KR20090000824A - Client apparatus, authentication apparatus and method for connection area restriction - Google Patents

Abstract

A connection area confinement method is provided to know the access from a computer positioned in other country, even if someone approaches through a virtual private network server or a proxy server positioned in national from the other country, thereby effectively blocking the access form the other country. A connection area confinement method comprises: a step(S42) for collecting IP address in which a game client is used for internet communications of a user computer; a step(S43) for transferring the collected IP address to a game service system providing corresponding game service; a step(S44) for analyzing the IP address which the game service system is received from the game client; a step(S45) for determining whether it is the IP address of the other country or not; and a step(S46,S48) for allowing or blocking the connection of the user computer according to the decision result of the game service system.

Description

Client Apparatus, Authentication Apparatus, and Method for Connection Area Restriction for Restricting Access Areas of Game Users

1 is an overview of a state in which a connection attempt in another country is conventionally blocked;

2 is an overview of a state of bypassing a domestic game service system through a domestic virtual private network server or a proxy server in another country;

3 is a specific example of a connection structure of a user computer device and a game service system;

4 is an embodiment of a method for limiting access areas in accordance with the present invention;

5 is an embodiment of a client device in accordance with the present invention;

6 is an example of a launcher screen;

7 is an example of a process in which a client device operates in connection with a launcher module;

8 is an embodiment of an authentication device for limiting an access area according to the present invention.

* Explanation of symbols for main parts of the drawings

31: User Computer Device 31-1: Game Client

32: server of high-speed Internet service provider 33: Internet network

34: virtual private network server / proxy server 35: game service system

35-1: Web Server 35-2: Authentication Server

35-3: Game Server 50: Client Device

51: IP address collecting unit 52: packet generation unit

53: transmission unit 80: authentication device

81: IP address setting section 82: IP address receiving section

83: connection permission unit 84: authentication processing unit

The present invention relates to a client device and an authentication device for limiting the access area of a game user, and a method for limiting the access area of a game user. In particular, the present invention bypasses a domestic game service system through a domestic virtual private network server or a proxy server in another country. Even if you try to connect to the network, you can effectively block it.

Due to the development of communication technology and the development of related technologies such as graphics and sound, various types of computer games are being produced. Computer games have been developed in the form of online games that allow a single user to play alone on a personal computer (PC), and participate in and play with other users at the same time using the Internet. Doing.

On the other hand, as the number of users using online games increases, various problems appear. As an example, users of online games want to increase their game level or have better game items, which can be obtained by investing a lot of time and effort, as well as by paying for them. There are many things to buy.

In other words, game items and the like have a value equal to cash for users who want them. As a result, a situation arises in that a game service is used to sell a game item obtained by playing a game, not for one's own enjoyment, to other users for cash. In order to collect the game items and make money, these users have to play a game with many game characters.

The illegal method used by them is that in order to own a large number of game accounts, a large number of social security numbers are required. You can also create a computer program to play the game. In addition, runaway youths can be hired to provide meals or to continue playing at low wages to collect game items. When they are legally sanctioned due to employment and other problems in Korea, they set up offices that specialize in these tasks in other countries where labor costs are low and domestic laws can be avoided.

When such illegal users participate in the game, normal users who use the game service in the domestic country suffer various damages, such as losing the chance to obtain good items in the game, which reduces the interest in the game and uses the game. This can be a major factor in avoiding.

Therefore, attempts have been made to effectively block the use of such illegal or inappropriate game services.

Referring to FIG. 1, a conventional method of blocking access to a domestic game service system from another country is described. A user of another country uses a computer device 11 to play a domestic game service system through an internet network 12. When attempting to connect to (14), the domestic game service system 14 checks the IP address of the user computer device 11 currently attempting to connect, and if it is not a domestic IP address, blocks the connection to play the game service. To disable it.

However, in order to circumvent this limitation, illegal users may access a game service system 14 by bypassing a domestic virtual private network (VPN) server or a proxy server 13 as shown in FIG. 2. It was used. Then, since the IP address attempted to access the game service system 14 from another country is a domestic IP address assigned by the virtual private network server or the proxy server 13, the game service system 14 may block the access attempt. It becomes impossible. That is, there is a problem in that it is not possible to screen illegal users who attempt to access the virtual private network server or proxy server 13 in a bypass manner and thus block illegal users.

Accordingly, the present invention has been made to solve the above problems, it is possible to find out that the access from the computer device located in the other country even if the other country indirect access through the virtual private network server or proxy server in the other country, It is an object of the present invention to provide a client device, an authentication device, and a method for restricting an access area of a game user that can effectively block access from other countries.

