Patent Grant
7836167
The present invention relates to network communication technology, and more particularly, to a method for monitoring the connection state of a user based on a handshaking mechanism of Portal authentication.
With the development of network communication technologies, various access authentication methods have been adopted for communication networks. Portal authentication is becoming increasingly popular for network operators because of its power supporting capability for new services, elimination of the need for client software, and the like. During implementation of a Portal authentication, to charge a user accurately for its access to the network, it is necessary to monitor the online state of the user in real time. More specifically, when a user logs in successfully, the client terminal sends handshaking packets to the Portal Server periodically. If the Portal Server does not receive the handshaking packets after a given period of time, the Portal Server will force the user to log off to prevent the accounting server from charging the user when the user cannot communicate with the Portal Server.
Currently, the handshaking mechanism referenced above can be implemented as follows. When a user logs in successfully, an application or a control unit is downloaded for the user. The downloaded application periodically creates a TCP/IP connection with the Portal Server, sends handshaking request packets to the Portal Server, and then waits for the response packets from the Portal Server. After receiving a handshaking request packet from the user, the Portal Server updates the on-line time of the user and sends a response packet to the user terminal. After receiving a response packet from the Portal server side, the application or control unit on the user terminal side carries out the proper operations based on the returned connection state of the user. If the Portal Server has not received the user's handshaking request packet after a given period of time, the user will be deemed as being off-line and the Portal Server will send a stop charging packet to the device side.
Such a handshaking mechanism requires installation of an application on the user terminal to ensure the accuracy of charges for a user's access to the network. With ongoing developments in computer technology, software packages for use with a computer are also constantly updated. Therefore, implementation methods such as those described above based on the handshaking mechanism of the Portal authentication can have limitations in application. For example, when the browser on the user terminal is set to a higher security level, the software for sending handshaking request packets often cannot be downloaded. Even if the software is downloaded, the downloaded software often cannot run because of a different operating environment such as different operating systems of the users. In such cases, the handshaking mechanism based on Portal authentication cannot be implemented. The user's online state cannot be monitored and the user who accesses the network can not be charged accurately, which is unacceptable not only to the users but also to the network operators.
The present invention can provide a method for monitoring the connection state of users so that a server can accurately monitor the online state of a user without an application downloaded on the user terminal. The invention can thereby provide a method for accurately charging a user for accessing the network.
The method according to the present invention can include the following steps. When a user accesses a network, the network side loads a recognizable browser page on the user terminal and monitors the connection state of the user through message interaction with the browser page.
By using this method, the implementation of the handshaking mechanism based on Portal authentication does not require the user terminal to download and install any application, thus overcoming the limitations in the prior art. Thus, monitoring a user's connection state is no longer restricted by different operating systems or different security levels of browsers on the user terminal, and further, Portal authentication does not require client software at the client side. In addition to this advantage, by using this method, the on-line state of a user can be reliably monitored, which facilitates accurate charging by the authentication and accounting server of an user for accessing the network based on the online state of the user.
The present invention now will be described more fully hereinafter in the following detailed description of the invention, in which some, but not all embodiments of the invention are described. Indeed, this invention may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will satisfy applicable legal requirements.
The following description is directed to an exemplary embodiment of the present invention which is implemented in a network based on Portal authentication.
Referring to
Based on the network architecture mentioned above, an embodiment of the invention is shown in
Step 300: after receiving an access request sent by the user, the network access device authenticates the user via the authentication and accounting server. If the authentication is successful, the network access device permits the user to access the network, sends a browser page request including current state information of the user 104 to the Portal Server, and then proceeds to Step 301. If the authentication fails, the process does not proceed.
Step 301: the Portal Server sends a recognizable browser page to the user. The browser page can be a HTML file based on HTTP, although page files of other formats that can be recognized by the user terminal also can be used in accordance with the present invention.
