KR20020085301A - Method of Intercepting IP Sharer - Google Patents

Abstract

PURPOSE: A method for blocking an IP sharing device is provided to block an illegal usage of an IP sharing device by sensing a usage of an IP sharing device in a remote server, automatically transmitting an alarm page to a corresponding terminal which uses the IP sharing device when the usage is sensed, limiting a usage of the Internet, and transmitting a subscriber registration page to the corresponding terminal. CONSTITUTION: In an authentication between a server which performs a DNS service through a very high speed communication network and a user terminal, if a DNS service is requested from a user terminal(ST100), the server inquires an IP address divided from the requested packet as an IP address of a routing table(ST110). If an IP address exists in the routing table(ST120), a normal DNS service is supplied to the user terminal(ST130). If an IP address does not exist in the routing table, a DNS service of a publicizing page is performed to the user terminal(ST140). A corresponding IP address is registered in the routing and polling table of the server(ST150) and a normal DNS service is supplied(ST130).

Description

Method of Intercepting IP Sharer {Method of Intercepting IP Sharer}

The present invention relates to a method of blocking an IP router, and more particularly, to a method of blocking an IP router for monitoring illegal IP sharing of a high-speed communication network at a remote server and blocking its use.

Since the beginning of 2000, the number of subscribers has been increasing rapidly thanks to the explosive growth of high-speed Internet communication network subscribers. However, the profits of operators providing network services have not been directly proportional to the number of subscribers.

There can be many reasons for this, among other things, the loss of equipment investment and management due to the increase in overall Internet traffic caused by the use of subscriber's illegal IP router (hardware or software).

This is because a user joins a high speed internet communication network and then shares its IP with a plurality of terminals using an IP router, and illegally uses the high speed communication network even if the user does not normally subscribe to the high speed internet communication network.

As a result, an abnormal increase in Internet traffic occurs, and in good faith to normal users, and in addition, the operators of the high-speed network must increase facility investment and management manpower of the network to solve the increase in traffic.

However, the user of the illegal high-speed communication network does not recover the use amount, so the network operator cannot afford to reinvest it, resulting in damage of normal users and Internet operators.

Therefore, in view of the above problems, the present invention monitors the use of the IP router in a remote server, and if the use is recognized, automatically transmits a warning page to the corresponding terminal using the IP router and restricts the use of the Internet. In addition, the present invention relates to a blocking method of an IP router that blocks an illegal IP router by transmitting a subscriber registration page to a corresponding terminal.

1 is a diagram illustrating a network configuration of an IP sharing blocking server for blocking an IP router of the present invention high speed communication network;

2 illustrates a hardware configuration of the user terminal of FIG. 1.

3 is a diagram illustrating a hardware configuration of an IP sharing blocking server.

4 illustrates the database structure of FIG. 3;

5 is a conceptual diagram of a publicity procedure and polling process before the service is implemented to block IP sharing.

6 and 7 is a conceptual diagram of a procedure for blocking IP sharing of the present invention.

8 is a flowchart illustrating a procedure for leading to normal user registration using a publicity page before starting the IP sharing blocking service.

9 is a flow chart for a polling procedure.

10 is a flowchart of a procedure for blocking illegal use by an IP router before normal registration of a high speed communication network.

11 is a flowchart for user authentication after normal registration of a high speed communication network.

12 is a flowchart of a polling process after normal registration of a high speed communication network.

13 is a flowchart of a procedure for a normal user to block its use when using the IP router.

-Explanation of symbols for the main parts of the drawing-

100: IP router user terminal

200: general user terminal

300 divider

400: Router

500: Internet

600: IP sharing blocking server

610: transceiver 620: processor

630: engine program storage unit 640: web page storage unit

650 database

651: Polling Table Database

652: routing table database

653: management information database

654: Customer Information Database

655: agent ID database

1 is a diagram illustrating a network configuration of an IP sharing blocking server for blocking an IP router of an ultra-high speed communication network of the present invention, wherein a user terminal using an IP router (100-A, 100-B, 100-C, 100-D, ...) and the normal user terminal 200 are connected to the distributor 300, the router 300 is connected to the router 400 and the IP sharing blocking server 600.

