KR20100006371A - A decision method and system of suitability for web contents using white/black list - Google Patents

Abstract

PURPOSE: A suitability judgment method of a web notice and a system thereof using a white/blacklist for fundamentally excluding the notice of a notice material capable of containing harmful information are provided to determine whether corresponding notice material is suitable by equipping a filtering module. CONSTITUTION: A server(200) manages a web board. A filtering module(100) comprises next. A white list database(110) stores the identifying information of harmless files. A black-list database stores the identifying information of harmfulness files.

Description

A Decision Method and System of Suitability for Web Contents using White / Black List}

The present invention relates to a method for determining suitability of a web post, and more particularly, to a method and system for automatically determining suitability of a web post using a white / black list by a computer or an automatic computing device.

Web bulletin boards that allow thousands of users to share information by freely uploading or unloading information are already close to the daily lives of most people. These web bulletin boards have a net function that allows users of geographically distant or diverse statuses to exchange information and opinions with each other across time, space, and social constraints, but for malicious purposes. It also has the adverse function that harmful information can be spread without any sanctions by users who have immature personalities or who have not fully established values. Harmful information refers to a variety of viruses, spyware, and the like that can damage a user's computer or leak personal information, or to indecent, violent, or copyright infringing materials.

Since harmful information such as viruses and spywares have specific codes that can be automatically identified inside of them, the web server controlling the web board is automatically applied if only the information about these specific codes is updated frequently. You can block harmful information. In other words, when uploading a post from a user's computer to a web server, a method such as inspecting information such as an attachment file in advance and determining whether it is not harmful information such as a virus and then posting it to a web bulletin board only when there is no problem is possible. Can be used.

However, it is not possible to know whether or not harmful information such as pornography, violence, copyright infringement data, etc. is harmful information without a person's direct judgment. Various techniques have been proposed to determine the harmfulness of this kind of harmful information. For example, if the ratio of color classified as flesh color is detected over a certain ratio, it is classified as pornographic material. Automatic technology for determining harmful information has been studied, but it takes a long time to judge, and there is a problem that the probability of false positives is very high due to the limitation of artificial intelligence. Therefore, until now, this kind of harmful information has been cracked down by the monitoring agent of the web bulletin board, which reads all the posts posted on the web bulletin board directly and determines whether it is harmful. Figure 1 shows an operational flow of such a conventional web post suitability determination method. As shown, first, when a file is uploaded from the user computer (S101), the web server receives the file, stores it (S102), and then publishes the file (S103). The monitoring agent checks the posted post (S104) and determines whether the post is harmful (S105), and if it is determined that the post is harmful, the monitoring agent deletes the post (S106). In FIG. 1, the steps related to the work performed by the monitoring personnel are indicated by dotted lines (S104 ˜ S106). As shown in the figure, all the steps of checking for harmful posts (S104), judging (S105), and deleting (S106) are not automatically performed, and a person must check them one by one. As a result, this monitoring task was a waste of time and manpower, and even though the posts contained harmful information, it took a long time for monitoring personnel to confirm that the frequency of harmful information was exposed to the web. . In addition, when the same harmful data appears on the web bulletin board several times due to the characteristics of the web content that is free to share information, the monitoring personnel had to repeat the same operation, which was very inconvenient. Therefore, there has been a constant demand of users and those skilled in the art to solve such various inconveniences.

Korean Laid-Open Patent Publication No. 2001-0025209 (hereinafter, referred to as Prior Art 1) discloses a technology related to a method of operating a harmful information blocking program to set whether to block or remotely manage harmful information of a user PC and execute a harmful information blocking function. have. In the prior art 1, the web page body content of the harmful site is converted into a text language to classify the web content and the linked web address through a phrase analysis operation, and record only the linked web address in the database. That is, the prior art 1 searches the body contents of a plurality of unspecified sites, classifies them as harmful sites when there are many harmful words, stores the addresses of the corresponding sites in a harmful information database, and builds harmful information as described above. On the basis of the database, when a user attempts to access an address of a harmful site stored in the harmful information database through a PC, a function of blocking it is performed.

 In addition, Korean Patent Laid-Open No. 2001-0097250 (hereinafter, referred to as Prior Art 2) discloses a technology related to an apparatus and method for providing a connection blocking service for a harmful site. In the prior art 2, by using a web robot and expert engine to build a blocking target control list for storing a list of harmful sites, based on the user also attempts to access the address of the harmful site stored in the blocked target control list It is supposed to function to block this when doing so.

