WO2016145741A1

WO2016145741A1 - Distributed cache-based message authentication method and apparatus

Info

Publication number: WO2016145741A1
Application number: PCT/CN2015/081877
Authority: WO
Inventors: 杨宇
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-03-18
Filing date: 2015-06-18
Publication date: 2016-09-22
Also published as: CN106034156A

Abstract

Disclosed is a distributed cache-based message authentication method. The method comprises the following steps: when receiving a message to be authenticated, determining the type of the message to be authenticated; if the message to be authenticated is an uplink message, performing a service authentication operation, and generating a corresponding user relationship; and storing the user relationship into a distributed cache node, and when the user relationship is successfully stored into at least two distributed cache nodes, determining that authentication of the uplink message is successful. Also disclosed is a distributed cache-based message authentication apparatus. The present invention improves performance of real-time authentication of messages, implements functions of dynamically increasing/reducing the quantities of service authentication nodes, and seamlessly taking over functions of service authentication nodes that are in shutdown.

Description

Message authentication method and device based on distributed cache

Technical field

The present invention relates to the field of data communication technologies, and in particular, to a message authentication method and apparatus based on distributed cache.

Background technique

With the rapid development of the message-based services, the performance requirements of the message-based business authentication platform of each operator's enterprise are also increasing rapidly. Simply increasing the service authentication node to improve performance has become the management and operation cost of each operator. Hey.

Existing operator companies generally construct a message-based business authentication platform by the following methods. The terminal user sends a message to the industry gateway, and the message sent by the terminal user may be a service instruction for ordering an operator, and the industry gateway forwards the service instruction to the service authentication platform, and the service distribution module in the service authentication platform is based on the main The calling number finds a specific service authentication module, and the service authentication module completes the authentication of the message sent by the terminal user, generates a user relationship, and returns the authentication result according to the original path. At the same time, the operator can also send a message to the industry gateway. The message sent by the operator can be the content provided by the operator, and the industry gateway forwards the content provided by the operator to the service authentication platform, and the service authentication platform The service distribution module finds a specific service authentication module according to the called number, and the service authentication module authenticates the content provided by the operator, verifies the user relationship, and returns the authentication result according to the original path.

However, the message-based business authentication platform constructed by the above method is not suitable for the further development of the business growth of each operator. At present, there are two main ways for the service authentication module to store user relationships, one is memory storage and the other is database storage. If the memory is used to store the user relationship, there is a problem that the memory is limited and the current service authentication module fails to be taken over. If the database is used to store the user relationship, there will be a problem that the database access time is long and the authentication result cannot be fed back to the industry gateway in real time. .

The above content is only used to assist in understanding the technical solutions of the present invention, and does not constitute an admission that the above is prior art.

Summary of the invention

The main purpose of the embodiments of the present invention is to provide a message authentication method and device based on distributed cache, which solves the problem that the service authentication performance of the enterprise enterprise is low, and the current service authentication node fails to be taken over, and the real-time feedback authentication cannot be performed. The problem with the result.

To achieve the above object, a distributed cache-based message authentication method provided by an embodiment of the present invention includes the following steps:

Determining a category of the to-be-authenticated message when receiving the to-be-authenticated message;

If the to-be-authenticated message is an uplink message, performing a service authentication operation to generate a corresponding user relationship;

The user relationship is stored in the distributed cache node, and when the user relationship is successfully stored in the at least two distributed cache nodes, the uplink message authentication is determined to be successful.

In the embodiment of the present invention, after the step of determining the category of the to-be-authenticated message when the to-be-authenticated message is received, the method further includes:

If the to-be-authenticated message is a downlink message, accessing the user relationship in the distributed cache node according to the downlink message;

When the access is successful, it is determined that the downlink message is successfully authenticated.

In the embodiment of the present invention, if the to-be-authenticated message is a downlink message, the step of accessing the user relationship in the distributed cache node according to the downlink message includes:

If the to-be-authenticated message is a downlink message, requesting to verify a user relationship in the distributed cache node;

Accessing the user relationship in the distributed cache node according to the request for verifying the user relationship in the distributed cache node.

