Subscription authentication method, management node, authentication node, device, and storage medium

Abstract

The application provides a value-added service subscription authentication method, a subscription management node, a subscription authentication node, an electronic device and a computer readable storage medium, and relates to the technical field of network communication. The subscription authentication method comprises the following steps: receiving a value-added service subscription request sent by a target terminal; judging whether the value-added service is a fixed network value-added service according to the subscription request; in response to the value-added service being a fixed network value-added service, generating a value-added service subscription authentication request according to the subscription request, a fixed network account and a mapping relationship of a network migration account; and sending the subscription authentication request to the subscription authentication node, so that the subscription authentication node authenticates the subscription authentication request and generates a subscription authentication request response result. At least the problems that the fixed network value-added service and the network migration value-added service cannot be centrally and uniformly authenticated for subscription, the value-added service operation process is complex, and the construction cost is high in the related art are solved. The method is suitable for a business subscription authentication scene.

Description

Technical Field

[0001] This invention relates to the field of network communication technology, and in particular to a method for ordering and authenticating value-added services, an order management node, an order authentication node, an electronic device, and a computer-readable storage medium. Background Technology

[0002] The telecommunications industry's public services are broadly categorized into two types: basic services and value-added services. Value-added services are derivatives of basic services. Basic telecommunications services are divided according to fixed networks and mobile networks. Fixed network basic services include broadband and fixed-line telephone services, while mobile network basic services include mobile phone services. Additionally, IPTV (Internet Protocol Television) services related to broadband are also defined as basic services for fixed networks. Fixed and mobile network basic services have respectively given rise to corresponding fixed-line and mobile value-added services. Comparatively, mobile value-added services have developed more rapidly, while fixed-line value-added services are primarily represented by IPTV.

[0003] Both fixed-line and mobile value-added services require corresponding service authentication, authorization, and billing operation management. Unlike the authentication, authorization, and billing (AAA) of basic fixed and mobile network services, the subscription and billing of value-added services rely on a value-added service platform and a dedicated AAA platform, and the value-added service fees are charged to the customer's basic service.

[0004] However, the operation of broadband and IPTV value-added services and mobile value-added services requires the deployment of a separate AAA platform and billing system, and the construction of two business processes. This is to bill the subscribed value-added services onto the corresponding basic services, and then combine the detailed call records of various value-added services into the user's payment account. The process is complex and the construction cost is high.

[0005] Furthermore, even if telecom operators deploy nationwide unified AAA platforms for mobile and fixed-line value-added services to centrally manage these services, the value-added services introduced by provincial branches of telecom operators themselves cannot be handled through centralized platforms due to unresolved issues related to product ownership, contract signing entities, revenue sharing, and Partner Relationship Management (PRM) product approval and settlement. Therefore, provincial branches are responsible for resolving AAA authentication and billing issues, making it impossible to utilize a centralized AAA platform for business operations. Summary of the Invention

[0006] The technical problem to be solved by the present invention is to address the above-mentioned shortcomings of the prior art by providing a method for ordering and authenticating value-added services, a management node, an authentication node, an electronic device, and a computer-readable storage medium. This method can realize centralized and unified ordering and authentication of value-added services, reduce the complexity of the ordering and authentication process for fixed-line and mobile value-added services, and reduce construction costs.

[0007] In a first aspect, the present invention provides a method for ordering and authenticating value-added services, applied to the order management node of a value-added service ordering and authentication system. The value-added service ordering and authentication system includes an order management node and an order authentication node. The order authentication method includes: receiving an order request for a value-added service sent by a target terminal, wherein the order request includes a value-added service product ID and the target terminal's account, the account including either a fixed-line account or a mobile account; determining whether the value-added service is a fixed-line value-added service based on the order request; in response to the value-added service being a fixed-line value-added service, generating an order authentication request for the value-added service based on the mapping relationship between the order request, the fixed-line account, and the mobile account; and sending the order authentication request to the order authentication node so that the order authentication node authenticates the order authentication request and generates an order authentication request response result.

[0008] Preferably, after determining whether the value-added service is a fixed-line value-added service based on the subscription request, and before sending the subscription authentication request to the subscription authentication node, the subscription authentication method for the value-added service further includes: in response to the value-added service being a mobile value-added service, generating a subscription authentication request for the value-added service based on the subscription request.

[0009] Preferably, the step of generating a value-added service subscription authentication request based on the order request, the mapping relationship between the fixed-line account and the mobile account specifically includes: matching the target terminal's mobile account based on the target terminal's fixed-line account and the mapping relationship between the fixed-line account and the mobile account; and generating a value-added service subscription authentication request based on the target terminal's mobile account, the value-added service product ID, and a preset subscription authentication request format.

[0010] Preferably, before matching the mobile account of the target terminal based on the mapping relationship between the fixed-line account and the mobile account of the target terminal, the subscription authentication method for value-added services further includes: constructing a mapping relationship between the fixed-line account and the mobile account, and storing the mapping relationship in a database.

[0011] Preferably, the order management node uses Kafka message queue technology.

[0012] Secondly, the present invention also provides a method for ordering and authenticating value-added services, applied to an ordering and authentication node in a value-added service system. The method includes: receiving an ordering and authentication request sent by an ordering management node, wherein the ordering management node determines whether the value-added service is a fixed-line value-added service based on the ordering request sent by the target terminal, and in response to the value-added service being a fixed-line value-added service, generates an ordering and authentication request based on the mapping relationship between the ordering request, a fixed-line account, and a mobile account. The ordering request includes a value-added service product ID and the target terminal's account, which includes either a fixed-line account or a mobile account; authenticating the ordering and authentication request, and generating an ordering and authentication request response result.

[0013] Thirdly, the present invention also provides an order management node, comprising: a first receiving module, a judging module, a first generating module, and a first sending module. The first receiving module is used to receive an order request for a value-added service sent by a target terminal, wherein the order request includes a value-added service product ID and an account of the target terminal, the account including either a fixed-line account or a mobile account. The judging module is connected to the first receiving module and is used to judge whether the value-added service is a fixed-line value-added service based on the order request. The first generating module is connected to the judging module and is used to generate an order authentication request for the value-added service based on the mapping relationship between the order request, the fixed-line account, and the mobile account in response to the value-added service being a fixed-line value-added service. The first sending module is connected to the first generating module and is used to send the order authentication request to an order authentication node, so that the order authentication node, upon receiving the order authentication request, authenticates the order authentication request and generates an order authentication request response result.

[0014] Fourthly, the present invention also provides an order authentication node, comprising: a second receiving module and an authentication module, wherein the second receiving module is used to receive an order authentication request sent by an order management node, and the authentication module is connected to the second receiving module and is used to authenticate the order authentication request and generate an order authentication request response result.

[0015] Fifthly, the present invention also provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to implement the subscription authentication method for the value-added services provided in the first or second aspect above.

[0016] In a sixth aspect, the present invention also provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, it implements the subscription authentication method for the value-added services provided in the first or second aspect above.

[0017] This invention provides a method for ordering and authenticating value-added services, an order management node, an order authentication node, an electronic device, and a computer-readable storage medium. It receives a value-added service order request from a target terminal, determines whether the value-added service is a fixed-line value-added service, and, in response to the value-added service being a fixed-line value-added service, determines whether the value-added service is a fixed-line value-added service based on the value-added service product ID.

[0018] The mapping relationship between the target terminal's account, fixed-line account, and mobile account is used to generate a subscription authentication request for value-added services. Based on a unified subscription authentication node, this request is centrally authenticated, and a subscription authentication request response is generated. Therefore, this invention enables centralized and unified subscription authentication for value-added services, reducing the complexity of the subscription authentication process for fixed-line and mobile value-added services and lowering construction costs. Attached Figure Description

[0019] Figure 1 This is a flowchart of a value-added service subscription authentication method according to Embodiment 1 of the present invention;

[0020] Figure 2 This is an example diagram of an AAA interface interaction process in Embodiment 1 of the present invention;

[0021] Figure 3 This is an example diagram of a VAC interaction process in Embodiment 1 of the present invention;

[0022] Figure 4 This is a flowchart of a value-added service subscription authentication method according to Embodiment 2 of the present invention;

[0023] Figure 5 This is a schematic diagram of the structure of an order management node according to Embodiment 3 of the present invention;

[0024] Figure 6 This is a schematic diagram of the structure of an ordering authentication node according to Embodiment 4 of the present invention. Detailed Implementation

[0025] To enable those skilled in the art to better understand the technical solution of the present invention, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

[0026] It is understood that the specific embodiments and accompanying drawings described herein are merely for explaining the invention and are not intended to limit the invention.

[0027] It is understood that, without conflict, the various embodiments and features in the embodiments of the present invention can be combined with each other.

[0028] It is understood that, for ease of description, only the parts related to the present invention are shown in the accompanying drawings, while the parts unrelated to the present invention are not shown in the drawings.

[0029] It is understood that each unit or module involved in the embodiments of the present invention may correspond to only one entity structure, or may be composed of multiple entity structures, or multiple units or modules may be integrated into one entity structure.

[0030] It is understood that, without conflict, the functions and steps marked in the flowcharts and block diagrams of this invention may occur in a different order than that marked in the accompanying drawings.

[0031] It is understood that the flowcharts and block diagrams of this invention illustrate the possible architecture, functions, and operations of systems, apparatuses, devices, and methods according to various embodiments of this invention. Each block in the flowchart or block diagram may represent a unit, module, program segment, or code, containing executable instructions for implementing the specified function. Furthermore, each block or combination of blocks in the block diagram and flowchart can be implemented using a hardware-based system to achieve the specified function, or using a combination of hardware and computer instructions.

[0032] It is understood that the units and modules involved in the embodiments of the present invention can be implemented by software or by hardware. For example, the units and modules can be located in a processor.

[0033] Example 1:

[0034] like Figure 1 As shown, this embodiment provides a method for ordering and authenticating value-added services, which is applied to the order management node of a value-added service ordering and authentication system. The value-added service ordering and authentication system includes an order management node and an order authentication node.

[0035] In this embodiment, existing value-added service platforms typically include several key modules, among which the value-added service subscription management module and the subscription authentication and billing management module are two important components. The value-added service subscription management module is responsible for value-added service catalog management, subscription process management, user management, promotion and package management, while the subscription authentication and billing management module is responsible for authentication management, billing management, bill generation and management, and payment interface integration. This embodiment retains the value-added service subscription management modules of existing fixed-line and mobile value-added service platforms and integrates these modules as subscription management nodes.

[0036] Furthermore, the VAC (Value-added service Authentication Center) of the existing mobile network value-added service platform, i.e., the subscription authentication and billing management module, has been operating for many years and has mature and complete AAA platform capabilities and billing and accounting processes. Therefore, this embodiment uses the subscription authentication and billing management module of the mobile network value-added service platform as the subscription authentication node.

[0037] It should be noted that broadband value-added services primarily rely on internet technology, focusing on data transmission and online services, involving technologies such as routing, cloud computing, and data management. IPTV value-added services, on the other hand, focus on video content transmission and playback, typically requiring specialized streaming media transmission technologies such as MPEG-DASH (Dynamic Adaptive Streaming over HTTP, abbreviated as DASH, a dynamic adaptive streaming over HTTP) and HLS (HTTP Live Streaming, an adaptive bitrate streaming media transmission protocol over HTTP), as well as encoding and decoding mechanisms for video content. Therefore, broadband value-added services and IPTV value-added services are usually operated on different platforms. In other words, the fixed-line value-added service platform includes both a broadband value-added service platform and an IPTV value-added service platform. Consequently, the subscription management node includes the value-added service subscription management modules of the broadband value-added service platform, the IPTV value-added service platform, and the mobile value-added service platform.

[0038] The methods for ordering and authenticating value-added services include:

[0039] S101, receive a subscription request for value-added services sent by the target terminal, wherein the subscription request includes the value-added service product ID and the target terminal's account, the account including either a fixed network account or a mobile network account.

[0040] In this embodiment, the target terminals include mobile terminals and fixed terminals. Mobile terminals include, but are not limited to, mobile phones, tablets, and other mobile devices, while fixed terminals include, but are not limited to, smart TVs, set-top boxes, and routers. The broadband value-added service platform's value-added service subscription management module receives broadband value-added service subscription requests from personal computers, routers, smart TVs, set-top boxes, and mobile devices; the mobile value-added service platform's value-added service subscription management module receives mobile value-added service subscription requests from mobile devices; and the IPTV value-added service platform's value-added service subscription management module receives IPTV value-added service subscription requests from smart TVs, set-top boxes, and mobile devices.

[0041] S102, based on the order request, determine whether the value-added service is a fixed-line value-added service.

[0042] In this embodiment, broadband and IPTV services belong to the fixed-line and mobile network systems, respectively, and the numbering systems for basic services in fixed-line and mobile networks are different. Broadband and IPTV service accounts have their own unique numbering system, while mobile services are distinguished by mobile phone numbers. Therefore, the subscription management node can determine whether a value-added service is a fixed-line value-added service based on the value-added service product ID in the subscription request.

[0043] S103, in response to the value-added service being a fixed-line value-added service, generates a value-added service subscription authentication request based on the subscription request, the mapping relationship between the fixed-line account and the mobile account.

[0044] Specifically, S103: Based on the order request, the mapping relationship between the fixed-line account and the mobile account, generate an order authentication request for value-added services, including steps S1031-S1032:

[0045] S1031, Match the mobile account of the target terminal according to the mapping relationship between the fixed network account and the mobile network account of the target terminal.

[0046] In this embodiment, since the VAC in the prior art is designed to meet the authentication and authorization requirements of mobile value-added services, the VAC can only identify mobile network accounts and cannot process value-added service authentication and billing for fixed network accounts. Therefore, the value-added service subscription management module of the mobile value-added service platform can directly send the subscription request to the VAC for authentication and authorization.

[0047] Existing technologies, such as VAC, require the development of corresponding conventional software interfaces, i.e., software communication, to interface with the mobile network value-added service platform's associated value-added service subscription management module. Therefore, this embodiment designs an AAA interface on the subscription management node to connect with both VAC and the value-added service subscription management module.

[0048] S1032, generate a subscription authentication request for value-added services based on the target terminal's mobile account, value-added service product ID, and preset subscription authentication request format.

[0049] In this embodiment, the mobile value-added service platform, such as mobile music and mobile reading services, has a dedicated value-added service platform that interfaces with VAC (Video Authentication and Authorization Service) to implement authentication and authorization functions for mobile value-added services. This embodiment can design a VAC receiving authentication and authorization request format from the IPTV value-added service platform based on the existing authentication and authorization request format of the mobile value-added service platform, such as the authentication and authorization information format of the standard interface already opened by VAC.

[0050] AAA interface interaction process, such as Figure 2As shown, the value-added service subscription management module is the value-added service subscription management module of the IPTV value-added service platform. Specifically, after receiving a subscription request, the value-added service subscription management module sends the subscription request to the AAA interface. The AAA interface matches the target terminal's mobile network account based on the mapping relationship between the target terminal's fixed-line account and the fixed-line account and mobile network account. It then generates a subscription authentication request according to the authentication and authorization information format of the standard interface already opened by the VAC and the target terminal's mobile network account. This embodiment, by sending subscription requests in batches to the AAA interface, generates subscription authentication requests for both fixed-line and mobile value-added services without discrimination based on the mapping relationship between fixed-line and mobile network accounts. These requests are then sent to the VAC for centralized and unified authentication, solving the problem of the VAC's inability to recognize fixed-line accounts, reducing authentication, billing, and operational issues related to fixed-line value-added services, and achieving rapid response for both fixed-line and mobile value-added service subscriptions.

[0051] Optionally, in S1031: before matching the mobile account of the target terminal based on the mapping relationship between the fixed-line account and the mobile account of the target terminal, the subscription authentication method for value-added services further includes:

[0052] S1030: Construct a mapping relationship between fixed-line accounts and mobile accounts, and store the mapping relationship in the database.

[0053] In this embodiment, because users' mobile phone numbers in CBSS (Central Business Support System) or CRM (Customer Relationship Management) often have multiple primary and secondary SIM cards, it is not easy to quickly find the primary mobile phone number. Furthermore, the CBSS system is large, resulting in long and uncertain query times. This embodiment obtains fixed-line and mobile accounts from CBSS or CRM, constructs a mapping relationship between fixed-line and mobile accounts, and stores this mapping relationship in a database. For example, user identity information, broadband account (or IPTV account), and primary mobile phone number are selected to create a database with broadband account and mobile phone number as the primary keys. The primary mobile phone number field and broadband account field in the database are bound together. The database communicates with the AAA interface, responding in real time to requests from the AAA interface to query and retrieve mobile accounts based on fixed-line accounts. This embodiment achieves convenient and rapid querying and management of fixed-line and mobile accounts by constructing a mapping relationship between fixed-line and mobile accounts and storing this mapping relationship in a database.

[0054] S104, send the order authentication request to the order authentication node so that the order authentication node can authenticate the order authentication request and generate an order authentication request response result.

[0055] In this embodiment, the subscription authentication request is sent to the VAC for authentication. The VAC performs user authentication, service authentication, and subscription relationship authentication on the subscription authentication request, generates a subscription authentication request response result, and notifies the subscription management node through the AAA interface according to the agreed information meaning. This allows the subscription management node to decide whether to enable the value-added services of the target terminal. For example, if the value-added service is IPTV, the subscription management node determines whether the target terminal can play the content.

[0056] It should be noted that VAC interacts with partner relationship management systems, CBSS or BSS (Business Support System), billing and sorting systems, and accounting systems to authenticate, bill, and process order authentication requests. Figure 3 As shown. The PRM is responsible for approving products submitted by the partner SP (Service Provider) and settling accounts with the SP according to order and settlement rules. CBSS / BSS refers to CRM, which generates user and service information after accepting user service applications at the front desk, providing it to VAC for authentication, verification, and billing processing. This embodiment utilizes the existing authentication and billing channel processes of the mobile value-added service platform to connect the fixed-line value-added service platform with VAC, CBSS, CRM, billing and accounting systems, and PRM, solving the billing problem of fixed-line value-added services, ensuring the operation of fixed-line value-added services, and driving business development and revenue growth.

[0057] Optionally, in S102, after determining whether the value-added service is a fixed-line value-added service based on the subscription request, and in S104, before sending the subscription authentication request to the subscription authentication node, the subscription authentication method for the value-added service further includes:

[0058] S105, in response to the value-added service being a mobile network value-added service, generates a value-added service subscription authentication request based on the subscription request.

[0059] Specifically, the order management node uses Kafka message queue technology.

[0060] In this embodiment, the order management node's interface adopts a fast push (PUSH) mode, dividing all received order requests into multiple partitions for distributed stream processing to push the order requests to the AAA interface. This embodiment uses a Kafka message queue to implement the PUSH mode. The AAA interface batch processes order requests, improving availability and throughput, increasing message processing efficiency, reducing queuing time during peak ordering periods, and keeping the processing time between the order management node and the order authentication node within a reasonable range.

[0061] It should be noted that there is an interaction waiting time for the interconnection between the order management node and the order authentication node. If the upper limit value is too long, when an abnormality occurs in the order or the interconnection network of the system has large delay due to packet loss, the system cannot release the occupied resources while waiting; if the upper limit value is too short, during the peak order period, the order management node may release resources before receiving the authentication order response result, leading to a high order failure rate, which results in poor user perception and affects ordering. In this embodiment, the optimal upper limit value N is further adjusted according to actual operations, that is, the optimal upper limit value corresponding to a certain scale of concurrent authentication requests. The setting of N is mainly determined by the number of users simultaneously in the ordering process, that is, the number of concurrent ordering users. When new products are launched in a centralized manner, or when expirations are renewed in a relatively concentrated manner, a certain amount of order burst volume will occur. The setting rules of the N value include but are not limited to: N=30ms (U<2 million), 40ms (2 million<U<3 million), 50ms (3 million<U<4 million). According to statistical laws, for every 1 million additional users of U, N needs to be increased by approximately 10ms, where U is the number of IPTV users, and the proportion of users ordering value-added services is about 5%. This embodiment solves the difficult problem of setting the optimal upper limit value N for the time interval from when the order management node sends an order request to when it receives the order authentication request.

[0062] A value-added service order authentication method provided in this embodiment generates a value-added service order authentication request by receiving a value-added service order request sent by a target terminal, determining whether the value-added service is a fixed network value-added service, and in response to the value-added service being a fixed network value-added service, according to the mapping relationship between the value-added service product ID, the account of the target terminal, the fixed network account and the mobile network account, so as to perform centralized authentication on the order authentication request based on a unified order authentication node, and generate an order authentication request response result. This realizes centralized and unified order authentication for value-added services, reduces the complexity of the order authentication process for fixed network and mobile network value-added services, and lowers construction costs. In addition, by sending the order requests to the AAA interface in batches, based on the mapping relationship between the fixed network account and the mobile network account, the AAA interface indiscriminately generates order authentication requests for the order requests of the fixed network value-added service and the mobile network value-added service, and sends them to the VAC for centralized and unified authentication, which solves the problem that the VAC cannot identify the fixed network account, reduces the authentication, billing and operation problems of the fixed network value-added service, and realizes rapid response to the ordering of the fixed network value-added service and the mobile network value-added service. By constructing the mapping relationship between the fixed network account and the mobile network account and storing the mapping relationship in the database, convenient and rapid query and management of the fixed network account and the mobile network account are realized. Using the authentication and billing channel process of the existing mobile network value-added service platform, the channels between the fixed network value-added service platform and the VAC, CBSS, CRM, billing and accounting system, and PRM are opened up, which solves the billing problem of the fixed network value-added service, guarantees the operation of the fixed network value-added service, and drives business development and revenue improvement.

[0063] Embodiment 2:

[0064] like Figure 4 As shown, this embodiment provides a method for ordering and authenticating value-added services, which is applied to the ordering and authentication node of a value-added service system.

[0065] In this embodiment, the value-added service system includes an order management node and an order authentication node. Existing value-added service platforms typically include multiple key modules, among which the value-added service order management module and the order authentication and billing management module are two important components. The value-added service order management module is responsible for value-added service catalog management, order process management, user management, promotion and package management, while the order authentication and billing management module is responsible for authentication management, billing management, bill generation and management, and payment interface integration. This embodiment retains the value-added service order management modules of existing fixed-line and mobile value-added service platforms and integrates these modules as the order management node.

[0066] Furthermore, the VAC (Value-added service Authentication Center) of the existing mobile network value-added service platform, i.e., the subscription authentication and billing management module, has been operating for many years and has mature and complete AAA platform capabilities and billing and accounting processes. Therefore, this embodiment uses the subscription authentication and billing management module of the mobile network value-added service platform as the subscription authentication node.

[0067] It should be noted that broadband value-added services primarily rely on internet technology, focusing on data transmission and online services, involving technologies such as routing, cloud computing, and data management. IPTV value-added services, on the other hand, focus on video content transmission and playback, typically requiring specialized streaming media transmission technologies such as MPEG-DASH (Dynamic Adaptive Streaming over HTTP, abbreviated as DASH, a dynamic adaptive streaming over HTTP) and HLS (HTTP Live Streaming, an adaptive bitrate streaming media transmission protocol over HTTP), as well as encoding and decoding mechanisms for video content. Therefore, broadband value-added services and IPTV value-added services are usually operated on different platforms. In other words, the fixed-line value-added service platform includes both a broadband value-added service platform and an IPTV value-added service platform. Consequently, the subscription management node includes the value-added service subscription management modules of the broadband value-added service platform, the IPTV value-added service platform, and the mobile value-added service platform.

[0068] The methods for ordering and authenticating value-added services include:

[0069] S201, Receive subscription authentication request sent by subscription management node, wherein the subscription authentication request is generated by subscription management node based on subscription request of value-added service sent by target terminal, determining whether value-added service is fixed network value-added service, and responding that value-added service is fixed network value-added service, based on the mapping relationship between subscription request, fixed network account and mobile network account. The subscription request includes value-added service product ID and target terminal account, the account including one of the following: fixed network account or mobile network account.

[0070] S202, authenticate the order authentication request and generate an order authentication request response result.

[0071] In this embodiment, the subscription management node sends a subscription authentication request to the VAC for authentication. The VAC performs user authentication, service authentication, and subscription relationship authentication on the subscription authentication request, generates a subscription authentication request response result, and notifies the subscription management node of the result through the AAA interface according to the agreed-upon information meaning. This allows the subscription management node to decide whether to enable the value-added services of the target terminal. For example, if the value-added service is IPTV, the subscription management node determines whether the target terminal can play the content.

[0072] It should be noted that VAC interacts with partner relationship management systems, CBSS or BSS (Business Support System), billing and sorting systems, and accounting systems to authenticate, bill, and process order authentication requests. Figure 3 As shown. The PRM is responsible for approving products submitted by the partner SP (Service Provider) and settling accounts with the SP according to order and settlement rules. CBSS / BSS refers to CRM, which generates user and business information after processing user business applications at the sales counter, providing it to the VAC for authentication, verification, and billing processing.

[0073] AAA interface interaction process, such as Figure 2 As shown, the value-added service subscription management module is the value-added service subscription management module of the IPTV value-added service platform. Specifically, after receiving a subscription request, the value-added service subscription management module sends the subscription request to the AAA interface. The AAA interface matches the target terminal's mobile network account according to the mapping relationship between the target terminal's fixed network account and the fixed network account and mobile network account; and generates a subscription authentication request according to the authentication and authorization information format of the standard interface opened by VAC and the target terminal's mobile network account.

[0074] The target terminals include mobile terminals and fixed-line terminals. Mobile terminals include, but are not limited to, mobile phones, tablets, and other mobile devices. Fixed-line terminals include, but are not limited to, smart TVs, set-top boxes, and routers. The broadband value-added service platform's value-added service subscription management module receives broadband value-added service subscription requests from personal computers, routers, smart TVs, set-top boxes, and mobile devices; the mobile value-added service platform's value-added service subscription management module receives mobile value-added service subscription requests from mobile devices; and the IPTV value-added service platform's value-added service subscription management module receives IPTV value-added service subscription requests from smart TVs, set-top boxes, and mobile devices.

[0075] Broadband and IPTV services, along with mobile services, belong to the fixed-line and mobile network systems, respectively. The numbering systems for basic services in fixed-line and mobile networks differ. Broadband and IPTV service accounts have their own unique numbering system, while mobile services are distinguished by mobile phone numbers. Therefore, the subscription management node can determine whether a value-added service is a fixed-line value-added service based on the value-added service product ID in the subscription request.

[0076] Since the existing VAC is designed to meet the authentication and authorization requirements of mobile value-added services, the VAC can only recognize mobile network accounts and cannot handle the value-added service authentication and billing of fixed network accounts. Therefore, the value-added service subscription management module of the mobile value-added service platform can directly send the subscription request to the VAC for authentication and authorization.

[0077] Existing technologies, such as VAC, require the development of corresponding conventional software interfaces, i.e., software communication, to interface with the mobile network value-added service platform's associated value-added service subscription management module. Therefore, this embodiment designs an AAA interface on the subscription management node to connect with both VAC and the value-added service subscription management module.

[0078] Mobile value-added service platforms, such as mobile music and mobile reading services, have dedicated value-added service platforms that interface with VAC (Vacuum-Activated Server) to implement authentication and authorization functions for mobile value-added services. This embodiment can design a VAC receiving authentication and authorization request format from the IPTV value-added service platform based on the existing mobile value-added service platform's subscription authentication request format, such as the authentication and authorization information format of VAC's already open standard interface.

[0079] It should be noted that since there are often multiple mobile phone numbers of primary and secondary cards for users in the CBSS (Central Business Support System) or CRM (Customer Relationship Management), it is not easy to quickly query the primary mobile phone number. In addition, the CBSS system is huge, resulting in long and uncertain query time. In this embodiment, fixed network accounts and mobile network accounts are acquired from the CBSS or CRM, a mapping relationship between the fixed network accounts and the mobile network accounts is constructed, and the mapping relationship is stored in a database. For example, user identity information, broadband accounts (or IPTV accounts) and primary mobile phone numbers are selected to establish a database with the broadband accounts and mobile phone numbers as primary keys, and a binding relationship is formed between the primary mobile phone number field and the broadband account field in the database. The database communicates with the AAA interface, and responds in real time to the request from the AAA interface for querying and acquiring a mobile network account according to a fixed network account.

[0080] The interface of the order management node adopts a fast push (PUSH) mode to divide all received order requests into a plurality of partitions for distributed stream processing, so as to push the order requests to the AAA interface. In this embodiment, a Kafka message queue is used to implement the PUSH mode. The AAA interface processes the order requests in batches, which improves availability and throughput, increases message processing efficiency, reduces queuing waiting time during peak ordering periods, and controls the time consumption of the docking processing between the order management node and the order authentication node within a reasonable range.

[0081] It should be noted that there is an interaction waiting time for the docking between the order management node and the order authentication node. If the upper limit value is too long, when an abnormality occurs in an order or the interconnection network of the system has large packet loss delay, the system cannot release the occupied resources while waiting; if the upper limit value is too short, during the peak ordering period, the order management node may release the resources before receiving the authentication order response result, leading to a high order failure rate, which results in poor user perception and affects ordering. In this embodiment, the optimal upper limit value N is further adjusted according to actual operations, that is, the optimal upper limit value corresponding to a certain scale of concurrent authentication requests. The setting of N is mainly determined by the number of users simultaneously in the ordering process, that is, the number of concurrent ordering users. When new products are launched in a centralized manner, or when expiring renewals are processed in a relatively centralized manner, a certain amount of order burst volume will occur. The rules for setting the N value include but are not limited to: N=30ms (U<2 million), 40ms (2 million<U<3 million), 50ms (3 million<U<4 million). Statistical laws infer that for every 1 million additional users of U, N needs to be increased by about 10ms, where U is the number of IPTV users, and the proportion of users ordering value-added services is about 5%. This embodiment solves the problem of setting the optimal upper limit value N of the time interval from when the order management node sends an order request to when it receives an order authentication request.

[0082] This embodiment provides a method for ordering and authenticating value-added services. By utilizing the authentication and billing channel processes of the existing mobile value-added service platform, it opens up the channels between the fixed-line value-added service platform and VAC, CBSS, CRM, billing and accounting systems, and PRM, thus solving the billing problem of fixed-line value-added services, ensuring the operation of fixed-line value-added services, and driving business development and revenue growth.

[0083] Example 3:

[0084] like Figure 5 As shown, this embodiment provides an order management node, including: a first receiving module 31, a judging module 32, a first generating module 33, and a first sending module 34. The first receiving module 31 is used to receive a value-added service order request sent by a target terminal, wherein the order request includes a value-added service product ID and the target terminal's account, and the account includes one of the following: a fixed-line account or a mobile account. The judging module 32 is connected to the first receiving module 31 and is used to judge whether the value-added service is a fixed-line value-added service according to the order request. The first generating module 33 is connected to the judging module 32 and is used to generate a value-added service order authentication request according to the order request, the mapping relationship between the fixed-line account and the mobile account in response to the value-added service being a fixed-line value-added service. The first sending module 34 is connected to the first generating module 33 and is used to send the order authentication request to the order authentication node, so that the order authentication node, after receiving the order authentication request, authenticates the order authentication request and generates an order authentication request response result.

