CN1937662A - A method for unified authentication of users in telecommunication voice value-added services - Google Patents

Abstract

The invention discloses a method for user uniform authentication in telecommunication voice value-added service, which comprises a user registration flow, a user login flow and a uniform authentication service flow; the unified authentication service flow comprises the following steps: the registered user selects a certain value added service in the voice flow of the portal service, and the portal service system calls out the service according to the access code of the service and transfers the service to the value added service system; when the value-added service system needs to authenticate the user, the authentication service of the unified authentication platform is called; the unified authentication platform inquires the current active session by the user calling number sent by the value added service system, and inquires whether the user registers the value added service and the associated service account number according to the unified authentication user number stored in the session. The method of the invention adopts a uniform authentication mode, and the user only needs to remember a uniform user name and password, thereby providing convenience for the user to use the service function and forming uniform user experience.

Description

A method for unified authentication of users in telecommunication voice value-added services

technical field

The invention relates to a method for user authentication in the field of communication technology, in particular to a method for unified user authentication in telecommunication voice value-added services.

Background technique

With the gradual improvement of system hardware equipment, the development of the telecom industry is changing from technology-driven to business-driven, and the competition in the telecom operation market is changing from the past "network competition" to "service competition" and "business competition". Therefore, major telecommunication operators attach great importance to telecommunication value-added services, and the value-added services have also been developed rapidly, and the types are becoming more and more abundant. Some operators have more than 100 service systems.

However, at present, various value-added business systems are often self-contained, choosing platforms by themselves, developing and implementing systems by themselves, and lack of connection with each other. In particular, the value-added service systems of different manufacturers are quite different, unable to provide users with a unified user experience, which virtually creates obstacles for users to use and is not conducive to business development.

There are many types of telecom value-added services. Due to the equipment advantages of telecom operators and users' habits, many of them involve the voice interaction process with users, such as telephone bill inquiry, business acceptance, number inquiry, voice mail, transaction processing services such as various telephone banks Business, stock trading, ticket trading, auction commodity trading, fee payment, etc., fax storage and forwarding business, etc. These voice services often have their own access codes, which are inconvenient for users to memorize and use. To integrate these voice services, it is first necessary to establish a voice portal service. The user dials the access code of this portal service and presses a button to enter a different service system under the voice prompt. For example, China Telecom used to have multiple service hotlines such as 112 for fault reporting, 170 for call fee inquiry, 180 for business, and 189 for business acceptance. Now they all use the 10000 customer service hotline. business.

The sub-service of the portal service can be a service system of a different manufacturer from the portal service system. When the portal service is transferred, just initiate an internal call directly, such as 10000 to 112, and the customer service system instructs the exchange to initiate a call with the called number 112 , you can transfer the caller's voice channel to the 112 system. However, since the telephone voice network is a relatively closed network, and its signaling format is relatively fixed, when switching between multiple service systems, especially systems from different manufacturers, the means of transmitting user and service information is very limited.

Figure 1 is a schematic diagram of the system connection mode of the existing business integration. At present, when the telecom voice value-added services are integrated, the switches of each system are connected through the PSTN/PLMN telephone switching network with a digital trunk line (E1), and they are connected to each other through the switching network. The signaling network of the system is controlled.

As shown in Figure 3, it is a schematic diagram of the processing flow of the existing business integration, which includes steps:

1. The user uses the telephone to dial the access code of the portal service to access the telephone switching network;

2. The switching network performs routing analysis according to the called number dialed by the user, and connects to the switch G of the portal service system. The portal service system plays voice to interact with the user, and guides the user to press the button to select the sub-service to be used;

3. The portal service system calls the access code of the value-added service system A according to the service selected by the user, and then transfers it;

4. The switching system performs routing analysis according to the called number transferred by the portal service system, and connects the call path to switch A of value-added service system A. The value-added service system A plays voice to interact with the user. At this time, if some operations need to authenticate the user, the value-added service system A prompts the user to enter the user number and password for authentication. After the authentication is passed, the user is allowed to use the corresponding function;

5. After the user finishes using the sub-service, if he needs to continue to use other service functions, the value-added service system A hangs up and releases the voice channel;

