KR102634833B1 - Remote access service method and system - Google Patents

Abstract

The remote access service method according to the present invention includes the steps of the remote access service server receiving member information including setting information for remote access through a first terminal among terminals connected through a network and storing it in the database. ; When the remote access service server requests remote access to the first terminal from a second terminal, which is another one of the terminals, the remote access service server sends setting information for remote access included in the member information provided from the first terminal. Reading the database and transmitting it to the second terminal; And the second terminal forms a P2P communication path with the first terminal based on the setting information for the remote connection, performs remote connection with the first terminal through the P2P communication path, and after the remote connection, the first terminal Transmitting and receiving remote information with a terminal; wherein the information transmitted and received through the P2P communication path is converted to a P2P data format, transmitted, and restored to the original data upon reception.

Description

Remote access service method and system {Remote access service method and system}

The present invention relates to proxy service technology, and more specifically, simplifies the user operation process for remote access, enabling a wide range of applications using remote access technology such as data sharing or remote control through remote access, while also simplifying the user operation process for remote access. This relates to a remote access service method and system that prevents damage to the network or terminal from being caused by a malicious person by protecting configuration information for the purpose.

Recently, remote access service technology that allows users to access a remote terminal via the Internet and use it as their own terminal has been rapidly developed and is being commercialized. Network protocols for such remote access services include FTP (File Transfer Protocol), Telnet (TELecommunication network), RDP (Remote Desktop Protocol), and SSH (Secure Shell).

In addition to the commercialization of various network protocols for remote access services, the network environment has also become more complex, making it inconvenient for the general public to use remote access services.

To explain further, the network environment has become complicated due to devices such as routers and firewalls, so in order to remotely access a terminal in the office from home, the user has to go through the user manipulation process of opening the firewall and performing port forwarding with the router. This process was difficult for the general public and cumbersome for experts.

The difficulty and inconvenience of the user operation process for remote access described above has limited the scope of remote access, making it difficult for application technologies using remote access services to develop widely.

Accordingly, by simplifying the user operation process for remote access, a wide range of applications using remote access technology, such as data sharing and remote control, can be implemented, while protecting the setting information for remote access to protect against those with malicious intent. There has been an urgent need to develop technology to prevent damage to networks or terminals.

Republic of Korea Patent Publication No. 10-2003-0078403 Republic of Korea Patent Publication No. 10-2001-0106389

The present invention simplifies the user operation process for remote access, enabling a wide range of applications using remote access technology such as data sharing and remote control through remote access, while protecting setting information for remote access from those with malicious intent. The purpose is to provide a remote access service method and system that prevents damage to the network or terminal.

In the remote access service method according to the present invention for achieving the above object, the remote access service server provides member information including setting information for remote access through any first terminal among terminals connected through a network. receiving and storing it in the database; When the remote access service server requests remote access to the first terminal from a second terminal, which is another one of the terminals, the remote access service server sends setting information for remote access included in the member information provided from the first terminal. Reading the database and transmitting it to the second terminal; And the second terminal forms a P2P communication path with the first terminal based on the setting information for the remote connection, performs remote connection with the first terminal through the P2P communication path, and after the remote connection, the first terminal Transmitting and receiving remote information with a terminal; wherein the information transmitted and received through the P2P communication path is converted to a P2P data format, transmitted, and restored to the original data upon reception.

The present invention simplifies the user operation process for remote access, enabling a wide range of applications using remote access technology such as data sharing and remote control through remote access, while protecting setting information for remote access from those with malicious intent. It provides the effect of preventing damage to the network or terminal.

1 is a configuration diagram of a remote access service system according to a preferred embodiment of the present invention.
Figure 2 is a diagram schematically showing a remote connection process between terminals according to a preferred embodiment of the present invention.
Figure 3 is a procedure diagram of a remote connection method between terminals according to a preferred embodiment of the present invention.
Figure 4 is a flow chart of a remote access service method according to a preferred embodiment of the present invention.
5 to 13 are diagrams showing examples of screen displays of a terminal according to a remote access service method according to a preferred embodiment of the present invention.

The present invention simplifies the user operation process for remote access, enabling a wide range of applications using remote access technology such as data sharing and remote control through remote access, while protecting setting information for remote access from those with malicious intent. Prevents damage to the network or terminal from occurring.

The remote access service method and system according to the preferred embodiment of the present invention described above will be described in detail with reference to the drawings.

<Configuration of remote access service system>

1 is a configuration diagram of a remote access service system according to a preferred embodiment of the present invention. The remote access service system consists of first to Nth terminals (1001 to 100N) connected through a network, a remote access service server 200, and a database 202.

