site determination unit 117 may determine that 'www.betting365.com' is the URL address of a harmful site.

If the warning message display unit 113 determines that the first URL address is the URL address of a harmful site, it blocks access to the first URL address and then informs the user that the first URL address is the URL address of the harmful site. A warning message is displayed on the screen.

For example, as in the above-mentioned example, if the judgment unit 112 determines that 'www.betting365.com' is the URL address of a harmful site, the warning message display unit 113 displays 'www.betting365.com'. After blocking access, a warning message can be displayed on the screen informing you that 'www.betting365.com' is the URL address of a harmful site.

According to one embodiment of the present invention, the electronic terminal device 110 includes a serial number table maintenance unit 118, an authentication event generation unit 119, a guidance message display unit 120, a serial number extractor 121, and an operation code. It may further include a generating unit 122, an electronic signature value generating unit 123, and a transmitting unit 124.

The serial number table maintenance unit 118 has serial numbers with different t (t is a natural number of 2 or more) digits corresponding to each of a plurality of preset document formats that are preset and shared with the preset user authentication server 130. Store and maintain the recorded serial number table. Here, the document format refers to the file format for each document with an extension such as '.hwp', '.docx', '.pdf', etc.

For example, when t is '4', the serial number table maintenance unit 118 may store and maintain a serial number table as shown in Table 2 below.

Multiple document formats 4-digit serial number Format 1 6401 format 2 3286 format 3 5429 format 4 1752 format 5 9367 ... ...

At this time, the user authentication server 130 corresponds to a t-digit user identification number for each of a plurality of users pre-designated as having access rights to a harmful site and a private key pre-issued for each of the plurality of users. It contains a user information database in which public keys are stored in correspondence with each other.

For example, as in the above-mentioned example, when t is '4', information may be stored in the user information database of the user authentication server 130 as shown in Table 3 below.

for each of multiple users
4-digit user identification number public key user 1 1230 public key 1 user 2 7085 public key 2 user 3 8271 public key 3 user 4 2606 public key 4 user 5 9736 public key 5 ... ... ...

After the warning message is displayed on the screen through the warning message display unit 113, the authentication event generator 119 generates a command to force access to the first URL address by the first user. An authentication event is generated to perform authentication processing to determine whether the user has permission to access the harmful site.

When the authentication event occurs, the guidance message display unit 120 displays a guidance message on the screen requesting the first user to enter a user identification number for the first user.

After the information message is displayed on the screen, if the first user identification number is input from the first user within a preset waiting time, the serial number extractor 121 checks the first document format of the first document file and then , extract the first serial number corresponding to the first document format from the serial number table.

The operation code generator 122 configures the result value of performing a modulo-2 operation on each of the t numbers constituting the first user identification number into a bit string, thereby creating a bit string of t bits. Generate a first operation code and generate a second operation code of t bits by configuring the result of performing modulo-2 operation on each of the t numbers constituting the first serial number into a bit string. do.

Here, the modulo-2 operation refers to an operation that performs division by dividing the dividend by 2 and calculates the remainder.

The electronic signature value generator 123 generates a t-bit seed code by performing an exclusive OR (XOR) operation between the first operation code and the second operation code, and then converts the seed code to the second operation code. 1 Generate the first electronic signature value by encrypting it with the first private key previously issued to the user.

When the first electronic signature value is generated, the transmission unit 124 transmits the first electronic signature value, the first user identification number, and information about the first document format to the user authentication server 130, A confirmation request command is transmitted to the user authentication server 130 to determine whether the first user is a user with access rights to the harmful site.

Hereinafter, the operations of the authentication event generating unit 119, the guidance message display unit 120, the serial number extracting unit 121, the operation code generating unit 122, the electronic signature value generating unit 123, and the transmitting unit 124. This will be explained in detail using an example.

First, as in the above-described example, let us assume that the warning message is displayed on the screen through the warning message display unit 113.