In order to achieve the above object, a method of limiting the access area of a game user according to the present invention comprises the steps of: collecting the IP address used for the Internet communication of the user computer device by the game client installed on the user computer device; Transmitting, by the game client, the collected IP address to a game service system that provides a corresponding game service; Determining whether the game service system is an IP address of another country by analyzing an IP address received from the game client; And granting or blocking access to the user computer device according to the determination result by the game service system.

The client device for limiting the access area of the game user according to the present invention, when the game client installed in the user computer device is executed, an IP address collection unit for collecting the IP address used for Internet communication of the user computer device; A packet generation unit including an IP address collected by the IP address collection unit and generating a packet, the destination being a game service system for providing a corresponding game service; And a transmitter for transmitting the packet generated by the packet generator to the game service system.

The IP address collecting unit may be configured to collect an IP address set in a network interface card (NIC) of the user computer device.

The IP address collecting unit may be configured to collect the IP address used on the path to which the user computer device is connected to the game service system.

The packet generator may be configured to encrypt the IP address and to generate the packet using the encrypted IP address.

The client device for limiting the access area of the game user according to the present invention may be configured to operate a launcher module that runs when the game client is executed.

On the other hand, the authentication device for limiting the access area of the game user according to the present invention is a device that operates on the game service system side, an IP address setting unit for setting an IP address to be a criterion of whether to permit access; An IP address receiving unit for receiving an IP address (IP address used for Internet communication of the user computer device) collected and transmitted by a game client running on the user computer device; A connection permission unit that determines whether to permit connection of the user computer device by comparing the IP address received through the IP address receiving unit with an IP address set by the IP address setting unit; And an authentication processing unit that permits or blocks the user computer device from accessing a game server that performs the game service according to the determination of the access permission unit.

The authentication processing unit may be configured to record the account information of the user who attempted to access the game service system and the IP address received through the IP address receiving unit as log information.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

A connection structure between a user computer device and a game service system will be described with reference to FIG. 3.

The user computer device 31 is generally composed of a personal computer (PC), and is provided with a game client 31-1 for enabling the use of a game service provided by the game service system 35. The game client 31-1 is configured using a computer program installed and operated on the user computer device 31, and may be recorded on a storage medium such as a CD-ROM and distributed separately, but the game service system 35 It is usually configured to be downloaded, installed, and kept up to date.

In addition, the user computer device 31 is generally configured to use the Internet service through a server 32 of a high speed Internet service provider which provides the Internet service in a corresponding country. The term “high speed internet service provider” refers to a service provider providing Internet communication service in the country where the user computer device 31 is located regardless of its name.

Although the user computer device 31 may directly access the game service system 35 through the Internet network 33, the user computer device 31 may use a virtual private network (VPN) server or a proxy server 34 as described above. The game service system 35 may be connected to the game service system 35 indirectly.

The game service system 35 guides users accessing various game service-related information to users connected through the Internet network 33 and allows them to open a game account by receiving a membership, or operate a web store that can purchase game items. Web server 35-1, which is responsible for user authentication and informs game server 35-3 that the user is an authenticated user, so that game server 35-3 interacts with the user's computer device. Game server 35-3, which performs various online games, with an authentication server 35-2, which permits the user to proceed with a game service, and a user computer device authenticated by the authentication server 35-2. Controlling and managing the billing server 35-4, which charges the usage fee, the database 35-6 storing various information necessary for the operation of the game service system 35, and the database 35-6. Database Weaver (35-5) can comprise the like.

The illustrated game service system 35 is only an example to help understand the description, and of course, the game service system 35 may be variously configured as necessary.

With reference to FIG. 4, an embodiment of a method of restricting an access area of a game user according to the present invention will be described.

First, when the user executes the game client 31-1 installed in the computer device 31 (S41), the game client 31-1 collects an IP address used for internet communication of the user computer device 31. (S42).

The method of collecting the IP address in step S42 may be configured in various ways as necessary. As one example, the IP address set in the network interface card (NIC) of the user computer device 31 may be collected. As another example, the user computer device 31 may collect the IP address used in each path to the game service system 35.

The game client 31-1 transmits the IP address collected through the step S42 to the game service system 35 while attempting to access the game service system 35 (S43).

The game service system 35 analyzes the IP address received through step S43 to determine whether the game server is an IP address to allow the use of the game service or an IP address to block the use of the game service (S44). That is, it is determined whether the IP address received through step S43 is a domestic IP address or an IP address of another country.