The first to Nth terminals (1001 to 100N) are various types of computing terminals such as personal computers, mobile phones, and tablets, and the remote access service app according to a preferred embodiment of the present invention is installed, and the remote access service app is installed through the remote access service app. A remote access service according to a preferred embodiment of the present invention is provided.

In particular, the first to Nth terminals (1001 to 100N) form a P2P communication path with the other terminal according to the RDP processing unit that requests remote access or transmission and reception of remote information and the remote access request of the RDP processing unit, It is configured to include a proxy processing unit that performs remote connection with the other terminal through a P2P communication path and transmits and receives remote information with the other terminal after the remote connection is established. In particular, setting information for forming the P2P communication path and remote access is provided from an external remote access service server 200.

The remote access service server 200 provides the remote access service according to a preferred embodiment of the present invention to the first to Nth terminals (1001 to 100N).

To explain further, the remote access service server 200 is connected to the first to Nth terminals (1001 to 100N) through a network, and any one of the first to Nth terminals (1001 to 100N) is connected to the first terminal. Member information including setting information for remote access is provided and stored in the database 202, and transmitted from a second terminal, which is any other of the first to N-th terminals (1001 to 100N), to the first terminal. When remote access is requested, the setting information for remote access included in the member information provided by the first terminal is read from the database 202 and transmitted to the second terminal, and the second terminal is connected to the remote access. Remotely access the first terminal based on the setting information for.

In addition, when remote access to the first terminal, which is another terminal, is requested through any one of the first to N-th terminals (1001 to 100N), the remote access service server 200 provides information about the second terminal. Only when the user identification information of the first terminal is recorded in the friend information, the setting information for remote access to the first terminal is provided to the second terminal to protect the setting information for remote access from malicious parties. do. Additionally, when transmitting and receiving the setting information for remote access, it may be encrypted for security.

In addition, when the remote access service server 200 requests creation of an invitation link through any one of the first to Nth terminals (1001 to 100N), the user identification information of the corresponding terminal and the information entered by the user of the corresponding terminal and remote access service guidance information is generated and returned to the terminal or transmitted to the other terminal designated by the user.

In addition, when any one of the first to Nth terminals (1001 to 100N) connects to the invitation link, the remote access service server 200 provides the user identification information of the terminal, the information entered by the user of the terminal, and the remote access service server 200. It provides one or more of the access service information and information to guide membership registration.

The database 202 stores various information for providing remote access services according to a preferred embodiment of the present invention.

To explain further, the database 202 stores member information, remote access service guidance information, and information guiding membership registration, etc. The member information includes user identification information for the member, setting information for remote access, and friend information. The friend information may include user identification information about other users who are friends.

<Configuration of terminal>

The first to Nth terminals (1001 to 100N) are various types of computing terminals such as personal computers, mobile phones, and tablets, and can be configured in various ways to perform their original functions. Therefore, the following description will describe preferred embodiments of the present invention. This explains only the configuration for providing remote access services.

2 shows the first terminal 1001 for providing the remote access service, assuming that among the first to N terminals 1001 to 100N, the first terminal 1001 is located locally and the second terminal 1002 is located remotely. and the structure of the second terminal (1001-1002). Referring to FIG. 2, the first terminal 1001 includes a first remote desktop protocol (RDP) processing unit 1021 and a first proxy processing unit 1041. And the second terminal 1002 includes a second RDP processing unit 1022 and a second proxy processing unit 1042.

The first RDP processing unit 1021 performs remote connection with the second terminal 1002 through the first proxy processing unit 1041 according to the user's request through a user interface (not shown), and the second RDP processing unit 1022 In response to a user's request through a user interface (not shown), remote connection is made to the first terminal 1001 through the second proxy processing unit 1042.

When remote access is requested, the first and second proxy processing units (1041, 1042) implement a P2P connection to form a communication path, and then establish a communication path between the first and second RDP processing units (1021, 1022) through the P2P communication path. Send and receive remote information.

The above P2P connection, remote access, and remote information transmission and reception processes will be described in more detail with reference to FIG. 3.

<P2P connection and remote access, remote information transmission and reception process>

3 shows the first RDP (remote desktop protocol) processing unit 1021 and the first proxy processing unit 1041 of the first terminal 1001, and the second RDP processing unit 1022 and the second proxy of the second terminal 1002. It shows the P2P connection, remote access, and remote information transmission and reception processes between the processing unit 1042.

