CN102104527B

Movatterモバイル変換

Info

Publication number: CN102104527B
Application number: CN 200910254362
Authority: CN
Inventors: 刘建锋; 舒平芬
Original assignee: Huawei Device Co Ltd
Current assignee: Huawei Device Shenzhen Co Ltd
Priority date: 2009-12-22
Filing date: 2009-12-22
Publication date: 2013-04-17
Anticipated expiration: 2029-12-22
Also published as: CN102104527A

Abstract

本发明提供一种接入控制方法，用于解决现有技术控制用户接入网络时控制不容易操作、限制个性化管理的问题。该方法包括：对试图接入Internet的终端进行校验；若校验通过，则将终端接入Internet，建立所述校验通过的校验码与所述终端的唯一标识码的对应关系；根据所述唯一标识码与所述校验码的对应关系，管理所述账号对Internet的访问。本发明可以营造健康的上网环境，并且，仅仅通过对文本账号而不是对终端的管理便可以实现在接入控制设备上对终端的接入Internet进行控制，适用于大多数用户的实际操作水平，而针对不同的文本账号，赋予颗粒更小的不同权限，实际上细化了管理，使管理更加个性化。

The invention provides an access control method, which is used to solve the problems in the prior art that the control is not easy to operate and limits individualized management when controlling user access to the network. The method includes: verifying a terminal attempting to access the Internet; if the verification passes, connecting the terminal to the Internet, and establishing a corresponding relationship between the verification code that passes the verification and the unique identification code of the terminal; The corresponding relationship between the unique identification code and the verification code manages the account's access to the Internet. The present invention can create a healthy Internet environment, and only through the management of the text account instead of the terminal, it can realize the control of the terminal's access to the Internet on the access control device, which is suitable for the actual operation level of most users. For different text accounts, granting different permissions with smaller granularity actually refines the management and makes the management more personalized.

Description

A kind of connection control method and access control equipment

Technical field

The present invention relates to network field, be specifically related to a kind of connection control method and access control equipment.

Background technology

The benefit that the development of Internet (Internet) technology brings to the modern life is to provide the resource of magnanimity to access easily for people, especially home network enters average family and personal computer (PC, Personal Computer), the popularizing of the various terminals such as mobile phone, this facility by the Internet Gains resources is more obvious.Yet, because the upper resource of Internet is very different, sometimes be necessary the certain user is limited, for example, the guardian need to limit or monitor the minor and access poor sources on the Internet.

The method of the upper resource of a kind of restricting user access Internet of prior art is to be undertaken by the software on the terminals such as PC.Need to collect certain expense owing to using software, perhaps, software has intellectual property, can not arbitrarily use, therefore, this method of controlling access Internet by the application software on the PC is not calculated, and the user who has better computer technology may also can invade unintentionally other people intellectual property.

Because terminal need to could access Internet by access control equipment, therefore, another kind of Innovative method is to control the user by access control equipment to access Internet.For example, by arranging at access control equipment, limit some media interviews control (MAC, Media Access Control) terminal access Internet corresponding to address.

Although said method decreases in expense (because not needing the function of access control equipment is paid separately) with respect to the access Internet by the software control user on the terminals such as PC, but this method is based on MAC Address carries out, this all is difficult to most people, because the monitor must know the MAC Address that is limited terminal and just can arrange, and this set just limit simply this terminal can access network, in fact limit all and used user or the account of this terminal, lost personal management.

Summary of the invention

The embodiment of the invention provides a kind of connection control method and access control equipment, and control is not easy to operate, limit the problem of personal management when being used for solving prior art control user access network.

A kind of connection control method comprises: the terminal of attempting to access Internet is carried out verification; If described verification is passed through, then with described terminal access Internet, set up the corresponding relation of check code that described verification passes through and the unique identification code of described terminal, described check code for the account/password of user's setting to or described check code be account; Follow the tracks of each connection that described account was accessed take described unique identification code as keyword; Connect/the account mapping table, described connection/account mapping table has been preserved the linkage record of described account access; The connection that described account was accessed limits.

A kind of access control equipment comprises: correction verification module is used for the terminal of attempting to access Internet is carried out verification; The corresponding relation creation module, when being used for verification that described correction verification module carries out the terminal of attempting to access Internet and passing through, set up the corresponding relation of the unique identification code of check code that described verification passes through and described terminal, account/password that described check code arranges for the user to or described check code be account; Tracking cell is for follow the tracks of each connection that described account was accessed take described unique identification code as keyword; Connection/account mapping table is set up the unit, is used for connecting/the account mapping table, and described connection/account mapping table has been preserved the linkage record of described account access; Limiting unit, the connection that is used for described account was accessed limits.

