KR20020074662A - Apparatus and method of providing service of intercepting connection to unwholesome site by user id - Google Patents

Abstract

PURPOSE: A device and method for intercepting a harmful site is provided to perform a harmful information site interception service only for a user of an interception-objected ID selectively by supplying many user IDs to a service subscriber and setting an interception according to IDs. CONSTITUTION: A central control center supplies a control list with respect to an interception-objected harmful site and performs an integrated managing function. An access server is a POP(Point of Presence) of various access networks including an xDSL and a cable modem and decides a routing with respect to a plurality of user IDs embodied in a subscriber. A connection control network connects the central control center to interception systems located in each area. An interception system is provided between an Internet service provider and the subscriber and intercepts a harmful site connection trial of the subscriber based on an interception objected control list being supplied from the central control center. An authentication server performs an authentication function with respect to a non-interception ID user. An Internet network is connected by routers.

Description

Apparatus and method for providing access blocking service of harmful site by user ID {APPARATUS AND METHOD OF PROVIDING SERVICE OF INTERCEPTING CONNECTION TO UNWHOLESOME SITE BY USER ID}

The present invention relates to an apparatus and method for providing a harmful site blocking service for restricting access to a specific Internet site classified as a harmful information site. In particular, the present invention provides a plurality of IDs to subscribers, thereby dividing users by IDs to users of blocked target IDs. An apparatus and method for providing access blocking service of a harmful site by a user ID for applying a blocking service.

Today, the Internet is growing phenomenal enough to change the existing lifestyle and thinking paradigm. Accordingly, countries around the world are competing to revitalize the use of the Internet through the construction of high-speed networks, the development of various multimedia contents, and the expansion of competition in the telecommunications market.

While the Internet is recognized as a great place for information exchange by providing a variety of useful information, it is open to the public and does not provide a screening function for users who access each Internet site. The dysfunctional side of the Internet is also highlighted.

Currently, the harmful information blocking method is installed by using harmful information blocking software on the user's client PC, or by installing a harmful information blocking system in each school or work LAN to perform access control.

The former is primarily used at home and is managed by parents to limit access to pornography, drugs, and other harmful information sites, so if parents' computer knowledge falls short of their children, Blocking against is a defenseless state.

In the latter case, since the administrator must manage the harmful information blocking server at school or at work, waste of time and money is large, and it is not easy to have a dedicated manager.

In order to overcome this drawback, a method of providing harmful information blocking service has been devised by a network provider. However, since this method provides unconditional blocking of harmful information to the subscribers of the blocking service, the adult Equally, the same disadvantage is that the original access to the adult site of the Internet is blocked.

SUMMARY OF THE INVENTION The present invention has been proposed to solve the above-mentioned conventional problems, and an object thereof is to improve the existing method of providing a blocking service without distinguishing a user to a blocking service subscriber, thereby improving the number of users to the service subscriber. The present invention provides an apparatus and a method for providing access blocking service for a harmful site by a user ID that provides an ID and sets whether or not to block each ID, and then selectively performs a harmful information site blocking service only for the user of the blocking target ID.

1 is an overall conceptual diagram of an apparatus for providing a service for blocking access to a harmful information site according to the present invention.

Figure 2 is a detailed block diagram showing the traffic flow of the device for providing access blocking services of harmful sites by the user ID (User ID) in accordance with the present invention.

3 is a flowchart showing a method of providing a connection blocking service of a harmful site by a user ID using a device according to the present invention.

As a configuration for achieving the above object of the present invention, the apparatus for providing access blocking of a harmful site by an ID according to the present invention is located at a Point of Presence (POP) and has a Digital Subscriber Line Access Multiplexer (DSLAM) and a CMTS ( An access server (BRAS) that aggregates cable modem termination systems (CRMs), wireless headends, and FLCs (Fiber Loop Carriers) in one place and routes traffic according to user IDs;

An authentication server that performs an authentication function for non-blocking traffic authorized by an access server among a plurality of user IDs provided to subscribers such as homes, schools, and workplaces;

A harmful site blocking system composed of an L4 switch and a blocking server to perform a blocking function;

Router that routes IP traffic according to the routing policy

Characterized in that consists of.

Moreover, the service provision method using the access blocking service provision apparatus of the harmful site by the user ID comprised as mentioned above,

A first step in which a predetermined Internet subscriber subscribes to an access blocking service and receives a blocking object ID and a non-blocking object ID;

A second step of making an internet access request with an ID assigned by the user;

A third method of determining the user ID by checking the user ID by inputting the user ID from the access server, and then assigning the blocking IP if the blocking ID is used, and assigning the non-blocking IP with the non-blocking ID. Steps;

In the case of the ID to be blocked, the fourth step of determining whether the user is attempting to access the harmful information site by comparing the harmful site list with the destination URL when the user tries to access a predetermined site through the Internet. ;

If the subscriber's access point URL is included in the harmful site list, determining that an attempt is made to access the harmful information site, and transmitting a site access disable message to the subscriber's terminal;

If the subscriber's access point URL is not included in the harmful site list, allowing the site to be accessed through an Internet service provider subscribed to by the customer;

A seventh step of performing user authentication in the authentication server in case of the non-blocking target ID;

An eighth step of providing access to an Internet service provider to which the customer has subscribed if the authentication passes, and then the user surfs the Internet;

Step 9 for disallowing Internet access if authentication is not passed

Made up of

In the case of the ID to be blocked, whenever the user attempts to access the Internet site, the steps 4 to 6 are repeated.