In the embodiment of the present invention, if the to-be-authenticated message is an uplink message, the step of performing a service authentication operation to generate a corresponding user relationship further includes:

Requesting to store the user relationship;

Submitting the user relationship according to the request to store the user relationship.

In the embodiment of the present invention, before the step of determining the category of the to-be-authenticated message, the method further includes:

Real-time monitoring of the load status of the service authentication node;

When the load of the service authentication node exceeds a first preset threshold, adding the service authentication node and the distributed cache access node;

When the load of the service authentication node is lower than a second preset threshold, the service authentication node and the distributed cache access node are reduced.

In addition, in order to achieve the above object, an embodiment of the present invention further provides a message authentication apparatus based on a distributed cache, where the apparatus includes:

a message receiving module, configured to determine a category of the to-be-authenticated message when receiving the to-be-authenticated message;

The service authentication module is configured to perform a service authentication operation to generate a corresponding user relationship, if the to-be-authenticated message is an uplink message;

a distributed cache module, configured to store the user relationship in a distributed cache node;

The determining module is configured to determine that the uplink message authentication is successful when the user relationship is successfully stored in the at least two distributed cache nodes.

In the embodiment of the present invention, the distributed cache-based message authentication device further includes a distributed cache access module, configured to: if the to-be-authenticated message is a downlink message, access the distributed cache node according to the downlink message User relationship in ;

The determining module is further configured to determine that the downlink message is successfully authenticated when the access is successful.

In the embodiment of the present invention, the service authentication module is further configured to: if the to-be-authenticated message is a downlink message, request to verify a user relationship in the distributed cache node;

The distributed cache access module is further configured to access a user relationship in the distributed cache node according to the request for verifying the user relationship in the distributed cache node.

In the embodiment of the present invention, the service authentication module is further configured to request to store the user relationship;

The distributed cache access module is further configured to submit the user relationship according to the request for storing the user relationship.

In the embodiment of the present invention, the distributed cache-based message authentication apparatus further includes a monitoring module and an adjustment module.

The monitoring module is configured to monitor a load status of the service authentication node in real time;

The adjusting module is configured to adjust the number of the service authentication node and the distributed cache access node according to the load status of the service authentication node.

In the embodiment of the present invention, a method for message authentication is implemented by using a distributed cache, so that when the message is authenticated, the user relationship can be stored in multiple service authentication nodes, and it is not necessary to authenticate in a fixed or specific service authentication node, thereby improving The performance of real-time authentication of the message; at the same time, the service authentication node can be dynamically increased or decreased, the problem of busy single-service authentication node is solved, and the function of seamlessly taking over the service authentication node of the downtime is realized.

DRAWINGS

1 is a schematic flowchart of a first embodiment of a message authentication method based on distributed cache according to the present invention;

2 is a schematic flowchart diagram of a second embodiment of a message authentication method based on distributed cache according to the present invention;

3 is a schematic flowchart of a refinement of an embodiment of step S40 in FIG. 2;

4 is a schematic flowchart diagram of a third embodiment of a message authentication method based on distributed cache according to the present invention;

FIG. 5 is a schematic diagram of functional modules of a first embodiment of a message authentication apparatus based on distributed cache according to the present invention; FIG.

6 is a schematic diagram of functional modules of a second embodiment of a message authentication device based on distributed cache according to the present invention;

FIG. 7 is a schematic diagram of functional modules of a third embodiment of a message authentication apparatus based on distributed cache according to the present invention.

