KR20070119813A - System for providing internet site ranking information and method thereof - Google Patents

Abstract

A system and a method for providing ranking information of Internet sites are provided to collect the connection ranking information about trusted site of all Internet users by obtaining site connection information based on DNS query packets, which are collected in a front-end switch of a DNS server. A packet collector(2300) collects the DNS query packets transmitted to the DNS servers(2500). A DNS analysis server(300) collects the site connection ranking information by analyzing the DNS query packets received from the packet collector and provides the site connection ranking information to the web. A switch(2100) transfers the DNS query packet received from an Internet user terminal(2200) to the DNS server and the packet collector. The packet collector collects the DNS query packet at an input terminal of the switch. The DNS query packet is a TCP(Transmission Control Protocol)/UDP(User Datagram Protocol)-53 port packet. The DNS analysis server is equipped with packet parser, a query processor, a connection ranking calculator, and a ranking information service part.

Description

Access ranking information providing system for internet sites and method thereof {SYSTEM FOR PROVIDING INTERNET SITE RANKING INFORMATION AND METHOD THEREOF}

1 is an overall configuration diagram of a system for providing access ranking information for an Internet site according to an embodiment of the present invention.

2 is a detailed configuration diagram of the DNS analysis server 300 shown in FIG.

3 is a flowchart for explaining the operation of the query processing unit shown in FIG.

4A is a detailed block diagram of the unique MX English query storage unit shown in FIG.

4B is a detailed block diagram of a unique A English query storage unit shown in FIG. 2;

4C is a detailed block diagram of the unique Hangul query storage unit shown in FIG. 2.

** Description of symbols for the main parts of the drawing **

200: packet parsing unit 300: query processing unit

400: domain DB 401: unique A English storage unit

402: Unique MX English storage 403: Unique Korean storage

500: access ranking calculation 600: site classification DB

700: ranking DB 701: site ranking storage unit

702: mail portal ranking storage unit 703: TLD / SLD ranking storage unit

704: other statistics storage unit 800: UI processing unit

900: ranking information service unit 2100: switching equipment

2200: Internet user terminal 2500: DNS server

3000: DNS resolution server

The present invention relates to a system and method for providing access ranking information for an Internet site, and more particularly, to a technique for extracting access ranking information for an Internet site through DNS query analysis at a front end of a DNS (Domain Name Service) server. .

As the Internet base has developed remarkably and the services provided through the Internet are diversified into education, shopping, personal homepage, finance, e-mail, and portals, the Internet is providing a place for providing information or sharing information.

The Internet communicates based on the IP protocol, and an Internet Service Provider (ISP) exists in the Internet to provide a predetermined service for Internet users. The ISP is provided with a web server having a unique IP address. When an Internet user inputs a domain name of the web server, the Internet user can access an IP address corresponding to a domain name input from the DNS server. As such, the DNS server converts a domain name input from the Internet user into an IP address whenever an Internet user attempts to access a site of the Internet.

On the other hand, as the number of Internet users increases, the ranking of Internet sites has become an important factor in evaluating the economic value of Internet sites. For example, the higher the access rank of an Internet site, the higher the degree of exposure of the Internet site to Internet users, and thus the higher the advertising cost through the Internet site. In the case of portal sites, not only the direct advertisement revenue of products through banners, but also the advertisement revenue using site information shown as a result of response to the query key input from the user is generated. It is an important factor in calculating economic value.

Therefore, statistics on the access ranking of Internet sites should be reliable.

Sites that provide ranking information for the current Internet site include Korea's Ranky.com, KoreanClick, and Internet Matrix, and Alexa.com in the United States.

The sites select sample users (panels), install the access log transmission software on the terminals (computers) of the panels, analyze the site access information (log information) transmitted from the terminal by the access log transmission software, and rank them. To provide.