In the present invention, the use of the high speed communication network of the IP sharer user terminal 100-A is blocked, and the IP sharer user terminals 100-B, 100-C, 100-D, ... based on this are illegal to use the high speed communication network. During use, the IP sharing blocking server 600 transmits a registration page through a push service to induce a normal subscriber.

In addition, in order to use a high speed communication network, an agent program must be installed in each user terminal, which is a program for authentication of Internet use through a high speed communication network.

Therefore, even if a high speed communication network is used through an IP router, a normal user terminal is absolutely necessary, so the agent program can be installed therein.

Before performing the subscriber authentication procedure service to block the use of the IP router, it is necessary to notify the subscriber of the existing high-speed communication network, that is, the user, and also to make the routing table database.

To this end, the blocking method of the present invention IP router,

In authentication between a server and a user terminal that performs DNS service over a high-speed communication network,

A first step of, if the DNS service request is received from the user terminal, the server querying the IP address separated from the requested packet with the IP address of the routing table;

Providing a normal DNS service to a user terminal when an IP address exists in the routing table;

A third step of DNSing a promotional page to a user terminal if an IP address does not exist in the routing table;

After performing the third process, a fourth process of performing a normal NDS service by registering a corresponding IP address in a routing and polling table of the server is performed.

Explain this.

5 and 8 are a conceptual diagram and a flow chart showing the flow performed during such a promotional period.

Therefore, when a DNS (Domain Name Service) service request is generated from the user terminal 100 or 200 (in which case the user terminal may be a normal user terminal 200 or a terminal 100 using an IP router), IP sharing is blocked. The transceiver 610 of the server 600 receives the packet requesting its DNS service and provides the packet to the processor 620.

In this case, in the high-speed communication network, each user terminal has a floating IP address, so that one IP address is allocated from the server when the subscriber terminal is booted, and the IP address is returned to the server after its use.

The processor 620 extracts an IP address of the current user terminal from the requested packet, and stores the extracted IP address in a routing table database 652 of the database 650. (ST100, ST110).

At this time, the routing table database 652 has a routing table having only IP addresses of normally registered user terminals.

If the extracted IP address exists in the routing table database 652, the processor 620 performs a normal DNS service by the routing engine 632 stored in the engine program storage unit 630 because it is a registered user (see FIG. ST120, ST130).

That is, the IP sharing blocking server 600 connects the Internet 500 to the corresponding user terminal through the distributor 300 and the router 400 so as to use the Internet using a high speed communication network.

In this case, the processor 620 performs this routing process by the routing engine 632.

On the other hand, if the extracted IP address does not exist in the routing table database 652, the processor 620 reads the promotional page 643 stored in the web page storage unit 640 and transmits and receives through the transmission and reception unit 610. The transmission is transmitted to the corresponding user terminal 100 (ST140).

Therefore, the transmitter / receiver 710 of the corresponding user terminal receives the promotion page thereof by the push service and provides it to the processor 720, and displays the display unit 740 through the web browser 733 stored in the program storage unit 730. Is displayed on the screen.

Therefore, the processor 620 registers the IP address of the user terminal whose promotional page is displayed by the push service in the routing table database 652 and the polling table database 651 (ST150).

Therefore, the user having the corresponding IP will be able to use the normal Internet using a high speed communication network.

After all, if the user terminal requests the DNS service at the beginning of such promotion service, since the routing table is empty, by performing the DNS service on the promotion page by the push service, it registers its IP address in the routing table and the polling table. The table is created, and then the normal DNS service is performed based on this.

FIG. 9 is a flowchart illustrating a process of updating a routing table and a polling table by periodically polling a user terminal provided with a DNS service by the above process during a promotion period.

In the present invention,

In the polling process between the user terminal and the server performing the DNS service in a high-speed communication network,

A first step of the server reading a specific IP address from a polling table and then polling a user terminal having the corresponding IP address;

A second step of the server maintaining the IP address information in the routing table when a response to polling from the user terminal occurs;

If there is no response to polling from the user terminal, the third process may include deleting the corresponding IP address from the routing table and the polling table.

Explain this.

