CN106302475B - Family's Internet service authorization method and server - Google Patents

Abstract

Embodiments of the present invention provide a home Internet service authorization method and server. The method includes: the authorization authentication server receives the service access request sent by the first terminal device; the authorization authentication server determines whether the first terminal device is associated with a home gateway; the authorization authentication server determines whether the authorization authentication right server Whether the permission configuration information of the first terminal device is stored; the authorization authentication server determines that the first terminal device has the right to access the service server; the authorization authentication server sends authorization information to the first terminal device. The method determines whether the terminal device has the authority to access the service server by judging whether the terminal device is associated with the home gateway and whether the authority configuration information of the terminal device is stored in the authorization authentication server. The operation improves the user experience.

Description

Family Internet service authorization method and server

technical field

The invention relates to the field of communication technology, in particular to a method and server for authorizing home Internet services.

Background technique

With the continuous development of Internet technology, the accelerated integration of communication and the Internet has penetrated into all aspects of work and life. There are more and more various network business application systems, and each system has its own set of independent authority management modules. If users want to use the resources in these systems, they have to register multiple sets of accounts accordingly. For users, due to too many accounts, it is more difficult for users to remember, which affects the user experience. Therefore, an open authorization (Open Authorization, referred to as oAuth) technology emerges as the times require.

The oAuth protocol provides a safe, open and simple standard for authorization of user resources. Unlike other authorization methods, oAuth authorization will not allow third-party applications that support the oAuth protocol to touch the user's account information (such as user name and password), that is, third-party applications that support the oAuth protocol can apply without using additional user names and passwords. Obtain the authorization of the user's resources, so while ensuring security, oAuth technology can also reduce the user's account registration frequency and improve user experience.

The home Internet system is a typical application scenario of oAuth technology. A home Internet system generally includes: an Internet OAuth authentication system, a home gateway, and at least one home Internet terminal device (hereinafter referred to as terminal device). Usually, the process of using a terminal device to access a business application is to access a business application A that supports the oAuth protocol in the terminal device, and the business application A is redirected to the Internet oAuth authentication system. The user enters the pass account and password of the Internet oAuth authentication system, and logs in to The networked OAuth authentication system, the networked OAuth authentication system asks the user whether to authorize the business application A to use the pass account, and if the user agrees, the business application A can be accessed. When the user needs to access the business application B or use another terminal device to access the business application, the above steps must be repeated, causing the user to perform frequent switching, authorization and other operations. Although such steps ensure the security of use, they affect the user. experience.

Contents of the invention

Embodiments of the present invention provide a home Internet service authorization method and server, so as to overcome problems such as frequent switching and authorization by users in the above-mentioned home Internet application scenario.

An aspect of an embodiment of the present invention is to provide a method for authorizing a home Internet service, the method including:

The authorization authentication server receives the service access request sent by the first terminal device, the service access request includes the first identification information of the first terminal device and the authorization authentication account of the first terminal device, and the authorization authentication account For logging into the account of the authorization authentication server, the authorization authentication server stores the authority configuration information of the terminal device, and the authorization authentication server stores the authority configuration information of the terminal device;

The authorization authentication server determines whether the first terminal device is associated with a home gateway according to the first identification information, and the home gateway stores association relationship information between each terminal device and the authorization authentication account;

The authorization authentication server determines whether the authorization authentication server stores the authority configuration information of the first terminal device according to the first identification information;

If the first terminal device is associated with the home gateway, and the authorization authentication server stores the permission configuration information of the first terminal device, then the authorization authentication server determines that the first terminal device has the right to access all the business server;

The authorization authentication server sends authorization information to the first terminal device, where the authorization information is information identifying that the first terminal device has the right to access the service server.

Another aspect of the embodiments of the present invention provides a server, the server includes:

A service request receiving module, configured to receive a service access request sent by a first terminal device, where the service access request includes first identification information of the first terminal device and an authorized authentication account of the first terminal device, the The authorized authentication account is an account for logging into the server, and the server stores permission configuration information of the terminal device;

An association relationship determining module, configured to determine whether the first terminal device is associated with a home gateway according to the first identification information, and the home gateway stores association relationship information between each terminal device and the authorized authentication account;

A rights configuration determining module, configured to determine whether the server stores the rights configuration information of the first terminal device according to the first identification information;

An authorization determining module, configured to determine that the first terminal device has the right to access the business server;

An authorization information sending module, configured to send authorization information to the first terminal device, where the authorization information is information identifying that the first terminal device has the right to access the service server.

