CN112152973A

CN112152973A - Method, device and system for monitoring webpage content to be accessed and router

Info

Publication number: CN112152973A
Application number: CN201910570881.3A
Authority: CN
Inventors: 柴坤哲; 秦明闯; 曹鸿健
Original assignee: Beijing Qihoo Technology Co Ltd
Current assignee: Beijing Qihoo Technology Co Ltd
Priority date: 2019-06-28
Filing date: 2019-06-28
Publication date: 2020-12-29

Abstract

The application provides a method, a device and a system for monitoring webpage content to be accessed and a router, wherein the method comprises the following steps: receiving a first message sent by a user terminal; judging whether the first message is a message for initiating a webpage access request or not; if so, generating a second message and sending the second message to the analysis server; wherein: the second message comprises the webpage address of the first message; the analysis server is used for analyzing the webpage content obtained according to the webpage address and extracting keywords of the webpage content. The type of the webpage content can be determined through the keywords, and then the type of the webpage accessed by the user terminal is judged; by processing a large number of first messages, the preference of the webpage access type of the user using the user terminal can be obtained, and then basis is provided for monitoring the webpage access behavior of the user terminal.

Description

Method, device and system for monitoring webpage content to be accessed and router

Technical Field

The application relates to the technical field of network traffic monitoring and identification, in particular to a method, a device and a system for monitoring webpage content to be accessed; in addition, the application also provides a router for realizing the method.

Background

The widespread use of electronic devices, such as smart phones and computers, allows teenagers to easily obtain web content; however, a large amount of content information which causes harm to physical and mental health of teenagers exists in the webpage content; how to monitor and identify webpage access behaviors of teenagers and further avoid physical and psychological injuries caused by long-term acquisition of unhealthy information is a problem to be solved.

Disclosure of Invention

The application provides a method and a device for monitoring webpage content to be accessed, the webpage content is identified by extracting keywords in the webpage content after the webpage content to be accessed is obtained, and then the access behavior and the access theme of a user terminal can be monitored.

In one aspect, the present application provides a method for monitoring contents of a web page to be accessed, which is applied to a router, and includes:

receiving a first message sent by a user terminal;

judging whether the first message is a message for initiating a webpage access request or not;

if so, generating a second message and sending the second message to an analysis server;

wherein: the second message comprises a webpage address of the first message; the analysis server is used for analyzing the second message to obtain the webpage address, obtaining webpage content according to the webpage address, and extracting keywords of the webpage content.

Optionally, the determining whether the first packet is a packet for initiating a web access request includes:

and extracting the characteristic identifier of the first message, and judging whether the first message is a message for initiating a webpage access request according to the characteristic identifier.

Optionally, the extracting the feature identifier of the first packet includes: extracting a port number corresponding to a destination address in the first message;

the judging whether the first message is a message for initiating a webpage access request according to the characteristic identifier comprises judging whether the first message is a message for initiating the webpage access request according to the port number.

Optionally, the analysis server is further configured to send the keyword to the router; the method further comprises the following steps:

receiving the keywords sent by the analysis server;

judging whether the keywords are preset keywords or not;

if yes, blocking the forwarding of the first message, or blocking the forwarding of a response message to the user terminal;

wherein: the response message is a message responding to the first message; the response message includes the web page content.

Optionally, the analysis server is further configured to generate a blocking instruction and send the blocking instruction to the router when the keyword is a preset keyword;

the method further comprises the following steps: after receiving the blocking instruction, blocking the forwarding of the first message, or blocking the forwarding of a response message to the user terminal;

Optionally, the analysis server is further configured to send the keyword to a control terminal;

wherein: the control terminal is a terminal for managing the router and/or the user terminal.

In another aspect, the present application provides another method for monitoring web content to be accessed, which is applied to a router and includes:

receiving a response message sent by a network side;

judging whether the response message is a message including webpage content;

if so, extracting the webpage content in the response message, and extracting the keywords of the webpage content;

wherein: the response message is a message responding to the first message; the first message is connected with the router and used for initiating a webpage access request.

Optionally, the method further includes:

judging whether the keywords are preset keywords or not;

and if so, blocking the forwarding of the response message to the user terminal.

Optionally, the method further includes:

under the condition that the keyword is judged to be a preset keyword, generating a prompt message and sending the prompt message to a control terminal;

wherein: the prompt message comprises the keyword; the control terminal is a terminal for managing the router and/or the user terminal.

