TWI392273B - Internet time management and internet monitoring system and method - Google Patents

Description

Internet time management and internet monitoring system and method

The invention relates to a network time management and internet monitoring system and method, and more specifically, an online time management and an internet monitoring for real-time monitoring of user information of a user terminal device and releasing a packet control policy to achieve time management function System and method.

The current network technology is very developed, and the functions provided by the Internet are increasingly diversified. Modern people can receive instant messages from all over the world, or share interesting articles, pictures, and friends with strangers around the world. Or audio and video screens, etc. In addition, modern people can also carry out many daily activities (such as shopping) without being restricted by time or space at home or anywhere through the Internet, so the use of the Internet has become a modern person. An indispensable part of life, and sometimes the use of the Internet takes up most of the time of modern people. This situation often affects the daily life of ordinary people, especially for children, if it is serious, it will affect To the physical and mental development of children.

Therefore, how to limit the time spent on the Internet has become the direction of current technological development. In the prior art, the method for limiting the time on the Internet is mostly implemented in the user equipment, for example, the router is locked or purchased, and the added device is installed on the original Internet device, and the network device is locked or disconnected for a certain period of time. Electricity, in order to limit the use of the network equipment by others, in order to manage the time of the Internet. However, such an implementation requires frequent setup and the user must have professional network knowledge. On the other hand, the time management side in the prior art The type often requires the user to purchase additional equipment, thus increasing the cost of the user.

In summary, how to provide an online time management and Internet monitoring system and method that can solve the above-mentioned shortcomings of the prior art has become an urgent problem to be solved.

In order to solve the above-mentioned shortcomings of the prior art, the purpose of the present invention is to provide an online time management and Internet monitoring system and method, which can provide a policy for user service by performing on-the-spot monitoring of user services on the network service provider side. The client device performs various time management actions to improve the convenience of the user for controlling the time on the Internet.

To achieve the foregoing and other objects, the present invention provides an online time management and Internet monitoring system and method. The Internet time management and Internet monitoring system includes: a network access device for accessing user services of the client device, wherein the network access device includes an instant access to the client device. User monitoring device for analyzing, monitoring, and/or managing; user authentication device for authenticating user information according to user information outputted by a client device connected to the network access device; user information device a user online device for storing the user equipment, wherein the user authentication device establishes the user online information and transmits the information to the user information device, so that the user information device triggers the network access device to perform user traffic monitoring; The control device, when the instant monitoring module finds the user service of the user device, the instant monitoring module notifies the user information device to query the time management setting of the user device, where the user device When the time management setting meets the trigger condition, the user information device transmits a trigger message to the policy control device, so that the policy control device sends a release or cancellation policy command to the network access device; and the event processing device is configured according to the The command performs time management on the client device.

In a preferred aspect, the Internet time management and Internet monitoring system of the present invention includes a routing module for receiving user services of the user equipment; and a traffic centralized module for centralized A plurality of user services accessed by the routing module are received, so that the instant monitoring module monitors user traffic.

The online time management and internet monitoring method of the present invention comprises the following steps: (1) causing a user equipment to connect to the network access device and input user information; and (2) causing the user authentication device to use the user information according to the user information. The device performs authentication, and the established user online information is transmitted to the user information device, so that the user information device triggers the network access device; (3) the instant monitoring module disposed on the network access device is targeted The user information of the user device is monitored in real time; (4) when the instant monitoring module finds the user service of the user device, the instant monitoring module notifies the user information device to query the user device for storage (5) when the time management setting of the client device meets the trigger condition, the user information device transmits the trigger message to the policy control device, so that the policy control device sends the command to the network access device. Or canceling the policy instruction; and (6) causing the event processing device to time manage the client device according to the instruction.

In a preferred aspect, step (3) includes: (3-1) accessing the way Receiving the user service of the client device by the module; and (3-2) causing the traffic concentration module to collect a plurality of user messages of the access routing module, and targeting the user through the instant monitoring module The user device of the end device performs real-time monitoring.

Compared with the prior art, the online time management and Internet monitoring system and method of the present invention utilizes the existing network architecture to provide online time management services, thereby providing users with more convenient and faster time management settings. And the service, and because the user side does not need to purchase additional time management equipment, thus reducing the cost of the user.

