TW200421772A - Method and system for blocking networked limitative information - Google Patents

Abstract

The present invention provides a method and a system for blocking limitative information entering an intranet of a client end, based on on-line remote comparison. An on-line server performs the filtering task regarding networked limitative information, including virus code information, accessed by client end. An on-line database capable of collecting new virus code and website information is updated in real-time with content of the limitative information. The server thus performs the comparison based on the content of the database, and returns the comparing results to the client end for blocking the link of a website or virus data.

Description

200421772 V. Description of the invention (1) [Technical field to which the invention belongs] The present invention relates to a method and system for blocking information managed by a network; in particular, the present invention relates to a method for blocking information managed on an Internet And the system, and the management information is compared and collected online and remotely and updated in real time. [Prior technology] In Liu Lan of the Internet, content security (C ο n t e X t S e c r u t y) includes content filtering and virus filtering of web pages. For enterprise networks (Intra r a n e t), content security is more about the security of network operations and the efficiency of employees. With the popularization of enterprises, broadband resources have also brought a lot of φ operation convenience for enterprises. However, many employees use the broadband resources of the company's Internet to browse websites and download or upload a large number of private pictures during work hours. Etc., resulting in a decline in the production efficiency of the enterprise and the consumption of the company's broadband resources. Therefore, corporate managers want to be able to efficiently filter the content of websites or webpages that employees browse during business hours, and further prevent content listed by companies from entering the corporate network. In terms of webpage content filtering technology, the collected URLs (Uniform Resource Locators) are stored in a database, and the collected URLs may include adult pornography, gambling, shopping, instant chat or stock websites, etc. , Or some websites that contain information that companies want to manage. The server of the enterprise network compares the location of the website or webpage viewed by the employee according to the URL collected by the database, and then blocks and records it.

200421772 V. Description of the invention (2) US invention patent No. 6,233,618 "Access control 0f networked data" discloses an access control technology for limiting access to information content on the network. This technology is implemented on the client device. : Proxy server, routing shell, ^ 'clothing, such as other network portal devices. The client's step = second defense, $ connector or its contents: URLs, IP address or Nonger = analysis of corruption by using ^ client, to compare. ， Beiyuan proves the materials, and it is related to the database. 【Abstract】 According to the previous technology, the information is compared with the database. The website is compared with the URL collected by the database and placed by the agent. Proxy server

Server Contains Tian Zhuo to update the contents of the database, to benefit from the comparison work and whether the filtering technology is available at regular intervals: From this, we can know that the URLs collected by the database become ^ heavy no rn master-changing rapidly, stand by Machine, Ge 1 ^ f; and the information content management website of the Internet should also be collected from ^ = management website should be collected in real time, and the ineffective impact prevents efficiency and ^ removed, so the database update problem is not only lt Al 1 Occupy storage. In addition, 弁 铪% 廿 Bepi. 70 of the technology, the owner, and the client's proxy server also have the same problem without filtering technology. The download and update of the virus code, because it also needs to perform virus comparison work, and the virus code should be real-time makeup. This is for the corporate network. Content is safe, new diseases and costs increase. t The client device must bear additional load. In view of the previous technology], the heat storage ^ ~ The occupation of the storage resources than the network management information that contains viruses, is implemented on the client device. , Which causes the client and fc data τ to work also increases the client server's

Page 6 200421772 V. Description of the invention (3) Load. In other words, how to reduce the resistance of the client to processing network management information is an important issue to be solved in this technical field. The object of the present invention is to provide a method for blocking the comparison on the remote line. Another object of the present invention is to provide a rejection system for comparison on a remote line. Another object of the present invention is to provide a remote online comparison blocking method, in which the filtering work of the client to process the network management information can be performed online and remotely, and the content of the network management information is updated in real time. Another object of the present invention is to provide a remote online comparison and rejection system, in which the filtering work of the client to process network management information can be performed by an online and remote server, and the database of the server updates the network in real time. The contents of the road management information. Another object of the present invention is to provide a method for preventing and comparing virus on the remote line, so that the filtering work of virus processing on the client side can be performed on the remote line and collect virus code characteristics in real time. Another object of the present invention is to provide a remote online virus comparison and rejection system, so that the filtering work of virus processing on the client side can be performed by an online and remote server, wherein the database of the server collects virus signature characteristics in real time . Another object of the present invention is to provide a remote comparison and blocking method that can improve the comparison efficiency, and can effectively filter the network management information of the client on the remote side. Another object of the present invention is to provide a remote comparison and rejection system which can improve the comparison efficiency, and can effectively filter users by online and remote servers.