At this time, when a forced access command to 'www.betting365.com' is granted by 'User 1', the authentication event generator 119 determines whether 'User 1' is a user with access rights to the harmful site. An authentication event can be generated to perform authentication processing.

In this way, when the authentication event is generated by the authentication event generation unit 119, the guidance message display unit 120 displays a guidance message on the screen requesting 'User 1' to enter the user identification number for 'User 1'. It can be displayed.

In this way, after the guidance message is displayed on the screen by the guidance message display unit 120, if '1230' is entered as the first user identification number from 'User 1' within the preset waiting time, the serial number extractor 121 You can check the first document format of 'document file 1'.

As a result, when it is confirmed that the first document format of 'document file 1' is 'format 3', the serial number extractor 121 extracts a document corresponding to 'format 3' from the serial number table shown in Table 2 above. The serial number '5429' can be extracted as the first serial number.

Then, the operation code generator 122 configures the result value of performing the modulo-2 operation on each of the four numbers constituting the first user identification number '1230' into a bit string, resulting in 4. The first operation code of the bit can be generated as '1010', and the result value when modulo-2 operation is performed on each of the four numbers constituting the first serial number '5429' is bit. By organizing it into columns, a 4-bit second operation code can be generated, such as '1001'.

Then, the electronic signature value generator 123 generates a 4-bit seed code such as '0011' by performing an exclusive OR operation between the first operation code '1010' and the second operation code '1001'. can do.

Then, the electronic signature value generator 123 can generate 'electronic signature value 1' by encrypting the seed code '0011' with 'private key 1' previously issued to 'User 1'.

In this way, when 'electronic signature value 1' is generated by the electronic signature value generating unit 123, the transmission unit 124 sends 'electronic signature value 1', '1230', and 'format 3' to the user authentication server 130. While transmitting information about ', a command to request confirmation as to whether 'User 1' is a user with access rights to the harmful site may be transmitted to the user authentication server 130.

At this time, according to one embodiment of the present invention, the user authentication server 130 stores the serial number table in the server, and receives the first electronic signature value and the first user identification number from the electronic terminal device 110. And when information about the first document format is received and the confirmation request command is received, a first public key corresponding to the first private key is extracted from the user information database based on the first user identification number. Then, based on the information about the first document format, the first serial number is extracted from the serial number table, and then based on the first public key and the first serial number, the first electronic signature value is entered. verification is performed, and when the verification of the first electronic signature value is completed, a confirmation completion message is generated indicating that confirmation has been completed that the first user is a user with access rights to the harmful site, and the electronic terminal device It can be sent to (110).

Specifically, according to one embodiment of the present invention, the user authentication server 130 receives information about the first electronic signature value, the first user identification number, and the first document format from the electronic terminal device 110. When the confirmation request command is received, the first public key stored corresponding to the first user identification number is extracted from the user database and corresponding to the first document format from the serial number table. After extracting the first serial number, the seed code is restored by decrypting the first electronic signature value with the first public key, and modulo-2 for each of the t numbers constituting the first serial number. The second operation code of t bits is generated by configuring the result value when performing the operation as a bit string, and then the first operation code is generated by performing an exclusive OR operation between the seed code and the second operation code. After restoration, if the result value of performing modulo-2 operation on each of the t numbers constituting the first user identification number is confirmed to match the restored first operation code, Verification of the first electronic signature value may be processed as completed.

Hereinafter, the operation of the user authentication server 130 will be described in detail using an example.

First, as in the above-mentioned example, assume that t is '4' and that a serial number table as shown in Table 2, which is pre-shared with the electronic terminal device 110, is stored in the server of the user authentication server 130. let's do it. In addition, as in the above-described example, the transmission unit 124 transmits information about 'electronic signature value 1', '1230', and 'format 3' to the user authentication server 130, As the confirmation request command is transmitted, information about 'electronic signature value 1', '1230', and 'format 3' and the confirmation request command are sent from the electronic terminal device 110 to the user authentication server 130. Assume it has been received.

