User Terminal Improper Word Dictionary Blocking Unauthorized Requests

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for blocking unauthorized requests, such as those from malicious sites, are inadequate in preventing the transmission of sensitive information, as they either focus on hostname verification or browser-level program execution prevention, failing to effectively block requests with improper words that could lead to cybercrimes.

Innovation Solution

A user terminal equipped with an improper word dictionary that detects and inhibits the transmission of requests containing such words, while optionally notifying users and public institutions, and utilizing a malicious site information management server to calculate website reliability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If hostname verification methods are used to prevent DNS tampering, then communication destination integrity is improved, but unauthorized requests with proper hostnames cannot be blocked

Engineering Contradiction:
Improvecommunication destination integrityVSAvoidunauthorized request transmission
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary scanning of request contents against an improper word dictionary before requests are transmitted. By checking for sensitive keywords, patterns, and phrases in advance, the system can block unauthorized requests at the source even when they use legitimate hostnames, thus preventing harmful transmissions while maintaining communication with authorized sites.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary scanning mechanism that sits between the user terminal and the network communication. This intermediary layer intercepts requests, scans their contents against the improper word dictionary, and determines whether to allow transmission. This mediator enables additional security checking without breaking the existing hostname verification system.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If browser-level program execution prevention is used, then malicious script execution is reduced, but requests containing improper words can still be transmitted

Engineering Contradiction:
Improvemalicious program executionVSAvoidsensitive information transmission
Core Design Contradiction:
Object-affected harmful factorsVSLoss of information

Solution Approach 1:

The system performs preliminary scanning of request contents against an improper word dictionary before requests are transmitted. By checking for sensitive keywords, patterns, and phrases in advance, the system can block unauthorized requests at the source even when they use legitimate hostnames, thus preventing harmful transmissions while maintaining communication with authorized sites.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If all requests are blocked to prevent information leakage, then security is improved, but legitimate communication is disrupted

Engineering Contradiction:
Improveinformation securityVSAvoidlegitimate communication flow
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system applies different treatment to different requests based on their content characteristics. Rather than uniformly blocking all requests, it selectively scans and blocks only those containing improper words from the dictionary, while allowing legitimate requests to pass through unchanged. This localized approach maintains security without disrupting normal communication.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system changes the parameter being checked from purely hostname-based verification to content-based verification using an improper word dictionary. By scanning request contents for sensitive keywords, patterns, and phrases, the system can distinguish between legitimate and unauthorized requests more accurately, allowing legitimate communication while blocking harmful transmissions.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP2731027B1User terminal, unauthorized site information management server, and method and program for blocking unauthorized request
Publication Date: 2018.03.07 OPTIM
  • EP2731027B1 patent drawingFigure 1
  • EP2731027B1 patent drawingFigure 2
  • EP2731027B1 patent drawingFigure 3

AI summary

The transmission of an unauthorized request from a terminal is blocked. It is possible to provide a user terminal which blocks an unauthorized request made by malicious content by detecting the transmission of a request generated in a user terminal, investigating whether the request contains an improper word registered in an improper word database, and inhibiting the transmission of the request when it is determined that the request contains the improper word.