Cracker tracing system and method, and authentification system and method of using the same

• US 20030172155A1
• Filed: 12/30/2002
• Published: 09/11/2003
• Est. Priority Date: 05/09/2001
• Status: Abandoned Application

• Current Assignee: Triops Incorporated
• Original Assignee: Triops Incorporated
• Inventors: Kim, Wan-Soo
• Application Number:
  US10/312,894
• Publication Number:
  US 20030172155A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A system of tracking a cracker includes a web agent inserted in a predetermined web page; a location indicating unit for indicating an access location information of the user by analyzing a HTTP header; a comparing unit for comparing the location information of the user obtained by analyzing the HTTP header to location information of the user obtained by the web agent; and tracing unit for retrieving an original location of the user using the location information obtained by the web agent, wherein the web agent is downloaded to a computer of the user and transfers the location information of the user.

Claims

1. A system of tracking a cracker, comprising:

a web agent inserted in a predetermined web page;

a location indicating unit for indicating an access location information of the user by analyzing a HTTP header;

a comparing unit for comparing the location information of the user obtained by analyzing the HTTP header to location information of the user obtained by the web agent; and

tracing unit for retrieving an original location of the user using the location information obtained by the web agent,

wherein the web agent is downloaded to a computer of the user and transfers the location information of the user.

2. The system of claim 1, wherein the web agent is inserted in an error page and is downloaded to the computer of the user when an error occurs.

3. The system of claim 1, wherein the web agent includes a JAVA applet.

4. The system of claim 1, further comprising, a database for storing the location information of the user obtained by analyzing the HTTP header and the location information of the user obtained by the web agent.

5. The system of claim 1, wherein the location information of the user obtained by the web agent includes an access time, an IP address, a host name, an error number, an access location, a URL option, a web browser information, an operating system information, and a MAC information.

6. The system of claim 1, wherein the comparing unit includes a JAVA program of a JSP server.

27. The system of claim 1, wherein the MAC information is obtained by sending a request for a MAC address to the IP address of the user using a NETBIOS.

7. A method of tracing a cracker, comprising:

a) Inserting a web agent is inserted in a predetermined web page;

b) analyzing a HTTP header;

c) downloading the web agent to a user computer to transfer location information of the user computer; and

d) comparing location information obtained by analyzing the HTTP header to the location information obtained by the web agent.

8. The method of claim 7, further comprising, retrieving a location of a user using the location information obtained by the web agent when the location information obtained by analyzing the HTTP header is not identical to the location information obtained by the web agent.

9. The method of claim 7, further comprising, storing the location information obtained by analyzing the HTTP header and the location information obtained by the web agent in a data base.

10. The method of claim 7, wherein the web agent is inserted in an error page and is downloaded to the computer of the user when an error occurs.

11. The method of claim 7, wherein the web agent includes a JAVA applet.

12. The method of claim 7, wherein the location information of the user obtained by the web agent includes an access time, an IP address, a host name, an error number, an access location, a URL option, a web browser information, an operating system information, and a MAC information.

13. The method of claim 7, wherein the step of (d) is performed by a JAVA program of a JSP server.

28. The method of claim 12, wherein the MAC information is obtained by sending a request for a MAC address to the IP address of the user using a NETBIOS.

14. An authentication system, comprising:

a cracker tracing system including;

a web agent inserted in a predetermined web page and downloaded to a computer of the user to transfer the location information of the user;

a location indicating unit for indicating an access location information of the user by analyzing a HTTP header;

a comparing unit for comparing the location information of the user obtained by analyzing the HTTP header to location information of the user obtained by the web agent; and

a tracing unit for retrieving an original location of the user using the location information obtained by the web agent,

wherein an access is allowed when the location information of the user obtained by analyzing the HTTP header is identical to location information of the user obtained by the web agent.

15. The system of claim 14, wherein the web agent is inserted in an error page and is downloaded to the computer of the user when an error occurs.

16. The system of claim 14, wherein the web agent includes a JAVA applet.

17. The system of claim 14, further comprising, a database for storing the location information of the user obtained by analyzing the HTTP header and the location information of the user obtained by the web agent.

18. The system of claim 14, wherein the location information of the user obtained by the web agent includes an access time, an IP address, a host name, an error number, an access location, a URL option, a web browser information, an operating system information, and a MAC information.

19. The system of claim 14, wherein the comparing unit includes a JAVA program of a JSP server.

29. The system of claim 18, wherein the MAC information is obtained by sending a request for a MAC address to the IP address of the user using a NETBIOS.

20. An authentication method, comprising:

a) Inserting a web agent is inserted in a predetermined web page;

b) analyzing a HTTP header;

c) downloading the web agent to a user computer to transfer location information of the user computer;

d) comparing location information obtained by analyzing the HTTP header to the location information obtained by the web agent; and

e) allowing an access when the location information obtained by analyzing the HTTP header is identical to the location information obtained by the web agent.

21. The method of claim 20, further comprising, retrieving a location of a user using the location information obtained by the web agent when the location information obtained by analyzing the HTTP header is not identical to the location information obtained by the web agent.

22. The method of claim 20, further comprising, storing the location information obtained by analyzing the HTTP header and the location information obtained by the web agent in a data base.

23. The method of claim 20, wherein the web agent is inserted in an error page and is downloaded to the computer of the user when an error occurs.

24. The method of claim 20, wherein the web agent includes a JAVA applet.

25. The method of claim 20, wherein the location information of the user obtained by the web agent includes an access time, an IP address, a host name, an error number, an access location, a URL option, a web browser information, an operating system information, and a MAC information.

26. The method of claim 20, wherein the step of (d) is performed by a JAVA program of a JSP server.

30. The method of claim 25, wherein the MAC information is obtained by sending a request for a MAC address to the IP address of the user using a NETBIOS.