Order authentication method, management node, authentication node, device and storage medium

Abstract

The invention provides an order authentication method of a value added service, an order management node, an order authentication node, electronic equipment and a computer readable storage medium, and relates to the technical field of network communication. The order authentication method comprises the following steps: receiving a value added service order request sent by a target terminal; judging whether the value-added service is a fixed network value-added service or not according to the ordering request; in response to the fact that the value-added service is a fixed network value-added service, generating an order authentication request of the value-added service according to a mapping relationship among the order request, a fixed network account and a mobile network account; and sending the order authentication request to the order authentication node, so that the order authentication node authenticates the order authentication request and generates an order authentication request response result. The problems that in the prior art, ordering authentication cannot be carried out on fixed network value-added services and mobile network value-added services in a centralized and unified mode, the operation process of the value-added services is complex, and the construction cost is high are at least solved. The method is suitable for business order authentication scenes.

Description

Technical Field

[0001] The present invention relates to the field of network communication technology, and in particular to a subscription authentication method for a value-added service, a subscription management node, a subscription authentication node, an electronic device and a computer-readable storage medium. Background Art

[0002] The public services of the telecommunications industry include two categories: basic services and value-added services. Value-added services are derived from basic services. Telecommunications basic services are divided into fixed networks and mobile networks. The basic services of fixed networks include fixed network services of broadband and fixed telephones, and the basic services of mobile networks include mobile network services. In addition, broadband-related IPTV (Internet Protocol Television) services are also defined as basic services of fixed networks. The basic services of fixed networks and mobile networks have derived corresponding fixed network value-added services and mobile network value-added services, respectively. In comparison, mobile network value-added services are developing more rapidly, and fixed network value-added services are mainly IPTV value-added services.

[0003] Whether it is fixed network value-added services or mobile network value-added services, corresponding service authentication, authorization, and billing operation management are required. Different from the authentication, authorization, and billing (AAA) of fixed network and mobile network basic services, the subscription and billing of value-added services need to rely on the value-added service platform and the dedicated AAA platform, and the value-added service fees are charged to the customer's basic services.

[0004] However, the operation of broadband and IPTV value-added services, as well as mobile value-added services, requires the deployment of a set of AAA platforms and billing accounting systems respectively, and the construction of two business processes, so that the subscribed value-added services can be charged to the corresponding basic services, and then the detailed call bills of various value-added services can be combined into the user's payment account. The process is complicated and the construction cost is high.

[0005] In addition, even if telecom operators deploy national unified mobile network and fixed network value-added service AAA platforms to centrally and uniformly operate fixed network and mobile network value-added services, the value-added services introduced by provincial-level companies under telecom operators cannot be resolved due to issues related to product ownership, contract signing entities, settlement sharing, and Partner Relationship Management (PRM) product approval and settlement. Therefore, the provincial-level companies can only be responsible for solving AAA authentication and billing issues, and cannot use a centralized and unified AAA platform for business operations. Summary of the invention

[0006] The technical problem to be solved by the present invention is to address the above-mentioned deficiencies in the prior art and to provide a subscription authentication method for value-added services, a management node, an authentication node, an electronic device and a computer-readable storage medium. The method can realize centralized and unified subscription authentication for value-added services, reduce the complexity of the subscription authentication process for fixed-line and mobile-line value-added services, and reduce construction costs.

[0007] In a first aspect, the present invention provides a subscription authentication method for a value-added service, which is applied to a subscription management node of a value-added service subscription authentication system, wherein the value-added service subscription authentication system includes a subscription management node and a subscription authentication node, and the subscription authentication method includes: receiving a subscription request for a value-added service sent by a target terminal, wherein the subscription request includes a value-added service product ID and an account of the target terminal, and the account includes one of the following: a fixed network account or a mobile network account; judging whether the value-added service is a fixed network value-added service according to the subscription request; in response to the value-added service being a fixed network value-added service, generating a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed network account and the mobile network account; and sending the subscription authentication request to the subscription authentication node so that the subscription authentication node authenticates the subscription authentication request and generates a subscription authentication request response result.

[0008] Preferably, after determining whether the value-added service is a fixed-line value-added service according to the subscription request, and before sending the subscription authentication request to the subscription authentication node, the subscription authentication method for the value-added service further includes: in response to the value-added service being a mobile-line value-added service, generating a subscription authentication request for the value-added service according to the subscription request.

[0009] Preferably, generating a subscription authentication request for a value-added service based on a mapping relationship among a subscription request, a fixed-line account number, and a mobile-line account number specifically comprises: matching the mobile-line account number of the target terminal based on the fixed-line account number of the target terminal, and a mapping relationship among the fixed-line account number and the mobile-line account number; generating a subscription authentication request for a value-added service based on the mobile-line account number of the target terminal, a value-added service product ID, and a preset subscription authentication request format.

[0010] Preferably, before matching the mobile network account of the target terminal according to the fixed network account of the target terminal and the mapping relationship between the fixed network account and the mobile network account, the method for authenticating subscription of value-added services further comprises: constructing a mapping relationship between the fixed network account and the mobile network account, and storing the mapping relationship in a database.