The implementation, functional features, and advantages of the present invention will be further described in conjunction with the embodiments.

detailed description

It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

The main solution of the embodiment of the present invention is: determining the category of the to-be-authenticated message when receiving the to-be-authenticated message; determining the category of the to-be-authenticated message when receiving the to-be-authenticated message; If the authentication message is an uplink message, perform a service authentication operation to generate a corresponding user relationship;

The user relationship is stored in the distributed cache node, and when the user relationship is successfully stored in the at least two distributed cache nodes, the uplink message authentication is determined to be successful. The method of message authentication is implemented by distributed caching, so that when the message is authenticated, the user relationship can be stored in multiple service authentication nodes, and it is not necessary to authenticate in a fixed or specific service authentication node, thereby improving the message real-time authentication. At the same time, it solves the problem of busy single-service authentication nodes, and also realizes the function of seamlessly taking over the service authentication node of the downtime.

There are two main ways for existing service authentication nodes to store user relationships, one is memory storage and the other is database storage. If memory is used to store user relationships, there will be limited memory and current business authentication sections. The problem that the fault cannot be taken over; if the database is used to store the user relationship, there will be a problem that the database access time is long and the authentication result cannot be fed back to the industry gateway in real time.

Based on the above problems, the present invention provides a message authentication method based on distributed caching.

Referring to FIG. 1, FIG. 1 is a schematic flowchart diagram of a first embodiment of a message authentication method based on distributed cache according to the present invention.

In an embodiment, the distributed cache-based message authentication method includes:

Step S10: Determine, when receiving the to-be-authenticated message, the category of the to-be-authenticated message;

A service authentication platform has N (N>=3) message receiving nodes, N service authentication nodes, N distributed cache access nodes, and N distributed cache nodes. When the industry gateway receives the to-be-authenticated message, the industry gateway forwards the to-be-authenticated message to the service authentication platform, and determines the category of the to-be-authenticated message, that is, determines that the service authentication platform receives the to-be-authenticated message. Whether the message is an uplink message or a downlink message, the uplink message is a content sent by a mobile terminal user, and may be a certain mobile terminal user ordering a certain service of an operator, for example, the mobile terminal user 13100000001 sends a service message for ordering the weather forecast to The carrier 10001; the downlink message is content sent by the operator. For example, the operator 10001 sends a specific weather forecast message to the mobile terminal user 13100000001 according to the service message of the weather forecast subscribed by the mobile terminal user 13100000001.

Step S20: If the to-be-authenticated message is an uplink message, perform a service authentication operation to generate a corresponding user relationship.

If the to-be-authenticated message received by the service authentication platform is an uplink message, the uplink message is randomly sent to its message receiving node by its network switch. The message receiving node forwards the uplink message to its service authentication node according to a preset algorithm, where the service load of the service authentication node is the smallest among all service authentication nodes of the service authentication platform at the time, The service authentication operation is performed in the service authentication node with the smallest service load, and the corresponding user relationship is generated according to the uplink message. The preset algorithm is a load balancing algorithm, and may be other algorithms that implement the same function. Load balancing has two meanings: First, a large number of concurrent access or data traffic is shared to multiple node devices for processing, reducing user waiting time; secondly, a single heavy load operation is shared to multiple node devices for parallel processing. After each node device finishes processing, the results are summarized and returned to the user, and the system processing capability is greatly improved. Load balancing balances the communication load between all servers and applications, judges the real-time response time, and hands the task to the server with the lightest load to achieve true intelligent communication management and optimal service performance. Load balancing distributes network or computer processing load between multiple nodes according to certain policies, providing an inexpensive and efficient way to extend server bandwidth, increase throughput, and improve data processing while avoiding single points of failure.

For example, the service authentication platform receives the service message that the mobile terminal user 13100000001 sends to the operator 10001 to subscribe to the weather forecast, and the service message for ordering the weather forecast is randomly sent to the message receiving node through the network switch. And the message receiving node forwards the service message for ordering the weather forecast to the service authentication node whose service load is the smallest according to the load balancing algorithm, and the service authentication node with the smallest service load quantity subscribes to the weather forecast The service message performs a service authentication operation, such as detecting whether the service message for ordering the weather forecast is legal, whether the mobile terminal user 13100000001 can subscribe to the weather forecast service of the operator 10001, and when it is detected that the mobile terminal user 13100000001 has been in arrears, If the user does not have the right to subscribe to the weather forecast service of the operator 10001, the weather forecast service of the operator 10001 may not be subscribed, and the user relationship between the mobile terminal user 13100000001 and the operator 10001 cannot be generated. It is also required to detect whether the operator 10001 can provide the weather. The forecast service is provided to the mobile terminal user 13100000001, etc., for example, when the operator 10001 does not provide the service of the weather forecast service, the user relationship between the mobile terminal user 13100000001 and the operator 10001 cannot be generated; the mobile can be generated only when all the tests pass. End user 1310 User relationship between 0000001 and carrier 10001.