The first RDP (remote desktop protocol) processing unit 1021 sends the second terminal 1002 to the second terminal 1002 when the user instructs an RDP connection to a specific partner (hereinafter referred to as the second terminal) through a user interface (not shown). RDP connection request information including setting information for remote access is provided to the first proxy processing unit 1041 (step 300). The first proxy processing unit 104 requests a P2P connection to the second proxy processing unit 1042 of the second terminal 1002 based on the setting information for remote access included in the RDP connection request information (step 302). .

According to the P2P request, the second proxy processing unit 1042 of the second terminal 1002 provides P2P connection permission information to the first proxy processing unit 1041 (step 304), and as a result, the first and second proxy processing units A P2P communication path is formed between (1041, 1042).

After forming the P2P communication path, the first proxy processing unit 1041 converts the RDP connection request information into P2P data format and transmits it to the second proxy processing unit 1042 (step 308). The second proxy processing unit 1042 restores the RDP connection request information in the P2P data format to the original RDP connection request information and transmits it to the second RDP processing unit 1022 (step 310).

The second RDP processing unit 1022 outputs the RDP connection request information through an output device (not shown) and guides the user. In addition, when the user instructs to grant RDP connection through a user interface (not shown), the second RDP processing unit 1022 provides RDP connection permission information. is provided to the second proxy processing unit 1042 (step 312).

When the RDP connection permission information is provided, the second proxy processing unit 1042 converts the RDP connection permission information into a P2P data format and transmits it to the first proxy processing unit 1041 (step 314).

The first proxy processing unit 1041 restores the RDP connection permission information in the P2P data format to the original RDP connection permission information and then transmits it to the second RDP processing unit 1021 (step 316).

When the RDP connection permission information is provided, the second RDP processing unit 1021 determines that a remote connection to the second terminal has been established (step 318), and connects the second terminal 1002 according to the user's request through the user interface. The remote information is transmitted to the first proxy processing unit 1041 (step 320).

The first proxy processing unit 1041 converts remote information into P2P data format and transmits it to the second proxy processing unit 1042 (step 322). The second proxy processing unit 1042 restores the remote information in the P2P data format to the original remote information and transmits it to the second RDP processing unit 1022 (step 324).

The second RDP processing unit 1022 can output the remote information through an output device (not shown) and guide the user or perform an operation according to the remote information (step 326).

When the above remote connection is established, the second RDP processing unit 1022 of the second terminal 1002 transmits the remote information to the first terminal 1001 to the second proxy processing unit 1042 according to the user's request through the user interface. Transmit (step 328).

The second proxy processing unit 1042 converts the remote information into P2P data format and transmits it to the first proxy processing unit 1041 (step 330). The first proxy processing unit 1041 restores the remote information in the P2P data format to the original remote information and transmits it to the first RDP processing unit 1021 (step 332).

The first RDP processing unit 1021 can output the remote information through an output device (not shown) and guide the user or perform an operation according to the remote information (step 334).

As described above, the present invention enables remote connection through a P2P communication path to transmit and receive remote information, thereby enabling easy remote connection even when the network becomes complex.

In addition, the present invention protects the configuration information for remote access and prevents damage to the network or terminal by a person with malicious intent. The remote access service server 200 provides a remote access service server 200 for remote access only to terminals with which a friend relationship is established to prevent damage to the network or terminal by a malicious person. By providing setting information, problems in which the setting information may be provided to a malicious person and cause damage to the network or terminal are prevented in advance.

Now, a remote access service method according to a preferred embodiment of the present invention, which enables remote access only between terminals that have established such a friendship relationship, will be described.

<Procedures for remote access service method>

Figure 4 is a flowchart of a remote access service method according to a preferred embodiment of the present invention, and Figures 5 to 13 are diagrams showing examples of screen displays according to the present invention. The procedure of the remote access service method according to a preferred embodiment of the present invention will be described in detail with reference to FIGS. 4 to 13 above.

The first terminal (1001), which is one of the first to N-th terminals (1001 to 100N), checks whether an invitation link connection is requested by the user (step 400). As illustrated in FIGS. 12 and 13, the invitation link information includes identification information about the inviter or information entered by the inviter. The invitation link information may be transmitted as specified by the inviting user, or may be obtained by capturing the invitation link as illustrated in FIG. 13.

When access to the invitation link is requested, the first terminal 1001 connects to the invitation link and connects to the remote access service server 200 (step 402). When access to an invitation link is requested, the remote access service server 200 sends guidance information and subscription information for the remote access service, including inviter information included in the invitation link information, to the first terminal 1001. Provided (step 406).