Here, the prior art 1 and the prior art 2 is to block the harmful information by using only the address of the harmful site, that is, url which is text information starting with http: //. However, in the case of a site that manages a large number of data, it is easiest to configure the data in the form of uploading the data to a web bulletin board. Currently, many rogue administrators use a web bulletin board to build a harmful site. • Uploading copyright infringement materials. In the case of using the apparatus and method of the prior art 1 and the prior art 2, once the harmful site is established through such a process, the site can be classified as a harmful site by searching for words in the site. However, at the time of uploading or posting harmful data, it is impossible to block uploading or posting by judging the harmfulness of the data itself. That is, the prior art 1 and the prior art 2 is a technology that can operate only after the harmful site is built.

The limitations of the prior art 1 and the prior art 2 are more apparent in the following cases. It is well known that many ordinary people create community sites through sites that provide web bulletin boards. For example, in the case of the following cafe (http://cafe.daum.net/), anyone can easily open an Internet community site in the form of a web board without special procedures. Anyone can post, as long as you are a member. At this time, even if the site itself providing the web bulletin board (ie, the next cafe itself in the above example) was originally made for a healthy purpose, some bad users would post harmful materials that had nothing to do with the purpose of opening a cafe on the bulletin board. May occur. Indeed, many community managers suffer a lot from these problems, and it is not uncommon for communities that experience these problems to close because of their adverse effects. However, in this case, the community site itself is a site originally created for a healthy purpose, so it is difficult to classify this site as a harmful site. In addition, when the person who manages the harmful site list in the prior art 1 and the prior art 2 manually classifies these sites as harmful sites and makes them into a database, the creators and healthy users of the original community sites may use their own communities due to such measures. It is very difficult to promote goodwill and mass production of goodwill victims this time.

As described above, prior art 1 and prior art 2 classify a site as a harmful site and block access to this site to block harmful information, which is sufficient effect in the diversified and personalized current Internet environment. It is a well-known fact that there is a need for a technology that can effectively block harmful information while solving these problems.

Accordingly, the present invention has been made to solve the problems of the prior art as described above, an object of the present invention is to provide a method and system for determining suitability of a web post using a white / black list. More specifically, by including a filtering module containing a white / black list on the server and the client to determine whether the post in advance before posting any post on the web bulletin board, further verification if the file is determined to be harmless Web-based white / blacklists that significantly reduce the amount of monitoring effort by allowing posts to be immediately registered without processing, and by default not to post posts containing harmful information by not registering posts if the file is found to be harmful To provide a method and system for determining the suitability of a post.

A system for determining suitability of a web post using a white / black list according to the present invention for achieving the above object includes a server 200 for operating and controlling a web bulletin board; A client 300 connected to the server 200; And a white list database 110 connected to the server 200 and the client 300 and storing identification information of harmless files, a black list database 120 storing identification information of harmful files, and an upload request to a web bulletin board. A filtering module (100) comprising a determination module (130) for comparing the identification information of the file with respect to the file and the white list database (110) and the black list database (120) to determine the harmfulness of the file; The file type is checked by the filtering module 100, characterized in that it comprises any one or more selected from the form of text, image, audio and video.

In this case, the determination module 130 may be directly connected to or embedded in the server 200 terminal, or may be embedded in the client 300 terminal.

In addition, the identification information is characterized in that the hash value of the file. At this time, the hash value is preferably a hash value for the entire file or a hash value for a part of the file.

In addition, the white list database 110 and the black list database 120, the determination module 130 is provided in the server 200 or the client 300, the server 200 and a plurality of the The client 300 may be shared and operated, or the determination module 130 may be provided at the client 300 to operate independently of each client 300.

In addition, the method for determining the suitability of the web post using the white / black list according to the present invention for achieving the above object, in the method of determining the suitability of the web post by the system as described above, a1) the client 300 Uploading a file to the server (200) (S201); b1) the server 200 storing the uploaded file (S202); c1) determining whether the uploading requested file is a harmful post by the filtering module 100 directly connected or embedded in the server 200 (S203); d1-1) when the filtering module 100 determines that the uploaded file is harmless (S203-No), the server 200 posting the uploaded file (S213); Characterized in that comprises a.