1 U H I Page 7 200421772 V. Description of the invention (4) Network management information at the end. Another object of the present invention is to provide a remote virus comparison and blocking method which can improve the comparison efficiency, and can effectively filter virus lean messages on the client side online and remotely. Another object of the present invention is to provide a remote virus comparison and rejection system that can improve the comparison efficiency, and can effectively filter virus messages on the client side by a server at the remote end of the line. The invention provides a method for blocking network management information. When a client user wants to connect to a website or receive data that may contain a virus through the Internet, the client device sends a characteristic value to a remote server. Server, the database of the server is collected by an automatic search engine in real time to collect network management information and virus signature characteristics, and the server performs a comparison task based on the content of the database and returns the comparison result to the user End device, so that the client can block the link to the website or contain virus-containing information based on the comparison result. The invention provides a network management information blocking system. Based on the network management information blocking method of the present invention, the blocking system includes an online server and a database, and the server receives the characteristic values sent by the client device. , And perform the comparison work according to the content of the database, and then return the comparison result to the client device, where the database collects network management information and virus signature characteristics online by an automatic search engine online. Among them, the method and system for blocking network management information according to the present invention is to block a management website, webpage or receiving data that may contain viruses connected to a client terminal with a browser, so that the browser cannot connect.

Page 8 200421772 V. Description of the invention (5) The website, webpage, or download content cannot be displayed or received. Among them, the client device can include a wide range of terminals, proxy servers, routers, switches, firewalls, bridges, or other web portal devices to perform blocking work to manage websites, web pages, or receive information that may contain viruses. Among them, the characteristic value may be a U R L s, an IP address, or a data attribute of an unknown format, or a part of a link URL, or a virus code characteristic. The method and system for blocking network management information implemented in accordance with the present invention can widely include, but not limited to, enterprise network, Internet cafe network, home network, and school network to the Internet for client applications. Internet connection. '[Embodiment] Although the present invention will be fully described with reference to the accompanying drawings containing preferred embodiments of the present invention, it should be understood that those skilled in the art can modify the invention described herein before describing this, and The effect of the present invention is obtained. Therefore, it should be understood that the following description is a broad disclosure for those familiar with the art of the Bank, and its content is not intended to limit the present invention. First, please refer to the first figure to show the flow chart of the method for blocking the network management information of the present invention. The method for blocking network management information according to the present invention includes: a client task and a remote server task, wherein the client task is when the user wants to connect to a website or receives a piece of data that may contain a virus through the Internet 1, the user The end device will capture a characteristic value and send it to a remote server via the Internet, and the client device will receive the remote server and send back a

200421772 V. Description of the invention (6) Comparison result, and whether the execution of the link or the virus-containing data is blocked according to the comparison result; the remote servo work is performed by a remote server receiving a source client device Send the characteristic value, and compare the characteristic value with the content of a database to obtain a comparison result, and the remote server returns the comparison result to the client device of the aforementioned source, so that the client end The filtering of network management information is performed by a remote server. In a preferred embodiment of the present invention, the client device performing the client's work may include: a proxy server, a router, a switch, a firewall, a bridge, or other network portal equipment, and the characteristics transmitted by the client device The comparison between the value and the received result is only a few bytes (Bytes), so that the client device can effectively improve the efficiency of remote comparison and execution. In addition, the remote server task also includes real-time updating of the content of this database. The content of this database is the characteristic value of the network management information. The network management information generally refers to the content of websites or webpages containing adult pornography, Gambling, shopping, drugs, snatching, real-time chat or stock information, etc., or network management information including virus emails or files formulated by enterprises, which contains the latest virus code information. Next, referring to the second figure, a schematic diagram of the network management information blocking system of the present invention is shown. The network management information blocking system of the present invention includes: a client device located at the client end; and a server located at the server end, and the client device and the server can receive or transmit data to each other through the Internet 1 . The client device includes: a browser 11 that provides a user with a link to a website or an interface that may receive data that may contain a virus; an extraction unit 12 that can be accessed from the website 11 1 Information that may contain viruses

