Patent ID: 8434141
Filing Date: 2013-04-30
Classification: H04L

Abstract:
1. A system for preventing a normal user from being blocked in Network Address Translation (NAT) - based web service, the system comprising: a packet receiver for receiving data from a client or a server; a packet transmitter for transmitting the received data to the client or the server; and a NAT data unit for receiving packet information from the packet receiver and transmitting data to the packet transmitter, wherein the NAT data unit includes a blacklist rule table matching unit for determining whether received data matches data of packet information stored in a blacklist rule table, and blocking packets other than packets of Transmission Control Protocol (TCP) session connection related to a matched client; a Uniform Resource Locator (URL) Redirect unit for transmitting, when request data of the matched client is a packet requesting a Web page of a corresponding Web server, a first data translated into a virtual Internet Protocol (IP) address of the corresponding Web server, a second data for severing current TCP session connection to the corresponding client and a third data for re-requesting the web page to the matched client and for determining, when re-requesting data from the matched client includes the virtual IP address of the corresponding Web server, the matched client as a normal client; a virtual IP restoring unit for restoring the virtual IP address into an actual IP address if a packet is received from the normal client, and transmitting the resultant packet to the Web server; a virtual IP translator for receiving the packet from the Web server in response to the request of the normal client, translating the received packet into the virtual IP address, and transmitting the packet to the normal client; and a TCP synchronous (SYN) proxy processor for generating, when the request data of the client is a TCP session connection packet, a TCP synchronous-acknowledge (SYN-ACK) response, and transmitting the generated TCP SYN-ACK response to the matched client.