CN1750568A - Data service control system, control network, and service control method - Google Patents

Abstract

This invention provides data service control system and data service control network for mobile communication network based on communication network, and method for controlling user data service request and SP server providing data service, which contains interface sub-system, database module and user information control module connected respectively with database module and interface sub-system, SP service module, ordering relation control module and SP synchronous module. Said invention provides uniform access mode and control system avoiding user privacy leakage and SP fraud.

Description

Data service control system, control network, and service control method

technical field

The present invention relates to a data service control system, a control network and a service control method, in particular to a data service control system, a data service control network including the data service control system, and a data service control system based on the data service control system Or a data service control network method for controlling a user's data service request or controlling an SP server's provision of a data service.

Background technique

With the improvement of user terminal production technology, including handheld mobile terminals and fixed terminals with data service capabilities, the functions of user terminal equipment are becoming increasingly complex, from the initial monochrome display to color screens to the addition of cameras, from simple vibration to From monotone to 16 chords to 32 chords, etc.; the business applications supported by user terminals have also developed from pure voice services to compatible voice services and value-added data services (such as MMS, CRBT, etc.) wait).

At the same time, with the development of IT technology, the communication network and the Internet show a trend of integration. Combining the real-name, operability, and high reliability capabilities of the communication network with the anonymity, low cost, and scalability of the Internet, it can provide users with easy-to-use, high-reliability, and excellent data services anytime and anywhere, forming a network consisting of user terminals, Data service network composed of user access system, service system and service provider (Service Provider, referred to as SP). The user accesses the system through the Internet or SMS, WAP and other users, provides the user terminal number to the SP, and orders SMS, MMS, CRBT and other services. provided to the user terminal.

Apparently, the user can order the service through the mobile communication network or through the Internet network. However, with the increasing popularity of MMS, CRBT and SMS services, and the growing consumer base, some disadvantages have gradually emerged.

First, there is the fraudulent behavior of SP. Since the end user's order relationship for SP services is generated by the SP, it is directly between the end user and the SP, and the operator does not participate in the generation process of the order relationship, but only provides information transmission channels for the SP. Therefore, the operator It is impossible to confirm whether the information sent by the SP to the end user conforms to the order relationship; the SP can send any SMS, MMS and CRBT to any end user through the SMS gateway. After sending SMS, MMS and CRBT, the user will be charged; at this time, even if the user finds a problem, not only the funds of the previous fraudulent consumption cannot be returned, but even a lot of trouble will be encountered when unsubscribing the service.

Second, there is fraudulent behavior by user end users. Since the operator system cannot judge the status of the terminal user in real time during the business process, the following situation occurs: the user uses his own terminal to register and use the service at the SP, and then shuts down his own terminal, but he can continue to use the service provided by the SP. Businesses, SPs and operators are unable to collect fees from users and suffer losses.

Third, there is a risk of user privacy leakage. The traditional data service uses the user number MSISDN as the user identification. Whether the user subscribes to the service through the Internet or the mobile network, he needs to inform the SP of his user terminal number, and the user number MSISDN will inevitably be exposed to the service provider SP. The service provider SP can analyze the user number resources, find out the user group with specific value, and carry out some targeted control. For example, actively sending a large number of promotional advertisements to VIP users; or directly selling VIP user numbers to other mobile operators and so on.

Fourth, service and control are decentralized. Since users need to order corresponding services from different SPs, special paths are required to activate and deactivate a certain service, so there is no unified interface, and it is impossible to uniformly control all services subscribed by user terminals.

Apparently, it is impossible to uniformly control and process data services in the prior art solutions.

Contents of the invention

The first purpose of the present invention is to provide a data service control system for the above-mentioned defects in the existing communication network, which provides a unified data processing platform for user terminal and SP server data.

The second object of the present invention is to provide a data service control network for managing the existing communication network in view of the defects in the above existing communication network. The data service control network connects the above data service control system with the existing communication network Combined to form a user data network that can prevent SP and user fraud.

The third object of the present invention is to provide a method for controlling user data service service requests according to the data service control system or data service control network. Decide whether to execute the request.

The fourth object of the present invention is to provide a method for controlling the data service provided by the SP server according to the data service control system or the data service control network, the method performs authentication on the data service sent by the SP server, and according to the The result determines whether to send the service.

In order to achieve the above-mentioned first purpose, the present invention provides a data service control system, including an interface and a database module, and also includes:

A user information control module is respectively connected with the interface and the database module, and the user information control module is used to obtain instructions from the user terminal or the SP server, or return an operation result to the user terminal or the SP server; Or the instruction of the SP server to authenticate the user information, or to generate, delete, query or change the user information;

An SP service control module is connected with the interface and the database module respectively, and is used to obtain instructions from the user terminal or the SP server, or return an operation result to the user terminal or the SP server; Instruct the authentication operation of SP business information, or generate, delete, query or change the SP business information;

A purchase relationship control module is connected with the interface and the database module respectively, and is used to obtain instructions from the user terminal or the SP server, or return an operation result to the user terminal or the SP server; Instructing the authentication operation of the user order relationship information, or generating, deleting, querying or changing the user order relationship information according to the authentication results of the user information control module and the SP service control module; the order relationship control The module is also connected to the user information control module and the SP service control module, and is used to obtain the authentication results of the user information control module and the SP service control module;

An SP synchronization module, connected with the order relationship control module, used to obtain the generation, deletion, query or change information of the user order relationship information; also connected with the interface, used to generate, delete, and update the user order relationship information Query or change information is synchronized to the SP server.

To achieve the second purpose, the present invention provides a data service control network, including user terminals in the communication network, a service system, a user access system, and an SP server connected to the communication network, and also includes the above-mentioned data service control system, the The data service control system obtains user terminal or SP server instructions from the service system and/or user access system, and performs operations of generating, deleting, modifying, and querying user information, SP service information, and user order relationship information, and performs operations on the command for authentication.

