WO2010020114A1 - Content access authentification method, device and system - Google Patents

Abstract

A content access authentification method, the method includes that: a content provision device receives a content access request initiated by a terminal, and if it determines that an authentification success identification for a user access right is not carried in the content access request and the channel requested to be accessed is a paid channel, then it obtains the user subscription relationship from a content access proxy server, and authenticates the user access right according to the user subscription relationship, after successful authentification, it returns the channel content requested to be accessed to the terminal. A content access authentification system and content provision device are also provided. By adopting the schemes mentioned above, it can be prevented that the user accesses contents illegally.

Description

 Content access authentication method, device and system

 The present invention relates to the field of communications technologies, and in particular, to a content access authentication method, device, and system. Background technique

 Dynamic Content Delivery (DCD) is a C/S (Client/Server, Client/Server) architecture. After the network-side DCD server obtains content from the internal supplier at a preset time, A technique for pushing content to a DCD terminal through a specific trigger mechanism.

The DCD server classifies different categories of content in the form of channels and distributes them to the user's DCD terminal in the form of channels (such as sports channels, entertainment channels, etc.). The content in each channel is organized in the form of channel items, that is, each channel contains several channel items.

 The normal access mode means that after the user sees the channel item of interest in the DCD window, the channel item can be selected, and the content summary of the channel item is displayed on the summary screen, by selecting the content summary of the channel item in the summary screen. The included link, the DCD terminal will automatically launch its own browser, through the browser to access the content provided by the content provider corresponding to the link; abnormal access means that the user enters the URL address through the browser bookmark, manually Or a link to the content item page of the accessed channel item directly accesses the content provided by the content provider. Since the user can access the content through an abnormal manner, the DCD server needs to provide a complete set of authentication schemes to effectively protect the interests of the provider and the operator.

In the prior art, accessing dynamic content to users, especially through abnormal access to content, does not provide a complete authentication solution. Moreover, in addition to dynamic content distribution, other based on C/S The content access of the structure does not provide a corresponding perfect authentication scheme in the prior art. Summary of the invention

 An embodiment of the present invention provides a content access authentication method for preventing a user from illegally accessing content. The method includes:

 The content providing device receives the content access request initiated by the terminal, and when it is determined that the content access request does not carry the authentication success identifier for the user access right, determining whether the channel requested to be accessed is a charging channel, 'if yes:

 Then, the user subscription relationship is obtained from the content access proxy server, and the user access authority is authenticated according to the user subscription relationship. If the authentication is successful, the channel content requested to be accessed is returned to the terminal.

 Preferably, before acquiring the user subscription relationship from the content access proxy server, the method further includes: determining, by the device, whether the user has stored access information for the channel requested to access; if yes, returning the channel content requested for access to the terminal If not, the user subscription relationship is obtained from the content access proxy server, and the user access authority is authenticated according to the user subscription relationship. If the authentication is successful, the channel content requested to be accessed is returned to the terminal.

 The embodiment of the present invention further provides a content access authentication system, which is used to prevent users from illegally accessing content. The system includes:

 a terminal, configured to initiate a content access request; and, receiving a channel content requested to be accessed; and a content access proxy server, configured to provide a user subscription relationship;

a content providing device, configured to receive a content access request initiated by the terminal, and determine that the content access request does not carry an authentication success identifier for the user access right, and when determining that the channel requested to be accessed is a charging channel: The proxy server obtains the user subscription relationship, and authenticates the user access authority according to the user subscription relationship, and returns the channel content requested to be accessed to the terminal after the authentication succeeds; or further determines whether the user pair is already stored in the device. The access information of the channel requesting access; if yes, returning the channel content requested to be accessed to the terminal; if not, obtaining the user subscription relationship from the content access proxy server, and authenticating the user access authority according to the user subscription relationship, After the success of the right, storing the access information of the user to the channel requested to be accessed, and The terminal returns the channel content requested to access.