The processor 620 reads the IP address from the polling table database 651 of the database 650 and polls the corresponding IP address. The polling process is performed by the polling engine 633 stored in the engine program storage 630. IP address is a normal IP address of the user terminal (ST200, ST210).

Therefore, when there is a response to polling from the user terminal having the corresponding IP address, the processor 620 is a state in which the user is continuously used to the high speed communication network, that is, the current IP address is assigned and used. The corresponding IP address information of the routing table database 652 is maintained (ST220, ST230).

On the other hand, if there is no response to polling, the user terminal terminates the DNS service or the terminal is turned off, so this is the case when the IP address is returned to the server, and the processor 620 returns the IP address. The data is deleted from the routing table database 652 (ST240).

6 and 10 are conceptual views and flow charts for a case where a DNS (Domain Name Service) service request is generated from a user terminal 100 or 200 after a promotional period has elapsed.

The first routing table has an IP address for normal DNS service, the second routing table has an IP address for DNS service, and the third routing table has an IP address for illegal user warning page. A server having an IP address to serve is provided, and a DNS service performed between a server and a user terminal through a high-speed communication network,

A first step of, if a DNS service request is received from the user terminal, the server querying the routing table for the IP address of the requested packet;

Performing a normal DNS service when the corresponding IP address exists in the first routing table;

A third step of performing a DNS service on the user terminal with an advertisement page when the corresponding IP address exists in the second routing table, deleting the corresponding IP address from the second routing table, and registering the same in the first routing table;

A third step of restricting Internet traffic by providing DNS service to the user terminal with an illegal user warning page when the corresponding IP address exists in the third routing table;

If the IP address does not exist anywhere in the first, second, or third routing table, the user registration page performs DNS service and updates the first, second, or third routing table according to the registered result. It is characterized in that performed in a fourth process.

Explain this.

Since the initial routing table is empty, the information on the user terminal requesting the current DNS service must be registered first.

To this end, first, the transceiver 610 of the IP sharing blocking server 600 receives a packet requesting a DNS service from a user terminal and provides the packet to the processor 620.

The processor 620 extracts an IP address from the packet by the routing engine 632 stored in the engine program storage unit 630, and the extracted IP address is converted into the routing table database 652 of the database 650. Inquiries are made using the IP addresses stored in the ST300 and ST310.

At this time, three routing tables exist in the routing table database 652, and IP addresses of the user terminals are created in each table as follows.

Primary Routing Table-Providing Normal DNS Service

Second Routing Table-DNS Service to Ad Pages

Third Routing Table-DNS Service Delivery to Illegal Subscriber Warning Page

Therefore, if the corresponding IP address does not exist anywhere in the first, second, and third routing tables, the processor 620 is an agent terminal of the engine program storage unit 630 because it is an unregistered user terminal. 631) transmits the subscriber registration page 644 of the web page storage unit 640 to the corresponding user terminal (ST300, ST310, ST320, ST340, ST370, ST390).

That is, a user registration page is pushed to the corresponding user terminal, and the subscriber registration page includes customer information requirements (customer information, advertisement viewing, etc.) and an agent program.

The unique ID of this agent program is requested by the agent registration engine 631 to the agent ID database 655 to be assigned.

Therefore, the agent program 731 having a unique ID will be installed in the program storage unit 730 of the user terminal, and the customer information, that is, the user information, created through the web browser 733 from the user terminal is stored in the IP sharing blocking server ( 600 will be sent and reported.

In this case, the created customer information may include a unique ID of the agent program, whether to view advertisements, information on using a router, information on an OS program being used, and the like.

Such customer information includes user information and advertisements created by the user, agent IDs reported by a pre-installed agent program, whether a router is used, and an IP address currently being used.

On the other hand, whether or not to use the router, since the agent program has information about it in advance, it is possible to find out whether or not to use the search by the program residing on the user terminal.

Accordingly, the processor 620 of the IP sharing blocking server 600 is authorized and stored in the management information database 653, the customer information database 654, and the agent ID database 655 of the database 650, respectively. do.

In this case, the processor 620 performs a user registration process by the entry engine 634 of the program storage unit 630.

