WO2012126433A2 - 访问控制方法、系统及接入终端 - Google Patents

访问控制方法、系统及接入终端 Download PDF

Info

Publication number
WO2012126433A2
WO2012126433A2 PCT/CN2012/076070 CN2012076070W WO2012126433A2 WO 2012126433 A2 WO2012126433 A2 WO 2012126433A2 CN 2012076070 W CN2012076070 W CN 2012076070W WO 2012126433 A2 WO2012126433 A2 WO 2012126433A2
Authority
WO
WIPO (PCT)
Prior art keywords
domain name
address
access terminal
user equipment
access
Prior art date
Application number
PCT/CN2012/076070
Other languages
English (en)
French (fr)
Other versions
WO2012126433A3 (zh
Inventor
李斌
Original Assignee
华为终端有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为终端有限公司 filed Critical 华为终端有限公司
Priority to CN201280000555.5A priority Critical patent/CN102783119B/zh
Priority to PCT/CN2012/076070 priority patent/WO2012126433A2/zh
Priority to EP12761281.0A priority patent/EP2571228B1/en
Priority to JP2013522100A priority patent/JP5502239B2/ja
Publication of WO2012126433A2 publication Critical patent/WO2012126433A2/zh
Priority to US13/717,220 priority patent/US8892640B2/en
Publication of WO2012126433A3 publication Critical patent/WO2012126433A3/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/45—Network directories; Name-to-address mapping
    • H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
    • H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/56—Provisioning of proxy services
    • H04L67/563—Data redirection of data network streams