In another aspect, the present application provides a method for monitoring contents of a web page to be accessed, which is used for analyzing a server, and includes:

receiving a second message sent by the router; the second message comprises a webpage address in the first message;

extracting the webpage address in the second message, and acquiring webpage content according to the webpage address;

extracting keywords of the webpage content;

wherein: the first message is generated by a user terminal connected with the router and is used for initiating a message for accessing a webpage request.

Optionally, the method further includes:

judging whether the keywords are preset keywords or not;

if yes, a blocking instruction is generated and sent to a router, so that the router blocks the forwarding of the first message, or blocks the forwarding of a response message to the user terminal;

Optionally, the method further includes: under the condition that the keyword is judged to be a preset keyword, generating a prompt message and sending the prompt message to a control terminal;

In another aspect, the present application provides a method for monitoring contents of a web page to be accessed, including:

the router receives a first message sent by a user terminal;

the router judges whether the first message is a message for initiating a webpage access request;

under the condition that the first message is judged to be a message for initiating a webpage access request, the router generates a second message and sends the second message to an analysis server; wherein: the second message comprises a webpage address in the first message;

after the analysis server acquires the second message, the analysis server analyzes the second message to acquire the webpage address, acquires webpage content according to the webpage address, and extracts keywords of the webpage content.

In another aspect, the present application provides an apparatus for monitoring contents of a web page to be accessed, including:

the first receiving unit is used for receiving a first message sent by a user;

the first judging unit is used for judging whether the first message is a message for initiating a webpage access request;

a first sending unit, configured to generate a second message and send the second message to an analysis server when the determining unit determines that the first message is a message for initiating a web access request;

Optionally, the determining, by the first determining unit, whether the first packet is a packet for initiating a web access request includes:

Optionally, the first receiving unit is further configured to receive the keyword sent by the analysis server;

the first judging unit is also used for judging whether the keyword is a preset keyword or not;

the blocking unit is used for blocking the forwarding of the first message or blocking the forwarding of a response message to the user terminal;

Optionally, the analysis server is further configured to generate and send a blocking instruction when the keyword is the preset keyword;

the device also comprises a blocking unit which is used for blocking the light,

after receiving the blocking instruction, blocking the forwarding of the first message, or blocking the forwarding of a response message to the user terminal;

In another aspect, the present application provides another apparatus for monitoring contents of a web page to be accessed, including:

the first receiving unit is used for receiving a response message sent by the webpage server;

a second judging unit, configured to judge whether the response packet is a packet including web page content;

an extracting unit, configured to extract the web page content in the response packet and extract a keyword of the web page content when the second determining unit determines that the response packet includes a packet of the web page content;

Optionally, the second judging unit is further configured to judge whether the keyword is a preset keyword; the device further comprises:

and a blocking unit, configured to block forwarding of the response packet to the user terminal when the second determining unit determines that the keyword is the preset keyword.

Optionally, the apparatus further comprises:

the prompting unit is used for generating a prompting message and sending the prompting message to the control terminal under the condition that the keyword is judged to be the preset keyword;

In another aspect, the present application further provides an apparatus for monitoring contents of a web page to be accessed, including:

the second receiving unit is used for receiving a second message sent by the router; the second message comprises a webpage address in the first message;

an extracting unit, configured to extract the web page address in the second message, obtain web page content according to the web page address,

extracting keywords of the webpage content;

Optionally, the apparatus further comprises:

the second judging unit is used for judging whether the keyword is a preset keyword or not;

a blocking instruction generating unit, configured to generate a blocking instruction when the determining unit determines that the keyword is a preset keyword, and send the blocking instruction to a router, so that the router blocks forwarding of the first packet, or blocks forwarding of a response packet to the user terminal;

Optionally, the apparatus further comprises:

the prompt sending unit is used for sending the keywords to the control terminal;

The application also provides a router, which comprises a memory and a processor;

the memory is to store a plurality of instructions;

the processor is configured to implement the instructions;

the instructions are adapted to be loaded by the processor and to perform a portion of the method of monitoring web content to be accessed as previously described.

