Method, device and gateway server for detecting proxy at the gateway

A device for detecting a proxy at a gateway comprising:

• a memory for storing a plurality of instructions being executed to detect a proxy at a gateway;
• and
• a processor electrically connected to the memory and executing the instructions to implement steps:
• determining whether an access request from a certain IP address needs to be proxy-monitored or not to obtain a first determining result;
• decomposing said access request into an access request to an original address and an access request to a gateway-specified address to access the original address and the gateway-specified address separately when the first determining result is yes;
• determining whether a specific cookie information is included in said access request to the gateway-specified address or not to obtain a second determining result, said specific cookie information being the cookie information with a time stamp embedded into a client PC by the gateway when responding to said access request to the gateway-specified address;
• responding to the access request to the gateway-specified address and embedding the cookie information with the time stamp into the client PC by the gateway when said second determining result is no, wherein, one cookie being used to identify one PC;
• reading said cookie information when said second determining result is yes;
• determining whether said IP address is using a proxy or not on the basis of said cookie information;
• wherein the step of determining whether said IP address is using a proxy or not on the basis of said cookie information comprises:
• caching the cookie information of each IP address, said cookie information being the cookie information with the time stamp;
• comparing the time stamp in the cookie information read by the cookie reading module with the time stamp in the corresponding cookie information of the IP address cached before in said list to give a comparing result;
• replacing the corresponding cookie information of the IP address cached before in said list by the read cookie information when said comparing result is that the time stamp in the read cookie information is later than the time stamp in the corresponding cookie information of the IP address cached before in said list, and for obtaining a judgement that the IP address is using the proxy when the time stamp in the read cookie information is earlier than the time stamp in the corresponding cookie information of the IP address cached before in said list.