The embodiment of the invention is set up the corresponding relation of the unique identification code of check code that described verification passes through and described terminal by the terminal that verification is passed through, according to the corresponding relation of described unique identification code and described check code, manage described account to the access of Internet.Because the present invention controls by the access Internet to terminal on access control equipment, can build healthy online environment, and, only by realizing just that to the text account rather than to the management of terminal the access Internet to terminal controls on access control equipment, be applicable to most of users' practical operation level, and for different text accounts, give particle less different rights, in fact refinement management, make management more personalized.

Description of drawings

Fig. 1 is a kind of connection control method schematic flow sheet that the embodiment of the invention provides;

Fig. 2 is a kind of access control equipment logical construction schematic diagram that the embodiment of the invention provides.

Embodiment

The embodiment of the invention provides a kind of connection control method, set up the corresponding relation of the unique identification code of check code that described verification passes through and described terminal by the terminal that verification is passed through, according to the corresponding relation of described unique identification code and described check code, manage described account to the access of Internet.The embodiment of the invention also provides corresponding access control equipment.Below be elaborated respectively.

Please refer to Fig. 1, a kind of connection control method basic procedure schematic diagram that the embodiment of the invention provides mainly comprises:

Step S101 carries out verification to the terminal of attempting to access Internet.

Usually, terminal accesses Internet by access control equipment.In embodiments of the present invention, for example before the pc access Internet, access control equipment pushes out first login interface for user's input validation code to terminal, then the check code of user's input carried out verification, only have the correct check code of input, verification could be passed through, and terminal could access Internet.Check code can be account/password of arranging of user oneself pair, also can be for example account of key message, but not need password.In embodiments of the present invention, account is to provide with text account form.Like this, the present invention will be converted into to the restriction of whole terminal the restriction to account, both make things convenient for different user, also to the further refinement of management of terminal of access.

Step S102 if described verification is passed through, then with described terminal access Internet, sets up the corresponding relation of the unique identification code of check code that described verification passes through and described terminal.

Verification is passed through, and then this user is validated user, allows terminal access Internet.Usually, terminal has a unique identification code that is used for this terminal of unique identification, for example, and the MAC Address of PC, IP address etc.In embodiments of the present invention, access control equipment can further be set up the corresponding relation of the unique identification code of check code that described verification passes through and described terminal.So, follow-up access control equipment can use the unique identification code to carry out as keyword to the tracking of this account.

Step S103 according to the corresponding relation of described unique identification code and described check code, manages this account to the access of Internet.

Managing this account can be that the period of this account access Internet is controlled to the access of Internet, stipulates which section period can access Internet, and which section period cannot be accessed Internet; Also can be that total duration of this account access Internet is controlled, these controls be presented as the restrict access to the upper resource of all Internet.

Further, also can:

Unique identification code take terminal is followed the tracks of each connection that account was accessed as keyword, and for example, according to the port of HTTP, follow the tracks of each HTTP and connect, perhaps, and according to different service ports, the linkage record of tracking assets (bt, electric donkey, a sudden peal of thunder and p etc.);

Connect/the account mapping table, connection/account mapping table has been preserved the linkage record of account access, also can be understood as the connection that account was accessed and correspond under this account, the result that these actions are finished has set up connection/account mapping table exactly;

The connection that account was accessed limits.

Above-mentioned described account access Internet is managed is embodied in the part restriction of the upper resource of Internet or the restriction that part is connected, for example, the website filter or disable access certain connect etc.

In embodiments of the present invention, same terminal can have a plurality of accounts.Access control equipment can generate a control tabulation for each account, tabulates to realize that by the control of each account the connection to this account was accessed limits.The control tabulation comprises the restriction project that this account access Internet is done, comprise the setting that described account connects access, for example, can account name and password, the time period of control online, total duration of controlling online, tracking internet records be set separately and filter website etc. each account, these projects can limit by control tabulation, embodiment be a kind of management to the account authority.

Certainly, also can be according to user's needs, the connection that account was accessed is added into the control tabulation, allows this account that the management of this connection is directly limited to realize by the project in the control tabulation.

