Method and System for Subscriber to Log in Internet Content Provider (ICP) Website in Identity/Location Separation Network and Login Device Thereof

• US 20120180114A1
• Filed: 09/09/2010
• Published: 07/12/2012
• Est. Priority Date: 09/17/2009
• Status: Active Grant

• Current Assignee: ZTE Corporation
• Original Assignee: ZTE Corporation
• Inventors: Jiang, Hua, Wu, Qiang, Huang, Bing
• Granted Patent: US 9,112,843 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

The present invention provides a method and system for a user to log in an Internet Content Provider (ICP) website in an identification location separation network and a login device thereof. The method includes: after receiving an access data packet of a user, the ICP website obtaining an identification code of the user therein, and transmitting the identification code of the user to an Internet Service Provider (ISP) authentication center; the ISP authentication center authenticating the user based on the identification code of the user, and if the authentication is passed, the ISP authentication center returning an authentication passed message, which contains the identification code of the user, to the ICP website; after receiving the authentication passed message, the ICP website obtaining personal information of the user according to the identification code of the user, and then the user logging in the ICP website.

Claims

1. A method for a user to log in an Internet Content Provider (ICP) website in an identification location separation network, comprising:

after receiving an access data packet of a user, the ICP website obtaining an identification code of the user in the data packet, and transmitting the identification code of the user to an Internet Service Provider (ISP) authentication center;

the ISP authentication center authenticating the user based on the identification code of the user, and if the authentication is passed, the ISP authentication center returning an authentication passed message, which contains the identification code of the user, to the ICP website; and

after receiving the authentication passed message, the ICP website obtaining personal information of the user according to the identification code of the user, and then the user logging in the ICP website.

2. The method according to claim 1, wherein,

the personal information of the user comprises universal personal information and service-related personal information;

wherein,

the service-related personal information is information generated when the user uses the ICP website;

the universal personal information is information of the user stored in the ISP authentication center unrelated with services.

3. The method according to claim 2, wherein,

the universal personal information comprises one or more of name, gender, date of birth, degree, telephone number, Email address and family address information.

4. The method according to claim 2, wherein,

the service-related personal information comprises one or more of points obtained by the user, virtual money, temporally stored products, order recording, search recording and user level information.

5. The method according to claim 1, wherein,

the step of the ISP authentication center authenticating the user based on the identification code of the user specifically comprises:

after receiving an authentication request sent by an ICP website, the ISP authentication center searching a database in the ISP authentication center using the identification code of the user carried in the authentication request as a keyword, and if user information corresponding to the identification code of the user is obtained, the authentication being passed.

6. The method according to claim 2, wherein,

the authentication passed message sent by from the ISP authentication center to the ICP website further comprises the universal personal information of the user;

the step of the ICP website obtaining personal information of the user according to the identification code of the user specifically comprises;

after receiving the authentication passed message, the ICP website querying the service-related personal information of the user in the database of the ICP website according to the identification code of the user, and combining the universal personal information and the service-related personal information of the user into the personal information of the user.

7. The method according to claim 2, wherein,

the step of the ICP website obtaining personal information of the user according to the identification code of the user specifically comprises:

the ICP website sending a query request message to the ISP authentication center to query the universal personal information of the user;

the ICP website querying the service-related personal information of the user in the database of the ICP website according to the identification code of the user; and

after receiving the universal personal information of the user sent by the ISP authentication center, the ICP website combining the universal personal information and the service-related personal information of the user into the personal information of the user.

8. The method according to claim 6, wherein,

in the step of the ICP website querying the service-related personal information of the user in the database of the ICP website according to the identification code of the user, if the ICP website cannot find the service-related personal information of the user in the local database, the ICP website locally generates the service-related personal information of the user.