Hereinafter, with reference to the accompanying drawings will be described in detail the configuration and operation of the apparatus and method for blocking access to the harmful information site by the user ID in the Internet according to the present invention.

1 is a conceptual diagram illustrating a system for blocking access to a harmful information site by a user ID on the Internet according to the present invention, and the access blocking system for the harmful information site currently implements a control list for a harmful site to be blocked. A central control center that provides integrated management functions, an access server that determines routing for multiple user IDs assigned to subscribers as POP points of various access networks including xDSL and cable modems, and the central control center. Access control network that connects the blocking systems installed in each region with the Internet service provider (ISP) and the subscriber, and attempts to access the harmful site of the subscriber based on the blocking target control list provided from the central control center. Blocking system to block the time and authentication function for non-blocking ID users It consists of an authentication server and an internet network connected to routers.

2 shows an access server performing routing by determining an authorized user ID to determine whether to be a blocked target ID or a non-blocked target ID, an authentication server performing an authentication function for a user of the non-blocked target ID, and a blocked target ID. It is composed of a blocking system that performs a blocking function for an Internet site access request authorized by a user, and a router that performs the routing function of Internet traffic.

The access server provides a plurality of logically divided virtual routers called contexts, each of which is allocated separate resources for packet forwarding, security, accounting and management of the connected subscriber. When the user enters a user ID in relation to the context, the access server operates as follows.

For example, assuming that a subscriber has been granted two user IDs, Child @ block, which is a blocking target ID, and Adult @ pass, which is a nonblocking target ID, the blocking context and the non-blocking context are configured in the access server.

When a user (for example, adolescent) makes an Internet connection request to Child @ block, the access server looks at the domain included in the ID (here "block") and the blocking context assigns the blocking IP address to the blocking system. To be routed.

When a user (for example, a parent) makes an Internet connection request to Adult @ pass, the access server sees the domain included in the ID (here "pass") and the non-blocking context assigns a non-blocking IP address. Enable routing to the authentication server. If the user is authenticated as a legitimate user in the authentication server, the internet is routed by routing to the ISP of the customer.

3 is a flowchart illustrating an access blocking service provided in an access blocking system of a harmful information site by a user ID according to the present invention.

As shown in FIG. 3, when an individual or a group (school or company) or the like first subscribes to a harmful site access blocking service provided by the above device (step S1), the Internet service provider blocks at the request of the subscriber. The subscriber is given a plurality of IDs including the target ID and the non-blocking target ID (step S2).

When the user wants to connect to the Internet, the user requests a connection request by inputting a user ID (step S3), and the access server checks the user ID to determine whether the ID is a blocking object ID or a non-blocking object ID.

As a result of the above, the blocking target ID is assigned to the blocking target ID (step S5) and routed to the blocking system. The blocking system determines whether the user attempts to connect to the harmful information site (step S6). If the user's connection destination URL is included in the harmful information site list, the blocking system transmits a no-access message to the user (step S9). If not, routing is performed to the Internet (step S7) to allow internet surfing (step S8). The above process is repeatedly performed while checking the user's attempt to access the harmful site until the user terminates the Internet connection (steps S6 to S9).

For the non-blocking target ID, the non-blocking target IP is allocated by the access server (step S10), and transmitted to the authentication server for user authentication. In the authentication server, user authentication is performed (step S11), the user of an unauthenticated ID is not allowed to access the Internet (step S14), and the user who passed the authentication is connected to the ISP to which the customer has subscribed (step S12). To be connected (step S13).

As described above, the present invention provides parents with their own individual IDs by accessing the Internet at different times by allowing them to pass through the Internet harmful information blocking system. Even without managing Internet access, children can effectively block access to sites that provide unwanted information. Therefore, in homes, schools, and workplaces that have subscribed to harmful information blocking services of high-speed Internet access services such as xDSL and cable modems, adult content is allowed by ID and access is controlled by minors. As a result, parents can be assured that their children can use the Internet with confidence, thereby inducing the development of the Internet industry and making the Internet more constructive and educational.

Claims (4)

An access server that checks the user ID to determine whether to be a blocked target ID or a non-blocked target ID to route traffic according to the user ID; An authentication server that performs an authentication function for a non-blocking target ID user authorized by an access server among a plurality of user IDs; A harmful site blocking system that performs a function of blocking or connecting a connection according to contents of a site to be accessed by a user of a blocking target ID; Router that routes IP traffic according to the routing policy Apparatus for blocking access to a harmful site comprising a. The apparatus of claim 1, wherein the harmful site blocking system comprises an L4 switch and a blocking server. In the method of providing a connection blocking service of a harmful site, Assigning a blocking object ID and a non-blocking object ID to an Internet subscriber; Checking the blocking target ID and the non-blocking target ID when an internet subscriber requests an internet access; And blocking access to a predetermined site of a blocking target ID. The method of claim 3, further comprising, after the ID checking step, authenticating a user with respect to the non-blocking target ID.