KR20030061143A - Contents filtering technique and system - Google Patents

Abstract

PURPOSE: A method and system for filtering contents is provided to filter contents according to subscribers using an IP address designated in accordance with a predetermined method. CONSTITUTION: A filtering server(505) is connected to an ISP(Internet Service Provider)(500) and the Internet(530). If a subscriber terminal is connected to the Internet(530) through the ISP(500) and the filtering server(505), the filtering server(505) supplies a blocking service to the subscriber terminal. A filtering distribution server(510) extracts an IP in contents request information of each subscriber, and discriminates a subscriber terminal which requested a filtering service and a subscriber terminal which does not go through the filter. The filtering distribution server(510) stores blocking site information in a database(525) and deletes the blocking site, whose service is stopped, from the database(525). A search engine periodically searches the blocking site information in the Internet. The filtering distribution server(510) receives an IP address of the subscriber terminal from the ISP(500), discriminates a subscriber terminal which requested the filtering using a floating IP, and supplies a filtering service to the subscriber terminal. The search engine(535) visits sites, collects information with respect to newly created harmful sites, compares the sites stored in the database(525) corresponded to each filter, and periodically updates a blocking site list stored in the database(525). If the subscriber terminal requests a site included in the database(525) combined with a filter(520), the filter(520) blocks a connection to the blocking site of the subscriber terminal.

Description

Content filtering technique and system {CONTENTS FILTERING TECHNIQUE AND SYSTEM}

The present invention relates to a method and a system for filtering content, and more particularly, to a method and a system for filtering content by subscribers using an IP address assigned according to a predetermined method for each subscriber.

Nowadays, thanks to the popularization of the Internet, Internet access through the network is a big part of life. As the life of modern man is enriched through such internet, various damages are occurring. Anyone can easily access the information through the Internet called the sea of information, while it can easily access harmful information such as pornography, gambling, and suicide sites, and there is a risk of hacking even in security and other problems.

With the development of information and communication technology, devices such as ADSL and cable modems can now be easily accessed from the home. In many homes, Internet users can connect to the Internet and receive the information they want, but such information includes undesirable information, such as illegal pornography. Therefore, it is very urgent to block such information, and various solutions have been developed for this purpose.

These solutions can be divided into two categories: client solutions that run on PCs in each home, and server solutions that block illegal information from Internet Service Providers (ISPs).

1 is a diagram illustrating a method for filtering with an existing client solution.

1 schematically illustrates a conventional harmful information blocking method when filtering by a client. The blocking solution operating in the existing client is composed of the filtering server 100, the terminal 115 and the network 130.

The filtering server 100 is composed of a search engine 105 and a malicious site database 110. The search engine 105 periodically searches for harmful sites, and builds a harmful site database by using information on the searched harmful sites.

The filtering program 120 is installed in the terminal, and the filtering program 120 refers to the harmful site information 125 and serves to block the harmful site when accessing the harmful site. As described above, in the method of blocking access to the harmful site by the client solution, the terminal 115 periodically accesses the filtering server 100 and downloads the updated harmful site information.

In addition, since the filtering program 120 passes the process of determining whether the subscriber is blocked compared to the harmful site information 125 every time the subscriber accesses the Internet, the filtering program 120 burdens the terminal and thus lengthens the site access time. exist.

In the harmful site blocking method by the client solution according to the related art, since the filtering server 100 continuously constructs the harmful site database through the harmful site search and storage, a large number of harmful information sites must be added every day. Therefore, there is an inconvenience that the terminal 115 needs to continuously download the constructed harmful information site.

Recently, in order to solve the problem caused by the limitation of the client solution, the ISP (Internet Service Provider) has been sought for a method of blocking illegal information.

2A is a diagram illustrating a method of performing filtering on all existing subscribers.

Referring to FIG. 2A, a method for performing filtering on all existing subscribers includes a terminal 200, an Internet Service Provider (ISP), a filtering server 210, and an internet 255.

The filtering server 210 performs filtering on all terminals connected to the Internet Service Provider (ISP). That is, in order to access the Internet 255 via an Internet Service Provider (ISP), the filtering server 255 must go through. The above method cannot distinguish between subscribers who want to block and subscribers who do not. In addition, a problem arises that the filtering server is burdened and the Internet connection speed is significantly reduced.

2B is a diagram illustrating a method of performing selective filtering through separation of conventional traffic.

Traffic is the load on any communication device or system. Because traffic is a very general term, it is also used to describe the amount of data moving through the network or the amount of transactions and messages of any kind.

Referring to FIG. 2B, a method of performing selective filtering through separation of existing traffic includes a terminal 250 via a filtering server, a terminal not via a filtering server, an Internet Service Provider (ISP), a filtering server ( 210 and the Internet 255.

Terminals 250 and 255 connected to an ISP (Internet Service Provider) set up a private virtual circuit (PVC) corresponding to the terminals 250 and 255 to separate traffic, and then the traffic of subscribers to be blocked. Perform filtering on.

The selective filtering needs to modify an existing network configuration, and requires additional equipment when supporting various service types.

