The foregoing and other objects, features and advantages of the invention will be apparent from the following more particular descriptions of exemplary embodiments of the invention as illustrated in the accompanying drawings wherein like reference numbers generally represent like parts of exemplary embodiments of the invention.
Preferred embodiments of the present invention will now be described more fully hereinafter below in more detail with reference to the accompanying drawings, in which preferred embodiments of the invention are shown. This invention may, however, be embodied in different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art.
Now refer to
In the registration stage, the message receiving device first sends registration message (S101). Generally, telecommunications will name or number their service providers, and also number the various services provided by the service providers to facilitate the message receiving devices to register the services. For example, if a message receiving device will register a No. 123 weather forecasting service which is provided by the No. 888 service provider, the message receiving device can send message 888123 to the message sending device of telecommunication. The sending device of telecommunication finds that the message is a registered message after parsing it by its message gateway, and then sends the identification of the message receiving device (such as mobile phone number and other device identification, etc), the registered service provider 888 and registered service 123 as registration information to the registration server. The registration server will save all this information into the registration service information center (S102), and then the registration is successful. Next, the message sending device of telecommunication sends the registration information to service provider (S104) to facilitate the service provider to provide the service to the message receiving device on time. Also the message sending device of telecommunication will return the message of registration success to the message receiving device through the message gateway (S103). Step S103 and Step S104 do not need follow specific execution sequence, any step can run first. Thus, the registration stage is ended. It can be understood that the message receiving device does not save the registration information. Even it saves the sent registration message; there is no component in it which can be used to save the registration information for authenticating the received message.
In the usage stage, the service providers first provide the services to the message receiving device based on received message of service registered by the message receiving device, and send the service message to the message sending device of telecommunication (S105). The message sending device of telecommunication authenticates whether or not the message sent by the service provider to the message receiving device is sent by a service registered by the message receiving device according to the information of services registered with the service providers stored locally (S106). If the message is sent by the service registered with the service providers, the message sending device of telecommunication sends the message to the message receiving device through the message gateway (S107), then the message receiving device will receive the message of service provided by the service provider successfully. If the authentication is failed, it is believed that the message is fraudulent, and the message sending device of telecommunication will discard this message (S108) and will not send it to the message receiving device. Meanwhile, the billing system of telecommunication will not charge this message. Thus, the usage stage of authentication of message is ended.
According to the distributed authentication method disclosed in the present invention, the message authentication is executed in the message receiving device side. The message sending device of telecommunication is not directly involved in the authentication process, but provides the information for authenticating, and receives authentication results, then decides whether or not to charge the message according to the authentication results of the message receiving device. Here, the information for authentication is the base for the message receiving device to authenticating the message, i.e., the information for authentication is from registration information of service registered with the service provider by the message receiving device. Receiving the information for authenticating by the message receiving device can take place either in the registration phase or in the usage stage.
Refer to
During the usage stage, service provider first sends the message of service to the message sending device of telecommunication (S205), and message sending device of telecommunication does not check and authenticate the message, and sends it to message receiving device directly (S206). The message receiving device comprises storage means for storing information of services registered by a message receiving device with service providers, and authenticating means for, according to the information of services registered with the service providers stored in the storage means, authenticating whether or not the message is sent by a registered service with the service providers stored in the storage means (S207). If authentication succeeds, the message receiving device accepts the message and sends a signal indicating that the message is successfully received to the message sending device, then the message sending device of telecommunication can charge this message. If the authentication fails, it is possible for the message receiving device to have information of service registered with the service providers but the information is not stored in the storage means, and the message receiving device will send request for the current information of service registered with the service providers (S208). The message receiving device can either request the total information of services registered with the service providers to replace the total information of services registered with the service providers stored in the storage means or just request the information of services registered with the service providers to replace the information of services registered with the service providers but not stored in the storage means. After receiving this request, the message sending device of telecommunication will send the total information of services registered with the service providers or part information of services registered with the service providers but not stored in the storage means to the message receiving device in response to the request (S209). If the database is used to store the information of services registered with the service providers on both the message receiving device and message sending device of telecommunication, database synchronization technology can be used here to make the stored information of services registered with the service providers both on the message receiving device and on the message sending device consistent. In this way, the message receiving device, based on the latest total information of service registered with service providers, may re-authenticate whether or not the message is of a service registered by the message receiving device with the service providers (S211). Also, if the authentication succeeds, the process proceeds to step S213, where the message receiving device accepts the message and sends the signal indicating that the message is successfully received to the message sending device, and then the message sending device of telecommunication can charge this message. If the authentication fails, besides discarding this message, the message receiving device sends to the message sending device a signal informing that no charge has to done for this message due to an authentication failure. The signal might not be sent for example, because each message has its own life cycle, and time out, and the message sending device will discard the message automatically if it has not received the signal indicating that the message is successfully sent, and no fee will be charged for this message in this situation. Another feature of this distributed authentication is when the message receiving device requests the message sending device of telecommunication for information of services registered with the service providers, the message sending device of telecommunication can send the total information of services registered with the service providers stored on it to the message receiving device in one transaction.