In the ranking information service, the sample user selection method is to select the user who indicated the sample participation intention over the telephone, to use the access log transmission software, to make a certain compensation, and to provide a navigation or short message (SMS) function. There are two ways to let users download and use toolbar-type software.

The method of selecting a sample by telephone has a problem that the tendency of the users corresponding to the sample is largely reflected because of the small number of samples, and that there is a possibility of data distortion. In this case, the number of samples is relatively large and it is frequently replaced, so the traffic can be sensitively reflected. However, since the sample itself is a specific group of users who want to use the functions included in the toolbar, it is difficult to reflect the general public's tendency such as housewives or students.

Meanwhile, the existing ranking information service uses different methods such as unique visitor (UV), page view (PV, page view), session visitor (hour), unique visitors and pageview merging. have. Each of these methods has its own problems. In the case of unique visitors, even if the same user visits the site several times a day, only one visit is recognized. It is unsuitable to reflect the diversity of the website, such as being calculated only once.In the case of the page view standard, it is based on the number of pages actually requested by the user. There is a problem that the reliability of the ranking criteria falls.

In addition, in the case of the reference ranking information service, since only the number of connections through the ranking web is calculated, a significant number of connections using a dedicated client program such as an e-mail or a game not through the web may not be reflected in the ranking information.

In addition, international standardization of Internationalized Domain Names (IDNs) is currently in full swing, and multilingual domain names such as Hangul.kr, Hangul.com, and Hangul.net are being used. Its use is expected to increase, but there is a problem that the existing ranking information service does not reflect the site access using this multilingual domain name.

In addition, there is a conventional network monitoring method that captures all the user's packets at the user's network access point and obtains usage monitoring information. However, this method can be an effective method for monitoring usage of users in corporate networks or in some regions, but can be used to extract usage monitoring information for large Internet service providers or national-wide users. Since the device must be installed at all network access points, the realization of this device involves a huge investment cost and is difficult to apply.

The present invention has been made in view of the above circumstances, and by collecting DNS query packets at the front end switch of the DNS server to obtain site access information, it is possible to aggregate highly reliable site access ranking information for all Internet users. The purpose of the present invention is to provide a system and method for providing access ranking information for an Internet site.

In order to achieve the above object, the system for providing access ranking information for an Internet site according to the present invention comprises: a packet collecting unit for collecting a DNS query packet transmitted to a DNS server; It is characterized in that it comprises a DNS analysis server for analyzing the DNS query packet transmitted from the packet collection unit to aggregate the site access ranking, and provide the site access ranking on the Web.

Preferably, the access ranking providing system for the Internet site according to the present invention further includes a switching device for transmitting the DNS query packet transmitted from the Internet user terminal to the DNS server and the packet collecting unit.

In addition, the access ranking providing system for an Internet site according to the present invention further comprises a switching device for transmitting the DNS query packet transmitted from the Internet user terminal to the DNS server, the packet collecting unit at the input terminal of the switching equipment Collecting the DNS query packet.

Preferably, in the present invention, the DNS query packet is characterized in that the TCP / UDP port 53 packet.

Preferably, the DNS resolution server in the present invention, the packet parsing unit for parsing the DNS query packet; A query processing unit which checks a query type of the parsed DNS query packet and increases a count of the number of queries of a domain corresponding to the DNS query packet; An access rank calculation unit for aggregating access rank information based on the number of queries and site classification information of the domain; When requesting to check the access ranking information of the site through the Internet, characterized in that it comprises a ranking information service unit for visualizing and providing the aggregated access ranking information.

Preferably, in the present invention, when the DNS query packet starts with "xn", the query processing unit inputs a domain name corresponding to the DNS query packet into a first storage, and adds the number of accesses to the DNS query packet. If the query type of the query queries a general IP address, the domain name corresponding to the DNS query packet is input to the second store to add the number of accesses, and the query type of the DNS query packet queries the IP address of the mail server. If so, it is characterized in that the domain name corresponding to the DNS query packet is input to the third store to add the number of connections.