Then, the user authentication server 130 can extract 'public key 1' stored in correspondence with '1230' of 'user 1' from the user database as shown in Table 3 above, and the 'public key 1' stored in the server From the serial number table shown in Table 2, '5429', the serial number corresponding to 'Format 3', can be extracted as the first serial number.

Afterwards, the user authentication server 130 can decrypt the 'electronic signature value 1' with 'public key 1' and restore the seed code as '0011', forming the first serial number '5429'. The 4-bit second operation code, such as '1001', can be generated by configuring the result value of performing the modulo-2 operation on each of the four numbers as a bit string.

Then, the user authentication server 130 can restore the first operation code as '1010' by performing an exclusive OR operation between the seed code '0011' and the second operation code '1001'. .

After that, the user authentication server 130 performs a modulo-2 operation on each of the four numbers constituting the first user identification number '1230', and '1010', which is the result value, is restored to the first user identification number, '1230'. 1 You can check whether it matches the operation code '1010'.

At this time, '1010', which is the result of performing modulo-2 operation on each of the four numbers constituting the first user identification number '1230', is the restored first operation code '1010' and Since it is confirmed that they match each other, the user authentication server 130 can process that the verification of 'electronic signature value 1' has been completed.

In this way, when the verification of 'electronic signature value 1' is processed by the user authentication server 130 as completed, the user authentication server 130 confirms that 'User 1' is a user with access rights to the harmful site. A confirmation completion message indicating completion may be generated and transmitted to the electronic terminal device 110.

According to one embodiment of the present invention, the electronic terminal device 110 may further include a connection control unit 125, a connection history information generation unit 126, and a registration processing unit 127.

When the confirmation completion message is received from the user authentication server 130, the access control unit 125 is configured to allow the electronic terminal device 110 to connect to the first URL address according to the forced connection command of the first user. Perform access control.

When the access control is performed, the access history information generator 126 generates first time information at the time when the access control is performed, and a GPS (Global Positioning System) module preloaded on the electronic terminal device 110. Based on this, after collecting first current location information, which is location information of the point where the electronic terminal device 110 is currently located, the first time information, the first current location information, and the first user identification number are collected. Create connection history information.

When the connection history information is generated, the registration processing unit 127 generates a first transaction including the connection history information and then registers the first transaction in the preset blockchain network 10.

Hereinafter, the operations of the connection control unit 125, the connection history information generation unit 126, and the registration processing unit 127 will be described in detail using examples.

First, as in the above-described example, assume that the confirmation completion message is received from the user authentication server 130 to the electronic terminal device 110.

Then, the connection control unit 125 may perform connection control to allow the electronic terminal device 110 to connect to 'www.betting365.com' according to the forced connection command of 'User 1'.

In this way, when the access control is performed by the access control unit 125, the access history information generator 126 can generate first time information at the time the access control is performed.

At this time, when the first time information is set to '17:45 on April 1, 2022', the access history information generator 126 uses the GPS module preloaded on the electronic terminal device 110 to First current location information, which is location information of the point where the terminal device 110 is currently located, may be collected.

Here, when the first current location information is '(37.553784, 126.923122)', the connection history information generator 126 generates 'April 1, 2022 17:45', '(37.553784, 126.923122)', and Access history information consisting of '1230', the first user identification number, can be generated.

In this way, when the connection history information is generated by the connection history information generation unit 126, the registration processing unit 127 generates 'Transaction 1' containing the connection history information, and then creates 'Transaction 1' as a preset block. Registration can be processed in the chain network (10).