In this case, a1) the client 300 uploads a file to the server 200 (S201); b1) the server 200 storing the uploaded file (S202); c1) determining whether the uploaded file is a harmful post by the filtering module 100 directly connected or embedded in the server 200 (S203); d1-2) when the filtering module (100) determines that the uploaded file is harmful (S203-Yes), the server (200) deleting the uploaded file and rejecting the posting (S223); Characterized in that comprises a.

In this case, a1) the client 300 uploads a file to the server 200 (S201); b1) the server 200 storing the uploaded file (S202); c1) determining whether the uploaded file is a harmful post by the filtering module 100 directly connected or embedded in the server 200 (S203); d1-3) If the filtering module 100 determines that the uploaded requested file is not harmless or harmful (S203-Not Defined), the server 200 temporarily posts the uploaded requested file. Step S223; e1-3) determining whether the temporarily posted file is a post which is harmful in content (S205); f1-3) If it is determined that the temporarily posted file is harmless (S205-Yes), the temporarily posted file is registered as a harmless file in the filtering module 100 (S215) and formally posted (S213), Alternatively, when it is determined that the temporarily posted file is harmful (S205-Yes), the temporarily posted file is registered as a harmful file in the filtering module 100 (S225) and the server 200 deletes the file (S223). ); Characterized in that comprises a.

Or, the method for determining the web post suitability by the system as described above, a2) the client (300) requesting the file upload to the server (200) (S301); b2) the filtering module 100 embedded in the client 300 determining whether the uploaded file is a harmful post (S302); c2-1) when the filtering module 100 determines that the uploaded file is harmless (S302-No), the server 200 storing the uploaded file (S312); d2-1) the server 200 posting the upload requested file (S313); Characterized in that comprises a.

Also, at this time, a2) the client 300 requesting the file upload to the server 200 (S301); b2) the filtering module 100 embedded in the client 300 determining whether the uploaded file is a harmful post (S302); c2-2) when the filtering module 100 determines that the uploaded file is harmful (S302-Yes), the server 200 rejects the uploading of the uploaded file (S322); Characterized in that comprises a.

Also, at this time, a2) the client 300 requesting the file upload to the server 200 (S301); b2) the filtering module 100 embedded in the client 300 determining whether the uploaded file is a harmful post (S302); c2-3) If the filtering module 100 determines that the uploaded file cannot be determined to be harmless or harmful (S203-Not Defined), the server 200 temporarily stores the uploaded file. (S303) and temporarily posting (S304); d2-3) determining whether the temporarily posted file is a post which is harmful in content (S305); e2-3) If it is determined that the temporarily posted file is harmless (S305-Yes), the temporarily posted file is registered as a harmless file in the filtering module 100 (S315) and formally posted (S313), Alternatively, if it is determined that the temporarily posted file is harmful (S305-Yes), the temporarily posted file is registered as a harmful file in the filtering module 100 (S325), and the server 200 deletes and posts the file. Rejecting (S322); Characterized in that comprises a.

In addition, in the web post suitability determination method as described above, the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), a1) the determination module ( Step 130, extracting identification information of the uploaded file (S501); B1) comparing, by the determination module 130, the extracted file identification information with the black list database 120 (S502); C1-1) If it is determined (S502-No) that the extracted file identification information does not exist in the black list database 120 by the determination module 130, the determination module 130 is extracted. Comparing file identification information with the white list database 110 (S503); 1-1-2) If it is determined by the determination module 130 that the extracted file identification information does not exist in the white list database 110 (S503-No), the determination module 130 determines the Classifying the uploaded file into a gray list (S504); Characterized in that comprises a.

In this case, in the web post suitability determination method as described above, the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), a1) the determination; Extracting, by the module 130, identification information of the file requested to be uploaded (S501); B1) comparing, by the determination module 130, the extracted file identification information with the black list database 120 (S502); C1-1) If it is determined (S502-No) that the extracted file identification information does not exist in the black list database 120 by the determination module 130, the determination module 130 is extracted. Comparing file identification information with the white list database (S503); 1-1-1) If it is determined (S503-Yes) that the extracted file identification information exists in the white list database 110 by the determination module 130, the determination module 130 uploads the upload. Requesting to publish the requested file (S514); Characterized in that comprises a.

In this case, in the web post suitability determination method as described above, the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), a1) the determination; The module 130 extracts identification information of the file requested to be uploaded (S501); B1) comparing, by the determination module 130, the extracted file identification information with the black list database 120 (S502); C-2) If it is determined in operation S502-Yes that the extracted file identification information exists in the black list database 120, the determination module 130 requests the upload. Requesting to reject or delete the file (S524); Characterized in that comprises a.

