KR20130111006A - Device for connecting to intranet, and apparatus and method for controlling connection of device to intranet - Google Patents

Abstract

PURPOSE: A device for connecting to intranet, an apparatus for controlling intranet connection of the device and a method thereof are provided to enable members of a group including a commercial enterprise to connect to the intranet of the group efficiently even when the group does not develop a server program and an application for the device directly. CONSTITUTION: A device (100) for connecting to intranet includes a first communication unit (110), a second communication unit (120) and an intranet connection unit (130). The first communication unit transmits first user information to a first server, and receives connection information of a second server corresponding to the first user information from the first server. The second communication unit connects to the second server according to the connection information, and receives application customized data according to a group from the second server, and transmits second user information to the second server. The intranet connection unit connects to the intranet through the second server by receiving authentication for connection authority from an intranet server of the intranet on the basis of the second user information. [Reference numerals] (110) First communication unit; (120) Second communication unit; (130) Intranet connection unit

Description

DEVICE FOR CONNECTING TO INTRANET, AND APPARATUS AND METHOD FOR CONTROLLING CONNECTION OF DEVICE TO INTRANET}

The present invention relates to a device for connecting to an intranet, and an apparatus and method for controlling an intranet connection of a device. More specifically, the present invention relates to a device for connecting to a group of intranets, and to an apparatus and method for controlling the connection of a device to a group of intranets.

In recent years, companies and companies that use groupware to perform work are increasing. Groupware refers to a structure including software or software for supporting group work in which a member of an enterprise or the like cooperates with each other in a workplace connected by a computer.

Groupware enables computer users in an enterprise to handle tasks such as document preparation, payment, and document storage through a personal computer connected to a LAN or other communication network. It integrates business software such as co-writing system, numerical calculation and database using word processor, and adds communication functions such as e-mail, bulletin board, electronic payment, data sharing, and e-conference support. Groupware can improve the quality of work by organizing computers scattered like sand grains in a networking way. In addition, the information distributed in each department or task can be processed comprehensively, and the work process can be standardized. For this reason, groupware has recently emerged as a key factor in improving corporate productivity.

A network for using groupware is called an intranet, and an intranet means a closed local area network using an Internet protocol. As the performance of devices such as smartphones is developed, there are increasing cases in which company members use a device to connect to a company intranet. Therefore, a method of efficiently connecting to a company intranet using a device is required.

A device for accessing an intranet and an apparatus and method for controlling access to an intranet according to an embodiment of the present invention allow a group including an enterprise to efficiently connect members to an intranet of a group without directly developing a server program and an application for a device. It is intended to be.

A device for connecting to an intranet according to an embodiment of the present invention,

A device for accessing an intranet of a predetermined group through a second server of a predetermined group by using a first server, comprising: transmitting first user information to the first server, and transmitting the first user information from the first server to the first user information. A first communication unit receiving connection information of a corresponding second server; A second communication unit which accesses the second server according to the access information, receives application customization data according to the predetermined group from the second server, and transmits second user information to the second server; And an intranet access unit configured to access the intranet through the second server by receiving authentication for access authority from an intranet server of the intranet based on the second user information.

The first user information may include an email domain of a user of the device.

The connection information of the second server corresponding to the first user information may include connection information of the second server corresponding to the email domain of the user.

The device includes a memory unit for storing an application for accessing the intranet; And a controller configured to customize the application by using the application customization data.

The application customization data may include at least one of data for the group logo of the predetermined group, data for changing a function of the application, and data for changing an interface of the application.

Intranet connection control device according to another embodiment of the present invention,

When the external device is connected through the application of the external device, the communication unit for transmitting the application customization data according to a predetermined group to the external device, and receives the user information from the external device; A determining unit that determines, via the intranet server of the predetermined group, whether a user of the external device that has transmitted the user information is authorized to access the intranet of the predetermined group; And when the user of the external device has a right to access the intranet, a controller configured to mediate the connection of the external device to the intranet.

The application customization data may include at least one of data for the group logo of the predetermined group, data for changing a function of the application, and data for changing an interface of the application.

The user information may include device identification information of the external device, and the controller may include the device identification information of the external device in the access reject list when the user of the external device does not have a right to access the predetermined group of intranets. If the user information is received again from the user of the external device, it may transmit a connection rejection message to the external device.

