HK1134871A - Access method, system and device using cross-domain-name cookie - Google Patents

Description

Cross-domain-name Cookie access method, system and equipment

Technical Field

The invention relates to the technical field of networks, in particular to a cross-domain name Cookie access method, a system and equipment.

Background

The Cookie technology of the internet is extremely simple, but makes it easier to browse web pages. Almost all website designers use cookies, a better browsing environment is provided for users browsing websites, and meanwhile visitor information can be collected more accurately.

Cookies are a technology that allows web servers to store small amounts of data to or read data from the hard disk of clients. Cookies are a very small text file placed on a hard disk of a user end through a Web server when browsing a certain website, and record information of user ID, passwords, browsed Web pages, staying time and the like of the user. When the user accesses the website again, the website obtains the relevant information of the user by reading the Cookies, and corresponding actions are performed, such as displaying a welcome slogan on a page, or allowing the user to directly log in without inputting an ID (identity) and a password. Cookies can essentially be thought of as an identification card for a user. Cookies cannot be executed as code, do not carry viruses, are proprietary to a user, and can only be read by the server that provides it. The stored pieces of information are stored in the form of "name-value pairs," a "name/value" pair being merely a piece of named data. One website can only get information stored in the user's computer, and cannot get information from other Cookies or any other information on the user's computer. Most of the contents in Cookies are encrypted, so that an ordinary user only looks like certain meaningless alphanumeric combinations, and only a CGI (Common Gateway protocol) processing program of a server knows the true meaning of the Cookies. Therefore, the cookies are an identity card, are proprietary and can only be read by websites to which the cookies belong.

However, in the prior art, because cookies are proprietary, each web service provider can only track the behavior of the user on its own website, and each web service provider can only read its own cookies, the behavior of the user obtained by the web service provider is incomplete, and since all web accesses may be redirected to the cookie server, the cookie server will process a large amount of access data, which affects the processing speed and ultimately the access performance of the entire network.

Disclosure of Invention

The embodiment of the invention provides a cross-domain name Cookie access method, a system and equipment, which are used for realizing that public Cookies track the behavior of a user in the whole network.

The embodiment of the invention provides a cross-domain name Cookie access method, which comprises the following steps:

the operator server is provided with a Cookie processing module for public Cookie detection;

the operator server receives an access request of a client;

the Cookie processing module of the operator server judges whether the access request carries public cookies, the public cookies are used for the client to access and identify a plurality of operator servers of the public cookies, and if not, the public cookies are obtained from the Cookie servers;

and the Cookie processing module of the operator server binds the public Cookie with the operator server and stores the public Cookie to the Web client.

And if yes, obtaining the public Cookie from a Cookie server.

Wherein the operator server specifies a proportion of requests to obtain public cookies.

The invention also provides a cross-domain name Cookie access system, which comprises:

the client is used for sending an access request to the operator server;

the system comprises operator servers, wherein a Cookie processing module is arranged for receiving an access request sent by a client and judging whether the access request carries public Cookie, the public Cookie is used for the client to access and identify a plurality of operator servers of the public Cookie, and if not, a redirection request is sent to the Cookie servers to obtain the public Cookie;

and the Cookie server is used for receiving the redirection request of the operator server and providing public Cookie for the operator server.

Wherein, the cookie processing module specifically comprises:

the receiving submodule is used for receiving an access request of a client;

the judging submodule is used for judging whether the access request carries public Cookie or not;

the obtaining submodule is used for obtaining the public Cookie from a Cookie server;

and the binding submodule is used for binding the public Cookie with the operator server, storing the value of the public Cookie into a public Cookie area of the current access domain name, and storing the public Cookie to the Web client.

Wherein the cookie processing module further comprises:

and the validity period judging submodule is used for detecting whether the public Cookie is expired or not, and if so, triggering the acquisition module.

Wherein the cookie processing module further comprises:

and the acquisition ratio control submodule is used for specifying the ratio of the public cookie acquisition request.

The Cookie server specifically comprises:

the redirection request receiving module is used for receiving a redirection request sent by an operator server;

and the public cookie sending module is used for sending a redirection response carrying the public cookie to the operator server.