Page 10 200421772 V. Description of the invention (7) Retrieve one-character features of the server element 14, the browser must not be used; if it is, the station or the receiver is allowed. Following the management of the network and the purchase of Internet 21, the network device installed from 24 receiving the client device is shown as the resistance value. Unexpected value 2 4 is the comparison characteristic value, such as RMB 13. The device proposes to connect from Internet 1 1 According to the agreement, the special feature that may allow the continuous reference information, that is, the information characteristic of the Internet, is transmitted and blocked by the pipeline, and if it is the same, then the result is passed through the network, and the characteristic value may be Data: URLs, IP address or part of unknown 4 or virus receives the characteristic value and passes the data attribute of the formula; a request and transmits the characteristic value: Internet 1 receives to server-side network 1 A comparison result, to a server, a website that receives a single knot may contain a primary side comparison result indicating that the unit of the line is 15. Whether receiving the data from the parent should block the result as a blocking date. Unit Η The comparison contains virus data, and the browser 11 links to the web browser 1 1 links to the website < ^ The result of the comparison is allowed ^ to receive the data that may contain viruses. The second picture, the server contains a value , The network is operated with caution—material bank 2 4 Or the stock website ί 2 adult pornography, gambling, which contains the latest disease is the road 1 formulated by the company I received from the source device of the client device ~ Yuan Qiu Er; Yun F7022, receive the feature value and Compare with the eigenvalue of Zibei Kuixun to generate a comparison result. The eigenvalue of 4 Tianku and the eigenvalue of database 24 = same. The feature value transmitted by the client device and the database 2 4 ^ or the feature value transmitted by the client device does not exist, and the result of the pairing is indicated as allowed; and a transmission unit 23, and the Internet 1 return To the client device from the aforementioned source.

Page 11 200421772 V. Description of the invention (8) In a further embodiment of the present invention, the server includes an automatic search engine that is connected to the Internet to collect the latest network management information in real time, and then update The database's network management information enables client devices to block the latest managed websites or the latest virus signatures on the Internet. Please refer to FIG. 3 for a flowchart of the first embodiment of the blocking method of the present invention. In this specific embodiment of the present invention, the flow of work on the client side and the flow of work on the remote end are disclosed. The flow of work on the client side includes the following steps: Browse data The user operates the browser via the Internet to connect to a website or receive information that may contain a virus. Retrieve feature value Extract a feature value from the linked website or data that may contain viruses. The feature value can be URLs, IP addresses, or data format, and submit a request to the remote server to request the feature. The value is sent to the remote server. Judging the return result A comparison result is received from the remote server, and the comparison result is indicated as being blocked or allowed. Blocking web links is indicated as blocking based on the result of the comparison. Blocking of web links is performed, that is, blocking the browser from linking to the website or receiving data, web pages, etc. that may contain viruses, and continuing to retrieve the browser's desire to link to another website or receive another A characteristic value that may contain information about the virus. Completing the web link according to the comparison result means that it is not allowed to perform the process of web link, that is, to allow the browser to link to the website or receive data, web pages, etc., and continue to retrieve the browser that wants to link to another website or receive another that may contain a virus The characteristic value of the data.

Page 12 200421772 V. Description of the invention (9) Continue to refer to Figure 3A. The flow of the remote servo work includes the following steps: Do you have permission? After receiving a request from a client device of a source, it is determined whether the source has authority, that is, whether to perform a comparison task. Refuse to provide service According to the source does not have permission, the server refuses to perform the matching task and discards the request from this source. The data operation has authority according to the source. The server receives the feature value sent by the client device of the source, and performs data calculation and returns the operation result to the client device of the aforementioned source. In a specific embodiment, the data operation Contains an operation that compares whether the feature value sent by the client device _ exists in the database, and the data operation obtains the feature value sent by the client device _ that exists in the database, and generates a comparison result that indicates an obstruction On the other hand, if the feature value sent by the client device from the data operation does not exist in the database, a comparison result indicating that it is allowed is generated. Please refer to FIG. 3B for a flowchart of the second embodiment of the blocking method of the present invention. In this specific embodiment of the present invention, it is further disclosed that the process of the work of the client includes processing of the cache unit. In order to further improve the client's efficiency in processing network management information, before the feature value is transmitted, a preliminary comparison can be performed on the client to quickly allow non-managed websites and webpage content that the client frequently links to, or quickly block The company manages the website and webpage content. The client device further includes a cache unit 16, the cache unit 16 includes a cache memory, and the cache memory stores a part of the network information feature value, so that the client device servos to the remote server. Request

