CN1464425A - A method of simplified access of internet service provider's portal websites - Google Patents

Abstract

The invention relates to a method for simply accessing a portal website of a network operator, using destination address translation + source address translation + redirection technology to force a user's visit to any website when logging in for the first time to a portal server (Portal_Server), And after passing the authentication, it is no longer mandatory to ensure that users can surf the Internet normally. Including: the access server performs forced conversion of the destination address of the upstream HTTP message before the user fails to pass the authentication, replaces the destination website address with the address of the portal website server, and forces it to the portal website server; the portal website server establishes a transmission control protocol connection , and at the same time send a response message containing redirection information to the user; the access server performs source address conversion on the downlink HTTP message, and replaces the address of the portal website server with the address of the destination website that the user originally wanted to visit; the user receives a response message containing redirection information The response message of the information is automatically accessed directly with the IP address of the portal server.

Description

A Simple Method of Accessing Network Operator's Portal

technical field

The present invention relates to an Internet service technology, more specifically to a technology related to mandatory (Portal) services.

Background technique

Portal service is a new type of broadband access service provided by NSP/ISP (Network Service Provider/Internet Service Provider) to users. When users surf the Internet, they can use standard WWW browsers (Internet Explorer or Netscape Navigator ) to visit its portal website (Portal_Server, realized by Web Server). Each operator has its own Portal_Server.

Since any user needs to directly enter the domain name or IP address of the website to access any website, the user also needs to follow the steps below to access the website of the Portal business: first open the browser and enter the IP address of the Portal_Server or domain name to access the portal website of the Portal business; then enter the user name and password on the homepage of the portal website for authentication; and obtain the corresponding Internet access authority after authentication. In addition, on this homepage, you can dynamically select the business that suits you, or query some information that you care about, so that you can manage yourself. That is, every time the user wants to visit the Portal_Server website, he must input the complete domain name or IP address on the browser to proceed.

According to the above statement, Portal_Server, as an important part of the Portal business, is the website that the users of the Portal business must visit when surfing the Internet, and is the portal when the users surf the Internet. If the above-mentioned traditional method of accessing a website is adopted, that is, a domain name and an IP address need to be input every time, the operator must be required to provide each user with the domain name or IP address of its website, and the user must also remember the domain name or IP address of the website simultaneously. The IP address obviously brings inconvenience to operators and users, which is not conducive to the promotion of Portal services.

Since the Portal_Server portal site is the portal site that must be passed by the users of the Portal business when surfing the Internet, it is particularly important to provide a very simple and convenient access method for it.

In order to facilitate the development of Portal services by operators and the use of users, it is necessary to design a new method of accessing Portal service websites for the above problems, so that users of Portal services do not need to care about the domain name or IP of this Portal_Server, and users normally press According to one's own habit of surfing the Internet, one can randomly input the familiar domain name or IP address of the user on the browser, or even type in a few numbers at will, and it will be automatically directed to this portal website, which is convenient for the user to log in to this website.

Contents of the invention

The purpose of the present invention is to design a method for simply accessing the portal website of a network operator, so that when the user logs in for the first time, any website visited is forced to the Portal_Server website, and authentication and service selection are completed on it. , to ensure that the user will not be forced to visit any website again, that is, the user can surf the Internet normally.

The problem to be solved by the present invention is exactly how to force any visits to be carried out when the user logs in for the first time to the Portal_Server website, and no longer force after the user passes the authentication, so as to ensure the normal access of the user.

The technical scheme that realizes the object of the present invention is such: a kind of method for simply visiting network operator's portal website is characterized in that comprising the following processing steps:

A. The access server performs mandatory destination address translation on the first upstream HTTP packet before the portal service user equipment fails authentication, and replaces the destination website address to be accessed by the portal service user equipment with the address of the portal website server. The HTTP message is forced to the portal server;

B. The portal website server that receives the HTTP message establishes a transmission control protocol connection, and simultaneously sends a response message that includes redirection information to the portal service user equipment;

C. The access server performs mandatory source address translation on the downlink HTTP message from the portal server, and replaces the address of the portal server with the address of the destination website that the portal business user equipment originally wanted to visit;

D. The portal service user equipment receives the response message containing the redirection information returned by the access server, and automatically directly accesses the portal server with the IP address of the portal server.

The uplink HTTP message in step A may be an IP message formed after any correct domain name, IP address or any number input by the portal service user to the browser.

