KR19980045942A - Access Control Method of World Wire Web (WWW) Server - Google Patents

Abstract

The present invention relates to a server access control method using Netscape, the most popular browser of WWW, which is widely used when the Internet is used for efficient management provided by the WWW server. Currently, the WWW server provides a basic access control function. Therefore, basic authentication service is possible, but application program must be used separately to create password file for access control, so administrator must delete user from password file in order to change registered user's contents. In addition, the server administrator creates a direct access control file (.hpasswd) for per directory access control, which can be cumbersome and inconsistent. Therefore, in the present invention, the CGI program effectively utilizes the WWW server function, which provides basic functions for selective access and authentication of the WWW, which is widely used in the open Internet. By allowing access control, the server administrator can use the web browser to perform the management function simply by input and clock without a complete understanding of the control function. This enables consistent access control management for the WWW server. It is.

Description

Access Control Method of WWW Sever

The present invention relates to an access control method of a WWW server, and more particularly, to a server access management method for easily and consistently authenticating and controlling access using a browser of a WWW as an interface.

Currently, the use of the Internet is increasing and many applications, for example, home shopping or home banking using the WWW, require selective access and authenticated access. WWW server provides basic access control function, so basic authentication service is available. However, WWW server administrator must generate password file for each user by using Unix (or DOS) command. You must use a separate application.

In addition, for per directory access control, the server administrator creates a direct access control file (.htpasswd), which can be cumbersome and inconsistent. And these simplified methods are usually commercialized products, there is a problem that only the specific server can be authenticated and controlled.

Therefore, the present invention uses a CGI program for the non-commercial NCSA server that is currently the world's most used to solve the above problems, WWW server administrators without complicated manual work and knowledge of operating systems such as Unix or DOS Its purpose is to provide a way to manage server resources easily and simply using a web browser on an individual PC.

1 is an overall structure diagram of a server manager to which the present invention is applied.

2 to 4 is a conceptual diagram for the access control of the WWW server according to the present invention.

In order to achieve the above object, the WWW server access control method includes: a file path specifying step of changing a directory of files used by a server administrator using an NCSA server, which is a non-business WWW server when using the Internet; After the file path is specified, a user and group of individuals using a common gateway interface (CGI) are grouped to manage a password file encrypted with a user ID (identifier number) and a password of a user and users registered in the password file as a group. A password management step of adding, deleting, and changing a user and then adding the user to the password file; In addition, the WWW server performs a directory access control by providing a function of deleting or adding a user ID or a group of the password file that allows access through an authentication process such as an accessible host address, an unauthorized address, etc. using an access control file. By providing an access control step, the WWW server, which is widely used on the Internet, can be more easily managed and effective information protection is provided.

In order to efficiently manage the basic access control provided by the WWW server, the present invention uses Netscape, the most popular browser of the WWW, which is widely used when using the Internet, to simplify user authentication, password management, file path, and directory protection. For easy processing, CGI programming technique that can easily process the log information of WWW server is needed, and HTML (Hyper Text Markup Language) is needed to convert it into hypertext.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is an overall structure diagram of a server management. The main window is divided into a file routing module, a password management module, and a directory access protection module. Each of the three modules has sub-modules to perform WWW server management. Will be described with reference to FIGS. 2 to 4.

First, referring to FIG. 2, the file routing module determines a directory of files used by the server manager. The Server Manager program uses three files: the password file (.hypasswd), the group file (.htgroup), and the server manager's password file (.server). It is used to access a file in a directory, and provides a function that allows a user to change a directory.

Next, referring to FIG. 3, the password management module is largely divided into individual password management and group password management. The password file (.hypasswd) contains an encrypted user ID and password. The group file (.htgroup) consists of a group name and the names of users belonging to the group so that users registered in the password file can be managed as a group. It is. Using these two files, the password management module supports users' registration and deletion changes. In other words, the Common Gateway Interface (CGI) is used to access files containing users, add users, delete specified users, and change passwords. You can also add, delete, and change groups, which are groups of users, and add and delete users who belong to groups. Users changed in this way are sorted and added to the password file. These password files are used for the actual directory access control.

Next, referring to Figure 4, the access control module is a part that performs the actual access control, the host address and the host address that can be accessed using an access control file (.htaccess) in charge of access control in the WWW server Specify addresses, user IDs, and groups that are allowed access through authentication. When you first select the directory you want to control access to, the server administrator checks whether there is an existing access control file and, if there is one, reads the contents of the file and displays the previously defined contents on the screen. If no file exists, create a new access control file.

It then performs access control of the directory by providing the ability to delete or add accessible hosts, disallowed hosts, accessible users, groups, and so on.

The present invention as described above is effective password management, group management in selectively providing the WWW service using the access control function and authentication process provided by the server using the NCSA server, which is the most widely used non-commercial WWW server on the Internet By providing a directory management system, the above-described series of processes can be performed through simple input and click using a web browser on a PC without special knowledge of the system, thereby making the WWW server widely used on the Internet. It is easy to manage, and effective information protection is also expected to be possible.

Claims (2)

A file path specifying step of changing a directory of files used by a server manager by using a non-commercial World Wire Web server when using the Internet; After the file path is specified, the individual user and group user are managed using a common gateway interface (CGI) for a password file in which an individual user ID and password are encrypted and a group file for managing users registered in the password file as a group. A password management step of adding, deleting, and modifying the password and adding the password to the password file; And The WWW server uses the access control file to perform access control of the directory by providing a function of deleting or adding a user ID or group of the password file that allows access through an authentication process such as an accessible host address, an unauthorized address, and the like. Access control method of the WWW server, characterized in that consisting of an access control step. The method of claim 1, wherein the access control step If the user selects a directory to access, the server administrator checks the existence of the access control file and if there is a file, the contents of the file are read and the previously determined contents are displayed on the screen. Access control method of the WWW server, characterized in that to create a new access control file.