Page 13 200421772 5. Before the description of the invention (ίο), you can first determine whether the extracted feature value already exists in the cache memory of the client, and get faster execution of the process of blocking network management information. In this specific embodiment of the present invention, in addition to the steps shown in FIG. 3A, the work flow of the client further includes the following steps: Is there a cache of feature values? After capturing the feature value, first determine whether the captured feature value already exists in the cache memory, and based on the captured feature value already exists in the cache memory, generate an indication as a block or allow comparison The result and the step of judging the return result are executed, and according to the extracted feature value does not exist in the cache memory, a request is made to the remote server, and the retrieved feature value is transmitted to the remote server. Write the result to the cache. When the remote server returns the comparison result, the comparison result of the website and the web page is stored in the cache unit 16, which is recorded in the cache memory, which can provide the preliminary comparison of the above steps. On the basis.俾 Unmanaged websites and webpage content that clients often link to will directly decide to allow linking or displaying the unmanaged websites and webpage content without sending characteristic values to remote servers; or managed websites and webpages linked to clients The content of the webpage can also directly block the link or display of the unmanaged website and webpage content without sending characteristic values to the remote server. Please refer to the fourth figure, which shows a block diagram of the system for blocking the network management information according to the present invention. In this specific embodiment of the present invention, the network management information blocking system of the present invention implements a blocking of a web site and a web page including the network management information. The blocking system includes: a client device located at the client; and The server is located on the server side, and the client device and the server can receive or transmit data to each other through the Internet 1.

Page 14 V. Description of the invention (11) The client device includes: a plurality of browsers 1 Do not execute on the terminal of the client device; 200421772, these browsers 11 can be divided into websites or websites to be linked Example from the webpage: from this URLs or IP addresses; a transmission unit 13, followed by such as „^ m H tf ,,, server, one receiving unit 14, one receiving from Internet workers The comparison result indicates a certain browser 〖丨 the website or webpage to be linked σ 'should be blocked; and an execution unit 丨 5 receives the comparison result and determines which browser 1 1 should be used, and according to the comparison result is When blocking, the browser of the oblique library is blocked 1 1 Link to the website or receive information that may contain viruses ^ When the comparison result is allowed, allow the corresponding browser 丨 丨 Link to the network ^ or receive information that may contain viruses In the specific embodiment of the present invention, the implementation of the execution unit 15 includes several ways. One way is to make the proxy server of the client block or allow the corresponding browser 11 to link to the website or download the webpage according to the comparison result. ; The other L mode is based on As a result, the terminal of the client cannot display the downloaded content or cannot receive the data that may contain viruses. Continue to refer to the fourth figure. The server includes a database 2 4 that stores the characteristic values of network management information. The network management information includes adult pornography, gambling, shopping, instant chat or stock websites, etc., or the network management information formulated by the enterprise; a receiving unit 21, which receives a source client from the Internet 1 A request made by a device and confirming that the request has permission to receive a characteristic value; an arithmetic unit 22 receives the characteristic value and compares it with the characteristic value of the network management information of the database, and generates a ratio based on an operation principle Butt

Page 15 200421772 V. Description of the invention (12) As a result, the operation principle includes quickly searching the feature values of the database for comparison. If the feature value sent by the client device is the same as the feature value of the database, or the client side If the feature value sent by the device exists in the database, the comparison result indicates a block. If the feature value sent by the client device is not the same as the feature value of the database, or the feature value sent by the client device does not exist Database, the comparison result is indicated as permitted; and a transmitting unit 23 sends the comparison result to the client device of the aforementioned source via the Internet 1. Finally, referring to the fifth figure, a system block diagram of the virus information blocking system according to the present invention with respect to virus code feature comparison is shown. In this specific embodiment of the present invention, the network management information blocking system of the present invention performs blocking including virus codes. The blocking system includes: a client device located at the client; and a server located at the server. The client device and the server can receive or transmit data to each other through the Internet. Compared with the embodiment shown in the fourth figure, the client device further includes: a cache unit 16; the cache unit 16 includes: a recording unit 20 for storing network management information and characteristic values of virus codes, which can be implemented by cache memory; an evaluation unit 17 for receiving the extracted characteristic values and executing an evaluation principle, The evaluation principle includes confirming whether the characteristic value already exists in the recording unit 20, and providing a change in the definition of the management information, so that the user can change the content collected by the recording unit 20; a decision unit 18, and a receiving evaluation unit 1 The result of 6 determines whether the request is sent by the transmitting unit 13 and the characteristic value is received, and the comparison result transmitted by the receiving unit 14 is received, and the virus code corresponding to the characteristic value is received. Whether the decision should be blocked or allowed to be instructed to execute unit 15 to execute;