[0085] Optionally, the order management node further includes: a second generation module 35, used to generate an order authentication request for the value-added service in response to the value-added service being a mobile network value-added service, based on the order request.

[0086] Specifically, the first generation module 33 includes a matching unit 331 and a generation unit 332. The matching unit 331 is used to match the mobile account of the target terminal according to the mapping relationship between the fixed network account and the mobile network account of the target terminal. The generation unit 332 is used to generate a subscription authentication request for value-added services according to the mobile network account of the target terminal, the value-added service product ID and the preset subscription authentication request format.

[0087] Optionally, the first generation module 33 further includes a construction unit 330, used to construct a mapping relationship between fixed network accounts and mobile network accounts, and store the mapping relationship in a database.

[0088] Understandably, the order management node described above executes the order authentication method for the value-added services corresponding to Embodiment 1 provided above. Therefore, the beneficial effects it can achieve can be referred to the beneficial effects of the scheme corresponding to the order authentication method for the value-added services in Embodiment 1 above, and will not be repeated here.

[0089] Example 4:

[0090] like Figure 6 As shown, this embodiment also provides an order authentication node, including: a second receiving module 41 and an authentication module 42. The second receiving module 41 is used to receive an order authentication request sent by an order management node. The order authentication request is generated by the order management node based on the order request for value-added services sent by the target terminal, determining whether the value-added service is a fixed-line value-added service, and responding to the fact that the value-added service is a fixed-line value-added service. The order request includes the value-added service product ID and the target terminal's account, which includes either a fixed-line account or a mobile account. The authentication module 42 is connected to the second receiving module and is used to authenticate the order authentication request and generate an order authentication request response result.

[0091] Understandably, the above-described order authentication node executes the value-added service order authentication method corresponding to Embodiment 2 provided above. Therefore, the beneficial effects it can achieve can be referred to the beneficial effects of the scheme corresponding to the value-added service order authentication method in Embodiment 2 above, which will not be repeated here.

[0092] Example 5:

[0093] This embodiment also provides an electronic device, including a memory and a processor. The memory stores a computer program, and the processor is configured to run the computer program to implement the subscription authentication method for value-added services in Embodiment 1 or Embodiment 2 above.

[0094] Example 6:

[0095] This embodiment also provides a computer-readable storage medium storing a computer program thereon. When the computer program is executed by a processor, it implements the subscription authentication method for value-added services in Embodiment 1 or Embodiment 2 above.

[0096] It is understood that the above embodiments are merely exemplary implementations used to illustrate the principles of the present invention, and the present invention is not limited thereto. For those skilled in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also considered to be within the scope of protection of the present invention.

Claims

1. A method for ordering and authenticating value-added services, applied to the order management node of a value-added service ordering and authentication system. The value-added service ordering and authentication system includes an order management node and an order authentication node. The order authentication node refers to the order authentication and billing management module of a mobile value-added service platform. The order management node is integrated from the value-added service order management modules of a fixed-line value-added service platform and a mobile value-added service platform. The order management node includes the value-added service order management modules of the fixed-line and mobile value-added service platforms, and authentication, authorization, and billing (AAA) interfaces. The AAA interfaces are used to connect to the order authentication and billing management module and the value-added service order management module of the mobile value-added service platform. The method is characterized in that... The ordering and authentication method includes: The value-added service subscription management module receives the value-added service subscription request sent by the target terminal and sends the subscription request to the AAA interface using the fast push PUSH mode. The subscription request includes the value-added service product ID and the target terminal's account, which can be either a fixed network account or a mobile network account. Based on the order request, determine whether the value-added service is a fixed-line value-added service; in response that the value-added service is a fixed-line value-added service, the AAA interface matches the target terminal's mobile account according to the mapping relationship between the target terminal's fixed-line account and the fixed-line account and mobile account, and generates a value-added service order authentication request based on the target terminal's mobile account, the value-added service product ID and the preset order authentication request format. The AAA interface sends the order authentication request to the order authentication node, so that the order authentication node can authenticate the order authentication request and generate an order authentication request response result; The AAA interface receives the order authentication request response result and notifies the value-added service order management module of the order authentication request response result; The value-added service subscription management module determines whether to enable the value-added service for the target terminal based on the response result of the subscription authentication request.

2. The subscription authentication method for value-added services according to claim 1, characterized in that, After determining whether the value-added service is a fixed-line value-added service based on the subscription request, and before the AAA interface sends the subscription authentication request to the subscription authentication node, the method further includes: In response to the fact that the value-added service is a mobile network value-added service, a subscription authentication request for the value-added service is generated based on the subscription request.

3. The subscription and authentication method for value-added services according to claim 2, characterized in that, Before the AAA interface matches the target terminal's mobile account based on the mapping relationship between the target terminal's fixed-line account and mobile account, the following steps are also included: Establish a mapping relationship between fixed network accounts and mobile network accounts, and store the mapping relationship in the database.