Alternatively, in the web post suitability determination method as described above, the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), a2) the determination module ( Step 130, extracting identification information of the uploaded file (S601); B2) comparing, by the determination module 130, the extracted file identification information with the white list database 110 (S602); 2-1) If it is determined by the determination module 130 that the extracted file identification information does not exist in the white list database 110 (S602-No), the determination module 130 is extracted. Comparing file identification information with the black list database (S603); 2-1-2) If it is determined by the determination module 130 that the extracted file identification information does not exist in the black list database 120 (S603-No), the determination module 130 determines that Classifying the uploaded file into a gray list (S604); Characterized in that comprises a.

At this time, in the web post suitability determination method as described above, the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), a2) the determination Extracting, by the module 130, identification information of the file requested to be uploaded (S601); B2) comparing, by the determination module 130, the extracted file identification information with the white list database 110 (S602); 2-1) If it is determined by the determination module 130 that the extracted file identification information does not exist in the white list database 110 (S602-No), the determination module 130 is extracted. Comparing file identification information with the black list database (S603); 2-1-1) If it is determined (S603-Yes) that the extracted file identification information exists in the black list database 120 by the determination module 130, the determination module 130 uploads the upload. Requesting to reject or delete the requested file (S624); Characterized in that comprises a.

At this time, in the web post suitability determination method as described above, the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), a2) the determination Extracting, by the module 130, identification information of the file requested to be uploaded (S601); B2) comparing, by the determination module 130, the extracted file identification information with the white list database 110 (S602); 2-2) If it is determined (S602-Yes) that the extracted file identification information exists in the white list database 110 by the determination module 130, the determination module 130 requests the upload. Requesting to publish a file (S614); Characterized in that comprises a.

In addition, the identification information is characterized in that the hash value of the file. At this time, the hash value is preferably a hash value for the entire file or a hash value for a part of the file.

According to the present invention, in a computer or an automatic computing device, a file is pre-checked through a filtering module before being uploaded and posted to a server, whereby harmful information registered in the black list of the filtering module is primarily filtered as well as white. The harmless information registered in the list indicates that no judgment is required, and as a result, only the files which are not registered in the above two lists need to be subjected to the hazard determination on the content, so that the absolute amount of the hazard determination on the content is determined. It also has the effect of reducing the amount of time required for monitoring web bulletin boards. In addition, the white-black-listed database is automatically created by this monitoring task, which makes the database construction itself efficient.

The above effect is further reduced in the case of using the automatic hazard determination program on the content when the second determination of the hazard is made, since the amount of files that the automatic hazard determination program on the content should consider during the same time is greatly reduced, thereby reducing the system load. In addition, there is an effect that the efficiency of the automatic risk determination program on the contents is also greatly increased. Accordingly, there is a great effect that it becomes much easier to apply the automatic risk determination program on the actual system, which has been difficult to apply to the actual system due to problems such as efficiency until now.

Of course, according to the present invention, the efficiency of determining the suitability of the web posts is dramatically increased, so there is a clear effect that can significantly reduce the frequency of inappropriate posts exposed on the web compared to the prior art. In addition, since the monitoring method of the present invention can be adopted in the conventional monitoring method without major change, the human resource utilized in the prior art can be utilized in the system employing the method of the present invention as it is, and in this case, monitoring personnel As the same as the conventional work can be performed, but the absolute amount of work can be reduced.

Hereinafter, a method and system for determining suitability of a web post using a white / black list according to the present invention having the configuration as described above will be described in detail with reference to the accompanying drawings.

2 is a flowchart illustrating a web post suitability determination method according to a first embodiment of the present invention. First, when a file is uploaded from the client (S201), the server stores the file (S202) as in the prior art. However, conventionally, after the server posts the file in this next step, unlike the presence of a monitoring agent, that is, whether or not the suitability is determined by human power, in the present invention, the harmfulness of the file is automatically determined first by the filtering module (S203). If it is determined as a harmless post (S203-No), the server posts the file (S213), and if determined to be a harmful post (S203-Yes), the server deletes the file and rejects the post (S223).

The filtering module includes a white list database for storing identifiable information (e.g. hash value) of a file known as a harmless file, and a black list database for storing identifiable information (e.g. hash value) of a file known as a harmful file. Consists of including. Accordingly, the filtering module may automatically determine whether harmful by comparing a harmless file or a harmful file known in advance in a computer or an automatic computing device with a file currently requested for upload. The configuration and operation of the filtering module will be described in more detail with reference to FIGS. 4 and 5.