Before described step A, further comprise the following processing steps:

A1. The access server analyzes the connection information of the uplink message, and directly forwards the IP message determined to be a non-portal service user equipment;

A2. The access server judges whether the IP packet directly accesses the portal server by comparing the destination IP address of the uplink message from the portal service user equipment with the IP address of the portal server configured on the access server. arts;

A3. The access server also judges whether it is a message for domain name resolution according to the destination port number of the IP message;

A4. Directly forward the message for directly accessing the portal server or the message for domain name resolution;

A5. For a message that does not directly access the portal server or a message that does not perform domain name resolution, further determine whether it is the first upstream HTTP message before the portal service user device fails authentication. For IP messages that are not HTTP messages Set the discard flag on the message.

Before described step C, further comprise the following processing steps:

C1. The access server analyzes the connection information of the downlink message, and performs direct forwarding processing for the IP message judged to be a non-portal service user equipment;

C2. access server, for the IP message of the portal service user, judges whether the IP message is an HTTP message from the portal server and the portal service user who has not passed the authentication according to its destination port number;

C3. For the HTTP message not from the portal server, the access server also judges whether it is an IP message from the portal server or a response message for domain name resolution according to the destination port number of the IP message;

C4. The access server directly forwards the IP message from the portal server or the response message for domain name resolution;

C5. The access server sets a discard flag on the IP message that does not come from the portal server or the response message that does not perform domain name resolution.

The technical method of forcing Portal proposed by the present invention enables users to surf the Internet according to their own habits, and before passing the authentication, input any correct domain name, IP address, or even any number, which can be forced to the Portal_Server. Realize the visit to Portal_Server, so that the user does not need to care about the domain name or IP address of the Portal_Server, the user will be automatically directed to the portal.

Portal_Server Portal website is the website that Portal business users must go through before going online. It is very important to realize this automatic access.

The method of the present invention includes all three aspects of realizing mandatory Portal destination address translation (DNAT), source address translation (SNAT) and redirection (Redirect), and the Portal mandatory technical solution realized by the combination of these three aspects. That is, the mandatory Portal technical solution realized through DNAT+SNAT+Redirect.

The present invention aims at the shortcoming that the original method for accessing a website can only be realized by directly inputting a domain name or an IP address, and realizes the method that any correct domain name, IP address or any number can be automatically forced to the Portal_Server website for input. Access to any Portal business portal website, which best solves the requirement that users of Portal, a new type of broadband service, must first visit the Portal homepage for authentication. Forced to the portal website Portal_Server, after completing the authentication on it, you can surf the Internet.

Description of drawings

Fig. 1 is the process schematic diagram that the present invention utilizes "DNAT+SNAT+Redirect" technology to realize mandatory Portal;

Fig. 2 is a block diagram of the processing flow of the access server to the user message uplink process;

Fig. 3 is a block diagram of the processing flow of the access server for the downlink process of the Portal_Server message.

Detailed ways

In order to force the first HTTP message of Portal service user to visit any website before authentication to Portal_Server, the present invention introduces destination address translation (DNAT) and source address translation (SNAT) in the normal IP packet processing flow of access server end Combined technology, and the introduction of redirection (Redirect) technology on the Portal_Server side to achieve. That is, the technical solution of DNAT+SNAT+Redirect.

Referring to Fig. 1, flow process among the figure shows the main design idea of the inventive method, comprises:

Step 1. The user (PC) enters any correct domain name, IP address or any number into the address bar of the browser. If the user enters a domain name or IP address, the access server (BAS) will obtain the domain name or IP address. Domain name resolution server (DNS) message, if the user enters any number, the browser will automatically treat it as a character when inputting an IP address that fails to establish a connection, plus a prefix of WWW and a suffix such as com, and then Send an IP message containing a DNS resolution message;

Step 2, on the access server (BAS), carry out mandatory destination address translation (DNAT) for the first HTTP message before the Portal business user (PC) fails to authenticate, store the destination website address and the URL that the user will visit The address of the destination website is replaced with the address of Portal_Server (P.S), thereby forcing the HTTP message to Portal_Server;

Step 3, after Portal_Server (P.S) receives such first HTTP message, set up Transmission Control Protocol (TCP) to connect, send the response message that comprises redirection (Redirect) information to user end simultaneously, so that user end You can directly use the IP address of Portal_Server to connect to Portal_Server;

Step 4, when the access server (BAS) receives the IP packet (containing redirection information) from Portal_Server (P.S), and its destination address is when the user who has not passed the verification, carry out mandatory source address translation (SNAT), will The address of Portal_Server (the source address in the message at this time) is replaced with the website address that the user originally wishes to visit, so that the client can normally establish a TCP (Transmission Control Protocol) connection;

Step 5, at last, after the client (PC) receives the message containing Redirect brought back by Portal_Server that the access server (BAS) returns, it can automatically directly access Portal_Server with the IP address of Portal_Server, after this for the IP packet Processing will then be normal flow.

This completes the mandatory Portal.