In step S30, the user relationship is stored in the distributed cache node. When the user relationship is successfully stored in the at least two distributed cache nodes, the uplink message authentication is determined to be successful.

The user relationship is stored in a distributed cache node of the service authentication platform. When the user relationship is successfully stored in at least two distributed cache nodes of the service authentication platform, the service authentication node of the service authentication platform will The message receiving node is notified, and the uplink message authentication operation is successful. After receiving the message that the uplink message authentication operation succeeds, the message receiving node of the service authentication platform notifies the industry gateway that the uplink message authentication is successful. When the user relationship is not successfully stored in the two or more distributed cache nodes of the service authentication platform, the service authentication node of the service authentication platform notifies the message receiving node that the uplink message authentication operation fails. After receiving the message that the uplink message authentication operation fails, the message receiving node notifies the industry gateway that the uplink message authentication fails. For example, the user relationship between the mobile terminal user 13100000001 and the operator 10001 is stored in two or more distributed cache nodes of the service authentication platform, and the user relationship between the mobile terminal user 13100000001 and the operator 10001 is When the storage of two or more distributed cache nodes of the service authentication platform is successful, the service authentication node of the service authentication platform will notify the message receiving node, and the mobile terminal user 13100000001 sends the service to the operator 10001 to subscribe to the weather forecast. The message authentication operation was successful. After receiving the message that the service message authentication operation for ordering the weather forecast is successful, the message receiving node of the service authentication platform notifies the SMS industry gateway that the service message authentication operation for ordering the weather forecast is successful, and the SMS industry gateway receives the message. After the message of the service message authentication operation for ordering the weather forecast is successful, the service message for ordering the weather forecast is forwarded to the operator 10001; when the user relationship between the mobile terminal user 13100000001 and the operator 10001 is not in the service authentication platform When the storage is successful in two or more distributed cache nodes, the service authentication node of the service authentication platform will notify its message receiving node, and the mobile terminal user 13100000001 sends the service to the operator 10001 to subscribe to the weather forecast. After the message authentication node fails to receive the message that the service message authentication operation for ordering the weather forecast fails, the message receiving node of the service authentication platform notifies the SMS industry gateway that the service message authentication operation for ordering the weather forecast fails. After receiving the message that the service message authentication operation for ordering the weather forecast fails, the short message industry gateway notifies the mobile terminal user 13100000001 that the service of the operator 10001 weather forecast fails.

In this embodiment, the uplink message is authenticated by the distributed cache, so that when the uplink message is authenticated, the user relationship can be stored in multiple service authentication nodes, thereby improving the performance of real-time message authentication; and simultaneously solving the single service The problem that the right node is busy also realizes the function of seamlessly taking over the business authentication node of the downtime.

Referring to FIG. 2, FIG. 2 is a schematic flowchart diagram of a second embodiment of a message authentication method based on distributed cache according to the present invention. Based on the first embodiment of the foregoing method, after the step S10, the method further includes:

Step S40: If the to-be-authenticated message is a downlink message, access the user relationship in the distributed cache node according to the downlink message;

Specifically, referring to FIG. 3, in an embodiment, if the to-be-authenticated message is a downlink message, the step of accessing the user relationship in the distributed cache node according to the downlink message includes:

Step S41: If the to-be-authenticated message is a downlink message, request to verify a user relationship in the distributed cache node;

Step S42: Access the user relationship in the distributed cache node according to the request for verifying the user relationship in the distributed cache node.