The management information database 653 stores customer information, an agent ID, whether to view an advertisement, an OS being used, billing information, and the like. The customer information database 654 includes customer information and an agent ID database ( In 655, agent IDs are stored, respectively.

In addition, the first, second and third routing tables and the first and second polling tables are created.

That is, a user who normally registers is registered in the first routing table, and a user for receiving DNS service after viewing an advertisement is registered in the second routing table, and a user who is using a router or does not correctly write customer registration information. Registers in the third routing table.

Initially, this process is performed for users who require DNS services to create routing tables and polling tables.

After performing the above process, the transceiver 610 of the IP sharing blocking server 600 receives the packet requesting the DNS service from the user terminal and provides the packet to the processor 620.

The processor 620 extracts an IP address from the packet by the routing engine 632 stored in the engine program storage 630, and the extracted IP address is stored in the routing table database 652 of the database 650. Inquiries are made using the IP addresses stored in the ST300 and ST310.

Therefore, if the corresponding IP address is present in the first routing table, the processor 620 connects to the Internet to provide a normal DNS service because the IP address is a normal user terminal (ST320 and ST330).

However, if the corresponding IP address is present in the second routing table, the processor 620 reads the advertisement page 642 stored in the web page storage 640 and pushes the push service to the corresponding user terminal through the transceiver 610. Do it.

Accordingly, an advertisement page is displayed on the display unit 740 of the corresponding user terminal through the web browser 733 (ST340 and ST350).

In addition, since the user terminal on which the advertisement page is displayed is authorized to use the high-speed Internet communication network instead of watching the advertisement, the processor 620 deletes the corresponding IP address in the second routing table and then the first routing. By registering this newly in the table, normal DNS service can be performed later (ST360).

On the other hand, if the IP address exists in the third routing table, since it is an illegal user using the IP router, the warning page 641 stored in the web page storage unit 640 is read and transmitted to the corresponding user terminal through the transceiver unit 610. Perform a push service.

Accordingly, a warning page is displayed on the display unit 740 of the corresponding user terminal through the web browser 733 (ST370 and ST380).

As a result, a user terminal using an IP router blocks access to the Internet using a high-speed communication network, and a warning page is displayed instead.

Finally, if the IP address is not registered anywhere in the first, second, and third routing tables, the processor 620 performs a DNS service to the subscriber registration page of the web page storage unit 640, and the subscriber registration page thereof. DNS service is performed by the agent registration engine 631 of the engine program storage unit 630 (ST390).

Therefore, the above-described subscription procedure by the subscriber registration page and update process of the routing table and the polling table (ST300, ST310, ST320, ST340, ST370, ST390) are performed.

7 and 11 are a conceptual diagram and flowchart of a procedure for authenticating a user terminal by creating a user registration page provided to the user terminal by the agent registration engine 631 on the web browser 733 and installing the agent program. to be.

This eliminates the inconvenience of having to be authenticated every time when a normal user uses a high-speed communication network, and implements automatic authentication for use.

In the present invention,

An agent program for providing hardware information of a user terminal to a server is installed in the user terminal.

A first step of the server inquiring the agent ID into the customer information database when the agent ID and the information of the user terminal are received from the agent program;

If the agent ID exists in the customer information database, updating the hardware information, the routing table, and the polling table corresponding to the agent ID according to the received hardware information;

A third step of not performing an agent registration process if an agent ID does not exist in the customer information database;

If there is a DNS service request from the user terminal after performing the second or third process, the fourth process performs a normal DNS service.

Explain this.

When the user terminal is booted, the processor 720 of the user terminal transmits the agent ID and hardware information to the IP sharing blocking server 600 through the transceiver 710 by the agent program 731 stored in the program storage unit 730. Provided (ST400).

In this case, the hardware information may be customer information, whether to view an advertisement, whether to use a router, an IP address being used, or the like.

The processor 620 of the IP sharing blocking server 600 receives this and determines whether the agent ID exists in the customer information database 654 of the database 650. If the agent ID exists, a normal user exists. Since the terminal, the hardware information received in the corresponding table of the management information database 653 is updated.

It also updates the first and second routing tables of the routing table database 652 and the first and second polling tables of the polling table database 651.