Preferably, in the present invention, the access rank calculation unit collects the access information of the same site among the access information stored in the first storage and the access information stored in the second storage using the integrated domain information stored in the site classification DB. After that, it is characterized in that the access ranking of each site is counted.

Preferably, the access rank calculation unit in the present invention is characterized in that the mail portal access ranking using the access information stored in the third storage.

Preferably, the access rank calculation unit in the present invention is characterized in that the TLD / SLD access rank is based on the access information stored in each of the first storage, the second storage, and the third storage.

The method of providing access ranking information for an Internet site according to the present invention includes a first step of collecting a DNS query packet transmitted from an Internet user terminal at an input terminal of a DNS server; A second process of classifying the collected DNS query packets by characteristics to generate access information for each domain name; And a third process of counting the access order of each site based on the access information for each domain name.

Preferably, the first process of the present invention is characterized in that to collect the DNS query packet by receiving the mirrored DNS query packet from the switching equipment provided at the input of the DNS server.

Preferably, in the first step of the present invention, the DNS query packet is collected by tapping the DNS query packet at an input terminal of a switching device provided at the input terminal of the DNS server.

Preferably, the method of the present invention further comprises the step of checking the validity of the collected DNS query packet to select a valid DNS query packet, characterized in that it further comprises the step of providing access rank information to the Internet site.

Preferably, in the present invention, it is determined that the DNS query packet is valid if the packet is a TCP / UDP port 53 packet.

Preferably, in the present invention, the second process includes: a process of storing access information of the Hangul domain in a first storage when the DNS query packet is for a Hangul domain name; B) storing access information of the English domain in a second storage when the DNS query packet is for an English domain name and not a mail server; And c) storing the access information of the mail server in a third storage if the DNS query packet is for a mail server having an English domain name.

Preferably, in the present invention, the third process may include a d process of collecting the same site access information by analyzing the access information stored in each of the first storage and the second storage; E) counting site access rankings using the collected site access information; And a step f of analyzing the access information stored in the third storage and counting mail portal access rankings.

Preferably, the present invention further comprises a g process of aggregating TLD / SLD access ranks using access information stored in the first storage, the second storage, and the third storage, respectively.

Preferably, the present invention further includes a fourth process of providing a site access rank, a mail portal access rank, a TLD / SLD access rank, or a predetermined statistical result in response to a request of a terminal connected through the web.

Preferably, in the present invention, the access information includes a domain name parsed as a string and a counter for the number of accesses.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an overall configuration diagram of a system for providing access ranking information for an Internet site according to an embodiment of the present invention.

In the figure, the Internet user terminal 2200 is provided with a web browser, a DNS server and a gateway address are set, and when a user inputs a domain name of a specific site, the Internet user terminal 2200 queries the DNS server 2500 for an IP address corresponding to the domain name. It transmits the DNS query packet to the DNS server 2500, and accesses the IP address corresponding to the DNS result transmitted from the DNS server 2500, so that the user can use the desired site.

The DNS server 2500 includes IP address information for each domain name. When the DNS query packet for a specific domain name is received from the Internet user terminal 2200, the DNS server 2500 extracts an IP address for the domain name and extracts the extracted IP address. It performs the function of transmitting the address to the Internet user terminal 2200 that transmitted the DNS query.

The DNS server 2500 generally operates two or more in order to stabilize and shorten the DNS query processing time, and forwards the DNS query packet through the switching device 2100 installed at the front end of the DNS server 2500. Receive.

The switching device 2100 performs a function of transmitting a DNS query packet transmitted from the Internet user terminal 220 to a specific DNS server 2500.

The packet collecting unit 2300 illustrated in FIG. 1 is directly connected 2402 to the switching device 2100 to collect DNS packets in a mirroring manner, or an input terminal of the switching device 2100 to collect DNS packets in a tapping manner. In operation 2401, a DNS query packet transmitted from the Internet user terminal 2200 is collected.