In order to achieve the above-mentioned third purpose, the present invention provides a method for controlling user data business service requests, including the following steps:

Step 11, the data service control system obtains the request information of the data service service sent by the user terminal through the user access system and/or the service system, and the request information contains SP code, user identity information and requested service information, and the SP code as purpose code;

Step 12, the data service control system authenticates the request information, sends the request invalid information to the user for the request information that has not passed the authentication, and ends the data service operation; for the request information that passes the authentication, execute the step 13;

Step 13, when the request information is service use operation request information, the data service control system returns an authentication pass instruction to the user access system or service system, and the user access system or service system transmits the user service request information to the SP server;

When the request information is order or cancel order request information, the data service control system executes order or cancel order operation;

When the request information is service request information, the data service control system generates the service link and returns the link to the user access system or service system, and the user access system and/or service system combines the link with the user service request information Send it to the SP server together, and the user access system and/or service system sends the link to the user terminal;

The request information is the information requested by the user for query operation, the data service control system completes the corresponding query operation, and returns the query result to the user through the user access system or the service system.

In order to achieve the above-mentioned fourth purpose, the present invention also provides a method for controlling the data service provided by the SP server, comprising the following steps:

Step 21, the user access system and/or service system receives the user terminal number and the service information sent by the SP server, and the user terminal number is a purpose code;

Step 22. The user access system and/or service system generates and sends service authentication information for the purpose code and service information to the data service control system;

Step 23. The data service control system authenticates the authentication request information and the target code information, and executes step 4 for requests that fail the authentication; executes step 5 for requests that pass the authentication;

Step 24, the data service control system sends an instruction that the authentication result is invalid to the user access system and/or the service system, and the user access system and/or the service system forwards the instruction that the authentication result is invalid to the SP server;

Step 25. For the service that has passed the authentication, the data service control system sends a permission instruction to the user access system and/or the service system, and the service system and/or the user access system sends the service information to the service specified by the purpose code. user terminal.

Therefore, the present invention has the following advantages:

1. Unified user control, check user information when establishing an order relationship, to avoid user fraud;

2. Unified SP control, matching check is performed when SP sends business information to avoid SP fraud;

3. Pseudo-code technology, the SP cannot know the identity of the user to avoid leakage of user privacy;

4. Unified access method and control system. Whether users access the data service control system through the mobile communication network or the Internet, it avoids the problem that one data service corresponds to one access method, saves the user's time, and It is convenient for users to query and control.

The technical solutions of the present invention will be described in further detail below in conjunction with the accompanying drawings and embodiments.

Description of drawings

FIG. 1 is a structural diagram of Embodiment 1 of the data service control system of the present invention;

FIG. 2 is a structural diagram of Embodiment 2 of the data service control system of the present invention;

FIG. 3 is a structural diagram of Embodiment 3 of the data service control system of the present invention;

FIG. 4 is a structural diagram of Embodiment 4 of the data service control system of the present invention;

Fig. 5 is a structural diagram of Embodiment 5 of the data service control system of the present invention;

FIG. 6 is a structural diagram of Embodiment 1 of the data service control network of the present invention;

FIG. 7 is a structural diagram of Embodiment 2 of the data service control network of the present invention;

FIG. 8 is a structural diagram of Embodiment 3 of the data service control network of the present invention;

FIG. 9 is a structural diagram of Embodiment 4 of the data service control network of the present invention;

FIG. 10 is a schematic diagram of a data service control method according to the present invention;

FIG. 11 is a flow chart of controlling user request services in the data service control method of the present invention;

Fig. 12 is a flow chart of controlling the service provided by the SP in the data service control method of the present invention.

Detailed ways

Specific embodiment 1 of the data service control system A of the present invention, as shown in Figure 1, is a system structure diagram of the data service control system of the present invention; comprises an interface 11, a database module 12, a user information control module 13, a SP Business control module 14, a purchase relationship control module 15 and a SP synchronization module 16.

The interface 11 includes the interface connected with the service system and/or the interface connected with the user access system: the service system includes the multimedia message system, the short message system, the Java download system, the streaming media system, the personal information control service system, the location service system, the terminal control system, WAP gateway system or HTTP gateway system or any combination thereof; user access systems include SMS access system, WAP access system, WWW access system, voice value-added service (IVR) access system, client software interface into one or any combination of the systems.

The interface 11 also includes a message routing and forwarding interface, which is used for message forwarding when the data service control system is networked.

The database 12 is connected with the user information control module 13, the SP service control module 14 and the order relationship control module 15, and saves the corresponding data of the above-mentioned modules in the form of a list, specifically, according to the user information control module 13, the SP service control module 14 and the order relation control module 15’s operation instructions to generate, delete or modify user information, SP business information and user order relation information, or provide data to be stored for the user information control module 13, SP service control module 14 and order relation control The module control module 15 invokes the query.

User information control module 13 is connected with interface 11, is used for obtaining the instruction of user terminal or SP server, or returns operation result to user terminal or SP server, and wherein, user terminal is mobile terminal or has the fixed terminal of sending and receiving capability; 11 When the command obtained is a service request sent by the user, the user information is generated, deleted or changed, and the user information is authenticated by the command. At this time, the user information is the user identity information, such as judging whether the user is a legitimate user ; For the user through authentication, the authentication is sent to the order relationship control module 15 through information; when the instruction obtained from the interface 11 is the query instruction to the user identity information sent by the SP server, query and send to the user through the interface 11 The SP server returns the result of the query operation.

The user information control module 13 is connected with the database module 12, and the database module 12 stores the data that the user information control module 13 generates, deletes, inquires about or changes the user information, and instructs the user terminal or the SP server in the user information control module 13 Provide corresponding storage data when authenticating user information.

SP service control module 14 is connected with interface 11, is used to obtain the instruction of user terminal or SP server, or returns operation result to user terminal or SP server; When the instruction obtained from interface 11 is the SP service information that SP server sends, carry out Save, generate, delete or change the SP service information; when the instruction obtained from the interface 11 is a service request sent by the user, perform the authentication of the SP service information, and send the authentication result to the user terminal through the interface 11; When the instruction acquired by the interface 11 is a query instruction for SP service information sent by the user, the query is performed and the query operation result is sent to the user terminal through the interface 11 .