[0011] Preferably, the ordering management node adopts Kafka message queue technology.

[0012] In a second aspect, the present invention further provides a subscription authentication method for a value-added service, which is applied to a subscription authentication node of a value-added service system, the subscription authentication method comprising: receiving a subscription authentication request sent by a subscription management node, wherein the subscription authentication request is a subscription request for a value-added service sent by the subscription management node according to a target terminal, determining whether the value-added service is a fixed-line value-added service, and in response to the value-added service being a fixed-line value-added service, generating a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, a fixed-line account and a mobile network account, the subscription request comprising a value-added service product ID and an account of the target terminal, the account comprising one of the following: a fixed-line account or a mobile network account; authenticating the subscription authentication request and generating a subscription authentication request response result.

[0013] In a third aspect, the present invention further provides a subscription management node, comprising: a first receiving module, a judgment module, a first generating module and a first sending module, the first receiving module being used to receive a subscription request for a value-added service sent by a target terminal, wherein the subscription request comprises a value-added service product ID and an account of the target terminal, and the account comprises one of the following: a fixed network account or a mobile network account, the judgment module being connected to the first receiving module and being used to judge whether the value-added service is a fixed network value-added service according to the subscription request, the first generating module being connected to the judgment module and being used to generate a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed network account and the mobile network account in response to the value-added service being a fixed network value-added service, the first sending module being connected to the first generating module and being used to send the subscription authentication request to a subscription authentication node, so that after receiving the subscription authentication request, the subscription authentication node authenticates the subscription authentication request and generates a subscription authentication request response result.

[0014] In a fourth aspect, the present invention also provides a subscription authentication node, comprising: a second receiving module and an authentication module, the second receiving module being used to receive a subscription authentication request sent by a subscription management node, the authentication module being connected to the second receiving module, and being used to authenticate the subscription authentication request and generate a subscription authentication request response result.

[0015] In a fifth aspect, the present invention further provides an electronic device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to implement the subscription authentication method for the value-added service provided in the first aspect or the second aspect above.

[0016] In a sixth aspect, the present invention further provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the method for authenticating subscription to the value-added service provided in the first aspect or the second aspect above is implemented.

[0017] The invention provides a subscription authentication method for a value-added service, a subscription management node, a subscription authentication node, an electronic device and a computer-readable storage medium. The method receives a subscription request for a value-added service sent by a target terminal, determines whether the value-added service is a fixed-line value-added service, and responds to the value-added service being a fixed-line value-added service by authenticating the subscription management node, the electronic device and the computer-readable storage medium.

[0018] The mapping relationship between the target terminal account, the fixed network account and the mobile network account generates a subscription authentication request for the value-added service, and based on a unified subscription authentication node, the subscription authentication request is centrally authenticated to generate a subscription authentication request response result. Therefore, the present invention can realize centralized and unified subscription authentication for value-added services, reduce the complexity of the subscription authentication process for fixed network and mobile network value-added services, and reduce construction costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 This is a flow chart of a method for subscribing and authenticating a value-added service according to Embodiment 1 of the present invention;

[0020] Figure 2 This is an example diagram of an AAA interface interaction process in Embodiment 1 of the present invention;

[0021] Figure 3 This is an example diagram of a VAC interaction process in Embodiment 1 of the present invention;

[0022] Figure 4 This is a flow chart of a method for subscribing and authenticating a value-added service according to Embodiment 2 of the present invention;

[0023] Figure 5 This is a schematic diagram of the structure of a subscription management node according to Embodiment 3 of the present invention;

[0024] Figure 6 This is a structural diagram of an ordering authentication node according to Embodiment 4 of the present invention. DETAILED DESCRIPTION

[0025] In order to enable those skilled in the art to better understand the technical solution of the present invention, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

[0026] It should be understood that the specific embodiments and drawings described herein are only used to explain the present invention rather than to limit the present invention.

[0027] It can be understood that, in the absence of conflict, the various embodiments of the present invention and the various features in the embodiments can be combined with each other.

[0028] It can be understood that, for the convenience of description, the drawings of the present invention only show the parts related to the present invention, while the parts irrelevant to the present invention are not shown in the drawings.

[0029] It can be understood that each unit and module involved in the embodiments of the present invention may correspond to only one physical structure, or may be composed of multiple physical structures, or multiple units and modules may be integrated into one physical structure.

[0030] It can be understood that, without conflict, the functions and steps marked in the flowcharts and block diagrams of the present invention may occur in an order different from that marked in the drawings.

[0031] It is understood that the flowcharts and block diagrams of the present invention illustrate the possible architectures, functions, and operations of the systems, devices, equipment, and methods according to the various embodiments of the present invention. Each box in the flowchart or block diagram may represent a unit, module, program segment, or code, which contains executable instructions for implementing the specified functions. Moreover, each box or combination of boxes in the block diagram and flowchart may be implemented by a hardware-based system that implements the specified functions, or may be implemented by a combination of hardware and computer instructions.