 The embodiment of the present invention further provides a content providing device, which is used to prevent a user from illegally accessing content, and the internal device includes:

 a receiving module, configured to receive a content access request initiated by the user through the terminal;

 a determining module, configured to determine whether the content access request carries an authentication success identifier for the user access right;

 a content providing module, configured to: when determining that the content access request does not carry an authentication success identifier for the user access right, and requesting the accessed channel to be a charging channel: obtaining a user subscription relationship from the content access proxy server, according to the user subscription relationship The user access right is authenticated, and after the authentication succeeds, the channel content requested to be accessed is returned to the terminal; or, it is further determined whether the access information of the channel requested by the user to the accessed channel is already stored in the device; if yes, then Returning, by the terminal, the channel content requested to be accessed; if not, acquiring the user subscription relationship from the content access proxy server, authenticating the user access authority according to the user subscription relationship, and storing the channel requested by the user after the authentication succeeds Access information, and return the channel content requested for access to the terminal.

In the embodiment of the present invention, the content providing device receives the content access request initiated by the terminal, and determines that the content access request does not carry the authentication success identifier for the user access right, and when determining that the channel requested to be accessed is a charging channel: The access proxy server obtains the user subscription relationship, authenticates the user access authority according to the user subscription relationship, and returns the channel content requested to be accessed to the terminal after the authentication succeeds; or further determines whether the user has been stored in the device. Access information to the channel requesting access; if yes, returning the channel content requested for access to the terminal; if not, obtaining the user subscription relationship from the content access proxy server, and authenticating the user access authority according to the user subscription relationship, After the authentication succeeds, the access information of the user is stored, and the channel content requested to be accessed is returned to the terminal, so that it is ensured that only the user authorized by the content access proxy server and subscribed to the relevant channel content can access the related content, thereby effectively preventing The user passed the non-positive Way to access illegal content. DRAWINGS 1 is a flowchart of a content access authentication method of a DCD according to an embodiment of the present invention; FIG. 2 is a flowchart of a user browsing a complete content in a normal manner according to an embodiment of the present invention; FIG. 3 is a schematic diagram of a user in an abnormal manner according to an embodiment of the present invention; A flow chart for accessing the full content of the free channel;

 4 is a flowchart of a user successfully browsing a complete content of a toll channel in an abnormal manner according to an embodiment of the present invention;

 FIG. 5 is a flowchart of browsing a complete content of a charging channel by a user failing in an abnormal manner according to an embodiment of the present invention; FIG.

 6 is a flowchart of an example of content authentication logic in an embodiment of the present invention;

 FIG. 7 is a schematic structural diagram of a content access authentication system of a DCD according to an embodiment of the present invention; FIG. 8 is a schematic structural diagram of a content providing apparatus according to an embodiment of the present invention. detailed description

 The following is a detailed description of the embodiments of the present invention by using DCD as an example. However, those skilled in the art can understand that the present invention is applicable not only to content access authentication of DCD but also to authentication of other content access based on C/S structure.

 In the embodiment of the present invention, the DCD server provides a function for the user to access the complete content through the DCD terminal. After the user selects a link related to a channel item, the DCD terminal will automatically launch its own browser, and initiate a request to access the link to the DCD server through the browser. The DCD server performs subscription relationship authentication on the access complete content request sent by the DCD terminal. After the authentication is passed, the DCD terminal obtains the complete content page according to the redirect link of the complete content page returned by the DCD server.

 If the user directly accesses the complete content by other means (browser bookmark, manual input URL address, link of the accessed channel item content page), the DCD server can receive and process the subscription relationship authentication request sent by the content providing device, and The subscription relationship authentication result is provided to the content providing device, and finally the device determines whether the user can access the complete content.

In the normal access mode, the process of the user browsing the complete content through the DCD terminal is as follows: The user is booted through the DCD terminal, and after the DOC server subscription relationship authentication is passed, the DCD terminal obtains the complete content page according to the redirect link of the complete content page returned by the DCD server. The access direction is: DCD terminal DCD server DCD terminal ^ H for the device.

 Since the operator generally grants the user the browsing traffic for browsing the complete content through the DCD terminal, the DCD server should strictly authenticate the request for complete content access, for example, to authenticate the following items:

 Terminal model: Only the terminal registered on the DCD server can use the DCD service; The service is open to the scope: Only users in the open service can use the DCD service; User blacklist: Only users who are not in the user blacklist can use the DCD service; Ordering Relationship: Full content access is only available to users who have subscribed to the appropriate business.