The SP service control module 14 is connected with the database module 12, and the database module 12 stores the data that the SP service control module 13 generates, deletes, inquires about, or changes the SP service information, and the SP service control module 14 performs an operation on the user terminal or the SP server. Provide corresponding stored data when instructing the authentication of SP service information.

Order relation control module 15 is connected with interface 11, is used for obtaining the instruction of user terminal or SP server, or returns operation result to user terminal or SP server; The authentication result of the information control module 13 and the SP service control module 14; when the service request sent by the instruction user obtained from the interface 11, call the authentication result of the user information control module 13 and the SP service control module 14, if the authentication passes , that is, the user has the right to use the SP service, and the SP service exists, then generate or change the user order relationship information; when the instruction obtained from the interface 11 is an instruction to cancel the user subscription relationship information sent by the user, delete the user order relationship information; when When the instruction obtained from the interface 11 is the service information sent by the SP server, the authentication of the service information is performed according to the stored user order relationship information, and if the authentication is passed, the service information is sent to the user through the interface 11, otherwise, the service invalidation information is returned To the SP server; when the received instruction is the order relationship query information sent by the user or the SP server, query and return the query result to the user or the SP server respectively.

The order relationship control module 15 is connected with the database module 12, and the database module 12 stores the data that the order relationship control module 15 generates, deletes, inquires or changes the user's order relationship information, and in the order relationship control module 15 to the user terminal or the SP server Provide the corresponding stored data when authenticating the order relationship information according to the instruction.

The SP synchronous module 16 is connected with the order relation control module 15, is used to obtain the generation, deletion, query or change information of user order relation information; The change information is synchronized to the SP server. When the user order relationship module 15 was performing the generation, deletion, query or change operation of the user order relationship information, the information was sent to the SP synchronization module 16 while the database module 12 was storing the records, and the information was sent to the SP synchronization module 16 by the SP synchronization module 16. Synchronize to the SP server through the interface 11.

In specific embodiment 1, interface 11 also comprises the interface that is connected with BOSS system, through this interface 11, BOSS system synchronizes user account information to user information control module 14, and saves to the user of database module 12 by user information control module 14. information.

When the instruction obtained by the user information control module 13 from the interface 11 is a service request sent by the user, the user information is generated, deleted or changed, and the user information is authenticated. The user information at this time includes user account information and user information. Identity information, such as judging whether the user is a legitimate user, and whether the user account balance meets the application conditions, etc. For the authenticated user, the authentication information is sent to the order relationship control module 15 .

In specific embodiment 1, interface 11 also comprises the interface that is connected with SP service control system, and SP service control system is SP server access system, and SP server approves SP service application through SP service control system; SP service control system is to SP server The service information is controlled, and through the interface 11, the controlled and processed service information is synchronized to the SP service control module 14 through the interface, and the SP service information stored in the database module 12 is generated. That is to say, in this embodiment, the SP service information generated by the SP service control module 14 is not directly obtained from the SP server, but obtained from the SP service control system.

The specific embodiment 2 of data service control system A of the present invention, referring to Fig. 2, comprises an interface 11, a database module 12, a user information control module 13, an SP service control module 14, a purchase relation control module 15 and a SP The synchronization module 16 also includes a pseudocode control module 17, which is serially connected between the SP synchronization module 16 and the database module 12, and is used for generating and/or querying the pseudocode of the subscriber number MSISDN.

Pseudo-code control module 17 adopts pseudo-code generation algorithm to generate pseudo-code, completes the forward and reverse encryption conversion between user number MSISDN and pseudo-code, and pseudo-code authenticity, integrity check; this pseudo-code generation algorithm uses key The generation algorithm completes the generation of the key used in the pseudo code generation algorithm; the key generation algorithm adopts the key derivation algorithm, and completes the distribution of the root key to the SP private key according to the SP identification ID. Wherein, the pseudo code generation algorithm, key generation algorithm and key derivation algorithm can use any pseudo code generation algorithm, key generation algorithm and key derivation algorithm known to those skilled in the art.

The pseudo code control module 17 establishes the corresponding relationship between the user terminal number and the pseudo code, and transmits it to the user information control module 13 through the order relationship module, and is stored in the database module 12 by the user information control module 13. Through the control of the pseudo code control module 17, in the user order relationship information synchronously given to the SP server by the SP synchronization module 16, the user terminal number is replaced by the generated pseudo code, and the SP server cannot understand the real user terminal number; correspondingly, In the service information provided by the SP server received by the order relationship control module 15, the destination number is also a pseudo code of the user, then the pseudo code control module 17 is called to carry out anti-pseudo code control to obtain the user terminal number, and then the order relationship module 15 is still the user terminal number The order relationship information corresponding to the SP service information is authenticated.

Specific embodiment 3 of the data service control system A of the present invention, referring to Fig. 3, comprises an interface 11, a database module 12, a user information control module 13, an SP service control module 14, a purchase relationship control module 15 and a SP Synchronization module 16 also comprises a single sign-on module 18, and this single sign-on module 18 realizes providing user unified access and information inquiry control for the user by embedding the login page in the SP server, specifically, is in the SP server The login page is embedded in an iframe. The single sign-on module 18 is connected to the interface 11, and interacts with the user information control module 13, the subscription relationship control module 15 and the SP service control module 14 through the interface 11. Single sign-on module 18 is made up of independent external interface (not shown in the figure) and database submodule (not shown in the figure), when the user logs in by the login page of SP server, in fact through the independent external interface (not shown in the figure) that is connected with SP server (not shown in the figure) log in to the single sign-on module 18; the login user name, password and random session key information used by the user on the login page are all stored in the database submodule (not shown in the figure). When a user wants to use a non-current SP service, there is no need to log in again, because the user's identity information has been confirmed and recorded by the single sign-on module 18, and the user can perform any SP service or inquiry of the user terminal, and the single-point Login module 18 interacts with user information control module 13, subscription relationship control module 15 and SP business control module 14 through interface 11 according to the record of database submodule (not shown in the figure), and performs the query operation of user's corresponding instruction; Similar , the user can also generate user information or delete and modify order relationship information in the single sign-on module 18 . At the same time, since the single sign-on module 18 is not limited to different SP servers, it can provide users with unified control, such as unified service or order control. For example, when a user logs in to an SP server and selects a service, what the user actually uses is the login page of the data service control system embedded in the SP; The control system has been successfully logged in, so there is no need to log in to SP2 again, and the service selection can be performed directly.