If the message to be authenticated received by the service authentication platform is a downlink message, the downlink message is randomly sent to the message receiving node by the network switch, and the message receiving node forwards the downlink message according to a preset algorithm. Go to its business authentication node. The service load of the service authentication node is the smallest among all the service authentication nodes of the service authentication platform at that time, and the service authentication operation is performed in the service authentication node with the smallest service load, and the verification service authentication is requested. a user relationship in the distributed cache node of the platform, and submitting the user relationship verification request to a distributed cache access node of the service authentication platform, the distributed cache access node accessing the extracted from the distributed cache node User relationship. The preset algorithm is a load balancing algorithm, and may be other algorithms that implement the same function.

As received by the service authentication platform, the operator 10001 sends a specific weather forecast message to the mobile terminal user 13100000001 according to the service message of the weather forecast subscribed by the mobile terminal user 13100000001. After receiving the specific weather forecast message, the service authentication platform randomly transmits the specific weather forecast message to its message receiving node through its network switch. The message receiving node according to a load balancing algorithm The specific weather forecast message is forwarded to the service authentication node whose traffic load is the smallest, and the service authentication operation is performed on the specific weather forecast message in the service authentication node with the smallest traffic load, such as detecting Whether the specific weather forecast message is legal, whether the detecting operator 10001 can send the specific weather forecast message to the mobile terminal user 13100000001, and detecting whether the mobile terminal user 13100000001 can receive the specific weather forecast message sent by the operator 10001, and detecting the mobile terminal. Whether there is a user relationship between the user 13100000001 and the operator 10001, whether the user relationship is legal or the like. If all the tests are passed, the distributed cache access node of the service authentication platform extracts the user relationship between the mobile terminal user 13100000001 and the operator 10001, and if the user relationship between the mobile terminal user 13100000001 and the operator 10001 is extracted, the user relationship is unsuccessful. Then, the operator 10001 cannot send a specific weather forecast message to the mobile terminal user 13100000001.

In step S50, when the access is successful, it is determined that the downlink message is successfully authenticated.

When the distributed cache access node of the service authentication platform accesses the user relationship extracted from its distributed cache node, the distributed cache access node notifies its service authentication node, and the service authentication platform accesses the distributed cache node. The visit was successful. After receiving the message that the distributed cache access node successfully accesses its distributed cache node, the service authentication node of the service authentication platform notifies its message receiving node that the downlink message is successfully authenticated. After receiving the message that the downlink message is successfully authenticated, the message receiving node of the service authentication platform notifies the industry gateway that the downlink message is successfully authenticated. For example, when the distributed cache access node of the service authentication platform accesses the user relationship between the mobile terminal user 13100000001 and the operator 10001 extracted from its distributed cache node, the distributed cache access node notification of the service authentication platform Its service authentication node accesses the distributed cache node successfully. After receiving the message that the distributed cache access node successfully accesses its distributed cache node, the service authentication node of the service authentication platform notifies its message receiving node that the specific weather forecast message sent by the operator 10001 is successfully authenticated. After receiving the message that the specific weather forecast message sent by the operator 10001 is successfully authenticated, the receiving node notifies the SMS industry gateway operator 10001 that the specific weather forecast message is successfully authenticated. After receiving the message that the specific weather forecast message is successfully sent by the operator 10001, the short message industry gateway forwards the specific weather forecast message sent by the operator 10001 to the mobile terminal user 13100000001. If the SMS industry gateway receives the message that the specific weather forecast message authentication failure sent by the operator 10001, the operator 10001 is notified that the specific weather forecast message transmission fails.

In this embodiment, the method for message authentication is implemented by using a distributed cache, so that when the downlink message is authenticated, the user relationship can be accessed in any service authentication node without having to authenticate in a fixed or specific service authentication node. The performance of real-time authentication of the message is improved; at the same time, the problem of busy single-service authentication node is solved, and the function of seamlessly taking over the service authentication node of the downtime is also realized.