 When the authentication fails, the DCD server can provide friendly prompts and guide the user to perform corresponding operations. After the authentication is successful, the DCD server will redirect the DCD terminal to the device to obtain the complete content. page.

 In an abnormal access mode, when a user accesses a full content page (such as a user accessing through a browser bookmark, accessing a URL address manually in a browser, accessing a link through an accessed channel item content page, etc.), the content providing device First, it is determined whether the user has the right to access the content according to the user's access information in the session accessed by the user, such as the user's mobile phone number, authentication parameters, and the like.

 If the channel accessed by the user is a free channel, the content providing device directly provides the user with the access content; if the channel accessed by the user is a charging channel, the content providing device needs to initiate a subscription relationship authentication request to the DCD server through the interface, and the DCD server will The right result is returned to the internal device: if the authentication is successful, the content providing device returns the full content page to the user, and if the authentication fails, the content providing device sends the redirect link of the complete content page to the DCD terminal, the DCD terminal According to the redirect link to access the DCD server, the DCD server returns the result of the corresponding access failure to the user, and guides the user to perform the corresponding operation.

Access directions for accessing the toll channel in an abnormal manner and successful authentication are: content providing device DCD server content providing device > DCD terminal; accessing the charging channel in an abnormal manner but The access directions for unsuccessful authentication are: Content providing device DCD server content providing device DCD terminal DCD server DCD terminal.

 The flow of the content access authentication method in the embodiment of the present invention is described below.

 As shown in FIG. 1 , in the embodiment of the present invention, the flow of the content access authentication method of the DCD is as follows: Step 101: The internal device receives a content access request initiated by the user through the DCD terminal. Step 102: The device determines that the content access request does not carry an authentication success identifier for the user access right.

 Step 103: When determining that the channel requested to be accessed is a charging channel, the content providing device acquires a user subscription relationship from the DCD server, authenticates the user access authority according to the user subscription relationship, and returns a channel requesting access to the DCD terminal after the authentication succeeds. content.

 In an embodiment, if the content providing device determines that the content access request carries an authentication success identifier for the user access right, the content of the channel requested to be accessed is returned to the DCD terminal. At this time, the user accesses the content through the normal access mode, that is, the user selects the content link to be accessed in the DCD window through the DCD terminal, triggers the DCD server to authenticate the user access authority according to the user subscription relationship; after the authentication succeeds, the DCD The server returns a page redirection link to the DCD terminal. The DCD terminal initiates a content access request to the content providing device according to the received page redirection link, and carries the authentication success identifier for the user access right in the content access request.

 As shown in FIG. 2, in one embodiment, the process for the user to browse the complete content in a normal manner is as follows: Step 201: The user selects a channel item of interest through the DCD terminal, enters a summary screen, and selects a hyperlink in the summary screen.

 Step 202: The DCD terminal automatically starts the browser, and initiates a request to browse the complete content page to the DCD server.

 Step 203: The DCD server authenticates the user access authority based on the subscription relationship cached by the DCD server.

 Step 204: After the authentication is passed, the DCD server returns a redirected link of the complete content page to the DCD terminal, and carries the authentication success identifier and the authentication parameter.

Step 205: The DCD terminal automatically sends the content to the content according to the redirected link of the returned full content page. Provides a device to initiate a content access request.

 Step 206: The device is configured to determine whether the user has the right to access the content. At this time, because the content authentication request carries the authentication success identifier, step 207 is continued.

 Step 207: The internal device returns the complete content page after the organization to the DCD terminal.

 Step 208: The user browses the complete content through the DCD terminal.

 In an embodiment, when the content providing device does not carry the authentication success identifier for the user access right, the content providing device further determines that the channel requested to be accessed is a free channel, and directly returns the channel requested for access to the DCD terminal. content. As shown in FIG. 3, in one embodiment, the process of the user accessing the complete content of the free channel in an abnormal manner is as follows:

 Step 301: The user directly initiates a content access request for browsing the full content page by using the DCD terminal directly (browser bookmark, manually inputting the URL address, and the link of the accessed channel item content page).

 Step 302: The internal device is configured to determine whether the user has the right to browse the complete content page. In this case, the content access request does not carry the authentication success identifier, and the channel requested by the user is a free channel, and step 303 is performed.