Specific embodiment 4 of the data service control system A of the present invention, referring to Fig. 4, includes an interface 11, a database module 12, a user information control module 13, an SP service control module 14, a purchase relationship control module 15 and a SP Synchronization module 16, also comprises point card control module 19, and this point card control module 19 is used to carry out the operation of generation, authentication, destruction and overtime control of user charging point card; Be connected with user information control module 13 and be used for synchronizing user Information; be connected with order relation control module 15, be used to trigger billing authentication function; Described point card control module is connected with interface 11, be used for carrying out billing authentication operation to SP server, and to BOSS system synchronous account information.

The user billing point card is a multi-digit decimal serial number for one-time use, at least including user ID, time stamp, fee, anti-counterfeiting random serial number, and check code information.

The point card control module 19 is according to the user account information in the user information control module 13, or directly synchronizes the user account information from the BOSS system, and carries out the generation of the user charging point card; and deducts the user account of the charging point card corresponding amount to BOSS synchronization information. Simultaneously, charging point card information is stored in the database module 12 as user account information by the user information control module 13 .

Using the user billing point card is equivalent to pre-paying the service. When the user uses the service provided by the SP, there is no need to use the user account authentication and synchronize the BOSS to deduct the corresponding amount, and the order relationship control module 15 directly invokes the billing The point card module 19 is authenticated by the billing point card module 19 through the interface 11, and the authentication means is to modify the billing point card data and deduct the corresponding amount.

More embodiments of the data service control system can be formed by any combination of above-mentioned embodiments 1-4; the preferred embodiment 5 of this data service control system A, referring to Fig. 5, consists of an interface 11, a database module 12, A user information control module 13, an SP business control module 14, a purchase relationship control module 15 and an SP synchronization module 16, a pseudocode control module 17, a single sign-on module 18 and a point card control module 19 are formed, and at the same time, External connection with BOSS system and SP business control system.

Specific embodiment 1 of the data service control network of the present invention, referring to Fig. 6, is a system structure diagram of the data service control network of the present invention, consisting of a data service control system 1-a, a user access system/service system 2, and an SP server 3 And the user terminal 4 constitutes. Among them, the data service control system 1-a is the home data service control system of the user terminal 4, and the user access system/service system 2 and the SP server 3 perform data interaction with the data service control system 1-a. The user terminal 4 is a mobile terminal or a fixed terminal capable of sending and receiving data services.

The data service control network is a network that controls the communication network composed of the user terminal 4 and the user access system/service system 2 and the SP server 3 connected to the communication network. In the data service control network, the data service control system 1-a obtains instructions from the user terminal 4 or the SP server 3 from the user access system/service system 2, and generates, deletes, and modifies user information, SP service information, and user order relationship information , query operations, and authenticate the instructions of the user terminal 4 or the SP server 3, and send the authentication result to the user terminal 4 or the SP server 3.

The specific embodiment 2 of the data service control network of the present invention, referring to FIG. 7 , is composed of a data service control system 1-a, a user access system/service system 2, an SP server 3, a user terminal 4 and a BOSS billing system 5.

The data service control system 1-a synchronizes the user account information in the BOSS billing system 5, and performs the authentication operation of the user account information.

The specific embodiment 3 of the data service control network of the present invention, referring to FIG.

The data service control system 1 - a synchronizes the service information in the SP server 3 through the SP service control system 6 .

In this embodiment, the SP service information generated/synchronized by the data service control system 1 - a is not obtained directly from the SP server 3 , but from the SP service control system 6 .

Specific embodiment 4 of the data service control network of the present invention, referring to FIG. The service control system 6 is composed of a data service control system 1-b, and the user access system, service system and SP server for data interaction with the data service control system 1-b are not shown in the figure.

For the user terminal 4, the data service control system 1-a is its home data service control system; for the SP server 3, the data service control system 1-a is its access data service control system.

When the SP server 4 serves a certain user terminal (not shown in the figure), and the data service control system at which the user terminal belongs is the data service control system 1-b, when the user terminal requests a service, the service request information is sent to the data service control system 1-b. The service management system 1-b and the data service management system 1-b authenticate and send the service request information passed through the authentication to the SP server 3 through the user access system/business system 2; when the SP server 3 provides services, it sends the service information Send to the user access system/service system 2, the user access system/service system 2 generates service authentication information according to the service information and sends it to the data service control system 1-a, and the data service control system 1-a sends the service authentication information Synchronized to the data service control system 1-b, the data service control system 1-b performs authentication, and the data service control system 1-b synchronizes the authentication result to the data service control system 1-a; if the authentication passes, the data service The control system 1-a sends a permission instruction to the user access system/service system 2, and the user access system/service system 2 sends the service information to the user access system/service system (not shown in the figure) where the user terminal belongs, It is sent to the user terminal (not shown) by the user access system/service system (not shown in the figure) where the user terminal belongs.

The specific embodiment 5 of the data service control network of the present invention is that the data service control network includes more than one data service control system, and the establishment of these data service control systems can be divided according to regions, for example, divided by administrative provinces, etc. . Each data service control system receives instructions from the local business system or user access system of the system, performs control and service through the local business system or user access system, and synchronizes the data of the local SP business control system, SP, and BOSS systems; at the same time, each Data synchronization between two data service control systems.