In this case, when the harmfulness of the file is determined by the filtering module (S203), as described above, when no identification information of the corresponding file exists in the white list or the black list, no harmlessness or harmfulness is determined (S203). -Not Defined), the file is classified as a gray list, and the server temporarily posts it (S204). After this temporary posting (S204), the content is harmful once again (S205). . That is, unlike the file that is officially posted (S205), the file that is temporarily posted (S204) is a file waiting for the harmfulness determination work on the content is completed, the temporary posted (S204) files when performing the harmfulness determination work on the contents The file that needs to be inspected is displayed, and is distinguished from the file that is officially posted (S205).

As described above, the filtering module judges the harmfulness by comparing a file that is known to be harmless / harmful in advance with a file that is currently uploaded, but for such a file whose degree of harm is not known in advance, Because it may not be done correctly, the secondary content is determined in the light of the contents of the file. Such a determination process may be automatically performed using a program for determining the harmfulness of the contents developed to date as described in the prior art paragraph.

As such, when the harmfulness of the content is determined (S205), and the file is determined to be harmless in content, the filtering module registers the file as a harmless file (S215) and then officially publishes the file that was temporarily posted (S213), Alternatively, if it is determined that the file is harmful in content, the filtering module registers the file as a harmful file (S225) and deletes and rejects the file (S223).

In this way, before any file is uploaded to the server and checked in advance through the filtering module, harmful information that is already known (ie, pre-registered in the filtering module) is first filtered so that the same harmless material The conventional inconvenience of having to recheck or delete the same harmful data multiple times is greatly eliminated. In fact, in most public bulletin boards, the frequency of harmful information such as pornography, violence, and copyright infringement is not so high, and in fact, most of the information is harmless. However, in the related art, since all files of the bulletin board had to be inspected one by one, there was a great inconvenience because the files that had already been found to be harmless information had to be checked again each time they were posted. However, according to the present invention, since no inspection is required for files that are found to be harmless information, the inspection operation can be omitted for a large number of harmless information that occupies most of the bulletin board as described above. In addition, according to the present invention, files which are found to be harmful information are not allowed to be posted at all in advance. Therefore, the inspection task to determine the harmfulness of the content is to be performed only on the files stored on the server except for the files that do not need to be scanned (files that are found to be harmless information), thereby reducing the absolute amount of work. Will be.

If the automatic risk determination program is used, since the amount of files that the automatic risk determination program should be reviewed as described above is greatly reduced, the system load is reduced and Efficiency is also greatly increased, and it becomes much easier to apply the automatic content determination program to the actual system, which has been difficult to apply to the actual system until now due to efficiency, time, etc.

3 is a flowchart illustrating a web post suitability determination method according to a second embodiment of the present invention. Although substantially the same as the first embodiment shown in FIG. 2, in the second embodiment, unlike the first embodiment, the filtering module is provided in the client, and thus, unlike the first embodiment where harmful post determination is performed at the server end, Otherwise harmful post determination is made at the client end. That is, when the file upload (S301) is first started from the client, in the first embodiment, the file is first stored in the server (S202), and then the filtering module determines the harmfulness of the file (S203). In the example, the filtering module first determines whether the corresponding post contains harmful information (S302), and if the corresponding file is determined to be harmful (S302-Yes), the server immediately rejects the posting of the corresponding file (S322). That is, in the second embodiment, the file determined to be harmful by the filtering module is not uploaded to the server at all. Of course, if the file is determined to be harmless (S302-No), the file is stored in the server (S312) and then posted (S313).

As in the first embodiment, when the identification information of the file does not exist in both the white list and the black list and cannot be determined (S302-Not Defined), the file is also classified as a gray list and temporarily stored in the server. It is stored (S303) and the temporary posting (S304). Thereafter, when the harmfulness of the content is determined (S305) and finally determined to be harmless, the corresponding file is registered as a harmless file in the filtering module (S315) and formally posted (S313). Alternatively, if it is determined that the file is harmful in this step, the file is registered as a harmful file in the filtering module (S325) and then the post is deleted and rejected (S322).