At this time, according to an embodiment of the present invention, the registration processing unit 127 may propagate 'Transaction 1' to the blockchain network 10 in order to register 'Transaction 1' in the blockchain network 10. . Then, one of the plurality of nodes (11, 12, 13, 14, 15, 16) constituting the blockchain network 10 creates 'block 1' including 'transaction 1', It can be propagated to multiple nodes (11, 12, 13, 14, 15, 16). Accordingly, when 'block 1' is received at a plurality of nodes (11, 12, 13, 14, 15, 16), the plurality of nodes (11, 12, 13, 14, 15, 16) send a block to each node. 'Transaction 1' can be shared by chaining 'Block 1' to the blockchain data based on the previous block chained to the stored blockchain data.

In this way, the electronic terminal device 110 according to the present invention registers the history information about this in the blockchain network 10 when the user forcibly accesses a predetermined harmful site, so that the administrator can record the user's forced access history at any time. We can assist you in checking.

Figure 2 is a flowchart showing a method of operating an electronic terminal device that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file according to an embodiment of the present invention.

In step S210, a URL address storage unit in which URL addresses of a plurality of preset harmful sites are stored is maintained.

In step S220, the first document file for the first electronic document in which the first URL address is inserted as a hyperlink is executed by the first user of the electronic terminal device, and after the first document file is viewed, When a connection command to the first URL address is approved by the first user, the URL address storage unit is referred to to determine whether the first URL address is the URL address of a harmful site.

In step S230, if it is determined that the first URL address is the URL address of a harmful site, access to the first URL address is blocked, and then a warning message is sent informing that the first URL address is the URL address of a harmful site. is displayed on the screen.

At this time, according to one embodiment of the present invention, in step S220, when a connection command to the first URL address is approved by the first user, the URL address storage is referred to, and each of the plurality of harmful sites is selected. For example, generating a length of an LCS corresponding to each of the plurality of harmful sites by calculating the length of the longest common subsequence between the URL address of each harmful site and the first URL address, the plurality of harmful sites Once the length of the LCS corresponding to each is generated, for each of the plurality of harmful sites, calculate the ratio of the length of the LCS corresponding to each harmful site to the total length of the string constituting the URL address of each harmful site. thereby generating a ratio calculation value corresponding to each of the plurality of harmful sites. When the ratio calculation value corresponding to each of the plurality of harmful sites is generated, the ratio calculation value is determined from among the plurality of harmful sites in a dictionary. Confirming whether a harmful site exceeding a set standard exists, and if it is confirmed that a harmful site whose ratio calculation value exceeds the standard value exists among the plurality of harmful sites, the first URL address is selected as a harmful site. It may include a step of determining that it is a URL address of a site.

In addition, according to one embodiment of the present invention, the method of operating the electronic terminal device includes a preset user authentication server (the user authentication server includes t for each of a plurality of users predetermined as having access rights to harmful sites) (t is a natural number of 2 or more) and includes a user information database in which a user identification number of 2 digits and a public key corresponding to a pre-issued private key for each of the plurality of users are stored in correspondence with each other. storing and maintaining a serial number table in which different t-digit serial numbers corresponding to each of a plurality of preset document formats are recorded, after the warning message is displayed on the screen, by the first user When a command to force access to the first URL address is applied, generating an authentication event to perform an authentication process to determine whether the first user is a user with access rights to the harmful site, the authentication event When generated, displaying a guidance message on the screen requesting the first user to enter a user identification number for the first user, after the guidance message is displayed on the screen, the first user within a preset waiting time When a first user identification number is input from a user, checking the first document format of the first document file, extracting a first serial number corresponding to the first document format from the serial number table, the first A first operation code of t bits is generated by configuring the result value of performing modulo-2 operation on each of the t numbers constituting the user identification number into a bit string, and constituting the first serial number. Generating a second operation code of t bits by configuring the result of performing a modulo-2 operation on each of t numbers into a bit string, exclusive between the first operation code and the second operation code. Generating a t-bit seed code by performing an OR operation, then encrypting the seed code with a first private key previously issued to the first user to generate a first electronic signature value, and generating the first electronic signature When the value is generated, information about the first electronic signature value, the first user identification number, and the first document format is transmitted to the user authentication server, and the first user is sent to a harmful site. The step of transmitting a confirmation request command as to whether the user has access rights to may further be included.