The embodiments of the present invention are described below by way of specific embodiments, and those skilled in the art can readily appreciate the other advantages and advantages of the present invention. The invention may also be embodied or applied by other different embodiments.

Please refer to FIG. 1 , which is a schematic diagram of the basic architecture of the Internet time management and Internet monitoring system of the present invention. As shown in the figure, the Internet time management and Internet monitoring system includes a client device 101, a user authentication device 102, and a network access. The device 103, the policy control device 104, the user information device 105, the event processing device 106, and the network 107 are provided with an instant monitoring module 1031 in the network access device 103.

The electronic device that the client device 101 can access data and perform data processing, such as a personal computer, a notebook computer, a personal digital assistant, and/or a mobile phone. The user authentication device 102 is configured to confirm the user usage right of the client device 101 and confirm whether the client device is used for time management. Household. The network access device 103 is configured to receive user services of the client device. The network access device includes an instant monitoring module 1031 for monitoring user services of the client device. The policy control device 104 is configured to query the user time management setting of the client device, and may issue or cancel the online time limit policy for the network access device. The user information device 105 is configured to store user online information and user service application data of the client device. The event processing device 106 is configured to time manage the client device according to the policy.

In the specific implementation of the present invention, the network access device 103 is first connected by the client device 101, and user information is input, and the user authentication device 102 authenticates the user device by comparing the user data in the user information device 105, and The user equipment of the client device 101 is accessed by the network access device 103, and then the user online information and the user service application data in the user information device 105 are queried to confirm that the client device 101 is a time management user. When the end device 101 is connected to the Internet for a limited time, the user information device 105 sends a trigger message to the policy control device 104 to issue a time management policy for the network access device 103 to release the client device 101. Finally, the event processing device 106 The client device 101 performs time management to achieve the purpose of restricting users from surfing the Internet. When the client device 101 connects to the Internet for an unrestricted time, the instant monitoring mechanism is activated, and the user monitoring device 1031 is used to monitor the user service. If the specific user is found to limit the time of the Internet access, the instant monitoring module 1031 sends the message. The trigger message is sent to the policy control device 104 to issue a time management policy for the network access device 103 to the client device 101.

In a preferred embodiment, the event processing device performs time management on the client device to redirect the client device to a specific webpage, block the traffic of the client device, and discard the packet of the client device. And/or alerting the client device in a particular state. For example, the user can set a warning notice to the user after a certain time on the Internet to remind the user to protect the eyes or inform the user how many times the Internet is open.

Please refer to FIG. 2 , which is a schematic structural diagram of a specific embodiment of the Internet time management and Internet monitoring system of the present invention. The embodiment includes a client device 101, a user authentication device 102, a network access device 103, a policy control device 104, a user information device 105, an event processing device 106, and a network 107, wherein the network access device includes The routing module 1032, the traffic concentrating module 1033, and the real-time monitoring module 1031 are further provided. The user information device 105 further includes an event triggering module 1053, a user information database 1051, and a user online database 1052.

In consideration of the cost of equipment construction, the ISP has only built the system for online time management and Internet monitoring of the present invention in a specific area. Therefore, most of the client devices need to connect to the channel through the individual access routing module 1032. The centralized module 1033. Therefore, the traffic concentration module 1033 can collect the traffic of the plurality of client devices together for subsequent processing.

In a specific implementation, the user authentication device 102 compares the user information input by the client device 101 with the user data in the user online database 1052, and confirms whether the client device is a time management user, and the user network address and the user account. The corresponding relationship is established in the user's online database. The access routing module 1032 receives the user information of the user equipment 101, and then the traffic centralized module 1033 collects the user information received by the routing module 1032, and is monitored by the instant monitoring module. The group 1031 monitors the user traffic centralized in the traffic centralized module 1033 in real time. When the real-time monitoring module 1031 finds that the service of the client device 101 meets the trigger condition, it will actively send a trigger message to the policy control device 104, and then the policy control device 104 issues or cancels the network access device 103. Time management policy of the client device 101.