This is for immediately updating the hardware information of the user terminal when it is changed (ST410, ST420, ST430).

On the other hand, if the agent ID does not exist, it is determined that the agent program is an illegal program that does not have its own ID (for example, when an agent program installed in one user terminal is copied and used by multiple user terminals). 620 transmits the subscriber registration page 644 to the user terminal by the agent registration engine 631 to induce formal subscription (ST440).

After the authentication of the user terminal is completed by the above process, if there is a DNS service request from the user terminal, the IP sharing blocking server 600 may provide a normal DNS service to the user terminal by the first or second routing table. (ST450, ST460).

When the above process is performed by the processor 620, the process is performed by the entry engine 634 of the engine program storage unit 630.

7 and 12 are conceptual diagrams and flowcharts of a process for polling a user terminal after an agent program is installed in the user terminal.

In the present invention,

An agent program for providing hardware information of a user terminal to a server is installed in the user terminal.

A first step in which the server reads the IP address and the agent ID from the polling table and polls the corresponding IP address and the agent ID;

A second step of the server maintaining the IP address and the agent ID information of the routing and polling table when there is a response to polling from the user terminal;

If there is no response to polling from the user terminal, the server performs the third process of deleting the IP address and the agent ID information of the routing and polling table.

Explain this.

The polling engine 633 causes the processor 620 to read IP address and agent ID information from the polling table database 651 of the database 650 (ST500).

At this time, the first polling table includes an agent program installed in the user terminal in advance to determine whether the agent program is normally operating between the polling engine 633 of the IP sharing blocking server 600 and the agent program 731 of the user terminal. ID is databaseized.

In addition, in the second polling table, the polling engine 633 of the IP sharing blocking server 600 periodically polls the IP address of the user terminal to determine whether the user terminal is operating normally. The IP address being used is databaseized.

Therefore, the IP sharing blocking server 600 polls the corresponding user terminal and the agent program by the polling engine 633 and checks whether there is a response to the polling (ST510, ST520).

If a response to polling occurs from the user terminal and the agent program, this is a normal operation. Therefore, the IP address and agent ID information of the routing table database 652 and the polling table database 651 are maintained in the current state. On the other hand, if there is no response to polling, the IP address and agent ID information of the routing table database 652 and the polling table database 651 are deleted (ST530 and ST540).

7 and 13 are conceptual diagrams and flowcharts illustrating a process in which an agent program installed in a user terminal monitors a user terminal and periodically provides monitoring information to the IP sharing blocking server 600.

In the present invention,

An agent program for providing hardware information of a user terminal to a server is installed in the user terminal.

A server having an IP address for performing normal DNS service in the first routing table and an IP address for performing DNS service in accordance with an illegal user warning page by IP sharing is provided in the third routing table, and an ultra-high speed between the server and the user terminal is provided. DNS service provided through a communication network,

A first step of determining whether to use the IP router from the monitoring information of the user terminal from the agent program of the user terminal;

When the use of the IP router is confirmed, a second process of deleting the corresponding table from the first routing table and registering it in the third routing table is performed.

Explain this.

The processor 620 of the IP sharing blocking server 600 periodically receives information of the user terminal from the agent program 731 installed in the user terminal, and then determines whether to use the IP sharing program. If determined, the corresponding table is deleted from the first routing table of the routing table database 652 (ST600, ST610, and ST620).

That is, even a normal subscriber does not provide a normal DNS service because it is illegal to use an IP router.

In this case, the agent program 731 may have hardware or software information about the IP router in advance, and periodically search for the resident program of the user terminal and provide the same to the IP sharing blocking server 600.

Thereafter, the processor 620 registers the IP address of the user terminal in the third routing table to perform the DNS service on the illegal subscriber warning page (ST630).

After all, even if you are a normal user, if you use an IP router, DNS service will be blocked.

The apparatus and method for blocking the IP router of the present invention have the following effects by restricting the use of the high speed communication network of a user terminal using an illegal IP router by connecting a normal high speed communication network to the user terminal by authenticating only the user terminal.

1) It prevents the intentional damage of normal users due to the increase of network traffic.

2) Guarantee the legitimate interests of network operators.