4 is a system diagram of the filtering module of the present invention, and FIG. 5 is an operation flowchart of the filtering module. As shown in FIG. 4, the filtering module 100 includes a white list database 110, a black list database 120, and a determination module 130. The filtering module 100 uses a server 200 of a web bulletin board and a corresponding bulletin board. The client 300 is connected. The white list database 110 stores information about harmless files, and the black list database 120 stores information about harmful files. In the case of the first embodiment described with reference to FIG. 2, the determination module 130 is directly connected to or built-in with the server 200, but is connected with the client 300 through the Internet, and in the case of the second embodiment described with reference to FIG. 3. The determination module 130 is embedded in the client 300 but is connected to the server 200 through the Internet. Of course, whether the determination module 130 is actually provided at the server 200 stage or the client 300 stage, the harmless / harmful files stored in the white list database 110 and the black list database 120 are stored. The identification information may be shared by the server 200 and all clients 300. At this time, when the determination module 130 is provided at the server 200, the white list database 110 and the black list database 120 are naturally shared automatically. Alternatively, when the determination module 130 is provided at the client 300 end, the determination module 130 provided in each of the client 300 periodically checks the white list database 110 and the black list database 120. White list database 110 and black list database 120 by sending information to the server 200 to update and updating the updated information to the server 200 by regularly sending the updated information to each client 300. You can also share Alternatively, when the determination module 130 is provided in the client 300 stage, each client 300 may have an independent white list database 110 and a black list database 120 and update them independently. It's okay. Of course, the above description is not intended to limit the present invention, but is merely an example, and the method of updating the white list database 110 and the black list database 120 may vary without departing from the spirit of the present invention. Can be designed.

As illustrated in FIG. 5, the determination module 130 first extracts identification information of the corresponding file with respect to the file uploaded from the client 300 to the server 200 (S501). Of course, as described above, in the case of the first embodiment, since the filtering module 100 is located at the server 200 end, identification information is extracted for the file once uploaded and stored in the server 200, In this case, since the filtering module 100 is located at the client 300 end, the client 300 receives the upload command and extracts identification information about the file received the upload command in the step before uploading to the server 200. do. In this case, the identification information is preferably a hash value. To be described in detail, a one-way hash value of the entire file is extracted by using a one-way hash technique, or a one-way hash value of a part of the file is extracted as the identification information. It is desirable to. Of course, it is more preferable to extract a hash value by sampling only a portion of a file, for example, an area of the front part of the file, in order to reduce the work time in the identification information extraction operation itself and subsequent comparison determination operations.

The determination module 130 compares the identification information (eg, a hash value) of the extracted file with the black list database 120 to determine (S502). If identification information (eg, a hash value) of the file exists in the black list database 120, the determination module 130 determines that the file is harmful (S502-Yes) and the file is rejected or deleted (S524). ) At this time, the file posting rejection step (S524), in the case of the first embodiment is a step (S223) to immediately delete the file stored in the server 200 without posting on the web bulletin board, two In the case of the first embodiment, it is appropriate that the client 300 deny transmission of the checked file (S322).

If the determination module 130 confirms that the file does not exist in the black list database 120 (S502-No), the determination module 130 determines identification information (eg, a hash value) of the file. Is determined by comparing with the white list database 110 (S503). If it is determined in operation S503-Yes that the identification information (eg, a hash value) of the file exists in the white list database 110, the determination module 130 may post the file (S514). However, if identification information (eg, a hash value) of the corresponding file does not exist in the white list database 110 (S503-No), the determination module 130 classifies the file as a gray list (S504).

Of course, the step (S514) of posting the file is the same as the file posting step (S524), in the case of the first embodiment the step of publishing the file stored in the server 200 to the web bulletin board posted In the case of the second embodiment, it is appropriate that the client 300 transmits and stores the file in which the inspection is proved to be harmless to the server 200 (S312).

In addition, in the first embodiment, the gray list classification step (S504) is a step (S204) in which the server 200 temporarily posts a file in the first embodiment. In the second embodiment, the gray list is classified into the client 300. Is a step of temporarily transmitting to the server 200 to store (S303).

6 is another embodiment of an operation step of the determination module 130. The same determination step as in FIG. 5 is performed, but in the embodiment of FIG. 5, the uploaded file is first compared with the black list database 120 and later with the white list database 110. In the exemplary embodiment, the upload requested file is first compared with the white list database 110 and later with the black list database 120.

The present invention is not limited to the above-described embodiments, and the scope of application of the present invention is not limited to those of ordinary skill in the art to which the present invention pertains without departing from the gist of the present invention as claimed in the claims. Of course, various modifications can be made.

1 is a flow chart of a conventional web post suitability determination method.