Definitions

  • the present invention relates to network communication technologies, and in particular, to an access control method, system, and access terminal. Background technique
  • UE User Equipment
  • an access terminal such as a router, a wireless router, or a wireless network card.
  • IP Internet Protocol
  • the terminal directly connects.
  • the inbound terminal initiates a Hypertext Transport Protocol (HTTP) request to the target site; if there is no IP address of the site corresponding to the domain name in the local cache, a domain name system (DNS) query request is generated.
  • HTTP Hypertext Transport Protocol
  • the access terminal performs DNS resolution, obtains the IP address of the target site corresponding to the domain name from the external DNS server, and returns the information to the browser, and the browser caches the correspondence between the domain name of the website and the IP address of the target site, and passes the The access terminal initiates an HTTP request to the target site, and finally displays the content of the webpage of the target site to the user.
  • the access terminal does not obtain the IP address of the target site from the DNS server, and the access terminal returns its own IP address to the browser as a result of DNS resolution, and browses.
  • the device redirects the user to the web management page of the access terminal to provide the dial-up function to the user equipment.
  • the browser caches the correspondence between the URL domain name and the IP address of the access terminal.
  • An embodiment of the present invention provides an access control method, system, and access terminal, which are used to solve a user. The problem of not being able to access the target site.
  • An embodiment of the present invention provides an access control method, including:
  • a Hypertext Transfer Protocol HTTP request message where the destination Internet Protocol IP address sent by the user equipment is an IP address of the access terminal, where the HTTP request message includes a URL domain name; when the URL domain name is not the first The domain name is obtained by the access terminal according to the DNS of the domain name system, and the real IP address corresponding to the domain name of the website is obtained, wherein the first domain name is a domain name corresponding to the IP address of the access terminal;
  • the access terminal controls, according to the real IP address, the user equipment to access a target site corresponding to the domain name of the website.
  • an access terminal including:
  • a receiver configured to receive a hypertext transfer protocol HTTP request message, where the destination internet protocol IP address sent by the user equipment is an IP address of the access terminal, where the HTTP request message includes a web address domain name;
  • the processor configured to: when the domain name is not the first domain name, obtain a real IP address corresponding to the domain name according to the DNS resolution of the domain name system, and control the user equipment to access the website according to the real IP address.
  • Another aspect of the present invention provides an access control system, including: a user equipment, an access terminal, and a domain name system DNS server;
  • the user equipment is configured to send, to the access terminal, a hypertext transfer protocol HTTP request message, where the destination internet protocol IP address is an IP address of the access terminal, where the HTTP request message includes a website domain name;
  • the access terminal includes:
  • a receiver configured to receive the HTTP request message sent by the user equipment
  • the processor configured to: when the domain name is not the first domain name, obtain a real IP address corresponding to the domain name according to the DNS resolution of the domain name system, and control the user equipment to access the website according to the real IP address. a target site corresponding to the domain name, where the first domain name is a domain name corresponding to an IP address of the access terminal;
  • the DNS server is configured to perform the DNS resolution.
  • An access control method, system, and access terminal provided by an embodiment of the present invention are received by an access terminal.
  • the validity of the HTTP request message is determined by comparing the domain name of the URL in the HTTP request message with the domain name corresponding to the IP address of the access terminal;
  • the real IP address corresponding to the domain name is obtained according to the DNS resolution, and the target site corresponding to the domain name of the user device is controlled according to the obtained real IP address, so that the user device can successfully access the target site corresponding to the domain name, and the solution is solved.
  • the URL domain name is entered in the browser on the user device, the browser caches the IP address returned by the access terminal, and the user cannot access the target site.
  • FIG. 1A is a flowchart of an access control method according to an embodiment of the present invention.
  • FIG. 1B is a flowchart of an access control method according to another embodiment of the present invention.
  • FIG. 2A is a flowchart of an access control method according to another embodiment of the present invention.
  • FIG. 2B is a flowchart of an access control method according to another embodiment of the present invention.
  • FIG. 3A is a schematic structural diagram of an access terminal according to an embodiment of the present invention.
  • FIG. 3B is a schematic structural diagram of an access terminal according to another embodiment of the present disclosure.
  • FIG. 4 is a schematic structural diagram of an access control system according to an embodiment of the present invention.
  • the technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention.
  • the embodiments are a part of the embodiments of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.
  • the user equipment appearing in the following embodiments of the present invention includes, but is not limited to, a personal computer (PC), a portable computer, an IP AD, or a smart phone.
  • the access terminal in the following embodiments of the present invention may be a router, a wireless router, or a wireless Internet access Card (such as USB modem), etc., but is not limited to this.
  • the embodiment of the invention provides an access control method.
  • the access control method of the embodiment of the present invention mainly includes:
  • the access terminal receives the HTTP request message that the destination IP address sent by the user equipment is the IP address of the access terminal, and the HTTP request message includes the website domain name.
  • the domain name may be entered by the user in a browser on the user device, and is a domain name used to access the target site corresponding to the domain name of the website.
  • the access terminal is configured according to
  • the DNS resolves to obtain the real IP address corresponding to the domain name of the URL in the HTTP request message. Then, the access terminal controls the user equipment to access the target site corresponding to the domain name according to the obtained real IP address.
  • the first domain name is a domain name corresponding to an IP address of the access terminal.
  • the real IP address refers to the IP address of the target site corresponding to the web domain name.
  • the domain name of the URL in the HTTP request message is not the first domain name.
  • the access terminal determines whether the domain name of the URL in the HTTP request message is the first domain name. That is, the access terminal determines whether the domain name in the HTTP request message is the domain name corresponding to the IP address of the access terminal.
  • the access terminal parses the HTTP request message, obtains the domain name of the website from the HTTP request message, and compares the obtained domain name with the domain name corresponding to the IP address of the access terminal, and determines that the obtained domain name is It is not the domain name corresponding to the IP address of the access terminal.
  • the access terminal locally stores the domain name corresponding to the IP address of the access terminal.
  • the process for the access terminal to obtain the real IP address corresponding to the domain name according to the DNS resolution may be: the access terminal sends a DNS resolution request to the DNS server in the external network, so that the DNS server performs DNS resolution on the domain name of the website. And returning the DNS resolution result, the DNS resolution request includes the URL domain name, that is, the DNS resolution request may be a real IP address corresponding to the domain name of the website; the access terminal receives the URL domain name returned by the DNS server to perform DNS resolution on the domain name.
  • the DNS server refers to a server that stores a correspondence between a domain name and an IP address corresponding to all sites in the network, and has a function of converting the domain name into a corresponding IP address.
  • the access terminal may include one before sending the DNS resolution request to the DNS server.
  • the access terminal When the judgment result is that the access terminal has accessed the external network, the access terminal sends a DNS resolution request to the DNS server in the external network.
  • the external network may be a network that the access terminal can connect to the network, and may be, for example, a fixed network, a wireless mobile network (for example, a 3G network, an LTE network), a WiFi network, or a Zigbee network, or may be a fixed network.
  • Internet access such as mobile networks, WiFi networks, or Zigbee networks.
  • the access terminal in the embodiment of the present invention generally has a local area network (LAN) IP address (which may be referred to as an intranet IP address) and a wide area network (WAN) IP address (which may be referred to as a network). External IP address).
  • the LAN IP address is converted to get the WAN IP address.
  • the IP address of the access terminal may be a LAN IP address of the access terminal.
  • the access terminal after receiving the HTTP request message whose destination IP address is its own IP address, the access terminal compares the domain name corresponding to the IP address in the HTTP request message with the domain name corresponding to the IP address to determine the HTTP request message.
  • Validity When the access terminal determines that the domain name of the HTTP request message is not the domain name corresponding to its own IP address, it indicates that the HTTP request message is the real IP address of the cached access terminal by the user equipment as the URL domain name. The address was sent, so it is an invalid request.
  • the access terminal in this embodiment obtains the real IP address corresponding to the domain name of the HTTP request message according to the DNS resolution, and then controls the user device to access the URL domain name corresponding to the HTTP request message based on the obtained real IP address.
  • the target site solves the problem that the user cannot access the target site because the browser caches the IP address of the access terminal after the web address is entered in the browser on the user device.
  • the user does not need to wait for the IP address and the domain name of the access terminal cached by the user equipment by using the access control method provided by the embodiment. If the corresponding relationship is invalid, the target site corresponding to the URL domain name can be successfully accessed, and the efficiency of accessing the target site is improved. If the user equipment is configured to close the browser on the user equipment and restart, the corresponding relationship between the IP address of the cached access terminal and the domain name of the website is cleared. The access control method provided in this embodiment does not need to shut down the user equipment. The browser on the website can successfully access the target site corresponding to the URL domain name, which improves the efficiency of accessing the target site.
  • the cache time of the user equipment when the cache expiration time is not reached, even if the user closes the browser on the user equipment, the target station cannot be successfully accessed, and the access control method provided in this embodiment is used.
  • the user does not need to close and reopen the browser on the user device, and does not need to wait for the cache time to expire to successfully access the target site corresponding to the URL domain name, thereby improving the efficiency of accessing the target site.
  • the HTTP request message is requested by the user equipment to access the web on the access terminal.
  • the request for the management of the page therefore, the access terminal sends a DNS response message to the user equipment to redirect the user equipment to the web management page on the access terminal, where the DNS response message includes the IP address of the access terminal.
  • the user can dial, manage, and/or parameter the user equipment through the web management page on the access terminal according to actual application requirements. Wait for the operation.
  • the access terminal determines that the access terminal does not access the external network, the DNS resolution request sent by the access terminal cannot reach the external network.
  • the DNS server cannot obtain the real IP address corresponding to the domain name. Therefore, the access terminal can encapsulate the IP address of the access terminal as a DNS resolution result in the DNS response packet, and send the DNS response packet to the user equipment.
  • the user device is redirected to the web management page on the access terminal.
  • the user equipment can perform a dialing operation through the web management page on the access terminal to enable the access terminal to access the external network.
  • the dialing operation described herein refers to performing an operation of accessing an external network, and the result may include successful access to the external network and unsuccessful access to the external network.
  • an implementation manner of the access terminal controlling the user equipment to access the target site corresponding to the domain name according to the obtained real IP address may be: the access terminal initiates HTTP to the user equipment. Orienting the request, so that the user equipment re-initiates an HTTP request for accessing the target site according to the real IP address corresponding to the URL domain name, where the HTTP redirect request includes the real IP address.
  • the method for the user to initiate an HTTP redirect request to the user equipment may be: The access terminal sends an HTTP redirect request packet to the user equipment.
  • the access terminal may place the real IP address in the header field of the HTTP redirection, such as the address field, but is not limited thereto.
  • the HTTP redirect message can be a response code of the HTTP30x series.
  • the HTTP redirect message may be an HTTP response code 300 (multiple choice, multiple choices in English), HTTP response code 301 (permanent transfer, English is moved permanently), depending on the operating system or browser type of the user device.
  • HTTP response code 302 found, found in English
  • HTTP response code 303 see other, see other in English
  • HTTP response code 307 temporary redirect, English temporary redirect
  • the method for the access terminal to send the HTTP redirect request to the user equipment may be: The access terminal sends an HTTP redirect page to the user equipment, where the redirect page includes the real IP address.
  • the redirect page is generally a prompt page.
  • the link information to the real IP address is generally included.
  • the link information to the real IP address may be a browser client script or plugin in the redirect page above.
  • scripts or plugins can include but are not limited to: Javascript, VBScript, Flash, etc.
  • the script or plugin in the redirect page can prompt the user to click or directly control the user device to initiate an HTTP request to the real IP address.
  • the length of the cache expiration time of different user devices is different, and the common ones are 1-3 minutes, ten minutes, etc. Waiting for these lengths is quite long for the user to access the target site. Turning off the browser on the user device and then re-opening is cumbersome, and the manual operation is generally inefficient, which also affects the efficiency of the user accessing the target site.
  • the user equipment may re-issue the HTTP of the target site according to the real IP address in the HTTP redirect request packet or the page. The request does not need to wait for the correspondence between the cached URL domain name and the IP address of the access terminal to be invalid, nor does it need to close the browser on the user device, thereby improving the successful access to the target site. s efficiency.
  • another method for the access terminal to control the user equipment to access the target site corresponding to the domain name according to the obtained real IP address may be: the access terminal replaces the destination IP address of the received HTTP request message with the foregoing After the real IP address is sent, the user equipment accesses the target site corresponding to the web domain name.