Referring to FIG. 4, FIG. 4 is a schematic flowchart of a third embodiment of a method for authenticating a message based on a distributed cache according to a second embodiment of the method. Before the step S10, the method further includes:

Step S60: monitoring the load status of the service authentication node in real time;

Step S70: Adjust the number of the service authentication node and the distributed cache access node according to the load status of the service authentication node.

The service authentication platform monitors the service load status of its service authentication node in real time, and increases or decreases its service authentication node and distributed cache access node according to the service load status of its service authentication node. For example, when the service load of the service authentication node exceeds the first preset threshold, the service authentication node and the distributed cache access node are added. The first preset threshold may be freely set as needed, and may be set to 60%, 70%, and 80%, and is set to 70% in the embodiment of the present invention. For example, when the service load of the three service authentication nodes of the service authentication platform has exceeded 70% of the total capacity of the service authentication node, the service authentication node and the distributed cache access node of the service authentication platform are increased; When the load of the service authentication node of the service authentication platform is lower than the second preset threshold, the service authentication node and the distributed cache access node are reduced. The first preset threshold is greater than the second preset threshold, and the second preset threshold may be set as required, and may be set to 20%, 30%, 40%, etc., in the embodiment of the present invention, set to 30. %, that is, when the service volume of the three service authentication nodes of the service authentication platform is less than 30% of the total capacity of the service authentication node, the service authentication node and the distributed cache access node of the service authentication platform are reduced. .

After the step S20, the method further includes:

Step S201, requesting to store the user relationship;

Step S202: Submit the user relationship according to the request for storing the user relationship.

The service authentication node of the service authentication platform requests its distributed cache access node to store the user relationship, and when the distributed cache access node receives the storage request of the user relationship, submits the user relationship to its distribution. Cache node. For example, the service authentication node of the service authentication platform requests the distributed cache access node to store the user relationship between the mobile terminal user 13100000001 and the operator 10001, when the distributed cache access node receives the mobile terminal user 13100000001 and the operator. After the storage request of the user relationship between 10001, the user relationship between the mobile terminal user 13100000001 and the operator 10001 is submitted to its distributed cache node.

In this embodiment, the method for message authentication is implemented by using a distributed cache, so that when the uplink message is authenticated, the user relationship can be stored in multiple service authentication nodes, and it is not necessary to check in a fixed or specific service authentication node. Right, improve the performance of real-time message authentication; can also dynamically increase or decrease the service authentication node, and solve the problem of busy single-service authentication node, and also realize the function of seamlessly taking over the service authentication node.

Correspondingly, based on the above-mentioned distributed cache-based message authentication method, the present invention further provides a message authentication device based on distributed cache.

Referring to FIG. 5, FIG. 5 is a schematic diagram of functional modules of a first embodiment of a message authentication apparatus based on distributed cache according to the present invention.

In an embodiment, the distributed cache-based message authentication apparatus includes: a message receiving module 10, a service authentication module 20, a distributed cache module 30, and a determining module 40.

The message receiving module 10 is configured to determine a category of the to-be-authenticated message when receiving the to-be-authenticated message;

The service authentication module 20 is configured to perform a service authentication operation to generate a corresponding user relationship, if the to-be-authenticated message is an uplink message;

The distributed cache module 30 is configured to store the user relationship into a distributed cache node;

The determining module 40 is configured to determine that the uplink message authentication is successful when the user relationship is successfully stored in the at least two distributed cache nodes.