When the client device 101 requests to apply for the time management service to the ISP and accesses the Internet within the time limit set by the time management, the policy control device 104 issues a policy to the network access device 103 to transmit the user service to the event processing device 106. Then, the event processing device 106 redirects the client device 101 to a specific webpage or performs corresponding processing. Otherwise, if the client device 101 accesses the Internet during an unrestricted time, the policy control device 104 does not release the policy or cancel. The previously released policy allows the user traffic to be transmitted to the Internet.

In a preferred embodiment, the real-time monitoring module 1031 can still perform statistics, analysis, and management on the traffic of the client device 101. For example, the user can set the traffic restriction function on the ISP side. When the Internet traffic exceeds the limit value, the real-time monitoring module 1031 notifies the policy control device 104 to issue a policy for restricting the Internet access.

In another preferred embodiment, the access routing module 1032 can be a device connected to the network, such as a border router, a remote access server, and/or a broadband remote access server, and the network access device 1032 can take it The user traffic is transmitted to the traffic concentrating module 1033, and the VPN tunnel protocol (such as Layer 2 Tunneling Protocol (L2TP), Generic Routing Encapsulation (GRE), and multiple protocols are usually available. Labeling (MultiProtocol Label Switching, MPLS) and/or Internet Protocol Security Protocol (IPsec), routing settings (such as Policy-based Routing (PBR) and/or filtering based delivery (Filter) -based Forwarding (FBF)) or set the virtual area network tag technology (VLAN tags) or service type (Type of Service, TOS) to implement.

In another preferred embodiment, the policy control device 104 can receive the trigger message through a network protocol such as RADIUS, SOAP, HTTP, XML, or socket, and the policy control device 104 can issue the network access device 103 by using the network protocol. Or cancel the policy, where the network protocol can be SNMP, COPS, telnet or SSH.

Please refer to FIG. 3, which is an architectural diagram of an embodiment of the online time management and Internet monitoring system of the present invention for real-time monitoring of user traffic. The embodiment includes a client device 101, an instant monitoring module 1031, and a network 107. The instant monitoring module 1031 has a two-way traffic monitoring function.

In a specific implementation, the real-time monitoring module 1031 can lock the client device 101 and monitor the uploading and downlinking of the user device 101. When the real-time monitoring module 1031 finds that its upload or downlink traffic is within the limited time limit of the specific user, the policy control device 104 is immediately notified. Time management policy.

Please refer to FIG. 4 , which is a structural diagram of another embodiment of the online time management and Internet monitoring system of the present invention regarding real-time monitoring of user traffic. The real-time monitoring module 1031 only monitors one-way traffic.

Compared with the third embodiment, the real-time monitoring module 1031 of the embodiment monitors only the uploading user service of the user equipment 101 in one direction, which has the advantages of reducing the burden of the real-time monitoring module 1031 and improving the monitoring efficiency.

Please refer to FIG. 5 , which is a structural diagram of still another embodiment of the online time management and online monitoring system of the present invention regarding real-time monitoring of user traffic. Compared with FIG. 4, the auxiliary monitoring module 301 is added in the present example to enhance the success rate of the real-time monitoring module 1031. For example, if the user starts to access the Internet at an unrestricted time and connects to an external server for data downloading, after the usage time is exceeded, the operation of the real-time monitoring module 1031 can block subsequent uploading of the traffic, but it is possible The external server continues to pass the data down to the user. However, as long as the auxiliary monitoring module 301 blocks the downlink traffic, the vulnerability caused by the monitoring module 1031 for only one-way traffic monitoring can be avoided.

Referring to FIG. 6, it is a schematic flowchart of the online time management and online monitoring method of the present invention. As shown in the figure, the specific process includes the following steps.

In step S601, the user equipment is input with user information, such as an account password, and/or a device number, and the user authentication device authenticates the user device. Then it proceeds to step S602.

In step S602, the network access device is configured to access the user equipment. User traffic. Then it proceeds to step S603.

In step S603, the real-time monitoring module monitors the user service of the client device. Then it proceeds to step S604.

In step S604, the policy control device is caused to query the user time management setting of the client device. The policy control device queries the user information of the user information database on the user information device to know the time management setting of the user. Then it proceeds to step S605.