Based on the main body design idea above, the specific implementation of the present invention can be divided into three parts: the processing process of the access server to the user's uplink message; the processing process of the access server to the Portal_Server downlink message; and the processing process of the Portal_Server end. The realization of these three parts will be described in detail below in conjunction with the flow chart.

Referring to Figure 2, it is the processing process of the access server to the user's uplink message, which is a mandatory Portal uplink processing process, mainly performing destination address translation (DNAT), and the first HTTP request before the Portal business user fails authentication. The message performs mandatory destination address translation, that is, the address of the destination website that the user wants to visit is replaced with the address of the portal website Portal_Server.

Step 201, the access server receives the IP packet from the client;

Step 202, the access server judges whether it is a Portal service user according to the analysis message connection information during the normal packet processing process of the IP message, and if so, continues to perform step 203;

Step 203, by comparing the user's destination IP address and the IP address of one or several Portal_Servers configured on the access server device, it is judged whether the user's message is a message for directly accessing the Portal_Server (consistency is direct access) , and judge whether to carry out the DNS (domain name resolution server) message of domain name resolution according to destination port number, if neither directly accessing the message of Portal_Server nor the DNS message, then turn step 204 to process;

Step 204, according to the standard port number that is only assigned to the HTTP message, it can be further judged whether it is the Portal service user's first HTTP message before authentication, if so, continue to perform step 205, if not then turn to step 206, Put a discard mark on the IP message, and enter the sending queue module for discard processing;

Step 205, make mandatory Portal, save the purpose IP address in the IP message, and replace the address of Portal_Server with this purpose IP address, then update the checksum (CRC) of the IP message, and just can enter the normal process of step 207 processed;

Step 207,208, in the above-mentioned process, for the user message that is not Portal business, or the user message of Portal business but is the message that directly visits Portal_Server or carries out the DNS message of domain name resolution, then can directly pass Access server forwarding, needn't make mandatory Portal, enter the normal flow process processing of step 207, then enter sending queue module in step 208.

In the IP message forwarding process of the above access server, it is first judged whether the input IP message is a user message of the Portal service (step 202). If it is a user belonging to Portal business, the forwarding process should be processed according to the following principles in turn and then the normal forwarding process, otherwise, it should be processed according to the normal forwarding process.

These principles include: for the IP message directly accessing the Portal_Server, or the DNS message for domain name resolution, it will pass directly without mandatory destination address translation (DNAT), which ensures that all user messages directly accessing the Portal_Server It can directly pass through the access server, and there is no need to enforce the access after the client is redirected to Portal_Server. DNS packets for domain name resolution can also pass directly through the access server, ensuring that the user can pass the domain name after entering the domain name. Analyze to obtain the corresponding IP address; capture the HTTP message that does not directly access Portal_Server, then save the original destination IP address, replace the destination address with the Portal_Server address, recalculate the checksum, and then forward it normally Process processing, the saved original destination IP address will be used in the process of the access server processing the user's downlink packets; for packets that neither directly access Portal_Server, nor DNS packets, nor HTTP packets, for discarding.

Referring to FIG. 3, FIG. 3 is a block diagram of the downlink processing flow of the access server to user packets (as SNAT), which is a mandatory Portal downlink processing flow. By performing mandatory source address translation (SNAT), the address of Portal_Server (the source address in the message at this time) is replaced with the address of the website that the user originally wants to visit, so that the user can establish a normal TCP connection.

Step 301, the access server receives the IP message from Portal_Server;

Step 302, the access server judges whether it is a Portal service user according to the analysis message connection information during the normal packet processing process of the IP message, and if so, continues to perform step 303;

Step 303, according to the standard port number that is only assigned to the HTTP message, judge whether the IP message is from Portal_Server and the destination address is an HTTP message that has not passed the authentication user, if so, perform step 304, if not, then perform step 305;

Step 304, make mandatory Portal, replace the source address (the address of Portal_Server) in the IP message with the destination website address (according to the storage result of Fig. 2 step 205) that the user will visit originally, then update the checksum of the IP message (CRC), just can enter the normal forwarding process of step 307 to process;

Step 305, further according to the destination port number of the IP message, judge whether it is the IP message from Portal_Server or the response message of domain name resolution DNS, if so, perform step 307, process according to the normal forwarding process, if not, then perform Step 306;

Step 306, put a discard mark on the IP message, and enter the sending queue module for discard processing;

Steps 307, 308, in the above-mentioned processing process, for not coming from the HTTP message of Portal_Server, or the DNS response message of the user message or domain name resolution from Portal_Server, then can directly enter the step by not having to make a mandatory Portal 307 of the normal flow process, and then enter the sending queue module in step 308.