Intranet connection control method according to an embodiment of the present invention,

Transmitting, by the device, the first user information to the first server; Receiving, by the device, access information of a second server of a group corresponding to the first user information from the first server; Transmitting, by the second server, application customization data to the connected device according to the connection information, and receiving second user information from the device; And determining, via the intranet server of the intranet of the group, the second server whether the user of the device that has transmitted the second user information is authorized to access the intranet of the group, thereby connecting the device to the intranet. It may include the step of mediating.

Intranet connection control method according to another embodiment of the present invention,

A method of accessing an intranet of a predetermined group through a second server of a predetermined group by using a first server, the method comprising: transmitting first user information to the first server, and transmitting the first user information from the first server to the first user information. Receiving connection information of a corresponding second server; Connecting to the second server according to the access information, receiving application customization data according to the predetermined group from the second server, and transmitting second user information to the second server; And accessing the intranet through the second server by receiving authentication for access authority from an intranet server of the intranet based on the second user information.

Intranet access control method according to another embodiment of the present invention,

If an external device is connected through an application of an external device, transmitting application customization data according to a predetermined group to the external device; Receiving user information from the external device; Determining, via the intranet server of the predetermined group, whether a user of the external device that has transmitted the user information is authorized to access the intranet of the predetermined group; And if the user of the external device has a right to access the intranet, mediating the connection of the external device to the intranet.

A program for executing the intranet connection control method by a computer can be recorded on a computer-readable recording medium.

A device for accessing an intranet, and an apparatus and method for controlling access to an intranet according to an embodiment of the present invention may be applied to an intranet of a group even if a group including an enterprise does not directly develop a server program and an application for a device. Allow for efficient connection.

1 is a diagram illustrating a configuration of an intranet access control system according to an embodiment of the present invention.
2 is a block diagram showing a configuration of a device for connecting to an intranet according to an embodiment of the present invention.
3 is a block diagram showing the configuration of a second server for controlling intranet access according to an embodiment of the present invention.
4 is a view for explaining the operation of the intranet access control system according to an embodiment of the present invention.
5 is a flowchart illustrating a procedure of an intranet access control method according to an embodiment of the present invention.
6 is a flowchart illustrating a procedure of an intranet access control method according to another embodiment of the present invention.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. To fully disclose the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout.

The term " part " used in this embodiment means a hardware component such as software, FPGA, or ASIC, and 'part' performs certain roles. However, 'minus' is not limited to software or hardware. The " part " may be configured to be in an addressable storage medium and configured to play back one or more processors. Thus, by way of example, and by no means, the terms " component " or " component " means any combination of components, such as software components, object- oriented software components, class components and task components, Subroutines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays and variables. The functions provided in the components and parts may be combined into a smaller number of components and parts or further separated into additional components and parts.

In the past, an enterprise has established a server that enables a company to access the company's intranet from the outside, develops an application for a device for accessing the intranet through the established server, and distributes it to the members, thereby allowing the member to access the company's intranet from the outside. Made it possible. Members can install applications on their devices and access the intranet through a server built by the enterprise. However, this conventional technology is a burden in terms of cost because companies must develop a server program and a device application. Therefore, there is a need for a method that enables members to efficiently access their company's intranet without having to develop server programs and device applications.

1 is a diagram illustrating a configuration of an intranet access control system according to an embodiment of the present invention.

Referring to FIG. 1, an intranet access control system according to an embodiment of the present invention may include a device 100, a first server 200, a second server 300, and an intranet server 400.

The device 100 includes a device such as a mobile phone, smart phone, PDA, notebook or personal computer capable of communicating with an external server. In the device 100, an application for accessing a predetermined group of intranets may be installed. In the present specification, 'group' refers to an organization such as a company or an enterprise having a plurality of members.

The first server 200 may include a web server and perform wired or wireless communication with the device 100.

The second server 300 is a server used by a predetermined group and may perform wired or wireless communication with the device 100.

The intranet server 400 is a server managing an intranet of a predetermined group, and may perform wired or wireless communication with the second server 300.

Although FIG. 1 illustrates that the second server 300 and the intranet server 400 are physically separated, the second server 300 and the intranet server 400 may be physically integrated in a computer used by the group. .

The second server 300 controls or mediates access to the intranet of the device 100, and a server program for performing the same may be installed. The server program may be provided by the first server 200 without being directly developed by the group. The second server 300 may register group information, such as an email domain, used by the group, with the first server 200.