The home Internet service authorization method and server provided by the embodiments of the present invention bind the home gateway with the authorization authentication account of the authorization authentication server, associate the terminal device with the authorization authentication account, and establish the identity of the terminal device in the authorization authentication server. Authority control information, so as to uniformly convert the authorization and authentication of terminal equipment and business applications into the authorization and authentication of home gateways, thereby reducing the frequency of user switching and authorization.

Description of drawings

FIG. 1 is a flowchart of a method for authorizing a home Internet service provided by Embodiment 1 of the present invention;

FIG. 2 is a flowchart of a method for authorizing a home Internet service provided in Embodiment 2 of the present invention;

FIG. 3 is a flow chart of a method for authorizing a home Internet service provided by Embodiment 3 of the present invention;

FIG. 4 is a structural diagram of a server provided by Embodiment 4 of the present invention;

FIG. 5 is a structural diagram of a server provided by Embodiment 5 of the present invention;

FIG. 6 is a structural diagram of a server provided by Embodiment 6 of the present invention;

FIG. 7 is a structural diagram of a home Internet service authorization system provided by Embodiment 7 of the present invention.

Detailed ways

The method, system and server for authorizing home Internet services provided by the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

FIG. 1 is a flow chart of a method for providing home Internet service authorization according to Embodiment 1 of the present invention. As shown in Figure 1, the home Internet service authorization method of this embodiment specifically includes the following steps:

Step S101, the authorization authentication server receives the service access request sent by the first terminal device, the service access request includes the first identification information of the first terminal device and the authorization authentication account of the first terminal device, the The authorization authentication account is an account for logging into the authorization authentication server, and the authorization authentication server stores permission configuration information of the terminal device.

For example, the authorization authentication server may be an authorization authentication server supporting the oAuth protocol; the first terminal device may be a terminal device of the home Internet to be authorized and authenticated; the first identification information may be information used to identify the first terminal device such as a MAC address , a unique number, etc.; the authorization authentication account may be an account registered by the user through the authorization authentication server in advance, and the account can be used to log in to the authorization authentication server; the authorization authentication server stores the permission configuration information of the terminal device, so that all The authorization authentication server determines the authorization of the terminal device to access the service server according to the authorization configuration information, for example, whether the access is within the validity period of the authorization.

Step S102, the authorization authentication server determines whether the first terminal device is associated with a home gateway according to the first identification information, and the home gateway stores association relationship information between each terminal device and the authorization authentication account.

Preferably, step S102 specifically includes:

The authorization authentication server sends a query request to the home gateway, so that the home gateway obtains the identification information of each terminal device associated with the home gateway according to the query request. The home gateway searches for identification information of each terminal device associated with the home gateway according to the query request, and sends the found identification information of each terminal device associated with the home gateway to the authentication server.

The authorization authentication server receives the identification information of each terminal associated with the home gateway sent by the home gateway.

The authorization authentication server determines whether the first terminal device is associated with the home gateway according to the identification information of each terminal associated with the home and the first identification information. For example, the authentication and authorization server compares the first identification information with the received identification information of all terminal devices associated with the home gateway, and generates a comparison result, and determines the first identification information according to the comparison result. Whether the terminal device is associated with the home gateway.

Wherein, the home gateway stores association relationship information between each terminal device and the authorized authentication account, so that each terminal device obtains the authorized authentication account through the home gateway, and then logs in the authorized authentication account through the authorized authentication account. Authentication server. The terminal device associated with the home gateway may be a terminal device connected to the home gateway in a wired or wireless manner, that is, a terminal device attached to the home gateway.

Step S103, the authorization authentication server determines whether the authorization authentication server stores the authority configuration information of the first terminal device according to the first identification information;

For example: the authorization authentication server may query the authority configuration information stored in the authorization authentication server to determine whether there is authority configuration information of the first terminal device corresponding to the first identification information.

Step S104, if the first terminal device is associated with the home gateway, and the authorization authentication server stores the permission configuration information of the first terminal device, then the authorization authentication server determines that the first terminal device has right to access the business server.