At this time, the user authentication server stores the serial number table in the server, and receives information about the first electronic signature value, the first user identification number, and the first document format from the electronic terminal device, When the confirmation request command is received, the first public key corresponding to the first private key is extracted from the user information database based on the first user identification number, and the first public key corresponding to the first private key is extracted based on the information about the first document format. , After extracting the first serial number from the serial number table, verification is performed on the first electronic signature value based on the first public key and the first serial number, and the first electronic signature value is When the verification is completed, a confirmation completion message indicating that the first user has been confirmed to be a user with access rights to the harmful site may be generated and transmitted to the electronic terminal device.

At this time, according to one embodiment of the present invention, the user authentication server receives information about the first electronic signature value, the first user identification number, and the first document format from the electronic terminal device, and confirms the When a request command is received, the first public key stored corresponding to the first user identification number is extracted from the user database, and the first sequence corresponding to the first document format is extracted from the sequence number table. After extracting the number, the first electronic signature value is decrypted with the first public key to restore the seed code, and modulo-2 operation is performed on each of the t numbers constituting the first serial number. After generating the second operation code of t bits by configuring the result value as a bit string, the first operation code is restored by performing an exclusive OR operation between the seed code and the second operation code, and thereafter. , If the result value of performing modulo-2 operation on each of the t numbers constituting the first user identification number is confirmed to match the restored first operation code, the first electronic signature The verification of the value can be processed as completed.

At this time, according to an embodiment of the present invention, the operating method of the electronic terminal device is such that when the confirmation completion message is received from the user authentication server, the electronic terminal device operates according to a forced connection command of the first user. performing access control to enable access to a first URL address; when the access control is performed, generating first time information at the point in time when the access control is performed; and a GPS module preloaded on the electronic terminal device. Based on this, after collecting first current location information, which is location information of the point where the electronic terminal device is currently located, a connection history consisting of the first time information, the first current location information, and the first user identification number Generating information and when the access history information is generated, generating a first transaction including the access history information, and registering the first transaction in a preset blockchain network may further be included. .

Above, a method of operating an electronic terminal device according to an embodiment of the present invention has been described with reference to FIG. 2. Here, the operation method of the electronic terminal device according to an embodiment of the present invention may correspond to the configuration of the operation of the electronic terminal device 110 described using FIG. 1, so a more detailed description thereof will be omitted. .

A method of operating an electronic terminal device that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file according to an embodiment of the present invention is a computer stored in a storage medium for execution through combination with a computer. It can be implemented as a program.

In addition, a method of operating an electronic terminal device that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file according to an embodiment of the present invention is a computer program command to be executed through combination with a computer. It may be implemented in a form and recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc., singly or in combination. Program instructions recorded on the medium may be specially designed and constructed for the present invention or may be known and usable by those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -Includes optical media (magneto-optical media) and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, etc. Examples of program instructions include machine language code, such as that produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc.

As described above, the present invention has been described with specific details such as specific components and limited embodiments and drawings, but this is only provided to facilitate a more general understanding of the present invention, and the present invention is not limited to the above embodiments. , those skilled in the art can make various modifications and variations from this description.

Accordingly, the spirit of the present invention should not be limited to the described embodiments, and the scope of the patent claims described below as well as all modifications that are equivalent or equivalent to the scope of this patent claim shall fall within the scope of the spirit of the present invention. .