In the present invention, in order to actively monitor the performance of the actual DNS service, the packet collecting unit 2300 transmits a test DNS query packet to each DNS server 2500 and receives the result to determine whether the DNS service is normally operated. In addition, it monitors the DNS service processing performance of individual DNS servers.

The packet collecting unit 2300 determines whether the collected DNS query packet is a TCP / UDP port 53 packet and determines the validity of the collected DNS query packet, and analyzes the DNS query packet having the validity through the Internet. To send). The DNS analysis server 3000 analyzes the DNS query packet and performs aggregation according to the site access priority, and then provides the result on the web.

2 is a detailed block diagram of the DNS analysis server 3000.

DNS analysis server 3000 is a packet parsing unit 200, query processing unit 300, domain DB (400), access ranking calculation unit 500, site classification DB (600), ranking DB (700), UI processing unit ( 800, and a ranking information service unit 900.

The packet parsing unit 200 analyzes the DNS query packet transmitted from the packet collecting unit 2300, interprets the DNS query information included in the DNS query packet as a string, and transmits the string to the query processing unit 300.

The query processing unit 300 distinguishes a user's query from a query generated by the DNS server by using a source address and a destination address of the packet, and corresponds to a normal user query that responds to the query. The domain information is stored in the domain DB 400.

The domain DB 400 includes a unique A English storage 401, a unique MX English storage 402, and a unique Korean storage 403.

The unique A English-quality storage unit 401 stores the number of queries for each domain having an English domain, and the unique MX English-quality storage unit 402 stores the number of queries for each domain corresponding to a mail server among sites having an English domain. The unique Hangul query storage unit 403 stores the number of queries for each domain having a Hangul domain.

The detailed configuration of the unique A English query storage unit 401 is as described in FIG. 4B, the unique MX English query storage unit 402 is shown in FIG. 4A, and the unique Korean query storage unit 403 is illustrated in FIG. 4C. As shown.

The access ranking calculation unit 500 generates the ranking information required by the operator by counting the number of queries of each domain stored in the domain DB 400 using the site classification information stored in the site classification DB 600. .

The site classification DB 600 stores integrated domain information of a site using a plurality of domain names, so that site access ranking information is generated even on a site using a plurality of domains based on the actual number of site accesses. To perform.

In the present invention, the access ranking calculation unit 500 stores the access information stored in the unique Korean query storage unit 403 and the unique A English storage unit 401 using the integrated domain information stored in the site classification DB 600. The access information of the same site is collected from the access information, and then the access order of each site is counted.

In addition, the access ranking calculation unit 500 aggregates the mail portal access ranking using the access information stored in the unique MX English-quality storage unit 402, the access information stored in the unique Korean query storage unit 403, the unique A Based on the access information stored in the English-storage storage unit 401 and the connection information stored in the unique MX English-storage storage unit 402, the TLD / SLD access order is counted. The access information stored in each of the storage units 401, 402, and 403 is a counter corresponding to the parsed domain string and the number of accesses.

The ranking DB 700 includes a site ranking storage 701, a mail portal ranking storage 702, a TLD / SLD ranking storage 703, and other statistics storage 704.

The site ranking storage unit 701 stores access ranking information for a site having an English domain and a Korean domain except for a mail server, and the mail portal ranking storage unit 702 has an English domain corresponding to a mail server. The access ranking information of the site is stored, and the TLD / SLD ranking storage unit 703 includes TLD (Top Level Domain, .com / .net / .kr, etc.) information and SLD (Second Level Domain, com / ac.kr). /re.kr, etc.) access ranking information is stored, and the other statistics storage unit 704 other statistical information (for example, DNS-related information such as the total number of DNS queries analyzed, DNS query type, etc.) Is stored.

The ranking information service unit 900 is a web server that provides access ranking information for an Internet site to a service request terminal through the web, and the UI processing unit 800 is linked with the ranking information service unit 900 for a ranking DB 700. The ranking information stored in the web interface is visualized in various forms to provide the ranking information service 900.