The application also provides a system for monitoring the webpage content to be accessed, which comprises a router and an analysis server;

the router is configured to: receiving a first message sent by a user terminal;

generating a second message under the condition that the first message is a message for initiating a webpage access request, and sending the second message to an analysis server; wherein: the second message comprises a webpage address of the first message;

the analysis server is used for analyzing the second message to obtain the webpage address after obtaining the second message, obtaining webpage content according to the webpage address and extracting keywords of the webpage content.

According to the method for monitoring the webpage content to be accessed, the router is used for obtaining the webpage address of the webpage to be accessed, after the webpage content is obtained through the webpage address, the webpage content is analyzed to obtain the keywords, and the type of the webpage content is determined through the brave keywords. By processing a large number of first messages, the preference of the webpage access type of the user using the user terminal can be obtained, and then basis is provided for monitoring the webpage access behavior of the user terminal.

Drawings

FIG. 1 is a flowchart illustrating a method for monitoring content of a web page to be accessed according to an embodiment;

FIG. 2 is a flowchart of a method for monitoring web content to be accessed according to the second embodiment;

FIG. 3 is a flowchart of a method for monitoring web content to be accessed according to a third embodiment;

FIG. 4 is a flowchart of a method for monitoring web content to be accessed according to a fourth embodiment;

FIG. 5 is a flowchart of a method for monitoring web content to be accessed according to a fifth embodiment;

FIG. 6 is a flowchart of a method for monitoring web content to be accessed according to a sixth embodiment;

fig. 7 is a schematic structural diagram of an apparatus for monitoring content of a web page to be accessed according to a seventh embodiment;

wherein: 11-first receiving unit, 12-first judging unit, 13-first sending unit.

Detailed Description

The present application will be described in further detail with reference to the following drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the relevant invention and not restrictive of the invention. It should be noted that, for convenience of description, only the portions related to the related invention are shown in the drawings.

The application provides a method for monitoring webpage content to be accessed, and the method can be used for extracting keywords in the webpage content to identify the webpage content after the webpage content to be accessed is obtained, so that the access behavior and the access theme of a user terminal can be monitored.

Example one

Fig. 1 is a flowchart of a content monitoring method for a to-be-accessed web page according to an embodiment, where the method is used in a router, and the router is used as an information source to monitor content of the web page accessed by a user terminal. As shown in fig. 1, the method for monitoring the contents of the web page to be accessed in the present embodiment includes steps S101-S103.

S101: receiving a first message sent by a user terminal.

When the router works, the first message sent by the user terminal is received through the interface end connected with the user terminal. The first message is a message for communication between the user terminal and the server on the network side.

S102: judging whether the first message is a message for initiating a network access request or not; if yes, go to step S103; if not, the execution is finished.

In practical application, the first message sent by the user terminal may be a message for different applications; for example, the first message may be a message for initiating a web page request, or may be a message for mail transmission. In order to obtain the web page content that the user terminal intends to obtain, it is necessary to identify the message that initiates the network access request among various possible messages, and then to reprocess the message that initiates the network request.

Judging whether the first message is a message for initiating a web access request, which may be identifying a specific identifier in the first message, and determining whether the first message is a message for initiating a web access request through the specific identifier.

At present, some application layer protocols such as http or ftp are mostly adopted for transmitting web page content, and such protocols all have default or preset port numbers, so that whether a first message is a message for initiating a web page access request can be determined by determining whether the port number is the default or preset port number.

In addition, in some applications, for example, a deep learning algorithm may also be used to obtain other feature identifiers of the first packet, and compare the corresponding feature identifiers with pre-stored identifiers to determine whether the first packet is a packet that initiates a web page access request.

S103: and generating a second message and sending the second message to the analysis server.

And when the first message is judged to be the message for initiating the webpage access request, the router analyzes the first message to obtain the webpage address in the first message. Specifically, the parsing the first packet includes acquiring a destination IP address and a port number in the first packet, and data of a transport layer data main part in the first packet, and forming the information into web address information.

And then, the router uses the webpage address information as a main data part, adds the address information of the analysis server to generate a second message, and sends the second message to the analysis server.

The analysis server is a server for analyzing the web content corresponding to the web access request. After the second message is obtained, the analysis server analyzes and obtains webpage address information, and inquires network side resources according to the webpage address information to obtain webpage content; after the webpage content is obtained, the analysis server analyzes the webpage content and determines keywords of the webpage content.