If the determination result is an IP address (IP address of another country) to block the use of the game service, the access attempt is blocked to disable the game service (S45, S48).

However, if the determination result is an IP address (domestic IP address) to permit the use of the game service, use of the game service is permitted (S45, S46).

Steps S44, S45, S46, and S48 may be configured to be performed by the authentication server 35-2. If the use of the game service is permitted in step S46, the game server 35-3 communicates with the user computer device 31. The online game proceeds normally between (S47).

In this way, the game client 31-1 collects and transmits an IP address. Therefore, even if a user of another country attempts to access the virtual private network server or proxy server 34 in a domestic way, It will be appreciated that this connection attempt can be blocked.

Referring to FIG. 5, an embodiment of a client device (hereinafter referred to as a client device) for restricting an access area of a game user according to the present invention will be described. The client device 50 may be installed in the user computer device 31. It operates in conjunction with the game client 31-1 or may be configured in the form of a module included as a part of the game client 31-1.

When the game client 31-1 is executed, the IP address collecting unit 51 collects an IP address used for internet communication of the user computer device 31.

The method of collecting the IP information by the IP address collecting unit 51 may be configured in various ways.

As one example, it may be configured to collect an IP address set on a network interface card (NIC) of the user computer device 31. That is, if the IP address of another country is set in the network interface card of the user computer device 31, it can be seen that the user computer device 31 is located in another country.

In such an embodiment, when there are a plurality of IP addresses set in the network interface card, only valid IP addresses for communicating with the game service system 35 can be configured.

As another example, the IP address collection unit 51 may be configured to collect the IP address used for Internet communication on the path to which the user computer device 31 is connected to the game service system 35.

The user computer device 31 may use the Internet through an IP sharer (not shown) for connecting several computer devices to one Internet line provided by a high speed Internet service provider. In this case, the game service system 35 is connected to the server via the IP router and the server 34 of the high speed internet service provider. That is, various network equipment such as a router may exist between the paths where the user computer device 31 is connected to the game service system 35.

In this way, it is necessary to confirm the IP address on the path to which the user computer device 31 connects to the game service system 35.

For this purpose, the 'trace route' function can be used. The 'trace route' function can be used to provide a path to various network devices existing on the path from the user computer device 31 to the game service system 35 as the final destination. You can find out the response speed, etc. In this process, you can find the IP address of the network equipment (for example, the server of the high-speed Internet service provider) located in another country.

Most operating systems (OS) support the 'trace route' feature, and Microsoft's Windows operating system can use the 'tracert' command.

The packet generation unit 52 includes an IP address collected through the IP address collecting unit 51 and serves to generate a packet whose destination is the game service system 35. That is, in the Internet network, since the communication is performed in the form of a data packet, a data packet is generally used to generate a data packet, and thus a detailed description thereof will be omitted.

In particular, the packet generation unit 52 may be configured to encrypt and then packetize the collected IP address to prevent unauthorized access to the packet.

The transmitter 53 transmits the data packet generated by the packet generator 52 to the game service system 35 through the Internet network 33.

On the other hand, the client device 50 of each embodiment described above, when the game client 31-1 is executed, the launcher to perform various pre-processing required for proceeding the game, such as executing an update of the game client ( Launcher) It may be configured in the form of a computer program module that is linked with a program module or included as part of a launcher module.

The launcher module may be configured in various forms as necessary.

Referring to FIG. 6, an example of configuring a launcher module may be described. The launcher module may be configured in a markup language such as HTML (Hyper Text Markup Language), and various information may be provided, such as a notice or a method of using a game service. Can be shown as In general, the launcher module is configured to also play a role of keeping the game client 31-1 up to date.

Referring to FIG. 7, when the game client 31-1 is executed and the launcher module is driven (S71), the client device 50 which operates in conjunction with the launcher module or as a partial module of the launcher module operates. By collecting the IP address and transmitting to the game service system 35 so as to determine whether or not the user computer device 31 is located in the area where the game can be used (S72).

As a result of proceeding to step S72, when the user computer device 31 is located in another country, the connection with the game service system 35 is blocked, so the procedure ends (S73). In this case, an error processing procedure such as terminating execution of the launcher module or the implicit client 31-1 or outputting a message indicating that a game is not available can be performed. 7 shows an example in which the client device 50 operates immediately after the launcher module is driven to perform step S72, but step S72 may be executed at an appropriate time.