Wherein, the Cookie server further comprises:

and the public cookie generating module is used for generating a public cookie for the client.

The invention also provides an operator server, wherein the cookie processing module is arranged, and the cookie processing module specifically comprises:

the receiving submodule is used for receiving an access request of a client;

the judging submodule is used for judging whether the access request carries public Cookie or not;

the obtaining submodule is used for obtaining the public Cookie from a Cookie server;

and the binding submodule is used for binding the public Cookie with the operator server, storing the value of the public Cookie into a public Cookie area of the current access domain name, and storing the public Cookie to the Web client.

The invention also provides a Cookie server, comprising:

the redirection request receiving module is used for receiving a redirection request sent by an operator server;

and the public cookie sending module is used for sending a redirection response carrying the public cookie to the operator server.

In the embodiment of the invention, public cookies are provided by a group of Cookies servers, when a user accesses a certain website, if the website does not have the public cookies, the website is redirected to the Cookies servers to obtain the public cookies, and the Cookies servers redirect the website to the website accessed by the original user after the website is successfully accessed. Therefore, each website can obtain a unique public cookies belonging to the user from the cookies server, and the behavior of the user in the whole network can be tracked according to the public cookies.

Drawings

FIG. 1 is a flow chart of a cross-domain name Cookie access method in the invention;

FIG. 2 is a flow chart of another cross-domain Cookie access method of the present invention;

FIG. 3 is a diagram of a cross-domain Cookie access system architecture in accordance with the present invention;

FIG. 4 is a diagram of an operator server architecture in accordance with the present invention;

FIG. 5 is a diagram of a Cookie server architecture in accordance with the present invention;

fig. 6 is a structure diagram of a specific example of a cross-domain-name Cookie access system in the present invention.

Detailed Description

The invention provides a cross-domain name Cookie access method, as shown in figure 1, comprising the following steps:

step 101, an operator server sets a Cookie processing module for public Cookie detection.

Step 102, an operator server receives an access request of a client.

And 103, the Cookie processing module of the operator server judges whether the access request carries public cookies, the public cookies are used for the client to access and identify a plurality of operator servers of the public cookies, and if not, the public cookies are obtained from the Cookie server. In addition, detecting that the access request carries public Cookie, then detecting whether the public Cookie is expired, and if so, obtaining the public Cookie from a Cookie server. In addition, the operator server may specify a proportion of requests to obtain public cookies.

And 104, the Cookie processing module of the operator server binds the public Cookie with the operator server and stores the public Cookie to the Web client.

The invention provides a cross-domain name Cookie access method, as shown in figure 2, comprising the following steps:

step 201, an operator server sets a Cookie processing module for public Cookie detection; and receiving an access request sent by the Web client.

At step 202, the operator server determines whether the request carries a public cookie (public cookie). If the message does not carry a public cookie (e.g., the Web client accesses the operator server for the first time), then go to step 204, and if the message carries a public cookie, then go to step 203. The public cookie is a unique cookie belonging to a Web client, and is a uniform identifier for the Web client to access multiple operator servers, that is, the Web client having the public cookie can access multiple operator servers for identifying the public cookie.

Step 203, the operator server detects the validity attribute in the public cookie, and if the validity attribute in the public cookie is set to be permanent, the public cookie is always valid; if the validity period attribute in the public cookie sets a time period, judging whether the time period has passed, if so, the public cookie is valid, and allowing the Web client to continue to acquire information from the operator server; if so, go to step 204.

Step 204, the operator server sends a redirection request to the cookie server, and requests to allocate a new public cookie to the Web client, where the redirection request includes relevant information of the Web client, for example: user identification, password, etc. Optionally, the operator server may decide to turn on/off the cookie processing module in the operator server, and the cookie processing module may specify a ratio of obtaining the public cookie request through a pre-configured transmission flow or a user special requirement, for example, the data flow between the operator server and the cookie server may be within 1M to ensure that data is transmitted without delay or packet loss, and for the full load work of the operator server, access requests of 10000 users need to be received, and the occupied bandwidth is 2M, and for the safety of data transmission, only fifty percent of the user access requests need to be processed.