In specific application, the analysis server may determine the keywords in the web page content by using existing methods such as a candidate word matching method and an unsupervised method. It should be noted that the web page content processed by the analysis server is not limited to text content, and may include audio content and video content.

After the keywords of the webpage content are obtained, the content type of the webpage content can be determined through the keywords, and then the type of the webpage accessed by the user terminal is judged; by processing a large number of first messages, the preference of the webpage access type of the user using the user terminal can be obtained, and then basis is provided for monitoring the webpage access behavior of the user terminal.

Example two

Fig. 2 is a flowchart of a method for monitoring web page content to be accessed according to the second embodiment. As shown in fig. 2, in the second embodiment, the method for monitoring the contents of the web page to be accessed includes steps S201-S207. It should be noted that the method of the present embodiment is applied to a router.

S201: receiving a first message sent by a user terminal.

S202: judging whether the first message is a message for initiating a network access request or not; if yes, go to S203; if not, the execution is finished.

S203: and generating a second message and sending the second message to the analysis server.

In specific application, the analysis server may determine the keywords in the web page content by using existing methods such as a candidate word matching method and an unsupervised method.

S204: and receiving the keywords sent by the analysis server.

After the analysis server analyzes and obtains the keywords representing the webpage content, the analysis server generates a return message and sends the return message to the router.

And after receiving the return message, the router extracts the keywords in the return message.

S205: judging whether the keywords are preset keywords or not; if yes, go to S206; if not, S207.

S206: and blocking the forwarding of the first message.

S207: and forwarding the first message.

The router provided by the embodiment of the application is provided with a preset keyword lexicon; the preset keywords in the preset keyword lexicon may be keywords representing non-health information, such as keywords representing pornographic information or violence information. If the keywords in the returned text are preset keywords, the webpage content represents the content of pornographic information or violence information at a high probability.

In order to avoid that the user using the user terminal obtains the web content, the router blocks the forwarding of the first message, that is, blocks the forwarding of the first message to the network side. However, the first message cannot be transmitted to the corresponding server, and cannot trigger the server to generate the response message, so that the user terminal cannot obtain the web page content.

In other embodiments, the foregoing S206 may also be replaced by blocking the forwarding of the response message to the user terminal. After receiving the first message, the router may forward the first message to the network side; and when the keyword is determined to be the preset keyword, the router transmits the response message to the user terminal through the blocking message, so that the user terminal is prevented from obtaining the webpage content.

As can be seen from the above content, in the method for monitoring web page content to be accessed provided in the embodiment of the present application, after determining that the keyword identifying the web page content is the preset keyword, the forwarding of the first message is blocked or the forwarding of the response message responding to the first message to the user terminal is blocked, so that the user terminal is prevented from obtaining the corresponding web page content, and the control of the network access behavior of the user terminal is achieved.

EXAMPLE III

Fig. 3 is a flowchart of a method for monitoring web content to be accessed according to a third embodiment. As shown in fig. 3, in the second embodiment, the method includes steps S301 to S304. Please note that, the method provided by the present embodiment is also applied to a router.

301: receiving a first message sent by a user terminal.

S302: judging whether the first message is a message for initiating a network access request or not; if yes, go to S203; if not, the execution is finished.

S303: and generating a second message and sending the second message to the analysis server.

In addition, an analysis server used in cooperation with the embodiment of the application is provided with a keyword lexicon; preset keywords are stored in the keyword word bank; the preset keywords in the keyword lexicon can be keywords for a special field, such as keywords for an automobile field, keywords for a sports field, and keywords for a clothing field; the keywords in the keyword lexicon may also be keywords for some non-health information, such as keywords formulated for violent content or pornographic content.

After determining the keywords of the webpage content, the analysis server compares the determined keywords with preset keywords in a keyword library to determine whether the keywords are the preset keywords. And if the key words are preset key words, generating a blocking instruction and sending the blocking instruction to the router.

S304: and blocking the forwarding of the first message after receiving the blocking instruction.

In other embodiments, the foregoing S304 may also be replaced by blocking the forwarding of the response message to the user terminal. After receiving the first message, the router may forward the first message to the network side; and when the keyword is determined to be the preset keyword, the router transmits the response message to the user terminal through the blocking message, so that the user terminal is prevented from obtaining the webpage content.

