CN1225866C - A method for detecting whether or not WEB authentication user is on line - Google Patents

Abstract

The present invention discloses a method for detecting whether a WEB identification user is online. Heartbeat processing procedures of a device of a user are started when the device of the user is accessed to a network, the identification of the user is completed by an identification server, an authorization server and a charging strategy portal processing server, result information is fed back to the device of the user, and the result information is the identification success information; the device of the user periodically sends heartbeat messages to a portal server later, and the portal server periodically or non periodically feeds back heartbeat response messages to the device of the user; when the portal server does not receive the heartbeat messages sent by the device of the user in scheduled time, offline requests of the device of the user are sent to a network access server which stops charging the user according to a scheduled strategy. The method can more precise record the length of the online time of the user, and meanwhile, when the user is offline abnormally, user resources can be released in time so that network resources can be used legitimately.

Description

A Method of Detecting Whether a WEB Authentication User is Online

technical field

The invention relates to a network system, in particular to a method for detecting whether an online user is online.

Background technique

In the current broadband network access process, the authentication technology based on WEB portal pages is widely used to perform security authentication on Internet users. In this authentication mode, the authentication client does not need to be specially installed by the user, and the web browser is directly used. In the user's network access, usually apply for a temporary IP address first through the Dynamic Host Configuration Protocol (DHCP) (usually completed when starting up), through the temporary IP address, the user can use the web browser to access some specified sites, Such as the portal server (PORTAL SERVER), thereby entering the portal website of the operator, on the portal page, the user can enter the user name and password for authentication, to obtain greater operating authority, to visit some other sites and enjoy some services. After the user passes the authentication, PORTALSERVER will send an interface to the user, prompting information such as the online duration, and the billing server will start billing the user at the same time; when the user goes offline, click the logout button on the PORTAL SERVER browser page, Initiate a logout request to notify the accounting server to stop accounting for the user.

It can be known from the above that the main disadvantage of the current common WEB authentication method is that it cannot detect whether the user is online or not. Since WEB authentication is carried out through the browser and does not require additional tools, the PORTAL SERVER cannot control the browser operated by the user, and cannot know the online status of the user at all. When the browser is closed, or when the user side shuts down due to an accident, PORTALSERVER will not know that the user has gone offline, and still bills the user, which will definitely cause economic losses to the user.

Contents of the invention

The purpose of the present invention is to provide a method for detecting whether a WEB authentication user is online, including establishing the following heartbeat processing flow between the user equipment and the portal server;

Step 1: When the user equipment accesses the network, the portal server processes the authentication information and transmits it to the network access server;

Step 2: The network access server notifies the accounting and authentication server of the network to process the authentication information delivered by the portal server, and feeds back the result information to the user equipment. When the result information is authentication success information, start the heartbeat processing function of the user equipment;

Step 3: The portal server detects whether the WEB authentication user is online through the heartbeat message and the heartbeat response message sent to and from the user equipment.

Said step 3 further includes the following:

The user equipment periodically or non-periodically sends a heartbeat message to the portal server, and the portal server feeds back a heartbeat response message to the user equipment. If the portal server does not receive the heartbeat message sent by the user equipment within the specified time, it sends the The access server sends the user equipment offline request, and the network access server performs user equipment offline processing on the user.

Said step 3 may also include the following:

The portal server periodically or non-periodically sends a heartbeat message to the user equipment, and the user equipment feeds back a heartbeat response message to the portal server. If the portal server does not receive the heartbeat response message sent by the user equipment within a specified time, The access server sends the user equipment offline request, and the network access server performs user equipment offline processing on the user.

The aforementioned heartbeat message includes: message type, message identifier, and message attribute.

Since the present invention adopts the heartbeat mechanism to participate in the WEB authentication, it can dynamically detect whether the WEB authentication user is online. Compared with the WEB authentication without the heartbeat mechanism, it can record the user's online time more accurately, and at the same time, when the user goes offline abnormally , to release user resources in time; this not only makes the network resources be used reasonably, but also increases the security and reliability of the network.

Description of drawings

Fig. 1 is a network structure diagram applying the present invention;

Fig. 2 is the flow chart of the first embodiment of the method of the present invention;

Fig. 3 is a flow chart of the second embodiment of the method of the present invention.

Detailed ways

The present invention will be described in further detail below in conjunction with the accompanying drawings.

Fig. 1 is a network structure diagram applying the present invention. In Figure 1, the portal server monitors terminal WEB users through network access layer devices and edge access layer devices, and the accounting and authentication server performs authentication and accounting operations on online WEB users.

