KR20060063609A - A method and system for providing resources by using virtual path - Google Patents

Abstract

The present invention relates to a method for providing a resource using a virtual path and a system thereof, wherein the client who wants to access the resource server through a virtual path generated to access the resource server through a virtual path server from a logged-in client. If the verification is performed by extracting the comparison client information corresponding to the policy and comparing the comparison client information with the original client information previously stored in the virtual path server, provide resources to the client who wants to access the resource server through the virtual path. It consists of doing. Therefore, the basic security is supported by the virtual path alone without a separate login verification procedure, a flexible login verification procedure is possible according to the security policy, and coping with abuse such as unauthorized links to resources is possible.

Description

A method and system for providing resources by using virtual path}

1 is a block diagram of a system for providing a resource using a virtual path according to the present invention.

2 is a flowchart illustrating a method of receiving a virtual path in a resource providing system using a virtual path according to the present invention.

3 is a flowchart illustrating a method of receiving resources by verifying a virtual path in a system for providing a resource using a virtual path according to the present invention.

Korean Patent Application No. 10-2000-0050891 "Client Login System Using Second Connection Path" discloses a system for requesting additional login in case of normal processing by dividing the connection path into two types. However, the client system using the second connection path is inconvenient because additional processing is required and logic for distinguishing between normal processing and abnormal processing is required.

In addition, the Korean Patent Application No. 10-2004-0029571 "method for displaying multimedia files" includes overloading a web server while preventing illegal links and illegal downloads caused by the exposure of a Uniform Resource Locator (URL) while displaying multimedia files. How to prevent the phenomenon is disclosed. In this case, when requesting a URL for a multimedia file, a user login procedure is performed through a login program, and then the URL of the multimedia file is transmitted from the login result, so that illegal links and illegalities caused by exposing the URL of the multimedia file in the source are exposed. It is blocking the download problem. However, such a display method of the multimedia file does not expose the URL of the multimedia file to the client publicly, and since the URL of the multimedia file is used at the time of use, there is a risk that the actual URL is exposed in an illegal manner.

The present invention relates to a method and a system for providing a resource using a virtual path, and more particularly, to a method and a system for providing a resource using a virtual path that can create and use the virtual path as a login confirmation means of a client in various environments. will be.

Numerous resources are available to people around the world in both wired and wireless environments, including the Internet. However, most of the resources are exposed to the client's access unprotected, and are being misused according to the client's personal use.

As a result, many membership-based Internet systems have established a login process that allows only those clients who have passed the login process to access resources. That is, the conventional Internet system mainly uses a method of performing a login procedure every time a resource is accessed or a method of allowing access after querying previous login performance information.

However, such an approach has a problem that the process of checking access to resources puts a load on the system, and in particular, it is complicated and time-consuming if it is not an important resource. In addition, most Internet systems have a method of circumventing a login procedure or a method of inquiring login performance information. Thus, there is a problem that a resource may be illegally misused.

The present invention is to solve the problems as described above, by creating and using a unique virtual path for each client to reduce the additional work according to the login information, while providing a resource using a virtual path that can prevent misuse of resources and To provide that system.

The resource providing method using the virtual path of the present invention for solving the above technical problem, in the method of providing a resource using the virtual path to the client logged into the virtual path server, (a) can be accessed to the resource server Generating a virtual path and transmitting the generated virtual path to the logged in client; (b) extracting original client information corresponding to a virtual path policy for access verification to the resource server from the logged in client, and mapping and storing the original client information and the virtual path information; And (c) extracting the comparative client information corresponding to the virtual path policy from the client requesting the resource of the resource server through the virtual path and comparing the original client information with the original client information to verify the result. And allowing the resource to be provided.

In addition, the resource providing method using the virtual path of the present invention for solving the above technical problem, in the method of providing a resource using the virtual path to the client logged into the virtual path server, (a) access to the resource server Generating a virtual path that can be transmitted to the logged in client; (b) receiving a request for a resource of the resource server from the logged in client through the virtual path; And (c) providing resources of the resource server to the logged-in client through the virtual path.

The resource providing system using the virtual path of the present invention for solving the above technical problem, in the system for providing resources using the virtual path to the client logged into the virtual path server, the virtual path that can access the resource server A virtual path generation transmission unit for generating and transmitting; A storage unit for extracting original client information from the logged-in client according to a virtual path policy for access verification to the resource server, and mapping and storing the original client information and virtual path information; And extracting the comparative client information corresponding to the virtual path policy from the client requesting the resource provision through the virtual path, and comparing the original client information loaded from the storage unit to verify the virtual path. And a virtual path verification unit for providing a resource through the virtual path verification unit.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the present invention.