Referring to FIG. 10 , it is a schematic diagram of Embodiment 1 of the data service control method of the present invention. When a user terminal or SP sends an instruction or provides a service to the other party, it first passes through the user access system/service gateway, and the service gateway passes through the data service control system. Then send it to the other party through the user access system or service gateway. Among them, it includes controlling the service requested by the user and the service provided by the SP.

In this process, it also synchronizes relevant user account information and SP business information through interaction with BOSS billing system and SP business control system; through direct connection with SP server, order relationship information is synchronously sent to SP server.

Referring to FIG. 11 , it is a flow chart of controlling user request service in the data service control method of the present invention. Including the following steps:

Step 101, the user sends request information for data service through the user access system and/or business system, the request information contains SP code, user identity information and requested service information, and the SP code is the purpose code;

Step 102, the data service control system acquires the request information;

Step 103, the data service control system performs authentication; including authenticating the requested purpose code and the requested service information according to the SP service information; authenticating the user identity information; the authentication method can be adopted by those skilled in the art. Any known authentication method; for the request of passing the authentication, execute step 103; otherwise, execute step 109;

Step 104, judging the operation type of the requested information, and generating a corresponding business code;

Step 105, if it is a service use operation request information, the data service control system returns an authentication pass instruction to the user access system and/or service system, and the user access system or service system sends the user service request information to the SP server, and executes Step 110;

Step 106, if it is order or cancel order request information, the data service control system executes order or cancel order operation; specifically includes:

Step 1061, the data service control system determines whether to create or cancel the order relationship; if it is to cancel the order relationship, then execute step 1062; otherwise, execute step 1064;

Step 1062, if it is to cancel the order relationship, query the order relationship in the data service control system, and confirm that the order relationship exists; if it does not exist, go to step 109;

Step 1063, cancel the order relationship existing in the database, and execute 1065;

Step 1064, generating an order relationship;

Step 1065, the data service control system synchronizes the change of the order relationship information to the SP server through the user access system and/or the service system;

Step 1066, the data service control system notifies the user of the change of the order relationship information through the user access system and/or business system, and executes step 110;

Step 107, if it is the service request information, the data service control system generates the service link and sends the link to the user access system/service system, and the user access system/service system combines the link with the user request instruction and user pseudonym The code number is sent to the SP server together, and the user access system/service system sends the link to the user, and performs step 110;

Step 108, if the user queries the operation request information, the data service control system performs a corresponding query, returns the query result to the user through the user access system and/or the business system, and executes step 110;

Step 109, return invalid request information to the user through the user access system/service system;

Step 110, end the data business service operation.

Before step 101, the data service control system obtains the SP service information from the SP server, or obtains the SP service information of the SP server through the SP service control system, and stores the SP service information; obtains the user identity information according to the user terminal; the SP service information Both user identity information and user identity information are used for authentication.

Embodiment 2 of the method for controlling user request service in the data service control method of the present invention includes the following steps before step 101: synchronizing with BOSS to obtain user account information, or after synchronizing with BOSS, according to user account information The information generates a user billing point card to replace user account information, and the user account information or billing point card is used for paid data service.

Wherein, the steps of the data service control system generating the user billing point card according to the user account information are: obtaining the synchronous user account information of the BOSS, generating the user billing point card, and synchronously deducting the user account information of the corresponding amount of the billing point card from the BOSS. The step of generating the user billing point card is to generate a single-use multi-digit decimal serial number, which at least includes user ID, time stamp, fee, anti-counterfeiting random serial number, and check code information.

If the paid data business service is performed, the authentication of the request in step 102 is: authenticate the purpose code of the request and the service information of the request according to the SP service information; authenticate the user identity information; authenticate the user account information right. The authentication method may adopt any authentication method known to those skilled in the art.

Embodiment 3 of the method for controlling user requests for services in the data service control method of the present invention, when the user makes a service request through the WWW access system and the WAP access system in step 1, the user can perform a single sign-on operation, in After the authentication is passed, the SP server can be switched freely without user authentication again.

The steps for the user to make a service request through the WWW access system and the WAP access system are: the user performs a single sign-on operation through a page embedded in the SP server in the form of an iframe.

Embodiment 4 of the method for controlling the user request service in the data service control method of the present invention is that in step 104, a pseudo-code control operation is also performed on the request information passed through the authentication, which is to perform pseudo-code control on the user terminal number, Generate a pseudocode and replace the user terminal number sent to the SP server. The pseudo-code control operation can use the pseudo-code generation algorithm to generate the pseudo-code, complete the forward and reverse encryption conversion between the user number MSISDN and the pseudo-code, and check the authenticity and integrity of the pseudo-code. The pseudo-code generation algorithm may use a key generation algorithm for generating the key used in the pseudo-code generation algorithm. The key generation algorithm may adopt a key derivation algorithm, and the key derivation algorithm completes the distribution of the root key to the special key of the SP server according to the SP server ID. Wherein, the pseudo code generation algorithm, the key generation algorithm and the key derivation algorithm may adopt any pseudo code generation algorithm, key generation algorithm and key derivation algorithm known to those skilled in the art.

After the pseudo-code control is performed on the user information, the data service control system also establishes and stores the corresponding relationship between the user terminal number and the pseudo-code.

Embodiment 5 of the method for controlling user request service in the data service control method of the present invention is a method for controlling user request service when the data service control system accessed by the SP server is not served by the user terminal data service control system. At this time, the data service control system in step 101 obtains the request information of the data service service sent by the user terminal through the user access system or service system at the user terminal's home location, and in step 103, the data service control system The operation of authentication is performed by the data service control system of the user terminal's home location, and the data service control system of the user terminal's home location will request the user at the user terminal's home location to access the system through the service request of the user terminal Or the service system sends the SP server to the SP server through the user access system or service system at the access location of the SP server.

