TWI415418B - A system that controls computers to access the Internet - Google Patents

Abstract

A system for controlling computers to internet access by mobile devices is to utilize a mobile device control policy server to allocate an authority to a mobile device internet access control agent module of each user computer for carrying out the control of the mobile device internet access behavior by using the computers. The control method is that the mobile device internet access control agent module examines that the computers are allowed to connect to the mobile device according to the authority setting when the user computers accesses internet through the mobile device. If not, a driving program control module in the mobile device internet access control agent will turn off the mobile device connection program or the mobile device driving program.

Description

a system that controls a computer to access a mobile device

The invention relates to a system for controlling a computer to use a mobile device to access the Internet, in particular to a mobile device driver system and a threaded type in a control computer operating system, and using a control policy to dispatch a server, setting authority to be controlled In the computer agent program, the user can control whether the computer can be connected to the Internet via a mobile device according to different permissions of the user.

The era of mobile Internet access is coming, the types of mobile Internet devices are becoming more and more numerous, and the Internet speed is getting faster and faster. The relative data communication function in 3G mobile devices can meet the needs of ordinary users to access information online anytime and anywhere.

With the decline of various 3G mobile device products and broadband prices, corporate information risks have increased. In the current enterprise, news of the leakage or theft of a large amount of confidential information in the past has been known, including personal data, customer data or bank transaction records. Therefore, enterprises began to pay attention to information risk management, and began to use environmental management, user habits, and password control.

However, more and more users use the data communication function in the 3G mobile device in the work environment, so that the computer can simultaneously connect to the internal network of the enterprise and connect to the external network. Enterprises are therefore engaged in the transmission of confidential documents in an unsafe environment, resulting in the theft or loss of confidential documents. Therefore, the information department of the enterprise should also start to control the Internet access function of the 3G mobile device.

In practice, the current 3G mobile devices are powerful and diverse. Therefore, it is necessary to thoroughly study the functions and connection modes of each 3G mobile device to effectively control the security risks generated by users connecting to the external network of the enterprise.

The open operating system in the current 3G mobile device on the market includes: Symbian, Windows Mobile, MAC OSX, BlackBerry, Andorid and Linux. The operating systems of these mobile devices are connected to the computer via four hardware interfaces: Universal Serial Bus (USB), Bluetooth, infrared and WiFi wireless networks; these four hardwares are divided into two parts after being installed on the computer. Two types of devices, one for the network card and two for the data machine. The network card can be divided into three types: a wired network card, a wireless network card and a virtual network card. The 3G mobile device is usually driven by the latter two. Because these two types of devices are inherently connected to the physical layer of the network, the control driver is the control network connection.

The user must install the threaded system required for the operating system of the mobile device on the computer, for example: Windows Mobile needs to install ActiveSync, Symbian needs to install PC Suite, and MAC OSX needs to install iTunes; these threads will pass through the network card. Or the driver of the data machine is connected to the 3G mobile device. After the connection is successful, the user can connect the computer to the external network with a 3G mobile device. Therefore, the present invention only needs to control the user's network card or data machine driver to achieve the purpose of control.

In view of the above-mentioned problems arising from the above-mentioned problems, the inventors of this case have researched and developed the inventions after painstaking research, which will solve the major capital security problems that enterprises will face.

The object of the present invention is to provide a system for controlling a computer to use a mobile device to access the Internet, so as to provide a user inside the enterprise to control the online behavior of the mobile device.

The system for controlling the computer to achieve the above-mentioned invention is a mobile device that is connected to the computer of the agent module of the mobile device, and can be connected to the server of the enterprise control policy of the back end through the internal network of the enterprise to obtain the mobile device. The setting of the online control policy. The setting method is to distribute the authority to the mobile device control agent module of the mobile device in each user computer through the mobile device control policy server in the enterprise, and control the online behavior of the mobile device. The mobile device control policy server in the enterprise assigns the authority to the mobile device control agent module of the mobile device in each user's computer, and controls the online behavior of the mobile device.

If the user's computer uses the mobile device to access the Internet, the mobile device control agent module of the mobile device will check whether the computer is allowed to connect to the mobile device according to the authority; if not, the mobile device controls the proxy module in the Internet. The driver control module will close the mobile device with the thread or the mobile device driver.

Please refer to FIG. 1 , which is a schematic diagram of an implementation structure of a system for controlling a computer to access a mobile device according to the present invention. It can be seen from the figure that the upper and lower parts are divided into two parts: the upper part is a functional block diagram of the present invention, and may include a mobile device. The control policy server 1 and the mobile device control the proxy module 2; the lower part is a schematic diagram of the general user using the mobile device to connect the computer to the external network.