Page 16 200421772 V. Description of the invention (13) And, an update unit 19 accepts the instruction of the decision unit 18, and writes the updated or latest characteristic value of the virus code into the recording unit 20. After explaining the preferred embodiment of the present invention in detail, those skilled in the art can clearly understand that various changes and modifications can be made without departing from the scope and spirit of the patent application described below, and the present invention is not limited to the description Examples of implementation. (

Page 17 200421772 Brief description of the diagram [Simplified description of the diagram] The first diagram is a schematic flow chart of the method for blocking network management information according to the present invention. The second figure is a schematic diagram of a network blocking information blocking system according to the present invention. The third figure A is a flowchart of the first embodiment of the blocking method of the present invention. The third figure B is a flowchart of the second embodiment of the blocking method of the present invention. The fourth figure is a block diagram of a system for comparing information on the Internet with respect to URLs. The fifth figure is a system block diagram of virus code feature comparison of the network management information blocking system of the present invention. [Comparison of main component symbols] Bu--Internet 11- -M browser 12- -Capturing unit 13--Transmitting unit 14--Receiving unit 15--Executing unit 16---Cache Unit 17 --- Evaluation unit 18 --- Decision unit 19 --- Update unit 20 --- Recording unit 21 --- Receiving unit 22-One-by-one arithmetic unit

Page 18 200421772

Claims (1)