The first terminal 1001 outputs guide information and subscription guide information for the remote access service including the inviter information and guides the user (step 407).

When membership registration is requested by a user who has received guidance information and subscription information for the remote access service including the inviter information, the first terminal 1001 receives the member information and sends the remote access service server 200. ) (step 410). Figure 5 illustrates the initial screen for membership registration. And the member information includes member identification information and setting information for remote access, such as terminal identification information and P2P and proxy connection information.

When the membership registration is requested, the remote access service server 200 stores the membership registration information provided by the first terminal 1001 in the database 202 (steps 412 and 414).

When the user requests to add a friend through the user interface, the first terminal 1001 generates friend addition request information and transmits it to the remote access service server 200 (steps 416 and 418). The friend addition request information may include identification information such as the phone number of the terminal corresponding to the friend, or setting information for remote access to the other terminal.

When the request to add a friend is requested, the remote access service server 200 generates friend request information and transmits it to the corresponding terminal (hereinafter referred to as the second terminal) (step 422). The second terminal 1002 outputs the friend request information and guides it to the user (423). If the user who has confirmed the above guidance instructs friend acceptance through the user interface, friend acceptance information is generated and transmitted to the remote access service server 200 (step 428). If the user instructs friend rejection, friend rejection information is generated and sent to the remote access service server 200 (step 428). It is transmitted to the remote access service server 200 (step 426).

When the remote access service server 200 receives the friend acceptance information, it adds the identification information of the user who provided the friend acceptance information to the friend information assigned to correspond to the member information of the user who requested to be added as a friend (steps 430 and 432). Figures 7 and 8 are diagrams illustrating screens for the friend addition process according to a preferred embodiment of the present invention.

Additionally, when the user requests a friend list inquiry through the user interface, the first terminal 1001 generates friend list information request information and transmits it to the remote access service server 200 (steps 434 and 436). The friend list information request information includes the corresponding user identification information. The remote access service server 200, which has received the friend list information request information, reads friend list information from the friend information stored corresponding to the member information of the user identification information and transmits it to the first terminal 1001 (steps 438 and 440). ). The first terminal 1001 outputs the friend list information and guides it to the user (step 442). Figure 6 is a diagram illustrating an output screen of friend list information according to a preferred embodiment of the present invention. And Figure 9 illustrates the friend list management screen, illustrating the process of blocking and deleting friends registered in the friend list.

Additionally, when the user requests transmission of invitation link information through the user interface (step 444), the first terminal 1001 generates invitation link information request information and transmits it to the remote access service server 200 (step 446). . The invitation link information request information includes the corresponding user identification information. The remote access service server 200, which has received the invitation link information request information, generates invitation link information to a web page providing service information and subscription information including inviter information, which is the user identification information, and generates invitation link information to the web page providing service information and subscription information including inviter information, which is the user identification information. It is provided to the terminal (1001). The first terminal 1001 can induce subscription to the service according to the present invention by providing the invitation link information to other people's terminals. Figure 10 is a diagram illustrating the main screen of the invitation link, and Figure 11 is a diagram illustrating screens for the invitation link creation process.

Additionally, the first terminal 1001 checks whether the user requests remote access to a specific friend through the user interface (step 454). When remote access with the friend is requested, the first terminal 1001 generates friend remote access information request information and transmits it to the remote access service server 200 (step 456). The friend remote access information request information includes the corresponding user identification information and the user identification information corresponding to the friend. The remote access service server 200, which has received the friend remote access information request information, checks whether the user identification information requesting the remote access information exists in the friend information corresponding to the member information of the user identification information and confirms whether the user is a friend. , the setting information for remote access recorded in the member information corresponding to the user identification information requesting remote access information is read and returned to the corresponding first terminal (1001). The first terminal remotely connects to the second terminal 1002, which is a friend's terminal, based on the remote access information, allowing the remote operation desired by the user to be performed.

As described above, the present invention simplifies the user operation process for remote access, enabling a wide range of applications using remote access technology such as data sharing or remote control through remote access, while protecting setting information for remote access. Prevent damage to the network or terminal from being caused by someone with malicious intent.

In the above description, the present invention has been shown and described in relation to specific embodiments, but it is common knowledge in the art that various modifications and changes are possible without departing from the spirit and scope of the invention as indicated by the patent claims. Anyone who has it will be able to easily understand it.