1 is a block diagram of a system for providing a resource using a virtual path according to the present invention. Referring to FIG. 1, a resource providing system using a virtual path includes a client 100, a virtual path server 120, and a resource server 140.

The client 100 is a device that accesses the virtual path server 120 on the Internet by using software used to access the Internet. Examples of the client 100 may be a personal computer or a portable terminal. .

The virtual path server 120 may include a client login unit 121, a virtual path generation transmission unit 122, a virtual path policy unit 123, a storage unit 124, a virtual path verification unit 125, and a virtual path removal unit ( 126).

The client login unit 121 receives login information including an ID and a password from the client 100 and determines whether the client 100 to log in to the virtual path server 120 is authenticated. The client login unit 121 transmits a login authentication confirmation signal to the virtual path generation transmission unit 122 when it is determined that login authentication of the client 100 connecting to the virtual path server 120 has been performed.

When the virtual path generation transmission unit 122 receives the login authentication confirmation signal from the client login unit 121, the virtual path generation transmission unit 122 generates a virtual path that allows the client 100 that has been authenticated to access the resource server 140, The generated virtual path is transmitted to the client 100 where login authentication is performed. Here, the virtual path transmitted to each client 100 is the only virtual path. Determining whether it is the only virtual path is determined based on whether or not the generated virtual path matches the virtual path previously generated in the virtual path server 120. Furthermore, the unique virtual path can be securely transmitted to the client 100 by additional security techniques. The client 100 may access the resource server 140 without having to provide separate login information to the virtual path server 120 at a later time through the only virtual path transmitted to the client 100.

The virtual path policy unit 123 has a virtual path policy that defines a comparison factor for verifying that the client 100 can access the resource server 140 through the virtual path. Here, the comparison factor may include IP information of the client, session login time information of the client, and session login method information of the client. For the client 100 who wants to access the resource server 140 through the virtual client and the original client information extracted from the client 100 during the login process, the item defined by the comparison factor of the virtual path policy. Verification is performed by comparing the extracted comparative client information with each other.

The storage unit 124 extracts the original client information from the client 100 that is logged in according to the virtual path policy set in the virtual path policy unit 123, and stores the original client information and the virtual path information by mapping them. do.

The virtual path verification unit 125 extracts corresponding client information corresponding to the virtual path policy set in the virtual path policy unit 123 from the client 100 accessing the resource server 140 through the virtual path. Then, the original client information stored in the storage unit 124 is loaded. The virtual path verification unit 125 compares the extracted comparison client information with the loaded original client information to determine whether verification is performed. When the verification is performed in the virtual path verification unit 125, the client 100 who wants to access the resource server 140 is allowed through the virtual path.

The virtual path removing unit 126 receives a verification mismatch message from the virtual path verifying unit 125 when the verification is not performed in the virtual path verifying unit 125 and receives the virtual path information stored in the storage unit 124. It serves to remove. In addition, when the logout signal is input to the client, the logout signal is input and the virtual path information stored in the storage unit 124 is removed.

The resource server 140 is located in a place where the client 100 is not directly accessible, and is accessible only through the virtual path provided after the client 100 logs in to the virtual path server 120. Here, the resource server 140 includes various resources, and provides a number of resources in a wired and wireless environment including a medium called the Internet.

2 is a flowchart illustrating a method for receiving a virtual path from a resource providing system using a virtual path according to the present invention. Referring to FIG. 2, first, the virtual path server 120 receives login information including an ID and a password from the client 100 and performs a login of the client 100 (S200). Here, while logging in the client 100 has been shown to perform the login of the client based on the ID and password, in addition to various methods, such as performing the login of the client based on the public certificate can be used.

Next, the virtual path server 120 generates a virtual path that allows the client 100 that has logged in to access the resource server 140 when the client 100 logs in at step S200. (S210).

Next, the virtual path server 120 determines whether the virtual path generated in step S210 is the only virtual path (S220). In this case, whether the virtual path is the only virtual path is determined based on whether or not the virtual path generated in step S210 matches the virtual path previously generated in the virtual path server 120. As such, the reason for determining whether the virtual path is the only virtual path in step S220 is to allow only the client 100 that has logged in in step S200 to access the resource server 140 through the virtual path.

