CN100412788C - A Simple Method of Accessing Network Operator's Portal - Google Patents

Abstract

The invention relates to a method for simply accessing a portal website of a network operator, which is a mandatory (Portal) service technology. Refining the existing "destination address translation + source address translation + redirection" (DNAT+SNAT+Redirect) technical solution can simplify the mandatory implementation process and reduce the requirements on the underlying hardware of the access server. The access server directly submits the first upstream HTTP message before the portal service user equipment fails authentication to the "virtual web server"; the "virtual web server" virtualizes the website that the user wants to visit and establishes the TCP connection, sending a message redirecting to the real portal website to the portal service user equipment; after receiving the redirect message, the browser of the portal service user equipment automatically initiates a visit to the real portal website. The access server directly forwards the IP packets of non-Portal user equipment, the packets of users directly accessing the portal website, and the DNS packets for domain name resolution.

Description

A Simple Method of Accessing Network Operator's Portal

technical field

The present invention relates to an Internet technology, more specifically to a technology related to mandatory (Portal) services.

Background technique

Portal service is a new type of broadband access service provided by NSP/ISP (Network Service Provider/Internet Service Provider) to users. When users surf the Internet, they can use standard WWW browsers (Internet Explorer or Netscape Navigator ) to visit its portal website (Portal_Server, realized by Web Server). Each operator has its own Portal_Server.

Since any user needs to directly enter the domain name or IP address of the website to access any website, the user also needs to follow the steps below to access the website of the Portal business: first open the browser, enter the IP address of the Portal_Server or Domain name, access to the portal website of the Portal business; then enter the user name and password on the homepage of the portal website for authentication; after authentication, obtain the corresponding Internet access authority. In addition, on this homepage, you can dynamically select the business that suits you, or query some information that you care about, so that you can manage yourself. That is, every time the user wants to visit the Portal_Server website, he must input the complete domain name or IP address on the browser to proceed.

According to the above statement, Portal_Server, as an important part of the Portal business, is the website that the users of the Portal business must visit when surfing the Internet, and is the portal when the users surf the Internet. If the above-mentioned traditional method of accessing a website is adopted, that is, a domain name and an IP address need to be input every time, the operator must be required to provide each user with the domain name or IP address of its website, and the user must also remember the domain name or IP address of the website simultaneously. The IP address obviously brings inconvenience to operators and users, which is not conducive to the promotion of Portal services.

Since the Portal_Server portal site is the portal site that must be passed by the users of the Portal business when surfing the Internet, it is particularly important to provide a very simple and convenient access method for it.

In order to facilitate the development of Portal services by operators and the use of users, it is necessary to design a new method of accessing the Portal service website for the above problems, so that users of Portal services do not need to care about the domain name or IP of this Portal_Server, and users normally press their own If you are used to surfing the Internet, you can randomly enter the domain name or IP that you are familiar with in the browser address bar, or even type in a few numbers casually, and you will be automatically directed to this portal website, which is convenient for users to log in to this website.

In order to facilitate the user to log in to this website, a technology is needed so that when the user logs in for the first time, any website he visits will be forced to the Portal_Server website, where the authentication and business selection are completed; at the same time, after the user passes the authentication, it is guaranteed that the user will visit any website again It will no longer be forced, that is, users can surf the Internet normally. The problem to be solved by the present invention is exactly how to force any visits to be carried out by the user to the Portal_Server website when logging in for the first time, and no longer force after the user passes the authentication, so as to ensure the normal access of the user.

Enter any correct domain name, IP address or even any number to access the portal, which is obviously the easiest method. Mandatory Portal technology is just such a technology.

There is a mandatory Portal technology, referred to as destination address translation + source address translation + redirection technology (DNAT+SNAT+Redirect), including: the introduction of destination address translation (DNAT) and source The technology of combining address translation (SNAT) and the technology of introducing redirection (Redirect) at the portal (Portal_Server) side. Its specific implementation steps are:

On the access server, mandatory destination address translation (DNAT) is performed on the first HTTP message of the Portal business user before the authentication, and the address of the destination website to be accessed by the user is replaced with the address of Portal_Server, thereby the HTTP The message is forced to Portal_Server;

After Portal_Server receives such first HTTP message, establishes TCP connection, sends the response message that comprises redirection (Redirect) information to client simultaneously, allows client to directly be connected on the Portal_Server with the IP address of Portal_Server;

When the access server receives the IP packet from Portal_Server, and its destination address is the user who has not passed the authentication, it will perform mandatory source address translation (SNAT), and replace the address of Portal_Server with the address of the website that the user originally wanted to visit, so that The client can establish a TCP connection normally;

Finally, after receiving the message containing the Redirect information brought back by the Portal_Server, the client can automatically access the Portal_Server directly with the IP address of the Portal_Server. After that, the processing of the IP packet by the access server will be a normal forwarding process. This completes the mandatory Portal.