In step 205, after the cookie server receives the redirection request, it generates public cookies according to the relevant information of the Web client. Of course, the cookie server may also query whether public cookies of the Web client are stored locally, and if so, may directly call the stored public cookies.

In step 206, the cookie server carries the public cookie in a redirection response message and sends the redirection response message to the operator server.

Step 207, after receiving the public cookie, the operator server binds the public cookie with the domain name accessed by the Web client, that is, stores the value of the public cookie in the public cookie area of the currently accessed domain name.

In step 208, the operator server stores the public cookie to the Web client for use the next time it accesses the operator server. Sending public cookies from the operator server to the web client in a manner that includes setting a public cookie header as part of an HTTP (Hypertext Transfer Protocol) response, the public cookie header being generated by the CGI program and including the following attributes: name, date, path, domain, and security parameters. Wherein the name attribute comprises web client related data used by the web site. There may be many name attributes in the public cookie and many settings public cookie headers may be issued in the operator server response. The date attribute specifies a date that indicates when the public cookie expires. The path attribute specifies a subset of URLs (Uniform Resource Locator) in the domain for which the public cookie is valid. The domain attribute is the internet domain name of the web site. The security attribute indicates a condition for transmitting the public cookie, for example, if the security attribute of the public cookie is marked as secure, it is transmitted only when a communication channel between the operator server and the web client is secure.

The invention provides a cross-domain name Cookie access system, as shown in figure 3, comprising: a client 10 for sending an access request to an operator server; each operator server 20 is provided with a Cookie processing module (for example, an apache module mod _ acookie) for receiving an access request sent by a client, determining whether the access request carries public cookies, where the public cookies are used by the client to access the multiple operator servers for identifying the public cookies, and if not, sending a redirection request to the Cookie server to obtain the public cookies; and the Cookie server 30 is used for receiving the redirection request of the operator server and providing public Cookie for the operator server.

The cookie processing module in the operator server 20, as shown in fig. 4, includes: the receiving submodule 21 is used for receiving an access request of a client; the judging submodule 22 is configured to judge whether the access request carries public cookies; the obtaining submodule 23 is configured to obtain the public Cookie from a Cookie server; and the binding submodule 24 is configured to bind the public Cookie with the operator server, store the value of the public Cookie in a public Cookie area of the current access domain name, and store the public Cookie to the Web client. And the validity period judging submodule 25 is configured to detect whether the public Cookie is expired, and if so, trigger the obtaining module. And an obtaining ratio control sub-module 26 for specifying the ratio of obtaining public cookie requests.

The Cookie server 30, as shown in fig. 5, includes: a redirection request receiving module 31, configured to receive a redirection request sent by an operator server; a public cookie sending module 32, configured to send a redirection response carrying a public cookie to the operator server. A public cookie generating module 33, configured to generate a public cookie for the client.

According to the above cross-domain-name Cookie access system, the present invention provides a specific example, as shown in fig. 6. Installing a cookie processing module on an operator server needing to track user behaviors, such as: apache module mod _ acookie checks received requests from the user, and if it is found that the user has not been assigned a public cookie (public cookie) or the public cookie has expired, the cookie handling module automatically sends a redirect request to the cookie server, requesting to obtain a new public cookie.

The Cookie server mainly completes the following functions: receiving a request; generating a public cookie; the request is redirected. Cookie server is not very stressful because the system redirects access to cookie server only when the user visits a web site for the first time or when the public cookie expires.

Assuming that the cookie server is www.cookie.server.com, mod _ acokie on yahoo.com server is installed with mod _ acokie, if there is a user accessing www.yahoo.com, mod _ acokie on yahoo.com server checks the request, finds that this user is the first access and has no public cookie, mod _ acokie module rewrites http:// www.yahoo.com is http:// www.cookie.server.comurl ═ www.yahoo.com, cookie.server.com generates a cookie, writes the request rewrite to www.yahoo.comc ═ public _ cookie, and writes the public _ cookie to yahoo.com domain name by mod _ acokie on yahoo.com server, completing registration of the public cookie.