The user relationship is stored in a distributed cache node of the service authentication platform. When the user relationship is successfully stored in at least two distributed cache nodes of the service authentication platform, the service authentication node of the service authentication platform will The message receiving node is notified, and the uplink message authentication operation is successful. After receiving the message that the uplink message authentication operation succeeds, the message receiving node of the service authentication platform notifies the industry gateway that the uplink message authentication is successful. When the user relationship is not successfully stored in the two or more distributed cache nodes of the service authentication platform, the service authentication node of the service authentication platform notifies the message receiving node that the uplink message authentication operation fails. After receiving the message that the uplink message authentication operation fails, the message receiving node notifies the industry gateway that the uplink message authentication fails. For example, the user relationship between the mobile terminal user 13100000001 and the operator 10001 is stored in two or more distributed cache nodes of the service authentication platform, and the user relationship between the mobile terminal user 13100000001 and the operator 10001 is When the storage of two or more distributed cache nodes of the service authentication platform is successful, the service authentication node of the service authentication platform will notify the message receiving node, and the mobile terminal user 13100000001 sends the service to the operator 10001 to subscribe to the weather forecast. The message authentication operation was successful. After receiving the message that the service message authentication operation for ordering the weather forecast is successful, the message receiving node of the service authentication platform notifies the SMS industry gateway that the service message authentication operation for ordering the weather forecast is successful, and the SMS industry gateway receives the message. After the message of the service message authentication operation for ordering the weather forecast is successful, the service message for ordering the weather forecast is forwarded to the operator 10001; when the user relationship between the mobile terminal user 13100000001 and the operator 10001 is not in the service authentication platform Two When the storage of the two or more distributed cache nodes is successful, the service authentication node of the service authentication platform will notify the message receiving node that the mobile terminal user 13100000001 sends the service message authentication operation to the operator 10001 to subscribe to the weather forecast, and the service fails. After receiving the message that the service message authentication operation for ordering the weather forecast fails, the message receiving node of the authentication platform notifies the SMS industry gateway that the service message authentication operation for ordering the weather forecast fails. After receiving the message that the service message authentication operation for ordering the weather forecast fails, the short message industry gateway notifies the mobile terminal user 13100000001 that the service of the operator 10001 weather forecast fails.

Referring to FIG. 6, FIG. 6 is a schematic diagram of functional modules of a second embodiment of a message authentication apparatus based on distributed cache according to the present invention. The apparatus also includes a distributed cache access module 50.

The distributed cache access module 50 is configured to: if the to-be-authenticated message is a downlink message, access the user relationship in the distributed cache node according to the downlink message;

In the embodiment of the present invention, the service authentication module 20 is further configured to: if the to-be-authenticated message is a downlink message, request to verify a user relationship in the distributed cache node;

The distributed cache access module 50 is further configured to access a user relationship in the distributed cache node according to the request for verifying the user relationship in the distributed cache node.

As received by the service authentication platform, the operator 10001 sends a specific weather forecast message to the mobile terminal user 13100000001 according to the service message of the weather forecast subscribed by the mobile terminal user 13100000001. After receiving the specific weather forecast message, the service authentication platform randomly transmits the specific weather forecast message to its message receiving node through its network switch. The message receiving node forwards the specific weather forecast message to a service authentication node whose service load is the smallest according to a load balancing algorithm, where the service load The minimum service authentication node performs a service authentication operation on the specific weather forecast message, such as detecting whether the specific weather forecast message is legal, and detecting whether the operator 10001 can send the specific weather forecast message to the mobile terminal. The user 13100000001 detects whether the mobile terminal user 13100000001 can receive the specific weather forecast message sent by the operator 10001, and detects whether there is a user relationship between the mobile terminal user 13100000001 and the operator 10001, whether the user relationship is legal or the like. If all the tests are passed, the distributed cache access node of the service authentication platform extracts the user relationship between the mobile terminal user 13100000001 and the operator 10001, and if the user relationship between the mobile terminal user 13100000001 and the operator 10001 is extracted, the user relationship is unsuccessful. Then, the operator 10001 cannot send a specific weather forecast message to the mobile terminal user 13100000001.

The determining module 40 is further configured to determine that the downlink message is successfully authenticated when the access is successful.

Referring to FIG. 7, FIG. 7 is a schematic diagram of functional modules of a third embodiment of a message authentication apparatus based on distributed cache according to the present invention. The device also includes a detection module 60 and an adjustment module 70.

The monitoring module 60 is configured to monitor the load status of the service authentication node in real time;

The adjusting module 70 is configured to adjust the number of the service authentication node and the distributed cache access node according to the load status of the service authentication node.