The above scheme is implemented based on three relatively independent parts: the processing process of the access server to the upstream message (DNAT), the processing process of the access server to the downstream message (SNAT) and the redirection of the portal website (Portal_Server) Process (Redirect) process.

Although the above-mentioned "DNAT+SNAT+Redirect" scheme can well realize the function of mandatory Portal, in its implementation, both the uplink processing (DNAT) and downlink processing (SNAT) of the access server must rely on the access server The low-level hardware undoubtedly increases the additional burden of the low-level hardware and correspondingly reduces the network processing capacity of the access server. This is obviously very unfavorable for broadband devices that require high processing capabilities.

Contents of the invention

The purpose of the present invention is to design a method for simply accessing the network operator's portal website, refining the existing "DNAT+SNAT+Redirect" technical solution, so as to simplify the requirements for accessing the underlying hardware of the server in the forced Portal process as much as possible, Simultaneously simplify its implementation technology.

In order to achieve the above object, the present invention provides a kind of method for simply visiting network operator's portal website, it is characterized in that comprising the following processing steps:

A. The underlying hardware of the access server directly submits the first uplink HTTP packet before the authentication of the portal business user equipment to the "virtual Web server". Implementation of the "Web server" module;

B. The "virtual web server" virtualizes the website that the user wants to visit and establishes a TCP connection with the portal service user equipment, and the "virtual web server" returns a message containing redirection information to the underlying hardware of the access server, and then the access The underlying hardware of the server sends a message redirecting to the real portal website (Portal_Server) to the portal business user equipment according to the normal forwarding process;

C. After receiving the redirect message, the browser of the portal service user equipment automatically initiates a visit to the real portal website (Portal_Server).

In the step A, the portal service user inputs any correct domain name, IP address or any number on the browser to form an uplink IP message; in the step B, the IP message is virtualized by the "virtual Web server". Text the IP address of the website.

Before described step A, further comprise the following processing steps:

A1. The access server analyzes the connection information of the uplink IP message, and performs direct forwarding processing for the IP message judged to be a non-portal service user equipment;

A2. The access server further determines whether the IP message of the portal business user equipment is a message for directly accessing the portal website (Portal_Server), and further determines whether it is a DNS message for domain name resolution;

A3. The access server performs direct forwarding processing on the message for directly accessing the portal website (Portal_Server) or the DNS message for domain name resolution;

A4. The access server further determines whether it is the first upstream HTTP message before the portal business user equipment fails to pass the authentication for the message that does not directly access the Portal_Server or the DNS message that does not perform domain name resolution;

A5. Set the discard flag for the first uplink HTTP packet before the user equipment of the portal service fails to pass the authentication.

The present invention surpasses the DNAT and SNAT technologies, only extracts the design idea of "Redirect", and designs the "Redirect" technical solution of forcing the Portal to be completed by the high-level software connected to the server.

The technical scheme that the input of any correct domain name, IP address and any number realized by the present invention can be automatically forced to the Portal_Server website, compared with the technical scheme utilizing "DNAT+SNAT+Redirect", except greatly reducing the number of access servers In addition to the burden of the underlying hardware of the device and the advantages of improving the ability of the device to process packets, there are some advantages as follows:

1. Since the process of DNAT and SNAT is removed, the process of forcing Portal is simplified;

2. The present invention not only saves the process of DNAT and SNAT with respect to "DNAT+SNAT+Redirect" technical scheme, simultaneously because "virtual Web Server" is realized on the software of access server, its visit is compared to Access to the actual website is fast, so the speed of the mandatory Portal is increased;

3. the present invention does not have the special requirement that redirection is carried out to the first message that the user comes up to Portal_Server, and the construction of Portal_Server is exactly the same as general website, does not need to increase any special processing, and this has just improved mandatory Compatibility of this Portal function can be connected with any PortalServe. And this is very important for communication equipment.

Description of drawings

Fig. 1 is the process schematic diagram that the present invention utilizes " Redirect " technology to realize mandatory Portal;

Fig. 2 is a block diagram of the processing procedure of the access server for the IP uplink forwarding process.

Detailed ways

Study the mandatory Portal scheme of "DNAT+SNAT+Redirect", the main design idea is to force the user's access to any website except Portal_Server to Portal_Server, and then Portal_Server sends a redirection (Redirect) report to the client. Text, let the client directly connect to the Portal_Server. It can be said that its ultimate purpose is this redirection. DNAT and SNAT are only generated to allow this message to reach Portal_Server. Based on this situation, the present invention only extracts the idea of redirection, and designs a mandatory Portal technical solution that does not require DNAT and SNAT.