Next, the operation of the query processing unit 300 illustrated in FIG. 2 will be described in more detail with reference to the flowchart illustrated in FIG. 3.

The query processing unit 300 may include domain names corresponding to site names other than the host name in the domain name included in the DNS query packet (for example, in the case of www.naver.com, naver.com and www.daum.co.kr In the case of daum.co.kr).

At this time, it is checked whether the extracted domain name starts with "xn" (S30). The Internet Assigned Number Authority (IANA), an international standardization organization, chose Punycode as an international standard for encoding multilingual domain names (IDNs). Accordingly, Korean domains (or multilingual domain names) such as Hangul.kr and Hangul.com were selected. ) Is encoded into 7-bit punycode prefixed with "xn--". Therefore, when the query starts with "xn" (Y in S30), the query is stored in the unique Korean query storage unit 403 and the count is increased (S32).

As shown in FIG. 4C, the unique Hangul query storage unit 403 includes an SLD field, a TLD field, and a counter field to store a count value of each domain.

On the other hand, if the extracted domain name is not "xn--" (N in S30), it is checked whether the query type (Query Type) is "A" (S34). The query type is information stored in a DNS query packet. When querying a general IP address, the query type is designated as "A", and when querying a mail server's IP address, the query type is "MX". Is specified.

Therefore, when the query type is confirmed as "A" (Y in S34), the query processing unit 300 increases the count of the number of queries of the corresponding domain in the unit A English query storage unit 401 (S36).

As shown in FIG. 4B, the unique A English query storage unit 401 includes a 3LD field, an SLD field, a TLD field, and a counter field to store count values of respective domains. When the parsed domain name string is stored in each field, information is stored from the TLD field, so in the case of "daum.co.kr", "daum" in the 3LD field, "co" in the SLD field, and "co" in the TLD field. "kr" is stored, but "yahoo.com" stores "yahoo" in the SLD field and "com" in the TLD field.

On the other hand, if the result of the check in S34 is not "A", it is checked whether the query type is "MX" (S38). If the query type is "MX", the unique MX English query storage unit 402 queries the domain. The count for the number of times is increased (S40).

As shown in FIG. 4A, the unique MX English query storage unit 402 includes a 3LD field, an SLD field, a TLD field, and a counter field to store a count value of each domain corresponding to a mail server.

On the other hand, if the check result of the S34 query type is not "MX" (N in S38), the query processing unit 300 terminates the above-described query analysis procedure and proceeds to the initial stage to perform the analysis procedure for the next query packet. .

Meanwhile, in the embodiment of the present invention, the site characteristics are classified into general English domain sites, mail server domain sites, and Korean domain sites, but the site characteristics are further diversified in consideration of the query types defined in the DNS query packet. Of course, it can be applied.

When the number of queries of each domain is stored in the domain DB 400 through the above-described procedure, the access ranking calculation unit 500 generates ranking information for each site characteristic by using the site information stored in the site classification DB 600. The result is stored in the ranking DB 700.

At this time, it is preferable that the access ranking calculation unit 500 generates ranking information at regular intervals.

As described above, according to the access ranking information providing system and method for an Internet site according to an embodiment of the present invention, the site access ranking based on the DNS query packet collected by collecting all DNS query packets at the front end of the DNS server By estimating the effect, it is possible to provide a reliable site access ranking in real time.

On the other hand, the present invention is not limited to the above-described embodiment, but can be modified and modified within the scope not departing from the gist of the present invention, such modifications and changes should be regarded as belonging to the following claims. will be.

