METHOD FOR DETERMINING VALIDITY OF COMMAND AND SYSTEM THEREOF

• US 20090204560A1
• Filed: 05/20/2005
• Published: 08/13/2009
• Est. Priority Date: 05/21/2004
• Status: Active Grant

• Current Assignee: Naver Corporation
• Original Assignee: NHN Corporation
• Inventors: Kim, Jung Su
• Granted Patent: US 8,065,258 B2
• Time in Patent Office: Days
• US Class Current: 706/47
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

Provided is a method of determining command line validity, including: a step of maintaining a block network address database including block network address information; a step of receiving a command line from a terminal of a user; a step of extracting network address information included in the command line; a step of determining whether the network address information is the block network address information, with reference to the block network address database; a step of generating log information associated with the command line in case that the network address information is not the block network address information as the result of the determination, in which the log information comprises at least one of the network address information included in the command line, input time point information with respect to the input time point of the command line, and request content information; a step of recording the log information in a log database; and a step of determining the validity of the command line by using the log information.

Claims

1-31. -31. (canceled)

32. A computer-implemented method of determining validity of a command line, comprising the steps of:

maintaining a log database, said log database including log information associated with command lines, said log information including at least one of network address information included in the command line, input time point information with respect to the input time point of the command line, and the request content information;

receiving a command line from a terminal of a user; and

determining validity of said received command line based, at least in part, upon log information recorded in said log database.

33. The method of claim 32, wherein the step of determining the validity of the command line based, at least in part, upon the log information recorded in the log database comprises:

searching the log information including the network address information from the log information recorded in the log database; and

determining validity of the command line to be invalid in case that the entire or a part of the extracted input time point information has relation according to a predetermined rule.

34. The method of claim 32, wherein the step of determining the validity of the command line based, at least in part, upon the log information recorded in the log database comprises:

searching the log information recorded in the log database; and

determining validity of the command line to be invalid in case that the entire or a part of the extracted input time point information has relation according to a predetermined rule.

35. The method of claim 32, wherein the step of determining the validity of the command line based, at least in part, upon the log information recorded in the log database comprises:

computing the first number of the command line received from each terminal for a first period by using the log information recorded in the log database for the first period, respectively, in which the command line received from the terminal with the same network address is determined to be inputted from one terminal;

computing the second number of the command line received from the terminal with the network address for a second period by using the log information recorded in the log database for the second period; and

determining the validity of the command line by using the first number for said each terminal and the second number.

36. The method of claim 32, wherein the step of determining the validity of the command line based, at least in part, upon the log information recorded in the log database comprises:

computing the first number of the command line received from each terminal for a first period by using the log information recorded in the log database for the first period for each of the request content information, respectively, in which the command line received from the terminal with the same network address is determined to be received from one terminal, said log information including at least said blocked network address information and request content information;

computing the second number of the command line including the request content information from the command line received from the terminal with the network address for a second period by using the log information recorded in the log database for the second period; and

determining the validity of the command line by using the first number for said each terminal and for said each of the request content information and the second number.

37. The method of claim 32, further comprising the steps of:

determining the command line generated in association with information communicated with a terminal of a user and inputted from the terminal as a second command line and determining the information as first information; and

recording the log information corresponding to the information communicated with the terminal of the user,

wherein the step of determining the validity of the command line based, at least in part, upon the log information comprises;

determining the type of the command line based on the request content information;

searching the log information corresponding to the first information associated with the command line in the log database in case that the command line is the second command line as the result of the determination; and

determining the command line to be invalid in case that the log information is not searched.

38. The method of claim 32, wherein:

the step of determining validity of said received command line based, at least in part, upon the request format of the command line comprises the step of determining whether the HTTP protocol version of said received command line is a predetermined valid version of the HTTP protocol.

39. The method of claim 32, wherein the step of determining the validity of the command line based, at least in part, upon the request format of the command line comprises a step of determining the validity of the command line according to whether one of user browser information and URL information of a webpage that the terminal accesses just before is included in the command line.

40. The method of claim 32, further comprising the step of:

determining validity of said received command line based, at least in part upon, request format of said received command line.

41. The method of claim 40, wherein:

the command line further includes identification information determined according to the request content information included in the command line and the network address of the terminal; and

the step of determining validity of said received command line based, at least in part upon, request format of said received command line comprises the steps of;

computing the input number of the command line including the identification information by using the identification information; and

determining the validity of the command line based on the input number.

42. The method of claim 32, wherein:

the step of receiving the command line comprises a step of controlling the command line to be encoded according to an encoding method; and

the step of determining the validity of the command line based, at least in part, upon the request format comprises the steps of;

determining whether the command line is decoded by a decoding method corresponding to the encoding method; and

determining the command line to be invalid in case that the command line is not decoded by the decoding method as the result of the determination.

43. The method of claim 32, further comprising the steps of:

computing a period between the point of time providing predetermined information and the point of time inputting the command line in case that the command line is generated based on the information provided to the terminal; and

determining the command line to be invalid in case that the period is less than a predetermined value.

44. The method of claim 32, wherein the step of determining the validity of the command line based, at least in part, upon log information recorded in said log database comprises the steps of:

computing the first number of the command line received for a first period by using the log information recorded in the log database for the first period for each of the request content information, respectively;

computing the second number of the log information including the request content information included in the command line by using the log information recorded for a second period with reference to the log database; and

determining the validity of the command line by using the first number for said each of the request content information and the second number.

45. The method of claim 32, wherein the step of determining the validity of the command line based, at least in part, upon the log information recorded in the log database comprises the steps of:

identifying a network group associated with the network address based on the network address information;

computing the first number of the command line inputted from each terminal for a first period by using the log information recorded in the log database for each of the request content information, respectively, in which the command line received from the terminal with the same network address is determined to be inputted from one terminal;

computing the second number of the command line including the network address information associated with the network group and the request content information for a second period by using the log information recorded in the log database; and

determining the validity of the command line by using the first number and the second number.

61. A computer readable recording medium in which a program for executing the method of claim 32 is recorded.

46. A computer-implemented method of determining validity of command line, comprising the steps of:

maintaining a blocked network address database, said blocked network address database including blocked network address information;

maintaining a log database, said log database including log information associated with command lines, said log information including at least one of network address information included in the command line, input time point information with respect to the input time point of the command line, and the request content information;

receiving a command line from a terminal of a user;

extracting network address information included in the command line;

determining validity of said command line based, at least in part upon, said blocked network address information; and

determining validity of said received command line by using said log information recorded in said log database if said extracted network address is not the blocked network address.

47. The method of claim 46, further comprising the steps of:

maintaining a permit network address database including permit network address information;

determining whether the network address information is the permit network address information with reference to the permit network address database; and

determining the command line to be invalid in case that the network address information is the permit network address information,

wherein the permit network address information is one of information with respect to the network address of a manager and information with respect to the network address of terminals permitted according to a predetermined standard.

48. The method of claim 46, wherein the step of determining the validity of the command line by using the log information comprises the steps of:

searching the log information including the network address information from the log information recorded in the log database, said log information including, at least said blocked network address information and input time point information; and

determining validity of the command line based, at least in part, upon said blocked network address information and said input time point information.

49. The method of claim 46, wherein the step of determining the validity of the command line by using the log information comprises the steps of:

a step of searching the log information including the request content from the log information recorded in the log database, said log information including, at least said blocked network address information and input time point information; and

determining validity of the command line based, at least in part, upon said blocked network address information and said input time point information.

50. The method of claim 46, wherein the step of determining the validity of the command line by using the log information comprises the steps of:

computing the first number of the command lines received from each terminal for a first period by using the log information recorded in the log database for the first period, respectively, in which the command line inputted from the terminal with the same network address is determined to be received from one terminal;

computing the second number of the command lines received from the terminal with the network address for a second period by using the log information recorded in the log database for the second period; and

determining the validity of the command line by using the first number for said each terminal and the second number.

51. The method of claim 46, wherein the step of determining the validity of the command line by using the log information comprises the steps of:

computing the first number of the command line received from each terminal for a first period by using the log information recorded in the log database for the first period for each of the request content information, respectively, in which the command line received from the terminal with the same network address is determined to be received from one terminal, said log information including at least said blocked network address information and request content information;

computing the second number of the command line including the request content information from the command lines inputted from the terminal with the network address for a second period by using the log information recorded in the log database for the second period; and

determining the validity of the command line by using the first number for said each terminal and for said each of the request content information and the second number.

52. The method of claim 46, further comprising the steps of:

determining the command line generated in association with information communicated with a terminal of a user and inputted from the terminal as a second command line and determining the information as first information; and

recording the log information corresponding to the information communicated with the terminal of the user,

wherein the step of determining the validity of the command line by using the log information comprises;

determining the type of the command line based on the request content information;

searching the log information corresponding to the first information associated with the command line in the log database in case that the command line is the second command line as the result of the determination; and

determining the command line to be invalid in case that the log information is not searched.

53. The method of claim 46, further comprising the steps of:

maintaining an invalidity presumption network address database including invalidity presumption network address information with respect to an invalidity presumption network; and

determining the log information associated with the command line as first log information,

wherein the step of determining validity of said received command line by using log information recorded in a log database comprises the steps of;

determining whether the network address information is the invalidity presumption network address information with reference to the invalidity presumption network address database;

searching second log information including the network address information with reference to the log database in case that the network address information is the invalidity presumption network address information; and

determining whether the network address information is the block network address information by using the first log information and the second log information.

54. A computer-implemented method of determining the validity of a command line received from a user, comprising the steps of:

maintaining at least one log information in a log database, said log information being associated with at least one command line received from terminals of users, said log information including at least one predetermined information;

receiving a command line from a terminal of a user;

identifying at least one predetermined information included in said command line;

searching log information recorded in said log database, said log information corresponding to said predetermined information which is included in said command line; and

determining validity of said received command line by using said log information recorded in said log database.

55. The method of claim 54,

wherein if said received command line is determined to be a result-type command line in which said result-type command line is in response to a query-type command line, the step of searching the log information in said log database searches log information recorded in said log database, which includes query-type command information which corresponds to said result-type command;

and

said result-type command is determined to be invalid when the log information including said corresponding query-type command information is not searched.

56. The method of claim 54,

wherein said predetermined log information includes predetermined network address information, input time point information with respect to the input time point of one of said network address information of the terminal and the command line, and said command line is determined to be invalid in case that the entire or a part of the extracted input time point information has relation according to a predetermined rule.

57. The method of claim 54,

wherein said predetermined log information includes predetermined request content information, input time point information with respect to the input time point of one of said network address information of the terminal and the command line, and said command line is determined to be invalid in case that the entire or a part of the extracted input time point information has relation according to a predetermined rule.

58. A method of determining the validity of a command line inputted from a user, comprising the steps of:

receiving a first command line from a terminal of the user;

providing a webpage including predetermined information to the user according to the first command line;

receiving a second command line based on the webpage from the terminal, in which the second command line includes at least one of URL information of the webpage, first network address information of the terminal inputting the first command line, and second network address information of the terminal inputting the second command line; and

determining the validity of the second command line with reference to one of the URL information, the first network address information, and the second network address information included in the second command line.

59. The method of claim 58, wherein the step of determining the validity of the second command line comprises at least one of the steps of:

determining whether one of the URL information and the first network address information is included in the second command line;

determining whether the URL information included in the second command line is the URL information of the webpage; and

determining whether the first network address information included in the second command line is corresponding to the second network address information.

60. A method of determining the validity of a command line inputted from a user, comprising the steps of:

recording log information associated with the command line inputted from a terminal of the user in a log database, in which the log information includes network address information of the terminal, input time point information with respect to the input time point of the command line, and request content information included in the command line;

computing the first number of the command line inputted for a first period by using the log information recorded in the log database for the first period for each of the request content information, respectively;

computing the second number of the log information including the request content information included in the command line by using the log information recorded for a second period with reference to the log database; and

determining the validity of the command line by using the first number for said each of the request content information and the second number.

62. A system for determining the validity of a command line, comprising:

a log database including log information;

a block network address database including block network address information;

a command line input unit receiving the command line from a terminal of a user;

a log information generation unit generating the log information associated with the command line, in which the log information includes at least one of network address information included in the command line, input time point information with respect to the input time point of the command line, and request content information included in the command line;

a log database management unit recording the generated log information in the log database; and

a validity determination unit determining the validity of the command line by using the log information,

wherein the log information generation unit performs;

a step of determining whether the network address information is the block network address information with reference to the block network address information; and

a step of generating the log information associated with the command line in case that the network address information is not the block network address information as the result of the determination.