Network access control method and system based on IP access behaviors

A network access control and behavior technology, applied in the field of computer networks, can solve the problems of cumbersome configuration, poor dynamic real-time performance, low efficiency, etc., and achieve the effect of improving service quality, enhancing stability and usability

Active Publication Date: 2013-12-25
CTRIP COMP TECH SHANGHAI
View PDF9 Cites 77 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide a network access control method and system based on IP access behavior, which solves the problems of low efficiency, cumbersome configuration, and poor dynamic real-time performance in traditional IP access control. Website or API service quality, enhance website stability and usability

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Network access control method and system based on IP access behaviors
  • Network access control method and system based on IP access behaviors
  • Network access control method and system based on IP access behaviors

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0030] like Figures 1 to 3 As shown, the present invention provides a network access control method based on IP access behavior. The method in this embodiment is applicable to access control including websites, interfaces, WEB services, etc. The method includes steps S1 to S5.

[0031] Step S1, after the router obtains the Web request sent by the client, it sends the Web request to the behavior analysis server. Specifically, various users send Web requests through the client, and each client corresponds to an IP; The entrance of the company's business server, by configuring it, it can send Web requests to the corresponding behavior analysis server.

[0032] In an embodiment of the present invention, the Web request includes the user IP, the requested resource address, and the used browser model information.

[0033] In step S2, the behavior analysis server extracts the data in the Web request to generate the corresponding user IP and the behavior record of the user IP. Speci...

Embodiment 2

[0053] like image 3 As shown, the present invention also provides another network access control system based on IP access behavior, including a router 1 and a behavior analysis server 2 .

[0054] The router 1 is configured to, after acquiring the Web request sent by the client, send the Web request to the behavior analysis server.

[0055] In an embodiment of the present invention, the Web request includes the user IP, the requested resource address, and the used browser model information.

[0056] The behavior analysis server 2 is used to extract the data in the Web request to generate the corresponding user IP and the behavior record of the user IP, and judge whether the corresponding Web request is a normal request according to the behavior record, and if so, then the Web request The request is forwarded to the corresponding service server; if not, a response rejecting the Web request is sent to the client.

[0057] In an embodiment of the present invention, the behavi...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a network access control method and system based on IP access behaviors. The method includes: after a Web request sent by a client is acquired through a router, the Web request is sent to a behavior analyzing server; data in the Web request are extracted by the behavior analyzing server and a corresponding user IP and a behavior record of the user IP are generated and whether the Web request is a normal request is judged according to the behavior record; if the Web request is a normal request, then the Web request is forwarded to a corresponding service server and if not, then a response refusing the Web request is sent to the client so that access control on unknown IPs can be carried out dynamically and problems such as low efficiency, tedious configuration and poor dynamic instantaneity and the like in traditional IP access control are solved. At the same time, the network access control method and system also aim at restraining network attacks, regulating crawler behaviors, improving website or API service qualities and enhancing website stability and usability.

Description

technical field [0001] The invention belongs to the technical field of computer networks, and in particular relates to a method and a system for achieving network access control by analyzing user access behavior according to IP. Background technique [0002] With the development of large-scale Internet business websites, there are many malicious web crawlers and network attacks in the network field. These behaviors cause a large amount of network traffic and resources to be occupied by visiting websites or services with a large amount of traffic in a short period of time, and even lead to server crashes. cause heavy losses to the company. [0003] Therefore, how to strengthen the technology with access control as the core has become an urgent problem for large Internet companies to solve. The existing IP address-based access control list method mainly achieves the purpose of access restriction by statically configuring rules on the firewall or server. This method is not onl...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
Inventor 叶亚明张勇
Owner CTRIP COMP TECH SHANGHAI
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products