 Step 303: The internal device returns the complete content page after the organization to the DCD terminal.

 Step 304: The user browses the complete content through the DCD terminal.

 In the foregoing step 103, when the user accesses the content in an abnormal manner, the device determines that the channel requested to be accessed is a charging channel, and obtains the user subscription relationship from the DCD server; at this time, the internal device provides the user attribute to the DCD server. Information; The DCD server returns the user subscription relationship to the device according to the user attribute information. The user attribute information may be a user number, a DCD terminal type, a channel identifier, etc.; the user subscription relationship may be a channel list added by the user, a charging identifier list in which the user has subscribed to the charged content, and the like.

 As shown in FIG. 4, in one embodiment, the process of successfully browsing the full content of the toll channel by the user in an abnormal manner is as follows:

Step 401: The user initiates browsing the full content page to the content providing device directly through the DCD terminal (browser bookmark, manual input URL address, link of the accessed channel item content page) Content access request.

 Step 402: The internal device determines whether the user has the right to access the content. In this case, the content access request does not carry the authentication success identifier, and the channel accessed by the user is a charging channel, and step 403 is performed.

 Step 403: The device sends a subscription relationship authentication request to the DCD server, and needs to carry user attribute information such as a mobile phone number, a terminal type, and a channel identifier.

 Step 404: The DCD server authenticates the subscription relationship of the user.

 Step 405: The DCD server provides an authentication response for the DCD service subscription relationship of the user, and returns related information such as a channel list added by the user and a charging identifier list of the content that the user has subscribed to.

 Step 406: The content providing device authenticates the user access authority according to the operation request, the authentication response information returned by the DCD server (the channel list added by the user, and the charging identifier list of the user who has subscribed the charging content). If the right is passed, step 407 is performed.

 Step 407: The internal device is returned to the DCD terminal by the device to return the complete content page after the organization.

 Step 408: The user browses the complete content through the DCD terminal.

 In one embodiment, if the content providing device fails to authenticate the user access right according to the user subscription relationship provided by the DCD server, the page redirect link is returned to the DCD terminal; the DCD terminal redirects the link according to the received page to the DCD. The server initiates an authentication request; the DCD server authenticates the user access authority according to the user subscription relationship, returns an authentication failure result to the DCD terminal, and prompts the user to perform an access authority application operation according to the authentication failure reason.

 As shown in FIG. 5, in one embodiment, the process of browsing the content of the toll channel by the user in an abnormal manner fails as follows:

 Step 501: The user initiates a content access request for browsing the complete content page to the content providing device directly through the DCD terminal (browser bookmark, manual input URL address, link of the accessed channel item content page).

Step 502: The content providing device determines whether the user has the right to access the content. At this time, the content access request does not carry the authentication success identifier, and the channel accessed by the user is a charging channel, and then the execution is performed. Step 503.

 Step 503: The device sends a subscription relationship authentication request to the DCD server, and needs to carry user attribute information such as a mobile phone number, a terminal type, and a channel identifier.

 Step 504: The DCD server authenticates the subscription relationship of the user.

 Step 505: The DCD server provides an authentication response of the DCD service subscription relationship of the user to the content providing device, and returns related information such as a channel list added by the user and a charging identifier list that the user has subscribed to the charging content.

 Step 506: The content providing device authenticates the user access authority according to the operation request, the authentication response information returned by the DCD server (the channel list added by the user, and the charging identifier list that the user has subscribed to the charging content). If the right fails, step 507 is performed.

 Step 507: The device returns a page redirect link to the DCD terminal and carries the channel identifier.

 Step 508: The DCD terminal automatically initiates an access request to the DCD server according to the page redirect link.

 Step 509: The DCD server authenticates the user access authority according to the user subscription relationship. Step 510: The DCD server returns a page of complete content access failure to the DCD terminal, and gives a prompt message. If the user terminal is not registered in the DCD server, the prompt information that the user terminal does not support is given; if the user does not subscribe to the package, the prompt information that the user needs to subscribe to the package is given; if the user does not subscribe to the channel content, the user is given A reminder that you need to order this channel to continue accessing.