The aforementioned mobile device control policy server 1 can provide a setting for the user to use the mobile device to access the Internet through the mobile device control agent module 2, and can instantly update and record the mobile device usage status of the user's computer. In addition, the core of the present invention is a mobile device control module 2 for mobile devices, which includes a mobile device control policy module 21, a mobile device connection recording module 22, a network card connection detection module 23, and a data machine dialing. 6 modules, such as the connection detection module 24, the network card driver control module 25 and the data machine driver control module 26, the detailed functions, operation processes and relationships of the modules are as follows: The control policy module 21 mainly receives the command transmitted by the control policy delivery interface 11 of the mobile device control policy server 1, obtains the connection setting parameter of the user's control authority, and then sets the detection parameter through the detection parameter. The interface 211 transmits the mobile device connection setting parameter to the network card connection detection module 23 or the data machine dial connection detection module 24. If the user makes a computer When the connection device is the network card driver, the network card connection detection module 23 detects the connection status of the network card, and then transmits the connection status of the network card back to the action through the connection status detection back interface 221. The device Internet connection recording module 22 records. In addition, the connection setting parameter can be transmitted to the network card driver control module 25 via the network card connection setting interface 231, wherein the parameter definition is set to enable or disable the network card driver. After the network card driver control module 25 receives the connection setting parameter in the network card connection setting interface 231 of the network card connection detection module 23, if the parameter is defined as the network card driver is to be turned off, the network card driver is used. The setting interface 251 directly controls the device driver corresponding to the operating system of the disabled user computer, so as to achieve the purpose of controlling the connection of the network card.

If the connection device used by the user's computer is a data machine driver, the data dialing connection detection module 24 detects the connection status of the data machine, and then detects the data through the connection status detection interface 221 The connection status of the machine is transmitted back to the mobile device connection record recording module 22, and the connection setting parameter is transmitted to the data machine driver control module 26 via the data connection setting interface 241, wherein the parameter definition is Set to enable the modem driver to be enabled or disabled. After the data driver driver control module 26 receives the connection setting parameter in the data connection setting interface 241 of the data connection detection module 24, if the parameter is defined to be to turn off the data driver, The data driver driver setting interface 261 directly controls the device driver corresponding to the operating system of the deactivated user computer, so as to control the connection of the data machine.

The mobile device connection recording module 22 is mainly configured by the detection parameter setting interface 211 and the connection state detection back interface 221, and receives the connection state of the user's network card or the data machine, and then returns the connection record. The interface 12 is transmitted back to the mobile device control policy server 1 to report whether the mobile device connection of the user's computer is in compliance with the policy.

The system for controlling the computer connected to the mobile device provided by the invention has the following advantages when compared with other conventional technologies:

1. The system provided by the present invention can control and detect the online connection behavior regardless of the operating system of the user's mobile device, and can solve the major security problems that the gold industry will face.

2. Regardless of the operating system of the mobile device, the provided network card and the data machine driver control module directly control the driver of the device, and the network of the mobile device is not threaded, and the compatibility is high.

3. Provide a control policy server, which can be sent by the dispatch interface to set the user's control authority. It can be detected by the Internet connection to report whether the connection status of the user is in compliance with the policy.

4. The present invention can be used in any module or system for controlling a computer to be accessed by a mobile device.

The detailed description of the preferred embodiments of the present invention is intended to be limited to the scope of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

To sum up, this case is not only innovative in terms of technical thinking, but also able to enhance the above-mentioned multiple functions compared with conventional articles. It should be submitted in accordance with the law in accordance with the statutory invention patents that fully meet the novelty and progressiveness, and you are requested to approve this article. Invention patent application, in order to invent invention, to the sense of virtue.

1‧‧‧Mobile device control policy server

11‧‧‧Control Policy Delivery Interface

12‧‧‧Connection record back interface

2‧‧‧Mobile device Internet control agent

21‧‧‧Mobile device Internet control policy setting module

211‧‧‧Detection parameter setting interface

22‧‧‧Mobile device Internet connection recording module

221‧‧‧Connection status detection backhaul interface

23‧‧‧Network card connection detection module

231‧‧‧Network card connection setting interface

24‧‧‧Data machine dial-up connection detection module

241‧‧‧Data machine connection setting interface

25‧‧‧Network Card Driver Control Module

251‧‧‧Network card driver setting interface

26‧‧‧Data machine driver control module

261‧‧‧Data machine driver setting interface

FIG. 1 is a schematic diagram of an implementation architecture of a system for controlling a computer to access a mobile device by using a mobile device.

