Method and system for subscriber to log in internet content provider (ICP) website in identity/location separation network and login device thereof

• US 9,112,843 B2
• Filed: 09/09/2010
• Issued: 08/18/2015
• Est. Priority Date: 09/17/2009
• Status: Active Grant

• Current Assignee: ZTE Corporation
• Original Assignee: ZTE Corporation
• Inventors: Huang, Bing, Jiang, Hua, Wu, Qiang
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): DO, KHANG D
• Application Number:
  US13/496,720
• Publication Number:
  US 20120180114A1
• Time in Patent Office: 1,804 Days
• Field of Search: 726 1- 21
• US Class Current: 1/1
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

The present invention provides a method and system for a user to log in an Internet Content Provider (ICP) website in an identification location separation network and a login device thereof. The method includes: after receiving an access data packet of a user, the ICP website obtaining an identification code of the user therein, and transmitting the identification code of the user to an Internet Service Provider (ISP) authentication center; the ISP authentication center authenticating the user based on the identification code of the user, and if the authentication is passed, the ISP authentication center returning an authentication passed message, which contains the identification code of the user, to the ICP website; after receiving the authentication passed message, the ICP website obtaining personal information of the user according to the identification code of the user, and then the user logging in the ICP website.

Claims

1. A method for a user to log in to an Internet Content Provider (ICP) web site, comprising:

in an identification location separation network, an Internet Service Provider (ISP) authentication center assigning to a user a fixed identification code to be used at a network layer during establishing a Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) service connection;

the ISP authentication center authenticating the user when the user accesses the Internet, and after the authentication is passed, the ISP authentication center sending to the user the fixed identification code which is assigned to the user in advance;

wherein the ISP authentication center which assigns the fixed identification code to the user also stores universal personal information of the user, the universal personal information is unrelated with services;

when the ICP website receives a visit data packet of the user, the ICP website obtaining the identification code of the user in the visit data packet, and transmitting the identification code of the user to the ISP authentication center;

after receiving the identification code of the user from the ICP website, the ISP authentication center searching a database in the ISP authentication center using the identification code of the user as a keyword, when user information corresponding to the identification code of the user is found, the ISP authentication center sending an authentication passed message, which contains the identification code of the user and the universal personal information of the user, to the ICP website;

thereby said fixed identification code of the user is used both for identifying the user at the network layer and for acquiring the universal personal information of the user from the ISP authentication center when the user accesses the ICP website; and

after receiving the authentication passed message, the ICP website querying service-related personal information of the user in a database of the ICP website according to the identification code of the user in the authentication passed message, and the ICP website combining the universal personal information of the user received from the ISP authentication center and the service-related personal information of the user obtained from the database of the ICP website into complete personal information of the user and then the user logging in to the ICP website;

thereby allowing the user to access all kinds of ICP websites using the fixed identification code distributed by the ISP authentication center after passing only one authentication in the ISP authentication center without a need of another authentication.

2. The method according to claim 1, wherein,

the service-related personal information is information generated when the user uses the ICP website.

3. The method according to claim 1, wherein,

the universal personal information comprises one or more of name, gender, date of birth, degree, telephone number, Email address and family address information.

4. The method according to claim 1, wherein,

the service-related personal information comprises one or more of points obtained by the user, virtual money, temporally stored products, order recording, search recording and user level information.

5. The method according to claim 1, wherein:

the ICP website obtaining the identification code of the user comprises sending a query request message to the ISP authentication center to query the universal personal information of the user.

6. The method according to claim 1, wherein,

in the step of the ICP website querying the service-related personal information of the user in the database of the ICP website according to the identification code of the user, if the ICP website cannot find the service-related personal information of the user in the database of the ICP website, the ICP website locally generates the service-related personal information of the user.

7. The method according to claim 5, wherein,

in the step of the ICP website querying the service-related personal information of the user in the database of the ICP website according to the identification code of the user, if the ICP website cannot find the service-related personal information of the user in the database of the ICP website, the ICP website locally generates the service-related personal information of the user.