 Step 511: The user enters a subscription package or adds a channel according to the prompt information.

 In one embodiment, the content authentication logic flow is as shown in FIG. 6, and includes:

 Step 601: Internal: The device receives the complete content browsing request initiated by the user, that is, the content access request.

 Step 602: The content providing device determines whether the request parameter has an authentication success identifier, and if yes, step 613 is performed, and if no, step 603 is performed.

Step 603: The content providing device determines whether the access is a free channel, and if yes, performing the step 613. If no, step 604 is performed.

 Step 604: The device sends a subscription relationship authentication request to the DCD server.

 Step 605: The DCD server authenticates the user subscription relationship.

 Step 606: The DCD server returns the user subscription relationship information to the content providing device, and performs strong information on the information.

 Step 607: Internal: The device decrypts the user subscription relationship information, and determines whether the user can access the charging channel. If yes, step 613 is performed, and if no, step 608 is performed.

 Step 608: The content providing device returns a page redirection link of the DCD server to the DCD terminal.

 Step 609: The DCD terminal automatically initiates an access request to the DCD server according to the page redirect link.

 Step 610: The DCD server authenticates the user access authority according to the user subscription relationship. Step 611: The DCD server returns a page of complete content access failure to the DCD terminal, and gives different prompt information according to the failure reason.

 Step 612: The user enters a subscription package or adds a channel according to the prompt information.

 Step 613: The internal device is configured to return the complete content page to the user.

 Step 614: The user browses the complete content.

 In an embodiment, if the channel accessed by the user is a charging channel, the content providing device may further determine whether the user has stored access information for the channel requested to be accessed in the device, and if yes, indicating that the user has previously accessed the charging. The content of the channel, the content providing device believes that the user has the right to access the charging channel, and will directly provide the user with the access content; if there is no user access information in the device (such as when the session times out, the user first accesses, etc.), the content The providing device needs to initiate the above-mentioned authentication processing procedure for the user access authority, obtain the user subscription relationship from the DCD server, and authenticate the user access authority according to the user subscription relationship, and return the channel requesting access to the DCD terminal after the authentication is passed. Content, the content providing device needs to store the access information of the user to the channel requested to be accessed, as the basis for determining whether the user has the access right next time.

The following describes an internal rights interface in the embodiment of the present invention. Assume that the content authentication interface that requests the device to authenticate the user subscription relationship to the DCD server adopts the Http request mode, and assumes that the URL address is http://dcd.monternet.com/service/authorizeo

 When the user requests the content providing device to access the channel content directly from the DCD terminal (browser bookmark, manual input URL address, link of the accessed channel item content page), the content providing device needs to access information according to the user in the session, such as a mobile phone number. , authentication parameters, etc., to determine whether the user has access to the content. If the channel accessed by the user is a free channel, the content providing device directly provides the user with access to the content; if the channel accessed by the user is a premium channel, the content providing device needs to request the subscription relationship authentication from the DCD server through the content authentication interface.

 When the content providing device initiates the subscription relationship authentication request to the DCD server, access the URL address: http://dcd.monternet.com/service/authorize, and pass the phone number, the terminal model, and the channel identifier corresponding to the currently browsed content through the querystring. The method is passed to the DCD server, for example: http://dcd.monternet.com/service/authorize?msisdn=13800010001 &ua=Mot- XXXXXXXXX&feed-id=000001

 According to the user's mobile phone number and terminal model, the DCD Ji server determines whether the user terminal is a registered terminal, determines the user's subscription relationship, and lists the channel list added by the user and the charging identifier list of the user's ordered charging content. Return to the content providing device. The user subscription relationship information can be encrypted by DES (Data Encryption Standard), and the DES encryption key can be flexibly configured. The parameters that need to be encrypted can be as follows:

 DCD server ID: s=dcd (can be other DCD server ID)

 Add channel list: fl=feedJD (use "," between multiple channels)

 Add a list of billing IDs: si = service - ID (use ",,, split between multiple services" Current timestamp: t=yyyy-mm-dd hh24:nn:ss