  • the access terminal replaces the destination IP address of the received HTTP request message with the real IP address and sends the destination IP address to the target site corresponding to the domain name, which may be: the HTTP request received by the access terminal.
  • the destination IP address of the message is replaced with the real IP address and sent to the target site corresponding to the domain name, so that the user equipment accesses the target site of the URL i or the name.
  • the access terminal after the access terminal obtains the real IP address corresponding to the domain name, the access terminal replaces the IP address of the access terminal in the received HTTP request message with the real IP address, and sends the IP address to the user device.
  • Accessing the target site corresponding to the URL domain name, and the user equipment does not need to wait for the correspondence between the cached URL domain name and the IP address of the access terminal to be invalid, and does not need to close and reopen the browser on the user device, thereby improving the success.
  • the efficiency of accessing the target site is not need to wait for the correspondence between the cached URL domain name and the IP address of the access terminal to be invalid, and does not need to close and reopen the browser on the user device, thereby improving the success. The efficiency of accessing the target site.
  • FIG. 1A is a flowchart of an access control method according to an embodiment of the present invention. As shown in FIG. 1A, the method in this embodiment includes:
  • Step 101 The access terminal receives an HTTP request message that the destination IP address sent by the user equipment is an IP address of the access terminal, where the HTTP request message includes a website domain name.
  • the domain name is the domain name of the target site that the user wants to access, and may be input by the user in a browser on the user device.
  • the destination IP address is the IP address of the access terminal.
  • the domain name of the target site is entered in a browser on the user device.
  • the user equipment queries the mapping between the locally cached domain name and the IP address according to the domain name entered by the user, obtains the IP address corresponding to the domain name, and generates an HTTP request message.
  • the destination IP address of the HTTP request message is an IP address in a correspondence between the domain name of the URL cached by the user equipment and the IP address of the access terminal.
  • the HTTP request message will also include the above URL domain name.
  • the user equipment may place the above-mentioned URL domain name into a Host (Host) field or a Referrer (Referrer) field of the HTTP request message header, but is not limited thereto.
  • the IP address in the correspondence between the domain name and the IP address cached by the user equipment is specifically the IP address of the access terminal.
  • the access terminal uses its own IP address as The DNS resolution result is returned to the user device.
  • the HTTP request message sent by the user equipment carries the identifier of the user equipment, so that the access terminal distinguishes different user equipments.
  • Step 102 The access terminal determines whether the domain name is the first domain name; when the determination result is no, step 103 is performed; when the determination result is yes, step 106 is performed.
  • the first domain name is a domain name corresponding to an IP address of the access terminal.
  • the access terminal locally stores the domain name corresponding to the IP address of the access terminal, that is, the access terminal locally stores the first domain name.
  • the access terminal After receiving the HTTP request message whose destination IP address is its own IP address, the access terminal parses the HTTP request message, obtains the domain name of the website from the HTTP request message (that is, the domain name of the target site that the user requests to access), and then The domain name obtained by the request message is compared with the domain name corresponding to its own IP address to determine whether the HTTP request message is a valid request.
  • the access terminal determines that the domain name obtained from the HTTP request message is the domain name corresponding to the IP address of the access terminal, indicating that the HTTP request message is valid, and the HTTP request message is used by the user equipment.
  • the access terminal After requesting the access to the web management page on the terminal, the access terminal performs step 106, and sends the IP address of the access terminal as an HTTP request result to the user equipment to redirect the user equipment to the web management on the access terminal. page.
  • the access terminal determines that the domain name obtained from the HTTP request message is not the domain name corresponding to the IP address of the access terminal, the HTTP request message is that the user equipment uses the IP address of the access terminal as the above. If the real IP address of the domain name is sent, it is an invalid request, and the access terminal performs step 103 to further determine whether the access terminal accesses the external network to determine whether DNS resolution can be performed to obtain the real IP address for the domain name.
  • Step 103 The access terminal determines whether the access terminal has accessed the external network. When the determination result is yes, step 104 is performed; when the determination result is no, step 107 is performed.
  • the access terminal records the state in which the access terminal accesses the external network.
  • the access terminal can determine whether to access the external network through the recorded status. For example, an access token is set on the access terminal, and the access token is used to identify whether the access terminal has accessed the external network; After the access terminal accesses the external network, the access flag is set to 1; when the access terminal does not access the external network, the access flag is set to 0. Based on this, the access terminal determines whether the access terminal accesses the external network by using the value of the access token.
  • the value of the access tag is not limited to 0 and 1.
  • the access terminal determines that the access terminal has accessed the external network, the access terminal performs step 104, that is, performing DNS resolution to obtain the domain name of the foregoing website. If the access terminal determines that the access terminal has not accessed the external network, the access terminal performs step 107, and sends the IP address of the access terminal to the user equipment as a DNS resolution result to redirect the user equipment to the user equipment. Access the web management page on the terminal to facilitate user equipment to dial-up Internet access.
  • Step 104 The access terminal obtains a real IP address corresponding to the domain name of the website according to the DNS resolution.
  • the access terminal sends a DNS resolution request to the DNS server in the external network, where the DNS resolution request includes the URL domain name.
  • the DNS server receives the DNS resolution request sent by the access terminal, parses the DNS resolution request to obtain the domain name of the URL, and then performs DNS resolution on the domain name, obtains the real IP address corresponding to the domain name, and then sends a DNS response to the access terminal.
  • the message, the DNS response message includes the obtained real IP address.
  • the access terminal receives the DNS response packet returned by the DNS server, and obtains the real IP address corresponding to the domain name of the website from the DNS response packet.
  • Step 105 The access terminal initiates an HTTP redirect request to the user equipment, so that the user equipment re-initiates an HTTP request to access the target station according to the real IP address, where the HTTP redirection request includes the real IP address.
  • the access terminal may send an HTTP redirection packet to the user equipment, and the header field of the HTTP redirection packet carries the real IP address, which is not limited in this embodiment. .
  • the HTTP redirect message may be an HTTP response code 300 (multiple choices),
  • HTTP response code 301 moves permanently
  • HTTP response code 302 found
  • HTTP response code 303 see other
  • HTTP response code 307 temporary redirect
  • the access terminal may send an HTTP redirect page to the user equipment, and carry the foregoing real IP address through the HTTP redirect page. Further, the access terminal may further carry link information to the real IP address in the redirect page, and is used to automatically control the user equipment to re-issue the HTTP request for accessing the target site according to the real IP address.
  • the link information to the real IP address may be a browser client script or a plug-in in the redirect page, but is not limited thereto.
  • scripts or plugins can include but are not limited to: Javascript, VBScript, Flash, etc.
  • the user can input the domain name of the website directly in the browser on the user equipment, without closing the browser on the user equipment or waiting for the user equipment to cache.
  • the corresponding relationship between the IP address of the access terminal and the domain name of the above URL is invalid, and the HTTP request can be re-issued.
  • Step 106 The access terminal sends the IP address of the access terminal to the user equipment as an HTTP request result, to redirect the user equipment to the web management page on the access terminal, and the operation ends.
  • Step 107 The access terminal sends the IP address of the access terminal to the user equipment as a DNS resolution result, and redirects the user equipment to the web management page on the access terminal, and ends the operation.
  • the access terminal when the access terminal determines that the HTTP request message whose destination IP address is its own IP address is an invalid request, it further determines whether the access terminal has accessed the external network, if the access terminal has accessed the external network. Then, according to the DNS resolution, the real IP address corresponding to the domain name of the website is obtained, so that the user does not have to wait for the correspondence between the IP address of the access terminal cached by the user equipment and the domain name of the website to be invalid, and does not need to close and reopen the browser on the user equipment.
  • the HTTP request can be re-issued to access the target site, which improves the efficiency of accessing the target site.
  • the user device If the access terminal does not access the external network, the user device is redirected to the web management page on the access terminal, so that the user can manage through the web.
  • the timely access of the page to the external network is also beneficial to improve the efficiency of accessing the target site to a certain extent.
  • FIG. 1B is a flowchart of an access control method according to another embodiment of the present invention. This embodiment can be implemented based on the embodiment shown in Fig. 1A. As shown in FIG. 1B, the method of this embodiment includes before step 101:
  • Step 100 The access terminal receives a DNS resolution request sent by the user equipment, where the DNS resolution request includes a domain name.
  • Step 100b When the access terminal determines that the access terminal is not connected to the external network, the access terminal sends the IP address of the access terminal to the user equipment as a DNS resolution result, to redirect the user equipment to the web management page on the access terminal.
  • the user equipment accesses the external network through the access terminal.
  • the access terminal can provide a web management page to the user. For example, the user can enter the IP address of the access terminal (for example, 192.168.1.1) or the domain name corresponding to the IP address of the access terminal (for example, mobilewifi.home) in the browser on the user equipment, thereby accessing the web on the access terminal.
  • Management page In the web management page of the access terminal, the user is provided with functions such as dialing, device management, and parameter configuration for accessing the external network. The user can perform operations such as dialing, device management, and parameter configuration through the web management page on the access terminal.
  • the domain name is entered in the browser on the user device; the user device generates a DNS resolution request according to the domain name entered by the user, and sends the request to the access terminal; Whether the access terminal is connected to the external network, if the access terminal is not currently connected to the external network, the access terminal returns the IP address of the access terminal or the domain name corresponding to the IP address of the access terminal to the user equipment as a result of the DNS resolution, thereby The user equipment is redirected to the web management page on the access terminal.
  • the web management page on the access terminal displays the reason why the Internet cannot be accessed and provides access to the external network.
  • the user accesses the web management page on the access terminal. Dial to allow the access terminal to access the external network.
  • the user equipment caches the correspondence between the IP address of the access terminal and the domain name of the above-mentioned website.
  • Step 101 is executed to generate an HTTP request message and send it to the access terminal.
  • the destination IP address of the HTTP request message is the IP address of the access terminal instead of the real IP address corresponding to the above domain name.
  • this embodiment solves the problem that after the user accesses the external network through the web management page on the access terminal (for example, dialing), the user directly inputs the original URL in the browser that presents the web management page on the user equipment.
  • the domain name cannot access the target site, and the user does not need to wait for the corresponding relationship between the cached URL domain name and the IP address of the access terminal to be invalid, and does not need to close and reopen the browser on the user device to successfully access the target.
  • Sites improve the efficiency of accessing target sites.
  • Step a The user inputs the domain name www.xxxxx.com in the browser on the user device, wherein the domain name www.xxxxx.com corresponds to the target site that the user desires to visit.
  • Step b The user equipment sends a DNS resolution request to the access terminal, and the access terminal returns its own IP address, for example, 192.168.1.1, as a DNS query result to the user equipment.
  • Step c The user device caches the DNS resolution result, that is, the real IP address corresponding to the domain name www.xxxxx.com of the user equipment is 192.168.1.1.
  • Step d The user equipment initiates an HTTP request to the access terminal, and presents a web management page on the access terminal on the browser of the user equipment, and the user operates the web management page to dial the Internet.
  • Step e The user does not close the browser on the user device, and enters the domain name www.xxxxx.com in the browser that presents the above web management page on the user device.
  • Step f The user equipment queries the local cache, and directly generates the HTTP request message and sends the IP address 192.168.1.1 of the access terminal in the cache as the real IP address corresponding to the domain name www.xxxxx.com, and does not initiate DNS resolution.
  • Step g After receiving the HTTP request message, the access terminal determines whether the domain name of the HTTP request message header is the domain name corresponding to the IP address of the access terminal. ⁇ Set the IP address of the access terminal The domain name corresponding to 192.168.1.1 is: www.aaaaa.com, and the access terminal determines that the current HTTP request is faulty.
  • Step h After the access terminal determines that the current HTTP request is in error, it continues to determine whether the current access terminal has accessed the external network. If the access terminal has not accessed the external network, the access terminal returns the IP address of the access terminal to the user equipment 192.168. 1.1, to redirect the user equipment to the web management interface on the access terminal; if the access terminal has accessed the external network, perform DNS resolution to the DNS server to obtain the real IP address of the website domain name www.xxxxx.com.
  • Step i After obtaining the real IP address of the website domain name www.xxxxx.com, the access terminal constructs an HTTP redirect request, and sends the real IP address of the domain name www.xxxxx.com to the user equipment through an HTTP redirect request.
  • the specific implementation of the HTTP redirect request may be an HTTP redirect request packet or a redirect page.
  • Step j The user equipment resends the HTTP request message to the access terminal according to the real IP address of the website domain name www.xxxxx.com.
  • Step k After receiving the HTTP request message, the access terminal forwards the HTTP request message, and the user equipment finally accesses the target site corresponding to the domain name www.xxxxx.com.
