KR20140136272A - Communication Connection Apparatus Which Is Prohibiting Hacking For Client - Google Patents

Abstract

The present invention relates to a gateway for a socket communication, and is designed so that connection connection packet transmission is possible only in one direction, and only a one-way connection connection is possible, so that a gateway designed to open and operate a communication line without worrying about hacking outside .

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a communication connection apparatus for a client environment,

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a communication access device for a client environment that prevents a risk of hacking, and more particularly, to a communication access device that allows computers in a client environment to communicate without the risk of external hacking.

As the Internet develops, many hacking occurs and hacking often causes damage, so most of the communication points have firewalls.

In order to provide services externally to a communication environment, a server environment that keeps a communication line open and waits for a connection, and a client environment that can acquire necessary information by connecting through a communication line when necessary, .

In the server environment, the communication line should be always open and the client should be prepared for connection. However, in the client environment, the communication line can be opened only when necessary, and the necessary communication can be performed by connecting to the server.

In most communication environments, a security device such as a firewall is provided to prepare for malicious external hacking.

In a server environment, security through a firewall is essential in order to prepare for a hacking from a malicious client. However, in a client environment, a firewall provided in a server environment is not needed if only a response to a request is received.

In spite of this environment difference, in most client environments, it is common to prepare for hacking by providing the same security environment as the server environment, and there is a problem such as a decrease in communication efficiency due to excessive expenditure and complexity of procedures

In the client environment described above, there is no need to constantly monitor with a firewall or the like as in a server environment.

In the client environment, if necessary, the connection is made only through the connection, and if the connection attempt from the outside is originally blocked, an additional device for preparing an unexpected intentional intrusion is not necessary.

It is an object of the present invention to provide a method and system that can completely prevent intrusion of an external intruder completely without providing an additional security device such as a firewall when a communication line is installed and operated in order to utilize it as a client environment .

The present invention is divided into an internal client environment 100 and an external network environment 300 based on the gateway 200 of FIG.

The gateway 200 delivers the connection request packet from the client environment 100 as the internal environment to the server environment 200 but does not deliver the connection request packet from the external environment to the client environment 100 as the internal environment, It prevents the attempted connection connection from origin.

According to the present invention, it is possible to install and maintain a communication line capable of maintaining a client environment capable of completely preventing deliberate intrusion from the outside even when there is no additional security device such as a firewall, by blocking any connection attempt from the outside have.

Also, by eliminating unnecessary firewalls in the communication process, the procedure is simplified and the communication speed is improved.

1 is a diagram illustrating a gateway configuration according to an embodiment of the present invention.
2 is a diagram illustrating a client-server communication process according to an embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

The terms in the present invention are defined as follows.

Client environment: A computer environment that has no use to respond to connection requests from outside the network.

Server environment: A computer environment that connects and provides necessary services when there is an external connection request to a computer environment that waits for an external connection to respond to a request from outside the network and responds appropriately to the request.

1 is a diagram illustrating a gateway configuration according to an embodiment of the present invention.

In FIG. 1, the gateway 200 is designed to pass a connection request packet passing through the gateway 200 in the client environment 100, but not to pass any connection request packet in the external network 300 including the server environment .

2 is a diagram illustrating a communication method over a network.

In FIG. 2, the server creates (301), binds (302) and waits for a connection of the client (303). The client creates a socket when necessary 101 and makes a connection request 102 to a necessary server and when the server is normal the connection is made 103 and 304 to send and receive communication 104 and 305 between the client server and terminate the connection (105, 306) to perform communication between client servers.

In the present invention, an access connection request packet for a computer in the server environment 300 through the gateway 200 in the client environment 100 shown in FIG. 1 is transmitted by the gateway 200, It is designed so that the connection request packet from the computer to the server in the client environment 100 is not passed.

If the gateway 200 is the only connection path to the outside, intrusion into the client environment 100, which is an internal environment from the outside, is intrinsically blocked.

2, it is possible to design the gateway 200 so as not to allow one or more server 300 side packets to pass through the packet requested by the client 100 in order to prevent the intrusion by the data transmission / reception 104 and 305 have.

2, in order to utilize a request packet from one client 100 and a response packet from one server 300 for a request packet in a communication environment for installation and operation, One of the packets requested by the client 100 is terminated by the gateway 200 as soon as the packet of the server 300 passes through the client so as to prevent the intrusion by the gateway 100 or 104, It is possible to design the gateway 200 so as to block intrusions in the processes 104 and 305.

100: Client environment 200: Gateway
300: Server environment

Claims (3)

In a separate network environment connected through a gateway, connection requests from one of the gateways to another network separated by a gateway are allowed only to one side, so that connection can be made only from one network capable of connection connection request , And does not transmit the connection connection request packet in the opposite direction, so that only the external one-way connection connection is possible. 2. The method of claim 1,
A gateway designed to allow only one server-side response packet per client-to-server request packet. 3. The method of claim 2,
A gateway designed to pass a response packet for one request packet from the client to the server, and to disconnect the communication connection between the client and the server.

Images