Specifically, if the first terminal device is associated with the home gateway, it means that the first terminal device has an association relationship with the home gateway. For example, the association relationship may be that the first terminal is connected to the home gateway. Under the home gateway; if the authorization authentication server stores the permission configuration information of the first terminal device, it means that the authorization authentication server has pre-configured the permission of the first terminal device, such as the permission to access the service server. configuration; if the above two conditions are met at the same time, the authorization authentication server considers that the first terminal device is a legal terminal device associated with the home gateway and has the authority to access the service server, so the first terminal device can be determined The terminal device has the right to access the service server.

Step S105, the authorization authentication server sends authorization information to the first terminal device, where the authorization information is information identifying that the first terminal device has the right to access the service server.

Based on the judgment result of step S104, the authorization authentication server sends authorization information to the first terminal device to notify the first terminal device that the authorization information can be used to access the service server. Wherein, the authorization information is specifically information identifying that the first terminal device has the right to access the service server. Thereafter, the first terminal device may initiate an access request to the service server based on the authorization information, and the service server determines whether to allow the first terminal to access according to the authorization information. Wherein, the service server may be a service server supporting the oAuth protocol.

The home Internet service authorization method provided in this embodiment stores the association relationship between the terminal device and the authorized authentication account in the home gateway, so that the terminal device can automatically obtain the authorized authentication account associated with the terminal device through the home gateway, thereby passing the authorization. The authentication account logs in to the authorization authentication server, thereby eliminating the need for manual input by the user; by judging whether the terminal equipment is associated with the home gateway and whether the authority configuration information of the terminal equipment is stored in the authorization authentication server, etc., it is determined whether the terminal equipment has The authority to access the business server can not only ensure the security of the business, but also eliminate the manual switching and authorization operations of the user, improve the user experience, and overcome the need for users to frequently check whether the terminal device has the authority to access the business server in the prior art. Problems with switching and authorization operations.

FIG. 2 is a flow chart of a method for authorizing a home Internet service according to Embodiment 2 of the present invention. As shown in FIG. 2 , on the basis of Embodiment 1, Embodiment 2 of the present invention provides a home Internet service authorization method that specifically includes:

Step S201, the authorization authentication server establishes a binding relationship between the home gateway and the authorization authentication account.

Wherein, the authorization authentication account is an account for logging into the authorization authentication server.

For example, if the user pre-registers an authorization authentication account A on the authorization authentication server, then the authorization authentication server can bind the identification information of the home gateway to the authorization authentication account A, and carry out the binding relationship information store, so as to establish a binding relationship between the home gateway and the authorized authentication account A.

Step S202, the authorization authentication server receives the identification information of each terminal device associated with the home gateway sent by the home gateway.

For example, a new terminal device is added to the home Internet, and when the terminal device is associated (for example, connected) with the home gateway, the home gateway associates the terminal device with the authorized authentication account, and stores the association relationship information in to the home gateway, and at the same time send the identification information of the terminal device to the authorization authentication server. The authentication server receives the identification information of the terminal device associated with the home gateway sent by the home gateway. When multiple terminal devices are added, the above operations are repeated accordingly, and the authentication server receives the identification information of each terminal device associated with the home gateway sent by the home gateway.

Step S203, the authorization authentication server creates permission configuration information of the terminal device corresponding to the identification information according to the identification information.

For example, upon receiving the identification information of the terminal device B, the authorization authentication server establishes the authority configuration information of the terminal device B, which may be the authority information of the terminal device B to access the service server, such as the validity period of the access.

Step S204, the authorization authentication server receives a service access request sent by the first terminal device, where the service access request includes the first identification information of the first terminal device and the authorization authentication account.

Step S205, the authorization authentication server determines whether the first terminal device is associated with the home gateway according to the first identification information, and the home gateway stores the association relationship between each terminal device and the authorization authentication account information.

Step S206, the authorization authentication server determines whether the authorization authentication server stores the authority configuration information of the first terminal device according to the first identification information.

Step S207, if the first terminal device is associated with the home gateway, and the authorization authentication server stores the permission configuration information of the first terminal device, then the authorization authentication server determines that the first terminal device has right to access the business server.

Step S208, the authorization authentication server sends authorization information to the first terminal device, where the authorization information is information identifying that the first terminal device has the right to access the service server.

Step S204 to step S208 are respectively consistent with step S101 to step S205, and the specific method will not be repeated here.

In the home Internet service authorization method provided in this embodiment, before the authorization authentication server receives the service access request sent by the first terminal device, the binding relationship between the home gateway and the authorization authentication account is established in the authorization authentication server in advance, and the terminal device is pre-established. Authorization configuration information, so that the home gateway is uniquely associated with the authorized authentication account, and then the authorization authentication server’s authorization of the terminal device is converted into the authentication of the home gateway, which not only ensures business security, but also saves the user from manual switching. Authorization and other operations improve the user experience.