In the prior art, the user needs manual unlocking browser login related web site, realizes the online demand of oneself, as sees a film, and downloads software, search information etc.This online that has reduced to a certain extent the user is experienced, for example, for a user who likes seeing a film at www.kankan.com, each online all needs manually to go for asks this network address, and it is a kind of contusion that the identical operation of time execution that spends about a minute is experienced the user.

Unlike the prior art, in embodiments of the present invention, can be according to the linkage record in the connection/account mapping table, the connection of accessing is sorted, analyzed, obtain user's online preference, for example, the connection that visiting frequency is high may be exactly that the user relatively connects at the webpage place of preference, therefore, before the connection ordering extremely that visiting frequency is high.After terminal is by verification, for example,, will in connections/account mapping table, sort to the user of front connection active push to the described account of use during Internet by access after the verification of an account.So, the user can directly access resource on the Internet by the connection of active push when using the account login, saves thus the user and opens certain frequent time of the website of access of browser access, promotes the user and experiences.

In order to save the internal memory of access control equipment, and adapt to user interest drift, in embodiments of the present invention, can also be set as the update cycle of connection/account mapping table a rational time.The linkage record holding time in connection/account mapping table reaches the update cycle, then linkage record is upgraded automatically.For example, can be set the rational time (for example, a week), if at this within reasonable time, find that some connects the account that never quilt is corresponding and accessed, and has reason then to think that the user of this account of use is no longer interested in these connections.In these cases, just can the linkage record in the connection/account mapping table be upgraded, delete these at this linkage record of never being accessed by corresponding account within reasonable time.

From above-described embodiment as can be known, the present invention controls by the access Internet to terminal on access control equipment, can build healthy online environment, and, only just can realize by the management to the text account, be applicable to most of users' practical operation level.In addition, owing to being to realize that by different accounts rather than terminal the user is accessed Internet to be controlled, in fact refinement management, make management more personalized, also save the time that the user opens certain website of often accessing of browser access and automatically push the interested connection of user, promoted user's experience.

See also Fig. 2, a kind of access control equipment basic logical structure schematic diagram that the embodiment of the invention provides.For convenience of explanation, only show the part relevant with the embodiment of the invention.Functional module among this embodiment or functional unit can make software module/unit, hardware module/unit or the software and hardware module/unit that combines, and the present invention does not limit.

This access control equipment comprisescorrection verification module 21, correspondingrelation creation module 22 andaccount management module 23.

Correction verification module 21 is used for the terminal of attempting to access Internet is carried out verification.Access control equipment pushes out first login interface for user's input validation code, and then, the check code of 21 pairs of user's inputs of correction verification module carries out verification, only has the correct check code of input, and verification could be passed through, and terminal could access Internet.Check code can be account/password of arranging of user oneself pair, also can be key message, for example account but do not need password.In embodiments of the present invention, account is to provide with text account form.Like this, the present invention will be converted into to the restriction of whole terminal the restriction to account, both make things convenient for the user, also to the further refinement of management of terminal of access.

Correspondingrelation creation module 22, be used for 21 pairs of described correction verification modules attempt to access verification that the terminal of Internet carries out by the time, set up the corresponding relation of the unique identification code of check code that described verification passes through and described terminal.Usually, terminal has the unique identification code of this terminal of unique identification, for example, and the MAC Address of PC, IP address etc.In embodiments of the present invention, correspondingrelation creation module 22 can be set up the corresponding relation of the unique identification code of check code that described verification passes through and described terminal further.Like this, follow-up access control equipment can use the unique identification code to carry out as keyword to the tracking of this account.

Account management module 23 is used for managing described account to the access of Internet according to the unique identification code of described corresponding relation creation module foundation and the corresponding relation of described check code.For example, can be that the period of this account access Internet is controlled, stipulate which section period can access Internet, which section period cannot be accessed Internet; Also can be that total duration of this account access Internet is controlled, these controls be presented as the restrict access to the upper resource of all Internet.Account management module 23 further comprises:

Tracking cell 231 is used for following the tracks of each connection that account was accessed take the unique identification code as keyword, for example, according to the port of HTTP, follow the tracks of each HTTP that accessed and connect, perhaps, according to different service ports, the linkage record of tracking assets (bt, electric donkey, a sudden peal of thunder and p etc.);

Connection/account mapping table is set upunit 232, is used for connecting/account mapping table 27, and wherein, connection/account mapping table 27 has been preserved the linkage record of account access;

Limitingunit 233 limits for the connection that account was accessed, and for example, to the part restriction of the upper resource of Internet or the restriction that part is connected, for example, certain connects website filtration or disable access etc.