Referring to Fig. 12, it is an embodiment 1 of controlling the service provided by the SP in the data service control method of the present invention, including the following steps:

Step 201, the user access system and/or service system receives the user terminal number and service information sent by the SP server, and the purpose code is the user terminal number;

Step 202. The user access system and/or service system generates and sends service authentication information for the purpose code and service information to the data service control system. The service authentication information includes an authentication request and a user terminal number. The authentication request Including some identification features of business information, such as content fragments and SP service provider information; the data business control system obtains service authentication information and judges the service type;

Step 203, for the service-on-demand type, carry out purpose code authentication according to user information, carry out service information authentication according to SP service information, the method of this authentication can adopt any authentication method known to those skilled in the art; Judging that SP provides Whether the link is valid, that is, whether the user has ordered the service; if the authentication is passed, go to step 205; otherwise, go to step 206;

Step 204, for the ordered service type, perform purpose code authentication according to user information, and perform service information authentication according to SP service information, the authentication method can adopt any authentication method known to those skilled in the art; service authentication Including authentication of order relationship information. For services that pass the authentication, go to step 205; otherwise, go to step 206;

Step 205. For the services that have passed the authentication, the data service control system sends a service permission instruction to the user access system and/or the service system, and the service system and/or the user access system sends the service information to the user specified by the purpose code terminal;

Step 206: For services that fail authentication, the data service control system sends an instruction that the authentication result is invalid to the user access system and/or service system, and the user access system and/or service system rejects the delivery of the service and An instruction that the authentication result is invalid is forwarded to the SP server.

Embodiment 2 of controlling the service provided by the SP in the data service control method of the present invention is to synchronize the data service control system with the BOSS to obtain user account information, or the data service control system according to the user account information A user billing point card is generated to replace user account information, and the user account information or user billing point card is used for paid data service.

Wherein, the steps of the data service control system generating the user billing point card according to the user account information are: obtaining the synchronous user account information of the BOSS, generating the user billing point card, and synchronously deducting the user account information of the corresponding amount of the billing point card from the BOSS. The step of generating the user billing point card is to generate a single-use multi-digit decimal serial number, which at least includes user ID, time stamp, fee, anti-counterfeiting random serial number, and check code information.

The authentication in step 203 also includes: authenticating the user account information, and any authentication method known to those skilled in the art can be used for the authentication method.

When the data service control system provides paid data service, step 205 also includes, when the data service control system sends a permission instruction, also setting the charging operation of the data service control system for sending service information to the user terminal , the billing operation method is to deduct the service fee for sending business information to the user terminal from the user account information, complete the modification of the user account information, and synchronize the modified user account information to the BOSS system; or the billing party operates The method is to deduct corresponding points from the user charging point card, and the points correspond to the service fee for sending service information to the user terminal.

Embodiment 3 of controlling the service provided by the SP in the data service control method of the present invention is that when the obtained user terminal number is a pseudo code, before the step 203, the user terminal number is also reversed to control the pseudo code, and the pseudo code will be The purpose code sent in the form is converted into the user terminal number. The specific steps of performing anti-pseudo-code control on the purpose code are: the data service control system inquires and calls the corresponding relationship between the pre-stored user terminal number and the pseudo-code, and converts the purpose code sent in the form of pseudo-code into the user terminal number.

Embodiment 4 of controlling the service provided by the SP in the data service control method of the present invention is a method of controlling the service provided by the SP when the data service control system accessed by the SP server is not the data service control system to which the user terminal belongs.

In step 201, the user access system or service system at the access location of the SP server receives the user terminal number and the service information sent by the SP server;

In step 202, the user access system and/or service system at the access location of the SP server generates and sends service authentication information to the data service control system at the access location of the SP server;

The step of authentication in step 203 is that the data service control system at the access location of the SP server forwards the service authentication information to the data service control system at the user terminal's home location; the data service control system at the user terminal's home location The service authentication information described above is authenticated; the data service control system at the user terminal's home location synchronizes the authentication result to the data service control system at the access location of the SP server;

The step of sending the permission instruction in step 205 is: the data service control system of the access location of the SP server sends the permission instruction to the user access system or service system of the access location of the SP server;

The step of sending service information in step 205 is: the user access system or service system at the access location of the SP server sends the service information to the user access system or service system at the user terminal's home location; The user access system or service system sends the service information to the user terminal specified by the purpose code.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention without limitation. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be The scheme shall be modified or equivalently replaced without departing from the spirit and scope of the technical scheme of the present invention.

Claims (50)