In the IP message forwarding process of the above access server, first judge whether the input downlink IP message is a Portal service user, if it belongs to the Portal service user, the forwarding process must be processed according to the following three principles in turn and then normal The forwarding process is processed, otherwise, it is directly processed according to the normal forwarding process.

These principles include: capture the HTTP message from Portal_Server, replace the source IP address (that is, the Portal_Server address at this time) with the destination address that the user originally wanted to visit stored in the access server in the uplink processing of Figure 2, and recalculate Checksum; for the message from Portal_Server, or the response message of DNS, it will pass directly without forcing the Portal.

Other packets are discarded.

At the Portal_Server side, Portal_Server responds to the first HTTP request message of a TCP connection received, which is used to notify the corresponding client to re-initiate a TCP connection request to itself, that is, to redirect (Redirect), so that the user terminal connects The access to Portal_Server becomes direct access (equivalent to the IP address of the user input Portal_Server in the browser, direct access to Portal_Server), as shown in Figure 2, the direct access message to Portal_Server does not need to be mandatory, and It is no longer necessary to do DNAT+SNAT+Redirect.

The method of the invention can be used on the edge service router (ESR) and the broadband IP access equipment, and can completely meet the requirement of mandatory Portal.

Claims (7)

1. the method for an easy to access portal web site of network service provider is characterized in that comprising following treatment step:

A. access server does not carry out enforceable destination address conversion by first the up HTTP message before authenticating to the door service user device, the purpose station address that the Portal Service subscriber equipment will be visited replaces to the address of portal site server, and this HTTP message is forced on the portal site server;

B. the portal site server of receiving this HTTP message is set up transmission control protocol and is connected, and sends the back message using that comprises redirection information to the Portal Service subscriber equipment simultaneously;

C. access server carries out the conversion of enforceable source address for the descending HTTP message from portal site server, the address of portal site server is replaced to the Portal Service subscriber equipment wish the purpose station address of visiting originally;

D. the Portal Service subscriber equipment receives the back message using that contains redirection information that is returned by access server, directly visits portal site server with the IP address of portal site server automatically.

2. the method for a kind of easy to access portal web site of network service provider according to claim 1, it is characterized in that: the up HTTP message in the described steps A can be the IP message that the Portal Service user forms to any correct domain name, IP address or any numeral back of browser input.

3. the method for a kind of easy to access portal web site of network service provider according to claim 1 is characterized in that described steps A takes a step forward and comprises following treatment step:

A1. analyze the uplink message link information by access server,, do directly to transmit to handle for the IP message that is judged as non-door service user device;

A2. access server will be by will from the IP address of the portal site server that has configured on the purpose IP address of Portal Service subscriber equipment uplink message and the access server relatively judging whether its IP message is the message of directly visiting portal site server;

A3. access server also judges whether it is the message that carries out domain name mapping according to the destination slogan of its IP message;

So, do directly to transmit to handle A4. to message of directly visiting portal site server or the message that carries out domain name mapping;

A5. for not being directly to visit the message of portal site server or not being the message that carries out domain name mapping, further judge whether it is that the Portal Service subscriber equipment is not by first the up HTTP message before the authentication, for the IP message that is not the HTTP message, on message, be provided with and abandon sign.

4. the method for a kind of easy to access portal web site of network service provider according to claim 1, it is characterized in that: in the described steps A, when access server carries out the conversion of mandatory destination address, also store the purpose station address that this Portal Service subscriber equipment will be visited simultaneously; Among the described step C, when access server carries out the conversion of mandatory source address, be this purpose station address, the address of portal site server is replaced to this purpose station address according to storage.

5. the method for a kind of easy to access portal web site of network service provider according to claim 1 is characterized in that: in the described steps A, after access server carries out mandatory destination address conversion, also upgrade the IP message verification and.

6. the method for a kind of easy to access portal web site of network service provider according to claim 1 is characterized in that described step C takes a step forward and comprises following treatment step:

C1. analyze the downlink message link information by access server,, do directly to transmit to handle for the IP message that is judged as non-door service user device;

So C2. access server is to Portal Service user's IP message, judge that according to its destination slogan this IP message is whether from portal site server, the HTTP message of the Portal Service user by authentication;

C3. for not being HTTP message from portal site server, access server also judges whether it is from the IP message of portal site server or the back message using that carries out domain name mapping according to the destination slogan of its IP message;

C4. access server is done directly to transmit to handle to being to come from the IP message of portal site server or the back message using that carries out domain name mapping;

C5. access server is provided with on the IP message and abandons sign for not being from the IP message of portal site server or not being the back message using that carries out domain name mapping.

7. the method for a kind of easy to access portal web site of network service provider according to claim 1 is characterized in that: among the described step C, after access server carries out mandatory source address conversion, also upgrade the IP message verification and.

Images