3) Additional revenue is generated by providing the advertising page to the user through a push service.

Claims (11)

In authentication between a server and a user terminal that performs DNS service over a high-speed communication network, A first step of, if the DNS service request is received from the user terminal, the server querying the IP address separated from the requested packet with the IP address of the routing table; Providing a normal DNS service to a user terminal when an IP address exists in the routing table; A third step of DNSing a promotional page to a user terminal if an IP address does not exist in the routing table; And after performing the third process, performing a fourth process of registering a corresponding IP address in a routing and polling table of a server to provide a normal DNS service. In the polling process between the user terminal and the server performing the DNS service in a high-speed communication network, A first step of the server reading a specific IP address from a polling table and then polling a user terminal having the corresponding IP address; A second step of the server maintaining the IP address information in the routing table when a response to polling from the user terminal occurs; And if there is no response from the user terminal for the polling, performing the third process of deleting the corresponding IP address from the routing table and the polling table. It has an IP address for normal DNS service in the first routing table, an IP address for DNS service by an advertisement page in the second routing table, and DNS by an illegal user warning page by IP sharing in the third routing table. A server having an IP address to serve is provided, and a DNS service performed between a server and a user terminal through a high-speed communication network, A first step of, if a DNS service request is received from the user terminal, the server querying the routing table for the IP address of the requested packet; Performing a normal DNS service when the corresponding IP address exists in the first routing table; A third step of performing a DNS service on the user terminal with an advertisement page when the corresponding IP address exists in the second routing table, deleting the corresponding IP address from the second routing table, and registering the same in the first routing table; A fourth step of restricting Internet traffic by providing DNS service to the user terminal with an illegal user warning page when the corresponding IP address exists in the third routing table; If the IP address does not exist anywhere in the first, second, or third routing table, the user registration page performs DNS service and updates the first, second, or third routing table according to the registered result. Blocking method of the IP router, characterized in that performed in a fifth process. 4. The method of claim 3, wherein the first, second, and third routing tables are created by subscriber information provided from a user terminal. 5. The method of claim 3 or 4, wherein the third routing table is created by IP router usage information provided from a user terminal. An agent program for providing hardware information of a user terminal using a high speed communication network to a server is installed in the user terminal. A first step of the server inquiring the agent ID into the customer information database when the agent ID and the information of the user terminal are received from the agent program; If the agent ID exists in the customer information database, updating the hardware information, the routing table, and the polling table corresponding to the agent ID according to the received hardware information; A third step of not performing an agent registration process if an agent ID does not exist in the customer information database; If there is a DNS service request from the user terminal after performing the second or third process, the blocking method of the IP router, characterized in that performed as a fourth process of performing a normal DNS service. The method of claim 6, wherein the agent registration process of the third process comprises: Receiving the customer information from the agent program installed in the user terminal and updating the routing table and the polling table. An agent program for providing hardware information of a user terminal using a high speed communication network to a server is installed in the user terminal. A first step in which the server reads the IP address and the agent ID from the polling table and polls the corresponding IP address and the agent ID; A second step of the server maintaining the IP address and the agent ID information of the routing and polling table when there is a response to polling from the user terminal; If there is no response from the user terminal to the polling, the server performs the third process of deleting the IP address and the agent ID information of the routing and polling table. An agent program for providing hardware information of a user terminal using a high speed communication network to a server is installed in the user terminal. A server having an IP address for performing normal DNS service in the first routing table and an IP address for performing DNS service in accordance with an illegal user warning page by IP sharing is provided in the third routing table, and an ultra-high speed between the server and the user terminal is provided. DNS service provided through a communication network, A first step of determining whether to use the IP router from the monitoring information of the user terminal from the agent program of the user terminal; If the use of the IP router is confirmed, deleting the corresponding table from the first routing table and registering the same in the third routing table. 10. The method of claim 9, wherein the agent program has hardware or software information about the IP router. Agent program to monitor user terminal is installed in user terminal using high speed communication network and receives hardware or software usage status of user terminal from IP sharing blocking server when requesting DNS service from user terminal or periodically from agent program. Blocking the IP router, characterized in that to block the DNS service by updating the routing table when using the IP router.