In the method for monitoring web page content to be accessed provided by the third embodiment, after determining that the keyword for identifying the web page content is the preset keyword, the forwarding of the first message is blocked, or the forwarding of the response message responding to the first message to the user terminal is blocked, so that the user terminal is prevented from obtaining the corresponding web page content, and the control of the network access behavior of the user terminal is realized.

On the basis of the three embodiments, the analysis server can also send the searched keywords to the control terminal, so that the control terminal can know the webpage access behavior of the user terminal. The control terminal is a terminal for managing the router and the user terminal. In addition, since the control terminal is a terminal connected to the router in a rough probability, the keyword may be issued to the router, and the router may transmit the keyword to the control terminal.

Example four

Fig. 4 is a flowchart of a method for monitoring web content to be accessed according to a fourth embodiment. As shown in fig. 4, the method provided by the present embodiment includes steps S401 to S404. It should be noted that the method of the present embodiment is also applied to a router.

S401: and receiving a response message sent by the network side.

The response message is a message sent by the network side to the router; the network side is relative to the user terminal side, and the response message sent by the network side refers to the response message sent by the network side to the user terminal through the router. The response message is a message responding to a first message sent by the user terminal, and the first message is a message for initiating a network access request.

S402: judging whether the response message is a message including webpage content; if not, executing S403; if yes, go to step S404.

S403: and forwarding the response message to the user terminal.

S404: and extracting the webpage content in the response message and extracting the keywords of the webpage content.

If the response message is not determined to be the message containing the webpage content, the content information of the webpage accessed by the user cannot be obtained from the response message, and therefore the message is not processed, and the router forwards the message to the user terminal.

If the response message is a message containing the webpage content, the user terminal extracts the webpage content and extracts the keywords of the webpage content. In practical application, because the content in a single response message is not enough to determine the keyword, the data content of a plurality of response messages can be integrally analyzed to determine the keyword; the aforementioned keyword recognition method may be a candidate word matching method, an unsupervised method, or the like.

According to the method for monitoring the webpage content to be accessed, the response message sent to the router is directly analyzed, the webpage content in the webpage message is extracted under the condition that the message comprises the webpage content, and the keyword of the webpage content is extracted. By adopting the processing method, the control of the user terminal to access the webpage content by utilizing the router is realized, and the user terminal is prevented from inquiring the webpage containing the specific content.

Further, in some embodiments, the aforementioned method may further include step S405.

S405: and judging whether the keywords are preset keywords or not. If yes, go to step S406; if not, S403 is executed.

S406: and blocking the forwarding of the response message to the user terminal.

A keyword lexicon is set in a router used in some embodiment methods; preset keywords are stored in the keyword word bank; the preset keywords in the keyword lexicon can be keywords for a special field, such as keywords for an automobile field, keywords for a sports field, and keywords for a clothing field; the keywords in the keyword lexicon may also be keywords for some non-health information, such as keywords formulated for violent content or pornographic content.

By adopting the method determined by the steps, whether the webpage content corresponding to the webpage access request initiated by the user terminal is legal content can be determined through the inquired keyword, and then whether the message is forwarded to the user terminal is determined, so that the condition that the user terminal inquires the webpage containing the specific content is avoided.

In some embodiments, in the case that the keyword is determined to be a preset keyword, the method may further include step S407.

S407: and generating a prompt message and sending the prompt message to the control terminal.

The control terminal is a terminal for managing the router or the user terminal; the prompt message is sent to the control terminal, so that the user of the management terminal can know the webpage access content type of the user using the user terminal.

EXAMPLE five

Fig. 5 is a flowchart of a method for monitoring web content to be accessed according to the fifth embodiment. As shown in fig. 5, the method provided by the embodiment of the present application includes steps S501 to S50N. It should be noted that the embodiment of the present application is applied to an analysis server.

S501: and receiving a second message sent by the router.

The second message comprises a webpage address in the first message; and the first message is a message which is generated by a user terminal connected with the router and is used for initiating a webpage access request.

S502: and extracting the webpage address, and acquiring webpage content according to the webpage address.

After receiving the second message, the analysis server extracts the webpage address in the second message, generates a request message according to the webpage address, and sends a response message by a server corresponding to the request webpage address, so that the analysis server obtains webpage content.

S503: and extracting keywords in the webpage content.