2 is an operational flowchart of a web post suitability determination method according to a first embodiment of the present invention;

3 is an operational flowchart of a web post suitability determination method according to a second embodiment of the present invention;

4 is a system diagram of a filtering module of the present invention.

5 is an embodiment of an operational flowchart of the filtering module of the present invention.

5 is another embodiment of an operational flowchart of the filtering module of the present invention.

** Description of the symbols for the main parts of the drawings **

100: filtering module

110: White List Database

120: blacklist database

130: judgment module

200: server

300: client

Claims (19)

A server 200 for operating and controlling a web bulletin board; A client 300 connected to the server 200; And It is connected to the server 200 and the client 300, The white list database 110 storing identification information of a harmless file, the black list database 120 storing identification information of a harmful file, and the identification information of the corresponding file and the white list database of a file requested to be uploaded to a web bulletin board ( A filtering module (100) comprising a determination module (130) for comparing the black list database (120) and the harmfulness of a corresponding file; The web post using a white / black list, wherein the type of the file checked by the filtering module 100 includes at least one selected from text, image, audio, and video types. Conformity judgment system. The method of claim 1, wherein the determination module 130 is A system for determining suitability of a web post using a white / black list, which is provided by being directly connected to or embedded in the server 200, or embedded in the client 300. The method of claim 1, wherein the identification information The suitability determination system of a web post using a white / black list, characterized in that the hash value of the file. 4. The hash value of claim 3, wherein the hash value is A system for determining suitability of a web post using a white / black list, which is a hash value for an entire file or a hash value for a part of a file. The method of claim 1, wherein the white list database 110 and the black list database 120 is The determination module 130 is provided at the server 200 or the client 300 to be shared and operated by the server 200 and the plurality of clients 300, or Or the determination module (130) is provided at the client (300) end and independently operated by each client (300). In the web post suitability determination method by the system of claim 2, a1) uploading a file to the server (200) by the client (S201); b1) the server 200 storing the uploaded file (S202); c1) determining whether the uploaded file is a harmful post by the filtering module 100 directly connected or embedded in the server 200 (S203); d1-1) when the filtering module 100 determines that the uploaded file is harmless (S203-No), the server 200 posting the uploaded file (S213); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. In the web post suitability determination method by the system of claim 2, a1) uploading a file to the server (200) by the client (S201); b1) the server 200 storing the uploaded file (S202); c1) determining whether the uploaded file is a harmful post by the filtering module 100 directly connected or embedded in the server 200 (S203); d1-2) when the filtering module (100) determines that the uploaded file is harmful (S203-Yes), the server (200) deleting the uploaded file and rejecting the posting (S223); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. In the web post suitability determination method by the system of claim 2, a1) uploading a file to the server (200) by the client (S201); b1) the server 200 storing the uploaded file (S202); c1) determining whether the uploaded file is a harmful post by the filtering module 100 directly connected or embedded in the server 200 (S203); d1-3) If the filtering module 100 determines that the uploaded requested file is not harmless or harmful (S203-Not Defined), the server 200 temporarily posts the uploaded requested file. Step S223; e1-3) determining whether the temporarily posted file is a post which is harmful in content (S205); f1-3) If it is determined that the temporarily posted file is harmless (S205-Yes), the temporarily posted file is registered as a harmless file in the filtering module 100 (S215) and formally posted (S213), Alternatively, when it is determined that the temporarily posted file is harmful (S205-Yes), the temporarily posted file is registered as a harmful file in the filtering module 100 (S225) and the server 200 deletes the file (S223). ); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. In the web post suitability determination method by the system of claim 2, a2) requesting the client 300 to upload a file to the server 200 (S301); b2) the filtering module 100 embedded in the client 300 determining whether the uploaded file is a harmful post (S302); c2-1) when the filtering module 100 determines that the uploaded file is harmless (S302-No), the server 200 storing the uploaded file (S312); d2-1) the server 200 posting the upload requested file (S313); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. In the web post suitability determination method by the system of claim 2, a2) requesting the client 300 to upload a file to the server 200 (S301); b2) the filtering module 100 embedded in the client 300 determining whether the uploaded file is a harmful post (S302); c2-2) when the filtering module 100 determines that the uploaded file is harmful (S302-Yes), the server 200 rejects the uploading of the uploaded file (S322); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. In the web post suitability determination method by the system of claim 2, a2) requesting the client 300 to upload a file to the server 200 (S301); b2) the filtering module 100 embedded in the client 300 determining whether the uploaded file is a harmful post (S302); c2-3) If the filtering module 100 determines that the uploaded file is not harmless or harmful (S203-Not Defined), the server 200 temporarily stores the uploaded file. Storing (S303) and temporarily posting (S304); d2-3) determining whether the