In the embodiment of the invention, public cookies are provided by a group of Cookies servers, when a user accesses a certain website, if the website does not have the public cookies, the website is redirected to the Cookies servers to obtain the public cookies, and the Cookies servers redirect the website to the website accessed by the original user after the website is successfully accessed. Therefore, each website can obtain a unique public cookies belonging to the user from the cookies server, and the behavior of the user in the whole network can be tracked according to the public cookies.

Through the above description of the embodiments, those skilled in the art will clearly understand that the present invention may be implemented by software plus a necessary general hardware platform, and certainly may also be implemented by hardware, but in many cases, the former is a better embodiment. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute the methods according to the embodiments of the present invention.

The above disclosure is only for a few specific embodiments of the present invention, but the present invention is not limited thereto, and any variations that can be made by those skilled in the art are intended to fall within the scope of the present invention.

Claims (11)

1. A cross-domain name Cookie access method is characterized by comprising the following steps:

the operator server is provided with a Cookie processing module for public Cookie detection;

the operator server receives an access request of a client;

the Cookie processing module of the operator server judges whether the access request carries public cookies, the public cookies are used for the client to access and identify a plurality of operator servers of the public cookies, and if not, the public cookies are obtained from the Cookie servers;

and the Cookie processing module of the operator server binds the public Cookie with the operator server and stores the public Cookie to the Web client.

2. The cross-domain-name Cookie access method according to claim 1, wherein when it is detected that the access request carries public cookies, it is detected whether the public cookies are expired, and if so, the public cookies are obtained from a Cookie server.

3. The cross-domain Cookie access method of claim 1,

the operator server specifies a proportion of requests to obtain public cookies.

4. A cross-domain name Cookie access system, comprising:

the client is used for sending an access request to the operator server;

the system comprises operator servers, wherein a Cookie processing module is arranged for receiving an access request sent by a client and judging whether the access request carries public Cookie, the public Cookie is used for the client to access and identify a plurality of operator servers of the public Cookie, and if not, a redirection request is sent to the Cookie servers to obtain the public Cookie;

and the Cookie server is used for receiving the redirection request of the operator server and providing public Cookie for the operator server.

5. The cross-domain name Cookie access system of claim 4, wherein the Cookie processing module specifically comprises:

the receiving submodule is used for receiving an access request of a client;

the judging submodule is used for judging whether the access request carries public Cookie or not;

the obtaining submodule is used for obtaining the public Cookie from a Cookie server;

and the binding submodule is used for binding the public Cookie with the operator server, storing the value of the public Cookie into a public Cookie area of the current access domain name, and storing the public Cookie to the Web client.

6. The cross-domain name Cookie access system of claim 5, wherein the Cookie processing module further comprises:

and the validity period judging submodule is used for detecting whether the public Cookie is expired or not, and if so, triggering the acquisition module.

7. The cross-domain name Cookie access system of claim 5, wherein the Cookie processing module further comprises:

and the acquisition ratio control submodule is used for specifying the ratio of the public cookie acquisition request.

8. The cross-domain name Cookie access system of claim 5, wherein the Cookie server specifically comprises:

the redirection request receiving module is used for receiving a redirection request sent by an operator server;

and the public cookie sending module is used for sending a redirection response carrying the public cookie to the operator server.

9. The cross-domain name Cookie access system of claim 8, wherein the Cookie server further comprises:

and the public cookie generating module is used for generating a public cookie for the client.

10. An operator server, wherein a cookie processing module is provided, specifically comprising:

the receiving submodule is used for receiving an access request of a client;

the judging submodule is used for judging whether the access request carries public Cookie or not;

the obtaining submodule is used for obtaining the public Cookie from a Cookie server;

and the binding submodule is used for binding the public Cookie with the operator server, storing the value of the public Cookie into a public Cookie area of the current access domain name, and storing the public Cookie to the Web client.

11. A Cookie server, comprising:

the redirection request receiving module is used for receiving a redirection request sent by an operator server;

and the public cookie sending module is used for sending a redirection response carrying the public cookie to the operator server.