110: Electronic terminal device that can prevent access to the URL address of a harmful site inserted as a hyperlink in a document file
111: URL address storage unit 112: Determination unit
113: Warning message display unit 114: LCS length calculation unit
115: ratio calculation unit 116: confirmation unit
117: Harmful site determination unit 118: Serial number table maintenance unit
119: Authentication event occurrence unit 120: Information message display unit
121: Serial number extraction unit 122: Operation code generation unit
123: Electronic signature value generation unit 124: Transmission unit
125: Access control unit 126: Access history information generation unit
127: Registration processing department
130: User authentication server
10: Blockchain network
11, 12, 13, 14, 15, 16: multiple nodes

Claims (12)

In the electronic terminal device that can prevent access to the URL (Uniform Resource Locator) address of a harmful site inserted as a hyperlink in a document file,
a URL address storage unit storing URL addresses of a plurality of preset harmful sites;
Preset user authentication server - The user authentication server includes a user identification number of t (t is a natural number of 2 or more) digits for each of a plurality of users pre-designated as having access rights to harmful sites and the plurality of users. Contains a user information database in which public keys corresponding to pre-issued private keys are stored in correspondence with each other - different t digits corresponding to each of a plurality of preset document formats that are pre-shared with each other. A serial number table maintenance unit that stores and maintains a serial number table in which serial numbers are recorded;
After the first document file for the first electronic document in which the first URL address is inserted as a hyperlink is executed by the first user of the electronic terminal device and the first document file is viewed, the first user When a command to connect to the first URL address is approved, a determination unit that refers to the URL address storage unit and determines whether the first URL address is a URL address of a harmful site;
If it is determined that the first URL address is the URL address of a harmful site, access to the first URL address is blocked, and then a warning message is displayed on the screen informing that the first URL address is the URL address of a harmful site. a warning message display unit;
After the warning message is displayed on the screen through the warning message display unit, if a forced access command to the first URL address is granted by the first user, the first user is granted access to the harmful site. an authentication event generation unit that generates an authentication event to perform authentication processing on whether the user is a user;
When the authentication event occurs, a guidance message display unit that displays a guidance message on the screen requesting the first user to enter a user identification number for the first user;
After the information message is displayed on the screen, if the first user identification number is input from the first user within a preset waiting time, the first document format of the first document file is confirmed, and the first user identification number is input from the serial number table. 1 A serial number extractor extracting a first serial number corresponding to a document format;
Generating a first operation code of t bits by organizing the result of performing a Modulo-2 operation on each of the t numbers constituting the first user identification number into a bit string, an operation code generator that generates a second operation code of t bits by configuring the result of performing a modulo-2 operation on each of the t numbers constituting the first serial number into a bit string;
By performing an exclusive OR (XOR) operation between the first operation code and the second operation code, a t-bit seed code is generated, and then the seed code is converted to the first operation code previously issued to the first user. an electronic signature value generator that generates a first electronic signature value by encrypting it with a private key; and
When the first electronic signature value is generated, information about the first electronic signature value, the first user identification number, and the first document format is transmitted to the user authentication server, and the first electronic signature value is transmitted to the user authentication server. 1 Transmission unit that transmits a confirmation request command as to whether the user has permission to access harmful sites
Including,
The user authentication server is
The serial number table is stored in a server, and information on the first electronic signature value, the first user identification number, and the first document format is received from the electronic terminal device, and the confirmation request command is received. , Based on the first user identification number, extract the first public key corresponding to the first private key from the user information database, and extract the first public key corresponding to the first private key from the serial number table based on information about the first document format. After extracting the first serial number, verification of the first electronic signature value is performed based on the first public key and the first serial number, and when verification of the first electronic signature value is completed, An electronic terminal device, wherein a confirmation completion message indicating that confirmation has been completed that the first user is a user with access rights to a harmful site is generated and transmitted to the electronic terminal device. According to paragraph 1,
The judgment department
When a connection command to the first URL address is approved by the first user, the URL address storage unit is referred to, and for each of the plurality of harmful sites, the link between the URL address of each harmful site and the first URL address is determined. an LCS length calculation unit that generates a length of the LCS corresponding to each of the plurality of harmful sites by calculating the length of the longest common subsequence (LCS);