200421772 VI. Scope of patent application 1. A method for blocking network management information, comprising: acquiring characteristic values of data on a client side and transmitting the characteristic values to a server; the server executing the foregoing characteristic values and the contents of a database Compare, obtain the result of blocking or allowing; return the above-mentioned comparison result to the client; and, based on the above-mentioned comparison result, the client blocks the display of the data containing the characteristic value, or allows the data containing the characteristic value to be allowed Display; characterized in that the aforementioned server and database are located remotely from the client, and the content of the database is updated in real time. 2. The method for blocking network management information as described in item 1 of the scope of patent application, further comprising: performing a preliminary comparison on the client side before transmitting the aforementioned characteristic value. 3. The method for blocking network management information as described in item 2 of the scope of patent application, wherein the preliminary comparison includes at least: performing a comparison of the aforementioned feature value with the content recorded by a cache unit. 4. The method for blocking network management information according to item 2 of the scope of patent application, wherein the preliminary comparison at least includes: determining whether the aforementioned characteristic value is transmitted to the server. 5. The method for blocking network management information as described in item 3 of the scope of patent application, wherein the preliminary comparison further includes: updating the records recorded by the cache unit according to the comparison result returned by the aforementioned server. content. 6. The method for blocking network management information as described in item 1 of the scope of patent application, wherein the content of the database is the characteristic value of network management information, and the network management information includes adult pornography, gambling, Shopping, drugs, robbing Page 20 200421772 VI. Scope of patent application Mechanical or real-time chat or stock information website or webpage content, or websites or webpages managed by the company. 7. The method for blocking network management information as described in item 6 of the scope of patent application, wherein the aforementioned characteristic value is part of a web address, a URL or IP address. 8. The method for blocking network management information as described in item 1 of the scope of patent application, wherein the content of the database is the characteristic value of network management information, and the network management information is an email or a virus file. 9. The method for blocking network management information as described in item 8 of the scope of patent application, wherein the aforementioned characteristic value is a virus code characteristic. 10. The method for blocking network management information as described in item 1 of the scope of patent application, which includes: collecting network management information from the Internet by an automatic search engine to update the content of the database in real time. 1 1. A blocking system for implementing a method for blocking network management information described in item 1 of the scope of patent application, comprising: a client device for acquiring a characteristic value of data and transmitting the characteristic value; and receiving A blocking or allowing comparison result to determine whether to block the display of the data containing the characteristic value; and a server, including a database, which receives the foregoing characteristic value and compares with the content of the database to Obtain the aforementioned blocking or allowing comparison result, and return the aforementioned comparison result to the client device; characterized in that the aforementioned server and database are located at the far end of the client device, and the content of the database is updated in real time . 1 2. The blocking system as described in item 11 of the scope of patent application, wherein the client device includes at least: an acquisition unit for acquiring funds Page 21 200421772 VI. Scope of patent application Characteristic value of materials. 13. The blocking system according to item 11 of the scope of patent application, wherein the client device further comprises: a transmitting unit, the transmitting unit makes a request to the server, and transmits the characteristic value. 14. The blocking system according to item 11 of the scope of patent application, wherein the client device further comprises: a receiving unit for receiving a comparison result of blocking or allowing. 15. The blocking system as described in item 11 of the scope of patent application, wherein the client device further includes: an execution unit, which blocks the display of the data containing the characteristic value according to the comparison result of the foregoing blocking. , And according to the above-mentioned allowed comparison result, the display of data containing the characteristic value is allowed. 16. The blocking system as described in item 11 of the scope of patent application, wherein the content of the database is the characteristic value of the online management information, which includes adult pornography, gambling, shopping, drugs , The content of websites or webpages that are hacking, real-time talking or stock information, or websites or webpages controlled by companies. 1 7. The blocking system as described in item 16 of the scope of patent application, wherein the aforementioned characteristic value is part of a web address, a URL or IP address. 1 8. The blocking system as described in item 11 of the scope of patent application, wherein the content of the database is the characteristic value of network management information, and the network management information is an email or file containing a virus. 19. The blocking system according to item 18 of the scope of patent application, wherein the aforementioned characteristic value is a virus code feature. Page 22 200421772 VI. Patent application scope 20. The blocking system as described in item 11 of the patent application scope, wherein the server includes at least: a receiving unit for receiving the characteristics transmitted by the client device value. 2 1. The blocking system according to item 11 of the scope of patent application, wherein the server further comprises: a transmitting unit, the transmitting unit returns the result of the blocking or permitting comparison to the client device. 2 2. The blocking system as described in item 11 of the scope of patent application, wherein the server further comprises: an arithmetic unit that compares the aforementioned characteristic value with the content of the database and generates the aforementioned blocking or allowing Compare the results. 2 3. —A blocking system for network management information, including: _-Client devices, including: 'One or more browsers, which can link data with the Internet; An acquisition unit, which is used to retrieve data. Characteristic value; a client-side transmitting unit for transmitting the characteristic value; a client-side receiving unit for receiving a blocking or allowing comparison result; and an executing unit for blocking the browser link according to the foregoing comparison result The characteristic value data, or allowing the browser to link the data containing the characteristic value; and a server including: a database storing the characteristic value of network management information; a server-side receiving unit for receiving the characteristic value The characteristic value transmitted by the client-side transmission unit ¥; a server-side transmission unit that compares the blocking or allowing results Page 23 200421772 6. The scope of the patent application is returned to the client receiving unit; and an arithmetic unit compares the characteristic value transmitted by the client transmitting unit with the characteristic value of the network management information of the database, and generates The comparison result of the foregoing blocking or allowing; it is characterized in that the aforementioned server and database are located at the far end of the client device, and the content of the database is updated in real time. 2 4. The network management information blocking system as described in item 23 of the scope of patent application, wherein the network management information is an email or file containing a virus. 2 5. The network management information blocking system described in item 23 of the scope of patent application, wherein the network management information includes adult pornography, gambling, shopping, drugs, robberies, real-time talks or stocks Information website or webpage content, or website or webpage managed by the company. 2 6. The network management information blocking system described in item 23 of the scope of patent application, wherein the characteristic value is a URL or a virus code characteristic. 2 7. The network management information blocking system described in item 23 of the scope of patent application, wherein the characteristic value is a URL or an IP address. 2 8. The network management information blocking system as described in item 23 of the scope of patent application, wherein the client device further includes: a cache unit, and before the aforementioned client transmission unit transmits the feature value, the cache The fetch unit performs a preliminary comparison on the client side, and according to the preliminary comparison, determines whether the client side sends the feature value to the server, or instructs the executive unit to block the browser link from containing the feature value Information. 2 9. The blocking of network management information as described in item 28 of the scope of patent application Page 24 200421772 6. The scope of patent application system, where the cache unit includes at least: a recording unit, which is used to store network management information and the characteristic values of virus codes, which can be implemented by cache memory. 30. The network management information blocking system as described in item 29 of the scope of patent application, wherein the cache unit further includes: an evaluation unit that confirms whether the extracted feature value already exists in the record Unit. 31. The network management information blocking system as described in item 30 of the scope of patent application, wherein the cache unit further includes: a decision unit that determines whether to be determined by the client based on the confirmation result of the evaluation unit The sending unit sends the characteristic value to the server, or instructs the execution unit to block the browser from linking the data containing the characteristic value. 3 2. The network management information blocking system as described in item 31 of the scope of patent application, wherein the cache unit further includes: an update unit that accepts the instruction of the decision unit and updates the characteristic value Write to this recording unit. Page 25