CLOUD BASED METHOD AND APPARATUS FOR MONITORING INTERNET USAGE

• US 20150326596A1
• Filed: 07/10/2015
• Published: 11/12/2015
• Est. Priority Date: 02/05/2013
• Status: Abandoned Application

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: Zhang, Hui, Liu, Jian
• Application Number:
  US14/796,880
• Publication Number:
  US 20150326596A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/954 Navigation, e.g. using categorised browsing
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A cloud based method and apparatus for monitoring internet usage are provided. The method comprises: receiving a website inquiry instruction sent by a client, wherein the instruction comprises a website identifier; determining whether the website is a website to be monitored; and if the website is a website to be monitored, processing the website inquiry instruction in accordance with a security policy pre-stored in a server, wherein the security policy is set by the client. Since the security policy is stored on a server, it cannot be easily circumvented by the user, and its effectiveness is enhanced.

Claims

1. A cloud based method for monitoring internet usage, comprising:

receiving a website inquiry instruction sent by a client, wherein the instruction comprises a website identifier;

determining whether the website is a website to be monitored; and

if the website is a website to be monitored, processing the website in accordance with a security policy pre-stored in a server.

2. The method of claim 1, further comprising, prior to the step of receiving a website inquiry instruction sent by a client,

obtaining the security policy set by the client, wherein the security policy comprises a plurality of website categories and corresponding processing actions;

and

saving the obtained security policy.

3. The method of claim 2, further comprising, prior to step of storing the security policy:

allocating a GUID to the client; and

associating the GUID and the obtained security policy;

wherein processing the website inquiry instruction in accordance with a security policy pre-stored in a server further comprises;

obtaining the GUID allocated to the client;

obtaining a corresponding website category for the website;

obtaining a corresponding processing action for the website category; and

processing the instruction in accordance with the processing action.

4. The method of claim 3, further comprising,

after allocating a GUID to the client:

obtaining a linked account set by the client; and

associating the GUID with the client account;

after processing the website inquiry instruction in accordance with a security policy pre-stored in a server;

obtaining the website inquiry instruction sent by the client;

determining whether the instruction is consistent with the processing action, and if not, sending a prompt message to the client.

5. The method of claim 4, wherein the processing action is selected from a group consisting of:

denying access to the website, recording accesses to the website in a log, and sending a prompt message to the client.

6. A cloud based apparatus for monitoring internet usage, comprising:

an instruction receiving module configured to receive a website inquiry instruction sent by a client, wherein the instruction comprises a website identifier;

a determination module configured to determine whether the website is a website to be monitored; and

a website processing module configured to, if the website is a website to be monitored, process the website in accordance with a security policy pre-stored in a server.

7. The apparatus of claim 6, further comprising:

a security policy acquisition module configured to obtain the security policy set by the client, wherein the security policy comprises a plurality of website categories and corresponding processing actions; and

a storage module configured to save the obtained security policy.

8. The apparatus of claim 7, further comprising:

a GUID allocation module configured to allocate a GUID to the client; and

an association module configured to associate the GUID and the obtained security policy;

wherein the website processing module further comprises;

a GUID acquisition module configured to obtain the GUID allocated to the client;

a website category acquisition module configured to obtain a corresponding website category for the website;

a processing action acquisition module configured to obtain a corresponding processing action for the website category; and

an execution module configured to process the website in accordance with the processing action.

9. The apparatus of claim 8, further comprising:

an account acquisition module configured to obtain a linked account set by the client;

wherein the association module is further configured for associating the GUID with the client account;

an instruction acquisition module configured to obtain the website inquiry instruction sent by the client;

wherein the determination module is further configured for determining whether the instruction is consistent with the processing action; and

a prompt module configured to, if the instruction is not consistent with the processing action, send a prompt message to the client.

10. The apparatus of claim 9, wherein the processing action is selected from a group consisting of:

denying access to the website, recording accesses to the website in a log, and sending a prompt message to the client.

11. A cloud based method for monitoring internet usage, comprising:

allocating a GUID to an application on the client;

obtaining a security policy associated with the GUID from a server; and

processing an instruction for accessing a website in accordance with the security policy.

12. The method of claim 11, wherein the application is a security software.

13. The method of claim 11, wherein the application is a plug-in for a browser.

14. The method of claim 11, wherein the GUID is associated with a user account.

15. The method of claim 11, wherein the security policy comprises a plurality of website categories and corresponding processing actions, and the method further comprises:

processing the instruction for access the website in accordance with the processing action corresponding to the website category of the website.

16. An apparatus for monitoring internet usage, comprising:

a storage module configured to store a plurality of security policies;

a GUID allocation module configured to associate a GUID to an application on a client; and

a security policy setting module configured to set a security policy to the application associated with the GUID, where the application associated with the GUID is configured for processing an instruction for accessing a website in accordance with the security policy.

17. The apparatus of claim 16, wherein the application is a security software.

18. The apparatus of claim 16, wherein the application is a plug-in for a browser.

19. The apparatus of claim 16, wherein the GUID is associated with a user account.

20. The apparatus of claim 16, wherein the security policy comprises a plurality of website categories and corresponding processing actions, and the application associated with the GUID is configured to process the instruction for access the website in accordance with the processing action corresponding to the website category of the website.