6. The portal service system detects the on-hook message of the value-added service system A, continues to process the service, and plays voice to interact with the user;

7. If the user presses a button to select another sub-service, the portal service system calls out the access code of the value-added service system B for transfer;

8. The switching system performs routing analysis according to the called number transferred by the portal service system, and connects the call path to the switch B of the value-added service system B. The value-added service system B plays voice to interact with the user. Similar to step 4, if certain operations require user identity authentication at this time, the value-added service system B still needs to prompt the user to enter the user number and password of the system for authentication, and the user is allowed to use the corresponding function after the authentication is passed.

From the above process, it can be seen that since there is only loose connection between the value-added service systems and portal service systems, users have to repeatedly perform identity authentication when using different services, and have to memorize different user names and passwords, which is very difficult to use. Convenience, also can not get a unified user experience.

Therefore, there are following deficiencies in the current user authentication method:

1. The user account opening information of each value-added service system is often independent of each other, and users have to remember different user names and passwords, and when they need to change their passwords, they must be modified in each system;

2. The authentication methods and authentication processes of each value-added service system are independent of each other. Users must log in frequently when switching between different value-added services, and single login across systems cannot be realized.

Therefore, there are defects in the prior art and need to be improved and developed.

Contents of the invention

The purpose of the present invention is exactly in order to overcome the above-mentioned defect of prior art, propose a kind of method that can realize the unified authentication of user in the value-added service of telecommunication voice, solve the problem of user identity authentication when switching in the value-added service of telecommunication voice preferably.

Technical scheme of the present invention comprises:

A method for unified user authentication in telecom voice value-added services, which includes a user registration process, a user login process, and a unified authentication service process;

The unified authentication service process includes:

C1. A registered user selects a certain value-added service in the voice process of the portal service, and the portal service system calls out according to the access code of the service, and transfers to the value-added service system;

C2. When the value-added service system needs to perform user authentication, call the authentication service of the unified authentication platform;

C3. The unified authentication platform queries the current active session with the user calling number sent by the value-added service system, and checks whether the user has registered the value-added service and the associated service account according to the unified authentication user number stored in the session;

C4. The unified authentication platform returns the authentication result to the value-added service system;

C5. The value-added service system receives the authentication result message returned by the unified authentication platform, and if the authentication fails, an error prompt is given; if the authentication is successful, it authorizes the user according to the business account number returned by the unified authentication platform.

The method, wherein the user login process includes:

B1. After registration, the user dials the portal service access code, and enters the user number and password of the unified authentication platform;

B2. The portal business system invokes the login service of the unified authentication platform to perform user login authentication;

B3. The unified authentication platform queries user data according to the user number and password input by the user. If the user number exists and the user password is correct, then return a success message to the portal business system, otherwise return an error message and a description of the cause of the error;

B4, if the password entered by the user is correct, the unified authentication platform creates a session according to the user's calling number, which is used to save the login information of the user during this call;

B5. When the user hangs up, the portal service system sends a session end message to the unified authentication platform, and the unified authentication platform ends the session according to the user's calling number.

The method, wherein the user registration process includes:

A1. The unified authentication platform opens an account for new users, sets a unique user number for each user, and sets a password;

A2. The value-added service system opens an account for the new user and sets the user's service account;

A3. The unified authentication platform registers a value-added service account for the user, that is, establishes a corresponding relationship between the user's value-added service system service account and the user number of the unified authentication platform.

The method described above, wherein the unified authentication platform monitors sessions, and if a session is timed out, the unified authentication platform actively terminates the session.

The method for unified authentication of users in a telecom voice value-added service provided by the present invention adopts a unified authentication method, and the user only needs to remember a unified user name and password, and does not need to memorize the user names and passwords of each system separately. And when switching between different business systems, there is no need to repeatedly input user names and passwords for verification, thus providing convenience for users to use business functions and forming a unified user experience.