  • the redirected application scenario in the target site process is also applicable to other redirected application scenarios. For example, in the fixed network, DNS redirection is used to implement load balancing.
  • the principle of load balancing for DNS redirection is as follows: Configure the same name for multiple IP addresses in the DNS server, so that the client that queries the name obtains one of the addresses, so that different clients access different servers to achieve load balancing. .
  • a server fails even if the DNS settings are changed in time, you still have to wait for enough time (for example, a certain refresh time) to function. During this time, clients that have cached the IP address of the failed server will not be able to access the server properly and will not be able to obtain the required services.
  • the IP address of a server changes if the client still caches the original IP address of the server, the client cannot access the server until the IP address of the server is updated.
  • the DNS server may use the control access method provided by the embodiment of the present invention to determine the IP address of the server in the DNS resolution request and the stored IP address of the server when receiving the DNS resolution request sent by the client. Whether the client is consistent or not, or whether the server is faulty according to the IP address of the server in the DNS resolution request. If the result is that the IP address is inconsistent or the server is faulty, the client is redirected to the normal server, so that the client can be timely. Get the services you need.
  • FIG. 2A is a flowchart of an access control method according to still another embodiment of the present invention. As shown in FIG. 2A, the method in this embodiment includes:
  • Step 201 The access terminal receives an HTTP request message that the destination IP address sent by the user equipment is an IP address of the access terminal, where the HTTP request message includes a website domain name.
  • Step 202 The access terminal determines whether the domain name is the first domain name; when the determination result is no, step 203 is performed; when the determination result is yes, step 205 is performed.
  • Step 203 The access terminal determines whether the access terminal has accessed the external network. When the determination result is yes, step 204 is performed; when the determination result is no, step 206 is performed.
  • Step 204 The access terminal sets the destination IP address of the HTTP request message by the access terminal. After the IP address is replaced with the real IP address, it is sent out, so that the user equipment accesses the target site corresponding to the URL domain name.
  • the access terminal determines that the domain name of the HTTP request message is not the domain name corresponding to the IP address of the access terminal, and directly receives the HTTP request message when the access terminal has accessed the external network.
  • the destination IP address is replaced by the IP address of the access terminal and the real IP address corresponding to the domain name in the HTTP request message, and then the HTTP request message after the destination IP address is replaced, so that the user equipment can successfully access the target site, and the solution is resolved.
  • the browser caches the IP address of the access terminal, so that the target site corresponding to the web domain name cannot be successfully accessed.
  • the access control method provided by the embodiment does not need to wait for the corresponding relationship between the IP address of the access terminal cached by the user equipment and the domain name to be invalid, and the domain name can be successfully accessed.
  • the corresponding target site improves the efficiency of accessing the target site. If the user equipment is configured to close the browser on the user equipment and re-open the interface to clear the corresponding relationship between the IP address of the cached access terminal and the domain name, the user does not need to shut down the user by using the access control method provided in this embodiment.
  • the browser on the device can successfully access the target site corresponding to the URL domain name, which improves the efficiency of accessing the target site.
  • the cache expiration time is set for the user equipment
  • the cache expiration time is not reached, even if the user closes and reopens the browser on the user device, the target site cannot be successfully accessed, and the access provided by this embodiment is used.
  • the user does not need to close and reopen the browser on the user device, and does not need to wait for the cache time to expire to successfully access the target site corresponding to the URL domain name, thereby improving the efficiency of accessing the target site.
  • Step 205 The access terminal sends the IP address of the access terminal to the user equipment as an HTTP request result, to redirect the user equipment to the web management page on the access terminal, and the operation ends.
  • Step 206 The access terminal sends the IP address of the access terminal to the user equipment as a DNS resolution result, and redirects the user equipment to the web management page on the access terminal, and ends the operation.
  • steps 205 and 206 can be referred to the descriptions of step 106 and step 107, respectively, and are not described herein again.
  • FIG. 2B is a flowchart of an access control method according to still another embodiment of the present invention.
  • the embodiment is implemented based on the embodiment shown in FIG. 2A.
  • the method in this embodiment includes: Step 200a: The access terminal receives a DNS resolution request sent by the user equipment, and the DNS resolution is performed.
  • the request includes the URL domain name.
  • Step 200b When the access terminal determines that the access terminal is not connected to the external network, the access terminal sends the IP address of the access terminal to the user equipment as a DNS resolution result, to redirect the user equipment to the web management page on the access terminal. .
  • steps 200a and 200b can be referred to the description of step 100a and step 100b, and details are not described herein again.
  • FIG. 3 is a schematic structural diagram of an access terminal according to an embodiment of the present invention. As shown in FIG. 3A, the access terminal of this embodiment includes: a receiver 31 and a processor 32.
  • the receiver 31 is configured to receive a destination IP address sent by the user equipment as an access terminal.
  • An HTTP request message for an IP address including a URL domain name.
  • the processor 32 is connected to the receiver 31, and is configured to obtain, according to the DNS resolution, a real IP address corresponding to the domain name, according to the DNS resolution, when the URL domain name in the HTTP request message received by the receiver 31 is not the first domain name, according to the The real IP address controls the user equipment to access the target site corresponding to the web domain name.
  • the first domain name is a domain name corresponding to an IP address of the access terminal.
  • the domain name of the URL in the HTTP request message received by the receiver 31 is not the first domain name.
  • the processor 32 may parse the HTTP request message, obtain the domain name of the URL from the HTTP request message, and then obtain the domain name of the URL.
  • the domain name corresponding to the IP address of the access terminal is compared, and it is determined whether the obtained domain name is the domain name corresponding to the IP address of the access terminal.
  • the access terminal locally stores the domain name corresponding to the IP address of the access terminal.
  • the access terminal provided in this embodiment can be used to perform the process of the foregoing access control method.
  • the specific working principle is not described here. For details, refer to the description of the method embodiment.
  • the access terminal of this embodiment may include a power module, an input/output interface, a memory, and the like in addition to the receiver and the processor.
  • the processor may be a central processing unit (CPU) for convenience of illustration, and the above components are not shown in the drawings.
  • the access terminal in this embodiment compares the domain name corresponding to the IP address of the access terminal in the HTTP request message to determine the HTTP request message. Validity; when it is determined that the domain name is not the domain name corresponding to the IP address of the access terminal, determining that the HTTP request message is sent by the user equipment as the real IP address of the domain name of the access terminal is an invalid request.
  • the access terminal obtains the real IP address corresponding to the domain name according to the DNS resolution, and controls the target site corresponding to the domain name of the user device according to the real IP address corresponding to the obtained domain name, so that the user device successfully accesses the domain name corresponding to the domain name.
  • the target site solves the problem that the user cannot access the target site corresponding to the URL domain name because the user device caches the IP address of the access terminal after the user enters the domain name in the browser on the user device.
  • the access terminal in this embodiment may enable the user to disable the correspondence between the IP address of the access terminal and the domain name of the access terminal cached by the user equipment, and without closing and reopening the browser on the user equipment. Successful access to the target site corresponding to the URL domain name improves the efficiency of accessing the target site.
  • FIG. 3B is a schematic structural diagram of an access terminal according to another embodiment of the present invention. The embodiment is implemented based on the embodiment shown in FIG. 3A. As shown in FIG. 3B, the access terminal in this embodiment further includes: a transmitter 33.
  • the processor 32 in this embodiment controls the user equipment to access the target site corresponding to the domain name according to the real IP address, and the method includes: the processor 32 is configured to use the IP address of the HTTP request message received by the receiver 31 by the IP address of the access terminal. The address is replaced by the real IP address obtained by the processor 32, and the control sender 33 sends the HTTP request message after replacing the destination IP address, so that the user equipment accesses the target site corresponding to the domain name.
  • the transmitter 33 is connected to the processor 32 for transmitting an HTTP request message after the replacement of the destination IP address under the control of the processor 32.
  • the processor in this embodiment controls the user equipment to access the target site corresponding to the domain name according to the real IP address
  • the method includes: the processor 32 is configured to control the sender 33 to initiate an HTTP redirect request to the user equipment, so that the user equipment
  • the HTTP request to access the target site is re-initiated according to the real IP address obtained by the processor 32.
  • the HTTP redirect request includes the real IP address.
  • the processor 32 is specifically configured to control the sender 33 to initiate an HTTP redirect request to the user equipment, so that the user equipment re-initiates an HTTP request to access the target station according to the real IP address obtained by the processor 32, so as to implement control of the user equipment access URL.
  • the destination of the target site corresponding to the domain name of.
  • the sender 33 is specifically configured to send an HTTP redirect request message or an HTTP redirect page to the user equipment.
  • the HTTP redirect request message or the HTTP redirect page includes the real IP address.
  • the sender 33 is further configured to send, by the processor 32, a DNS response message to the user equipment when the domain name is the first domain name, to redirect the user equipment to the web management page of the access terminal, where
  • the DNS response message includes the IP address of the access terminal.
  • the access terminal provided in this embodiment can be used to perform the process of the foregoing access control method.
  • the specific working principle is not described here. For details, refer to the description of the method embodiment.
  • the access terminal After receiving the HTTP request message of the access terminal itself, the access terminal in this embodiment compares the domain name corresponding to the IP address of the access terminal in the HTTP request message to determine the HTTP request message. Validity; when it is determined that the domain name is not the domain name corresponding to the IP address of the access terminal, determining that the HTTP request message is sent by the user equipment as the real IP address of the domain name of the access terminal is an invalid request. Therefore, the access terminal obtains the real IP address corresponding to the domain name according to the DNS resolution, and controls the target site corresponding to the domain name of the user device according to the real IP address corresponding to the domain name, so that the user device successfully accesses the target site corresponding to the domain name.
  • the access terminal in this embodiment can enable the user equipment to invalidate the correspondence between the IP address of the access terminal and the domain name of the access terminal that is not required to be cached by the user equipment, and does not need to close and reopen the browser on the user equipment.
  • the target site corresponding to the URL domain name can be successfully accessed, which improves the efficiency of accessing the target site.
  • FIG. 4 is a schematic structural diagram of an access control system according to an embodiment of the present invention. As shown in FIG. 4, the system of this embodiment includes: a user equipment 41, an access terminal 42, and a DNS server 43.
  • the user equipment 41 is configured to send the destination IP address to the access terminal 42 as an access terminal.
  • An HTTP request message for an IP address including a URL domain name.
  • the access terminal 42 of this embodiment includes: a receiver and a processor.
  • the receiver is configured to receive an HTTP request message sent by the user equipment 41.
  • a processor configured to be connected to the receiver, configured to: when the URL domain name in the HTTP request message received by the receiver is not the first domain name, obtain a real IP address corresponding to the domain name according to the DNS resolution, according to the true The real IP address controls the user equipment to access the target site corresponding to the web domain name.
  • the first domain name is a domain name corresponding to an IP address of the access terminal.
  • the access terminal 42 of this embodiment may further include a transmitter.
  • the DNS server 43 is used for DNS resolution.
  • the process of performing DNS resolution by the DNS server 43 may include: receiving a DNS resolution request sent by a processor of the access terminal 42, where the DNS resolution request includes a URL domain name in the HTTP request message.
  • the DNS server performs DNS resolution on the domain name of the URL in the DNS resolution request, obtains the real IP address corresponding to the domain name, and returns the obtained real IP address to the processor of the access terminal 42 as a result of the DNS resolution.
  • the user equipment 41 is connected to the receiver of the access terminal 42, and the DNS server 43 is connected to the processor of the access terminal 42.
  • the structure of the access terminal 42 of this embodiment can be referred to the description of the embodiment shown in FIG. 3A.
  • the access terminal after receiving the HTTP request message whose destination IP address is the access terminal itself, the access terminal compares the domain name corresponding to the IP address of the access terminal in the HTTP request message. Determining the validity of the HTTP request message; determining that the HTTP domain name is not the domain name corresponding to the IP address of the access terminal, determining that the HTTP request message is that the user equipment sends the IP address of the access terminal as the real IP address of the website domain name According to the DNS resolution, the access terminal obtains the real IP address corresponding to the domain name, and controls the target site corresponding to the domain name of the user device according to the real IP address, so that the user equipment can successfully access the target corresponding to the domain name.
  • the user does not need to wait for the correspondence between the IP address of the access terminal cached by the user equipment and the domain name of the website to be invalid, and the browser on the user device can be successfully accessed without closing and reopening the browser on the user device, thereby improving the access to the target site. effectiveness.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Information Transfer Between Computers (AREA)
  • Small-Scale Networks (AREA)