Encryption using DES above is passed to the content providing device as an auth parameter. The content providing device performs DES decryption on the auth, and performs authentication according to the authentication response parameter information (the channel list or the charging identifier list may be logically determined according to the operational requirement). If the authentication succeeds, the content providing device adds the channel list added by the user. Information and the billing ID column of the user who has subscribed to the charged content The table information is saved in the session, and the complete content page is returned to the user; if the authentication fails, the user redirects the link address http: 〃dcd.montemet.com/service/redirect?feed-id=xxxxxx, where Feed— The id is the channel identifier corresponding to the user's current access content. After the DCD terminal is redirected to the DCD server, the DCD server authenticates the user access authority according to the terminal request, and prompts the user for the corresponding authentication failure result, and guides the user to complete the corresponding operation such as adding the channel.

 When the user browses the complete content through the DCD terminal in the normal access mode, the user boots through the DCD terminal and enters the wap page through the DCD server. The DCD server authenticates the user access authority. If the authentication succeeds, the DCD server redirects the DCD terminal to the internal device, and the redirected link address is the URL address corresponding to the channel content, and the authentication success identifier and auth are attached. Specific examples of two content access authentications are given below.

 Example 1:

 Assume that the user's mobile phone number is 13800010001, and the UA (User Agent) is MOT-V300/xx.xx.xxR DCD/1.5 Profile MIDP-2.0 Configuration/CLDC-1.0. The user currently wants to access a channel of a separate charging and charging channel. The full content of the item. The channel identifier feed-id of the channel is 000001, and the corresponding charging identifier code service-id is 52000003. The authentication interaction process and the parameters passed between the device and the DCD server are as follows:

 The user directly requests the internal device to access the complete content request through the DCD terminal; the content providing device determines that the channel accessed by the user is a charging channel according to the user's access information in the session, such as the user's mobile phone number and the authentication parameter;

 The internal device uses the HTTP GET method to initiate a subscription relationship authentication request to the DCD server. The request URL is:

 Http://dcd.monternet.com/service/authorize?msisdn== 13800010001 &ua=Mot- XXXXXXXXX&feed-id=000001;

After receiving the subscription relationship authentication request, the DCD server authenticates the user subscription relationship, and the DCD server determines that the current DCD server identifier s of the user is dcd, and the channel list fl added by the user is 000001, 000002, the user's billing identifier list si is 52000003, and the user access time t is 2007-03-28 10:12:27. Then the string before DES encryption is: s=dcd; fl=000001, 000002; sl=52000003; t=2007-03-28 10:12:27, after DES encryption, the string is encoded by base64: jdienvhaspSLJIEN8322KJFDeidsFDEoiFDSlkdsfu8327329fdjewioj;

 The DCD server returns the encrypted string as an authentication parameter to the internal device through the authentication response, and the response is:

 HTTP/1.1 200 OK

 Date: 2007-9-15 GMT 16:00:00

 Content-Type: application/xml; charset=gb2312

 Content-Length: 120

<?xml version- ' 1.0">

 <authresult>0< authresult>

 <auth>jdienvhaspSLJIEN8322KJFDeidsFDEoiFDSlkdsfu8327329fdjewioj< auth> Example 2:

 When the user accesses the complete content through the DCD terminal normally, it is booted through the DCD terminal and enters the wap page through the DCD server. After the DCD server is successfully authenticated, the URL address that is sent to the user for redirection is:

 Http://wapnews.i 139.cn/pams/s.do?p=611 &authresult=0&auth=ojofhwaoHOH FjdshfdefdsADSPMEO

 Based on the same inventive concept, the embodiment of the present invention further provides a DCD content access authentication system, and the structure thereof is as shown in FIG. 7, which may include:

 a DCD terminal 701, configured to initiate a content access request; and, to receive a channel content requested to be accessed;

 a DCD server 702, configured to provide a user subscription relationship;

The content providing device 703 is configured to receive a content access request initiated by the DCD terminal 701, determine that the content access request does not carry an authentication success identifier for the user access right, and when determining that the channel requested to be accessed is a premium channel: from the DCD The server 702 obtains a user subscription relationship, according to the user The subscription relationship authenticates the user access right, and returns the channel content requested to be accessed to the DCD terminal 701 after the authentication succeeds; or further determines whether the user has stored access information of the channel requested to access the device; And returning the channel content requested for access to the DCD terminal 701; if not, acquiring the user subscription relationship from the DCD server 702, authenticating the user access authority according to the user subscription relationship, and storing the user requesting access after the authentication succeeds The access information of the channel is returned to the DCD terminal 701 for the channel content requested for access.