When the length of the LCS corresponding to each of the plurality of harmful sites is generated, for each of the plurality of harmful sites, the LCS corresponding to each harmful site is for the entire length of the string constituting the URL address of each harmful site. a ratio calculation unit that generates a ratio calculation value corresponding to each of the plurality of harmful sites by calculating the ratio of the lengths of;
a confirmation unit that, when a ratio calculation value corresponding to each of the plurality of harmful sites is generated, determines whether there is a harmful site whose ratio calculation value exceeds a preset standard value among the plurality of harmful sites; and
Among the plurality of harmful sites, when it is confirmed that there is a harmful site whose ratio calculation value exceeds the standard value, a harmful site determination unit determines that the first URL address is the URL address of the harmful site.
Electronic terminal device including. delete According to paragraph 1,
The user authentication server is
When information about the first electronic signature value, the first user identification number, and the first document format is received from the electronic terminal device, and the confirmation request command is received, from the user information database, the first user After extracting the first public key stored in correspondence with the identification number and extracting the first serial number corresponding to the first document format from the serial number table, the first electronic signature value is stored in the first The seed code is restored by decrypting with a public key, and the result of performing modulo-2 operation on each of the t numbers constituting the first serial number is configured as a bit string to form the second serial number of t bits. After generating an operation code, the first operation code is restored by performing an exclusive OR operation between the seed code and the second operation code, and thereafter, each of the t numbers constituting the first user identification number If the result value of performing the modulo-2 operation on is confirmed to match the restored first operation code, the electronic terminal is characterized in that verification of the first electronic signature value is completed. Device. According to paragraph 4,
When the confirmation completion message is received from the user authentication server, a connection control unit performs access control to allow the electronic terminal device to connect to the first URL address according to a forced connection command of the first user;
When the access control is performed, first time information at the time when the access control is performed is generated, and the electronic terminal device is currently located based on a GPS (Global Positioning System) module preloaded on the electronic terminal device. a connection history information generator that collects first current location information, which is location information of a location, and then generates connection history information consisting of the first time information, the first current location information, and the first user identification number; and
When the access history information is generated, a registration processing unit that generates a first transaction including the access history information and then registers the first transaction in a preset blockchain network.
An electronic terminal device further comprising: In a method of operating an electronic terminal device that can prevent access to the URL (Uniform Resource Locator) address of a harmful site inserted as a hyperlink in a document file,
maintaining a URL address storage unit in which URL addresses of a plurality of preset harmful sites are stored;
Preset user authentication server - The user authentication server includes a user identification number of t (t is a natural number of 2 or more) digits for each of a plurality of users pre-designated as having access rights to harmful sites and the plurality of users. Contains a user information database in which public keys corresponding to pre-issued private keys are stored in correspondence with each other - different t digits corresponding to each of a plurality of preset document formats that are pre-shared with each other. A step of storing and maintaining a serial number table in which serial numbers are recorded;
After the first document file for the first electronic document in which the first URL address is inserted as a hyperlink is executed by the first user of the electronic terminal device and the first document file is viewed, the first user When a connection command to the first URL address is approved, referring to the URL address storage unit, determining whether the first URL address is a URL address of a harmful site;
If it is determined that the first URL address is the URL address of a harmful site, access to the first URL address is blocked, and then a warning message is displayed on the screen informing that the first URL address is the URL address of a harmful site. steps;
After the warning message is displayed on the screen, if a command to force access to the first URL address is granted by the first user, authentication as to whether the first user is a user who has permission to access the harmful site generating an authentication event to perform processing;
When the authentication event occurs, displaying a guidance message on the screen requesting the first user to enter a user identification number for the first user;
After the information message is displayed on the screen, if the first user identification number is input from the first user within a preset waiting time, the first document format of the first document file is confirmed, and the first user identification number is input from the serial number table. 1 extracting a first serial number corresponding to a document format;
Generating a first operation code of t bits by organizing the result of performing a Modulo-2 operation on each of the t numbers constituting the first user identification number into a bit string, generating a second operation code of t bits by configuring the result of performing a modulo-2 operation on each of the t numbers constituting the first serial number into a bit string;