Fig. 2 is a flow chart of the first embodiment of the method of the present invention. Implement the present invention according to Fig. 2, at first, set up the heartbeat process flow between user equipment and portal server; In step 13, the user submits information such as user name and password for authentication to the portal server through this page; in step 14, the portal server processes the above information such as user name and password and transmits it to the network access device, and the network access device sends the information to the portal server. After the above information is processed, the accounting and authentication server in the network performs authentication processing according to a certain authentication, authorization and accounting strategy. If the authentication processing is successful, the network access layer device will feed back a success message to the portal server in step 15, and then The portal server feeds back authentication success information to the user terminal in step 16 and starts the heartbeat process; after this step, the user terminal sends a heartbeat message to the portal server in step 17, and the portal server responds to the heartbeat message in step 18, so that the user terminal and The portal server establishes a heartbeat connection by periodically or non-periodically sending heartbeat messages and feedback heartbeat messages in steps 17 and 18. If the portal server does not receive the heartbeat message sent by the user terminal within the preset time, Then it is considered that the user is abnormal, so in step 19, the network access layer device sends a request that the user has gone offline, and the network access layer device notifies the accounting and authentication server to stop the user's accounting operation according to the policy set by it.

Fig. 3 is a flow chart of the second embodiment of the method of the present invention. Implement the present invention according to Fig. 2, at first, set up the heartbeat process flow between user equipment and portal server; In step 23, the user submits information such as user name and password for authentication to the portal server through this page; in step 24, the portal server processes the above-mentioned user name and password and transmits the information to the network access device, and the network access device sends the information to the portal server. After the above-mentioned information is processed, the accounting authentication server in the network performs authentication processing according to certain authentication, authorization and accounting policies. If the authentication processing is successful, the network access layer device will feed back a success message to the portal server in step 25, and then The portal server feeds back authentication success information to the user terminal in step 26 and starts the heartbeat process; after this step, the portal server sends a heartbeat message to the user terminal in step 27, and the user terminal responds to the heartbeat message in step 28, so that the user terminal and The portal server establishes a heartbeat connection by periodically or non-periodically sending heartbeat messages and feedback heartbeat messages in steps 27 and 28. If the portal server does not receive the heartbeat message sent by the user terminal within the preset time, It is considered that the user is abnormal, so in step 29, the network access layer device sends a request that the user has gone offline, and the network access layer device notifies the accounting authentication server to stop the user's accounting operation according to its set policy.

In the embodiments described above in FIGS. 2 and 3 , the heartbeat message used includes the following contents: message type, message identifier, message length and message attributes. Among them, the message type is used to identify whether the message is a request message or a response message, and the message identifier is used to match the above messages; message attributes can be set according to needs, and there are four message attributes in this example, one is the user terminal The second is the status of the user terminal, the third is the reason for the heartbeat stop, and the fourth is the adjustment of the heartbeat interval.

In the embodiments described above in FIGS. 2 and 3 , the accounting authentication server is a RADIUS server.

Claims (4)

1. A method for detecting whether a WEB authentication user is online, characterized in that it comprises: Establish a heartbeat process between the user device and the portal server; Step 1: When the user equipment accesses the network, the portal server processes the authentication information and transmits it to the network access server; Step 2: The network access server notifies the accounting and authentication server of the network to process the authentication information delivered by the portal server, and feeds back the result information to the user equipment. When the result information is authentication success information, start the heartbeat processing function of the user equipment; Step 3: The portal server detects whether the WEB authentication user is online through the heartbeat message and the heartbeat response message sent to and from the user equipment. 2. The method for detecting whether a WEB authentication user is online according to claim 1, wherein said step 3 further comprises: The user equipment periodically or non-periodically sends a heartbeat message to the portal server, and the portal server feeds back a heartbeat response message to the user equipment. If the portal server does not receive the heartbeat message sent by the user equipment within the specified time, it sends the The access server sends the user equipment offline request, and the network access server performs the user equipment offline processing. 3. The method for detecting whether a WEB authentication user is online according to claim 1, wherein said step 3 further comprises: The portal server periodically or non-periodically sends a heartbeat message to the user equipment, and the user equipment feeds back a heartbeat response message to the portal server. If the portal server does not receive the heartbeat response message sent by the user equipment within a specified time, The access server sends the user equipment offline request, and the network access server performs the user equipment offline processing. 4. The method for detecting whether a WEB authentication user is online according to claim 1, 2 or 3, wherein the heartbeat message includes: message type, message identifier, and message attribute.

Images