Described access control equipment also comprises:

Order module 24, linkage record for the connection of setting upunit 232 foundation according to described connection/account mapping table/account mapping table 27, connection to described access is sorted, is analyzed, before the connection ordering extremely that visiting frequency is high, for example, the connection that visiting frequency is high may be exactly that the user relatively connects at the webpage place of preference, therefore, and before the connection ordering extremely that visiting frequency is high;

Pushing module 25 is used for giving the user who uses described account to front connection active push with ordering in the describedorder module 24 when described terminal accesses Internet by verification.So, the user can directly access resource on the Internet by the connection of active push when using the account login, saves thus the user and opens certain frequent time of the website of access of browser access, promotes the user and experiences;

Update module 26 is used for regularly automatically upgrading the linkage record that described connection/account mapping table is set up the connection ofunit 232 foundation/account mapping table 27.For example, by being set as the update cycle of connection/account mapping table a rational time.The linkage record holding time in connection/account mapping table reaches the update cycle, and 26 pairs of linkage records of update module upgrade automatically.Like this, can save the internal memory of access control equipment, and adapt to user interest drift.

One of ordinary skill in the art will appreciate that all or part of step in the whole bag of tricks of above-described embodiment is to come the relevant hardware of instruction finish by program, this program can be stored in the computer-readable recording medium, storage medium can comprise: read-only memory (ROM, Read Only Memory), random access memory (RAM, Random Access Memory), disk or CD etc.

Above connection control method and the access control equipment that the embodiment of the invention is provided is described in detail, used specific case herein principle of the present invention and execution mode are set forth, the explanation of above embodiment just is used for helping to understand method of the present invention and core concept thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, all will change in specific embodiments and applications, in sum, this description should not be construed as limitation of the present invention.

Claims

1. a connection control method is characterized in that, comprising:

The terminal of attempting to access Internet is carried out verification;

If described verification is passed through, then with described terminal access Internet, set up the corresponding relation of check code that described verification passes through and the unique identification code of described terminal, described check code for the account/password of user's setting to or described check code be account;

Follow the tracks of each connection that described account was accessed take described unique identification code as keyword;

Connect/the account mapping table, described connection/account mapping table has been preserved the linkage record of described account access;

The connection that described account was accessed limits.

2. method according to claim 1 is characterized in that, the described connection that described account was accessed limits and comprises:

Generate the control tabulation of described account, described control tabulation comprises the restriction project that described account access Internet is done, and comprises the setting that described account connects access;

According to user's needs, the connection that described account was accessed is added into described control tabulation.

3. method according to claim 1 is characterized in that, also comprises according to the linkage record in described connection/account mapping table, and the connection of described access is sorted, before the connection ordering extremely that visiting frequency is high.

4. method according to claim 3 is characterized in that, also be included in described terminal by verification after access during Internet, give the user who uses described account to front connection active push with described ordering.

5. method according to claim 1 is characterized in that, also comprises:

Regularly automatically upgrade the linkage record in described connection/account mapping table.

6. method according to claim 1 is characterized in that, described unique identification code is MAC Address or IP address.

7. an access control equipment is characterized in that, comprising:

Correction verification module is used for the terminal of attempting to access Internet is carried out verification;

The corresponding relation creation module, when being used for verification that described correction verification module carries out the terminal of attempting to access Internet and passing through, set up the corresponding relation of the unique identification code of check code that described verification passes through and described terminal, account/password that described check code arranges for the user to or described check code be account;

Tracking cell is for follow the tracks of each connection that described account was accessed take described unique identification code as keyword;

Connection/account mapping table is set up the unit, is used for connecting/the account mapping table, and described connection/account mapping table has been preserved the linkage record of described account access;

Limiting unit, the connection that is used for described account was accessed limits.

8. access control equipment according to claim 7 is characterized in that, described access control equipment also comprises:

Order module, the linkage record for the connection of setting up unit foundation according to described connection/account mapping table/account mapping table sorts to the connection of described access, before the connection ordering extremely that visiting frequency is high;

Pushing module is used for giving the user who uses described account to front connection active push with ordering in the described order module when described terminal accesses Internet by verification;

Update module is used for regularly automatically upgrading the linkage record that described connection/account mapping table is set up the connection of unit foundation/account mapping table.