If it is determined in step S220 that it is not the only virtual path, the process returns to step S210. On the other hand, if it is determined in step S220 that the only virtual path is determined, the process proceeds to step S230.

In step S230, the virtual path generated in step S210 is stored. Here, the virtual path is stored in the storage unit 124 of the virtual path server 120.

Next, the virtual path server 120 determines whether the virtual path policy is set (S240). The determination of whether or not the virtual path policy is set is determined based on whether there is a virtual path policy set in the virtual path policy unit 123 of the virtual path server 120.

Here, the virtual path policy means that when the client 100 tries to access the resource server 140 through the virtual path provided from the virtual path server 120, the client 100 performs a login to transmit the virtual path. Refers to a policy that sets a comparison factor for determining whether a legitimate client 100 has been received. Whether there is a set virtual path policy is to determine whether or not there is a preset preset factor in the virtual path policy unit 123. More specifically, the comparison factor may include, for example, client session valid time information, client session login method information, and client IP information.

As a result of the determination in step S240, if it is determined that there is a set virtual path policy, the original client information corresponding to the virtual path policy is extracted and stored from the client 100 that is logged in (S250). Here, the original client information corresponding to the virtual path policy indicates the extracted client information corresponding to the virtual path policy set as a result of the determination in step S240. In addition, in storing the original client information in step S250, the original client information may be stored in accordance with the virtual path information stored in the step S230.

On the other hand, if it is determined in step S240 that there is no set virtual path policy, the virtual path generated in step S210 is provided to the client 100 that has logged in (S260). In addition, after step S250, the process proceeds to step S260 to provide the virtual path generated in step S210 to the client 100 where the login is made.

After the step S260, the client 100 that has received the virtual path has been logged in to perform the process as shown in FIG. 3 to access the resource server 140 to receive a desired resource. Hereinafter, a method of accessing the resource server 140 in more detail and receiving a desired resource will be described. Parts not described in FIG. 2 will be referred to FIG. 1.

3 is a flowchart illustrating a method of receiving resources by verifying a virtual path in a system for providing a resource using a virtual path according to the present invention. Referring to FIG. 3, first, the virtual path server 120 receives an access request signal for accessing the resource server 140 from the client 100 through the virtual path (S300).

Next, when receiving the access request signal in step S300, it is determined whether the virtual path policy is set (S310). Here, determining whether the virtual path policy is set may be determined based on whether there is a virtual path policy set in the virtual path policy unit 123 of the virtual path server 120. The virtual path verification unit 125 loads the virtual path policy unit 123 to determine whether there is a virtual path policy in the virtual path policy unit 123.

If it is determined in step S310 that the virtual path policy is not set, the process proceeds to step S350. On the other hand, if it is determined in step S310 that the virtual path policy is set, the process proceeds to step S320.

In operation S320, corresponding client information is extracted from the client 100 that transmits the access request signal in operation S300 according to the virtual path policy set in the virtual path server 120.

In step S330, the original client information that matches the virtual path policy is determined in step S310. Here, the original client information is stored in the storage unit 124 of the virtual path server 120. More detailed information regarding the original client information will be described with reference to FIG.

Next, in step S330, the virtual path server 120 determines whether the client 100 that has transmitted the access request signal to the resource server 140 in step S300 is a legitimate client (S340). In this case, whether the client 100 is the legitimate client 100 is verified through whether the comparison client information extracted in step S320 and the original client information loaded in step S330 coincide with each other. That is, when the comparison client information and the original client information match, the right client 100 becomes valid. If the comparison client information and the original client information do not coincide, the right client 100 may not be referred to as legitimate client 100. More specifically, the client information used as the comparison factor may include a client session valid time, a client session login method, and a client IP.

If it is determined in step S340 that the client 100 is legitimate, the flow proceeds to step S350. On the other hand, if it is determined in step S340 that the legitimate client 100 is not determined, the process proceeds to step S360.

In operation S350, the client 100 who wants to access the resource server 140 through the virtual path allows the access to the resource server 140. As a result, the client 100 may be provided with a resource existing in the resource server 140.

In step S360, the error report is performed to the client 100 who wants to access the resource server 140 through the virtual path in a preset manner.

In more detail, if the client information used as the comparison factor is IP information of the client, the user may send a message to check again because the IP information of the user is different. If the client information used as the comparison factor is session authentication time information of the client, the session authentication time has expired, and thus a message for requesting to log in again may be sent.