[0032] It can be understood that the units and modules involved in the embodiments of the present invention can be implemented by software or hardware. For example, the units and modules can be located in a processor.

[0033] Embodiment 1:

[0034] like Figure 1 As shown, this embodiment provides a subscription authentication method for a value-added service, which is applied to a subscription management node of a value-added service subscription authentication system. The value-added service subscription authentication system includes a subscription management node and a subscription authentication node.

[0035] In this embodiment, the value-added service platform of the prior art generally includes multiple key modules, among which the value-added service subscription management module and the subscription authentication and billing management module are two important components. The value-added service subscription management module is responsible for the management of the value-added service catalog, subscription process management, user management, promotion and package management, and the subscription authentication and billing management module is responsible for authentication management, billing management, bill generation and management, and payment interface integration. This embodiment retains the value-added service subscription management modules of the fixed network value-added service platform and the mobile network value-added service platform in the prior art, and integrates the value-added service subscription management modules of the fixed network value-added service platform and the mobile network value-added service platform as subscription management nodes.

[0036] In addition, the VAC (Value-added service Authentication Center) of the mobile network value-added service platform in the prior art, that is, the subscription authentication and billing management module has been in operation for many years and has a mature and complete AAA platform capability and billing account processing flow. Therefore, this embodiment uses the subscription authentication and billing management module of the mobile network value-added service platform as the subscription authentication node.

[0037] It should be noted that, since broadband value-added services mainly rely on Internet technology, focus on data transmission and online services, and involve technologies such as routing, cloud computing, and data management; IPTV value-added services focus on the transmission and playback of video content, and usually require specialized streaming media transmission technologies, such as MPEG-DASH (Dynamic Adaptive Streaming over HTTP, abbreviated as DASH, dynamic adaptive streaming based on HTTP), HLS (HTTP Live Streaming, adaptive bit rate streaming media transmission protocol based on HTTP), and encoding and decoding mechanisms for video content; therefore, broadband value-added services and IPTV value-added services are usually not operated on the same platform, that is, the fixed network value-added service platform includes: broadband value-added service platform and IPTV value-added service platform. Therefore, the subscription management node includes: value-added service subscription management modules of broadband value-added service platform, IPTV value-added service platform, and mobile network value-added service platform.

[0038] The subscription authentication method for value-added services includes:

[0039] S101, receiving a subscription request for a value-added service sent by a target terminal, wherein the subscription request includes a value-added service product ID and an account of the target terminal, and the account includes one of the following: a fixed network account or a mobile network account.

[0040] In this embodiment, the target terminal includes a mobile network terminal and a fixed network terminal, wherein the mobile network terminal includes but is not limited to: mobile phones, tablet computers and other mobile devices, and the fixed network terminal includes but is not limited to: smart TVs, set-top boxes, and routers. The value-added service subscription management module of the broadband value-added service platform receives subscription requests for broadband value-added services sent by personal computers, routers, smart TVs, set-top boxes, and mobile devices; the value-added service subscription management module of the mobile network value-added service platform receives subscription requests for mobile value-added services sent by mobile devices; and the value-added service subscription management module of the IPTV value-added service platform receives subscription requests for IPTV value-added services sent by smart TVs, set-top boxes, and mobile devices.

[0041] S102: Determine whether the value-added service is a fixed network value-added service according to the order request.

[0042] In this embodiment, broadband and IPTV services and mobile phone services belong to the two major network systems of fixed network and mobile network respectively, and the numbering system of basic services of fixed network and mobile network is different. Broadband and IPTV service accounts have a special numbering system, and mobile phone services are distinguished by mobile phone numbers. Therefore, the subscription management node can determine whether the value-added service is a fixed network value-added service according to the value-added service product ID in the subscription request.

[0043] S103 , in response to the value-added service being a fixed network value-added service, generating a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed network account, and the mobile network account.

[0044] Specifically, S103: generating a subscription authentication request for the value-added service according to the mapping relationship between the subscription request, the fixed network account and the mobile network account, including steps S1031-S1032:

[0045] S1031, matching the mobile network account of the target terminal according to the fixed network account of the target terminal and the mapping relationship between the fixed network account and the mobile network account.

[0046] In this embodiment, since the design of VAC in the prior art is to meet the authentication and authorization requirements of mobile value-added services, VAC can only identify mobile network accounts and cannot handle value-added service authentication and billing of fixed network accounts. Therefore, the value-added service subscription management module of the mobile value-added service platform can directly send the subscription request to VAC for authentication and authorization.

[0047] The prior art VAC docking with the value-added service subscription management module associated with the mobile network value-added service platform also requires corresponding conventional software interface development, namely software communication. Therefore, this embodiment designs an AAA interface for docking the VAC and the value-added service subscription management module on the subscription management node.

[0048] S1032, generating a subscription authentication request for the value-added service according to the mobile network account of the target terminal, the value-added service product ID and a preset subscription authentication request format.

[0049] In this embodiment, the mobile network value-added service platform, such as mobile music and mobile reading, has a dedicated value-added service platform, which has a subscription authentication request format connected to VAC, thereby realizing the authentication function of the mobile network value-added service. In this embodiment, the subscription authentication request format of the VAC receiving the IPTV value-added service platform can be designed on the basis of the original subscription authentication request format of the mobile value-added service platform, such as the authentication information format of the standard interface that the VAC has opened.

[0050] AAA interface interaction process, such as Figure 2As shown, the value-added service subscription management module is the value-added service subscription management module of the IPTV value-added service platform, specifically: after receiving the subscription request, the value-added service subscription management module sends the subscription request to the AAA interface, and the AAA interface matches the mobile network account of the target terminal according to the fixed network account of the target terminal and the mapping relationship between the fixed network account and the mobile network account; and generates a subscription authentication request according to the authentication and authorization information format of the standard interface opened by the VAC and the mobile network account of the target terminal. In this embodiment, by sending the subscription requests in batches to the AAA interface, based on the mapping relationship between the fixed network account and the mobile network account, the AAA interface indiscriminately generates a subscription authentication request for the subscription requests of the fixed network value-added service and the mobile network value-added service, and sends it to the VAC for centralized and unified authentication, thereby solving the problem that the VAC cannot identify the fixed network account, reducing the authentication, billing and operation problems of the fixed network value-added service, and realizing a rapid response to the subscription of the fixed network value-added service and the mobile network value-added service.

[0051] Optionally, before S1031: matching the mobile network account of the target terminal according to the fixed network account of the target terminal and the mapping relationship between the fixed network account and the mobile network account, the method for authenticating subscription of the value-added service further includes:

[0052] S1030, constructing a mapping relationship between the fixed network account and the mobile network account, and storing the mapping relationship in a database.

[0053] In this embodiment, since the user's mobile phone number in CBSS (Central Business Support System) or CRM (Customer Relationship Management) often has multiple primary and secondary cards, it is not easy to quickly query the primary mobile phone number. In addition, the CBSS system is huge, and the query time is long and uncertain. In this embodiment, the fixed network account and the mobile network account are obtained from the CBSS or CRM, and the mapping relationship between the fixed network account and the mobile network account is constructed, and the mapping relationship is stored in the database, such as: selecting user identity information, broadband account (or IPTV account) and primary mobile phone number, and establishing a database with broadband account and mobile phone number as main keywords, and the primary mobile phone number field and broadband account field in the database form a binding relationship. The database is interconnected with the AAA interface, and responds to the AAA interface in real time according to the fixed network account query and the request to obtain the mobile network account. In this embodiment, by constructing the mapping relationship between the fixed network account and the mobile network account, and storing the mapping relationship in the database, convenient and fast query and management of the fixed network account and the mobile network account are realized.

[0054] S104: Send the order authentication request to the order authentication node, so that the order authentication node authenticates the order authentication request and generates an order authentication request response result.

[0055] In this embodiment, the subscription authentication request is sent to the VAC for authentication. The VAC performs user authentication, service authentication, and subscription relationship authentication on the subscription authentication request, generates a subscription authentication request response result, and notifies the subscription management node of the subscription authentication request response result through the AAA interface according to the agreed information meaning, so that the subscription management node decides whether to open the value-added service of the target terminal, such as: when the value-added service is an IPTV value-added service, the subscription management node determines whether the target terminal can play the content.

[0056] It should be noted that VAC interacts with the partner relationship management system, CBSS or BSS (Business Support System), billing sorting system and accounting processing system to realize the authentication, billing and accounting processing of the order authentication request, such as Figure 3 As shown. PRM is responsible for approving the products submitted by the partner SP (Service Provider) and settling with the SP according to the order and settlement rules. CBSS / BSS refers to CRM, which generates user information and business information after accepting the user's business application at the business front desk, so as to provide it to VAC for authentication, certification and billing processing. This embodiment utilizes the authentication and billing channel process of the existing mobile network value-added service platform to open up the channel between the fixed-line value-added service platform and VAC, CBSS, CRM, billing accounting system and PRM, solves the billing problem of fixed-line value-added services, ensures the operation of fixed-line value-added services, and drives business development and revenue growth.

[0057] Optionally, after determining whether the value-added service is a fixed network value-added service according to the subscription request at S102, and before sending the subscription authentication request to the subscription authentication node at S104, the subscription authentication method for the value-added service further includes:

[0058] S105 , in response to the value-added service being a mobile network value-added service, generating a subscription authentication request for the value-added service according to the subscription request.

[0059] Specifically, the ordering management node adopts Kafka message queue technology.

[0060] In this embodiment, the interface of the order management node uses a fast push (PUSH) mode to divide all received order requests into multiple partitioned distributed streams for processing, so as to push the order requests to the AAA interface. In this embodiment, the Kafka message queue is used to implement the PUSH mode. The AAA interface batches order requests, improves availability and throughput, improves message processing efficiency, reduces queue waiting time during order peak periods, and controls the time consumption of the order management node and the order authentication node docking processing within a reasonable range.

[0061] It should be noted that there is an interaction waiting time when the order management node docks with the order authentication node. If the upper limit value is too long, when an order anomaly occurs or the interconnection network of the system has large packet loss and latency, the system cannot release the occupied resources while waiting. If the upper limit value is too short, during the peak order period, it may happen that the order management node releases resources before receiving the authentication order response result, resulting in a high order failure rate, which in turn leads to a poor user experience and affects the order. This embodiment also adjusts the optimal upper limit value N according to the actual operation, that is, the optimal upper limit value corresponding to a certain scale of concurrent authentication request quantity. The setting of N is mainly determined by the number of users in the order process, that is, the number of concurrent order users. When new products are launched centrally or there is a relatively concentrated renewal of expiring subscriptions, a certain amount of order burst will occur. The setting rules of the N value include but are not limited to: N = 30ms / (U < 2 million), 40ms / (2 million < U < 3 million), 50ms / (3 million < U < 4 million). According to statistical laws, it is inferred that for every increase of 1 million users in U, N needs to be adjusted upwards by approximately 10ms. U is the number of IPTV users, and among them, the proportion of users subscribing to value-added services is about 5%. This embodiment solves the problem of setting the optimal upper limit value N for the time interval between the order management node sending an order request and receiving an order authentication request.

[0062] A method for subscribing and authenticating value-added services provided by this embodiment, by receiving a subscription request for value-added services sent by a target terminal, determining whether the value-added service is a fixed-network value-added service, and in response to the value-added service being a fixed-network value-added service, generating a subscription authentication request for the value-added service according to the mapping relationship between the value-added service product ID, the account of the target terminal, the fixed-network account, and the mobile-network account, so as to centrally authenticate the subscription authentication request based on a unified subscription authentication node and generate a response result for the subscription authentication request, realizing the centralized and unified subscription authentication of value-added services, reducing the complexity of the subscription authentication process for fixed-network and mobile-network value-added services, and reducing the construction cost. In addition, by batch sending the subscription request to the AAA interface, based on the mapping relationship between the fixed-network account and the mobile-network account, the AAA interface generates a subscription authentication request for the fixed-network value-added service and the mobile-network value-added service without discrimination and sends it to the VAC for centralized and unified authentication, solving the problem that the VAC cannot recognize the fixed-network account, reducing the authentication billing and operation problems of fixed-network value-added services, and realizing the fast response of subscribing to fixed-network value-added services and mobile-network value-added services. By constructing the mapping relationship between the fixed-network account and the mobile-network account and storing the mapping relationship in the database, the convenient and fast query and management of the fixed-network account and the mobile-network account are realized. Using the authentication and billing channel processes of the existing mobile-network value-added service platform to打通 the channels between the fixed-network value-added service platform and the VAC, CBSS, CRM, billing and accounting system, and PRM, solves the billing problem of fixed-network value-added services, ensures the operation of fixed-network value-added services, and drives business development and revenue growth.

[0063] Embodiment 2:

[0064] like Figure 4 As shown, this embodiment provides a subscription authentication method for a value-added service, which is applied to a subscription authentication node of a value-added service system.

[0065] In this embodiment, the value-added service system includes a subscription management node and a subscription authentication node. The value-added service platform of the prior art usually includes multiple key modules, among which the value-added service subscription management module and the subscription authentication and billing management module are two important components. The value-added service subscription management module is responsible for the value-added service catalog management, subscription process management, user management, promotion and package management, and the subscription authentication and billing management module is responsible for authentication management, billing management, bill generation and management, and payment interface integration. This embodiment retains the value-added service subscription management module of the fixed network value-added service platform and the mobile network value-added service platform in the prior art, and integrates the value-added service subscription management module of the fixed network value-added service platform and the mobile network value-added service platform as the subscription management node.

[0066] In addition, the VAC (Value-added service Authentication Center) of the mobile network value-added service platform in the prior art, that is, the subscription authentication and billing management module has been in operation for many years and has a mature and complete AAA platform capability and billing account processing flow. Therefore, this embodiment uses the subscription authentication and billing management module of the mobile network value-added service platform as the subscription authentication node.

[0067] It should be noted that, since broadband value-added services mainly rely on Internet technology, focus on data transmission and online services, and involve technologies such as routing, cloud computing, and data management; IPTV value-added services focus on the transmission and playback of video content, and usually require specialized streaming media transmission technologies, such as MPEG-DASH (Dynamic Adaptive Streaming over HTTP, abbreviated as DASH, dynamic adaptive streaming based on HTTP), HLS (HTTP Live Streaming, adaptive bit rate streaming media transmission protocol based on HTTP), and encoding and decoding mechanisms for video content; therefore, broadband value-added services and IPTV value-added services are usually not operated on the same platform, that is, the fixed network value-added service platform includes: broadband value-added service platform and IPTV value-added service platform. Therefore, the subscription management node includes: value-added service subscription management modules of broadband value-added service platform, IPTV value-added service platform, and mobile network value-added service platform.

[0068] The subscription authentication methods for value-added services include:

[0069] S201, receiving a subscription authentication request sent by a subscription management node, wherein the subscription authentication request is a subscription request for a value-added service sent by a target terminal, the subscription management node determines whether the value-added service is a fixed-line value-added service, and in response to the value-added service being a fixed-line value-added service, generates a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, a fixed-line account, and a mobile-line account, wherein the subscription request includes a value-added service product ID and an account of the target terminal, and the account includes one of the following: a fixed-line account or a mobile-line account.

[0070] S202: Authenticate the order authentication request and generate an order authentication request response result.

[0071] In this embodiment, the subscription management node sends the subscription authentication request to the VAC for authentication. The VAC performs user authentication, service authentication, and subscription relationship authentication on the subscription authentication request, generates a subscription authentication request response result, and notifies the subscription management node of the subscription authentication request response result through the AAA interface according to the agreed information meaning, so that the subscription management node decides whether to enable the value-added service of the target terminal, such as: when the value-added service is an IPTV value-added service, the subscription management node determines whether the target terminal can play the content.

[0072] It should be noted that VAC interacts with the partner relationship management system, CBSS or BSS (Business Support System), billing sorting system and accounting processing system to realize the authentication, billing and accounting processing of the order authentication request, such as Figure 3 As shown. PRM is responsible for approving the products submitted by the partner SP (Service Provider) and settling with SP according to the order and settlement rules. CBSS / BSS refers to CRM, which generates user information and business information after accepting the user's business application at the business front desk, so as to provide it to VAC for authentication, certification and billing processing.

[0073] AAA interface interaction process, such as Figure 2 As shown, the value-added service subscription management module is the value-added service subscription management module of the IPTV value-added service platform, specifically: after receiving the subscription request, the value-added service subscription management module sends the subscription request to the AAA interface, and the AAA interface matches the mobile network account of the target terminal according to the mapping relationship between the fixed network account of the target terminal and the fixed network account and the mobile network account; generates a subscription authentication request according to the authentication and authorization information format of the standard interface opened by VAC and the mobile network account of the target terminal.

[0074] The target terminals include mobile network terminals and fixed network terminals, wherein the mobile network terminals include but are not limited to: mobile phones, tablet computers and other mobile devices, and the fixed network terminals include but are not limited to: smart TVs, set-top boxes, and routers. The value-added service subscription management module of the broadband value-added service platform receives subscription requests for broadband value-added services sent by personal computers, routers, smart TVs, set-top boxes and mobile devices; the value-added service subscription management module of the mobile network value-added service platform receives subscription requests for mobile value-added services sent by mobile devices; the value-added service subscription management module of the IPTV value-added service platform receives subscription requests for IPTV value-added services sent by smart TVs, set-top boxes and mobile devices.

[0075] Broadband and IPTV services and mobile services belong to the fixed network and mobile network systems respectively. The numbering system of basic services of fixed network and mobile network is different. Broadband and IPTV service accounts have a special numbering system, and mobile services are distinguished by mobile phone numbers. Therefore, the subscription management node can determine whether the value-added service is a fixed network value-added service based on the value-added service product ID in the subscription request.

[0076] Since the design of VAC in the prior art is to meet the authentication and authorization requirements of mobile value-added services, VAC can only identify mobile network accounts and cannot handle the value-added service authentication and billing of fixed network accounts. Therefore, the value-added service subscription management module of the mobile value-added service platform can directly send the subscription request to VAC for authentication and authorization.

[0077] The prior art VAC docking with the value-added service subscription management module associated with the mobile network value-added service platform also requires corresponding conventional software interface development, namely software communication. Therefore, this embodiment designs an AAA interface for docking the VAC and the value-added service subscription management module on the subscription management node.

[0078] Mobile network value-added service platforms, such as mobile music and mobile reading, have dedicated value-added service platforms, which have a subscription authentication request format to connect to VAC, thereby realizing the authentication function of mobile network value-added services. This embodiment can design the subscription authentication request format of VAC receiving IPTV value-added service platform based on the original subscription authentication request format of the mobile value-added service platform, such as the authentication information format of the standard interface that VAC has opened.

[0079] It should be noted that in the CBSS (Central Business Support System) or CRM (Customer Relationship Management), there are often multiple main and secondary user mobile phone numbers, making it difficult to quickly query the main mobile phone number. Additionally, due to the large size of the CBSS system, the query time is long and uncertain. In this embodiment, a fixed network account and a mobile network account are obtained from the CBSS or CRM, a mapping relationship between the fixed network account and the mobile network account is constructed, and the mapping relationship is stored in a database. For example, user identity information, a broadband account (or IPTV account), and the main mobile phone number are selected to establish a database with the broadband account and the mobile phone number as the main keys. The main mobile phone number field and the broadband account field in the database form a binding relationship. The database communicates with the AAA interface in real time to respond to the request of the AAA interface to query and obtain the mobile network account based on the fixed network account.

[0080] The interface of the order management node uses the fast push (PUSH) mode to divide all received order requests into multiple partitioned distributed streams for processing, so as to push the order requests to the AAA interface. In this embodiment, the Kafka message queue is used to implement the PUSH mode. The AAA interface batch-processes the order requests, improving availability and throughput, enhancing the message processing efficiency, reducing the queuing waiting time during the peak order period, and controlling the time-consuming of the docking process between the order management node and the order authentication node within a reasonable range.

[0081] It should be noted that there is an interactive waiting time when the order management node and the order authentication node are docked. If the upper limit value is too long, when an order anomaly occurs or the system's interconnected network has large packet loss and latency, the system cannot release the occupied resources while waiting; if the upper limit value is too short, during the peak order period, it may occur that the order management node releases resources before receiving the authentication order response result, resulting in a high order failure rate, thus leading to a poor user experience and affecting the order. In this embodiment, the optimal upper limit value N is also adjusted according to the actual operation, that is, the optimal upper limit value corresponding to a certain scale of concurrent authentication request quantity. The setting of N is mainly determined by the number of users in the order process, that is, the number of concurrent order users. When a new product is launched centrally or there is a relatively concentrated renewal of expiring products, a certain amount of order burst will occur. The setting rules of the N value include but are not limited to: N = 30ms / (U < 2 million), 40ms / (2 million < U < 3 million), 50ms / (3 million < U < 4 million). According to statistical laws, it is inferred that for every increase of 1 million users in U, N needs to be adjusted upward by approximately 10ms. U is the number of IPTV users, and about 5% of the users subscribe to value-added services. This embodiment solves the problem of setting the optimal upper limit value N for the time interval between the order management node sending an order request and receiving the order authentication request.

[0082] The present embodiment provides a method for authenticating subscription to a value-added service. By utilizing the authentication and billing channel process of the existing mobile network value-added service platform, the channel between the fixed network value-added service platform and VAC, CBSS, CRM, billing accounting system and PRM is opened up, thereby solving the billing problem of the fixed network value-added service, ensuring the operation of the fixed network value-added service, and driving business development and revenue growth.

[0083] Embodiment 3:

[0084] like Figure 5 As shown, this embodiment provides a subscription management node, including: a first receiving module 31, a judgment module 32, a first generating module 33 and a first sending module 34, the first receiving module 31, used to receive a subscription request for a value-added service sent by a target terminal, wherein the subscription request includes a value-added service product ID and an account of the target terminal, and the account includes one of the following: a fixed network account or a mobile network account, the judgment module 32, connected to the first receiving module 31, used to judge whether the value-added service is a fixed network value-added service according to the subscription request, the first generating module 33, connected to the judgment module 32, used to generate a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed network account and the mobile network account in response to the value-added service being a fixed network value-added service, the first sending module 34, connected to the first generating module 33, used to send the subscription authentication request to the subscription authentication node, so that the subscription authentication node authenticates the subscription authentication request after receiving the subscription authentication request and generates a subscription authentication request response result.

[0085] Optionally, the subscription management node further includes: a second generating module 35, configured to generate a subscription authentication request for the value-added service according to the subscription request in response to the value-added service being a mobile network value-added service.

[0086] Specifically, the first generation module 33 includes: a matching unit 331 and a generation unit 332, the matching unit 331 is used to match the mobile network account of the target terminal according to the fixed network account of the target terminal and the mapping relationship between the fixed network account and the mobile network account, and the generation unit 332 is used to generate a subscription authentication request for the value-added service according to the mobile network account of the target terminal, the value-added service product ID and the preset subscription authentication request format.

[0087] Optionally, the first generating module 33 further includes: a constructing unit 330, configured to construct a mapping relationship between the fixed network account and the mobile network account, and store the mapping relationship in a database.

[0088] It can be understood that the subscription management node provided above executes the subscription authentication method for the value-added service corresponding to the embodiment 1 provided above. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects of the solution corresponding to the subscription authentication method for the value-added service in the embodiment 1 above, and will not be repeated here.

[0089] Embodiment 4:

[0090] like Figure 6 As shown, this embodiment further provides a subscription authentication node, including: a second receiving module 41 and an authentication module 42, the second receiving module 41, used to receive a subscription authentication request sent by a subscription management node, wherein the subscription authentication request is a subscription request for a value-added service sent by the subscription management node according to a target terminal, and determines whether the value-added service is a fixed-line value-added service, and in response to the value-added service being a fixed-line value-added service, generates a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed-line account, and the mobile network account, the subscription request includes a value-added service product ID and an account of the target terminal, and the account includes one of the following: a fixed-line account or a mobile network account, and the authentication module 42 is connected to the second receiving module, and is used to authenticate the subscription authentication request and generate a subscription authentication request response result.

[0091] It can be understood that the subscription authentication node provided above executes the subscription authentication method for the value-added service corresponding to the embodiment 2 provided above. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects of the scheme corresponding to the subscription authentication method for the value-added service in the embodiment 2 above, which will not be repeated here.

[0092] Embodiment 5:

[0093] This embodiment further provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to implement the subscription authentication method for the value-added service in the above-mentioned embodiment 1 or embodiment 2.

[0094] Embodiment 6:

[0095] This embodiment further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the subscription authentication method for the value-added service in the above-mentioned embodiment 1 or embodiment 2 is implemented.

[0096] It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present invention, but the present invention is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also considered to be within the scope of protection of the present invention.

Claims

1. A subscription authentication method for a value-added service, applied to a subscription management node of a value-added service subscription authentication system, the value-added service subscription authentication system comprising a subscription management node and a subscription authentication node, characterized in that: The order authentication method comprises: Receiving a subscription request for a value-added service sent by a target terminal, wherein the subscription request includes a value-added service product ID and an account number of the target terminal, where the account number includes one of the following: a fixed network account number or a mobile network account number; According to the ordering request, determining whether the value-added service is a fixed-line value-added service; In response to the value-added service being a fixed network value-added service, generating a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed network account, and the mobile network account; The order authentication request is sent to the order authentication node, so that the order authentication node authenticates the order authentication request and generates an order authentication request response result.

2. The method for authenticating subscription of value-added services according to claim 1, characterized in that: After determining whether the value-added service is a fixed network value-added service according to the subscription request, and before sending the subscription authentication request to the subscription authentication node, the method further includes: In response to the value-added service being a mobile network value-added service, a subscription authentication request for the value-added service is generated according to the subscription request.

3. The method for authenticating subscription of value-added services according to claim 1, characterized in that: The generating of a subscription authentication request for a value-added service according to the mapping relationship between the subscription request, the fixed network account and the mobile network account specifically includes: According to the fixed network account of the target terminal and the mapping relationship between the fixed network account and the mobile network account, the mobile network account of the target terminal is matched; according to the mobile network account of the target terminal, the value-added service product ID and the preset subscription authentication request format, a subscription authentication request for the value-added service is generated.

4. The method for authenticating subscription of value-added services according to claim 3, characterized in that: Before matching the mobile network account of the target terminal according to the fixed network account of the target terminal and the mapping relationship between the fixed network account and the mobile network account, the method further includes: A mapping relationship between the fixed network account and the mobile network account is constructed, and the mapping relationship is stored in a database.

5. The method for authenticating subscription of value-added services according to claim 1, characterized in that: The ordering management node uses Kafka message queue technology.

6. A subscription authentication method for a value-added service, applied to a subscription authentication node of a value-added service system, characterized in that: The order authentication method comprises: receiving a subscription authentication request sent by a subscription management node, wherein the subscription authentication request is a subscription authentication request for a value-added service sent by a target terminal, the subscription management node determines whether the value-added service is a fixed-line value-added service, and generates a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed-line account number, and the mobile-line account number in response to the value-added service being a fixed-line value-added service, the subscription request includes a value-added service product ID and an account number of the target terminal, and the account number includes one of the following: a fixed-line account number or a mobile-line account number; The order authentication request is authenticated and an order authentication request response result is generated.

7. A subscription management node, characterized in that: include: a first receiving module, a judging module, a first generating module and a first sending module, The first receiving module is used to receive a subscription request for a value-added service sent by a target terminal, wherein the subscription request includes a value-added service product ID and an account number of the target terminal, and the account number includes one of the following: a fixed network account number or a mobile network account number. A judgment module, connected to the first receiving module, is used to judge whether the value-added service is a fixed-line value-added service according to the order request, The first generating module is connected to the judging module and is used to generate a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed network account and the mobile network account in response to the value-added service being a fixed network value-added service. The first sending module is connected to the first generating module and is used to send the order authentication request to the order authentication node, so that after receiving the order authentication request, the order authentication node authenticates the order authentication request and generates an order authentication request response result.

8. A subscription authentication node, characterized in that: include: The second receiving module and the authentication module, The second receiving module is configured to receive a subscription authentication request sent by the subscription management node, wherein the subscription authentication request is a subscription authentication request for the value-added service sent by the subscription management node according to the subscription request for the value-added service sent by the target terminal, and the subscription management node determines whether the value-added service is a fixed-line value-added service, and generates a subscription authentication request for the value-added service according to a mapping relationship between the subscription request, the fixed-line account number, and the mobile-line account number in response to the value-added service being the fixed-line value-added service, wherein the subscription request includes a value-added service product ID and an account number of the target terminal, and the account number includes one of the following: a fixed-line account number or a mobile-line account number, The authentication module is connected to the second receiving module and is used to authenticate the order authentication request and generate an order authentication request response result.

9. An electronic device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to implement a subscription authentication method for a value-added service as claimed in any one of claims 1 to 5 or claim 6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, a subscription authentication method for a value-added service as claimed in any one of claims 1 to 5 or claim 6 is implemented.

Images