After the webpage content is obtained, the analysis server processes the webpage content by adopting a proper analysis method, and extracts keywords in the webpage content.

In some embodiments, the method for monitoring the content of the web page to be accessed may further include steps S504-S505 based on the foregoing steps.

S504: judging whether the keywords are preset keywords or not; if yes, go to step S505.

S505: and generating a blocking instruction, and sending the blocking instruction to the router so that the router blocks the forwarding of the first message or blocks the forwarding of the response message to the user terminal.

As can be seen from the foregoing description, the steps S504 and S505 are adopted to prevent the user terminal from being able to obtain the web content, so that the user using the user terminal is prevented from obtaining the information corresponding to the web content.

In some other embodiments, on the basis of the foregoing steps S501-S503, the foregoing method may further include step S506.

S506: and generating a prompt message and sending the prompt message to the control terminal.

EXAMPLE six

Fig. 6 is a flowchart of a method for monitoring web content to be accessed according to a sixth embodiment. As shown in fig. 6, the foregoing method includes steps S601 to S60N. Wherein S601-S603 are executed by a router and S604S606 is executed by an analysis server.

S601: receiving a first message sent by a user terminal;

s602: judging whether the first message is a message for initiating a network access request or not; if yes, go to S603; if not, the execution is finished.

S603: and generating a second message and sending the second message to the analysis server. The second message comprises a webpage address in the first message.

S604: and receiving a second message sent by the router.

S605: and extracting the webpage address, and acquiring webpage content according to the webpage address.

S606: and extracting keywords in the webpage content.

Referring to the second to fifth embodiments, based on the method of the present application, technical contents in the second to fifth embodiments may also be added to implement blocking of the first packet or the response packet, which is not repeated herein.

Besides providing the foregoing method for monitoring the contents of the web page to be accessed, an embodiment of the present application also provides a device for monitoring the contents of the web page to be accessed.

EXAMPLE seven

Fig. 7 is a schematic structural diagram of an apparatus for monitoring content of a web page to be accessed according to a seventh embodiment. As shown in fig. 7, the foregoing apparatus includes a first receiving unit 11, a first judging unit 12, and a first transmitting unit 13. The first receiving unit 11 is configured to receive a first message sent by a user; the first judging unit 12 is configured to judge whether the first message is a message for initiating a web access request; the first sending unit 13 is configured to generate a second message and send the second message to the analysis server when the determining unit determines that the first message is a message for initiating a web access request; wherein: the second message comprises the webpage address of the first message; the analysis server is used for analyzing the second message to obtain a webpage address, obtaining webpage content according to the webpage address, and extracting keywords of the webpage content.

On the basis of the embodiment, in some other embodiments, the determining, by the first determining unit 12, whether the first message is a message for initiating a web page access request may include: and extracting the characteristic identifier of the first message, and judging whether the first message is a message for initiating a webpage access request according to the characteristic identifier.

Further, extracting the feature identifier of the first packet may include: extracting a port number corresponding to a destination address in the first message;

judging whether the first message is a message for initiating the webpage access request according to the characteristic identifier, wherein the judging of whether the first message is the message for initiating the webpage access request according to the port number is included.

In some embodiments, the first receiving unit 11 is further configured to receive the keyword sent by the analysis server; the first judging unit 12 is further configured to judge whether the keyword is a preset keyword. In addition, a blocking unit may be included; the blocking unit is used for blocking the forwarding of the first message or blocking the forwarding of the response message to the user terminal; wherein: the response message is a message responding to the first message; the response message includes web page content.

In some other embodiments, the analysis server may generate and send the blocking instruction in case the keyword is a preset keyword. Correspondingly, the device may include a blocking unit, where the blocking unit is configured to block forwarding of the first message after receiving the blocking instruction, or block forwarding of the response message to the user terminal; wherein: the response message is a message responding to the first message; the response message includes web page content.

The application also provides another device for monitoring the webpage content to be accessed, which comprises a first receiving unit, a second judging unit and an extracting unit. The first receiving unit is used for receiving a response message sent by the webpage server; a second judging unit, configured to judge whether the response packet is a packet including web page content; an extraction unit, configured to extract the web page content in the response message and extract a keyword of the web page content, when the second determination unit determines that the response message includes a message of the web page content; wherein: the response message is a message responding to the first message; the first message is a message connected with the router and used for initiating a webpage access request.

Further, in some embodiments, the second determining unit may be further configured to determine whether the keyword is a preset keyword; the apparatus may further include a blocking unit configured to block forwarding of the response packet to the user terminal when the second determination unit determines that the keyword is the preset keyword.

In some implementations, the apparatus for monitoring content of a web page to be accessed may include a prompt unit, where the prompt unit is configured to generate a prompt message and send the prompt message to the control terminal when the keyword is determined to be a preset keyword; wherein: the prompt message comprises a keyword; the control terminal is a terminal that manages the router and/or the user terminal.

The application also provides another device for monitoring the webpage content to be accessed, which comprises a second receiving unit and an extracting unit. The second receiving unit is used for receiving a second message sent by the router; the second message comprises a webpage address in the first message; the extraction unit is used for extracting the webpage address in the second message, acquiring the webpage content according to the webpage address and extracting the keywords of the webpage content; wherein: the first message is generated by a user terminal connected with the router and is used for initiating a message for accessing the webpage.

On the basis of the foregoing embodiment, the apparatus for monitoring web content to be accessed may further include a second determining unit and a blocking instruction generating unit; the second judging unit is used for judging whether the keyword is a preset keyword or not; the blocking instruction generating unit is used for generating a blocking instruction under the condition that the judging unit judges the keyword as the preset keyword, and sending the blocking instruction to the router so as to enable the router to block the forwarding of the first message or block the forwarding of the response message to the user terminal; wherein: the response message is a message responding to the first message; the response message includes web page content.

Further, the device may further include a prompt sending unit; the prompt sending unit is used for sending the keywords to the control terminal; wherein: the control terminal is a terminal that manages the router and/or the user terminal.

The embodiment of the present application further provides a router, which includes a storage medium and a processor; the processor is used for realizing each instruction, the memory is used for storing a plurality of instructions, and the instructions are suitable for being loaded by the processor and executing a method which can be applied to the router and is used for monitoring the webpage content to be accessed.

In addition, the embodiment of the application also provides a system for monitoring the webpage content to be accessed, and the system comprises a router and an analysis server.

The router is configured to: receiving a first message sent by a user terminal; judging whether the first message is a message for initiating a webpage access request or not; under the condition that the first message is a message for initiating a webpage access request, generating a second message, and sending the second message to an analysis server; wherein: the second message comprises the webpage address of the first message;

the analysis server is used for analyzing the second message to obtain a webpage address after the second message is obtained, obtaining webpage content according to the webpage address and extracting keywords of the webpage content.

A1. A method for monitoring web page content to be accessed is applied to a router and comprises the following steps:

receiving a first message sent by a user terminal;

A2. According to the method of monitoring web content to be accessed as described in a1,

the determining whether the first packet is a packet for initiating a web access request includes:

A3. The method for monitoring web content to be accessed according to A2, wherein,

the extracting the feature identifier of the first packet includes: extracting a port number corresponding to a destination address in the first message;

A4. Method of monitoring web content to be accessed according to any of the claims a1-A3, the analysis server further being adapted to send the keyword to the router; the method further comprises the following steps:

receiving the keywords sent by the analysis server;

judging whether the keywords are preset keywords or not;

A5. According to the method for monitoring the webpage content to be accessed, disclosed by any one of A1-A3, the analysis server is further used for generating a blocking instruction and sending the blocking instruction to the router under the condition that the keyword is a preset keyword;

A6. The method for monitoring web contents to be accessed according to any one of A1-A3, wherein the analysis server is further used for sending the keywords to a control terminal;

A7. A method of monitoring web content to be accessed for use in a router, comprising:

receiving a response message sent by a network side;

judging whether the response message is a message including webpage content;

A8. The method for monitoring web content to be accessed according to A7, further comprising:

judging whether the keywords are preset keywords or not;

A9. The method for monitoring web content to be accessed according to A7, further comprising:

A10. A method of monitoring content of a web page to be accessed for use in an analysis server, comprising:

extracting keywords of the webpage content;

A11. The method for monitoring web content to be accessed according to A10, further comprising:

judging whether the keywords are preset keywords or not;

A12. The method for monitoring web content to be accessed according to A10, further comprising: under the condition that the keyword is judged to be a preset keyword, generating a prompt message and sending the prompt message to a control terminal;