Description

访问控制方法、 系统及接入终端
技术领域 本发明涉及网络通信技术， 尤其涉及一种访问控制方法、 系统及接入终 端。 背景技术
用户设备 ( User Equipment, UE )通常通过路由器、 无线路由器或无线 上网卡等接入终端来访问网络。 当用户在用户设备上的浏览器中输入网址域 名后， 浏览器会查询本地緩存， 如果本地緩存中有与该网址域名对应的目标 站点的网际协议 ( Internet Protocol, IP )地址， 则直接通过接入终端向该目标 站点发起超文本传输协议（Hypertext Transport Protocol, HTTP )请求； 如果 本地緩存中没有与该网址域名对应的站点的 IP 地址， 则生成域名系统 ( Domain Name System, DNS )查询请求发送给接入终端， 由接入终端进行 DNS解析， 从外部 DNS服务器得到网址域名对应的目标站点的 IP地址并返 回给浏览器， 浏览器緩存网址域名与目标站点的 IP地址的对应关系， 并通过 接入终端向该目标站点发起 HTTP请求， 最终将目标站点的网页内容显示给 用户。
在上述过程中， 如果用户设备未连接上网， 接入终端不会从 DNS服务器 得到上述目标站点的 IP地址， 接入终端会将其自身的 IP地址作为 DNS解析 的结果返回给浏览器，通过浏览器将用户重定向到接入终端的 Web管理页面， 以向用户设备提供拨号上网的功能。 在该过程中， 浏览器会緩存上述网址域 名和接入终端的 IP地址的对应关系。 当用户设备可以访问互联网络后， 用户 在用户设备上的浏览器中输入原网址域名， 浏览器不再发起 DNS解析， 而是 直接使用緩存中对应的接入终端的 IP地址发起 HTTP请求， 用户再次看到接 入终端的 Web管理页面， 导致用户不能访问到目标站点。 发明内容
本发明实施例提供一种访问控制方法、 系统及接入终端， 用以解决用户 不能访问目标站点的问题。
本发明实施例一方面提供一种访问控制方法， 包括：
接入终端接收用户设备发送的目的网际协议 IP地址为所述接入终端的 IP 地址的超文本传输协议 HTTP请求消息，所述 HTTP请求消息包括网址域名； 当所述网址域名不是所述第一域名时， 所述接入终端根据域名系统 DNS 解析， 获取所述网址域名对应的真实 IP地址， 其中， 所述第一域名为所述接 入终端的 IP地址对应的域名；
所述接入终端根据所述真实 IP地址控制所述用户设备访问所述网址域名 对应的目标站点。
本发明实施例另一方面提供一种接入终端， 包括：
接收器， 用于接收用户设备发送的目的网际协议 IP地址为所述接入终端 的 IP地址的超文本传输协议 HTTP请求消息， 所述 HTTP请求消息包括网址 域名；
处理器， 用于在所述网址域名不是所述第一域名时， 根据域名系统 DNS 解析， 获取所述网址域名对应的真实 IP地址， 根据所述真实 IP地址控制所 述用户设备访问所述网址域名对应的目标站点， 其中， 所述第一域名为所述 接入终端的 IP地址对应的域名。
本发明实施例又一方面提供一种访问控制系统， 包括： 用户设备、 接入 终端和域名系统 DNS服务器；
所述用户设备， 用于向所述接入终端发送目的网际协议 IP地址为所述接 入终端的 IP地址的超文本传输协议 HTTP请求消息 , 所述 HTTP请求消息包 括网址域名；
所述接入终端包括：
接收器， 用于接收所述用户设备发送的所述 HTTP请求消息；
处理器， 用于在所述网址域名不是所述第一域名时， 根据域名系统 DNS 解析， 获取所述网址域名对应的真实 IP地址， 根据所述真实 IP地址控制所 述用户设备访问所述网址域名对应的目标站点， 其中， 所述第一域名为所述 接入终端的 IP地址对应的域名；
所述 DNS服务器， 用于进行所述 DNS解析。
本发明实施例提供的访问控制方法、 系统及接入终端， 接入终端接收到 目的 IP地址为接入终端本身的 HTTP请求消息后， 通过将 HTTP请求消息中 的网址域名与接入终端的 IP地址对应的域名进行比较， 判断该 HTTP请求消 息的有效性； 当判断出 HTTP请求消息无效时， 根据 DNS解析获取网址域名 对应的真实 IP地址并根据获取的真实 IP地址控制用户设备访问网址域名对 应的目标站点， 从而使用户设备可以成功访问到网址域名对应的目标站点， 解决了在用户设备上的浏览器中输入网址域名后因浏览器緩存有接入终端返 回的 IP地址这一特性而导致用户不能访问到目标站点的问题。 附图说明
为了更清楚地说明本发明实施例或现有技术中的技术方案， 下面将对实 施例或现有技术描述中所需要使用的附图作一简单地介绍， 显而易见地， 下 面描述中的附图是本发明的一些实施例， 对于本领域普通技术人员来讲， 在 不付出创造性劳动性的前提下， 还可以根据这些附图获得其他的附图。
图 1A为本发明一实施例提供的访问控制方法的流程图；
图 1B为本发明另一实施例提供的访问控制方法的流程图；
图 2A为本发明又一实施例提供的访问控制方法的流程图；
图 2B为本发明又一实施例提供的访问控制方法的流程图；
图 3A为本发明一实施例提供的接入终端的结构示意图；
图 3B为本发明另一实施例提供的接入终端的结构示意图；
图 4为本发明一实施例提供的访问控制系统的结构示意图。 具体实施方式 为使本发明实施例的目的、 技术方案和优点更加清楚， 下面将结合本发 明实施例中的附图， 对本发明实施例中的技术方案进行清楚、 完整地描述， 显然， 所描述的实施例是本发明一部分实施例， 而不是全部的实施例。 基于 本发明中的实施例， 本领域普通技术人员在没有作出创造性劳动前提下所获 得的所有其他实施例， 都属于本发明保护的范围。
首先说明， 在本发明以下实施例中出现的用户设备包括但不限于： 个人 计算机（ Personal Computer, PC ) 、 便携机、 IP AD或智能手机。
本发明以下实施例中的接入终端可以是路由器、 无线路由器或无线上网 卡（例如 USB modem )等， 但不限于此。
在此说明， 本发明以下各实施例中用户设备执行的各种操作， 具体可以 由用户设备上的浏览器执行， 但不限于此。
本发明实施例提供一种访问控制方法。 本发明实施例的访问控制方法主 要包括：
接入终端接收用户设备发送的目的 IP地址为接入终端的 IP地址的 HTTP 请求消息， 该 HTTP请求消息中包括网址域名。 其中， 该网址域名可以是用 户在用户设备上的浏览器中输入的， 是用以访问该网址域名对应的目标站点 的域名。
当上述 HTTP请求消息中的网址域名不是第一域名时， 接入终端根据
DNS解析，获取 HTTP请求消息中的网址域名对应的真实 IP地址； 然后接入 终端根据获取的真实 IP地址控制用户设备访问所述网址域名对应的目标站 点。 其中， 第一域名为接入终端的 IP地址对应的域名。 所述真实 IP地址是 指所述网址域名对应的目标站点的 IP地址。 其中， 上述 HTTP请求消息中的 网址域名不是第一域名， 具体的， 接入终端在接收到 HTTP请求消息后， 会 判断 HTTP请求消息中的网址域名是否是第一域名。 也就是说， 接入终端判 断 HTTP请求消息中的网址域名是否是接入终端的 IP地址对应的域名。 具体 的， 接入终端对 HTTP请求消息进行解析， 从 HTTP请求消息中获取上述网 址域名，然后将获取到的网址域名与接入终端的 IP地址对应的域名进行比较， 判断获取到的网址域名是不是接入终端的 IP地址对应的域名。 其中， 接入终 端本地会存储接入终端的 IP地址对应的域名。
可选的， 接入终端根据 DNS解析， 获取网址域名对应的真实 IP地址的 过程可以是： 接入终端向外部网络中的 DNS服务器发送 DNS解析请求， 以 使 DNS服务器对上述网址域名进行 DNS解析并返回 DNS解析结果，该 DNS 解析请求包括上述网址域名，即该 DNS解析请求可以是查询上述网址域名对 应的真实 IP地址； 接入终端接收 DNS服务器对上述网址域名进行 DNS解析 返回的网址域名对应的真实 IP地址。 所述 DNS服务器是指保存有网络中所 有站点对应的网址域名和 IP地址的对应关系， 并具有将网址域名转换为对应 IP地址的功能的服务器。
基于上述， 接入终端向 DNS服务器发送 DNS解析请求之前可包括一可 选步骤： 接入终端判断接入终端是否已经接入外部网络。 具体的， 接入终端 上记录有接入终端是否接入外部网络的状态， 接入终端可以通过所记录的状 态判断是否接入外部网络。 举例说明， 接入终端上设置接入标记， 该接入标 记用于标识接入终端是否已经接入外部网络； 当接入终端接入外部网络后， 该接入标记被设置为 1 ; 当接入终端未接入外部网络时， 该接入标记被设置 为 0。 基于此， 接入终端通过接入标记的取值确定接入终端是否接入外部网 络。 其中， 接入标记的取值并不限于 0和 1。
当判断结果为接入终端已经接入外部网络时， 所述接入终端向外部网络 中的 DNS服务器发送 DNS解析请求。
其中， 所述外部网络可以是所述接入终端能够连接网络的网络， 例如可 以是固网、 无线移动网络（例如 3G网络、 LTE网络） 、 WiFi网络或 Zigbee 网络等， 还可以是通过固网、 移动网络、 WiFi网络或 Zigbee网络等接入到的 互联网络。
在此说明， 本发明实施例中的接入终端通常具有局域网 （Local Area Network, LAN ) IP地址（可称为网内 IP地址）和广域网（ Wide Area Network, WAN ) IP地址（可称为网外 IP地址 )。 LAN IP地址经过转换可以得到 WAN IP地址。在本发明实施例中，所述接入终端的 IP地址可以是接入终端的 LAN IP地址。
在本实施例中， 接入终端接收到目的 IP地址为自身 IP地址的 HTTP请 求消息后， 通过将 HTTP请求消息中的网址域名与自身 IP地址对应的域名进 行比较， 以判断该 HTTP请求消息的有效性； 当接入终端判断出 HTTP请求 消息中的网址域名不是自身 IP地址对应的域名时，说明上述 HTTP请求消息 是由用户设备将緩存的接入终端的 IP地址作为网址域名对应的真实 IP地址 发送的，因此是无效请求。基于上述判断结果，本实施例的接入终端根据 DNS 解析， 获取 HTTP请求消息中的网址域名对应的真实 IP地址， 然后基于获取 的真实 IP地址控制用户设备访问 HTTP请求消息中的网址域名对应的目标站 点， 解决了在用户设备上的浏览器中输入网址域名后因浏览器緩存有接入终 端的 IP地址的特性而导致用户不能访问到目标站点的问题。
另外， 对于用户设备设置了緩存失效时间的情况， 使用本实施例提供的 访问控制方法， 用户无需等待用户设备緩存的接入终端的 IP地址与网址域名 的对应关系失效即可成功访问到网址域名对应的目标站点， 提高了访问目标 站点的效率。 对于用户设备设置了关闭用户设备上的浏览器并重启即可清除 緩存的接入终端的 IP地址与网址域名的对应关系的情况，使用本实施例提供 的访问控制方法， 用户不需要关闭用户设备上的浏览器即可成功访问到网址 域名对应的目标站点， 提高了访问目标站点的效率。 在此说明， 对于用户设 备设置了緩存失效时间的情况， 在緩存失效时间未到达时， 即使用户关闭用 户设备上的浏览器也无法成功访问目标站点， 而使用本实施例提供的访问控 制方法， 用户既不需要关闭并重新打开用户设备上的浏览器， 也不需要等待 緩存时间失效即可成功访问到网址域名对应的目标站点， 提高了访问目标站 点的效率。
进一步， 当 HTTP请求消息中的网址域名是第一域名， 即 HTTP请求消 息中的网址域名是接入终端的 IP地址对应的域名时，说明该 HTTP请求消息 是用户设备请求接入终端上的 Web管理页面的请求， 因此， 接入终端向用户 设备发送 DNS应答报文， 以将用户设备重定向到接入终端上的 Web管理页 面， 所述 DNS应答报文包括接入终端的 IP地址。 在该情况下， 用户设备被 重定向到接入终端上的 Web管理页面之后， 用户可以根据实际应用需求， 通 过接入终端上的 Web管理页面对用户设备进行拨号、设备管理和 /或参数配置 等操作。
进一步， 在 HTTP请求消息中的网址域名不是第一域名的情况下， 如果 接入终端判断出接入终端未接入外部网络， 此时， 接入终端发送的 DNS解析 请求无法到达外部网络中的 DNS服务器，无法获取上述网址域名对应的真实 IP地址， 因此， 接入终端可以将接入终端的 IP地址作为 DNS解析结果封装 在 DNS应答报文中， 将 DNS应答报文发送给用户设备以将用户设备重定向 到接入终端上的 Web管理页面。 在该情况下， 用户设备被重定向到接入终端 上的 Web管理页面之后， 用户设备可以通过接入终端上的 Web管理页面进 行拨号操作， 以使接入终端接入外部网络。 在此说明， 此处所述进行拨号操 作是指执行接入外部网络的操作， 其结果可以包括成功接入外部网络和未成 功接入外部网络。
可选的，接入终端根据所获取的真实 IP地址控制用户设备访问网址域名 对应的目标站点的一种实施方式可以是： 接入终端向用户设备发起 HTTP重 定向请求， 以使用户设备根据网址域名对应的真实 IP地址重新发起访问上述 目标站点的 HTTP请求， 所述 HTTP重定向请求包括上述真实 IP地址。
可选的，接入终端向用户设备发起 HTTP重定向请求的实施方式可以是： 接入终端向用户设备发送 HTTP重定向请求报文。
较为优选的，接入终端可以将上述真实 IP地址可以置入 HTTP重定向才艮 文的头部 （Header )字段中， 例如地址（Location )字段中， 但不限于此。
其中， HTTP重定向报文可以是 HTTP30x系列的响应码。 其中， 根据用 户设备的操作系统或浏览器类型的不同， HTTP重定向报文可以是 HTTP响 应码 300 (多重选择， 英文为 multiple choices ) 、 HTTP响应码 301 (永久转 移，英文为 moved permanently )、 HTTP响应码 302 (已找到，英文为 found )、 HTTP响应码 303 (参见其他， 英文为 see other )或 HTTP响应码 307 (临时 重定向， 英文为 temporary redirect ) , 但不限于 jth。
可选的， 接入终端向用户设备发送 HTTP重定向请求的实施方式还可以 是： 接入终端向用户设备发送 HTTP重定向页面， 该重定向页面包括上述真 实 IP地址。
其中， 重定向页面一般是提示性页面， 除了包括上述真实 IP地址外， 一 般还会包括指向真实 IP地址的链接信息。 其中， 指向真实 IP地址的链接信 息可以是上述重定向页面中的浏览器客户端脚本或插件。 其中， 脚本或插件 可以包括但不限于： Javascript、 VBScript, Flash等。 重定向页面中的脚本或 插件可以提示用户点击或者直接控制用户设备向真实的 IP地址发起 HTTP请 求。 例如， 在 Javascript中， 上述指向真实 IP地址的链接信息的一种实现结 构可以是： window.location.href= "http:〃[真实 IP地址]" 。