temporarily posted file is a post which is harmful in content (S305); e2-3) If it is determined that the temporarily posted file is harmless (S305-Yes), the temporarily posted file is registered as a harmless file in the filtering module 100 (S315) and formally posted (S313), Alternatively, if it is determined that the temporarily posted file is harmful (S305-Yes), the temporarily posted file is registered as a harmful file in the filtering module 100 (S325), and the server 200 deletes and posts the file. Rejecting (S322); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. The method according to any one of claims 6 to 11, wherein the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), A1) extracting, by the determination module 130, identification information of the file requested to be uploaded (S501); B1) comparing, by the determination module 130, the extracted file identification information with the black list database 120 (S502); C1-1) If it is determined (S502-No) that the extracted file identification information does not exist in the black list database 120 by the determination module 130, the determination module 130 is extracted. Comparing file identification information with the white list database (S503); 1-1-2) If it is determined by the determination module 130 that the extracted file identification information does not exist in the white list database 110 (S503-No), the determination module 130 determines the Classifying the uploaded file into a gray list (S504); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. The method according to any one of claims 6 to 11, wherein the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), A1) extracting, by the determination module 130, identification information of the file requested to be uploaded (S501); B1) comparing, by the determination module 130, the extracted file identification information with the black list database 120 (S502); C1-1) If it is determined (S502-No) that the extracted file identification information does not exist in the black list database 120 by the determination module 130, the determination module 130 is extracted. Comparing file identification information with the white list database (S503); 1-1-1) If it is determined (S503-Yes) that the extracted file identification information exists in the white list database 110 by the determination module 130, the determination module 130 uploads the upload. Requesting to publish the requested file (S514); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. The method according to any one of claims 6 to 11, wherein the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), A1) extracting, by the determination module 130, identification information of the file requested to be uploaded (S501); B1) comparing, by the determination module 130, the extracted file identification information with the black list database 120 (S502); C-2) If it is determined in operation S502-Yes that the extracted file identification information exists in the black list database 120, the determination module 130 requests the upload. Requesting to reject or delete the file (S524); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. The method according to any one of claims 6 to 11, wherein the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), A2) extracting, by the determination module 130, identification information of the file requested to be uploaded (S601); B2) comparing, by the determination module 130, the extracted file identification information with the white list database 110 (S602); 2-1) If it is determined by the determination module 130 that the extracted file identification information does not exist in the white list database 110 (S602-No), the determination module 130 is extracted. Comparing file identification information with the black list database (S603); 2-1-2) If it is determined by the determination module 130 that the extracted file identification information does not exist in the black list database 120 (S603-No), the determination module 130 determines that Classifying the uploaded file into a gray list (S604); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. The method according to any one of claims 6 to 11, wherein the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), A2) extracting, by the determination module 130, identification information of the file requested to be uploaded (S601); B2) comparing, by the determination module 130, the extracted file identification information with the white list database 110 (S602); 2-1) If it is determined by the determination module 130 that the extracted file identification information does not exist in the white list database 110 (S602-No), the determination module 130 is extracted. Comparing file identification information with the black list database (S603); 2-1-1) If it is determined (S603-Yes) that the extracted file identification information exists in the black list database 120 by the determination module 130, the determination module 130 uploads the upload. Requesting to reject or delete the requested file (S624); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. The method according to any one of claims 6 to 11, wherein the filtering module 100 determines that the uploaded file is harmful (c1: S203, b2: S302), A2) extracting, by the determination module 130, identification information of the file requested to be uploaded (S601); B2) comparing, by the determination module 130, the extracted file identification information with the white list database 110 (S602); 2-2) If it is determined (S602-Yes) that the extracted file identification information exists in the white list database 110 by the determination module 130, the determination module 130 requests the upload. Requesting to publish a file (S614); Method for determining suitability of a web post using a white / black list, characterized in that comprises a. The method according to any one of claims 6 to 11, wherein the identification information is Method for determining suitability of a web post using a white / black list, characterized in that the hash value of the file. 19. The method of claim 18, wherein the hash value is How to determine the suitability of a web post using a white / black list, characterized in that the hash value for the entire file, or a portion of the file.

Images