To provide a better display effect for the user, the browser page displayed according to the browser page file can be configured as two sub-pages, wherein:
One sub-page is called a top page, which fills up the whole screen and is used to dynamically display the information about the online time of the user, the connection state of the user, and the like, based on the information of the user connection state. This sub-page can also include a timer set based on the time interval between two consecutive request packets for page updating.
The other sub-page is called a bottom page, is of zero height and is hidden, and can contain a variable of user connection state reflecting the user state and set by the Portal Server based on the current connection state of the user. The current connection state of the user can include one of the following states: a normal connection state, a time out state of sending page updating request, a forced off-line state by the network access device, and a state of closing the browser page. When the timer set on the top page overtimes, the user sends to the Portal Server a page updating request packet for reloading the bottom page to update the user connection state information in the bottom page.
Step 302: the browser page on the user terminal periodically sends page updating request packets to the Portal Server to update the user connection state information on the browser page and to request the Portal Server to update the online time of the user.
Updating the user connection state information on the user terminal can let the user know more about its online state, including whether a forced off-line is imposed, whether the connection is normal, and the like.
Step 303: after receiving the page updating request packet from the user, the Portal Server updates the online time of the user and then proceeds to Step 304.
Here, the Portal sever periodically polls page updating request packets sent by the user based on a set time interval. The set time interval is usually set to less than the time-out interval set in the timer on the browser page sent to the user terminal. When the Portal server receives the page updating request packet sent by the user, the Portal server updates the current online time of the user based on the connection information of the user stored therein.
Step 304: the Portal Server monitors the time difference between the online time of the user and the current system time. That is, the Portal Server monitors in real time, determines the time difference between the online time of the user and the current system time, judges whether the time difference is greater than the time interval between two consecutive page updating request packets sent by the user terminal, and if so, proceeds to Step 305. Otherwise, the method proceeds to Step 306.
Step 305: confirms that the user is off-line, i.e., the user is disconnected with the network, and then proceeds to Step 307.
Here, if the user is confirmed to be off-line, the Portal Server informs the authentication and accounting server to stop charging the user so as to ensure the accuracy of the charging.
Step 306: confirms that the user is still online, and then proceeds to Step 307.
Step 307: the Portal Server, based on the page updating request packet sent by the user, sends to the user terminal a packet being used to update the user connection state information. Specifically, the Portal Server loads the user connection state information on the bottom page before sending it to the user so as to update the user connection state information, and the user terminal displays part of or all the user connection state information on the top page through the top page based on the updated user connection state information so that the user can receive more information about network access, such as the online time of the user, whether the user was forced off-line, whether the connection was normal, and the like.
The method for monitoring the connection state of a user according to the present invention can be further described with reference to
It can be seen from the above description that if the user closes the browser page loaded by the Portal Server directly in an abnormal manner, the Portal Server can not receive any off-line request packets from the user. In this case, the Portal Server confirms that the user is already off-line according to Steps 304 and 305 mentioned above, and imposes forced off-line on the user through the network access device. At the same time, the Portal Server informs the authentication and accounting server to stop charging the user so as to ensure the accuracy of the charging and prevent unnecessary losses to the user.
In order to keep a normal interaction between the user and the Portal Server, when the user forces a closed operation to the browser page, the Portal Server will prompt the user whether or not to log off. If the user clicks the off-line button or directly closes the prompt window, an off-line request is submitted to the Portal Server by the browser page for an off-line treatment. Otherwise, the user returns to the previous browser page.
In summary, when a user accesses a network, a recognizable browser page is sent to the user terminal, and packet interaction is carried out with this browser page in such a way that the connection state of the user can be monitored. By using this method, it can be possible to reliably monitor the user's online state so the authentication and accounting server can accurately charge a user who accesses the network and accepts the services of the network. Yet, the handshaking mechanism can also be implemented with few or no limitations on the user terminal to implement the monitoring of the user connection state, i.e., whether the user is online.