This selective filtering should be determined by the ISP's network equipment to perform filtering for each Internet access request of the subscriber. In case of an ISP using an ATM switch, it is possible to consider a method of separating the traffic of the subscriber who wants to be blocked from the traffic of the subscriber that is not desired to perform filtering on all traffic of the subscriber who wants to be blocked. However, such a method of separating the source of traffic has a disadvantage in that the configuration of the network is already established, and there may be a case where the separation of traffic is not possible due to the configuration of the network and the characteristics of the equipment. Therefore, there is a need for a method capable of performing selective filtering of subscribers without changing the current network configuration as much as possible and without significantly affecting network performance.

In addition, there is a method of performing selective filtering by allocating a fixed IP to an existing terminal. In the case of having the above fixed IP (IP), the Internet performance is accompanied by a process of determining whether or not to block each IP, so the search performance is notably reduced, and each Internet Service Provider (ISP) currently holds Given the number of IP addresses that are present, it is unreasonable to assign a fixed IP to all subscribers.

As described above, when blocking illegal information in an ISP, a method of blocking illegal information for all service subscribers and a case of blocking only illegal service information can be considered. However, there is a need for a solution that provides a blocking service only for subscribers who want to block according to the opposition of many netizens who claim freedom of Internet information access, but there is no harmful site blocking method that satisfies this.

Accordingly, an object of the present invention is to provide a content filtering method, a system method, and an apparatus.

In addition, an object of the present invention is to eliminate the problem that the terminal should periodically access the filtering server to download the updated harmful site information.

In addition, an object of the present invention is to eliminate the hassle that the filtering program has to go through the process of determining whether to block the block compared to the harmful site information whenever the subscriber accesses the Internet.

It is also an object of the present invention to provide a method for performing selective filtering on a subscriber without changing the current network configuration and without significantly affecting network performance.

It is also an object of the present invention to provide a method capable of providing selective filtering to subscribers while efficiently utilizing limited IP resources.

In addition, an object of the present invention is to provide a method that does not cause a decrease in the Internet connection speed by reducing the burden on the server while passing through the filtering process in the server.

In addition, the present invention is to provide a method for selecting a variety of harmful information blocking services to subscribers by providing a list of various blocking sites.

1 illustrates a method of filtering with an existing client solution.

2A illustrates a method of performing filtering for all existing subscribers.

2B illustrates a method of performing selective filtering through separation of conventional traffic.

3 is a schematic representation of an entire system according to one preferred embodiment of the present invention.

4 is a view showing the structure of the Internet Service Provider (ISP) according to a preferred embodiment of the present invention.

5 is a diagram showing a detailed structure of a filtering server according to an embodiment of the present invention.

6A illustrates a table in an IP address area according to a preferred embodiment of the present invention.

FIG. 6B is a diagram illustrating a table for detailed items of a service type according to a preferred embodiment of the present invention. FIG.

FIG. 7A illustrates information stored in a subscriber database in accordance with one preferred embodiment of the present invention. FIG.

7B is a diagram illustrating a subscriber interface screen for time zone setting according to a preferred embodiment of the present invention.

8 is a diagram illustrating a procedure of receiving an IP by accessing a server according to an exemplary embodiment of the present invention.

9 is a diagram illustrating a procedure for accessing the Internet via a filtering server according to a preferred embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

300: subscriber terminal

302: network connection device

305: ISP (Internet Service Provider)

310: filtering server

410: authentication server

500: filtering distribution server

540: search engine

505, 515, 530: Security Filter

In order to achieve the above objects, according to the present invention, there is provided a recording medium that contains a content filtering method, a system corresponding to the method, and a program capable of performing the method.

According to another embodiment of the present invention, in a method for filtering content in an IP server coupled with a subscriber station, an authentication server, a filtering server, and an IP allocation server, receiving an IP server access request signal from the subscriber station Wherein the ISP server access request signal includes subscriber identification information, extracting the subscriber identification information from the ISP server access request signal, generating an authentication request signal including the subscriber identification information, Transmitting the authentication request signal to the authentication server, receiving blocking service information from the authentication server, generating an IP address allocation signal including the blocking service information, and transmitting the IP address allocation signal to the IP allocation server. Transmitting to the IP, the IP allocation Comprising the step of receiving the IP address from the server, sets the IP address of the access terminal to the received one IP address, in response to the service block may be assigned a pre-IP zone.

According to another embodiment of the present invention, the subscriber identification information may include an ID and a password, and the blocking service is preferably at least one of harmful information and security. In addition, the harmful information is preferably at least one of adult content, gambling, violence, securities information.

In addition, the blocking service may be specified for each time by the blocking service selection signal received from the subscriber station, and receiving the blocking service change signal from the subscriber station-wherein the blocking service change signal is a blocking service to be changed Information is included, extracting the blocking service information to be changed from the blocking service change signal, transmitting an IP allocation request signal including the blocking service information to the IP allocation server, and receiving an IP address from the IP allocation server. Receiving, including setting the IP address of the subscriber station to the received IP address, wherein the assigned IP can be changed in real time at the request of the subscriber terminal.

In another preferred embodiment, the method may further include receiving a blocking service change password, and transmitting the authentication request signal to the authentication server, and determining whether to change the blocking service using the received blocking service password. can do.

The method may further include receiving a site access request signal from the subscriber station, wherein the site access request signal includes a subscriber station IP address and a site address to be accessed, and transmitting the received site access request signal to a filtering server. Here, the filtering server determines whether to block using the subscriber terminal IP address and the site address. If the site address matches the blocked site stored in the blocked site database coupled to the filtering server, Receiving an access blocking signal from a filtering server, transmitting an access blocking message to the subscriber terminal, and if the site address does not match a blocking site stored in a blocking site database coupled to the filtering server, Filtering server Receiving content information corresponding to the site from the subscriber terminal; receiving the content information at the subscriber terminal, wherein the plurality of filters coupled to a filtering server have an internet address of the subscriber terminal having an IP address corresponding to the filter. You can block the connection.

In another preferred embodiment, a method for filtering content in a filtering server coupled to a subscriber terminal and an ISP server, the method comprising: receiving a site access request signal from the ISP server at a transceiver coupled to the filtering server; The site access request signal includes a subscriber station IP address and a site address to which the user wants to connect. The step of outputting the site access request signal from the transceiver to the filtering distribution server coupled to the transceiver, wherein the filter server accesses the site. Extracting a terminal IP address and a site address from a request signal, and outputting the site address to a filter that is pre-specified corresponding to the terminal IP address and coupled to the filter server, in the filter, to the filter Combined Database Comparing the blocked site list and the site address stored in the controller; if the site address is included in the blocked site list, outputting a signal corresponding to the blocked site to the filtering distribution server; and filtering the filter distribution server. Outputting a connection blocking signal to a transmitting / receiving device coupled to a server, wherein the transmitting / receiving device transmits a connection blocking signal to the ISP server; and, as a result of the comparison, if the site address is not included in the blocked site list, Outputting a per-site signal per blocking site to the filtering distribution server, generating a content request signal by the filtering distribution server, and outputting the content request signal to the transmission / reception device by the filtering server. The content request signal to the content request signal Transmitting to the site corresponding to the transmission, receiving and receiving the content information from the site, outputting the content information to the transmission and reception device coupled to the filter server, the transmission and reception device is the content And transmitting information to the IP server, and the filter coupled to the filtering server may block internet access of a subscriber station having an IP address corresponding to the filter.

In addition, the blocking service is preferably at least one of harmful information and security, the harmful information is preferably at least one of adult content, gambling, violence, securities information.

In addition, the blocking service may be specified for each time by the blocking service selection signal received from the subscriber station, the site access request signal may preferably include a subscriber station IP address and a site address to be accessed.

Hereinafter, a preferred embodiment of a content filtering method and apparatus according to the present invention will be described in detail with reference to the accompanying drawings.

3 is a diagram schematically showing an entire system according to an exemplary embodiment of the present invention.

Referring to FIG. 3, the present invention includes a subscriber station 300, a network access device 302, an ISP, an Internet Service Provider (305), and a filtering server 310. Through the above configuration, the subscriber station 300 may access the Internet 315.

The subscriber terminal 300 includes all terminals capable of connecting to the Internet through wired or wireless communication such as a general computer, a PC, a mobile phone with a network connection, and the like.

The network access device 302 performs a function of allowing the subscriber station 300 to access an Internet Service Provider (ISP) 305, a cable modem or a digital subscriber line (DSL). Modem, AT switch, etc. can be used.

The cable modem is a modem developed for high-speed data transmission using coaxial cable of general cable broadcasting (CATV). There is no standard way for cable modems, so there are many today. In general, the downlink sending data from the wired station to the user is high speed, and the uplink sent from the user side to the wired station is asymmetric. The transmission speed of the downlink is 6 to 30Mbps, and the uplink is generally 1.5 to 3Mbps.

And Digital Subscriber Line (DSL) modems are needed to connect to networks over ordinary copper telephone lines. Digital Subscriber Line (DSL) is a method of exchanging compressed data using existing telephone lines, which is slower than high-speed Internet, but has little advantage for auxiliary equipment. Digital Subscriber Lines (DSLs) include xDSLs, which refer to different variants of Digital Subscriber Lines (DSLs) such as ADSL, HDSL and RADSL.

Asynchronous Transfer Mode (ATM) is a modem used for the communication method of the asynchronous transfer mode. Asynchronous Transfer Mode (ATM) is a dedicated-connection switching technology that divides digital data into 53 bytes of cells or packets and transmits them through a medium using digital signal technology. One cell is individually processed asynchronously with respect to the other cells and placed in a queue for multiplexing for circuit sharing.

ISP (Internet Service Provider) 305 refers to companies that provide Internet access services, website construction and web hosting services to individuals or companies. To this end, Internet Service Providers (ISPs) have the equipment and communication lines necessary for Internet access, while large Internet Service Providers (ISPs) are less dependent on their telephone network operators and offer better services to their customers. They also have their own high-speed leased lines to provide.

According to the present invention, the Internet Service Provider (ISP) allocates one IP of a predetermined IP area to a subscriber station according to a blocking service, and passes a filtering process in a filter corresponding to the allocated IP. By doing so, it reduces the load on the server and serves to provide various blocking services to the subscriber.

The Internet Service Provider (ISP) includes an IP server, a Dynamic Host Configuration Protocol (DHCP) server, an authentication server, an IP area database, and a subscriber database, which will be described in detail with reference to FIG. 4.