FIG. 3 is a flow chart of a method for authorizing a home Internet service according to Embodiment 3 of the present invention. As shown in Figure 3, on the basis of the foregoing embodiments, taking Embodiment 2 as an example, a method for authorizing a home Internet service is provided, and the method specifically includes:

Step S301, the authorization authentication server establishes a binding relationship between the home gateway and the authorization authentication account.

Wherein, the authorization authentication account is an account for logging into the authorization authentication server.

Step S302, the authorization authentication server receives the identification information of each terminal device associated with the home gateway sent by the home gateway.

Step S303, the authorization authentication server establishes permission configuration information of the terminal device corresponding to the identification information according to the identification information.

Step S304, the authorization authentication server receives the service access request sent by the first terminal device, where the service access request includes the first identification information of the first terminal device and the authorization authentication account.

Step S305, the authorization authentication server determines whether the first terminal device is associated with the home gateway according to the first identification information, and the home gateway stores the association relationship between each terminal device and the authorization authentication account information.

Step S306, the authorization authentication server determines whether the authorization authentication server stores the authority configuration information of the first terminal device according to the first identification information.

Step S307, if the first terminal device is associated with the home gateway, and the authorization authentication server stores the permission configuration information of the first terminal device, then the authorization authentication server determines that the first terminal device has right to access the business server.

Step S308, the authorization authentication server sends authorization information to the first terminal device, where the authorization information is information identifying that the first terminal device has the right to access the service server.

Step S301 to step S308 are respectively consistent with step S201 to step S208, and the specific method will not be repeated here.

After step S308 is executed, it indicates that the first terminal device has the right to access the service server, but it is difficult for the service server itself to authenticate the legitimacy of the first terminal device. This requires the service server to interact with the authorization authentication server to further authenticate the first terminal device. Therefore, the following steps are introduced:

Step S309, the authorization authentication server receives the token request sent by the first terminal device, and the token request includes the first identification information of the first terminal device.

After the first terminal device receives the authorization information sent by the authorization authentication server to the first terminal device, the first terminal device sends a token to the authorization authentication server according to the authorization information request, where the token request includes the identification information of the first terminal device.

The authorization authentication server receives the token request sent by the first terminal device.

Step S310, the authorization server generates a token corresponding to the first identification information according to the token request.

In step S310, the authorization authentication server generates a token and saves the token, so that the service server can use the token to authenticate the first terminal later.

Step S311, the authorization authentication server sends the token to the first terminal device, so that the first terminal device accesses the service server according to the token.

Subsequent steps are similar to the prior art, namely:

The first terminal device initiates an access request to the service server according to the token, where the access request includes the token.

The service server initiates a request for authenticating the token to the authorization authentication server, and the authentication request includes the token.

The server compares the token in the authentication request with the token stored in the server, and if the comparison is consistent, sends the result of the token authentication and the corresponding user information to the service server; If the card authentication fails, the result is sent to the service server.

The service server determines whether to allow the first terminal device to access according to the token authentication result. That is, if the token authentication result is passed, the first terminal device is allowed to access, otherwise, its access is not allowed.

Wherein, in step S308, the authorization authentication server sends the authorization information to the first terminal device, it may also be: the authorization authentication server sends the authorization information to the first terminal through the home gateway The device, that is, the authorization authentication server first sends the authorization information to the home gateway, and then the home gateway sends the authorization information to the first terminal device.

Correspondingly, in step S309, the authorization authentication server receives the token request sent by the first terminal device, or it may be: the authorization authentication server receives the token request sent by the first terminal device through the home gateway , that is, the home gateway receives the token request sent by the first terminal, and then the home gateway sends the first token request to the authorization authentication server, that is, the authorization authentication server receives the The token request sent by the home gateway.

Correspondingly, in step S311, the authorization authentication server sends the token to the first terminal device, or: the authorization authentication server sends the token to the first terminal device through the home gateway. The terminal device, that is, the authorization authentication server first sends the token to the home gateway, and then the home gateway sends the token to the first terminal device.

In this embodiment, after the authorization authentication server sends the authorization information to the first terminal device, a "token" mechanism is introduced, so that the service server can authenticate the "token" through the authorization authentication server, and the first terminal device is allowed to Terminal equipment access, thus further ensuring the security of business interaction.