 The device 100 transmits first user information to the first server 200. The first user information may be an email address or an email domain of the user of the device 100.

The first server 200 checks the group information corresponding to the first user information received from the device 100 and transmits the connection information of the second server 300 that registered the group information to the device 100.

The device 100 connects to the second server 300 according to the received connection information, receives application customization data from the second server 300, and customizes an application installed in the device 100.

Next, the device 100 transmits second user information to the second server 300. The second server 300 determines whether the user of the device 100 which has transmitted the second user information through the intranet server 400 has a right to access the intranet of the group, and based on this, the second server 300 is connected to the intranet of the device 100. Mediation of the connection.

According to the related art, the application installed in the device should have previously registered the connection information of the second server or the intranet server of the predetermined group, and the intranet environment of the predetermined group should be reflected in the application. For this purpose, each application had to be developed by the group. For example, if a group uses only an email system and a schedule system as a groupware of an intranet, an application for accessing the intranet of the group should also be developed to use only the email system and the schedule system. In addition, when a predetermined group uses only an email system, a scheduling system, and a payment system as groupware of an intranet, an application must also be developed to use only an email system, a scheduling system, and a payment system. In other words, the device application was a dedicated application that can connect to the intranet of the group.

However, in the intranet access control system according to an embodiment of the present invention, the device 100 receives the application customization data from the second server 300 by connecting to the second server 300 through the first server 200. In addition, since the application installed in the device 100 is customized according to the received application customization data, the corresponding group does not need to directly develop the application.

2 is a block diagram showing the configuration of a device 100 for connecting to an intranet according to an embodiment of the present invention.

2, a device 100 for accessing an intranet according to an embodiment of the present invention may include a first communication unit 110, a second communication unit 120, and an intranet connection unit 130. An application for connecting to an intranet is installed in the device 100, and the first communication unit 110, the second communication unit 120, and the intranet connection unit 130 may operate according to the installed application. Although FIG. 2 illustrates that the first communication unit 110 and the second communication unit 120 are physically separated, it will be apparent to those skilled in the art that the first communication unit 110 and the second communication unit 120 may be configured as one module. Self-explanatory

The first communication unit 110 transmits first user information to the first server 200 and receives access information of the second server 300 of the group corresponding to the first user information from the first server 200. . The first user information may be personal information of a user of the device 100 and includes an email address or an email domain of the user of the device 100. The access information of the second server 300 may include a uniform resource locator (URL) of the second server 300.

The second communication unit 120 accesses the second server 300 according to the received connection information and receives application customization data of a group corresponding to the first user information from the second server 300.

Although not shown in FIG. 2, the device 100 according to an exemplary embodiment may further include a memory unit and a controller.

The memory unit may store an application for accessing the intranet of the group. Since the application stored in the memory is not a group-developed application, the company's unique features are not reflected in the application.

The controller customizes an application stored in the memory unit by using the application customization data received by the second communication unit 120.

The application customization data may include at least one of data about a logo used by the group, data for changing the function of the application, and data for changing the interface of the application, but are not limited thereto. It may include sound or image data that can be clearly expressed.

Applications customized through application customization data can be adapted to the group's intranet environment and provide users with a sense of belonging to the group.

The second communication unit 120 transmits second user information to the second server 300. The second user information may include personal information such as an ID, a password, a social security number, an address, and a mobile phone number of the user of the device 100.

The intranet access unit 130 receives authentication for intranet access authority from the intranet server 400 based on the second user information, and accesses the intranet of the group through the second server 300.

3 is a block diagram illustrating a configuration of a second server 300 for controlling intranet access according to an embodiment of the present invention.

Referring to FIG. 3, the second server 300 for controlling an intranet connection according to an embodiment of the present invention may include a communication unit 310, a determination unit 320, and a control unit 330. The second server 300 is provided with a server program for controlling or intermediating an intranet connection of the device 100, and the communication unit 310, the determination unit 320, and the control unit 330 may operate according to the server program. .

The communicator 310 receives second user information from a user of the device 100. The second user information may include an ID, a password, a social security number, an address, a mobile phone number, etc. of the user of the device 100. In addition, the second user information may further include device identification information of the device 100. The device identification information includes a manufacture date, a manufacture number, and the like of the device.