1. . . Mobile device control policy server

11. . . Control policy delivery interface

12. . . Connection record backhaul interface

2. . . Mobile device web control agent

twenty one. . . Mobile device Internet control policy setting module

211. . . Detection parameter setting interface

twenty two. . . Mobile device Internet connection recording module

221. . . Connection status detection backhaul interface

twenty three. . . NIC connection detection module

231. . . NIC connection setting interface

twenty four. . . Data dialing connection detection module

241. . . Data connection setting interface

25. . . NIC driver control module

251. . . NIC driver setting interface

26. . . Data machine driver control module

261. . . Data machine driver setting interface

Claims (9)

A system for controlling a computer to access a mobile device by using a mobile device includes: a mobile device control policy server, which can assign a mobile device to the mobile device control agent module of the mobile device in the user's computer, and record the The mobile device connection control module of the mobile device can receive the user connection setting parameters of the mobile device control policy server to control the connection state of the user computer, and The connection status of the user is returned to the mobile device control policy server for recording; a mobile device is a device having wireless Internet access and having a connection with the computer to achieve network sharing. The system for controlling a computer connected to the mobile device according to the first aspect of the patent application, wherein the 3G mobile device control policy server comprises: (A) a controllable policy delivery interface, according to the identity of the user The user's mobile device connection setting parameters are sent to the user; (B) the connection interface can be recorded via the connection, and the mobile device connection of the user's computer returned by the mobile device control agent module of the mobile device is instantly updated and recorded. policy. The system for controlling a computer connected to the mobile device according to the first aspect of the patent application, wherein the mobile device control agent module of the mobile device comprises: (A) a command for accepting a mobile device control policy server, setting The user's computer is connected to the Internet via a mobile device; (B) can be connected to the backhaul interface to instantly update and record whether the mobile device connection of the user's computer returned by the mobile device control module of the mobile device is compatible. policy; (C) According to the user's computer connection with the mobile device, check whether the connection status between the network card and the data machine is in compliance with the control policy; (D) the network card of the user's computer and the data connection status do not match. When the policy is controlled, the driver of the network card and the data machine can be set to stop the Internet. For example, the system for controlling the computer to be connected to the mobile device according to the first aspect of the patent application, wherein the mobile device control module of the mobile device includes: a mobile device control policy setting module of the mobile device, which can be controlled by the mobile device The policy server obtains the connection setting parameters of the computer user, and transmits the connection setting parameter to the network card connection detection module or the data machine dial connection detection module; a network card connection detection The module detects the connection status of the computer through the mobile device connection, transmits it back to the mobile device connection connection recording module, and transmits the connection setting parameters to the network card driver control module; a data machine dial-up connection The line detection module detects the connection status of the computer through the mobile device connection, transmits it back to the mobile device connection connection recording module, and transmits the connection setting parameters to the data machine driver control module; The mobile device connection recording module can receive and record the connection status of the mobile device detected by the connection detection module; a network card driver control module, according to the obtained user computer The connection setting parameter sets the usage status of the corresponding network card driver of the computer; a data machine driver control module sets the usage status of the corresponding computer driver according to the obtained connection setting parameters of the user computer. . A system for controlling a computer connected to a mobile device as described in claim 4, wherein The mobile device connection recording module can also return the obtained computer connection status to the mobile device control policy server to record the user's computer connection status. For example, the system for controlling the computer to access the Internet as described in claim 4, wherein the connection setting parameter obtained by the network card driver control module is to prohibit the computer from using the mobile device connection, the network card driver control module The group will set the NIC driver corresponding to the computer to the disabled state. For example, the system for controlling the computer to access the Internet according to the fourth aspect of the patent application, wherein the connection setting parameter obtained by the network card driver control module is to allow the computer to use the mobile device connection, the network card driver control module The group will set the NIC driver corresponding to the computer to the enabled state. For example, the system for controlling a computer connected to the Internet as described in claim 4, wherein the connection setting parameter obtained by the data driver driver control module is to prohibit the computer from using the mobile device connection, the data driver The control module will set the computer driver corresponding to the computer to the disabled state. The system for controlling a computer connected to the mobile device according to the fourth aspect of the patent application, wherein the connection setting parameter obtained by the data driver driver control module is to allow the computer to use the mobile device connection, the data driver The control module will set the computer driver corresponding to the computer to the enabled state.