通常， 不同用户设备的緩存失效时间的长度不同， 常见的是 1-3分钟、 十几分钟等， 等待这些长度的时间对用户访问目标站点来说是比较漫长的。 而关闭用户设备上的浏览器再重新打开， 操作比较繁瑣， 且手动操作其效率 一般比较低， 也影响用户访问目标站点的效率。 在本发明实施例中， 当用户 设备接收到接入终端返回的 HTTP重定向请求报文或页面后， 可以直接根据 HTTP 重定向请求报文或页面中的真实 IP 地址重新发出访问目标站点的 HTTP请求， 而不需要等待緩存的网址域名和接入终端的 IP地址之间的对应 关系的失效， 也不需要关闭用户设备上的浏览器， 提高了成功访问目标站点 的效率。
可选的，接入终端根据所获取的真实 IP地址控制用户设备访问网址域名 对应的目标站点的另一种实施方式可以是： 接入终端将接收到的 HTTP请求 消息的目的 IP地址替换为上述真实 IP地址后发送出去， 以使用户设备访问 网址域名对应的目标站点。 其中， 接入终端将接收到的 HTTP请求消息的目 的 IP地址替换为上述真实 IP地址后发送出去， 以使用户设备访问网址域名 对应的目标站点， 可以为： 接入终端将接收到的 HTTP请求消息的目的 IP地 址替换为上述真实 IP地址后发送给网址域名对应的目标站点， 以使用户设备 访问网址 i或名 3†应的目标站点。
在该实施方式中， 接入终端获取到网址域名对应的真实 IP地址后， 将接 收到的 HTTP请求消息中的接入终端的 IP地址替换为真实 IP地址并发送出 去， 也可以使用户设备成功访问到网址域名对应的目标站点， 并且用户设备 无需等待緩存的网址域名和接入终端的 IP地址之间的对应关系的失效， 也不 需要关闭并重新打开用户设备上的浏览器，提高了成功访问目标站点的效率。
图 1A为本发明一实施例提供的访问控制方法的流程图。 如图 1A所示， 本实施例的方法包括：
步骤 101、接入终端接收用户设备发送的目的 IP地址为接入终端的 IP地 址的 HTTP请求消息 , 该 HTTP请求消息包括网址域名。
其中， 所述网址域名是用户希望访问的目标站点的域名， 可以是用户在 用户设备上的浏览器中输入的。 上述目的 IP地址为接入终端的 IP地址。
具体的， 当用户需要访问某个站点 （记为目标站点） 时， 会在用户设备 上的浏览器中输入目标站点的网址域名。 用户设备根据用户输入的网址域名 查询本地緩存的网址域名与 IP地址的对应关系， 获取该网址域名对应的 IP 地址 , 然后生成 HTTP请求消息。
该 HTTP请求消息的目的 IP地址为用户设备緩存的网址域名与接入终端 的 IP地址的对应关系中的 IP地址。 该 HTTP请求消息还会包括上述网址域 名。 较为优选的， 用户设备可以将上述网址域名置入 HTTP请求消息头部的 主机（Host )字段或者引用（Referrer )字段， 但不限于此。 例如， 除了在 Host 字段或者 Referrer字段中携带上述网址域名之外， 还可以通过其他字段携带 上述网址域名。 在本实施例中， 用户设备緩存的网址域名与 IP地址的对应关系中的 IP 地址具体为接入终端的 IP地址。 可选的， 如果接入终端在接收到用户设备发 送的 HTTP请求消息之前， 接收到用户设备发送的 DNS解析请求， 并且接入 终端尚未接入外部网络， 则接入终端将自身的 IP地址作为 DNS解析结果返 回给用户设备。
本领域普通技术人员可以理解的是用户设备发出的 HTTP请求消息中携 带有用户设备的标识， 以便于接入终端区分不同的用户设备。
步骤 102、 接入终端判断上述网址域名是否是第一域名； 当判断结果为 否时， 执行步骤 103; 当判断结果为是时， 执行步骤 106。
其中， 第一域名为接入终端的 IP地址对应的域名。 接入终端本地会存储 接入终端的 IP地址对应的域名， 即接入终端本地会存储第一域名。
当接入终端接收到目的 IP地址为自身 IP地址的 HTTP请求消息后， 对 HTTP请求消息进行解析， 从 HTTP请求消息中获取网址域名 （即用户请求 访问的目标站点的域名） ， 然后将从 HTTP请求消息中获取的网址域名与自 身的 IP地址对应的域名进行比较，以判断该 HTTP请求消息是否为有效请求。
如果判断结果为是， 即接入终端判断出从 HTTP请求消息中获取的网址 域名是接入终端的 IP地址对应的域名， 说明该 HTTP请求消息是有效的， 该 HTTP请求消息是用户设备用于请求接入终端上的 Web管理页面的请求， 则 接入终端执行步骤 106, 即将接入终端的 IP地址作为 HTTP请求结果发送给 用户设备， 以将用户设备重定向到接入终端上的 Web管理页面。
如果判断结果为否， 即接入终端判断出从 HTTP请求消息中获取的网址 域名不是接入终端的 IP地址对应的域名时，说明上述 HTTP请求消息是用户 设备将接入终端的 IP地址作为上述网址域名的真实 IP地址发送的， 是无效 请求， 则接入终端执行步骤 103 , 即进一步判断接入终端是否接入外部网络， 以判断是否可以进行 DNS解析为上述网址域名获取真实 IP地址。
步骤 103、 接入终端判断接入终端是否已接入外部网络； 当判断结果为 是时， 执行步骤 104; 当判断结果为否时， 执行步骤 107。
在本实施例中， 接入终端记录有接入终端是否接入外部网络的状态。 接 入终端可以通过所记录的状态判断是否接入外部网络。 举例说明， 接入终端 上设置接入标记， 该接入标记用于标识接入终端是否已经接入外部网络； 当 接入终端接入外部网络后， 该接入标记被设置为 1 ; 当接入终端未接入外部 网络时， 该接入标记被设置为 0。 基于此， 接入终端通过接入标记的取值确 定接入终端是否接入外部网络。 其中， 接入标记的取值并不限于 0和 1。
在上述网址域名不是接入终端自身 IP地址对应的域名的情况下， 如果接 入终端判断出接入终端已接入外部网络， 则接入终端执行步骤 104, 即进行 DNS解析为上述网址域名获取真实 IP地址；如果接入终端判断出接入终端尚 未接入外部网络，则接入终端执行步骤 107,即将接入终端的 IP地址作为 DNS 解析结果发送给用户设备， 以将用户设备重定向到接入终端上的 Web管理页 面， 以便于用户设备进行拨号上网等操作。
步骤 104、 接入终端根据 DNS解析， 获取上述网址域名对应的真实 IP 地址。
具体的，接入终端向外部网络中的 DNS服务器发送 DNS解析请求， DNS 解析请求包括上述网址域名。 DNS服务器接收接入终端发送的 DNS解析请 求， 对 DNS 解析请求进行解析获取其中的网址域名， 然后对网址域名进行 DNS解析， 获取该网址域名对应的真实 IP地址， 然后向接入终端发送 DNS 应答报文， 该 DNS应答报文包括所获取的真实 IP地址。 接入终端接收 DNS 服务器返回的 DNS应答报文， 从 DNS应答报文中获取上述网址域名对应的 真实 IP地址。
步骤 105、 接入终端向用户设备发起 HTTP重定向请求， 以使用户设备 根据上述真实 IP地址重新发起访问目标站点的 HTTP请求， 所述 HTTP重定 向请求包括上述真实 IP地址。
在本实施例的一个可选实施方式中，接入终端可以向用户设备发送 HTTP 重定向报文， 通过 HTTP重定向报文的头部字段携带上述真实 IP地址， 本实 施例对此不进行限定。
可选的， HTTP重定向报文可以是 HTTP响应码 300 ( multiple choices )、
HTTP响应码 301 ( moved permanently )、 HTTP响应码 302 ( found )、 HTTP 响应码 303 ( see other )或 HTTP响应码 307 ( temporary redirect ) , 但不限于 此。
在本实施例的一个可选实施方式中，接入终端可以向用户设备发送 HTTP 重定向页面， 通过 HTTP重定向页面携带上述真实 IP地址。 进一步，接入终端还可以在上述重定向页面中携带指向上述真实 IP地址 的链接信息， 用于自动控制用户设备根据上述真实 IP地址重新发出访问目标 站点的 HTTP请求。 其中， 指向真实 IP地址的链接信息可以是上述重定向页 面中的浏览器客户端脚本或插件， 但不限于此。
其中， 脚本或插件可以包括但不限于： Javascript, VBScript, Flash等。 对用户来说， 当用户设备接收上述网址域名的真实 IP地址后， 可以直接 在用户设备上的浏览器中输入上述网址域名， 而不需要关闭用户设备上的浏 览器也不需要等待用户设备緩存的接入终端的 IP地址与上述网址域名的对应 关系失效， 可以重新发出 HTTP请求。
步骤 106、 接入终端将接入终端的 IP地址作为 HTTP请求结果发送给用 户设备， 以将用户设备重定向到接入终端上的 Web管理页面， 结束操作。
步骤 107、接入终端将接入终端的 IP地址作为 DNS解析结果发送给用户 设备， 以将用户设备重定向到接入终端上的 Web管理页面， 结束操作。
在本实施例中， 当接入终端判断出目的 IP地址为自身 IP地址的 HTTP 请求消息为无效请求时， 通过进一步判断接入终端是否已接入外部网络， 如 果接入终端已接入外部网络， 则根据 DNS解析获取网址域名对应的真实 IP 地址，使用户可以不用等待用户设备緩存的接入终端的 IP地址与网址域名的 对应关系失效， 也不需要关闭并重新打开用户设备上的浏览器即可重新发出 HTTP请求访问目标站点， 提高了访问目标站点的效率； 如果接入终端未接 入外部网络， 则将用户设备重定向到接入终端上的 Web管理页面， 以使用户 通过 Web管理页面及时进行接入外部网络的操作， 在一定程度上也有利于提 高访问目标站点的效率。
图 1B为本发明另一实施例提供的访问控制方法的流程图。本实施例可基 于图 1A所示实施例实现。 如图 1B所示， 本实施例的方法在步骤 101之前包 括：
步骤 100a、 接入终端接收用户设备发送的 DNS解析请求， 该 DNS解析 请求包括网址域名。
步骤 100b、 接入终端在判断出接入终端未接入外部网络时， 将接入终端 的 IP地址作为 DNS解析结果发送给用户设备， 以将用户设备重定向到接入 终端上的 Web管理页面。 在本实施例中， 用户设备通过接入终端访问外部网络。 接入终端可以向 用户提供一个 Web管理页面。 例如， 用户可以在用户设备上的浏览器中输入 接入终端的 IP地址（例如 192.168.1.1 )或接入终端的 IP地址对应的域名 (例 如 mobilewifi.home ) , 从而访问接入终端上的 Web管理页面。 在接入终端的 Web管理页面中向用户提供了接入外部网络的拨号、 设备管理、 参数配置等 功能， 用户通过接入终端上的 Web管理页面可以进行拨号、 设备管理、 参数 配置等操作。
当用户要访问一个站点 （记为目标站点） 时， 在其用户设备上的浏览器 中输入网址域名；用户设备根据用户输入的网址域名生成 DNS解析请求发送 给接入终端； 接入终端判断接入终端是否接入外部网络， 如果接入终端当前 尚未接入外部网络， 接入终端将接入终端的 IP地址或接入终端的 IP地址对 应的域名作为 DNS解析结果返回给用户设备，从而将用户设备重定向到接入 终端上的 Web管理页面， 在接入终端上的 Web管理页面中会显示无法上网 的原因并提供接入外部网络的功能； 用户通过接入终端上的 Web管理页面进 行拨号， 以使接入终端接入外部网络。
在上述过程中， 用户设备会緩存接入终端的 IP地址与上述网址域名的对 应关系。
在本实施例中， 当接入终端接入外部网络后， 用户可以直接在用户设备 上呈现有 Web管理页面的浏览器中输入上述网址域名， 此时， 用户设备查询 本地緩存， 将所緩存的接入终端的 IP地址作为上述网址域名的真实 IP地址， 不会再发起 DNS解析， 而是执行步骤 101 , 即生成 HTTP请求消息并发送给 接入终端。 HTTP请求消息的目的 IP地址为接入终端的 IP地址而不是上述网 址域名对应的真实 IP地址。
由此可见， 本实施例解决了用户通过接入终端上的 Web管理页面进行接 入外部网络的操作 (例如拨号）后， 用户直接在用户设备上呈现有 Web管理 页面的浏览器中输入原网址域名而无法访问到目标站点的问题， 并且用户不 需要等待緩存的网址域名与接入终端的 IP地址的对应关系失效， 也不需要关 闭并重新打开用户设备上的浏览器即可成功访问到目标站点， 提高了访问目 标站点的效率。
下面结合实际应用场景对本发明实施例做进一步说明。 假设该应用场景 为用户要访问网址域名为 www.xxxxx.com的目标站点， 接入终端当前未接入 外部网络， 其状态满足重定向条件。 则用户访问网址域名为 www.xxxxx.com 的目标站点的具体过程如下：
步骤 a、用户在用户设备上的浏览器中输入网址域名 www.xxxxx.com, 其 中， 网址域名 www.xxxxx.com对应用户期望访问的目标站点。
步骤 b、 用户设备向接入终端发送 DNS解析请求， 而接入终端将自身的 IP地址， 例如 192.168.1.1 , 作为 DNS的查询结果返回给用户设备。
步骤 c、 用户设备緩存这一 DNS 解析结果， 即用户设备认为网址域名 www.xxxxx.com对应的真实 IP地址为 192.168.1.1。
步骤 d、 用户设备向接入终端发起 HTTP请求， 在用户设备的浏览器上 呈现接入终端上的 Web管理页面， 用户操作 Web管理页面进行拨号上网。
步骤 e、用户不关闭用户设备上的浏览器，再次在用户设备上呈现有上述 Web管理页面的浏览器中输入网址域名 www.xxxxx.com。
步骤 f、 用户设备查询本地緩存， 直接将緩存中接入终端的 IP 地址 192.168.1.1作为网址域名 www.xxxxx.com对应的真实 IP,生成 HTTP请求消 息并发送， 而不再发起 DNS解析。
步骤 g、 接入终端接收到 HTTP请求消息后， 判断 HTTP请求消息头部 的网址域名是否为接入终端的 IP地址对应的域名。 ^^设接入终端的 IP地址 192.168.1.1对应的域名为： www.aaaaa.com,接入终端判定当前 HTTP请求出 错。
步骤 h、 接入终端判定当前 HTTP请求出错后， 继续判断当前接入终端 是否已接入外部网络， 如果接入终端尚未接入外部网络， 则还是向用户设备 返回接入终端的 IP 地址 192.168.1.1 , 以将用户设备重定向到接入终端上的 Web管理界面； 如果接入终端已接入外部网络， 则向 DNS服务器进行 DNS 解析， 得到网址域名 www.xxxxx.com的真实 IP地址。