Claims (20)

A packet collecting unit collecting the DNS query packet transmitted to the DNS server; And And a DNS analysis server which analyzes the DNS query packet transmitted from the packet collecting unit, aggregates site access rankings, and provides the site access rankings on the web. The method of claim 1, And a switching device for forwarding the DNS query packet transmitted from an internet user terminal to the DNS server and the packet collecting unit. The method of claim 1, And a switching device for transmitting the DNS query packet transmitted from an internet user terminal to the DNS server. And the packet collecting unit collects the DNS query packet at an input terminal of the switching device. The method according to any one of claims 1 to 3, wherein the DNS query packet, A system for providing access order information to an Internet site, characterized in that the packet is TCP / UDP port 53. The method of claim 1, wherein the DNS resolution server, A packet parsing unit for parsing the DNS query packet; A query processing unit which checks a query type of the parsed DNS query packet and increases a count of the number of queries of a domain corresponding to the DNS query packet; An access rank calculation unit for aggregating access rank information based on the number of queries and site classification information of the domain; And a ranking information service unit for visualizing and providing the aggregated access ranking information when a request for confirming the access ranking information of the site through the Internet is provided. The method of claim 5, wherein the query processing unit, If the DNS query packet starts with "xn", the domain name corresponding to the DNS query packet is input to the first storage, and the number of accesses is added. If the query type of the DNS query packet queries a general IP address, the domain name corresponding to the DNS query packet is input to the second store, and the number of accesses is added. If the query type of the DNS query packet is to query the IP address of the mail server, the access order to the Internet site, which is input by adding a domain name corresponding to the DNS query packet to a third store. Information provision system. The method of claim 6, wherein the access rank calculation unit, Using the integrated domain information stored in the site classification DB, the access information of the same site is collected from the access information stored in the first storage and the access information stored in the second storage, and then the access rank of each site is counted. Access ranking information providing system for Internet sites. The method of claim 7, wherein the access rank calculation unit, And a mail portal access ranking is calculated using the access information stored in the third storage. The method of claim 8, wherein the access rank calculation unit is And a TLD / SLD access ranking based on the access information stored in the first storage, the second storage, and the third storage, respectively. The method according to any one of claims 7 to 9, wherein the access information is And a counter for the domain name parsed as a string and the number of times of access. A first step of collecting a DNS query packet transmitted from an Internet user terminal at an input terminal of a DNS server; A second process of classifying the collected DNS query packets by characteristics to generate access information for each domain name; And And a third process of counting the access order of each site based on the access information for each domain name. The method of claim 11, wherein the first process is And receiving the mirrored DNS query packet from a switching device provided at an input of the DNS server and collecting the DNS query packet. The method of claim 11, wherein the first process is And collecting the DNS query packet by tapping the DNS query packet at an input terminal of the switching device provided at the input terminal of the DNS server. The method according to any one of claims 12 and 13, And checking the validity of the collected DNS query packets to select valid DNS query packets. The method of claim 14, And determining that the DNS query packet is valid if the DNS query packet is a TCP / UDP port 53 packet. The method of claim 11, wherein the second process, A process for storing access information of the Hangul domain in a first storage if the DNS query packet is for a Hangul domain name; B) storing access information of the English domain in a second storage when the DNS query packet is for an English domain name and not a mail server; And And c) storing the access information of the mail server in a third storage if the DNS query packet is for a mail server having an English domain name. The method of claim 16, wherein the third process, D) collecting the same site access information by analyzing the access information respectively stored in the first storage and the second storage; E) counting site access rankings using the collected site access information; And And accessing the mail portal access rank by analyzing the access information stored in the third repository. The method of claim 17, And a g process of aggregating a TLD / SLD access ranking by using access information stored in the first storage, the second storage, and the third storage, respectively. . The method of claim 11, And a fourth process of providing a site access rank, a mail portal access rank, a TLD / SLD access rank, or a predetermined statistical result in response to a request of a terminal connected through the web. How to Provide. The method according to any one of claims 16 to 19, wherein the access information is A method of providing access ranking information for an Internet site, comprising a counter for a domain name parsed as a string and the number of accesses.

Images