A13. A method of monitoring content of a web page to be accessed, comprising:

the router receives a first message sent by a user terminal;

A14. An apparatus for monitoring web content to be accessed, comprising:

the first receiving unit is used for receiving a first message sent by a user;

A15. According to the apparatus for monitoring contents of web pages to be accessed described in a14,

the first judging unit judges whether the first message is a message for initiating a web access request, including:

A16. According to the apparatus for monitoring contents of a web page to be accessed described in a15, the extracting a feature identifier of the first packet includes: extracting a port number corresponding to a destination address in the first message;

A17. The device for monitoring the web contents to be accessed according to any one of A14-A16, wherein the first receiving unit is further used for receiving the keywords sent by the analysis server;

A18. According to the apparatus for monitoring web content to be accessed of any one of a14-16, the analysis server is further configured to generate and send a blocking instruction in a case where the keyword is the preset keyword;

the device also comprises a blocking unit which is used for blocking the light,

A19. An apparatus for monitoring web content to be accessed, comprising:

A20. According to the apparatus for monitoring contents of web pages to be accessed described in a19,

the second judging unit is also used for judging whether the keyword is a preset keyword or not; the device further comprises:

A21. The apparatus for monitoring web content to be accessed according to a19, further comprising:

A22. An apparatus for monitoring web content to be accessed, comprising:

extracting keywords of the webpage content;

A23. The apparatus for monitoring web content to be accessed according to a22, further comprising:

A24. The apparatus for monitoring web content to be accessed according to a22, further comprising:

wherein: the control terminal is a terminal for managing the router and/or the user terminal. In the foregoing embodiments, the descriptions of the respective embodiments have respective emphasis, and for parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.

It can be clearly understood by those skilled in the art that, for convenience and brevity of description, the specific working process of the apparatus for controlling network usage behavior described above may refer to the corresponding process in the foregoing method embodiment, and is not described herein again.

It should be noted that the algorithms and displays provided in the embodiments are not inherently related to any particular computer, virtual machine, or other apparatus. Various general purpose systems may also be used with the teachings herein. The required structure for constructing such a system will be apparent from the description above. Moreover, the present invention is not directed to any particular programming language. It is appreciated that a variety of programming languages may be used to implement the teachings of the present invention as described herein, and any descriptions of specific languages are provided above to disclose the best mode of the invention.

In the description provided herein, numerous specific details are set forth. It is understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. However, the disclosed method should not be interpreted as reflecting an intention that: that the invention claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the detailed description are hereby expressly incorporated into this detailed description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art will appreciate that the modules in the device in an embodiment may be adaptively changed and disposed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and furthermore they may be divided into a plurality of sub-modules or sub-units or sub-components. All of the features disclosed in this specification (including any accompanying claims, abstract and drawings), and all of the processes or elements of any method or apparatus so disclosed, may be combined in any combination, except combinations where at least some of such features and/or processes or elements are mutually exclusive. Each feature disclosed in this specification (including any accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will appreciate that while some embodiments described herein include some features included in other embodiments, rather than other features, combinations of features of different embodiments are meant to be within the scope of the invention and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

Claims

1. A method for monitoring web page content to be accessed is applied to a router and is characterized by comprising the following steps:

receiving a first message sent by a user terminal;

2. Method for monitoring web content to be accessed according to claim 1,

3. A method for monitoring web content to be accessed, for use in a router, comprising:

receiving a response message sent by a network side;

judging whether the response message is a message including webpage content;

4. A method for monitoring content of a web page to be accessed for use in an analysis server, comprising:

extracting keywords of the webpage content;

5. A method for monitoring content of a web page to be accessed, comprising:

the router receives a first message sent by a user terminal;

6. An apparatus for monitoring web content to be accessed, comprising:

the first receiving unit is used for receiving a first message sent by a user;

7. An apparatus for monitoring web content to be accessed, comprising:

8. An apparatus for monitoring web content to be accessed, comprising:

extracting keywords of the webpage content;

9. A router, comprising a memory and a processor;

the memory is to store a plurality of instructions;

the processor is configured to implement the instructions;

the instructions are adapted to be loaded by the processor and to perform a method of monitoring web content to be accessed according to any one of claims 1-5.

10. A system for monitoring web page content to be accessed is characterized by comprising a router and a resolving server;

the router is configured to: receiving a first message sent by a user terminal;