1. A data service control system, characterized in that it includes an interface and a database module, and also includes: A user information control module is respectively connected with the interface and the database module, and the user information control module is used to obtain instructions from the user terminal or the SP server, or return an operation result to the user terminal or the SP server; Or the instruction of the SP server to authenticate the user information, or to generate, delete, query or change the user information; An SP service control module is connected with the interface and the database module respectively, and is used to obtain instructions from the user terminal or the SP server, or return an operation result to the user terminal or the SP server; Instruct the authentication operation of SP business information, or generate, delete, query or change SP business information; A purchase relationship control module is connected with the interface and the database module respectively, and is used to obtain instructions from the user terminal or the SP server, or return an operation result to the user terminal or the SP server; Instructing the authentication operation of the user order relationship information, or generating, deleting, querying or changing the user order relationship information according to the authentication results of the user information control module and the SP service control module; the order relationship control The module is also connected to the user information control module and the SP service control module, and is used to obtain the authentication results of the user information control module and the SP service control module; An SP synchronization module, connected with the order relationship control module, used to obtain the generation, deletion, query or change information of the user order relationship information; also connected with the interface, used to generate, delete, and update the user order relationship information Query or change information is synchronized to the SP server. 2. The data service control system according to claim 1, wherein the interface includes an interface connected to a service system and/or an interface connected to a user access system. 3. The data service control system according to claim 2, wherein the service system includes a multimedia message system, a short message system, a Java download system, a streaming media system, a personal information control service system, a location service system, a terminal control system, One of WAP gateway system or HTTP gateway system or any combination thereof. 4. The data service control system according to claim 2, characterized in that: the user access system includes a short message access system, a WAP access system, a WWW access system, a voice value-added service (IVR) access system, a client One or any combination of end software access systems. 5. The data service control system according to claim 1, wherein the interface further includes a message routing and forwarding interface, which is used for message forwarding when the data service control system is networked. 6. The data service control system according to claim 1, wherein the interface further includes an interface connected to the BOSS system, and the BOSS system synchronizes the user account information to the user information control module, and through the user information control module Save to the user information of the database module. 7. The data service control system according to claim 1 or 6, wherein the user information includes user account information and user identity information. 8. The data service control system according to claim 1, characterized in that: the interface also includes an interface connected to the SP service control system, and the SP service control system controls the service information in the SP server and controls the The final service information is synchronized to the SP service control module through the interface. 9. The data service control system according to claim 1, characterized in that: a pseudo-code control module is connected in series between the SP synchronization module and the database module, and the pseudo-code control module is used to complete the pseudo-code of the user number MSISDN Generate and/or query. 10. The data service control system according to claim 1, characterized in that: the interface is also connected with a single sign-on module, and the single sign-on module communicates with the user information control module, the subscription relationship control module and the SP business via the interface. The control module interacts to provide users with unified access and information query control. 11. The data service control system according to claim 10, characterized in that: the single sign-on module is composed of an independent external interface and a database sub-module, the independent external interface is connected to the SP server, and the database sub-module is used for Save related login username, password and random session key information. 12. The data service control system according to claim 1, characterized in that: the user information control module, the order relationship control module and the interface are also connected with a point card control module, and the point card control module is used for user billing points Card generation, authentication, destruction and timeout control operations; used to synchronize user information; also used to trigger the accounting authentication function, and perform accounting authentication operations to the SP server. 13. The data service control system according to claim 12, characterized in that: the user billing point card is a multi-digit decimal serial number for one-time use, and the serial number includes user ID, time stamp, fee, anti-counterfeiting random Serial number, check code information. 14. A data service control network, including user terminals, service systems, user access systems and SP servers connected to the communication network in the communication network, characterized in that it also includes the data service described in any one of claims 1-13 control system, the data service control system obtains user terminal or SP server instructions from the business system and/or user access system, and performs operations of generating, deleting, modifying and querying user information, SP service information and user order relationship information, And authenticate the instruction. 15. The data service control system according to claim 14, wherein the user terminal is a mobile terminal or a fixed terminal capable of sending and receiving data services. 16. The data service control network according to claim 14, characterized in that: the data service control system is also connected to a BOSS billing system, and the data service control system synchronizes the user account information in the BOSS billing system to perform user account information authentication operation. 17. The data service control network according to claim 14, characterized in that: the data service control system is also connected with an SP service control system for synchronizing service data in the SP server. 18. The data service control network according to claim 14, characterized in that there are more than one data service control systems, and the more than one data service control systems are connected to each other to perform data synchronization operations. 19. A method for controlling user data business service requests, characterized in that it includes the following steps: Step 1. The data service control system obtains the request information of the data service service sent by the user terminal through the user access system and/or the service system. The request information contains SP code, user identity information and requested service information. The SP Code is the purpose code; Step 2. The data service control system authenticates the request information, and sends the request invalid information to the user for the request information that has not passed the authentication, and ends the data service operation; for the request information that passes the authentication, execute the step 3; Step 3. When the request information is service use operation request information, the data service control system returns an authentication pass instruction to the user access system or service system, and the user access system or service system transmits the user service request information to the SP server; When the request information is order or cancel order request information, the data service control system executes order or cancel order operation; When the request information is service request information, the data service control system generates the service link and returns the link to the user access system or service system, and the user access system and/or service system combines the link with the user service request information Send it to the SP server together, and the user access system and/or service system sends the link to the user terminal; The request information is the information requested by the user for query operation, the data service control system completes the corresponding query operation, and returns the query result to the user through the user access system or the service system. 20. The method for controlling user data service service requests according to claim 19, characterized in that before step 1, the data service control system acquires SP service information from the SP server and saves the SP service information. 21. The method for controlling user data service service requests according to claim 20, wherein the SP server sends the SP service information to the data service control system through the SP service control system. 22. The method for controlling user data service service requests according to claim 19, 20 or 21, characterized in that: the authentication of the request information in step 2 includes: according to the SP service information, the request purpose code and The requested business information is authenticated; the user identity information is authenticated. 23. The method for controlling user data service service requests according to claim 19, characterized in that before authenticating the request information in step 2, it also includes synchronizing the data service control system with BOSS to obtain the user account Information for paid data business services. 24. The method for controlling user data service service requests according to claim 23, characterized in that: after the data service control system and BOSS are synchronized, the data service control system also generates user billing according to user account information Point card, used in place of user account information. 25. The method for controlling user data business service requests according to claim 24, characterized in that: the step of generating a user charging point card is: obtaining synchronous user account information of BOSS, generating a user charging point card, Synchronize with BOSS the user account information that deducts the corresponding amount of the billing point card. 26. The method for controlling user data business service requests according to claim 24, characterized in that: the step of generating a user billing point card is to generate a one-time use multi-digit decimal serial number, the serial number is at least Contains user ID, time stamp, cost data, anti-counterfeiting random serial number and verification code information. 