1001 ~100N: 1st to 1st NEKSAKFRL
200: remote access service server
202: database

Claims (10)

database;
Connected to terminals through a network,
Member information including setting information for remote access is provided through a first terminal among the terminals and stored in the database,
When remote access to the first terminal is requested from a second terminal, another one of the terminals, the setting information for remote access included in the member information provided by the first terminal is read into the database and the second terminal is It consists of a remote access service server that transmits to the terminal,
When the setting information for the remote connection is received, the second terminal provides P2P connection request information to the first terminal based on the setting information for the remote connection,
When P2P connection permission information according to the P2P connection request information is received from the first terminal, the remote connection request information is converted into P2P data format and provided to the first terminal,
When remote access permission information converted to P2P data format is provided from the first terminal, the remote access permission information converted to P2P data format is restored to the original remote access permission information, and remote access permission information is restored according to the restored remote access permission information. Converting remote information for control into P2P data format and providing it to the first terminal,
The first terminal provides P2P connection permission information when P2P connection request information is provided from the second terminal,
After providing the P2P access permission information, when remote access request information converted to P2P data format is provided from the second terminal, restoring the remote access request information converted to P2P data format to the original remote access request information, Converting remote access permission information according to the restored remote access request information into P2P data format and providing it to the second terminal,
After providing the remote access permission information, if remote information converted to P2P data format is provided from the second terminal, the remote information converted to P2P data format is restored to the original remote information, and the remote information converted to P2P data format is restored to the original remote information according to the restored remote information. A remote access service system characterized by performing operations. delete According to paragraph 1,
The remote access service server,
When remote access to a first terminal, which is another terminal, is requested through one of the second terminals, the second terminal is connected only when the user identification information of the first terminal is recorded in the friend information for the second terminal. A remote access service system characterized by providing setting information for remote access to a first terminal to the second terminal. According to paragraph 1,
The remote access service server,
When an invitation link creation is requested through any one of the above terminals,
Invitation link information containing one or more of the user identification information of the relevant terminal, information entered by the user of the relevant terminal, and remote access service guidance information is generated and returned to the terminal or transmitted to the other terminal designated by the user. Characterized by a remote access service system. According to clause 4,
The remote access service server,
When one of the terminals connects to the invitation link,
A remote access service system characterized in that it guides one or more of the user identification information of the relevant terminal, information entered by the user of the relevant terminal, and remote access service guidance information, as well as providing information guiding membership registration. delete A remote access service server receiving member information including setting information for remote access through a first terminal among terminals connected through a network and storing the member information in a database;
When the remote access service server receives a request for remote access to the first terminal from a second terminal, which is another one of the terminals, the remote access service server sends the setting information for remote access included in the member information provided from the first terminal. Reading a database and transmitting it to the second terminal;
When the second terminal receives the setting information for remote access, providing P2P connection request information to the first terminal based on the setting information for remote access;
When the first terminal receives the P2P connection request information from the second terminal, providing P2P connection grant information according to the P2P connection request information to the second terminal;
When the second terminal receives the P2P connection permission information from the first terminal, converting the remote access request information into a P2P data format and providing it to the first terminal;
When the first terminal receives remote access request information converted to P2P data format from the second terminal after providing the P2P connection grant information, the remote access request information converted to P2P data format is sent to the original remote access request. restoring information, converting remote access permission information according to the restored remote access request information into a P2P data format, and providing it to the second terminal; and
When the second terminal receives remote access permission information converted to P2P data format from the first terminal, it restores the remote access permission information converted to P2P data format to the original remote access permission information, and restores the restored remote access permission information. Converting remote information for remote control into P2P data format according to connection permission information and providing it to the first terminal;
When remote information converted to P2P data format is provided from the second terminal after providing the remote access permission information, the first terminal restores the remote information converted to P2P data format to the original remote information, A remote access service method characterized by performing an operation according to restored remote information. In clause 7,
The remote access service server,
When remote access to a first terminal, which is another terminal, is requested through one of the second terminals, the second terminal is connected only when the user identification information of the first terminal is recorded in the friend information for the second terminal. A remote access service method characterized by providing setting information for remote access to a first terminal to the second terminal. In clause 7,
The remote access service server,
When an invitation link creation is requested through any one of the above terminals,
A remote access method further comprising generating invitation link information containing one or more of the user identification information of the terminal, information entered by the user of the terminal, and remote access service guide information and providing the invitation link information to the terminal. Service method. According to clause 9,
The remote access service server,
When one of the terminals connects to the invitation link,
A remote access method further comprising: guiding one or more of user identification information of the relevant terminal, information entered by the user of the relevant terminal, and remote access service guidance information, as well as providing information guiding membership registration; Service method.