Parts not described in FIG. 3 will be described with reference to FIGS. 1 and 2.

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD_ROM, magnetic tape, floppy disks, and optical data storage, and may also include those implemented in the form of carrier waves (eg, transmission over the Internet). . The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

As described above, optimal embodiments have been disclosed in the drawings and the specification. Although specific terms have been used herein, they are used only for the purpose of describing the present invention and are not intended to limit the scope of the invention as defined in the claims or the claims. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible from this. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

As described above, the present invention can provide the security of the system and the system reliability of the client through a method and system for generating and using a unique virtual path for a problem of the abuse of the authority of the client such as illegal linking or illegal downloading of resources. .

In addition, according to the present invention, whenever the client logs in to the virtual path server through the virtual path and accesses the resource server, the burden of performing the login through the virtual path server can be reduced.

Claims (16)

In the method for providing a resource using a virtual path to a client logged into the virtual path server, (a) generating a virtual path accessible to a resource server and transmitting the generated virtual path to the logged in client; (b) extracting original client information corresponding to a virtual path policy for access verification to the resource server from the logged in client, and mapping and storing the original client information and the virtual path information; And (c) when the client requesting the resource of the resource server through the virtual path extracts the comparative client information corresponding to the virtual path policy and compares the original client information with the original client information, the verification is performed through the virtual path. A method of providing a resource using a virtual path, comprising: providing a resource. The method of claim 1, wherein step (c) (c1) receiving an access request signal from a client requesting a resource of the resource server through the virtual path; (c2) extracting comparative client information corresponding to the virtual path policy from a client requesting a resource of the resource server; (c3) loading the original client information stored in step (b); (c4) comparing the extracted comparison client information with the original client information to determine whether verification is performed; And (c5) if it is determined that verification is performed in step (c4), allowing the resource to be provided to a client requesting a resource of the resource server through the virtual path; Resource delivery method. The method of claim 2, (c6) if the verification is not performed in the step (c4), performing an error report in a preset manner to a client requesting a resource of the resource server through the virtual path; Resource provision method using a virtual path. The method of claim 2, (c6 ') removing the virtual path information stored in the step (b) when the verification is not performed in the step (c4). The method of claim 1, The client information extracted according to the virtual path policy is session login time information of the client. The method of claim 1, Client information extracted according to the virtual path policy is a resource providing method using a virtual path, characterized in that the IP information of the client. The method of claim 1, The virtual path is a resource providing method using a virtual path, characterized in that the only virtual path that can access the resource server only from the client that has received the virtual path. In the method for providing a resource using a virtual path to a client logged into the virtual path server, (a) generating a virtual path accessible to a resource server and transmitting the generated virtual path to the logged in client; (b) receiving a request for a resource of the resource server from the logged in client through the virtual path; And (c) providing a resource of the resource server to the logged-in client through the virtual path; providing a resource using the virtual path. The method of claim 8, The virtual path is a resource providing method using a virtual path, characterized in that the only virtual path that can access the resource server only from the client that has received the virtual path. In a system that provides a resource using a virtual path to a client logged into the virtual path server, A virtual path generation transmitter for generating and transmitting a virtual path accessible to the resource server; A storage unit for extracting original client information from the logged-in client according to a virtual path policy for access verification to the resource server, and mapping and storing the original client information and virtual path information; And When the client requesting the resource provision through the virtual path extracts the comparative client information corresponding to the virtual path policy and compares the original client information loaded from the storage unit, the verification is performed through the virtual path. Virtual path verification unit for providing a resource; Resource providing system using a virtual path comprising a. The method of claim 10, The client information extracted according to the virtual path policy is session login time information of the client. The method of claim 10, Client information extracted according to the virtual path policy is a resource providing system using a virtual path, characterized in that the IP information of the client. The method of claim 10, And a virtual path policy unit for setting the virtual path policy. The method of claim 10, And a virtual path removing unit configured to receive a verification mismatch message from the virtual path verification unit and to remove the virtual path information stored in the storage unit, when the verification is not performed in the virtual path verification unit. Resource providing system using a virtual path. The method of claim 10, When the logout is performed from the logged-in client, a virtual path removal unit for receiving the logout signal to remove the virtual path information stored in the storage unit; resources further comprising a virtual path Provide system. The method of claim 10, The virtual path generated by the virtual path generation transmission unit is a resource providing system using a virtual path, characterized in that the only virtual path accessible to the resource server only from the client receiving the virtual path.

Images