8. A system for a user to log in to an Internet Content Provider (ICP) website, comprising a user equipment, the ICP website and an Internet Service Provider (ISP) authentication center in an identification location separation network, wherein,

the ISP authentication center is configured to assign to the user a fixed identification code to be used at a network layer during establishing a Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) service connection, authenticate the user when the user accesses the Internet, and after the authentication is passed, send to the user equipment the fixed identification code which is assigned to the user in advance;

the ISP authentication center is further configured to store universal personal information of the user, wherein the universal personal information is unrelated with services;

the user equipment is configured to send to the ICP website a visit data packet carrying the identification code of the user;

the ICP website is configured to, when receiving the visit data packet of the user, obtain the identification code of the user in the visit data packet, and transmit the identification code of the user to the ISP authentication center;

the ISP authentication center is further configured to, after receiving the identification code of the user from the ICP website, search a database in the ISP authentication center using the identification code of the user as a keyword, when user information corresponding to the identification code of the user is found, send an authentication passed message, which contains the identification code of the user and the universal personal information of the user, to the ICP website;

thereby said fixed identification code of the user is used both for identifying the user at the network layer and for acquiring the universal personal information of the user from the ISP authentication center when the user accesses the ICP website;

the ICP website is further configured to, after receiving the authentication passed message from the ISP authentication center, query service-related personal information of the user in a database of the ICP website according to the identification code of the user in the authentication passed message, and combine the universal personal information of the user received from the ISP authentication center and the service-related personal information of the user obtained from the database of the ICP website into complete personal information of the user, and complete login of the user;

thereby allowing the user to access all kinds of ICP websites using the fixed identification code distributed by the ISP authentication center after passing only one authentication in the ISP authentication center without a need of another authentication.

9. The system according to claim 8, wherein,

the universal personal information comprises one or more of name, gender, date of birth, degree, telephone number, Email address and family address information;

the service-related personal information is information generated when the user uses the ICP website, and comprises one or more of points obtained by the user, virtual money, temporally stored products, order recording, search recording and user level information.

10. A login device, applied in an Internet Content Provider (ICP) website, the login device comprising an identification code obtaining unit and a user information obtaining unit, and the login device being used in an identification location separation network, wherein:

the identification code obtaining unit is configured to, when receiving a visit data packet of a user, obtain the identification code of the user in the visit data packet, and transmit the identification code of the user to an ISP authentication center;

wherein the fixed identification code of the user is assigned by the ISP authentication center to the user to be used at a network layer during establishing a Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) service connection, and after authentication of the user when the user accesses the Internet is passed, the ISP authentication center sends to the user the fixed identification code which is assigned to the user in advance; and

the ISP authentication center which assigns the fixed identification code to the user also stores universal personal information of the user, the universal personal information is unrelated with services;

after receiving the identification code of the user from the login device, the ISP authentication center searches a database in the ISP authentication center using the identification code of the user as a keyword, when user information corresponding to the identification code of the user is found, the ISP authentication center sends an authentication passed message, which contains the identification code of the user and the universal personal information of the user, to the login device;

thereby said fixed identification code of the user is used both for identifying the user at the network layer and for acquiring the universal personal information of the user from the ISP authentication center when the user accesses the ICP website;

the user information obtaining unit is configured to, after receiving the authentication passed message from the ISP authentication center, obtain the universal personal information of the user from the authentication passed message, and query the service-related personal information of the user in a database of the ICP web site according to the identification code of the user, and combine the universal personal information received from the ISP authentication center and the service-related personal information of the user obtained from the database of the ICP website into complete personal information of the user, and complete login of the user;

thereby allowing the user to access all kinds of ICP websites using the fixed identification code distributed by the ISP authentication center after passing only one authentication in the ISP authentication center without a need of another authentication.

11. The device according to claim 10, wherein,

the obtaining the universal personal information of the user comprises sending a query request message to the ISP authentication center to query the universal personal information of the user.

12. The device according to claim 10, wherein,

the user information obtaining unit is configured to, if the service-related personal information of the user cannot be found in the database of the ICP website, locally generate service-related personal information of the user.

13. The device according to claim 11, wherein,

the user information obtaining unit is configured to, if the service-related personal information of the user cannot be found in the database of the ICP website, locally generate service-related personal information of the user.