The determination unit 320 determines whether the user of the device 100 that has transmitted the second user information has a right to access the intranet of the predetermined group through the intranet server 400 of the predetermined group.

Specifically, the determination unit 320 transmits the second user information received from the device 100 to the intranet server 400 of the group, and receives the authentication for the access authority from the intranet server 400, the device ( It is determined that the user of 100) has the authority to access the intranet.

The foregoing authorization authentication method is just one example, and the second server 300 may directly determine whether the user of the device 100 has a right to access the intranet.

If the user of the device 100 has the authority to access the intranet of the predetermined group, the controller 330 mediates the access to the intranet of the device 100. That is, the controller 330 transmits a request received from the device 100 to the intranet server 400 and transmits a response received from the intranet server 400 to the device 100. If the user of the device 100 does not have the authority to connect to the intranet, the device 100 does not broker the connection to the intranet.

Meanwhile, the second user information may include device identification information of the device 100, and the controller 330 adds the device identification information to the access denied list when the user of the device 100 does not have permission to access the intranet. do. When the second user information is received from the user of the device 100 again, the controller 330 may transmit a connection rejection message to the device 100 without transmitting the second user information to the intranet server 400.

4 is a view for explaining the operation of the intranet access control system according to an embodiment of the present invention.

① The device 100 transmits first user information to the first server 200. The first user information may include an email address and an email domain of the device 100 user.

② The first server 200 checks the group information corresponding to the first user information and transmits the connection information of the second server 300 that registered the group information to the device 100. Group information regarding at least one second server 300 may be registered in the first server 200, and each group information may include an email domain of a group.

For example, the first server 200 determines the second server 300 using the email domain of the user of the device 100 among the at least one second server 300, and accesses the second server 300. Information may be transmitted to the device 100.

③ The device 100 connects to the second server 300 according to the connection information.

④ The second server 300 transmits application customization data for customizing an application installed in the device 100 to the device 100.

⑤ The device 100 customizes an application installed in the device 100 using the application customization data. As a result, an application installed in the device 100 may operate as an application dedicated to a predetermined group.

⑥ The device 100 transmits second user information to the second server 300. The second user information may include an ID, a password, a social security number, a mobile phone number, an address, etc. of the user of the device 100. In addition, the second user information may include device 100 identification information of the device 100.

⑦ The second server 300 transmits the second user information received from the device 100 to the intranet server 400.

Intranet server 400 authenticates whether the user of device 100 is authorized to access the intranet based on the second user information.

⑨ If it is determined that the user of the device 100 is authorized to access the intranet through the intranet server 400, the second server 300 mediates the connection between the device 100 and the intranet server 400. That is, the device 100 may access a predetermined group of intranets through the second server 300.

5 is a flowchart illustrating a procedure of an intranet access control method according to an embodiment of the present invention. Referring to FIG. 5, the method for controlling intranet access according to an embodiment of the present invention includes the steps of time series processing in the device 100 shown in FIG. 2. Therefore, even if omitted below, the above descriptions of the device 100 illustrated in FIG. 2 may be applied to the intranet access control method of FIG. 5.

First, in step S110, the device 100 transmits first user information to the first server. The first user information may include an email address or an email domain of the device 100 user.

In operation S120, the device 100 receives access information of the second server 300 of the group corresponding to the first user information from the first server. The access information of the second server 300 may include a URL of the second server 300.

In operation S130, the device 100 receives application customization data from the second server 300.

The application customization data may include at least one of data about a logo used by the group, data for changing the function of the application, and data for changing the interface of the application, but are not limited thereto. It may include sound or image data that can be clearly expressed.

In operation S140, the device 100 may transmit second user information to the second server 300. The second user information may include an ID, a password, a social security number, a date of birth, a mobile phone number, an address, etc. of the user of the device 100.

In operation S150, when the device 100 receives authentication for access authority from an intranet server of the intranet of the group based on the second user information, the device 100 connects to the intranet of the group through the second server 300. .

6 is a flowchart illustrating a procedure of an intranet access control method according to another embodiment of the present invention. Referring to FIG. 6, an intranet access control method according to another embodiment of the present invention includes steps processed in time series in the second server 300 illustrated in FIG. 3. Therefore, even if omitted below, the above descriptions regarding the second server 300 illustrated in FIG. 3 may be applied to the intranet access control method of FIG. 6.