4. The subscription authentication method for value-added services according to claim 1, characterized in that, The order management node uses Kafka message queue technology to implement the PUSH mode.

5. A method for ordering and authenticating value-added services, applied to an ordering and authentication node of a value-added service system. The value-added service ordering and authentication system includes an ordering management node and an ordering authentication node. The ordering authentication node refers to the ordering authentication and billing management module of a mobile value-added service platform. The ordering management node is integrated from the value-added service ordering management modules of a fixed-line value-added service platform and a mobile value-added service platform. The ordering management node includes the value-added service ordering management modules of the fixed-line and mobile value-added service platforms, and authentication, authorization, and billing (AAA) interfaces. The AAA interfaces are used to connect to the ordering authentication and billing management module and the value-added service ordering management module of the mobile value-added service platform. The method is characterized by... The ordering and authentication method includes: The system receives a subscription authentication request sent by the subscription management node. The subscription authentication request is based on the subscription request for value-added services sent by the target terminal. It determines whether the value-added service is a fixed-line value-added service. In response to the value-added service being a fixed-line value-added service, the AAA interface matches the target terminal's mobile account according to the mapping relationship between the fixed-line account and the mobile account of the target terminal. The system generates a subscription authentication request for the value-added service based on the target terminal's mobile account, the value-added service product ID, and a preset subscription authentication request format. The subscription request includes the value-added service product ID and the target terminal's account, which can be either a fixed-line account or a mobile account. The subscription request is sent to the AAA interface by the value-added service subscription management module. The order authentication request is authenticated, and an order authentication request response result is generated.

6. A subscription management node for a value-added service subscription authentication system, the system comprising a subscription management node and a subscription authentication node, wherein the subscription authentication node refers to the subscription authentication and billing management module of a mobile value-added service platform, the subscription management node is integrated from the value-added service subscription management modules of a fixed-line value-added service platform and a mobile value-added service platform, the subscription management node comprising the value-added service subscription management modules of the fixed-line and mobile value-added service platforms and authentication, authorization, and billing (AAA) interfaces, the AAA interfaces being used to connect to the subscription authentication and billing management module and the value-added service subscription management module of the mobile value-added service platform, characterized in that, include: The system comprises a first receiving module, a judging module, a first generating module, and a first sending module. The first receiving module receives the value-added service subscription request sent by the target terminal from the value-added service subscription management module, and sends the subscription request to the AAA interface using a fast push PUSH mode. The subscription request includes the value-added service product ID and the target terminal's account, which can be either a fixed-line account or a mobile account. The judgment module, connected to the first receiving module, is used to determine whether the value-added service is a fixed-line value-added service based on the subscription request. The first generation module, connected to the judgment module, is used to respond to the fact that the value-added service is a fixed-line value-added service. The AAA interface matches the target terminal's mobile account based on the subscription request, the mapping relationship between the fixed-line account and the mobile account, and generates a value-added service subscription authentication request based on the target terminal's mobile account, the value-added service product ID, and the preset subscription authentication request format. The first sending module, connected to the first generating module, is used to send the subscription authentication request to the subscription authentication node via the AAA interface. Upon receiving the subscription authentication request, the subscription authentication node authenticates the request and generates a subscription authentication request response result. The first receiving module is also used to receive the subscription authentication request response result through the AAA interface, and to notify the value-added service subscription management module of the subscription authentication request response result. The first receiving module is also used by the value-added service subscription management module to determine whether to enable the value-added service of the target terminal based on the subscription authentication request response result.

7. A subscription authentication node in a value-added service subscription authentication system, the system comprising a subscription management node and a subscription authentication node. The subscription authentication node refers to the subscription authentication and billing management module of a mobile value-added service platform. The subscription management node is integrated from the value-added service subscription management modules of a fixed-line value-added service platform and a mobile value-added service platform. The subscription management node includes the value-added service subscription management modules of the fixed-line and mobile value-added service platforms, and authentication, authorization, and billing (AAA) interfaces. The AAA interfaces are used to connect to the subscription authentication and billing management module and the value-added service subscription management module of the mobile value-added service platform. The system is characterized in that... include: The second receiving module and the authentication module, The second receiving module is used to receive a subscription authentication request sent by the subscription management node. The subscription authentication request is based on the subscription request for value-added services sent by the target terminal. It determines whether the value-added service is a fixed-line value-added service. In response to the value-added service being a fixed-line value-added service, the AAA interface matches the target terminal's mobile account according to the mapping relationship between the fixed-line account and the mobile account of the target terminal. The subscription authentication request for the value-added service is generated according to the mobile account of the target terminal, the value-added service product ID, and the preset subscription authentication request format. The subscription request includes the value-added service product ID and the target terminal's account. The account includes one of the following: a fixed-line account or a mobile account. The subscription request is sent to the AAA interface by the value-added service subscription management module. The authentication module, connected to the second receiving module, is used to authenticate the order authentication request and generate an order authentication request response result.

8. An electronic device, characterized in that, It includes a memory and a processor, wherein the memory stores a computer program and the processor is configured to run the computer program to implement a subscription authentication method for a value-added service as described in any one of claims 1 to 4 or 5.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements a subscription authentication method for a value-added service as described in any one of claims 1 to 4 or 5.

Images