27. The method for controlling user data service service requests according to claim 23 or 24, characterized in that: the authentication of the request information in step 2 includes: according to the SP service information, the requested purpose code and the requested Authentication of business information; authentication of user identity information; authentication of user account information. 28. The method for controlling user data service service requests according to claim 19, characterized in that in step 1, when the user terminal makes a service request through the WWW access system and the WAP access system , the single sign-on operation can be performed through the page embedded in the SP server in the form of iframe. 29. The method for controlling user data service service requests according to claim 19, characterized in that: in the step 2, the data service control system also performs a pseudo-code control operation on the request information that has passed the authentication. 30. The method for controlling user data service service requests according to claim 29, characterized in that: the pseudo-code control operation is an operation in which the data service control system replaces the user terminal number with a pseudo-code. 31. The method for controlling user data service service requests according to claim 30, characterized in that: the pseudo code control operation further includes generating a pseudo code using a pseudo code generation algorithm, and completing the communication between the user number MSISDN and the pseudo code Forward and reverse cryptographic transformations and authenticity and integrity checks of the pseudocode. 32. The method for controlling user data service requests according to claim 31, characterized in that: a key generation algorithm is used in the pseudo code generation algorithm to complete the generation of the key used in the pseudo code generation . 33. The method for controlling user data service requests according to claim 32, characterized in that: the key generation algorithm uses a key derivation algorithm, and the key derivation algorithm completes the root key according to the SP server ID Distribution of private key to SP server. 34. The method for controlling user data service service requests according to claim 29 or 30, characterized in that: after the data service control system performs the pseudo code control operation, the data service control system also establishes and stores the user terminal number and pseudo code code correspondence. 35. The method for controlling user data business service requests according to claim 19, characterized in that: the ordering or canceling order operation in step 3 specifically includes: Step 31, the data service control system generates or cancels order relationship information; Step 32, the data service control system synchronizes the change of the order relationship information to the SP server; Step 33, the data service control system notifies the user of the change of the order relationship information through the user access system or the service system. 36. The method for controlling user data service requests according to claim 35, characterized in that before canceling the order relationship in step 31, it also includes querying the order relationship in the data service control system to confirm the existence of the order relationship. 37. The method for controlling user data service service requests according to claim 19, characterized in that: when the access location of the SP server is not the home location of the user terminal, the data service control system in the step 1 passes the user The user access system or service system at the home location of the terminal obtains the request information of the data service service sent by the user terminal. The data service control system of the locality of the user terminal, and the data service control system of the locality of the user terminal will pass the authenticated service request from the user of the locality of the user terminal to access the system or the service system through the SP server of the locality of access The user access system or service system sends it to the SP server. 38. A method for controlling the data service provided by the SP server, characterized in that: comprising the steps of: Step 1, user access system and/or service system receive the user terminal number and business information that SP server sends, and described user terminal number is purpose code; Step 2. The user access system and/or service system generates and sends service authentication information for the purpose code and service information to the data service control system; Step 3. The data service control system authenticates the authentication request information and the target code information, and executes step 4 for requests that fail authentication; executes step 5 for requests that pass authentication; Step 4, the data service control system sends an instruction that the authentication result is invalid to the user access system and/or the service system, and the user access system and/or the service system forwards the instruction that the authentication result is invalid to the SP server; Step 5. For the service that has passed the authentication, the data service control system sends a permission instruction to the user access system and/or the service system, and the service system and/or the user access system sends the service information to the service specified by the purpose code. user terminal. 39. The method for controlling the data service provided by the SP server according to claim 38, characterized in that: the authentication in step 3 is: according to the SP service information and user information stored in the data service control system, verify the The purpose code and business information are used for authentication. 40. The method for controlling the data service provided by the SP server according to claim 38, characterized in that step 3 further includes synchronizing the data service control system with the BOSS to obtain user account information for paid data service. 41. The method for controlling user data service service requests according to claim 40, characterized in that: after the data service control system and BOSS are synchronized, the data service control system also generates user billing according to user account information Point card, used in place of user account information. 42. The method for controlling the data service provided by the SP server according to claim 41, characterized in that: the step of generating the user billing point card according to the user account information by the data service control system is: obtaining the synchronous user account of BOSS Information, generate user billing point card, and synchronously deduct the user account information of the amount corresponding to the billing point card to BOSS. 43. The method for controlling the data service provided by the SP server according to claim 41, characterized in that: the step of generating the user billing point card is to generate a one-time use multi-digit decimal serial number, the serial number At least include user ID, time stamp, cost data, anti-counterfeiting random serial number and verification code information. 44. The method for controlling the data service provided by the SP server according to claim 40 or 41, characterized in that the authentication in step 3 includes: according to the SP service information stored in the data service control system and User information authenticates the purpose code and business information; authenticates user account information. 45. The method for controlling the data service provided by the SP server according to claim 38, characterized in that said step 3 also includes performing anti-pseudo-code control on the purpose code, for the purpose of sending in the form of pseudo-code The code is converted to the user terminal number. 46. The method for controlling the data service provided by the SP server according to claim 45, characterized in that: the specific step of performing anti-pseudo-code control on the target code is: the data service control system calls the pre-stored user terminal number Corresponding relationship with the pseudo code, convert the destination code sent in the form of pseudo code into the user terminal number. 47. The method for controlling the data service provided by the SP server according to claim 38, characterized in that: in the step 5, when the data service control system sends a permission instruction, the data service control system is also set to The system is aimed at the charging operation of sending service information to the user terminal. 48. The method for controlling the data service provided by the SP server according to claim 47, characterized in that: the billing operation is to deduct the service fee for sending business information to the user terminal from the user account information, and complete the Modify the user account information, and synchronize the modified user account information to the BOSS system. 49. The method for controlling the data service provided by the SP server according to claim 47, characterized in that: the charging operation is to deduct the corresponding points from the user charging point card, and the points correspond to the said charging points to the user terminal. Service fee for sending business information. 50. The method for controlling the data service provided by the SP server according to claim 38, characterized in that: when the data service control system of the access location of the SP server is not the data service control system of the home location of the user terminal, In step 1, the user access system or service system at the access location of the SP server receives the user terminal number and the service information sent by the SP server; In the step 2, the user access system and/or service system at the access site of the SP server generates and sends service authentication information to the data service control system at the access site of the SP server; The step of authenticating in the step 3 is that the data service control system at the access site of the SP server forwards the service authentication information to the data service control system at the user terminal's home site; the data service control system at the user terminal's home site Authenticating the service authentication information; the data service control system at the user terminal's home location synchronizing the authentication result to the data service control system at the access location of the SP server; The step of sending the permission instruction in the step 5 is: the data service control system of the access location of the SP server sends the permission instruction to the user access system or service system of the access location of the SP server; The step of sending service information in step 5 is: the user access system or service system at the access location of the SP server sends the service information to the user access system or service system at the user terminal's home location; The user access system or service system at the home location sends the service information to the user terminal specified by the purpose code.

Images