By performing an exclusive OR (XOR) operation between the first operation code and the second operation code, a t-bit seed code is generated, and then the seed code is converted to the first operation code previously issued to the first user. generating a first electronic signature value by encrypting it with a private key; and
When the first electronic signature value is generated, information about the first electronic signature value, the first user identification number, and the first document format is transmitted to the user authentication server, and the first electronic signature value is transmitted to the user authentication server. 1 Step of transmitting a confirmation request command as to whether the user has permission to access a harmful site
Including,
The user authentication server is
The serial number table is stored in a server, and information on the first electronic signature value, the first user identification number, and the first document format is received from the electronic terminal device, and the confirmation request command is received. , Based on the first user identification number, extract the first public key corresponding to the first private key from the user information database, and extract the first public key corresponding to the first private key from the serial number table based on information about the first document format. After extracting the first serial number, verification of the first electronic signature value is performed based on the first public key and the first serial number, and when verification of the first electronic signature value is completed, A method of operating an electronic terminal device, comprising generating a confirmation completion message indicating that confirmation that a first user is a user with access rights to a harmful site has been completed and transmitting the confirmation message to the electronic terminal device. According to clause 6,
The above judgment step is
When a connection command to the first URL address is approved by the first user, the URL address storage unit is referred to, and for each of the plurality of harmful sites, the link between the URL address of each harmful site and the first URL address is determined. generating a length of the LCS corresponding to each of the plurality of harmful sites by calculating the length of the longest common subsequence (LCS);
When the length of the LCS corresponding to each of the plurality of harmful sites is generated, for each of the plurality of harmful sites, the LCS corresponding to each harmful site is for the entire length of the string constituting the URL address of each harmful site. generating a ratio calculation value corresponding to each of the plurality of harmful sites by calculating a ratio of the length of .
When a ratio calculation value corresponding to each of the plurality of harmful sites is generated, checking whether there is a harmful site whose ratio calculation value exceeds a preset standard value among the plurality of harmful sites; and
When it is confirmed that a harmful site whose ratio calculation value exceeds the standard value exists among the plurality of harmful sites, determining that the first URL address is the URL address of the harmful site.
A method of operating an electronic terminal device comprising: delete According to clause 6,
The user authentication server is
When information about the first electronic signature value, the first user identification number, and the first document format is received from the electronic terminal device, and the confirmation request command is received, from the user information database, the first user After extracting the first public key stored in correspondence with the identification number and extracting the first serial number corresponding to the first document format from the serial number table, the first electronic signature value is stored in the first The seed code is restored by decrypting with a public key, and the result of performing modulo-2 operation on each of the t numbers constituting the first serial number is configured as a bit string to form the second serial number of t bits. After generating an operation code, the first operation code is restored by performing an exclusive OR operation between the seed code and the second operation code, and thereafter, each of the t numbers constituting the first user identification number If the result value of performing the modulo-2 operation on is confirmed to match the restored first operation code, the electronic terminal is characterized in that verification of the first electronic signature value is completed. How the device works. According to clause 9,
When the confirmation completion message is received from the user authentication server, performing connection control to allow the electronic terminal device to connect to the first URL address according to a forced connection command of the first user;
When the access control is performed, first time information at the time when the access control is performed is generated, and the electronic terminal device is currently located based on a GPS (Global Positioning System) module preloaded on the electronic terminal device. After collecting first current location information, which is location information of a location, generating access history information consisting of the first time information, the first current location information, and the first user identification number; and
When the access history information is generated, generating a first transaction including the access history information, and then registering the first transaction in a preset blockchain network.
A method of operating an electronic terminal device further comprising: A computer-readable recording medium recording a computer program for executing the method of any one of claims 6, 7, 9, or 10 through combination with a computer. A computer program stored in a storage medium for executing the method of any one of claims 6, 7, 9, or 10 through combination with a computer.

Images