15. The method according to claim 2, wherein,

the step of the ISP authentication center authenticating the user based on the identification code of the user specifically comprises:

after receiving an authentication request sent by an ICP website, the ISP authentication center searching a database in the ISP authentication center using the identification code of the user carried in the authentication request as a keyword, and if user information corresponding to the identification code of the user is obtained, the authentication being passed.

16. The method according to claim 3, wherein,

the step of the ISP authentication center authenticating the user based on the identification code of the user specifically comprises:

after receiving an authentication request sent by an ICP website, the ISP authentication center searching a database in the ISP authentication center using the identification code of the user carried in the authentication request as a keyword, and if user information corresponding to the identification code of the user is obtained, the authentication being passed.

17. The method according to claim 4, wherein,

the step of the ISP authentication center authenticating the user based on the identification code of the user specifically comprises:

after receiving an authentication request sent by an ICP website, the ISP authentication center searching a database in the ISP authentication center using the identification code of the user carried in the authentication request as a keyword, and if user information corresponding to the identification code of the user is obtained, the authentication being passed.

18. The method according to claim 7, wherein,

in the step of the ICP website querying the service-related personal information of the user in the database of the ICP website according to the identification code of the user, if the ICP website cannot find the service-related personal information of the user in the local database, the ICP website locally generates the service-related personal information of the user.

9. A system for a user to log in an Internet Content Provider (ICP) website in an identification location separation network, comprising a user, the ICP website and an Internet Service Provider (ISP) authentication center, wherein,

the user is configured to send to the ICP website a visit data packet carrying an identification code of the user;

the ICP website is configured to obtain the identification code of the user in the visit data packet, and send the identification code of the user to the ISP authentication center; and

after receiving an authentication passed message sent by the ISP authentication center, obtain personal information of the user, and complete login of the user;

the ISP authentication center is configured to receive the identification code of the user sent by the ICP website, and authenticate the user through the identification code of the user; and

return the authentication passed message to the ICP website after the authentication is passed.

10. The system according to claim 9, wherein,

the personal information of the user comprises universal personal information and service-related personal information;

wherein,

the universal personal information is information of the user stored in the ISP authentication center unrelated with services, and comprises one or more of name, gender, date of birth, degree, telephone number, Email address and family address information;

the service-related personal information is information generated when the user uses the ICP website, and comprises one or more of points obtained by the user, virtual money, temporally stored products, order recording, search recording and user level information.

11. A login device, applied in an Internet Content Provider (ICP) website, the login device comprising an identification code obtaining unit and a user information obtaining unit, wherein:

the identification code obtaining unit is configured to, obtain an identification code of a user in a visit data packet, and send the identification code of the user to an Internet Service Provider (ISP) authentication center;

the user information obtaining unit is configured to, after receiving an authentication passed message of the user sent by the ISP authentication center, obtain personal information of the user, and complete login of the user.

12. The device according to claim 11, wherein,

the personal information of the user comprises universal personal information and service-related personal information;

the user information obtaining unit is configured to obtain the universal personal information of the user from the authentication passed message of the user sent by the ISP authentication center; and

, after receiving the authentication passed message, query the service-related personal information of the user in a database of the ICP website according to the identification code of the user, and combine the universal personal information and the service-related personal information of the user into the personal information of the user.

13. The system according to claim 11, wherein,

the personal information of the user comprises universal personal information and service-related personal information;

the user information obtaining unit is configured to, after receiving the authentication passed message, send a query request message to the ISP authentication center to query the universal personal information of the user, and query the service-related personal information of the user in the database of the ICP website according to the identification code of the user, combine the universal personal information and the service-related personal information of the user into the personal information of the user.

14. The system according to claim 12 or 13, wherein,

the user information obtaining unit is configured to, if the service-related personal information of the user cannot be found in the ICP website, locally generate service-related personal information of the user.

19. The system according to claim 13, wherein,

the user information obtaining unit is configured to, if the service-related personal information of the user cannot be found in the ICP website, locally generate service-related personal information of the user.