Description of drawings

Figure 1 is a schematic diagram of the system connection mode of existing business integration;

Fig. 2 is a schematic diagram of the system connection mode implementing the method of the present invention;

Fig. 3 is a schematic diagram of the processing flow of the existing business integration;

Fig. 4 is a schematic diagram of the user registration process of the method of the present invention;

Fig. 5 is a schematic flow chart of user login of the method of the present invention;

Fig. 6 is a schematic flow chart of the unified authentication service of the value-added service system according to the method of the present invention.

Detailed ways

The method of the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.

The method for unified user authentication in telecommunication voice value-added services of the present invention includes a user registration flow, a user login flow and a unified authentication service flow. The user registration process includes:

1.1 The unified authentication platform opens an account for new users, sets a unique user number for each user, and sets a password;

1.2 The value-added service system opens an account for the user and sets the user's business account;

1.3 The unified authentication platform registers a value-added service account for the user, that is, establishes a corresponding relationship between the user's value-added service system service account and the user number of the unified authentication platform.

The user login process includes:

2.1 The user dials the portal service access code, and enters the user number and password of the unified authentication platform;

2.2 The portal business system calls the login service of the unified authentication platform for user login authentication;

2.3 The unified authentication platform queries user data according to the user number and password entered by the user. If the user number exists and the user password is correct, it returns a success message to the portal business system, otherwise it returns an error message and a description of the cause of the error;

2.4 If the password entered by the user is correct, the unified authentication platform will create a session based on the user's calling number to save the user's login information during this call;

2.5 When the user hangs up, the portal service system sends a session end message to the unified authentication platform, and the unified authentication platform ends the session according to the user's calling number;

The unified authentication service process includes:

3.1 The user selects a certain value-added service in the voice process of the portal service, and the portal service system calls out according to the access code of the service, and transfers to the value-added service system;

3.2 When the value-added service system needs to perform user authentication, it calls the authentication service of the unified authentication platform;

3.3 The unified authentication platform queries the current active session with the calling number of the user sent by the value-added service system, and checks whether the user has registered the value-added service and the associated service account according to the unified authentication user number saved in the session;

3.4 The unified authentication platform returns the authentication result to the value-added service system;

3.5 When the value-added service system receives the authentication result message returned by the unified authentication platform, if the authentication fails, an error prompt is given. If the authentication is successful, the user will be authorized according to the business account number returned by the unified authentication platform.

As shown in Figure 2, it is a schematic diagram of the system connection mode of the inventive method, a unified authentication platform is set up on the basis of each business system, and between the unified authentication platform and the portal business system and each value-added business system, the computer Ethernet is used to connect the system. IP protocol is used to connect, therefore, it is necessary to set up interface machines in each business system to connect with the unified authentication platform. Within each business system, the connection between the unified authentication interface machine and its business controller, switch, etc. can be specified by each business system. In this way, data can be transmitted between systems through Ethernet, and due to the flexibility and openness of computer network communication protocols, various required information can be transmitted between systems.

Figure 4 is a schematic flow chart of the user registration of the present invention, and the specific steps of the user registration include:

A1. New users open an account on the unified authentication platform, set a unique user number for each user, and set a password, name, address and other user attributes. For old users, this account opening step can be skipped;

A2. When a user opens a new service, first open an account in the value-added service system;

A3. To register a business account on the unified authentication platform, that is to establish a corresponding relationship between the user's business account and the user number of the unified authentication platform.

As shown in Figure 5, it is a schematic diagram of the user login process of the present invention, which includes specific steps:

B1. The user uses the telephone to dial the portal service access code to access the telephone switching network;

B2. The switching network performs routing analysis according to the called number dialed by the user, and connects to the switch G of the portal service system. The portal service system plays voice to interact with the user, and prompts the user to press the key to enter the user number and password;

B3. The portal business system sends the user number and password input by the user to the interface machine G that interfaces with the unified authentication system through an internal protocol;

B4. The unified authentication interface machine G of the portal business system accesses the unified authentication platform through the TCP/IP network to perform user authentication;

B5. The unified authentication platform verifies the user number and password input by the user, and if correct, creates a login session for the user and saves the user's login information. The unified authentication platform returns the authentication result to the unified authentication interface machine G of the portal business system;

B6. The interface machine G of the unified authentication platform of the portal service system returns the authentication result to its service control machine, and gives feedback to the user.

As shown in Figure 6, it is a schematic flow diagram of the unified authentication service of the value-added service system of the present invention, which specifically includes steps:

C1. After the user login process shown in Figure 5, if the authentication is successful, the portal service system plays a voice to interact with the user, and guides the user to select the value-added service system by pressing keys. After the user selects, the portal service system calls out the access code corresponding to the value-added service for transfer;

C2. The switching system performs routing analysis according to the called number transferred by the portal service system, and connects the call path to the switch A of the value-added service system A;

C3. If user authentication is required, value-added service system A sends the user's calling number to unified authentication interface machine A through an internal protocol;

C4. The unified authentication interface machine A accesses the unified authentication platform through the TCP/IP network to perform user authentication;

C5. The unified authentication platform queries the current active user login session based on the user calling number sent by the value-added service system A. If the user's login session exists, the unified authentication platform judges whether the user is associated with value-added based on the user's business account registration information Business system A. After the query is completed, the unified authentication platform returns the authentication result to the unified authentication interface machine A, including whether the authentication is passed and the user name of the user in this value-added service system;

C6. The unified authentication interface machine A returns the authentication result to the service control machine of the value-added service system A. If the user has logged in and has the authority of the value-added service system A, he can start to use the service functions provided by the value-added service system A normally;

C7. After the user finishes using the sub-service, if the user needs to continue to use other service functions, the value-added service system A hangs up and releases the voice channel;

C8. The portal service system detects the on-hook message of the value-added service system A, continues to process the service, and plays voice to interact with the user;

C9. If the user presses a button to select another sub-service, the portal service system calls out the access code of the value-added service system B for switching;

C10. The switching system performs routing analysis according to the called number transferred by the portal service system, and connects the call path to the switch B of the value-added service system B. Similarly, the value-added service system B can also communicate with the unified authentication platform to query the user's authentication information, and the user is allowed to use the corresponding function only after the authentication is passed.

Take a portal service and three value-added services, call charge query, voice mail, and color ring tone setting as an example. Let the access code of the portal service system be 20000, the call charge query service access code be 20170, and the voice mail service access code be 20166 , and the access code for setting the color ring tone is 2118100.

The concrete embodiment steps of the method of the present invention can comprise:

1. Open an account for a new user on the unified authentication platform, set the user number as 123456 and password as 888888. For old users, this step can be skipped;

2. Open an account for the user in the two value-added service systems of call charge inquiry and voice mail. Let the user's user number in the call charge inquiry service system be 170123, and the user number in the voice mail service be 166456;

3. Register the user's call fee inquiry and voice mail service information in the portal service system, that is, register the corresponding relationship between the portal service system user number 123456, the call charge inquiry service system user number 170123, and the voice mail service user number 166456;

4. The user uses the phone number 87654321 to dial the access code 20000 of the portal service system, and accesses the portal service system through the switched network route. The portal service system plays a voice to the user: "Hello! Welcome to use..., please enter the user number"; the user presses the key After entering the user number 123456, the portal system will play: "Please enter the password"; after the user presses the key to enter the password 888888, the portal system will send the user number and password to the unified authentication platform through the interface machine for authentication;

5. The unified authentication platform checks the user number and password, and if they match, creates a user login session, records the user's login information such as calling number 87654321, user number 123456, login time, etc., and returns the authentication result to the portal business system;

6. If the authentication is passed, the portal system will play a menu tone: "Press 1 for phone bill inquiry, press 2 for voicemail, press 3 for color ring setting...", the user presses 1 to select the call bill inquiry service. The portal system dials out the access code 20170 of the call charge inquiry service system, and transfers the call route to the call charge inquiry system;

7. The call charge query system accesses the unified authentication platform through the interface machine, and authenticates the user's calling number 87654321. The unified authentication platform checks whether there is a calling number 87654321 in the active session, and if so, checks the user number of the call charge query service corresponding to the user number 123456 of the session, and obtains 170123;

8. The unified authentication platform returns an authentication success message to the call charge inquiry system, and returns the user number 170123 of the user in the call charge inquiry service. The call charge query system has passed the authentication, and the user is authorized with the user number 170123, and the user can use the call charge query service as 170123;

9. After the user finishes using the call charge inquiry service, if he chooses to continue the service, the call charge inquiry service hangs up to release the call line, returns to the portal service system, and the portal system plays a voice: "Press 1 for call charge inquiry, press 2 for voicemail, and press CRBT setting 3...";

10. The user presses 2 to select the voicemail service. The portal system dials out 20166 and transfers to the voicemail service system. Like the call fee inquiry service system, the voicemail service system can also obtain the user's authentication information from the unified authentication platform and the user's local User number 166456 in the system. The user can pass the authentication and use the voice mail service as 166456;

11. If the user presses 3 in the portal service system to select the CRBT setting service, the portal system dials out 2118100 and transfers to the CRBT setting service system. The CRBT service system queries the unified authentication platform. Although the user has logged in at this time, since the user has not registered the account information of the CRBT setting service, the unified authentication platform returns an authentication failure message and the reason for the failure. The user cannot pass the authentication and has no right to use this service;

12. If the user finishes using all the services, the caller hangs up to completely release the voice channel, and the portal service system detects this event, sends a user logout message to the unified authentication platform, and deletes the user's login session.

Due to portal business system failure or communication failure, the session end message may be lost, resulting in some expired sessions remaining in the system. Therefore, the unified authentication platform needs to monitor active sessions. If a session is timed out, the timeout period can be configured, for example, 2 hours, and the unified authentication platform can actively terminate the session.

From the above process, it can be seen that by adopting the method of the present invention, the user only needs to perform single sign-on in the portal service system to conveniently use different services that he is entitled to use. There is no need for repeated identity authentication, and only one user name and password need to be memorized, which is convenient to use. At the same time, because each system forms a whole, a better and unified user experience can be obtained.

It should be understood that the above descriptions for specific embodiments are relatively specific, and should not therefore be considered as limiting the scope of the patent protection of the present invention, and the scope of protection of the patent protection of the present invention should be determined by the appended claims.

Claims (4)

1. A method for unified user authentication in telecom voice value-added services, which includes a user registration process, a user login process, and a unified authentication service process; The unified authentication service process includes: C1. A registered user selects a certain value-added service in the voice process of the portal service, and the portal service system calls out according to the access code of the service, and transfers to the value-added service system; C2. When the value-added service system needs to perform user authentication, call the authentication service of the unified authentication platform; C3. The unified authentication platform queries the current active session with the user calling number sent by the value-added service system, and checks whether the user has registered the value-added service and the associated service account according to the unified authentication user number stored in the session; C4. The unified authentication platform returns the authentication result to the value-added service system; C5. The value-added service system receives the authentication result message returned by the unified authentication platform, and if the authentication fails, an error prompt is given; if the authentication is successful, it authorizes the user according to the business account number returned by the unified authentication platform. 2. The method according to claim 1, wherein the user login process includes: B1. After registration, the user dials the portal service access code, and enters the user number and password of the unified authentication platform; B2. The portal business system invokes the login service of the unified authentication platform to perform user login authentication; B3. The unified authentication platform queries user data according to the user number and password input by the user. If the user number exists and the user password is correct, then return a success message to the portal business system, otherwise return an error message and a description of the cause of the error; B4, if the password entered by the user is correct, the unified authentication platform creates a session according to the user's calling number, which is used to save the login information of the user during this call; B5. When the user hangs up, the portal service system sends a session end message to the unified authentication platform, and the unified authentication platform ends the session according to the user's calling number. 3. The method according to claim 1, wherein the user registration process includes: A1. The unified authentication platform opens an account for new users, sets a unique user number for each user, and sets a password; A2. The value-added service system opens an account for the new user and sets the user's service account; A3. The unified authentication platform registers a value-added service account for the user, that is, establishes a corresponding relationship between the user's value-added service system service account and the user number of the unified authentication platform. 4. The method according to any one of claims 1 to 3, wherein the unified authentication platform monitors sessions, and if a session is detected to be timed out, the unified authentication platform actively terminates the session.

Images