In step S605, the policy control device causes the network access device to release or cancel the time management policy for the client device. Then it proceeds to step S606.

In step S606, the event processing device is caused to perform time management on the client device.

In a preferred embodiment, step S602 includes: causing the access routing module in the network access device to access the user service of the user device; and causing the traffic centralized module to utilize channel protocol, routing settings, Set VLAN tags or ToS to collect the user traffic received by the access routing module. The channel protocol is L2TP, GRE, MPLS, IPsec, or IP-in-IP. The route is set to PBR (Policy-Based). Routing).

Referring to FIG. 7, a flow chart of another embodiment of the online time management and Internet monitoring method of the present invention is shown. As shown in the figure, the specific process includes the following steps.

In step S701, the plurality of network access modules are configured to access the services of the plurality of client devices. Then it proceeds to step S702.

In step S702, user traffic is centralized by the traffic concentration module. Connect Proceed to step S703.

In step S703, the real-time monitoring module performs real-time monitoring on the user service. Proceeding to step S704.

In step S704, the real-time monitoring module sends a trigger message to the policy control device when the event is established. Then it proceeds to step S705.

In step S705, the policy control device issues a policy to the network access device. Then it proceeds to step S706.

In step S706, the event processing device is caused to perform time management on the client device.

In a preferred embodiment, when the user manages the user for time, the trigger condition is triggered when the user device is online, the user device is offline, and/or is established at a predetermined time, and the event trigger module transmits a trigger. The message is given to the policy control device.

Referring to FIG. 8 , it is a flowchart of a specific embodiment of an instant monitoring mechanism in the online time management and online monitoring method of the present invention, and the specific process includes the following steps.

In step S801, the real-time monitoring module performs real-time two-way monitoring on the uploading and downloading of the traffic of the client device. Proceeding to step S802.

In step S802, the real-time monitoring module sends a trigger message to the policy control device when the event is established.

FIG. 9 is a flowchart of another specific embodiment of an instant monitoring mechanism in the online time management and online monitoring method of the present invention, and the specific process includes the following steps.

In step S901, the real-time monitoring module uploads the client device. User traffic performs instant one-way monitoring. Then it proceeds to step S902.

In step S902, the real-time monitoring module sends a trigger message to the policy control device when the event is established.

Referring to FIG. 10, it is a flowchart of still another embodiment of the instant monitoring mechanism in the online time management and Internet monitoring method of the present invention, and the specific process includes the following steps.

In step S1001, the real-time monitoring module only monitors the user device uploading user traffic in real time. Then it proceeds to step S1002.

In step S1002, the auxiliary monitoring module is configured to monitor the user traffic downloaded by the client device. Then it proceeds to step S1003.

In step S1003, the real-time monitoring module or the auxiliary monitoring module sends a trigger message to the policy control device when the event is established.

Through the implementation of the present invention, the user is provided with a more convenient online time management and setting process. With this architecture, the user terminal can set the required time management restriction period directly through the ISP-side computer room without purchasing any hardware device. And through the authentication mechanism of the system of the present invention, non-legal users can be prevented from arbitrarily changing the time management settings. In addition, with the instant monitoring function of the present invention, the user's online data can be immediately known, thereby speeding up the operation time of the entire system and improving the operational efficiency of the overall system.

The above embodiments are merely illustrative of the principles of the invention and its advantages, and are not intended to limit the invention. Modifications and variations of the above-described embodiments can be made by those skilled in the art without departing from the spirit and scope of the invention.