步骤 i、 接入终端得到网址域名 www.xxxxx.com的真实的 IP地址后， 构 造 HTTP重定向请求， 通过 HTTP重定向请求将网址域名 www.xxxxx.com的 真实的 IP地址发送给用户设备。
其中， HTTP重定向请求的具体实现方式可以是 HTTP重定向请求报文 或重定向页面。 步骤 j、 用户设备根据网址域名 www.xxxxx.com的真实的 IP地址重新向 接入终端发送 HTTP请求消息。
步骤 k、 接入终端接收到 HTTP请求消息后， 将 HTTP请求消息转发出 去， 用户设备最终访问到网址域名 www.xxxxx.com对应的目标站点。 目标站点过程中的重定向应用场景， 对于其他重定向应用场景同样适用。 例 如， 在固网中利用 DNS重定向实现负载均衡的应用场景。
DNS重定向实现负载均衡的原理是： 在 DNS服务器中为多个 IP地址配 置同一个名字， 使得查询该名字的客户端获得其中一个地址， 从而不同客户 端访问不同的服务器， 达到负载均衡的目的。 但当某一服务器失效， 即使及 时修改了 DNS设置， 还是要等待足够的时间（例如一定刷新时间 )才能发挥 作用。 在此期间， 緩存了故障服务器的 IP地址的客户端将不能正常访问该服 务器， 无法获得所需服务。 或者， 在某个服务器的 IP地址更改时， 如果客户 端緩存的仍是该服务器的原 IP地址， 此时， 客户端在该服务器的 IP地址被 更新前也不能访问该服务器。 针对上述问题， DNS服务器可以采用本发明实 施例提供的控制访问方法， 在接收到客户端发送的 DNS解析请求时， 通过判 断 DNS解析请求中的服务器的 IP地址与所存储的该服务器的 IP地址是否一 致， 或者根据 DNS解析请求中的服务器的 IP地址判断相应服务器是否发生 故障， 在判断结果为 IP地址不一致或者服务器发生故障时， 将客户端重定向 到正常的服务器上， 使得客户端可以及时获取到所需的服务。
图 2A为本发明又一实施例提供的访问控制方法的流程图。如图 2A所示， 本实施例的方法包括：
步骤 201、接入终端接收用户设备发送的目的 IP地址为接入终端的 IP地 址的 HTTP请求消息 , 该 HTTP请求消息包括网址域名。
步骤 202、 接入终端判断上述网址域名是否是第一域名； 当判断结果为 否时， 执行步骤 203; 当判断结果为是时， 执行步骤 205。
步骤 203、 接入终端判断接入终端是否已接入外部网络； 当判断结果为 是时， 执行步骤 204; 当判断结果为否时， 执行步骤 206。
上述步骤 201-步骤 203可参见步骤 101-步骤 103的描述，在此不再赘述。 步骤 204、 接入终端将上述 HTTP请求消息的目的 IP地址由接入终端的 IP地址替换为上述真实 IP地址后发送出去，以使用户设备访问上述网址域名 对应的目标站点。
在本实施例中， 接入终端判断出 HTTP请求消息中的网址域名不是接入 终端的 IP地址对应的域名， 且在接入终端已接入外部网络时， 直接将接收到 的 HTTP请求消息的目的 IP地址由接入终端的 IP地址替换为 HTTP请求消 息中的网址域名对应的真实 IP地址， 然后将替换目的 IP地址后的 HTTP请 求消息发送出去， 使得用户设备可以成功访问目标站点， 解决了现有技术中 在用户设备上的浏览器中输入网址域名后因浏览器緩存有接入终端的 IP地址 导致不能成功访问网址域名对应的目标站点的问题。
另外， 对于用户设备设置了緩存失效时间的情况， 使用本实施例提供的 访问控制方法， 用户无需等待用户设备緩存的接入终端的 IP地址与网址域名 的对应关系失效即可成功访问到网址域名对应的目标站点， 提高了访问目标 站点的效率。 对于用户设备设置了关闭用户设备上的浏览器并重新打开即可 清除緩存的接入终端的 IP地址与网址域名的对应关系的情况，使用本实施例 提供的访问控制方法， 用户不需要关闭用户设备上的浏览器即可成功访问到 网址域名对应的目标站点， 提高了访问目标站点的效率。 在此说明， 对于用 户设备设置了緩存失效时间的情况， 在緩存失效时间未到达时， 即使用户关 闭并重新打开用户设备上的浏览器也无法成功访问目标站点， 而使用本实施 例提供的访问控制方法，用户既不需要关闭并重新打开用户设备上的浏览器， 也不需要等待緩存时间失效即可成功访问到网址域名对应的目标站点， 提高 了访问目标站点的效率。
步骤 205、 接入终端将接入终端的 IP地址作为 HTTP请求结果发送给用 户设备， 以将用户设备重定向到接入终端上的 Web管理页面， 结束操作。
步骤 206、接入终端将接入终端的 IP地址作为 DNS解析结果发送给用户 设备， 以将用户设备重定向到接入终端上的 Web管理页面， 结束操作。
上述步骤 205和步骤 206可分别参见步骤 106和步骤 107的描述， 在此 不再赘述。
图 2B为本发明又一实施例提供的访问控制方法的流程图。本实施例基于 图 2A所示实施例实现，如图 2B所示，本实施例的方法在步骤 201之前包括： 步骤 200a、 接入终端接收用户设备发送的 DNS解析请求， 该 DNS解析 请求包括网址域名。
步骤 200b、 接入终端在判断出接入终端未接入外部网络时， 将接入终端 的 IP地址作为 DNS解析结果发送给用户设备， 以将用户设备重定向到接入 终端上的 Web管理页面。
上述步骤 200a和步骤 200b可参见步骤 100a和步骤 100b的描述， 在此 不再赘述。
由此可见， 本实施例解决了用户设备通过接入终端上的 Web管理页面接 入外部网络后， 用户直接在用户设备上呈现有 Web管理页面的浏览器中输入 原网址域名而无法访问到目标站点的问题， 并且用户不需要等待用户设备緩 存的网址域名与接入终端的 IP地址的对应关系失效， 也不需要关闭并重新打 开用户设备上的浏览器即可成功访问到目标站点， 提高了访问目标站点的效 率。
图 3A为本发明一实施例提供的接入终端的结构示意图。 如图 3A所示， 本实施例的接入终端包括： 接收器 31和处理器 32。
其中， 接收器 31 , 用于接收用户设备发送的目的 IP地址为接入终端的
IP地址的 HTTP请求消息 , 该 HTTP请求消息包括网址域名。
处理器 32, 与接收器 31连接， 用于在接收器 31接收到的 HTTP请求消 息中的网址域名不是第一域名时， 根据 DNS解析， 获取所述网址域名对应的 真实 IP地址， 根据所述真实 IP地址控制用户设备访问所述网址域名对应的 目标站点。 其中， 第一域名为接入终端的 IP地址对应的域名。
接收器 31接收到的 HTTP请求消息中的网址域名不是第一域名，具体的， 处理器 32可以对 HTTP请求消息进行解析，从 HTTP请求消息中获取上述网 址域名，然后将获取到的网址域名与接入终端的 IP地址对应的域名进行比较， 判断获取到的网址域名是不是接入终端的 IP地址对应的域名。 其中， 接入终 端本地会存储接入终端的 IP地址对应的域名。
本实施例提供的接入终端可用于执行上述访问控制方法实施例的流程， 其具体工作原理不再赘述， 详见方法实施例的描述。
在此说明， 本实施例的接入终端除具有接收器、 处理器之外， 还可以包 括电源模块、 输入输出接口、 存储器等部件。 其中， 处理器可以为中央处理 单元（ Central Processing Unit, CPU ) 为便于图示， 附图中未示出上述部件。 本实施例的接入终端接收到目的 IP地址为接入终端本身的 HTTP请求消 息后， 通过将 HTTP请求消息中的网址域名与接入终端的 IP地址对应的域名 进行比较， 判断该 HTTP请求消息的有效性； 当判断出网址域名不是接入终 端的 IP地址对应的域名时， 确定上述 HTTP请求消息是用户设备将接入终端 的 IP地址作为网址域名的真实 IP地址发送的， 是无效请求， 因此接入终端 根据 DNS解析， 获取网址域名对应的真实 IP地址， 并根据获取的网址域名 对应的真实 IP地址控制用户设备访问网址域名对应的目标站点， 进而使用户 设备成功访问到网址域名对应的目标站点， 解决了用户在用户设备上的浏览 器中输入网址域名后因用户设备緩存有接入终端的 IP地址这一特性而导致用 户不能访问到网址域名对应的目标站点的问题。 另外， 本实施例的接入终端 可以使用户在无需等待用户设备所緩存的接入终端的 IP地址与网址域名的对 应关系失效， 也无需关闭并重新打开用户设备上的浏览器的情况下即可成功 访问网址域名对应的目标站点， 提高了访问目标站点的效率。
图 3B为本发明另一实施例提供的接入终端的结构示意图。本实施例基于 图 3A所示实施例实现， 如图 3B所示， 本实施例的接入终端还包括： 发送器 33。
本实施例中的处理器 32根据真实 IP地址控制用户设备访问网址域名对 应的目标站点， 包括： 处理器 32用于将接收器 31接收到的 HTTP请求消息 的目的 IP地址由接入终端的 IP地址替换为处理器 32获取到的真实 IP地址， 控制发送器 33将替换目的 IP地址后的 HTTP请求消息发送出去， 以使用户 设备访问网址域名对应的目标站点。
相应地， 发送器 33与处理器 32连接， 用于在处理器 32的控制下将替换 目的 IP地址后的 HTTP请求消息发送出去。
另外， 本实施例中的处理器根据真实 IP地址控制用户设备访问所述网址 域名对应的目标站点， 包括： 处理器 32用于控制发送器 33向用户设备发起 HTTP重定向请求，以使用户设备根据处理器 32获取的真实 IP地址重新发起 访问目标站点的 HTTP请求。其中， HTTP重定向请求包括所述真实 IP地址。
其中， 处理器 32具体可用于控制发送器 33向用户设备发起 HTTP重定 向请求， 以使用户设备根据处理器 32获取的真实 IP地址重新发起访问目标 站点的 HTTP请求， 以实现控制用户设备访问网址域名对应的目标站点的目 的。
可选的，发送器 33具体可用于向用户设备发送 HTTP重定向请求报文或 HTTP重定向页面。 所述 HTTP重定向请求报文或 HTTP重定向页面包括所 述真实 IP地址。
进一步， 发送器 33还可用于在处理器 32的控制下在网址域名是第一域 名时， 向用户设备发送 DNS应答报文， 以将用户设备重定向到接入终端的 Web管理页面， 所述 DNS应答报文包括接入终端的 IP地址。
本实施例提供的接入终端可用于执行上述访问控制方法实施例的流程， 其具体工作原理不再赘述， 详见方法实施例的描述。
本实施例的接入终端接收到目的 IP地址为接入终端本身的 HTTP请求消 息后， 通过将 HTTP请求消息中的网址域名与接入终端的 IP地址对应的域名 进行比较， 判断该 HTTP请求消息的有效性； 当判断出网址域名不是接入终 端的 IP地址对应的域名时， 确定上述 HTTP请求消息是用户设备将接入终端 的 IP地址作为网址域名的真实 IP地址发送的， 是无效请求， 因此接入终端 根据 DNS解析， 获取网址域名对应的真实 IP地址， 并根据网址域名对应的 真实 IP地址控制用户设备访问网址域名对应的目标站点，使用户设备成功访 问到网址域名对应的目标站点， 解决了用户在用户设备上的浏览器中输入网 址域名后因用户设备緩存有接入终端的 IP地址这一特性而导致用户不能访问 到网址域名对应的目标站点的问题。 另外， 本实施例的接入终端可以使用户 设备在无需等待用户设备所緩存的接入终端的 IP地址与网址域名的对应关系 失效， 也无需关闭并重新打开用户设备上的浏览器的情况下即可成功访问网 址域名对应的目标站点， 提高了访问目标站点的效率。
图 4为本发明一实施例提供的访问控制系统的结构示意图。如图 4所示， 本实施例的系统包括： 用户设备 41、 接入终端 42和 DNS服务器 43。
其中， 用户设备 41 , 用于向接入终端 42发送目的 IP地址为接入终端的
IP地址的 HTTP请求消息 , 该 HTTP请求消息包括网址域名。
本实施例的接入终端 42包括： 接收器和处理器。
其中， 接收器， 用于接收用户设备 41发送的 HTTP请求消息。 处理器， 与接收器连接， 用于在接收器接收到的 HTTP请求消息中的网址域名不是第 一域名时， 根据 DNS解析， 获取网址域名对应的真实 IP地址， 根据所述真 实 IP地址控制用户设备访问所述网址域名对应的目标站点。 其中， 第一域名 为接入终端的 IP地址对应的域名。
可选的， 本实施例的接入终端 42还可以包括发送器。
DNS服务器 43 ,用于进行 DNS解析。可选的， DNS服务器 43进行 DNS 解析的过程可以包括： 接收接入终端 42的处理器发送的 DNS解析请求， 该 DNS解析请求包括 HTTP请求消息中的网址域名。 DNS服务器 43对 DNS解 析请求中的网址域名进行 DNS解析， 获取网址域名对应的真实 IP地址， 然 后将获取的真实 IP地址作为 DNS解析结果返回给接入终端 42的处理器。
可选的， 用户设备 41与接入终端 42的接收器连接， DNS服务器 43与 接入终端 42的处理器连接。
在此说明， 本实施例的接入终端 42的结构可参见图 3A所示实施例的描 述， 其工作原理可参见上述方法实施例的描述， 在此不再赘述。
在本实施例的访问控制系统中，接入终端接收到目的 IP地址为接入终端 本身的 HTTP请求消息后， 通过将 HTTP请求消息中的网址域名与接入终端 的 IP地址对应的域名进行比较， 判断该 HTTP请求消息的有效性； 当判断出 网址域名不是接入终端的 IP地址对应的域名时， 确定上述 HTTP请求消息是 用户设备将接入终端的 IP地址作为网址域名的真实 IP地址发送的， 是无效 请求， 进一步接入终端根据 DNS解析， 获取网址域名对应的真实 IP地址， 并根据真实 IP地址控制用户设备访问网址域名对应的目标站点，使得用户设 备可以成功访问网址域名对应的目标站点， 同时用户无需等待用户设备緩存 的接入终端的 IP地址与网址域名的对应关系失效， 也无需关闭并重新打开用 户设备上的浏览器即可成功访问到目标站点， 提高了访问目标站点的效率。
本领域普通技术人员可以理解： 实现上述方法实施例的全部或部分步骤 可以通过程序指令相关的硬件来完成， 前述的程序可以存储于一计算机可读 取存储介质中， 该程序在执行时， 执行包括上述方法实施例的步骤； 而前述 的存储介质包括： ROM、 RAM, 磁碟或者光盘等各种可以存储程序代码的介 质。
最后应说明的是： 以上各实施例仅用以说明本发明的技术方案， 而非对 其限制； 尽管参照前述各实施例对本发明进行了详细的说明， 本领域的普通 技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改， 或者对其中部分或者全部技术特征进行等同替换； 而这些修改或者替换， 并 不使相应技术方案的本质脱离本发明各实施例技术方案的范围。