Its design idea is as follows: since Portal_Server simply plays the role of sending a redirection message to the user in the process of forcing the Portal, it is completely possible to implement a simple "virtual Web Server" on the access server side, Its function is to receive the message that the user needs to make a mandatory Portal, virtualize it into a website that the user wants to visit and establish a TCP connection with it, and then send a message redirected to Portal_Server by the "virtual Web Server" to the user end, so that Users access Portal_Server directly. At this time, since the virtual "Web Server" is realized through software on the access server side, when the underlying hardware of the access server receives a message, it only needs to simply judge whether the message needs to be a mandatory Portal If so, just submit the message to the "virtual Web Server" directly, and the message returned by the "virtual Web Server" to the client is equivalent to the one returned by the Portal_Server website that the user wants to visit. packet, so there is no need to perform source address translation (SNAT), and it can be processed according to the normal IP forwarding process. Finally, after the client receives the redirect message, the browser will automatically initiate a visit to the real Portal_Server to implement the forced Portal.

Because main technology of the present invention is to utilize " virtual Web Server " to send redirection message to client, thereby realizes mandatory Portal, thereby forms a kind of mandatory Portal technology utilizing ' Redirect ' to realize.

Referring to Fig. 1, the process flow in the figure shows the main design idea of the present invention, including: the forced Portal technology is realized by cooperating with the "virtual Web Server" on the access server and the IP uplink forwarding process.

Step 1, the user (PC) enters any correct domain name, IP address or any number (such as the domain name or IP address of the Sina Sina website), and the user (PC) inputs any correct domain name, IP address or any number to the browser address bar. If the user enters a domain name or IP address, the access server (BAS) will obtain the domain name resolution server (DNS) message of the domain name or IP address. If the user enters any number, the browser will respond to the failure Enter the IP address to establish a connection, it will be automatically regarded as a character, plus a WWW prefix and a suffix such as com, and then send an IP message containing a DNS resolution message;

Step 2, when the underlying hardware of the access server receives a message, when it is judged that it is necessary to make a mandatory Portal message, this message is directly submitted to the "virtual Web Server" (such as virtual Sina) of the access server;

Step 3, "virtual Web Server" (such as virtual Sina) analyzes the received message, obtains the destination IP address, and uses the destination IP address as the address of this "virtual Web Server" (such as virtual Sina), at this time This "virtual Web Server" (such as virtual Sina) has just virtualized the website that the user will visit, and the "virtual Web Server" (such as virtual Sina) returns a message containing redirection information to the underlying hardware of the access server;

Step 4, the access server (BAS) responds a redirection message to the user (PC), the redirection message must tell the user to establish a connection with the real Portal_Server and visit the Portal_Server, and this redirection message is equivalent to For the message returned by the Portal_Server website that the user wants to visit, the IP forwarding process is processed according to the normal forwarding process;

Step 5, at last, after the user (PC) receives the message containing the redirection information brought back by the "virtual WebServer" (such as virtual Sina) returned by the access server (BAS), it can automatically use the IP address of Portal_Server The address directly accesses the Portal_Server (P.S), after which the processing of the IP packet will be a normal forwarding process.

This completes the mandatory Portal.

Referring to FIG. 2 , the figure shows the process of the access server forwarding the IP packet uplink. It mainly includes the processing process of the access server to the client's uplink message, and the processing process of the "virtual Web Server" forwarding the received message downlink.

Step 201, the access server receives an uplink IP packet from the client;

Step 202, the access server judges whether it is a Portal service user according to the analysis message connection information during the normal packet processing process of the uplink IP message, and if so, continues to perform step 203;

Step 203, by comparing the user's destination IP address and the IP address of one or several Portal_Servers configured on the access server device, it is judged whether the user's message is a message for directly accessing the Portal_Server (consistency is direct access) , and judge whether to carry out the DNS (domain name resolution server) message of domain name resolution according to destination port number, if not then continue to execute step 204;

Step 204, according to the standard port number that is only assigned to the HTTP message, it can be further judged whether it is the Portal service user's first HTTP message before authentication, if so, continue to perform step 206;

Step 205, for being judged to be the message of Portal business user through step 202, but being judged through step 203 as not directly visiting the message of Portal_Server or not carrying out the DNS message of domain name resolution, being judged as being not HTTP message through step 204 again other messages, the discard flag is set in the IP message, merged into the sending queue module, and it is discarded by the sending queue module;

Step 206, after being processed in step 204, it is determined that the first HTTP message before the Portal service user fails to pass the authentication is submitted to the "virtual Web Server" module processing of the user's purpose IP address;

Step 207, for being judged as being not the message of Portal service user through step 202 or being judged through step 203 as being the message of directly visiting Portal_Server or carrying out the DNS message of domain name resolution, then by normal forwarding process to IP message carry out forwarding processing;

Step 208, putting the IP packets for normal forwarding processing into the sending queue.