 In an embodiment, the internal device may be further configured to return a page redirect link to the DCD terminal when the authentication fails; the DCD terminal may further be configured to initiate an authentication request to the DCD server according to the received page redirect link; the DCD server It can also be used to authenticate the user access rights according to the user subscription relationship, return the authentication failure result to the DCD terminal, and prompt the user to perform the access authority application operation according to the authentication failure reason.

 In an embodiment, the content providing device may be further configured to: when determining the authentication success identifier for the user access right in the content access request, return the channel content requested to be accessed to the DCD terminal.

 In an embodiment, the DCD server may be further configured to: after receiving the trigger of the content link to be accessed by the user in the DCD window, the DCD server authenticates the user access right according to the user subscription relationship; after the authentication succeeds Returning a page redirection link to the DCD terminal; the DCD terminal may be further configured to: initiate an content access request to the device according to the received page redirection link, and carry the authentication request for the user access right in the content access request Logo.

 In one embodiment, the internal device 703 initiates a subscription relationship authentication request to the DCD server 702 via the content authentication interface.

 Based on the same inventive concept, the embodiment of the present invention further provides an internal device, and the structure thereof is as shown in FIG.

 The receiving module 801 is configured to receive a content access request initiated by the user through the DCD terminal, and the determining module 802 is configured to determine whether the content access request carries an authentication success identifier for the user access right.

The module 803 is configured to: when determining that the content access request does not carry the authentication success identifier for the user access right, and the channel requesting access is a charging channel: acquiring the user from the DCD server The order relationship is to authenticate the user access right according to the user subscription relationship, and return the channel content requested to be accessed to the DCD terminal after the authentication succeeds; or, further determine whether the user has stored the channel requested to access the device. Accessing the information; if yes, returning the channel content requested to be accessed to the DCD terminal; if not, obtaining the user subscription relationship from the DCD server, authenticating the user access authority according to the user subscription relationship, and storing the user pair after the authentication succeeds The access information of the channel requesting access, and returning the channel content requested for access to the DCD terminal.

 In summary, the embodiments of the present invention provide an authentication mechanism and a process for content access, and formulate related data interfaces, including a complete content authentication function description, a content authentication interface, and a content authentication process, which can simultaneously support normal Mode and content authentication for content access in an abnormal manner to ensure that only users authorized by the content access proxy server (such as DCD server) and subscribed to related channel content can access related content, effectively preventing users from illegally operating in an abnormal manner. Make content access.

 It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Therefore, it is intended that the present invention cover the modifications and variations of the invention as claimed.