In the embodiment of the present invention, the service authentication module 20 is further configured to request to store the user relationship;

The distributed cache access module 50 is further configured to submit the user relationship according to the request for storing the user relationship.

The serial numbers of the embodiments of the present invention are merely for the description, and do not represent the advantages and disadvantages of the embodiments. Through the description of the above embodiments, those skilled in the art can clearly understand that the above embodiment method can be added by software. The way the general hardware platform is implemented, of course, can also be through hardware, but in many cases the former is a better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

The above are only the preferred embodiments of the present invention, and are not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the present invention and the drawings are directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of the present invention.

Claims

A message authentication method based on distributed cache, comprising the following steps:

Determining a category of the to-be-authenticated message when receiving the to-be-authenticated message;

If the to-be-authenticated message is an uplink message, performing a service authentication operation to generate a corresponding user relationship;

The user relationship is stored in the distributed cache node, and when the user relationship is successfully stored in the at least two distributed cache nodes, the uplink message authentication is determined to be successful.
The distributed cache-based message authentication method according to claim 1, wherein after the step of determining the category of the to-be-authenticated message, the method further comprises:

If the to-be-authenticated message is a downlink message, accessing the user relationship in the distributed cache node according to the downlink message;

When the access is successful, it is determined that the downlink message is successfully authenticated.
The distributed cache-based message authentication method according to claim 2, wherein if the to-be-authenticated message is a downlink message, the step of accessing the user relationship in the distributed cache node according to the downlink message comprises:

If the to-be-authenticated message is a downlink message, requesting to verify a user relationship in the distributed cache node;

Accessing the user relationship in the distributed cache node according to the request for verifying the user relationship in the distributed cache node.
The distributed cache-based message authentication method according to claim 1, wherein, if the to-be-authenticated message is an uplink message, the step of performing a service authentication operation to generate a corresponding user relationship further includes:

Requesting to store the user relationship;

Submitting the user relationship according to the request to store the user relationship.
The distributed cache-based message authentication method according to any one of claims 1 to 4, wherein, before receiving the to-be-authenticated message, determining the category of the to-be-authenticated message, the method further includes:

Real-time monitoring of the load status of the service authentication node;

Adjusting the number of the service authentication node and the distributed cache access node according to the load status of the service authentication node.
A message authentication device based on distributed cache, comprising:

a message receiving module, configured to determine a category of the to-be-authenticated message when receiving the to-be-authenticated message;

The service authentication module is configured to perform a service authentication operation to generate a corresponding user relationship, if the to-be-authenticated message is an uplink message;

a distributed cache module, configured to store the user relationship in a distributed cache node;

The determining module is configured to determine that the uplink message authentication is successful when the user relationship is successfully stored in the at least two distributed cache nodes.
The distributed cache-based message authentication apparatus according to claim 6, wherein the distributed cache-based message authentication apparatus further comprises a distributed cache access module, configured to: if the to-be-authenticated message is a downlink message And accessing the user relationship in the distributed cache node according to the downlink message;

The determining module is further configured to determine that the downlink message is successfully authenticated when the access is successful.
The distributed cache based message authentication apparatus according to claim 7, wherein

The service authentication module is further configured to: if the to-be-authenticated message is a downlink message, request to verify a user relationship in the distributed cache node;

The distributed cache access module is further configured to access a user relationship in the distributed cache node according to the request for verifying the user relationship in the distributed cache node.
The distributed cache-based message authentication apparatus according to claim 7, wherein the service authentication module is further configured to request to store the user relationship;

The distributed cache access module is further configured to submit the user relationship according to the request for storing the user relationship.
The distributed cache-based message authentication apparatus according to any one of claims 6 to 9, wherein the distributed cache-based message authentication apparatus further comprises a monitoring module and an adjustment module,

The monitoring module is configured to monitor a load status of the service authentication node in real time;

The adjusting module is configured to adjust the number of the service authentication node and the distributed cache access node according to the load status of the service authentication node.