Method, System And Apparatus For Improving Security Level Of A Terminal When Surfing Internet

• US 20130212639A1
• Filed: 03/15/2013
• Published: 08/15/2013
• Est. Priority Date: 02/23/2011
• Status: Active Grant

• Current Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Inventors: ZHAO, Feng, QI, Fei, SONG, Dan
• Granted Patent: US 9,479,537 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/567 using dedicated hardware
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud

Abstract

A method, system, and apparatus for improving security level of a terminal when it surfs the Internet. The method includes receiving, by a network side, network security information reported by a terminal, generating a network security policy according to the network security information reported by each terminal, and transmitting a security indication to the network security policy to the terminal; providing, by the terminal, a security prompt for network information to be obtained or having been obtained according to the security indication. Various embodiments can improve the security level of the terminal when it surfs the Internet and save resources of the terminal.

Claims

1. A method for improving security level of a terminal when the terminal surfs the Internet, comprising:

receiving, by a network side, network security information reported by a terminal, generating a network security policy according to the network security information reported by each terminal, and transmitting a security indication according to the network security policy to the terminal; and

providing, by the terminal, a security prompt for network information to be obtained or having been obtained according to the security indication.

2. The method of claim 1, wherein the security indication comprises a black list and/or a white list of the network security information;

and

the providing the security prompt for the network information to be obtained or having been obtained comprises;

comparing, by the terminal, a website address received and/or a website address of a link in a currently browsed webpage with the security information in the black list and/or white list, and providing the security prompt according to a compared result.

3. The method of claim 1, further comprising:

the terminal transmitting a website address to be checked to the network side in real-time, the network side checking the website address according to the network security policy and returning the security indication to the terminal according to a checked result; and

the website address to be checked comprises;

a website address received by the terminal and/or a website address of a link in a webpage currently browsed by the terminal.

4. The method of claim 1, wherein the providing the security prompt for the network information to be obtained or having been obtained comprises:

obtaining, by the terminal, characteristic code information of a file downloaded by the terminal, transmitting the characteristic code information to the network side, and providing the security prompt for the file according to the security indication returned by the network side.

5. The method of claim 4, further comprising:

comparing, by the network side, the characteristic code information reported by the terminal with a characteristic code of a safe file and/or a characteristic code of an unsafe file, if compared results conflict with each other, transmitting an indication to the terminal indicating the terminal to collect the characteristic code again and performing the comparison again according to the newly-collected characteristic code; and

collecting, by the terminal, the characteristic code information of the file downloaded by the terminal for more than two times using different methods according to the indication of the security server.

6. A system for improving security level of a terminal when the terminal surfs the Internet, comprising:

a security server and a terminal;

the security server is adapted to receive network security information reported by the terminal, generate a network security policy according to the network security information reported by each terminal, and transmit a security indication to the terminal according to the network security policy; and

the terminal is adapted to receive the security indication transmitted by the security server, provide a security prompt for network information to be obtained or having been obtained according to the security indication.

7. The system of claim 6, wherein the terminal comprises a plug-in platform, the plug-in platform comprises an interface for installing a network security plug-in;

the network security plug-in is adapted to report the network security information to the security server, provide the security prompt for the network information to be obtained or having been obtained according to the security indication returned by the security server.

8. The system of claim 7, wherein the terminal comprises a browsing module;

the browsing module is adapted to receive a website address and browse a webpage;

the network security plug-in is adapted to obtain a black list and/or white list of the network security information from the security server and store the black list and/or white list, compare the website address received by the browsing module and/or a website address of a link in a currently browsed webpage with the security information of the black list and/or white list, and display the security prompt according to a compared result;

the security server comprises a first module, adapted to generate the black list and/or white list according to the network security information obtained.

9. The system of claim 8, wherein the network security plug-in further comprises a module, adapted to transmit, if a website address to be checked does not match the security information of the black list and/or white list, the website address to be checked to the security server, and provide the security prompt for the network information to be obtained or having been obtained according to a checked result returned by the security server;

and

the security server comprises a second module, adapted to check the website address to be check according to the network security policy, and transmit the checked result to the network security plug-in.

10. The system of claim 7, wherein the terminal comprises a downloading module;

the downloading module is adapted to download a file;

the network security plug-in is adapted to obtain characteristic code information of the file downloaded by the downloading module, transmit the characteristic code information to the security server and receive the security indication returned by the security server; and

the security server comprises a third module, adapted to receive the characteristic code information reported by the terminal, and return the security indication to the terminal according to the characteristic code information.

11. The system of claim 10, wherein the network security plug-in is adapted to collect the characteristic code information of the downloaded file for more than two times according to an indication of the security server using different methods;

and

the third module is further adapted to receive the characteristic code information reported by the terminal, compare the characteristic code information with a characteristic code of a safe file and/or a characteristic code of an unsafe file, transmit the indication to the terminal indicating the terminal to collect the characteristic code again and perform the comparison again according to the newly-collected characteristic code if the checked results conflict.

12. The system of claim 6, wherein the security server is adapted to obtain website visiting information and/or file downloading information, and/or store security list information of a website and a file characteristic code, and generate the network security policy according to the website visiting information and/or the file downloading information, and/or the stored security list information of the website and the file characteristic code and the network security information reported by each terminal.

13. A terminal, comprising:

a reporting module and a security prompting module;

wherein

the reporting module is adapted to report network security information to a security server; and

the security prompting module is adapted to receive a security indication returned by the security server, and provide a security prompt for network information to be obtained or having been obtained according to the security indication.

14. The terminal of claim 13, wherein the terminal comprises a plug-in platform, the plug-in platform comprises an interface for installing a network security plug-in, the network security plug-in comprises the reporting module and the security prompting module.

15. The terminal of claim 14, wherein the security prompting module is adapted to obtain a black list and/or white list of the network security information from the security server and store the black list and/or white list, compare a website address received by the terminal and/or a website address of a link in a currently browsed webpage with security information in the black list and/or white list, and display the security prompt according to a compared result.

16. The terminal of claim 15, wherein the security prompting module further comprises a module, adapted to transmit, if the website address to be checked does not match the security information of the black list and/or white list, the website address to be checked to the security server, and provide the security prompt for the network information to be obtained or having been obtained according to a check result returned by the security server.

17. The terminal of claim 14, wherein the terminal comprises a downloading module;

the downloading module is adapted to download a file;

the reporting module is adapted to obtain characteristic code information of the file downloaded by the downloading module, and transmit the characteristic code information to the security server; and

the security prompting module is adapted to receive the security indication returned by the security server with regard to the characteristic code information, and provide the security prompt for the file downloaded according to the security indication.

18. A security server, comprising:

an obtaining module, an analyzing module, a storage module and a transmitting module;

wherein

the obtaining module is adapted to obtain network security information reported by each terminal;

the analyzing module is adapted to analyze the information obtained by the obtaining module, and generate a network security policy according to an analyzed result;

the storage module is adapted to store the network security policy; and

the transmitting module is adapted to transmit a security indication to the terminal according to the network security policy.

19. The security server of claim 18, wherein the obtaining module is further adapted to obtain website visiting information and/or file downloading information, and/or store security list information of websites and file characteristic codes.