In the above embodiment, when the authorization authentication server determines that the first terminal device has the right to access the service server, it may also add a judgment condition: and if the first terminal device is in the home Internet environment, confirm that The first terminal has the right to access the service server. Wherein, whether the first terminal device is in the home Internet environment can be performed by the home gateway, that is, the authorization authentication server determines if the first terminal device is in the home Internet environment through the home gateway, then confirms that the The first terminal has the right to access the service server. In this way, those devices connected to the home gateway but not belonging to home Internet terminal devices can be excluded from the scope of home Internet service authorization.

FIG. 4 is a structural diagram of a server provided by Embodiment 4 of the present invention. The server provided by Embodiment 4 of the present invention specifically includes: a business request receiving module 1 , an association relationship determining module 2 , a rights configuration determining module 3 , an authorization determining module 4 , and an authorization information sending module 5 .

A service request receiving module 1, configured to receive a service access request sent by a first terminal device, where the service access request includes first identification information of the first terminal device and an authorized authentication account of the first terminal device, The authorized authentication account is an account for logging into the server, and the server stores permission configuration information of the terminal device.

The association relationship determination module 2 is configured to determine whether the first terminal device is associated with a home gateway according to the first identification information, and the home gateway stores information about the association relationship between each terminal device and the authorized authentication account.

The authority configuration determining module 3 is configured to determine whether the server stores the authority configuration information of the first terminal device according to the first identification information.

An authorization determining module 4, configured to determine that the first terminal device has the right to access all The business server described above.

An authorization information sending module 5, configured to send authorization information to the first terminal device, where the authorization information is information identifying that the first terminal device has the right to access the service server.

Preferably, the association relationship determining module 2 includes: a sending unit 21 , a receiving unit 22 , and a determining unit 23 .

The sending unit 21 is configured to send a query request to the home gateway, so that the home gateway acquires identification information of each terminal device associated with the home gateway according to the query request.

The receiving unit 22 is configured to receive identification information of each terminal device associated with the home gateway sent by the home gateway.

The determining unit 23 is configured to determine whether the first terminal device is associated with the home gateway according to the identification information of each terminal device associated with the home gateway and the first identification information.

The server provided by the embodiment of the present invention is used to implement the home Internet service authorization method of the first embodiment, and its implementation principle, functions and purposes are similar to those of the first embodiment, and will not be repeated here.

The server provided in this embodiment stores the relationship between the terminal device and the authorized authentication account in the home gateway, so that the terminal device can automatically obtain the authorized authentication account associated with the terminal device through the home gateway, so as to log in to the authorized account through the authorized authentication account. authentication server, thereby eliminating the need for manual input by the user; determining whether the terminal device has access to the service server by judging whether the terminal device is associated with the home gateway and whether the authority configuration information of the terminal device is stored in the authorization authentication server. Permissions can not only ensure business security, but also eliminate manual switching and authorization operations for users, improve user experience, and overcome the need for frequent switching and authorization operations in the prior art when determining whether a terminal device has access to a business server The problem.

FIG. 5 is a structural diagram of a server provided by Embodiment 5 of the present invention. As shown in Figure 5, on the basis of Embodiment 4, the server provided by Embodiment 5 of the present invention specifically includes: a business request module 1, an association relationship determination module 2, a rights configuration determination module 3, an authorization determination module 4, and an authorization information sending module. Module 5, the above-mentioned modules are respectively consistent with the service request module 1, association relationship determination module 2, authority configuration determination module 3, authorization determination module 4 and authorization information sending module 5 in Embodiment 4, and will not be repeated here.

The server also includes: a binding relationship establishing module 6 , an identification information receiving module 7 , and an authority configuration establishing module 8 .

The binding relationship establishing module 6 is configured to establish a binding relationship between the home gateway and the authorized authentication account before the service request receiving module receives the service access request sent by the first terminal device.

The identification information receiving module 7 is configured to receive the identification information of the terminal device associated with the home gateway sent by the home gateway before the service request receiving module receives the service access request sent by the first terminal device.

The authority configuration establishment module 8 is configured to establish the authority configuration information of the terminal device corresponding to the identification information according to the identification information before the first receiving module receives the service access request sent by the first terminal device.

The server in the embodiment of the present invention is used to implement the home Internet service authorization method in the second embodiment, and its implementation principle, function and usage are similar to those in the second embodiment, and will not be repeated here.