101‧‧‧Customer device

102‧‧‧User authentication device

103‧‧‧Network access device

1031‧‧‧ Instant Monitoring Module

1032‧‧‧Access routing module

1033‧‧‧Traffic centralized module

104‧‧‧ policy control device

105‧‧‧User Information Device

1051‧‧‧User Information Library

1052‧‧‧User online information database

1053‧‧‧ Event Trigger Module

106‧‧‧Event processing device

107‧‧‧Network

301‧‧‧Auxiliary Monitoring Module

S601-S606‧‧‧Steps

S701-S706‧‧‧Steps

S801-S802‧‧‧Steps

S901-S902‧‧‧Steps

S1001-S1003‧‧‧ steps

1 is a basic structural diagram of an Internet time management and Internet monitoring system of the present invention; FIG. 2 is an architectural diagram of a specific embodiment of an Internet time management and Internet monitoring system of the present invention; Management and Internet monitoring system architecture diagram of one embodiment of user traffic instant monitoring; FIG. 4 is a structural diagram of another embodiment of the online time management and Internet monitoring system of the present invention for real-time monitoring of user traffic; FIG. 5 is a structural diagram of another embodiment of the online time management and Internet monitoring system of the present invention for real-time monitoring of user traffic; FIG. 6 is a flowchart of the online time management and Internet monitoring method of the present invention; The figure is a flow chart of another embodiment of the online time management and Internet monitoring method of the present invention; FIG. 8 is a flow chart of a specific embodiment of the instant monitoring mechanism in the online time management and Internet monitoring method of the present invention; A flowchart of another specific embodiment of the instant monitoring mechanism in the online time management and Internet monitoring method of the present invention; and FIG. 10 is the present invention Time management and Internet access monitoring method of a further real-time monitoring of the specific mechanism of the flow diagram of FIG.

101‧‧‧Customer device

102‧‧‧User authentication device

103‧‧‧Network access device

1031‧‧‧ Instant Monitoring Module

104‧‧‧ policy control device

105‧‧‧User Information Device

106‧‧‧Event processing device

107‧‧‧Network

Claims (19)

An Internet time management and Internet monitoring system is applied to a network system for time management of a client device, including: a network access device, electrically connected to the user device, for receiving the The user interface of the client device, wherein the network access device includes an instant monitoring module for analyzing, monitoring and/or managing the user traffic transmitted by the client device and assisting the instant An auxiliary monitoring module of the monitoring module; the user authentication device is electrically connected to the network access device, and is configured to perform identity authentication according to user information output by the user device connected to the network access device; The information device is electrically connected to the user authentication device, and is configured to store the content of the user's online information and the time management setting of the user device, where the time management setting includes: an online usage time and an online restriction time, wherein The user authentication device establishes the user online information and transmits the data to the user information device, so that the user information device triggers the network access device to perform the user The service control device is electrically connected to the user authentication device and the network access device. When the instant monitoring module of the network access device discovers the user service of the user device, the instant The monitoring module notifies the user information device to query the time management setting of the client device, and when the time management setting of the user device meets the trigger condition, the user information device transmits a trigger message to the policy control device to enable the policy control The device sends the release to the network access device or And canceling the policy instruction; and the event processing device is electrically connected to the user information device and the network access device, and performs time management on the user device according to the command, wherein the operation time of the user device is more than After the time management setting of the Internet access time, the policy control device issues a warning notification to the client device, and when the client device accesses the Internet within the time limit set by the time management, the policy control device will The route picking device sends the release policy command to transmit the user service to the event processing device, and the event processing device redirects the client device to a specific webpage or performs corresponding processing; and the instant monitoring mode When the group monitors that the client device performs uploading or downlinking, it notifies the policy control device to issue a time management policy, and the instant monitoring mode is used in the time limit set by the user device in the time management setting or exceeds the online use time. The group blocks the subsequent uploading of the traffic, and the auxiliary monitoring module blocks the downlinking service. For example, the online time management and the Internet monitoring system of the first application of the patent scope includes the event triggering module, configured to send a trigger message to the event triggering module of the policy control device when the triggering condition is established. For example, the online time management and Internet monitoring system of claim 2, wherein when the user equipment is online, when the user equipment is offline, when a predetermined time point is reached, and/or the user equipment is reached The trigger condition is established when the time management is set. For example, the online time management and Internet monitoring system of the first application scope of the patent scope The user information device comprises: a user online database for storing the online information of the user device; and a user information database for storing the user service application data of the user device. For example, the Internet time management and the Internet monitoring system of the first application of the patent scope, wherein the network access device comprises: a routing module for receiving user services of the user device; and a service The centralized module is used to collect a plurality of user services received by the access routing module, and transmit the user traffic according to the policy issued by the policy control device. For example, in the online time management and Internet monitoring system of claim 1, wherein the policy control device transmits the policy instruction to the event processing device through the network system when receiving the trigger message sent by the user information device. For example, the online time management and the online monitoring system of the fourth application of the patent scope, wherein the user service application data is the information of the user account and the user time management, and the online information of the user is the correspondence between the user account and the network address. For example, the online time management and Internet monitoring system of claim 1 of the patent scope, wherein the instant monitoring module locks the client device and monitors the uploading and/or downlinking of the user device of the user device. For example, the online time management and Internet monitoring system of the 8th patent application scope The real-time monitoring module system measures, analyzes, and/or manages the traffic of the user device. For example, the online time management and Internet monitoring system of claim 1 of the patent scope, wherein the client device is a personal computer, a notebook computer, a personal digital assistant or a mobile phone. For example, the online time management and Internet monitoring system of claim 1 of the patent scope, wherein the network access device is a border router, a remote access server or a broadband remote access server. For example, the online time management and the on-line monitoring system of the first aspect of the patent application, wherein the event management device performs time management on the client device, further includes discarding the packet of the client device. An online time management and internet monitoring method is applied to a network access device including a client device, a network connection device electrically connected to the client device, and a user authentication device electrically connected to the network access device, and the user Internet access time of the user information device electrically connected to the authentication device, the policy control device electrically connected to the user authentication device and the network access device, and the event processing device electrically connected to the user information device and the network access device In the management and Internet monitoring system, the steps include: (1) causing the client device to connect to the network access device and input user information; and (2) causing the user authentication device to perform the user device according to the user information. Authenticating, and transmitting the established user online information to the user information device, so that the user information device triggers the network access device The user information device stores the content of the time management setting, and the content of the time management setting includes: the time of using the Internet and the time limit for accessing the Internet; (3) making the instant monitoring module installed on the network access device target The user equipment of the user equipment performs real-time monitoring, and the auxiliary monitoring module installed on the network access device is used to assist the instant monitoring module to perform instantaneous auxiliary monitoring for the user information of the user equipment; (4) when the instant monitoring module finds the user service of the client device, the instant monitoring module notifies the user information device to query the time management setting stored by the client device; (5) at the user terminal When the time management setting of the device meets the trigger condition, the user information device event triggering module transmits a trigger message to the policy control device, so that the policy control device sends a release or cancellation policy command to the network access device, where After the operating time of the user equipment accessing the Internet exceeds the online usage time set by the time management, the policy control device is used by the policy terminal. Sending a warning notice; or when the instant monitoring module monitors that the client device finds its upload or downlink traffic within the time limit for accessing the Internet or exceeds the time of using the Internet, the policy control device is notified to issue a time management policy, and The instant monitoring module blocks the subsequent uploading of the traffic, and the auxiliary monitoring module blocks the downlinking service; and (6) when the client device accesses the Internet within the limited time set by the time management, the policy control device Road pick-up device The policy command is issued to transmit user traffic to the event processing device, and the event processing device redirects the client device to a specific web page. For example, the online time management and the online monitoring method of claim 13 wherein the event processing device performs time management on the client device further includes discarding the packet of the client device. For example, the online time management and the online monitoring method of claim 13 of the patent scope, wherein the user information device comprises: a user online database, which is used for storing user online information of the user device; and a user information database. Used to store user service application materials. For example, in the online time management and online monitoring method of claim 13, wherein the step (2) comprises: causing the user authentication device to confirm the usage right of the client device, and determining whether the client device is a time management user. For example, the online time management and the online monitoring method of claim 13 of the patent scope, wherein the step (3) comprises: (3-1) the access routing module accessing the user service of the user device; and (3) -2) The traffic concentrating module collects a plurality of user services received by the routing module, and performs real-time monitoring of the user traffic of the client device through the instant monitoring module. Such as the online time management and Internet monitoring of the 13th patent application scope The method, wherein the step (3) comprises: causing the instant monitoring module to lock the client device, and monitoring the user traffic uploaded and/or transmitted by the client device. For example, the online time management and the online monitoring method of claim 13 of the patent application, wherein the method of monitoring in step (4) is to enable the instant monitoring module to monitor the user traffic uploaded by the client device and/or The auxiliary monitoring module performs on-the-spot monitoring of the user traffic transmitted by the client device.