Patent ID: 8051147

Claim:
An internet access server system having hardware and software components comprising: a local area network; a plurality of user computers, are installed on the local area network; an Internet access server also installed on the local area network which is an internal network, wherein the Internet access server is a computer that comprises a CPU and memory; wherein the Internet access server isolates the internal network from an external network, wherein the Internet access server is connected to the internal network comprising a network of user computers and wherein the Internet access server is connected to an internet, wherein the Internet access server isolates the user computers from the internet, wherein the Internet access server is built upon an ontology server, wherein the internet access server further comprises: a graphics terminal service module, a graphics terminal network transmission module, an internal network transmission control module, a document transmission control module, a system configuration and user management module, and an internet access transmission module; wherein the graphics terminal service module is connected to the graphics terminal network transmission module, providing graphics terminal service to its clients; wherein the internal network transmission control module which is connected to the above mentioned ontology server strictly controls network session, ensuring the validity of session between the clients within the network and the internet access server; wherein the document transmission control module which is connected to the ontology server is intended to manage the files and data transmission between any user computer's local disc and the user's private storage space on the internet access server; wherein the system configuration and user management module which is connected to the ontology server is used to add, delete or modify user setting, upload process design and set system parameters; the internet access transmission module which is connected to the ontology server is intended to provide transmission control management for the above mentioned graphics terminal service module to access internet; the internet access server further comprises two network interfaces including an internal network card connected to the local area network and an external network card connected to the Internet, wherein the internal network card allows user computers to access internet graphics terminals, and wherein the external network card allows user computers to access internet via the Internet access server which authorizes user computers to access Internet and provides user computers with Internet applications, wherein the user computers are configured so they do not have direct access to the Internet.