If a game service is available (S73), the launcher module connects to the game service system 35 to check whether an updated version of the game client 31-1 exists (S74), and if an updated version exists. The game client of the corresponding version is downloaded again and installed in the user computer device 31 (S75, S76).

Then, when the user instructs the start of the game, such as pressing the 'start game' button on the launcher screen shown in FIG. 6 (S77), the game is in progress with the game server 35-3 of the game service system 35 (S78).

Referring to FIG. 8, an embodiment of an authentication device (hereinafter referred to as an authentication device) for restricting an access area of a game user according to the present invention will be described. The authentication device 80 is provided at the game service system 35 side and serves to block inappropriate access attempts.

The IP address setting unit 81 can set an IP address to be a criterion for determining whether to permit access.

The IP address set through the IP address setting unit 81 may be an IP address of a band that can be allowed to access, or an IP address of a band to be blocked.

The IP address receiving unit 82 receives an IP address collected and transmitted by the game client 31-1 of the user computer device 31. Here, the IP address collected and transmitted by the game client 31-1 means an IP address used for internet communication of the user computer device 31. As an example, an IP address transmitted by the client device 50 described above may be received.

The connection permission unit 83 compares the IP address received through the IP address receiving unit 82 with the IP address set through the IP address setting unit 81 to permit the connection of the corresponding user computer device 31. Determine whether or not.

That is, when the IP address set through the IP address setting unit 81 is an IP address of a band to allow game use, when the received IP address is included in the band of the set IP address, the game is played. Judging by permission. However, when the IP address set through the IP address setting unit 81 is an IP address of a band to block game use, the game is permitted when the received IP address is not included in the set band of the IP address. I judge it.

The authentication processing unit 84 informs the game server 35-3 that the connection of the user computer device 31 is interrupted or the game service is permitted in accordance with the determination in the connection permission unit 83. When the use of the game service is permitted, the game server 35-3 advances the game service procedure with the user computer device 31.

In addition, the authentication processing unit 84 may be configured to record related information such as the account of the user who attempted to connect, the IP address collected and transmitted by the game client, the time when the connection attempt was made, and whether or not the connection was authorized. . Then, afterwards, the administrator of the game service system may use the data to determine the external access situation, and take appropriate measures such as sanctioning the corresponding account.

The above-described embodiments are intended to help the understanding of the present invention, and the present invention is not limited to the above-described embodiments and can be variously modified and implemented by those skilled in the art without departing from the spirit of the present invention. to be.

According to the present invention, even if a user located in another country bypasses a domestic virtual private network server or a proxy server to access a game service system, it is possible to accurately determine that the connection attempt is made in another country. In addition, even if a user of another country uses a private IP address such as an IP router, the location can be determined.

As a result, it is possible not to enjoy the game itself, but to block the access of other users, which are made for inappropriate purposes, such as to secure game items and sell them to others. There is an effect that can be maintained.

Claims (8)

Collecting, by a game client installed and running on a user computer device, an IP address used for internet communication of the user computer device; Transmitting, by the game client, the collected IP address to a game service system that provides a corresponding game service; Determining whether the game service system is an IP address of another country by analyzing an IP address received from the game client; And And allowing the game service system to permit or block access to the user computer device according to the determination result. An IP address collection unit for collecting an IP address used for internet communication of the user computer device when a game client installed in the user computer device is executed; A packet generation unit including an IP address collected by the IP address collection unit and generating a packet, the destination being a game service system for providing a corresponding game service; And And a transmitter configured to transmit the packet generated by the packet generator to the game service system. The method of claim 2, And the IP address collecting unit is configured to collect an IP address set in a network interface card (NIC) of the user computer device. The method of claim 2, And the IP address collecting unit is configured to collect an IP address used on a path to which the user computer device is connected to the game service system. The method of claim 2, The packet generator is configured to encrypt the IP address, and to generate the packet using the encrypted IP address. The method according to any one of claims 2 to 5, The client device for limiting the access area of the game user is configured to operate a launcher module that runs when the game client is executed. An IP address setting unit for setting an IP address to be a criterion for determining whether to permit access; An IP address receiving unit for receiving an IP address (IP address used for Internet communication of the user computer device) collected and transmitted by a game client running on the user computer device; A connection permission unit that determines whether to permit connection of the user computer device by comparing the IP address received through the IP address receiving unit with an IP address set by the IP address setting unit; And And an authentication processing unit which permits or blocks the user computer device from accessing the game server performing the game service in accordance with the determination of the access permission unit. The method of claim 7, wherein And the authentication processing unit records the account information of the user and the IP address received through the IP address receiving unit as log information.

Images