The server provided in this embodiment, before the service request receiving module receives the service access request sent by the first terminal device, pre-establishes the binding relationship between the home gateway and the authorized authentication account in the server, and pre-establishes the authority configuration information of the terminal device , so that the home gateway is uniquely associated with the authorized authentication account, and then the server’s authorization and authentication of the terminal device is transformed into the authentication of the home gateway, which not only ensures business security, but also saves users from manual switching, authorization and other operations, improving user experience.

FIG. 6 is a structural diagram of a server provided by Embodiment 6 of the present invention. As shown in Figure 6, on the basis of Embodiment 5, Embodiment 6 of the present invention provides a server that specifically includes: a business request module 1, an association relationship determination module 2, a rights configuration determination module 3, an authorization determination module 4, and an authorization information sending module. Module 5, binding relationship establishment module 6, identification information receiving module 7 and authority configuration establishment module 8, the above modules are respectively related to the business request module 1, association relationship determination module 2, authority configuration determination module 3, and authorization determination module in Embodiment 5 Module 4 , authorization information sending module 5 , binding relationship establishing module 6 , identification information receiving module 7 and authority configuration establishing module 8 are the same, and will not be repeated here.

The server also includes: a token request receiving module 9 , a token generating module 10 , and a token sending module 11 .

The token request receiving module 9 is configured to receive the token request sent by the first terminal device after the first sending module sends the authorization information to the first terminal device, and the token request includes the first First identification information of the terminal device.

A token generation module 10, configured to generate a token corresponding to the first identification information according to the token request.

A token sending module 11, configured to send the token to the first terminal device, so that the first terminal device accesses the service server according to the token.

Preferably, the authorization information sending module 5 is specifically configured to send authorization information to the first terminal device through the home gateway.

Correspondingly, the token request receiving module 9 is specifically configured to receive the token request information sent by the first terminal device through the home gateway.

Correspondingly, the token sending module 11 is specifically configured to send the token to the first terminal device through the home gateway.

The server provided in the embodiment of the present invention is used to implement the home Internet service authorization method in the third embodiment, and its implementation principle, function and usage are similar to those in the third embodiment, and will not be repeated here.

The server provided in this embodiment introduces a "token" mechanism after the authorization information sending module sends the authorization information to the first terminal device, so that the service server can authenticate the "token" through the server, and the authentication is pending. After passing, the first terminal device is allowed to access, thereby further ensuring the security of service interaction.

FIG. 7 is a structural diagram of a home Internet service authorization system provided by Embodiment 7 of the present invention. As shown in FIG. 7 , the home Internet service authorization system provided by Embodiment 7 of the present invention specifically includes: the server, terminal device and home gateway provided by Embodiment 4, 5 or 6.

The system provided in this embodiment is used to implement the corresponding home Internet service authorization method, and its implementation principle, function and application are similar to those of the corresponding home Internet service authorization method, and will not be repeated here.

The beneficial effects of the system provided by this embodiment are similar to those of the corresponding home Internet service authorization method, and will not be repeated here.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than limiting them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the various embodiments of the present invention. scope.

Claims (10)

1. a kind of family's Internet service authorization method characterized by comprising

Radius authentication server receives the service access request that first terminal equipment is sent, and the service access request includes described The authorization identifying account of the first identifier information of first terminal equipment and the first terminal equipment, the authorization identifying account are The account of the radius authentication server is logged in, the authority configuration letter of terminal device is stored in the radius authentication server Breath；

The radius authentication server according to the first identifier information, determine the first terminal equipment whether with home gateway It is associated with, the incidence relation information of each terminal device Yu the authorization identifying account is stored in the home gateway；

The radius authentication server determines whether the radius authentication server stores according to the first identifier information State the privileges configuration information of first terminal equipment；

If the first terminal equipment is associated with the home gateway, and the radius authentication server is stored with described first eventually The privileges configuration information of end equipment, then the radius authentication server determines the first terminal equipment Internet access business service Device；

The radius authentication server sends authorization message to the first terminal equipment, and the authorization message is to identify described the The information of service server described in one terminal device Internet access.

2. the method according to claim 1, wherein the radius authentication server is believed according to the first identifier Breath, determines whether the first terminal equipment is associated with the home gateway, comprising:

The radius authentication server sends inquiry request to the home gateway, so that the home gateway is according to the inquiry The identification information of request and the associated each terminal device of the home gateway；

The radius authentication server receive that the home gateway sends with the associated each terminal device of the home gateway Identification information；

The radius authentication server is according to the identification information and described with the associated each terminal device of the home gateway One identification information, determines whether the first terminal equipment is associated with the home gateway.