To sum up, the IP upstream forwarding process first judges whether the input IP packet is a user packet of the Portal service. If it is a user packet of the Portal service, the forwarding process must be processed according to the following three principles in turn, otherwise it is forwarded normally Process processing, the three processing principles are:

1. For the IP message directly accessing Portal_Server, or the DNS message for domain name resolution, let it pass directly to ensure that the user IP message directly accessing Portal_Server can pass directly, so that after the client is redirected to Portal_Server There is no need to enforce the access, and the DNS message for domain name resolution can also be passed directly, which ensures that the user can obtain the corresponding IP address through domain name resolution after entering the domain name of the website;

2. for being to visit the HTTP message of Portal_Server, then submit to " virtual Web Server " module processing;

3. Discard other packets.

The IP message processed by step 206 in Fig. 2 is sent into "Virtual Web Server".

"Virtual Web Server" processes the received IP packets according to the following process:

Analyze the received IP message to obtain the destination IP address, and use the destination IP address as the address of this "virtual Web Server", that is, this "virtual Web Server" at this time is virtualized as the website that the user wants to visit;

"Virtual Web Server" responds to the client with a redirection message. In this redirection message, the user must be told to establish a connection with the real Portal_Server and visit the real Portal_Server. This redirection message is equivalent to The IP forwarding process of the access server will process it according to the normal process when it is sent by the website that the user wants to visit;

The access server passes the redirect message to the IP forwarding process for downlink forwarding processing;

The browser at the client end automatically initiates access to the real Portal_Server according to the received redirection message to complete the forced Portal.

The method of the present invention is a mandatory Portal solution realized by "Redirect". For realizing mandatory Portal technology, set up " virtual Web Server ", to realize redirection, and utilize " virtual Web Server " to reply user redirection (Redirect) message.

The invention is verified in the broadband access server, which proves that it can fully meet the requirement of mandatory Portal, and has good effect.

Claims (4)

1. A method for simple and easy access to the network operator portal, characterized in that it comprises the following processing steps: A. The underlying hardware of the access server directly submits the first uplink HTTP packet before the authentication of the portal business user equipment to the "virtual Web server". Implementation of the "Web server" module; B. The "virtual web server" virtualizes the website that the user wants to visit and establishes a TCP connection with the portal service user equipment, and the "virtual web server" returns a message containing redirection information to the underlying hardware of the access server, and then the access server The underlying hardware sends a message redirected to the real portal website Portal_Server to the portal business user equipment according to the normal forwarding process; C. After receiving the redirect message, the browser of the portal service user equipment automatically initiates a visit to the real portal website Portal_Server. 2. A method for simply accessing the portal website of a network operator according to claim 1, characterized in that: in the step A, the portal service user inputs any correct domain name, IP address or any number, forming an uplink IP message; in the step B, the "virtual Web server" is virtualized into a website with the IP address of the IP message. 3. The method for a kind of simple access network operator portal website according to claim 1, it is characterized in that described step A further comprises the following processing steps: A1. The access server analyzes the connection information of the uplink IP message, and performs direct forwarding processing for the IP message judged to be a non-portal service user equipment; A2. The access server further determines whether the IP message of the portal service user equipment is a message directly accessing the portal website Portal_Server, and further determines whether it is a DNS message for domain name resolution; A3. The access server performs direct forwarding processing for the message directly accessing the portal website Portal_Server or the DNS message for domain name resolution; A4. The access server further determines whether it is the first upstream HTTP message before the portal business user equipment fails to pass the authentication for the message that does not directly access the Portal_Server or the DNS message that does not perform domain name resolution; A5. Set the discard flag for the first uplink HTTP packet before the user equipment of the portal service fails to pass the authentication. 4. The method for simply accessing the portal website of a network operator according to claim 3, characterized in that: said step A2 is based on the destination IP address of the portal service user equipment and the configured IP address on the access server equipment The IP address comparison result of portal website Portal_Server, judges whether user message is the message of direct access portal website Portal_Server, and judges whether to carry out the DNS message of domain name resolution according to purpose port number; Described step A4 is based on only being distributed to The standard port number used by the HTTP message, to determine whether it is the first HTTP message before the portal service user fails authentication.

Images