Claims

权 利 要求 书
1、 一种访问控制方法， 其特征在于， 包括：
接入终端接收用户设备发送的目的网际协议 IP地址为所述接入终端的 IP 地址的超文本传输协议 HTTP请求消息，所述 HTTP请求消息包括网址域名； 当所述网址域名不是第一域名时， 所述接入终端根据域名系统 DNS 解 析， 获取所述网址域名对应的真实 IP地址， 其中， 所述第一域名为所述接入 终端的 IP地址对应的域名；
所述接入终端根据所述真实 IP地址控制所述用户设备访问所述网址域名 对应的目标站点。
2、 根据权利要求 1所述的访问控制方法， 其特征在于， 所述接入终端根 据所述真实 IP 地址控制所述用户设备访问所述网址域名对应的目标站点包 括：
所述接入终端将所述接入终端的 IP地址替换为所述真实 IP地址后发送 出去， 以使所述用户设备访问所述网址域名对应的目标站点。
3、 根据权利要求 1所述的访问控制方法， 其特征在于， 所述接入终端根 据所述真实 IP 地址控制所述用户设备访问所述网址域名对应的目标站点包 括：
所述接入终端向所述用户设备发起 HTTP重定向请求， 以使所述用户设 备根据所述真实 IP地址重新发起访问所述目标站点的 HTTP请求，所述 HTTP 重定向请求包括所述真实 IP地址。
4、 根据权利要求 3所述的访问控制方法， 其特征在于， 所述接入终端向 所述用户设备发起 HTTP重定向请求包括：
所述接入终端向所述用户设备发送 HTTP重定向请求报文或 HTTP重定 向页面。
5、 根据权利要求 4所述的访问控制方法， 其特征在于， 所述 HTTP重定 向才艮文为 HTTP响应码 300、 HTTP响应码 301、 HTTP响应码 302、 或 HTTP 响应码 307„
6、根据权利要求 1-5任一项所述的访问控制方法， 其特征在于，还包括： 当所述网址域名是所述第一域名时， 所述接入终端向所述用户设备发送 域名系统 DNS应答报文， 以将所述用户设备重定向到所述接入终端的 Web 管理页面， 所述 DNS应答报文包括所述接入终端的 IP地址。
7、 一种接入终端， 其特征在于， 包括：
接收器， 用于接收用户设备发送的目的网际协议 IP地址为所述接入终端 的 IP地址的超文本传输协议 HTTP请求消息， 所述 HTTP请求消息包括网址 域名；
处理器，用于在所述网址域名不是第一域名时，根据域名系统 DNS解析， 获取所述网址域名对应的真实 IP地址， 根据所述真实 IP地址控制所述用户 设备访问所述网址域名对应的目标站点， 其中， 所述第一域名为所述接入终 端的 IP地址对应的域名。
8、 根据权利要求 7所述的接入终端， 其特征在于， 还包括： 发送器； 其中， 所述处理器根据所述真实 IP地址控制所述用户设备访问所述网址 域名对应的目标站点， 包括： 所述处理器用于将所述 HTTP请求消息的目的 IP地址由所述接入终端的 IP地址替换为所述真实 IP地址， 然后控制所述发 送器将替换目的 IP地址后的 HTTP请求消息发送出去， 以使所述用户设备访 问所述网址域名对应的目标站点。
9、 根据权利要求 7所述的接入终端， 其特征在于， 还包括： 发送器， 其中， 所述处理器根据所述真实 IP地址控制所述用户设备访问所述网址 域名对应的目标站点， 包括： 所述处理器用于控制所述发送器向所述用户设 备发起 HTTP重定向请求， 以使所述用户设备根据所述真实 IP地址重新发起 访问所述目标站点的 HTTP请求， 所述 HTTP重定向请求包括所述真实 IP地 址。
10、 根据权利要求 9所述的接入终端， 其特征在于， 所述发送器具体用 于向所述用户设备发送 HTTP重定向请求报文或 HTTP重定向页面。
11、 根据权利要求 8-10任一项所述的接入终端， 其特征在于， 所述发送 器还用于在所述处理器的控制下在所述网址域名是所述第一域名时， 向所述 用户设备发送域名系统 DNS应答报文，以将所述用户设备重定向到所述接入 终端的 Web管理页面， 所述 DNS应答报文包括所述接入终端的 IP地址。
12、 一种访问控制系统， 其特征在于， 包括： 用户设备、 接入终端和域 名系统 DNS服务器；
所述用户设备， 用于向所述接入终端发送目的网际协议 IP地址为所述接 入终端的 IP地址的超文本传输协议 HTTP请求消息， 所述 HTTP请求消息包 括网址域名；
所述接入终端包括：
接收器， 用于接收所述用户设备发送的所述 HTTP请求消息；
处理器， 用于在所述网址域名不是所述第一域名时， 根据域名系统 DNS 解析， 获取所述网址域名对应的真实 IP地址， 根据所述真实 IP地址控制所 述用户设备访问所述网址域名对应的目标站点， 其中， 所述第一域名为所述 接入终端的 IP地址对应的域名；
所述 DNS服务器， 用于进行所述 DNS解析。
PCT/CN2012/076070 2012-05-25 2012-05-25 访问控制方法、系统及接入终端 WO2012126433A2 (zh)

Priority Applications (5)

Application Number Priority Date Filing Date Title
CN201280000555.5A CN102783119B (zh) 2012-05-25 2012-05-25 访问控制方法、系统及接入终端
PCT/CN2012/076070 WO2012126433A2 (zh) 2012-05-25 2012-05-25 访问控制方法、系统及接入终端
EP12761281.0A EP2571228B1 (en) 2012-05-25 2012-05-25 Access control method and system, and access terminal
JP2013522100A JP5502239B2 (ja) 2012-05-25 2012-05-25 アクセス制御方法及びシステム並びにアクセス端末
US13/717,220 US8892640B2 (en) 2012-05-25 2012-12-17 Access control method and system and access terminal

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2012/076070 WO2012126433A2 (zh) 2012-05-25 2012-05-25 访问控制方法、系统及接入终端

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US13/717,220 Continuation US8892640B2 (en) 2012-05-25 2012-12-17 Access control method and system and access terminal

Publications (2)

Publication Number Publication Date
WO2012126433A2 true WO2012126433A2 (zh) 2012-09-27
WO2012126433A3 WO2012126433A3 (zh) 2013-04-18

Family

ID=46879809

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2012/076070 WO2012126433A2 (zh) 2012-05-25 2012-05-25 访问控制方法、系统及接入终端

Country Status (5)

Country Link
US (1) US8892640B2 (zh)
EP (1) EP2571228B1 (zh)
JP (1) JP5502239B2 (zh)
CN (1) CN102783119B (zh)
WO (1) WO2012126433A2 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2015534194A (ja) * 2012-10-15 2015-11-26 イカノス・コミュニケーションズ・インコーポレイテッドＩｋａｎｏｓ Ｃｏｍｍｕｎｉｃａｔｉｏｎｓ，Ｉｎｃ． 通信リンクの状態に関する情報を検出して通信する方法および装置
CN114697397A (zh) * 2022-02-24 2022-07-01 阿里巴巴（中国）有限公司 一种域名访问方法、装置、电子设备及计算机存储介质

Families Citing this family (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9398100B2 (en) 2012-12-29 2016-07-19 Ricoh Company, Ltd. Managing access of network services
US9253263B2 (en) * 2012-12-29 2016-02-02 Ricoh Company, Ltd. Managing scope of network services
CN103124265A (zh) * 2013-01-31 2013-05-29 深信服网络科技（深圳）有限公司 访问网站的方法和网关设备
CN103763133B (zh) * 2014-01-06 2017-02-22 上海聚力传媒技术有限公司 一种实现访问控制的方法、设备与系统
CN104933045B (zh) * 2014-03-17 2019-08-09 腾讯科技（深圳）有限公司 网络信息浏览方法及网络信息浏览装置
CN105592175A (zh) 2014-10-24 2016-05-18 中兴通讯股份有限公司 重定向到Web页面的方法及装置
CN105049503A (zh) * 2015-07-07 2015-11-11 深信服网络科技（深圳）有限公司 调度服务器的方法及负载均衡设备
CN104936043A (zh) * 2015-07-08 2015-09-23 蓝汛网络科技（北京）有限公司 视频资源识别方法和装置
KR101702102B1 (ko) * 2015-08-13 2017-02-13 주식회사 케이티 인터넷 연결 장치, 중앙 관리 서버 및 인터넷 연결 방법
CN105262791A (zh) * 2015-09-09 2016-01-20 深圳前海华视移动互联有限公司 访问外网数据的方法、车载多媒体终端及其代理服务器
CN105306448A (zh) * 2015-09-22 2016-02-03 深圳前海华视移动互联有限公司 访问外网数据的方法、车载多媒体终端及其内核Netfilter模块
CN106998359A (zh) * 2017-03-24 2017-08-01 百度在线网络技术（北京）有限公司 基于人工智能的语音识别服务的网络接入方法以及装置
CN109995887B (zh) * 2018-01-02 2022-05-10 中国移动通信有限公司研究院 一种dns解析方法、装置及计算机可读存储介质
CN109495600B (zh) * 2018-11-19 2022-04-29 北京知道创宇信息技术股份有限公司 网站访问方法、装置及可读存储介质
US11777840B2 (en) * 2021-02-16 2023-10-03 Ciena Corporation Re-establishing a bidirectional forwarding detection (BFD) session when a discriminator mismatch is detected
US12009968B1 (en) * 2021-12-10 2024-06-11 Amazon Technologies, Inc. Managing regional failover via DNS queries

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6151624A (en) * 1998-02-03 2000-11-21 Realnames Corporation Navigating network resources based on metadata
KR20020022317A (ko) * 2000-09-19 2002-03-27 윤종용 홈 게이트웨이 및 그 운용방법
EP1343296B1 (en) * 2002-02-25 2011-05-04 Broadcom Corporation System, method and computer program product for selectively caching domain name system information on a network gateway
CN1230766C (zh) * 2002-06-28 2005-12-07 华为技术有限公司 一种简易访问网络运营商门户网站的方法
US20060031394A1 (en) * 2004-04-20 2006-02-09 Tazuma Stanley K Apparatus and methods for transparent handling of browser proxy configurations in a network gateway device
EP1718034A1 (en) * 2005-04-25 2006-11-02 Thomson Multimedia Broadband Belgium Process for managing resource address requests and associated gateway device
JP2007158988A (ja) 2005-12-08 2007-06-21 Matsushita Electric Ind Co Ltd ルータ装置及びネットワーク障害の判別方法
JP2008177714A (ja) * 2007-01-17 2008-07-31 Alaxala Networks Corp ネットワークシステム、サーバ、ｄｄｎｓサーバおよびパケット中継装置
CN102111287A (zh) * 2009-12-24 2011-06-29 中兴通讯股份有限公司 一种xDSL终端设备运行维护的方法及设备
US9246699B2 (en) * 2010-06-07 2016-01-26 Salesforce.Com, Inc. Method and system for testing multiple components of a multi-tenant, multi-domain, multi-tiered website
US9401962B2 (en) * 2010-10-28 2016-07-26 Verizon Patent And Licensing Inc. Traffic steering system

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
None
See also references of EP2571228A4

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2015534194A (ja) * 2012-10-15 2015-11-26 イカノス・コミュニケーションズ・インコーポレイテッドＩｋａｎｏｓ Ｃｏｍｍｕｎｉｃａｔｉｏｎｓ，Ｉｎｃ． 通信リンクの状態に関する情報を検出して通信する方法および装置
CN114697397A (zh) * 2022-02-24 2022-07-01 阿里巴巴（中国）有限公司 一种域名访问方法、装置、电子设备及计算机存储介质
CN114697397B (zh) * 2022-02-24 2024-06-07 阿里巴巴（中国）有限公司 一种域名访问方法、装置、电子设备及计算机存储介质

Also Published As

Publication number Publication date
WO2012126433A3 (zh) 2013-04-18
EP2571228A4 (en) 2014-04-16
CN102783119A (zh) 2012-11-14
EP2571228B1 (en) 2016-08-31
JP5502239B2 (ja) 2014-05-28
JP2013542621A (ja) 2013-11-21
US8892640B2 (en) 2014-11-18
US20130318143A1 (en) 2013-11-28
CN102783119B (zh) 2015-04-15
EP2571228A2 (en) 2013-03-20

Similar Documents

Publication Publication Date Title
WO2012126433A2 (zh) 访问控制方法、系统及接入终端
WO2021003816A1 (zh) Iot设备与用户绑定的认证方法、设备及介质
US10498702B2 (en) DNS-based captive portal with integrated transparent proxy to protect against user device caching incorrect IP address
US10911561B2 (en) Method and network node for caching web content
US10972434B2 (en) Proxy-based clientless VPN with web browser proxy auto-configuration (PAC) file and extension
CN103825881B (zh) 基于无线访问控制器ac实现wlan用户的重定向方法及装置
WO2016023357A1 (zh) 访问网页的方法、装置及路由器
WO2020258460A1 (zh) Iot设备配网方法、装置、设备及介质
WO2012174885A1 (zh) 一种信息发送方法及网关
CN101582856B (zh) 一种门户服务器与宽带接入设备的会话建立方法及其系统
WO2014044103A1 (zh) 离线缓存方法及装置
WO2014194580A1 (zh) 浏览器重定向方法及装置
CN102984173A (zh) 网络接入控制方法及系统
WO2013044671A1 (zh) 访问互联网的方法、终端以及存储介质
CN101132420A (zh) 一种基于ssl vpn的链接改写方法和设备
WO2012163005A1 (zh) 访问虚拟专用网络的方法、装置以及网关设备
CA2912774C (en) Providing single sign-on for wireless devices
WO2018036415A1 (zh) 一种认证代理方法、装置和设备
CN112311766B (zh) 一种用户证书的获取方法及装置、终端设备
WO2014166078A1 (zh) 数据发送处理方法及路由器
WO2013182030A1 (zh) 一种用于请求资源的方法、设备及系统
WO2015085490A1 (zh) 一种互联网访问优化的方法、装置
CN105323319A (zh) 物联网设备的通信方法和系统
CN116668181A (zh) 一种内网访问方法、电子设备及存储介质
TWI472205B (zh) A system for implementing an HTTP request service and a method thereof

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 201280000555.5

Country of ref document: CN

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 12761281

Country of ref document: EP

Kind code of ref document: A2

REEP Request for entry into the european phase

Ref document number: 2012761281

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2012761281

Country of ref document: EP

ENP Entry into the national phase

Ref document number: 2013522100

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE