CN104702573B - Home network terminal and its automatic right-discriminating method and automatic right-discriminating system - Google Patents

Home network terminal and its automatic right-discriminating method and automatic right-discriminating system Download PDF

Info

Publication number
CN104702573B
CN104702573B CN201310659518.1A CN201310659518A CN104702573B CN 104702573 B CN104702573 B CN 104702573B CN 201310659518 A CN201310659518 A CN 201310659518A CN 104702573 B CN104702573 B CN 104702573B
Authority
CN
China
Prior art keywords
account
certification
business
home network
network terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201310659518.1A
Other languages
Chinese (zh)
Other versions
CN104702573A (en
Inventor
侯象飞
杨轶萌
万象
刘文超
金海�
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Telecom Corp Ltd
Original Assignee
China Telecom Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Telecom Corp Ltd filed Critical China Telecom Corp Ltd
Priority to CN201310659518.1A priority Critical patent/CN104702573B/en
Publication of CN104702573A publication Critical patent/CN104702573A/en
Application granted granted Critical
Publication of CN104702573B publication Critical patent/CN104702573B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources

Abstract

The invention discloses a kind of home network terminal and its automatic right-discriminating method and automatic right-discriminating system, it is related to internet arena.The present invention in home gateway by increasing automatic unified distribution of the account distribution function realization to certification account, it need not be manually entered, function is obtained in home network terminal increase account, and carry out automated validation to management platform using certification account and the binary group information of terminal attribute, realize automatic right-discriminating, the plug and play of each Terminal Type of family, home business is opened and used immediately, so as to reduce O&M cost, lifts Consumer's Experience.Also, management platform is authenticated using binary group information to terminal, the security that business uses can be strengthened.

Description

Home network terminal and its automatic right-discriminating method and automatic right-discriminating system
Technical field
The present invention relates to internet arena, more particularly to a kind of home network terminal and its automatic right-discriminating method and automatic mirror Power system.
Background technology
Various household electrical appliances in family and equipment are networked by computer networking technology, are by network by intelligent home network People provide various abundant, diversified, personalized services.Home gateway as a key equipment in home network, Interacting for household internal information and family's external information can be realized.
When in one new home network terminal of family's gateway down-hanging, such as in family's gateway down-hanging set top box, external Access point(Abbreviation AP)During etc. equipment, new home network terminal needs to carry out networking checking and parameter configuration, these work ratios It is more complicated and professional stronger, it is necessary to which technical staff is carried out manually.
With gradually increasing and the complication of business for lower extension terminal, manually mode carries out networking checking and parameter Configuration, networking, slow, poor user experience, O&M cost are high, have not adapted to current form of service, it is necessary to improve.
The content of the invention
It is an object of the invention to:Realize home network terminal automatic right-discriminating.
Another object of the present invention is:The security that enhancing business uses.
A further object of the present invention is:Home network unified account number authentication pattern is built, realizes all kinds of business of family It is one-stop open-minded.
One side according to embodiments of the present invention, a kind of home network terminal automatic right-discriminating method is proposed, including:Family The network terminal accesses home gateway, and receives the log-on message that home gateway issues, and the log-on message includes certification account;Family Binary authentication information is sent to management platform by the network terminal, and the binary authentication information includes certification account and terminal attribute, with Just management platform authentication verification account is to confirm user identity, and verifies terminal attribute to determine whether user applies for corresponding industry Business, and the configuration template of corresponding service is issued after in binary certification;Home network terminal accesses corresponding according to configuration template Business platform so as to the business provided using the business platform.
In one embodiment, by being obtained during home gateway networking certification, be that home network is unified recognizes the certification account Demonstrate,prove account.
In one embodiment, terminal attribute includes set top box, videophone, security device, the first-class family of network shooting Network terminal type, but not limited to this.
In one embodiment, configuration template includes the service fulfillment such as business platform address and business account, using must The related service parameter of palpus, but not limited to this.
In one embodiment, home network terminal accesses corresponding business platform to use the industry according to configuration template The business that business platform provides, including:Home network terminal accesses corresponding business platform, and upper journalism according to business platform address Business account is authenticated, the business provided after by certification using the business platform.
Another aspect according to embodiments of the present invention, a kind of home network terminal is proposed, including:Account acquisition module, For accessing home gateway, and the log-on message that home gateway issues is received, the log-on message includes certification account;Information transfer Module, for binary authentication information to be sent into management platform, the binary authentication information includes certification account and terminal attribute, with Just management platform authentication verification account is to confirm user identity, and verifies terminal attribute to determine whether user applies for corresponding industry Business, and the configuration template of corresponding service is issued after in binary certification;Service Processing Module, for being accessed according to configuration template Corresponding business platform is so as to the business provided using the business platform.
In one embodiment, configuration template includes business platform address and business account;Service Processing Module, it is specific to use In accessing corresponding business platform according to business platform address, and reporting service account is authenticated, and is used after by certification The business that the business platform provides.
Another aspect according to embodiments of the present invention, a kind of home network terminal automatic right-discriminating system is proposed, including:Before State home network terminal, home gateway and management platform;Home gateway includes account distribution module, for the home network to access Network terminal issues log-on message, and the log-on message includes certification account;Management platform, for authentication verification account to confirm user Identity, and terminal attribute is verified to determine whether user applies for corresponding service, and corresponding service is issued after in binary certification Configuration template.
It is of the invention to realize that the automatic unification to certification account is distributed by increasing account distribution function in home gateway, without It is manually entered, obtains function in home network terminal increase account, and believe using certification account and two tuples of terminal attribute Automatic right-discriminating, the plug and play for management platform progress automated validation, realizing each Terminal Type of family are ceased, home business is immediately open-minded And use, so as to reduce O&M cost, lift Consumer's Experience.Also, management platform is recognized terminal using binary group information Card, can strengthen the security that business uses.In addition, the certification account of all kinds of business of unified family, realizes all kinds of business of family It is one-stop open-minded.
By referring to the drawings to the present invention exemplary embodiment detailed description, further feature of the invention and its Advantage will be made apparent from.
Brief description of the drawings
In order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing There is the required accompanying drawing used in technology description to be briefly described, it should be apparent that, drawings in the following description are only this Some embodiments of invention, for those of ordinary skill in the art, without having to pay creative labor, may be used also To obtain other accompanying drawings according to these accompanying drawings.
Fig. 1 is the schematic flow sheet of home network terminal automatic right-discriminating method one embodiment of the present invention.
Fig. 2 is the structural representation of home network terminal automatic right-discriminating system one embodiment of the present invention.
Fig. 3 is the structural representation of home network terminal one embodiment of the present invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out clear, complete Site preparation describes, it is clear that described embodiment is only part of the embodiment of the present invention, rather than whole embodiments.Below Description only actually at least one exemplary embodiment is illustrative, is never used as to the present invention and its application or makes Any restrictions.Based on the embodiment in the present invention, those of ordinary skill in the art are not making creative work premise Lower obtained every other embodiment, belongs to the scope of protection of the invention.
Unless specifically stated otherwise, the part and positioned opposite, the digital table of step otherwise illustrated in these embodiments Do not limited the scope of the invention up to formula and numerical value.
It may be not discussed in detail for technology, method and apparatus known to person of ordinary skill in the relevant, but suitable In the case of, the technology, method and apparatus should be considered as authorizing part for specification.
Manually mode carries out networking checking and parameter to needs during for hanging new terminal under home gateway in the prior art Configuration, it is impossible to adapt to current form of service, the shortcomings that slow networking, poor user experience, high O&M cost be present.The present invention proposes A kind of scheme of home network terminal automatic right-discriminating, it is possible to achieve home network terminal automatic right-discriminating, and business can be strengthened The security used, realize the one-stop open-minded of all kinds of business of family.
Fig. 1 is the schematic flow sheet of home network terminal automatic right-discriminating method one embodiment of the present invention.
As shown in figure 1, the home network terminal automatic right-discriminating method of the present embodiment comprises the following steps:
S101, home network terminal access home gateway.
Home network terminal can access home network by communication mode known to wired mode or wireless mode etc., right This present invention does not limit.
S102, home gateway issue log-on message to the home network terminal of access, and home network terminal receives home network The log-on message issued is closed, the log-on message includes certification account.
In one embodiment, home gateway obtains in networking certification and preserves log-on message.Log-on message includes recognizing Account is demonstrate,proved, certification account is the unified certification account of home network, i.e., each terminal in home network uses identical certification account Number, so as to the certification account of all kinds of business of unified family, realize the one-stop open-minded of all kinds of business of family.
Binary authentication information is sent to management platform by S103, home network terminal, and the binary authentication information includes certification Account and terminal attribute.
Wherein, home network terminal can know the terminal attribute of oneself, for example, home network terminal can pass through oneself System file either the mode such as configuration file or hardware setting knows the terminal attribute of oneself.Terminal attribute for example including The first-class home network terminal type of set top box, videophone, security device, network shooting, but not limited to this.
S104, management platform authentication verification account verify terminal attribute whether to determine user to confirm user identity Apply for corresponding service, and the configuration template of corresponding service is issued after in binary certification.
In one embodiment, whether management platform authentication verification account is legal, if certification account is legal, then verifies end Attribute is held to determine whether user applies for corresponding service, if certification account is legal and user has applied for corresponding service, two First certification is by the way that otherwise, if certification account is illegal or user does not apply for corresponding service, binary certification does not pass through.
Wherein, can be according to the conjunction by certification account to be verified in database during management platform authentication verification account Method certification account is searched, if certification account to be verified is verified, recognized in the legitimate authentication account of database It is legal to demonstrate,prove account, otherwise, checking does not pass through.
Wherein, when management platform verifies terminal attribute to determine whether user applies for corresponding service, for example, for terminal category Property be set top box terminal, search user whether apply for IPTV(Web TV)Business, if user applies for IPTV service, test Card passes through, and otherwise, checking does not pass through.In another example for the terminal that terminal attribute is videophone, whether lookup user applies can Phonovision business, if user applies for visual telephone service, it is verified, otherwise, checking does not pass through.
In one embodiment, configuration template includes the service fulfillment such as business platform address and business account, using must The related service parameter of palpus, but not limited to this.By taking set top box as an example, user has applied for IPTV service, then configuration template includes The information such as IPTV service platform address, IPTV service account.By taking videophone as an example, user has applied for visual telephone service, then Configuration template includes the information such as visual telephone service platform address, visual telephone service account.
S105, home network terminal access corresponding business platform to be provided using the business platform according to configuration template Business.
In one embodiment, a kind of step S105 implementation method includes:Home network terminal is according to business platform Location accesses corresponding business platform, and reporting service account is authenticated, and is provided after by certification using the business platform Business.
Below by taking set top box relatively common in home network terminal as an example, the automatic right-discriminating scheme of the present invention is said It is bright.
First, set top box access home gateway, home gateway send certification account to set top box;
Secondly, set top box is by certification account, terminal attribute(Such as:Set top box)Deng information reporting management platform;
Again, management platform first verifies that certification account, after being verified, then verifies terminal attribute whether to determine user Apply for IPTV service, if application IPTV service, management platform issue IPTV configuration templates, such as including IPTV service platform The information such as address, IPTV service account are to set top box;
Finally, after set top box obtains IPTV configuration templates, IPTV service is accessed according to IPTV service platform address automatically and put down Platform, and report IPTV service account to be authenticated, after business platform certification success, IPTV service can be used in user.
Below by taking videophone relatively common in home network terminal as an example, the automatic right-discriminating scheme of the present invention is carried out Explanation.
First, videophone access home gateway, home gateway send certification account to videophone;
Secondly, videophone is by certification account, terminal attribute(Such as:Videophone)Deng information reporting management platform;
Again, management platform first verifies that certification account, after being verified, then verifies terminal attribute whether to determine user Apply for visual telephone service, if application visual telephone service, management platform issue visual telephone service configuration template, such as Including information such as visual telephone service platform address, visual telephone service accounts to videophone;
Finally, it is automatic according to visual telephone service platform address after videophone obtains visual telephone service configuration template Visual telephone service platform is accessed, and reports visual telephone service account to be authenticated, after business platform certification success, user is Visual telephone service can be used.
Fig. 2 is the structural representation of home network terminal automatic right-discriminating system one embodiment of the present invention.
As shown in Fig. 2 the home network terminal automatic right-discriminating system of the present embodiment, including:Home network terminal 21, family Gateway 22 and management platform 23.
Home gateway 22 includes account distribution module 221, for issuing log-on message to the home network terminal 21 of access, The log-on message includes certification account.
As shown in figure 3, home network terminal 21 includes:At account acquisition module 211, information transmission modular 212 and business Manage module 213.Account acquisition module 211, for accessing home gateway, and the log-on message that home gateway issues is received, the note Volume information includes certification account;Information transmission modular 212, for binary authentication information to be sent into management platform, the binary is recognized Card information includes certification account and terminal attribute, so that management platform authentication verification account is to confirm user identity, and verifies end Attribute is held to determine whether user applies for corresponding service, and the configuration template of corresponding service is issued after in binary certification;Industry Business processing module 213, for accessing corresponding business platform according to configuration template so as to the business provided using the business platform.
In one embodiment, configuration template service fulfillment such as including business platform address and business account, use Necessary related service parameter.Service Processing Module 213, put down specifically for accessing corresponding business according to business platform address Platform, and reporting service account is authenticated, the business provided after by certification using the business platform.
Management platform 23, for authentication verification account to confirm user identity, and verify that terminal attribute is to determine user No application corresponding service, and the configuration template of corresponding service is issued after in binary certification.
In one embodiment, whether the authentication verification account of management platform 23 is legal, if certification account is legal, then verifies Terminal attribute is to determine whether user applies for corresponding service, if certification account is legal and user has applied for corresponding service, Binary certification is by the way that otherwise, if certification account is illegal or user does not apply for corresponding service, binary certification is obstructed Cross.
It is of the invention to realize that the automatic unification to certification account is distributed by increasing account distribution function in home gateway, without It is manually entered, obtains function in home network terminal increase account, and believe using certification account and two tuples of terminal attribute Automatic right-discriminating, the plug and play for management platform progress automated validation, realizing each Terminal Type of family are ceased, home business is immediately open-minded And use, so as to reduce O&M cost, lift Consumer's Experience.Also, management platform is recognized terminal using binary group information Card, can strengthen the security that business uses.In addition, the certification account of all kinds of business of unified family, realizes all kinds of business of family It is one-stop open-minded.
One of ordinary skill in the art will appreciate that hardware can be passed through by realizing all or part of step of above-described embodiment To complete, by program the hardware of correlation can also be instructed to complete, described program can be stored in a kind of computer-readable In storage medium, storage medium mentioned above can be read-only storage, disk or CD etc..
The foregoing is only presently preferred embodiments of the present invention, be not intended to limit the invention, it is all the present invention spirit and Within principle, any modification, equivalent substitution and improvements made etc., it should be included in the scope of the protection.

Claims (10)

1. a kind of home network terminal automatic right-discriminating method, including:
Home network terminal accesses home gateway, and receives the log-on message that home gateway issues, and the log-on message includes certification Account, the certification account are the unified certification accounts of home network;
Binary authentication information is sent to management platform by home network terminal, and the binary authentication information includes certification account and terminal Attribute, so that management platform authentication verification account is to confirm user identity, and terminal attribute is verified to determine whether user applies Corresponding service, and the configuration template of corresponding service is issued after in binary certification;
Home network terminal accesses corresponding business platform so as to the business provided using the business platform according to configuration template.
2. according to the method for claim 1, it is characterised in that the certification account during home gateway networking certification by obtaining.
3. according to the method for claim 1, it is characterised in that terminal attribute is set including set top box, videophone, security protection Standby, IP Camera.
4. according to the method for claim 1, it is characterised in that configuration template includes business platform address and business account.
5. according to the method for claim 4, it is characterised in that home network terminal accesses corresponding industry according to configuration template Platform be engaged in so as to the business provided using the business platform, including:
Home network terminal accesses corresponding business platform according to business platform address, and reporting service account is authenticated, Pass through the business for using the business platform to provide after certification.
6. a kind of home network terminal, including:
Account acquisition module, for accessing home gateway, and the log-on message that home gateway issues is received, the log-on message includes Certification account, the certification account are the unified certification accounts of home network;
Information transmission modular, for binary authentication information to be sent into management platform, the binary authentication information includes certification account And terminal attribute, so that management platform authentication verification account is to confirm user identity, and verify that terminal attribute is to determine user No application corresponding service, and the configuration template of corresponding service is issued after in binary certification;
Service Processing Module, for accessing corresponding business platform according to configuration template so as to the industry provided using the business platform Business.
7. home network terminal according to claim 6, it is characterised in that terminal attribute include set top box, videophone, Security device, IP Camera.
8. home network terminal according to claim 6, it is characterised in that configuration template includes business platform address and industry Business account;
Service Processing Module, specifically for accessing corresponding business platform according to business platform address, and reporting service account is entered Row certification, the business provided after by certification using the business platform.
9. a kind of home network terminal automatic right-discriminating system, including:Home network terminal described in claim any one of 6-8, Home gateway and management platform;
Home gateway includes account distribution module, for issuing log-on message to the home network terminal of access, the log-on message Including certification account;
Management platform, for authentication verification account to confirm user identity, and terminal attribute is verified to determine whether user applies Corresponding service, and the configuration template of corresponding service is issued after in binary certification.
10. system according to claim 9, it is characterised in that the certification account during home gateway networking certification by obtaining.
CN201310659518.1A 2013-12-09 2013-12-09 Home network terminal and its automatic right-discriminating method and automatic right-discriminating system Active CN104702573B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310659518.1A CN104702573B (en) 2013-12-09 2013-12-09 Home network terminal and its automatic right-discriminating method and automatic right-discriminating system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310659518.1A CN104702573B (en) 2013-12-09 2013-12-09 Home network terminal and its automatic right-discriminating method and automatic right-discriminating system

Publications (2)

Publication Number Publication Date
CN104702573A CN104702573A (en) 2015-06-10
CN104702573B true CN104702573B (en) 2018-04-06

Family

ID=53349347

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310659518.1A Active CN104702573B (en) 2013-12-09 2013-12-09 Home network terminal and its automatic right-discriminating method and automatic right-discriminating system

Country Status (1)

Country Link
CN (1) CN104702573B (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108600190A (en) * 2018-04-03 2018-09-28 四川斐讯信息技术有限公司 A kind of account login method and system based on router
CN113497956A (en) * 2020-04-07 2021-10-12 中国电信股份有限公司 IPTV terminal and automatic configuration method and system thereof
CN113746727A (en) * 2021-09-06 2021-12-03 四川长虹网络科技有限责任公司 Home gateway and home gateway equipment management system
CN115835239A (en) * 2021-09-17 2023-03-21 中兴通讯股份有限公司 Network access method of camera, configuration server, camera and security system
CN115086061B (en) * 2022-06-30 2024-03-22 天翼数字生活科技有限公司 Authentication and network access control method and system for FTTR

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101778024A (en) * 2009-01-08 2010-07-14 闪联信息技术工程中心有限公司 Information registering method and system, equipment access method and system and server of home network
CN101808025A (en) * 2010-04-13 2010-08-18 中兴通讯股份有限公司 Device, system and method for realizing intelligent home application
CN102694670A (en) * 2011-03-23 2012-09-26 中兴通讯股份有限公司 Three-network integration widget management platform, realizing method thereof and system thereof
CN103067231A (en) * 2011-10-24 2013-04-24 中兴通讯股份有限公司 System and method for managing home network application terminal equipment

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101778024A (en) * 2009-01-08 2010-07-14 闪联信息技术工程中心有限公司 Information registering method and system, equipment access method and system and server of home network
CN101808025A (en) * 2010-04-13 2010-08-18 中兴通讯股份有限公司 Device, system and method for realizing intelligent home application
CN102694670A (en) * 2011-03-23 2012-09-26 中兴通讯股份有限公司 Three-network integration widget management platform, realizing method thereof and system thereof
CN103067231A (en) * 2011-10-24 2013-04-24 中兴通讯股份有限公司 System and method for managing home network application terminal equipment

Also Published As

Publication number Publication date
CN104702573A (en) 2015-06-10

Similar Documents

Publication Publication Date Title
CN104702573B (en) Home network terminal and its automatic right-discriminating method and automatic right-discriminating system
CN103428203B (en) Access control method and equipment
CN103179115B (en) The cloud service access control method that a kind of facing cloud television terminal is applied across cloud
CN104639624B (en) A kind of method and apparatus for realizing mobile terminal remote access control
CN107018127A (en) The Internet of Things virtual gateway and node access authentication method of a kind of compatible various protocols
CN101547444B (en) Method for providing special access process to different terminals in WLAN
CN105117657B (en) A kind of design method and system of the open mandate access based on intelligence s ervice
CN104158824B (en) Genuine cyber identification authentication method and system
CN104008325B (en) Mobile phone wireless Wi-Fi on-Internet true name identity authentication platform based on Quick Response Code and method
CN105101206A (en) Automatic WIFI accessing method and system of device
CN103167444B (en) Website obtains the method for subscriber phone number, system, client and server
CN107277812A (en) A kind of wireless network authentication method and system based on Quick Response Code
CN106982430A (en) A kind of portal authentication method and system based on user's use habit
CN206557867U (en) Gate control system based on dynamic two-dimension code
CN102665216A (en) User authentication method for extensible and distributed wireless local area network (WLAN)
CN107222519A (en) A kind of method that remote access to intranet equipment is realized based on outer net
CN105227592A (en) A kind of Internet architecture and implementation method
CN105847287A (en) Resource access control method based on community local area network and system based on community local area network
CN103888435B (en) For the methods, devices and systems of business admission control
CN106941504A (en) A kind of cloud management authority control method and system
CN105656649A (en) Service opening method and device for terminal equipment
CN107295510A (en) The method, equipment and system of Home eNodeB access control are realized based on OCSP
CN104244242A (en) Network number allocation method and corresponding authentication method of Internet-of-things equipment
CN111243137A (en) Intelligent door lock safety management system based on open architecture
CN107707560A (en) Authentication method, system, network access equipment and Portal server

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant