Service access method and device, computer equipment and storage medium

Abstract

The invention discloses a service access method and device, computer equipment and a storage medium. The method belongs to the technical field of mobile communication, and specifically comprises the following steps: in response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal; and according to the target terminal identifier, determining the access permission existence condition of the user terminal to the target service. And controlling the user terminal to access the target service based on the target terminal identifier under the condition that the access permission has the access permission. According to the method and the device, the length of an authentication link is greatly shortened, the user terminal can be automatically verified without inputting information such as a verification code or an account by a user, the access security is ensured, the authentication efficiency is greatly improved, the authentication complexity is reduced, the fluency of service access is improved, and the user experience is improved. And the user experience is improved.

Description

Technical Field

[0001] The present application relates to the field of mobile communication technology, and in particular to a service access method, device, computer equipment and storage medium. Background Art

[0002] In the current network application scenarios of enterprises and industry users, the demand for network connection is becoming increasingly complex, especially for the Fiber to the Room for Business (FTTR-B) solution for high-value users. Such users are usually large in scale, and their internal systems include not only basic office network systems, but also multiple business systems such as Office Automation (OA) systems and Enterprise Resource Planning (ERP).

[0003] Network access to these business systems requires strict authentication and authorization to ensure the legitimacy of internal and external users. However, existing authentication solutions mostly rely on verification codes or accounts (user name and password combination). Although they can achieve basic authentication functions, for internal users of the enterprise, frequent multiple authentications and frequent login and logout operations seriously affect the fluency and efficiency of office work. Summary of the invention

[0004] Based on this, it is necessary to provide a service access method, device, computer equipment and storage medium that can improve service access efficiency in response to the above technical problems.

[0005] In a first aspect, the present application provides a service access method, which is applied to FTTR equipment, and the method includes:

[0006] In response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal;

[0007] Determine, based on the target terminal identifier, whether the user terminal has access rights to the target service;

[0008] When the access right status is that the access right is granted, the user terminal is controlled to access the target service based on the target terminal identifier.

[0009] In one embodiment, determining, according to the target terminal identifier, whether the user terminal has access rights to the target service includes:

[0010] According to the matching result between the target terminal identifier and the candidate terminal identifiers in the target whitelist, it is determined whether the user terminal has access rights to the target service.

[0011] In one embodiment, the method further comprises:

[0012] The candidate terminal identifier is received from the authentication server through the middleware, and the candidate terminal identifier is added to the target whitelist; wherein the middleware is configured in the FTTR device.

[0013] In one embodiment, controlling the user terminal to access the target service based on the target terminal identifier includes:

[0014] Determine the service function authority of the user terminal for the target service according to the target terminal identification;

[0015] Determine the business access port based on business function permissions;

[0016] Control user terminals to access target services based on service access ports.

[0017] In one embodiment, the method further comprises:

[0018] If the access right status is that the access right is not possessed, feeding back an access right authentication request to the user terminal; wherein the access right authentication request is used to instruct the user terminal to send authentication information to the authentication server, and the authentication information is used for the authentication server to authenticate the user terminal;

[0019] An authentication response message sent by the authentication server based on the authentication information is received, and when the authentication response message includes an authentication pass result, the user terminal is controlled to access the target service.

[0020] In one of the embodiments, the authentication response message also includes the service function authority of the user terminal;

[0021] Accordingly, when the authentication response message includes the authentication success result, controlling the user terminal to access the target service includes:

[0022] When the authentication response message includes an authentication pass result, the service access port is determined based on the service function authority;

[0023] Control user terminals to access target services based on service access ports.

[0024] In one embodiment, the method further comprises:

[0025] Receive a target terminal identifier of a user terminal sent by an authentication server;

[0026] Add the target terminal ID to the target whitelist and configure the storage duration of the target terminal ID in the target whitelist.

[0027] In one of the embodiments, the target terminal identifier is at least one of a device media access control MAC address, a user identification card number, and a network identifier.

[0028] In one embodiment, the authentication information includes at least a user identification card number;

[0029] The authentication information is used by the authentication server to authenticate the user terminal in combination with the second authentication information; wherein the second authentication information is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number.

[0030] In a second aspect, the present application provides a service access device configured in an FTTR device, and the method includes:

[0031] An acquisition module, configured to acquire a target terminal identifier of a user terminal in response to a service access request for a target service initiated by the user terminal;

[0032] A determination module, used to determine whether the user terminal has access rights to the target service according to the target terminal identifier;

[0033] The control module is used to control the user terminal to access the target service based on the target terminal identifier when the access permission is granted.

[0034] In a third aspect, the present application further provides a computer device, the computer device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program:

[0035] In response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal;

[0036] Determine, based on the target terminal identifier, whether the user terminal has access rights to the target service;

[0037] When the access right status is that the access right is granted, the user terminal is controlled to access the target service based on the target terminal identifier.

[0038] In a fourth aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0039] In response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal;

[0040] Determine, based on the target terminal identifier, whether the user terminal has access rights to the target service;

[0041] When the access right status is that the access right is granted, the user terminal is controlled to access the target service based on the target terminal identifier.

[0042] In a fifth aspect, the present application further provides a computer program product, the computer program product comprising a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0043] In response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal;

[0044] Determine, based on the target terminal identifier, whether the user terminal has access rights to the target service;

[0045] When the access right status is that the access right is granted, the user terminal is controlled to access the target service based on the target terminal identifier.

[0046] The above-mentioned service access method, device, computer equipment and storage medium obtain the target terminal identification of the user terminal in response to the service access request for the target service initiated by the user terminal. According to the target terminal identification, the access right of the user terminal to the target service is determined. In the case where the access right is obtained, the user terminal is controlled to access the target service based on the target terminal identification. Compared with the existing situation that when the user initiates a service access request for the target service, the authentication server needs to initiate authentication for the user, and authenticate the user terminal according to the user input verification code or account information, which seriously affects the fluency of service access, the FTTR device of the present application automatically obtains the target terminal identification of the user terminal after receiving the service access request for the target service initiated by the user terminal. And according to the target terminal identification, it is determined that the user terminal has the access right to the target service. In the case that the access right is obtained, the user terminal is controlled to access the target service based on the target terminal identification, which not only greatly shortens the length of the authentication link, but also can automatically authenticate the user terminal without the user inputting the verification code or account information, while ensuring the access security, greatly improves the authentication efficiency, reduces the complexity of authentication, not only improves the fluency of service access, but also improves the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 An application environment diagram of a service access method provided in this embodiment;

[0048] Figure 2 A flowchart of the first service access method provided in this embodiment;

[0049] Figure 3 A schematic diagram of a first process of accessing a target service provided in this embodiment;

[0050] Figure 4 A schematic diagram of a second process of accessing a target service provided in this embodiment;

[0051] Figure 5 A flowchart of a second service access method provided in this embodiment;

[0052] Figure 6 A structural block diagram of a service access device provided in this embodiment;

[0053] Figure 7 This is a diagram of the internal structure of the computer device provided in this embodiment. DETAILED DESCRIPTION

[0054] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0055] The service access method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown in FIG. 1 , the FTTR device 104 obtains the target terminal identifier of the user terminal 102 in response to the service access request for the target service initiated by the user terminal 102. According to the target terminal identifier, the user terminal is determined to have access rights to the target service. If the access rights are available, the FTTR device 104 controls the user terminal 102 to access the target service based on the target terminal identifier.

[0056] Among them, FTTR (Fiber to the Room) equipment is a core device in a network deployment technology, which is designed to extend the fiber optic network directly to each room in a residential or commercial building, providing high-speed, high-bandwidth network connection for each room. FTTR technology connects to each room through optical fiber, ensuring the stability and high-speed transmission of the network, allowing users to enjoy consistent high-quality network services throughout the building. The FTTR equipment in this application mainly refers to the FTTR main equipment, also known as the FTTR-B main equipment, which is the core of the FTTR network and is responsible for converting the fiber optic network signal into a signal that can be used by the user equipment and distributing the signal to each room or work area in the room.

[0057] User terminal refers to the terminal device on the user side, which can be smart terminals such as mobile phones and computers, or smart wearable devices such as smart bracelets and smart watches.

[0058] In one embodiment, Figure 2 is a flow chart of a service access method provided according to an embodiment of the present application, in which the method is applied to Figure 1 Taking the FTTR device in the example as an example, the method comprises the following steps:

[0059] S201, in response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal.

[0060] Among them, the user terminal refers to the terminal device that is connected to the FTTR equipment of this application and has a service access demand. The user terminal refers to the terminal device on the user side, which can be a smart terminal such as a mobile phone or a computer, or a smart wearable device such as a smart bracelet or a smart watch. The target service refers to the service that needs to be accessed, such as an external website, an internal office system, etc. The service access request refers to the request message sent when requesting access to the target service. The target terminal identifier refers to the terminal identifier of the user terminal.

[0061] Optionally, in this embodiment, the target terminal identifier is at least one of a device MAC address, a user identification card number (a SIM (Subscriber Identity Module) card number), and a network identifier (for example, a SSID (Service Set Identifier)). Preferably, the target terminal identifier uses a device MAC address.

[0062] Optionally, in this embodiment, in response to a service access request for a target service initiated by a user terminal, the FTTR device can automatically obtain the target terminal identifier of the user terminal by monitoring a port (e.g., port 80). Exemplarily, in response to a WEB access request for a certain WEB page initiated by a user terminal, the FTT device can obtain the access request of the user terminal and the target terminal identifier of the user terminal by monitoring the port.

[0063] S202: Determine, based on the target terminal identifier, whether the user terminal has access rights to the target service.

[0064] The access permission request refers to whether the user terminal has the permission to access the target service.

[0065] As an optional implementation of the embodiment of the present application, an authentication request is initiated to an authentication server according to the target terminal identifier, so that the authentication server determines whether the user terminal has access rights to the target service based on the target terminal identifier.

[0066] As another optional implementation of the embodiment of the present application, according to the matching result of the target terminal identifier and the candidate terminal identifier in the target whitelist, the user terminal is determined to have access rights to the target service. Specifically, the FTTR device monitors the service access request initiated by the user terminal based on the first listening port (for example, port 80), obtains the target terminal identifier of the user terminal, and forwards the service access request and the target terminal identifier to the second listening port (for example, port 443). The second listening port sends the service access request and the target terminal identifier to the authentication plug-in configured in the FTTR device, and the authentication plug-in determines the user terminal's access rights to the target service based on the matching result of the target terminal identifier and the candidate terminal identifier in the target whitelist. It should be noted that in this embodiment, the FTTR device can also receive the candidate terminal identifier sent by the authentication server through the middleware, and add the candidate terminal identifier to the target whitelist; wherein the middleware is configured in the FTTR device; the middleware can be MBUS (Meter-Bus, metering bus) middleware. That is to say, the FTTR device of the present application can communicate with the authentication server through the middleware to receive the candidate terminal identifier sent by the authentication server, and store the candidate terminal identifier in the target whitelist, which can be called by the authentication plug-in.

[0067] S203: If the access permission is granted, the user terminal is controlled to access the target service based on the target terminal identifier.

[0068] Optionally, in this embodiment, based on the target terminal identifier, the business function authority corresponding to the user terminal is determined, and based on the business function authority, the user terminal is controlled to access the target business. For example, if the target business that the user terminal requests to access is the enterprise intranet (such as an integrated office system), and the user's business function authority is to only access the target function module (such as a sales and operation module), then the user terminal is controlled to only access the target function module of the target business.

[0069] The above service access method obtains the target terminal identifier of the user terminal in response to the service access request for the target service initiated by the user terminal. According to the target terminal identifier, the access right of the user terminal to the target service is determined. When the access right is obtained, the user terminal is controlled to access the target service based on the target terminal identifier. Compared with the existing situation that when the user initiates a service access request for the target service, the authentication server needs to initiate authentication for the user, and authenticate the user terminal according to the user input verification code or account information, which seriously affects the fluency of service access, the FTTR device of the present application automatically obtains the target terminal identifier of the user terminal after receiving the service access request for the target service initiated by the user terminal. And according to the target terminal identifier, it is determined that the user terminal has the access right to the target service. When the access right is obtained, the user terminal is controlled to access the target service based on the target terminal identifier, which not only greatly shortens the length of the authentication link, but also automatically authenticates the user terminal without the user inputting the verification code or account information, while ensuring the access security, greatly improving the authentication efficiency, reducing the complexity of authentication, not only improving the fluency of service access, but also improving the user experience.

[0070] In one embodiment, in order to more flexibly control the user terminal to access the target service, such as Figure 3 As shown, an optional implementation in S203 includes:

[0071] S301, determining the service function authority of the user terminal for the target service according to the target terminal identifier.

[0072] Among them, business function permissions refer to the functional permissions of the user terminal in the target business.

[0073] As an optional implementation of the embodiment of the present application, according to the target terminal identifier, the identity information of the user corresponding to the target terminal identifier is determined, according to the user's identity information, the user's authority level is determined, and according to the authority level, the service function authority of the user terminal for the target service is determined. It should be noted that this process can be performed by the FTTR device, or by the FTTR device interacting with the authentication server.

[0074] As another optional implementation of the embodiment of the present application, the service function permission of the user terminal to the target service is determined according to the target terminal identification and the permission list. The permission list records each terminal identification and the service function permission corresponding to each terminal identification. It should be noted that this process can be executed by the FTTR device (specifically, it can be executed by the authentication plug-in in the FTTR device), or it can be executed by the FTTR device interacting with the authentication server.

[0075] S302, determining a service access port based on the service function authority.

[0076] The service access port refers to the port of the service IP address corresponding to the target service. Different functions in the target service can be accessed through different service access ports. Assuming that the target service is an internal office system, different service functions of the internal office system can be accessed through different access ports.

[0077] Optionally, in this embodiment, the service access port can be determined according to the service function authority and the port list. The port list records different candidate access ports and the service function corresponding to each candidate access port. According to the service function authority, the available service function is determined, and the candidate access port corresponding to the available service function is used as the service access port.

[0078] It should be noted that the configuration of the service access port can be flexibly configured according to user needs and uploaded to the authentication server, which can be synchronized to the authentication plug-in by the authentication server through the middleware.

[0079] S303, controlling the user terminal to access the target service based on the service access port.

[0080] As an optional implementation of the embodiment of the present application, the user terminal is controlled to access the target service through the service access port. It should be noted that in this case, the user terminal can only access the target function module in the target service corresponding to its own service function authority.

[0081] Another optional implementation of the embodiment of the present application is to feed back the service IP address and service access port corresponding to the target service to the user terminal, so that the user terminal can access the target service based on the service IP address and service access port.

[0082] In this embodiment, the business function authority of the user terminal for the target business is determined based on the target terminal identification. Based on the business function authority, the business access port is determined. The user terminal is controlled to access the target business based on the business access port. Based on this embodiment, the association and binding of the target terminal identification and the business function authority is realized, and the decentralized and domain-based management of business access rights of different users in different business scenarios is realized, which effectively avoids the risks of data leakage, malicious damage, etc. caused by the same business authority. For enterprise users, refined management of user access rights is realized, and different business access rights can be configured for different users, avoiding human intervention and operation, and improving the security of user access.

[0083] In one embodiment, when the access right is not granted, such as Figure 4 As shown, an optional implementation of a service access method includes:

[0084] S401: When the access right status is that the access right is not possessed, feeding back an access right authentication request to the user terminal.

[0085] The authorization authentication request is used to instruct the user terminal to send authentication information to the authentication server, and the authentication information is used for the authentication server to authenticate the user terminal. The authorization authentication request refers to a request message that requires further authentication by the user terminal.

[0086] As an optional implementation method of the embodiment of the present application, when the access right is not granted, a permission authentication request is fed back to the user terminal. The permission authentication request carries the authentication URL address of the authentication server. Based on the authentication URL address, the user terminal requests the authentication server to feed back the authentication page to the user terminal, and the user terminal fills in the authentication information based on the authentication page, and after triggering the submission operation, sends the authentication information to the authentication server.

[0087] As another optional implementation of the embodiment of the present application, when the access right is not granted, a first authentication request is sent to the authentication server, so that the authentication server feeds back the permission authentication request to the user terminal based on the first authentication request. The permission authentication request includes an authentication page, and the user terminal fills in the authentication information based on the authentication page, and sends the authentication information to the authentication server after triggering the submission operation.

[0088] Optionally, the authentication message includes but is not limited to a user identification card number, an authentication code, a device MAC address, etc. This facilitates the authentication server to further authenticate the user terminal based on the authentication message. It should be noted that in this embodiment, the target terminal identifier may be a device MAC address. The authentication information at least includes a user identification card number. The purpose is to further authenticate the user terminal based on the authentication information to increase access security.

[0089] Optionally, the authentication information in this embodiment is used for the authentication server to authenticate the user terminal in combination with the second authentication information; wherein, the second authentication information is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number. Exemplarily, if the target terminal identifier is the device MAC address, when the enterprise user changes to a new mobile phone and requests to access the target service for the first time, the device MAC address of the new mobile phone does not exist in the target whitelist of the FTTP device. Therefore, the access right is not available. In this case, it is necessary to send a permission authentication request to the user terminal, the user terminal sends authentication information to the authentication server, the authentication server sends the first authentication information (for example, a verification code) to the user terminal based on the user identification card number in the authentication information, the user terminal feeds back the corresponding second authentication information to the authentication server, and the authentication server further authenticates the user terminal based on the second authentication information and the authentication information. Specifically, it is authenticated whether the first authentication information is the same as the second authentication information, whether the authentication information matches the pre-stored information, etc.

[0090] Optionally, in this embodiment, when the authentication server authenticates the user terminal, the target terminal identifier of the user terminal will be sent to the FTTR device through the middleware. The user terminal receives the target terminal identifier of the user terminal sent by the authentication server. The target terminal identifier is added to the target whitelist, and the storage duration (also referred to as the aging duration) of the target terminal identifier in the target whitelist is configured. The purpose of this embodiment is to dynamically update the target whitelist. The next time the user terminal accesses the target service, if the storage duration is valid, the FTTR device can directly authorize it, and further authentication is required through the authentication server, which improves the access efficiency of subsequent service access.

[0091] S402, receiving an authentication response message sent by the authentication server based on the authentication information, and controlling the user terminal to access the target service when the authentication response message includes an authentication success result.

[0092] The authentication response message is sent by the authentication server after further authenticating the user terminal based on the authentication information. The authentication response message includes the authentication result, such as the authentication pass result, the authentication fail result, etc.

[0093] Optionally, in this embodiment, the authentication response message also includes the service function authority of the user terminal. When the authentication response message includes the authentication result, the service access port is determined based on the service function authority. The user terminal is controlled to access the target service based on the service access port. The specific implementation of this embodiment is described in detail in the above embodiment and will not be repeated here.

[0094] Optionally, in this embodiment, when the authentication response message includes an authentication failure result, a permission authentication request is fed back to the user terminal again.

[0095] In this embodiment, when the access right is not granted, a permission authentication request is fed back to the user terminal; wherein the permission authentication request is used to instruct the user terminal to send authentication information to the authentication server, and the authentication information is used for the authentication server to authenticate the user terminal. An authentication response message sent by the authentication server based on the authentication information is received, and when the authentication response message includes an authentication pass result, the user terminal is controlled to access the target service. Moreover, in this embodiment, the authentication information at least includes a user identification card number;

[0096] The authentication information is used by the authentication server to authenticate the user terminal in combination with the second authentication information; wherein the second authentication information is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number. In this embodiment, when the access right is not granted, that is, when the initial authentication fails, authentication will be performed again based on the authentication server, and the security of service access is effectively improved based on multiple authentication strategies.

[0097] In one embodiment, if Figure 5 As shown, another optional implementation of a service access method includes:

[0098] S501, receiving a candidate terminal identifier sent by an authentication server through a middleware, and adding the candidate terminal identifier to a target whitelist. The middleware is configured in an FTTR device.

[0099] S502: In response to a service access request for a target service initiated by a user terminal, obtain a target terminal identifier of the user terminal, wherein the target terminal identifier is at least one of a device media access control MAC address, a user identification card number, and a network identifier.

[0100] S503: Determine, based on the matching result between the target terminal identifier and the candidate terminal identifiers in the target whitelist, whether the user terminal has access rights to the target service.

[0101] S504: When the access permission status is that the access permission is available, determine the service function permission of the user terminal to the target service according to the target terminal identifier.

[0102] S505: Determine the service access port based on the service function authority.

[0103] S506, when the access right status is that the access right is not possessed, feedback a permission authentication request to the user terminal. The permission authentication request is used to instruct the user terminal to send authentication information to the authentication server; the authentication information at least includes the user identification card number; the authentication information is used for the authentication server to authenticate the user terminal in combination with the second authentication information; the second authentication information is the first authentication information that is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number.

[0104] S507, receiving an authentication response message sent by the authentication server based on the authentication information, and in the case where the authentication response message includes an authentication pass result, determining a service access port based on the service function authority carried in the authentication response message.

[0105] S508, controlling the user terminal to access the target service based on the service access port.

[0106] It should be noted that this embodiment also includes a process in which the FTTR device updates the target whitelist, which is as follows:

[0107] When the authentication server successfully authenticates the user terminal, the authentication server sends the target terminal identifier of the user terminal to the FTTR device, and the FTTR device receives the target terminal identifier of the user terminal sent by the authentication server.

[0108] Add the target terminal ID to the target whitelist and configure the storage duration of the target terminal ID in the target whitelist.

[0109] In this embodiment, in response to a service access request for a target service initiated by a user terminal, a target terminal identifier of the user terminal is obtained. According to the target terminal identifier, the access right of the user terminal to the target service is determined. When the access right is obtained, the user terminal is controlled to access the target service based on the target terminal identifier. Compared with the existing situation that when a user initiates a service access request for a target service, the authentication server needs to initiate authentication for the user, and authenticate the user terminal according to the user input verification code or account information, which seriously affects the fluency of service access, the FTTR device of this application automatically obtains the target terminal identifier of the user terminal after receiving the service access request for the target service initiated by the user terminal. And according to the target terminal identifier, the access right of the user terminal to the target service is determined. When the access right is obtained, the user terminal is controlled to access the target service based on the target terminal identifier, which not only greatly shortens the length of the authentication link, but also automatically authenticates the user terminal without the user inputting verification code or account information, while ensuring access security, greatly improving authentication efficiency and reducing authentication complexity, not only improving the fluency of service access, but also improving user experience.

[0110] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0111] Based on the same inventive concept, the embodiment of the present application also provides a service access device for implementing the service access method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more service access device embodiments provided below can refer to the limitations on the service access method above, and will not be repeated here.

[0112] In one embodiment, by Figure 6 FIG. 2 shows a structural block diagram of a service access device in an embodiment. Figure 6 As shown, a service access device 1 is provided, the device comprising: an acquisition module 10, a determination module 20 and a control module 30, wherein:

[0113] An acquisition module 10, configured to acquire a target terminal identifier of a user terminal in response to a service access request for a target service initiated by the user terminal;

[0114] A determination module 20, configured to determine whether the user terminal has access rights to the target service according to the target terminal identifier;

[0115] The control module 30 is used to control the user terminal to access the target service based on the target terminal identifier when the access permission status is that the access permission is available.

[0116] The service access device, in response to the service access request for the target service initiated by the user terminal, obtains the target terminal identification of the user terminal. According to the target terminal identification, the access right of the user terminal to the target service is determined. When the access right is obtained, the user terminal is controlled to access the target service based on the target terminal identification. Compared with the existing situation that when the user initiates a service access request for the target service, the authentication server needs to initiate authentication for the user, and authenticate the user terminal according to the user input verification code or account information, which seriously affects the fluency of service access, the FTTR device of the present application automatically obtains the target terminal identification of the user terminal after receiving the service access request for the target service initiated by the user terminal. And according to the target terminal identification, it is determined that the user terminal has the access right to the target service. When the access right is obtained, the user terminal is controlled to access the target service based on the target terminal identification, which not only greatly shortens the length of the authentication link, but also automatically authenticates the user terminal without the user inputting the verification code or account information, while ensuring the access security, greatly improves the authentication efficiency, reduces the complexity of authentication, and not only improves the fluency of service access, but also improves the user experience.

[0117] In one embodiment, the Figure 6 The determining module 20 is further specifically used for:

[0118] According to the matching result between the target terminal identifier and the candidate terminal identifiers in the target whitelist, it is determined whether the user terminal has access rights to the target service.

[0119] In one embodiment, the Figure 6 The service access device 1 further comprises:

[0120] The first receiving module is used to receive the candidate terminal identifier sent by the authentication server through the middleware, and add the candidate terminal identifier to the target whitelist; wherein the middleware is configured in the FTTR device.

[0121] In one embodiment, the Figure 6 The control module 30 is also specifically used for:

[0122] Determine the service function authority of the user terminal for the target service according to the target terminal identification;

[0123] Determine the business access port based on business function permissions;

[0124] Control user terminals to access target services based on service access ports.

[0125] In one embodiment, the Figure 6 The service access device 1 further comprises:

[0126] A feedback module, used to feedback a permission authentication request to the user terminal when the access right status is that the access right is not possessed; wherein the permission authentication request is used to instruct the user terminal to send authentication information to the authentication server, and the authentication information is used for the authentication server to authenticate the user terminal;

[0127] The second receiving module is used to receive an authentication response message sent by the authentication server based on the authentication information, and control the user terminal to access the target service when the authentication response message includes an authentication pass result.

[0128] In one of the embodiments, the authentication response message also includes the service function authority of the user terminal;

[0129] Correspondingly, the second receiving module is further specifically used for:

[0130] When the authentication response message includes an authentication pass result, the service access port is determined based on the service function authority;

[0131] Control user terminals to access target services based on service access ports.

[0132] In one embodiment, the Figure 6 The service access device 1 further comprises:

[0133] A third receiving module is used to receive a target terminal identifier of a user terminal sent by an authentication server;

[0134] The configuration module is used to add the target terminal identifier to the target whitelist and configure the storage duration of the target terminal identifier in the target whitelist.

[0135] In one of the embodiments, the target terminal identifier is at least one of a device media access control MAC address, a user identification card number, and a network identifier.

[0136] In one embodiment, the authentication information includes at least a user identification card number;

[0137] The authentication information is used by the authentication server to authenticate the user terminal in combination with the second authentication information; wherein the second authentication information is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number.

[0138] Each module in the above service access device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0139] In one embodiment, a computer device is provided. The computer device may be a platform side, and its internal structure diagram may be as shown in FIG. Figure 7 As shown. The computer device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store information related to the service access method. The network interface of the computer device is used to communicate with an external user side through a network connection. When the computer program is executed by the processor, a service access method is implemented.

[0140] Those skilled in the art will understand that Figure 7 The structure shown in the figure is merely a block diagram of a portion of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. Specifically, the computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0141] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0142] In response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal;

[0143] Determine, based on the target terminal identifier, whether the user terminal has access rights to the target service;

[0144] When the access right status is that the access right is granted, the user terminal is controlled to access the target service based on the target terminal identifier.

[0145] In one embodiment, when the processor executes the computer program, the following steps are further implemented: determining, according to the target terminal identifier, whether the user terminal has access rights to the target service, including:

[0146] According to the matching result between the target terminal identifier and the candidate terminal identifiers in the target whitelist, it is determined whether the user terminal has access rights to the target service.

[0147] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0148] The candidate terminal identifier is received from the authentication server through the middleware, and the candidate terminal identifier is added to the target whitelist; wherein the middleware is configured in the FTTR device.

[0149] In one embodiment, when the processor executes the computer program, the following steps are further implemented: based on the target terminal identifier, controlling the user terminal to access the target service, including:

[0150] Determine the service function authority of the user terminal for the target service according to the target terminal identification;

[0151] Determine the business access port based on business function permissions;

[0152] Control user terminals to access target services based on service access ports.

[0153] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0154] If the access right status is that the access right is not possessed, feeding back an access right authentication request to the user terminal; wherein the access right authentication request is used to instruct the user terminal to send authentication information to the authentication server, and the authentication information is used for the authentication server to authenticate the user terminal;

[0155] An authentication response message sent by the authentication server based on the authentication information is received, and when the authentication response message includes an authentication pass result, the user terminal is controlled to access the target service.

[0156] In one embodiment, when the processor executes the computer program, the following steps are further implemented: the authentication response message also includes the service function authority of the user terminal;

[0157] Accordingly, when the authentication response message includes the authentication success result, controlling the user terminal to access the target service includes:

[0158] When the authentication response message includes an authentication pass result, the service access port is determined based on the service function authority;

[0159] Control user terminals to access target services based on service access ports.

[0160] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0161] Receive a target terminal identifier of a user terminal sent by an authentication server;

[0162] Add the target terminal ID to the target whitelist and configure the storage duration of the target terminal ID in the target whitelist.

[0163] In one embodiment, when the processor executes the computer program, the following steps are further implemented: the target terminal identifier is at least one of a device media access control MAC address, a user identification card number, and a network identifier.

[0164] In one embodiment, when the processor executes the computer program, the following steps are also implemented: the authentication information includes at least a user identification card number;

[0165] The authentication information is used by the authentication server to authenticate the user terminal in combination with the second authentication information; wherein the second authentication information is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number.

[0166] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0167] In response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal;

[0168] Determine, based on the target terminal identifier, whether the user terminal has access rights to the target service;

[0169] When the access right status is that the access right is granted, the user terminal is controlled to access the target service based on the target terminal identifier.

[0170] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: determining, according to the target terminal identifier, whether the user terminal has access rights to the target service, including:

[0171] According to the matching result between the target terminal identifier and the candidate terminal identifiers in the target whitelist, it is determined whether the user terminal has access rights to the target service.

[0172] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0173] The candidate terminal identifier is received from the authentication server through the middleware, and the candidate terminal identifier is added to the target whitelist; wherein the middleware is configured in the FTTR device.

[0174] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: based on the target terminal identifier, controlling the user terminal to access the target service, including:

[0175] Determine the service function authority of the user terminal for the target service according to the target terminal identification;

[0176] Determine the business access port based on business function permissions;

[0177] Control user terminals to access target services based on service access ports.

[0178] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0179] If the access right status is that the access right is not possessed, feeding back an access right authentication request to the user terminal; wherein the access right authentication request is used to instruct the user terminal to send authentication information to the authentication server, and the authentication information is used for the authentication server to authenticate the user terminal;

[0180] An authentication response message sent by the authentication server based on the authentication information is received, and when the authentication response message includes an authentication pass result, the user terminal is controlled to access the target service.

[0181] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: the authentication response message also includes the service function authority of the user terminal;

[0182] Accordingly, when the authentication response message includes the authentication success result, controlling the user terminal to access the target service includes:

[0183] When the authentication response message includes an authentication pass result, the service access port is determined based on the service function authority;

[0184] Control user terminals to access target services based on service access ports.

[0185] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0186] Receive a target terminal identifier of a user terminal sent by an authentication server;

[0187] Add the target terminal ID to the target whitelist and configure the storage duration of the target terminal ID in the target whitelist.

[0188] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: the target terminal identifier is at least one of a device media access control MAC address, a user identification card number, and a network identifier.

[0189] In one embodiment, the computer program, when executed by a processor, further implements the following steps: the authentication information includes at least a user identification card number;

[0190] The authentication information is used by the authentication server to authenticate the user terminal in combination with the second authentication information; wherein the second authentication information is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number.

[0191] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0192] In response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal;

[0193] Determine, based on the target terminal identifier, whether the user terminal has access rights to the target service;

[0194] When the access right status is that the access right is granted, the user terminal is controlled to access the target service based on the target terminal identifier.

[0195] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: determining, according to the target terminal identifier, whether the user terminal has access rights to the target service, including:

[0196] According to the matching result between the target terminal identifier and the candidate terminal identifiers in the target whitelist, it is determined whether the user terminal has access rights to the target service.

[0197] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0198] The candidate terminal identifier is received from the authentication server through the middleware, and the candidate terminal identifier is added to the target whitelist; wherein the middleware is configured in the FTTR device.

[0199] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: based on the target terminal identifier, controlling the user terminal to access the target service, including:

[0200] Determine the service function authority of the user terminal for the target service according to the target terminal identification;

[0201] Determine the business access port based on business function permissions;

[0202] Control user terminals to access target services based on service access ports.

[0203] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0204] If the access right status is that the access right is not possessed, feeding back an access right authentication request to the user terminal; wherein the access right authentication request is used to instruct the user terminal to send authentication information to the authentication server, and the authentication information is used for the authentication server to authenticate the user terminal;

[0205] An authentication response message sent by the authentication server based on the authentication information is received, and when the authentication response message includes an authentication pass result, the user terminal is controlled to access the target service.

[0206] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: the authentication response message also includes the service function authority of the user terminal;

[0207] Accordingly, when the authentication response message includes the authentication success result, controlling the user terminal to access the target service includes:

[0208] When the authentication response message includes an authentication pass result, the service access port is determined based on the service function authority;

[0209] Control user terminals to access target services based on service access ports.

[0210] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0211] Receive a target terminal identifier of a user terminal sent by an authentication server;

[0212] Add the target terminal ID to the target whitelist and configure the storage duration of the target terminal ID in the target whitelist.

[0213] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: the target terminal identifier is at least one of a device media access control MAC address, a user identification card number, and a network identifier.

[0214] In one embodiment, the computer program, when executed by a processor, further implements the following steps: the authentication information includes at least a user identification card number;

[0215] The authentication information is used by the authentication server to authenticate the user terminal in combination with the second authentication information; wherein the second authentication information is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number.

[0216] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0217] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0218] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A service access method, characterized in that: Applied to a fiber-to-the-room FTTR device, the method comprises: In response to a service access request for a target service initiated by a user terminal, obtaining a target terminal identifier of the user terminal; Determining, according to the target terminal identifier, whether the user terminal has access rights to the target service; When the access permission status is that the access permission is available, the user terminal is controlled to access the target service based on the target terminal identifier.

2. The method according to claim 1, characterized in that: The determining, according to the target terminal identifier, whether the user terminal has access rights to the target service includes: According to the matching result between the target terminal identifier and the candidate terminal identifiers in the target whitelist, it is determined whether the user terminal has access rights to the target service.

3. The method according to claim 2, characterized in that The method further comprises: Receive the candidate terminal identifier sent by the authentication server through the middleware, and add the candidate terminal identifier to the target whitelist; wherein the middleware is configured in the FTTR device.

4. The method according to claim 1, characterized in that: The controlling the user terminal to access the target service based on the target terminal identifier includes: Determining, according to the target terminal identifier, the service function authority of the user terminal for the target service; Based on the business function authority, determining the business access port; The user terminal is controlled to access the target service based on the service access port.

5. The method according to claim 2, characterized in that: The method further comprises: If the access right status is that the access right is not possessed, feeding back an access right authentication request to the user terminal; wherein the access right authentication request is used to instruct the user terminal to send authentication information to the authentication server, and the authentication information is used for the authentication server to authenticate the user terminal; An authentication response message sent by the authentication server based on the authentication information is received, and when the authentication response message includes an authentication success result, the user terminal is controlled to access the target service.

6. The method according to claim 5, characterized in that The authentication response message also includes the service function authority of the user terminal; Correspondingly, when the authentication response message includes an authentication success result, controlling the user terminal to access the target service includes: In a case where the authentication response message includes an authentication pass result, determining the service access port based on the service function authority; The user terminal is controlled to access the target service based on the service access port.

7. The method according to claim 5, characterized in that The method further comprises: Receiving a target terminal identifier of a user terminal sent by the authentication server; The target terminal identifier is added to the target whitelist, and the storage duration of the target terminal identifier in the target whitelist is configured.

8. The method according to any one of claims 1 to 7, characterized in that The target terminal identifier is at least one of a device media access control MAC address, a user identification card number, and a network identifier.

9. The method according to claim 5, characterized in that The authentication information at least includes a user identification card number; The authentication information is used by the authentication server to authenticate the user terminal in combination with second authentication information; wherein the second authentication information is fed back by the user terminal based on the first authentication information after the authentication server sends the first authentication information to the user terminal based on the user identification card number.

10. A service access device, characterized in that: Configured in FTTR equipment, the method comprises: An acquisition module, configured to acquire a target terminal identifier of a user terminal in response to a service access request for a target service initiated by the user terminal; A determination module, configured to determine, based on the target terminal identifier, whether the user terminal has access rights to the target service; The control module is used to control the user terminal to access the target service based on the target terminal identifier when the access permission status is that the access permission is available.

11. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 9 are implemented.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 9 are implemented.

13. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 9 are implemented.

Images