Mentioned above is only an exemplary embodiment of the present invention, which should not be taken as limitations to the protective scope of the present invention. The foregoing description is an exemplary embodiment of this invention and should not be construed as limiting the protection scope of this invention. Many modifications and other embodiments of the invention will come to mind to one skilled in the art to which this invention pertains having the benefit of the teachings presented in the foregoing descriptions. Therefore, it is to be understood that the invention is not to be limited to the specific embodiments disclosed and that modifications and other embodiments are intended to be included within the scope of the appended claims. Although specific terms are employed herein, they are used in a generic and descriptive sense only and not for purposes of limitation, the scope of the invention being defined in the claims.
| Number | Date | Country | Kind |
|---|---|---|---|
| 03 1 32983 | Jul 2003 | CN | national |
This application is a continuation-in-part of PCT Application No. PCT/CN2004/000850, filed Jul. 22, 2004, pending, which designates the U.S., which is hereby incorporated herein by reference in its entirety, and which claims priority from Chinese Application No. 03132983.7, filed Jul. 23, 2003.
| Number | Name | Date | Kind |
|---|---|---|---|
| 6050898 | Vange et al. | Apr 2000 | A |
| 6636894 | Short et al. | Oct 2003 | B1 |
| 6701522 | Rubin et al. | Mar 2004 | B1 |
| 6735624 | Rubin et al. | May 2004 | B1 |
| 6789110 | Short et al. | Sep 2004 | B1 |
| 7127511 | Tonouchi | Oct 2006 | B2 |
| 7327693 | Rivers et al. | Feb 2008 | B1 |
| 7437457 | Eisendrath et al. | Oct 2008 | B1 |
| 7720938 | Bowser et al. | May 2010 | B2 |
| 20010019559 | Handler et al. | Sep 2001 | A1 |
| 20010041566 | Xanthos et al. | Nov 2001 | A1 |
| 20020091770 | Takakura et al. | Jul 2002 | A1 |
| 20020095387 | Sosa | Jul 2002 | A1 |
| 20020156812 | Krasnoiarov et al. | Oct 2002 | A1 |
| 20020161833 | Niven et al. | Oct 2002 | A1 |
| 20030037124 | Yamaura et al. | Feb 2003 | A1 |
| 20030065787 | Osafune et al. | Apr 2003 | A1 |
| 20030200321 | Chen et al. | Oct 2003 | A1 |
| 20040030744 | Rubin et al. | Feb 2004 | A1 |
| 20040034502 | Jung | Feb 2004 | A1 |
| 20040205473 | Fisher et al. | Oct 2004 | A1 |
| 20050034152 | Matsumoto et al. | Feb 2005 | A1 |
| 20050043020 | Lipsanen et al. | Feb 2005 | A1 |
| 20050105509 | Crocker et al. | May 2005 | A1 |
| 20050157722 | Yoshimoto et al. | Jul 2005 | A1 |
| 20050198501 | Andreev et al. | Sep 2005 | A1 |
| 20060031476 | Mathes et al. | Feb 2006 | A1 |
| 20060136592 | Heymann | Jun 2006 | A1 |
| 20060155994 | Sun | Jul 2006 | A1 |
| 20060202037 | Gunawardena et al. | Sep 2006 | A1 |
| 20060234735 | Digate et al. | Oct 2006 | A1 |
| 20060291455 | Katz et al. | Dec 2006 | A1 |
| 20070159971 | Zhang et al. | Jul 2007 | A1 |
| 20080103685 | Morita | May 2008 | A1 |
| Number | Date | Country |
|---|---|---|
| 1416072 | May 2003 | CN |
| 1416090 | May 2003 | CN |
| Number | Date | Country | |
|---|---|---|---|
| 20070282998 A1 | Dec 2007 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | PCT/CN2004/000850 | Jul 2004 | US |
| Child | 11337761 | US |