Claims

Rights request  A content access authentication method, comprising:  The content providing device receives the content access request initiated by the terminal. When it is determined that the content access request does not carry the authentication success identifier for the user access right, it determines whether the channel requested to be accessed is a charging channel, and if:  Then, the user subscription relationship is obtained from the content access proxy server, and the user access authority is authenticated according to the user subscription relationship. If the authentication is successful, the channel content requested to be accessed is returned to the terminal.  2. The method according to claim 1, wherein before obtaining the user subscription relationship from the content access proxy server, the method further comprises: determining whether the user has stored access information of the channel requested to be accessed by the user;  If yes, returning the channel content requested for access to the terminal; if not, acquiring the user subscription relationship from the content access proxy server, authenticating the user access authority according to the user subscription relationship, and if the authentication is successful, then the terminal is Returns the channel content requested to access.  3. The method according to claim 2, wherein after the authentication succeeds, before returning the channel content requested for access to the terminal, storing the access letter of the user to the channel requested to access The method according to claim 1, wherein the device further comprises: when determining that the content access request does not carry the authentication success identifier for the user access right, further comprising:  When it is determined that the channel requested to be accessed is a free channel, the channel content requested to be accessed is returned to the terminal.  5. The method of claim 1, wherein the obtaining a user subscription relationship from the content access proxy server comprises:  The device provides the user attribute information to the content access proxy server;  The content access proxy server returns a user subscription relationship to the content providing device based on the user attribute information. 6. The method according to claim 1, wherein said using according to a user subscription relationship User access rights are authenticated, and further include:  If the authentication fails, returning a page redirect link to the terminal;  The terminal initiates an authentication request to the content access proxy server according to the received page redirect link;  The content access proxy server authenticates the user access authority according to the user subscription relationship, returns an authentication failure result to the terminal, and prompts the user to apply for the access permission according to the authentication failure reason. The method according to claim 1, wherein the method further comprises: the content providing device determining that the content access request carries an authentication success identifier for the user access right, and returns a request access to the terminal Channel content.  The method of claim 7, wherein before the receiving device receives the content access request, the method further includes:  The user selects a content link to be accessed in the window through the terminal, and triggers the content access proxy server to authenticate the user access right according to the user subscription relationship;  After the authentication succeeds, the content access proxy server returns a page redirect link to the terminal; the terminal initiates a content access request to the content providing device according to the received page redirect link, and carries the content access request in the content access request. The authentication success identifier of the user access right.  9. A content access authentication system, comprising:  a terminal, configured to initiate a content access request; and, receiving a channel content requested to be accessed; and a content access proxy server, configured to provide a user subscription relationship; The device is configured to receive a content access request initiated by the terminal, and determine that the content access request does not carry an authentication success identifier for the user access right, and when determining that the channel requested to be accessed is a charging channel: The content access proxy server obtains the user subscription relationship, and authenticates the user access authority according to the user subscription relationship, and returns the channel content requested to be accessed to the terminal after the authentication succeeds; or, further determines whether the device has been stored in the device. User access information to the channel requesting access; if yes, returning the channel content requested for access to the terminal; if not, acquiring the user subscription relationship from the content access proxy server, and accessing the user according to the user subscription relationship The line authentication stores the access information of the user to the channel requested to be accessed after the authentication succeeds, and returns the channel content requested to be accessed to the terminal.  The content access authentication system according to claim 9, wherein the internal device determines that the content access request does not carry an authentication success identifier for the user access right and determines that the channel requesting access is a charge. At the time of the channel, a subscription relationship authentication request is initiated to the content access proxy server through the content authentication interface, and the user subscription relationship is obtained from the content access proxy server through the content authentication interface.  The content access authentication system according to claim 10, wherein the content authentication interface adopts an HTTP request mode.  The content access authentication system according to claim 9, wherein the internal device is further configured to return a page redirect link to the terminal when the authentication fails;  The terminal is further configured to initiate an authentication request to the content access proxy server according to the received page redirect link;  The content access proxy server is further configured to authenticate the user access authority according to the user subscription relationship, return an authentication failure result to the terminal, and prompt the user to perform an access authority application operation according to the authentication failure reason.  The content access authentication system according to claim 9, wherein the internal device is further configured to: when determining that the content access request carries an authentication success identifier for user access rights, The terminal returns the channel content requested to be accessed.  The content access authentication system according to claim 13, wherein the content access proxy server is further configured to: after receiving the trigger of the content selection link to be accessed by the user in the window, according to User subscription relationship, authenticating user access rights; after successful authentication, returning a page redirect link to the terminal;  The terminal is further configured to initiate a content access request to the content providing device according to the received page redirect link, and carry an authentication success identifier for the user access right in the content access request. 15. An internal device, characterized in that: a receiving module, configured to receive a content access request initiated by the user through the terminal;  a determining module, configured to determine whether the content access request carries an authentication success identifier for the user access right;  a content providing module, configured to: when determining that the content access request does not carry an authentication success identifier for the user access right, and requesting the accessed channel to be a charging channel: obtaining a user subscription relationship from the content access proxy server, according to the user subscription relationship The user access right is authenticated, and after the authentication succeeds, the channel content requested to be accessed is returned to the terminal; or, it is further determined whether the access information of the channel requested by the user to the accessed channel is already stored in the device; if yes, then Returning, by the terminal, the channel content requested to be accessed; if not, acquiring the user subscription relationship from the content access proxy server, authenticating the user access authority according to the user subscription relationship, and storing the channel requested by the user after the authentication succeeds Access information, and return the channel content requested for access to the terminal.