In operation S210, when the external device 100 is connected through an application of the external device 100, the second server 300 transmits application customization data according to a predetermined group to the external device 100.

In operation S220, the second server 300 receives user information from the external device 100. The user information may include an ID, password, social security number, date of birth, mobile phone number, address, etc. of the user of the external device 100.

In operation S230, the second server 300 determines whether the user of the external device 100 is authorized to access the intranet of the predetermined group through the intranet server of the predetermined group.

In operation S240, when the user of the external device 100 has the authority to access the intranet, the external device 100 mediates the connection to the intranet.

The above-described embodiments of the present invention can be embodied in a general-purpose digital computer that can be embodied as a program that can be executed by a computer and operates the program using a computer-readable recording medium.

The computer readable recording medium may be a magnetic storage medium such as a ROM, a floppy disk, a hard disk, etc., an optical reading medium such as a CD-ROM or a DVD and a carrier wave such as the Internet Lt; / RTI > transmission).

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be understood. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

100: device
110: first communication unit
120: second communication section
130: intranet connection
200: first server
300: second server
310: communication unit
320:
330:
400: intranet server

Claims (12)

A device for connecting to an intranet of a predetermined group through a second server of a predetermined group using a first server,
A first communication unit which transmits first user information to the first server and receives access information of a second server corresponding to the first user information from the first server;
A second communication unit which accesses the second server according to the access information, receives application customization data according to the predetermined group from the second server, and transmits second user information to the second server; And
And an intranet access unit for accessing the intranet through the second server by receiving authentication for access authority from an intranet server of the intranet based on the second user information. The method of claim 1,
The first user information,
A device comprising an email domain of the user of the device. 3. The method of claim 2,
Connection information of the second server corresponding to the first user information,
And access information of a second server corresponding to the email domain of the user. The method of claim 1,
The device comprising:
A memory unit for storing an application for accessing the intranet; And
And a control unit for customizing the application by using the application customization data. 5. The method of claim 4,
The application customization data,
And at least one of data for the group logo of the predetermined group, data for changing a function of the application, and data for changing an interface of the application. When the external device is connected through the application of the external device, the communication unit for transmitting the application customization data according to a predetermined group to the external device, and receives the user information from the external device;
A determining unit that determines, via the intranet server of the predetermined group, whether a user of the external device that has transmitted the user information is authorized to access the intranet of the predetermined group; And
And a controller configured to mediate connection of the external device to the intranet when the user of the external device has the authority to access the intranet. The method according to claim 6,
The application customization data,
And at least one of data for the group logo of the predetermined group, data for changing the function of the application, and data for changing the interface of the application. The method according to claim 6,
The user information includes:
Include device identification information of the external device,
The control unit,
If the user of the external device does not have permission to access the intranet of the predetermined group, the device identification information of the external device is included in the access denied list,
And when the user information is again received from the user of the external device, transmitting an access rejection message to the external device. Transmitting, by the device, the first user information to the first server;
Receiving, by the device, access information of a second server of a group corresponding to the first user information from the first server;
Transmitting, by the second server, application customization data to the connected device according to the connection information, and receiving second user information from the device; And
The second server determines, via the intranet server of the intranet of the group, whether the user of the device that has transmitted the second user information is authorized to access the intranet of the group, thereby establishing the connection of the device to the intranet. Intranet access control method comprising the step of intermediary. A method of accessing an intranet of a predetermined group through a second server of a predetermined group using a first server, the method comprising:
Transmitting first user information to the first server and receiving access information of a second server corresponding to the first user information from the first server;
Connecting to the second server according to the access information, receiving application customization data according to the predetermined group from the second server, and transmitting second user information to the second server; And
And accessing the intranet through the second server by receiving authentication for access authority from an intranet server of the intranet based on the second user information. If an external device is connected through an application of an external device, transmitting application customization data according to a predetermined group to the external device;
Receiving user information from the external device;
Determining, via the intranet server of the predetermined group, whether a user of the external device that has transmitted the user information is authorized to access the intranet of the predetermined group; And
If the user of the external device has the authority to access the intranet, intranet access control method comprising the step of brokering the connection to the intranet of the external device. A computer-readable recording medium storing a program for executing the intranet connection control method of any one of claims 9 to 11 by a computer.

Images