The filtering server 310 distributes the filtering process for the Internet access request from the subscriber station so that the filtering process is performed only for the predetermined list in the filter. In addition, the search engine coupled to the filtering server periodically updates the blocked site list.

The filtering server 310 includes a filtering distribution server, a filter corresponding to each IP region, and a search engine that periodically searches for blocked sites. A detailed description of the filtering server 310 will be provided with reference to FIG. 5.

According to the present invention, by classifying blocked sites corresponding to each IP area, the filtering burden of the server can be distributed to increase the harmful information blocking efficiency and the Internet access speed. (The classification of the blocked sites is illustrated in FIGS. 6A and 6B. Reference)

4 is a view showing the structure of an ISP (Internet Service Provider) according to an embodiment of the present invention.

Although illustrated as a component according to a function for the purpose of understanding the invention, the component may be implemented programmatically in a memory in an ISP server so that the ISP server may implement functions such as an IP allocation function, an authentication function, and a filtering function. Of course it is.

4, the present invention will be described for each module according to each function.

Referring to FIG. 4, the server server 400 includes an IP server 400, a Dynamic Host Configuration Protocol (DHCP) server 405, an authentication server 410, an IP area database 415, and a subscriber database 420. And a network connection device 430 and a filtering server 435.

The ISP server 400 is a remote access server (RAS), and the remote access server refers to a server to which the subscriber terminal can access the server from a remote place. In the enterprise, people in branch offices, those who work from home, and those on business trips need to connect to the company's network. Home subscribers access the Internet through this server provided by an Internet service provider.

In accordance with the present invention, it is preferred that the Internet Service Provider (ISP) server is a broadband remote access server.

Dynamic Host Configuration Protocol (DHCP) server 405 is a protocol that allows network administrators to centrally manage and assign IP addresses on networks within an organization. In the TCP / IP protocol of the Internet, each computer must have a unique IP address to access the Internet.

When computer subscribers in the organization access the Internet, an IP address must be assigned to each computer. If you are not using Dynamic Host Configuration Protocol (DHCP), you must manually enter an IP address for each computer and enter a new IP address if the computers are moved to a different part of the network. . Dynamic Host Configuration Protocol (DHCP) server 405 is a network administrator centrally manages and assigns IP addresses, and automatically sends new IP addresses when the computer is connected to other places in the network.

Of course, by assigning a unique IP according to the type of blocking service provided by the present invention, it is of course possible to provide a blocking service corresponding to the IP address. However, in consideration of efficient use of IP resources, it is desirable to allocate a floating IP using a Dynamic Host Configuration Protocol (DHCP) server.

In addition, it is possible to implement the present invention by providing a static address for a web server, such as a company that requires a permanent IP address, and by providing a floating IP to a terminal such as a general individual.

The authentication server 410, it is preferable to use generally known eyidi US children (RADIUS, Remote Authentication Dial-In User Service). After the subscriber accesses the remote access server 400, the authentication server 410 identifies a subscriber station connected through subscriber authentication, and extracts a blocking service corresponding to the identified subscriber station.

Thereafter, the IP address may be extracted from a predetermined IP area corresponding to the blocking service, and the IP address corresponding to the IP blocking area designated by the subscriber may be assigned to perform a filtering process according to the IP address.

An IP area database 415 is coupled to the Dynamic Host Configuration Protocol (DHCP) server, and the ID area database 415 corresponds to an IP corresponding to a blocking service provided by a preferred embodiment of the present invention. The area is saved.

Thereafter, the Internet Service Provider (ISP) assigns an IP address to the subscriber terminal connected to the Internet Service Provider (ISP) by referring to the IP region database (floating IP). (As shown in FIG. 6A)

The subscriber database 420 basically stores the subscriber's ID, password, and information on the blocking service designated by the subscriber. Of course, in addition to the above information, additional services for subscribers including address, telephone number, hobby information are possible.

5A and 5B illustrate the structure of a filtering server according to the present invention. The filtering server may be implemented separately from the ISP server as shown in FIGS. 5A and 5B, and may be implemented programmatically in the ISP server. Hereinafter, FIGS. 5A and 5B illustrate independent components for each function for convenience of description of the invention and will be described with reference to this. However, it is obvious that the present invention is not limited to the structure shown in the drawings.

5A is a diagram illustrating a structure of a filtering server according to an exemplary embodiment of the present invention.

Referring to FIG. 5A, a filtering method according to an IP address is illustrated.

The filtering server 505 according to the present invention includes a filtering distribution server 510, a search engine 535, and a filter 520, and the filter includes a database in which information of blocked sites corresponding to the filter is stored ( 525 are combined.

The filtering server 505 is combined with the Internet Service Provider (ISP) 500 and the Internet 530 so that the subscriber terminal is connected to the Internet Service Provider (ISP) 500 and the filtering server 505. Performs a function of providing a blocking service to the subscriber terminal when accessing the Internet via the.

The filtering distribution server 510 may extract the IP from the content request information of each subscriber, and identify the subscriber terminal requesting the filtering service using the IP and the subscriber terminal accessing the Internet without passing through the filter.