3. the method according to claim 1, wherein the radius authentication server receives first terminal equipment hair Before the service access request sent, further includes:

The radius authentication server establishes the binding relationship of the home gateway Yu the authorization identifying account；

The radius authentication server receives the mark with the associated terminal device of the home gateway that the home gateway is sent Know information；

The radius authentication server establishes the permission of terminal device corresponding with the identification information according to the identification information Configuration information.

4. method according to claim 1-3, which is characterized in that the radius authentication server is to described first Terminal device is sent after authorization message, further includes:

The radius authentication server receives the token request that the first terminal equipment is sent, and the token request includes described The first identifier information of first terminal equipment；

The radius authentication server generates token corresponding with the first identifier information according to token request；

The token is sent to the first terminal equipment by the radius authentication server, so that the first terminal equipment root The service server is accessed according to the token.

5. according to the method described in claim 4, it is characterized in that, the radius authentication server is to the first terminal equipment Send authorization message, comprising:

The radius authentication server sends authorization message to the first terminal equipment by the home gateway；

The radius authentication server receives the first terminal equipment and closes the token solicited message sent, comprising:

The radius authentication server receives the first terminal equipment by the home gateway and closes the token sent request letter Breath；

The token is sent to the first terminal equipment by the radius authentication server, comprising:

The token is sent to the first terminal equipment by the home gateway by the radius authentication server.

6. a kind of server characterized by comprising

Service request receiving module, for receiving the service access request of first terminal equipment transmission, the service access request The authorization identifying account of first identifier information and the first terminal equipment including the first terminal equipment, the authorization are recognized Demonstrate,proving account is to log in the account of the server, and the privileges configuration information of terminal device is stored in the server；

Incidence relation determining module, for according to the first identifier information, determine the first terminal equipment whether with family Gateway association is stored with the incidence relation information of each terminal device Yu the authorization identifying account in the home gateway；

Authority configuration determining module, for according to the first identifier information, determining whether the server is stored with described the The privileges configuration information of one terminal device；

Determining module is authorized, if being associated with for the first terminal equipment with the home gateway, and the server is stored with The privileges configuration information of the first terminal equipment, it is determined that the first terminal equipment Internet access service server；

Authorization message sending module, for sending authorization message to the first terminal equipment, the authorization message is mark institute State the information of service server described in first terminal equipment Internet access.

7. server according to claim 6, which is characterized in that the incidence relation determining module includes:

Transmission unit, for sending inquiry request to the home gateway, so that the home gateway is according to the inquiry request Obtain the identification information with the associated each terminal device of the home gateway；

Receiving unit, the mark letter with the associated each terminal device of the home gateway sent for receiving the home gateway Breath；

Determination unit, identification information and the first identifier for basis with the associated each terminal device of the home gateway Information, determines whether the first terminal equipment is associated with the home gateway.

8. server according to claim 7, which is characterized in that further include:

Binding relationship establishes module, for receiving the service access request that first terminal equipment is sent in service request receiving module Before, the binding relationship of the home gateway Yu the authorization identifying account is established；

Identification information receiving module, for receiving the service access request that first terminal equipment is sent in service request receiving module Before, the identification information with the associated terminal device of the home gateway that the home gateway is sent is received；

Authority configuration establishes module, requests it for receiving the service access that first terminal equipment is sent in the first receiving module Before, according to the identification information, establish the privileges configuration information of terminal device corresponding with the identification information.

9. server according to claim 8, which is characterized in that further include:

Token request receiving module, for connecing after the first sending module sends authorization message to the first terminal equipment It receives the first terminal equipment and closes the token request sent, the token request includes the first identifier of the first terminal equipment Information；

Token generation module, for generating token corresponding with the first identifier information according to token request；

Token sending module, for the token to be sent to the first terminal equipment, so that the first terminal equipment root The service server is accessed according to the token.

10. server according to claim 9, which is characterized in that the authorization message sending module, specifically for passing through The home gateway sends authorization message to the first terminal equipment；

Token request receiving module closes the token sent specifically for receiving the first terminal equipment by the home gateway Solicited message；

Token sending module, specifically for the token is sent to the first terminal equipment by the home gateway.