In another embodiment, it is during registration stage that message receiving device receives information for authentication, referring to
During the usage stage, the service provider first sends the message to the message sending device of telecommunication (S306). The message sending device does not check and authenticate the message, and sends it to message receiving device directly (S307). After the message receiving device parses the received message, and gets information of services registered by a message receiving device with service providers. The message receiving device comprises storage means for storing information of services registered by a message receiving device with service providers during the registration stage; and authenticating means for, according to the information of services registered with the service providers stored in the storage means, authenticating whether or not the message is sent by a service registered with the service providers stored in the storage means (S308). If authentication succeeds, the message receiving device sends the signal indicating that message is successfully received to the message sending device, and then the message sending device of telecommunication can charge this message. If the authentication fails, besides discarding this message (S309), the message receiving device can send the message sending device a signal informing that no charge has to be done for this message due to authentication failure. The signal may not be sent for example, because each message has its own life cycle, and when timed out, the message sending device will discard the message automatically if it has not received the signal indicating that message is successfully sent, and no fee will be charged for this message in this situation.
Two working processes for distributed message authentication are described hereinbefore, and it should be understood that those two processes can be implemented by the same system hardware.
The message sending device shown in
In a preferred embodiment, the message sending device 402 further comprises second receiving means 4021 for receiving the information of services registered with the service providers by the message receiving device 401 but not stored locally or the total information of services registered with the service providers by the message receiving device 401; third receiving means 4023 for receiving a request for registering the service provided by a service provider from the message receiving device 401; recording means 4024 for storing the information of services registered with service provider by the message receiving device 401; third sending means 4022 for sending message of registering a service to the service provider by the message receiving device 401; and forth sending means which is not shown in
By using the message sending device and the message receiving device shown in
There is also provided a computer program product, comprising program code for implementing the method based as recited in one of method claims, the computer program product comprising a medium for storing the program code.
The invention can take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment containing both hardware and software elements. In a preferred embodiment, the invention is implemented in software, which includes but is not limited to firmware, resident software, microcode, etc.
Furthermore, the invention can take the form of a computer program product accessible from a computer-usable or computer-readable medium providing program code for use by or in connection with a computer or any instruction execution system. For the purposes of this description, a computer-usable or computer readable medium can be any apparatus that can contain, store, communicate, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device.
The medium can be an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, (or apparatus or device) or a propagation medium. Examples of a computer-readable medium include a semiconductor or solid state memory, magnetic tape, a removable computer diskette, a random access memory (RAM), a read-only memory (ROM), a rigid magnetic disk and an optical disk. Current examples of optical disks include compact disk-read only memory (CD-ROM), compact disk-read/write (CD-R/W) and DVD.
A data processing system suitable for storing and/or executing program code will include at least one processor coupled directly or indirectly to memory elements through a system bus. The memory elements can include local memory employed during actual execution of the program code, bulk storage, and cache memories which provide temporary storage of at least some program code in order to reduce the number of times code must be retrieved from bulk storage during execution.
Input/output or I/O devices (including but not limited to keyboards, displays, pointing devices, etc.) can be coupled to the system either directly or through intervening I/O controllers.
Network adapters may also be coupled to the system to enable the data processing system to become coupled to other data processing systems or remote printers or storage devices through intervening private or public networks. Modems, cable modem and Ethernet cards are just a few of the currently available types of network adapters.
The description of the present invention has been presented for purposes of illustration and description but is not intended to exhaust or limit the invention in the form disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art. The embodiments were chosen and described in order to best explain the principles of the invention and the practical application, and to enable others of ordinary skill in the art to understand the invention for various embodiments with various modifications as are suited to the particular use contemplated.
Although the illustrative embodiments have been described herein with reference to the accompanying drawings, it is to be understood that the present invention is not limited to those precise embodiments, and that various other changes and modifications may be affects therein by one of ordinary skill in the related are without departing from the scope or spirit of the invention. All such changes and modifications are intended to be included within the scope of the invention as described by the appended claims.
Number | Date | Country | Kind |
---|---|---|---|
200610151461.4 | Aug 2006 | CN | national |