The filtering distribution server 510 stores the blocked site information that the search engine 535 searches on the Internet periodically in the database 525, and deletes the blocked site from the database 525 when the service is stopped. do.

The filtering distribution server 510 receives an IP address of the subscriber station from an Internet Service Provider (ISP) 500, identifies a subscriber station requesting filtering by the floating IP, and filters at the subscriber station. Can provide services.

The search engine 535 visits sites that are created and destroyed at any time on the Internet, collects information on newly generated harmful sites, and compares the sites stored in the database 525 corresponding to each filter, thereby providing the database 525. Update the list of blocked sites stored at) periodically.

If the database 525 coupled to the filter 520 includes a site for requesting access from the subscriber station, the filter 520 blocks the access to the blocking site of the subscriber station.

Although FIG. 5A has a structure for determining only filtering based on an IP address, the filter is subdivided as shown in FIG. 5B to shorten the filtering time and provide various filtering functions. That is, while FIG. 5A provides a service for filtering or not, FIG. 5B may provide a service for selecting various filtering items such as gambling, pornography, and a securities site.

5B is a diagram illustrating the structure of a filtering server according to another exemplary embodiment of the present invention.

Referring to FIG. 5B, the filtering server 555 includes a filtering distribution server 560, a search engine 597, and a plurality of filters, and a database corresponding to the filter is coupled to the plurality of filters.

The filtering server 555 is combined with an Internet Service Provider (ISP) 550 and the Internet 599 so that the subscriber terminal is connected to the Internet Service Provider (ISP) 550 and the filtering server 555. It performs a function of providing a predetermined blocking service to the subscriber terminal when accessing the Internet via.

The filtering distribution server 560 extracts the IP from the content request information of each subscriber and distributes the content request signal of each subscriber to each filter so as to pass through the filter corresponding to the IP. The plurality of filters 570, 580, and 590 block the list of blocked sites stored in the databases 575, 585, and 595 coupled to the filters 570, 580, and 590 and the site addresses extracted from the content request signal. Determine.

The filtering distribution server 560 distributes and stores the blocked site information that the search engine 597 periodically searches on the Internet to the databases 575, 585, and 595 corresponding to the filters 570, 580, and 590. In addition, the blocked site where the service is stopped performs a function of deleting from the databases 575, 585, and 595.

The filtering distribution server 560 receives an IP address of the subscriber station from an Internet Service Provider (ISP) 550 and blocks access to a site designated to the subscriber station by using a filter corresponding to the floating IP. do. That is, the filtering distribution server 560 distributes the content filtering process according to the subscriber terminal to a plurality of filters in a predetermined manner, thereby reducing the burden on the filtering server, shortening the network access time, and providing various blocking services. can do.

The search engine 597 visits sites that are created and destroyed on the Internet at any time, collects information about newly generated harmful sites, and compares sites stored in the databases 575, 585, and 595 corresponding to each filter. The list of blocked sites stored in the databases 575, 585, and 595 is periodically updated.

The filters 570, 580, and 590 that perform a filtering function corresponding to the IP address of the subscriber station are distributed according to the blocking service type.

Filter 503 includes NO filtering 565, pornographic filter 570, gambling filter 580. Security filter 590 or the like. A subscriber station having an IP address belonging to an IP area belonging to the NO filtering 565 accesses the Internet 599 without passing through the filter.

If the database 575, 585, 595 coupled to the filter 570, 580, 590 includes a site for requesting access from the subscriber station, the filter 570, 580, 590 is selected from the subscriber station. We block access to blocking site.

According to a preferred embodiment of the present invention, the filter 570, 580, 590 performs only content filtering corresponding to a predetermined IP region, unlike performing uniform content filtering as shown in FIG. 5A. The granular filter as shown in FIG. 5B can provide a variety of selection opportunities to consumers and at the same time reduce the burden on the server and reduce the transmission speed due to filtering.

In addition, the plurality of filters may include a security filter.

Although the present invention has been described on the basis of the floating IP, it can be implemented by a fixed IP allocation method, the security IP in the case of the need for greater security. In recent years, there are many cases of building a server using a floating IP, and even in this case, a security problem may occur. In such a case, the filtering server may include a security filter, thereby serving as a firewall.

That is, the blocking service provided by the present invention may provide a blocking service for a connection request coming in from the outside as well as an access request from the inside to the outside.

According to the present invention, the filtering distribution server 560, if there is a request for access from the outside to the subscriber terminal to which the IP assigned to the security area in the IP area, the IP address of the terminal requesting the connection in the access request signal By extracting and determining whether the extracted IP address corresponds to a block list, it may provide a security function.

6A is a table illustrating IP address areas according to an embodiment of the present invention.

Referring to FIG. 6A, an IP area is previously designated according to a service provided by the present invention. The IP distribution scheme illustrated in FIG. 6A is distributed by the current IP allocation scheme, but is not limited to the current IP allocation scheme, and it is obvious that the IP distribution scheme may be applied to an IP allocation scheme that is not commercialized.

The current general IP allocation scheme is described below.

The IP address is required to access the Internet using the TCP / IP protocol. It is a unique identification number expressed in 32-bit numbers that identifies machines (computers) connected to the Internet. Currently, the IP address on the Internet uses 32-bits scheme as Internet Protocol version 4 (IPv4), and 32-bits is composed of a network part and a host part, and FIG. 6A is a table exemplified on the assumption of IPv4.

According to the length of the network part, A, B, C, D, and E classes are divided into five types. A, B and C classes are used for network configuration, and D class is used for IP multicast. (multicast backbone, MBONE) It is used for relaying, and the E class is used for experimentation.

Therefore, IP addresses actually used are class A, class B and class C, and the number of hosts that can be connected to each network varies. Here, in the C class, the first 3 bits of the 32 bits are 110, the 24 bits are the network part, and the 8 bits are the host part. The number of C classes is 2,097,150 (192.0.1.0 ~ 223.255.254.255), and the number of hosts that can be connected to one C class network is 254.

Referring to FIG. 6A, the IP has an IP address corresponding to one C class, and the IP address of the IP is 211.40.177.0.

IP addresses assigned to the host range from 211.40.177.10 to 211.40.177.255, and IP addresses to be assigned to the host are classified according to the service type according to the present invention.

In FIG. 6A, an IP area is allocated to NO filtering, harmful information, security, etc., and an IP area for filtering security and pornography at the same time may be allocated.

In addition, the harmful information in Figure 6a can be further broken down to provide a wide range of blocking services to the subscriber. That is, the IP region allocated as harmful information in FIG. 6A may be divided as shown in FIG. 6B.

6B is a diagram illustrating a table of detailed items of a service type according to an exemplary embodiment of the present invention.

Referring to FIG. 6B, the IP areas 211.40.177.33 to 211.40.177.96 of FIG. 6A are subdivided, such as 211.40.177.33 to 211.40.177.40 adult material blocking area, 211.40.177.41 to 211.40.177.49 adult shopping blocking area, and 211.40. 177.50 through 211.40.177.59 are divided into gambling blocks, 211.40.177.60 through 211.40.177.69, and violence blocks from 211.40.177.90 and 211.40.177.96, respectively.

Based on these different categories, different assumptions can be made to meet different filtering needs.

Some families are simply homes of elementary and middle school students and can block categories such as adult content, adult shopping, violence / drugs, gambling, etc. to avoid exposure of children to lewd-violent materials. Others may find their children too obsessed with games or chat, and their dad wants to block their games or chat sites.

Some families may block categories such as stock trading, securities information, and cards / loans to block stock trading at home if my mom accesses the stock site at home and makes too much stock trading after Dad goes to work. .

If a midsize company builds its own Internet network through an ISP, it may block securities categories to prevent employees in the company from trading securities during business hours.

Although the proposed invention only exemplifies a table of typical blocking sites of which blocking services are possible, the blocking service provided by the present invention can support selective filtering of categories requiring blocking according to the situation of a customer network.

Not limited to the blocking services illustrated in Figure 6b above, adult content, adult shopping, gambling, violence, drugs, other harmful information, securities trading, securities information, real estate information, cards / loans, banks, insurance, funds / start-up / investment Information, Employment, Sports, Travel, Hobbies, Leisure, Games, Cartoons, Music, Movies / Dramas, Culture / Arts, Entertainment, Other entertainment, Computers, Portals, Archives, Fellowships, Chat, Internet phones, Webmail, King, Warez, rankings / links, broadcasters, internet broadcasts, newspapers, magazines, schools, academies, diplomas, shopping, auctions, coupons, tickets, lotteries, life information, health, restaurants, local information, social groups, religion, marriage / meetings, There are various areas that can be subdivided, such as keys, fortune telling, etc., and the present invention is not limited to the subdivision areas described above.

7A is a diagram illustrating information stored in a subscriber database according to an embodiment of the present invention.

Referring to FIG. 7A, which illustrates an embodiment of information stored in a subscriber database, a table is configured with items of an ID, a password, a blocking service change password, and a setting period for each time slot.

According to the present invention, the authentication server identifies the subscriber by the identification means, extracts the IP corresponding to the subscriber, and gives it to the subscriber terminal. In general, it is preferable that the subscriber is authenticated with an ID and password, and therefore, it is desirable to include an ID and a password. In addition, by storing information such as an address, a mobile phone, a date of birth, and a hobby, a personalized service may be provided.

The IP area granted to the subscriber station is designated by the type of blocking service selected by the subscriber.

In addition, according to the present invention, the blocking service specified by the customer may be changed in real time by a change request of the subscriber station.

For example, during the day and the day, access to harmful children's information is blocked, and when the end of the day or when the father is connected to the Internet, by changing the block list to freely access the desired site.

In this case, when changing the blocking service, it is desirable to determine whether the change is made by using a separate blocking service change password.

According to the present invention, the information stored in the subscriber database may further include a blocking service change password in addition to the password. The IP address allocated when the ISP is connected to the ISP using the blocking service change password is changed in real time to an IP address corresponding to the IP area corresponding to the blocking service requested by the subscriber terminal.

That is, the currently assigned IP is the adult blocking IP, and if you want to change the IP to IP that does not go through filtering, you can change at any time by sending a blocking service change request signal to the ISP (Internet Service Provider) server.

As described above, in addition to the method of changing the blocking service through a request for changing the blocking service in real time, the blocking service may be provided by designating a blocking service area by time zone or day of the week in advance.

The setting details of the blocking service for each time zone according to an embodiment of the present invention are set by the designation of a subscriber, and a subscriber interface screen may be provided as shown in FIG. 7B to conveniently designate such a blocking list.

7B is a diagram illustrating a subscriber interface screen for time zone setting according to an exemplary embodiment of the present invention.

The subscriber can designate a blocking service for each time zone by selecting a desired block list from the list and designating a time corresponding to the selected block list.

Of course, according to the blocking service for each time zone, the IP address allocated to the subscriber station for each time zone is changed to an IP address corresponding to the blocking service.

Referring to FIG. 7B, it is preferable that the subscriber designates the blocking service only at a desired time, and the other time selected by the subscriber is defaulted to a service that does not filter.

8 is a diagram illustrating a procedure of receiving an IP by accessing a server according to an exemplary embodiment of the present invention.

In step 800, the subscriber station attempts to access an Internet Service Provider (ISP) server. That is, when the subscriber station transmits a server access signal including an ID and a password, the Internet service provider (ISP) server receives the server access signal and extracts the ID and password from the server access signal in step 805. The authentication request signal including the extracted ID and password is transmitted to the different authentication server.

In step 810, the authentication server extracts an ID and password from the received authentication request signal, and performs an authentication procedure to determine whether the ID and password match the ID and password stored in the subscriber database.

As a result of the authentication, if the subscriber corresponding to the ID and password is not stored in the subscriber database, in step 812, the authentication failure result is transmitted to the Internet Service Provider (ISP) server. In step 814, the Internet Service Provider (ISP) server transmits a message indicating that authentication has failed to the subscriber station.

As a result of the authentication, if a subscriber corresponding to the ID and password is stored in the subscriber database, authentication is allowed, and a block list corresponding to the subscriber is extracted in step 815. The block list extracted in step 820 is transmitted to an Internet Service Provider (ISP) server.

In step 825, the ISP service sends an IP allocation request signal including the received block list to the IP server, and in step 830, the server corresponds to the IP corresponding to the block list. The IP address is extracted from the address area, and the IP address is assigned to the subscriber station in step 835.

9 is a diagram illustrating a procedure for accessing the Internet via a filtering server according to a preferred embodiment of the present invention.

Referring to FIG. 9, after the authentication and the IP are allocated, the harmful information blocking process will be described when attempting to access a site on the Internet.

In step 900, the site access signal is transmitted to an Internet Service Provider (ISP) server. The header of the site access signal includes the IP address of the subscriber station and the IP address of the site attempting to access.

In step 905, the Internet Service Provider (ISP) server transmits the received site access signal to the filtering server. In operation 910, the filtering server extracts a subscriber station IP address and a URL (Uniform Resource Locator) or IP address of the accessed site from the site access signal. In operation 915, the site access signal is transmitted to a filter corresponding to the subscriber station IP address.

In step 925 the filter compares the site uniform resource locator (IP) or IP address with a database corresponding to the filter.

As a result of the comparison in step 930, if a database item corresponding to the site URL or IP address is found, in step 935, access to the site is blocked, and information on the blocking result is provided to the Internet Service Provider (ISP) server. To send.

In step 940, if an ISP (Internet Service Provider) server transmits a message to the subscriber station, such as access to harmful information, the subscriber station displays the message on the display device of the terminal.

As a result of the comparison, if the database item corresponding to the URL or IP address of the site is not found, a content request signal including the subscriber terminal IP address and the site URL or IP address is transmitted to the site in step 950, and step 953 In step 955, the site extracts the content corresponding to the site and transmits the content to the filtering server.

In step 960, the filtering server transmits the content to an Internet Service Provider (ISP) server, and in step 965, the Internet Service Provider (ISP) server transmits the received content to the subscriber station. In step 970, the subscriber station displays the received content on a display device of the subscriber station.

The site blocking process described a method of constructing a URL or IP information of a harmful site in a database by a search engine of a filtering server and blocking the information using a filtering method corresponding to the information.

However, the present invention is characterized in that the filter is distributed and filtered by a filter corresponding to IP, and the filtering method is not limited to the blocking site UEL or IP address.

That is, when the filtering server which accesses the site and receives the content signal performs filtering in the filter corresponding to the subscriber station, it is possible to perform filtering by judging whether the content of the content includes a specific word or a specific picture. Of course.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and variations can be made.

Content filtering method and system method and apparatus according to the present invention has the effect of eliminating the problem that the terminal should periodically access the filtering server to download the updated harmful information and other site information.

In addition, the present invention also has the effect of eliminating the hassle of having to go through the process of determining whether the filtering program is blocked compared to the harmful information and other site information whenever the subscriber accesses the Internet.

In addition, the present invention has the effect of providing a method that can perform selective filtering for the subscriber without changing the current network configuration, without significant impact on network performance.

In addition, the present invention has the effect of providing a method that can provide selective filtering to the subscriber while efficiently utilizing the limited IP resources.

In addition, the present invention has the effect of providing a method that does not cause a decrease in the Internet connection speed by reducing the burden on the server while going through the filtering process in the server.

Claims (20)

A method for filtering content in an IP server coupled with a subscriber terminal through a network, Receiving an ISP server connection request signal from the subscriber terminal, wherein the ISP server connection request signal includes a subscriber identifier; Extracting the subscriber identifier from the ISP server access request signal; Extracting blocking service information corresponding to the subscriber identifier; Extracting a predetermined IP allocation area corresponding to the blocking service information; And Setting an IP address of the subscriber station with an IP corresponding to the IP allocation area; Content filtering method comprising a. The method of claim 1, Receiving a site connection request signal from the subscriber terminal, wherein the site connection request signal includes a subscriber terminal identifier and a site identifier requesting the connection; Extracting a subscriber station identifier from the site access request signal; Comparing the site identifier with site information stored in a database coupled to a filter corresponding to the subscriber station identifier; And As a result of the comparison, blocking access to the site if there is a site corresponding to the site identifier in the site list; Content filtering method further comprising the step. The method of claim 2, And the site identifier is one of a UAL and an IP identifier. The method of claim 1, Receiving the blocking service change signal from the subscriber station, wherein the blocking service change signal includes blocking service information to be changed; Extracting the blocking service information to be changed from the blocking service changing signal; Extracting a predetermined IP allocation area corresponding to the blocking service information; And Setting an IP address of the subscriber station with an IP corresponding to the IP allocation area; Content filtering method further comprising. The method of claim 3, Receiving a blocking service change password; And The method may further include transmitting the authentication request signal to the authentication server. And determining whether to change the blocking service by using the received blocking service password. The method of claim 1, By specifying the type of blocking service by time zone, Content filtering method, characterized in that the IP of the subscriber station is changed at a predetermined time. The method of claim 1, The subscriber identification information includes an ID and a password. The method according to claim 1 or 2, The blocking service information is content filtering method, characterized in that at least one of harmful information and security. The method of claim 8, The harmful information content filtering method, characterized in that at least one of adult content, gambling, violence, securities information. In the method for filtering the content in the IP server combined with the subscriber terminal, authentication server, filtering server, IP allocation server, Receiving an ISP server access request signal from the subscriber terminal, wherein the ISP server access request signal includes subscriber identification information; Extracting the subscriber identification information from the ISP server access request signal; Generating an authentication request signal including the subscriber identification information; Transmitting the authentication request signal to the authentication server; Receiving blocking service information from the authentication server; Generating an IP address allocation signal including the blocking service information; Transmitting the IP address allocation signal to the IP allocation server; Receiving an IP address from the IP allocation server; Setting the IP address of the subscriber station to the received IP address; Content filtering method, characterized in that the IP area is specified in advance corresponding to the blocking service. The method of claim 10, Receiving the blocking service change signal from the subscriber station, wherein the blocking service change signal includes blocking service information to be changed; Extracting the blocking service information to be changed from the blocking service changing signal; Transmitting an IP allocation request signal including the blocking service information to the IP allocation server; Receiving an IP address from the IP allocation server; Setting the IP address of the subscriber station to the received IP address; The assigned IP content filtering method, characterized in that the change in real time at the request of the subscriber terminal. The method of claim 11, Receiving a blocking service change password; The method may further include transmitting the authentication request signal to the authentication server. And determining whether to change the blocking service by using the received blocking service password. The method according to any one of claims 10 to 12, Receiving a site access request signal from the subscriber station; the site access request signal includes a subscriber station IP address and a site identifier to which access is desired; Transmitting the received site access request signal to a filtering server, wherein the filtering server determines whether to block by using the subscriber station IP address and the site identifier; As a result of the determination, if the site identifier matches a blocked site stored in the blocked site database coupled to the filtering server, Receiving an access blocking signal from the filtering server; Transmitting an access blocking message to the subscriber station; Including, As a result of the determination, if the site address does not match the blocked site stored in the blocked site database coupled to the filtering server, Receiving content information corresponding to the site from the filtering server; Receiving the content information at the subscriber terminal Including, And a plurality of filters coupled to the filtering server block internet access of a subscriber station having an IP address corresponding to the filter. Claims [1] A method for filtering content in a filtering server coupled to a subscriber station and an ISP server. Receiving a site access request signal from the ISP server, wherein the site access request signal includes a subscriber station IP address and a site identifier to which access is desired; Extracting a terminal IP address and a site identifier from the site access request signal; Comparing the site identifier with site information stored in a database coupled to a filter corresponding to the subscriber station identifier; As a result of the comparison, blocking access to the site if there is a site corresponding to the site identifier in the site list; And providing a site blocking service to the subscriber station. The method of claim 14, The blocking service is a content filtering method, characterized in that at least one or more of harmful information and security. The method of claim 15, The harmful information content filtering method, characterized in that at least one or more of adult content, gambling, violence, securities information. The method of claim 14, By specifying the type of blocking service by time zone, Content filtering method, characterized in that the IP of the subscriber station is changed at a predetermined time. The method of claim 14, The site access request signal includes a subscriber station IP address and a site identifier to which access is to be made. The method of claim 14, And the site identifier is one of a UAL and an IP identifier. A memory in which a program is stored; And A processor coupled to the memory to execute the program; The processor is a content filtering system for executing the content filtering method according to any one of claims 18 to 19 by the program.