A broadband access operation method and device, electronic equipment and storage medium

Abstract

The present disclosure provides a broadband access operation method and device, electronic equipment and storage medium, the method comprising: receiving a broadband service opening request initiated by a target terminal via a code scanning interaction in a target clustering scenario, the broadband service opening request carrying a user identity and selected package information; according to the broadband service opening request, translating the user identity into a broadband dial-up authentication account of a corresponding operator according to an account translation rule corresponding to a target virtual tenant, and synchronizing the broadband dial-up authentication account and the selected package information to an operator opening system to complete broadband service opening of the target user; when the target terminal accesses an access device of the target clustering scenario and an authentication session is not established, the access device is cooperated to push a customized portal page exclusive to the target clustering scenario to the target terminal. According to the embodiment of the present disclosure, the time consumption of broadband service acceptance and opening can be greatly compressed, and the overall broadband service operation efficiency can be effectively improved.

Description

Technical Field

[0001] This disclosure relates to the field of network technology, and in particular to a broadband access operation method, apparatus, electronic device and storage medium. Background Technology

[0002] In clustered markets such as campuses and urban villages, telecommunications operators typically provide broadband access services to end users through partnerships with telecom operators specializing in internet, telecommunications, and data services. However, with the rapid development of network services in these clustered markets, the existing dial-up access model has gradually revealed numerous problems.

[0003] In existing technologies, broadband service activation adopts a semi-automatic mode. This means that after receiving payment and package application requests from end users, the telecom operators manually enter user identity information and package speed details into a spreadsheet. The spreadsheet is then imported into the operator's third-party dialing platform, which semi-automatically binds the telecom operator's broadband account to the user's identity. However, the closed operation accounts and authentication data of the third-party dialing system create management blind spots for the telecom operators. Specifically, existing technologies have the following main drawbacks: (1) Low activation efficiency: The existing solution relies on a semi-automatic operation method of manual information entry and form import and circulation. The business acceptance process is cumbersome and time-consuming. After submitting the broadband service application, the end user cannot quickly complete the activation and authentication for Internet access, resulting in a poor user experience and failing to meet the needs of all parties for rapid service response.

[0004] (2) Account system cannot be automatically transferred: User identity identifier and broadband dial-up authentication account of communication operator belong to two independent systems. The existing model lacks an automatic translation mechanism, making it difficult for the two types of accounts to be matched and transferred in real time, which further slows down the overall efficiency of service activation and authentication interaction.

[0005] (3) The portal page does not have scene customization attributes: all clustering scenarios share a unified authentication portal page, and it is impossible to push corresponding exclusive customized authentication interfaces according to different clustering scenarios. Summary of the Invention

[0006] This disclosure provides a broadband access operation method, apparatus, electronic device, and storage medium to solve the problems of low activation efficiency, inability to automatically transfer account systems, and lack of scenario customization attributes in existing broadband access operation methods based on dial-up access mode.

[0007] In a first aspect, this disclosure provides a broadband access operation method, the method comprising: Receive broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction, the broadband service activation request carrying user identity identifier and selected package information; According to the broadband service activation request, the user identity identifier is translated into the broadband dial-up authentication account of the corresponding operator according to the account translation rules corresponding to the target virtual tenant, and the broadband dial-up authentication account and the selected package information are synchronized to the operator's activation system to complete the broadband service activation of the target user. The target clustering scenario corresponds one-to-one with the target virtual tenant. When the target terminal accesses the access device of the target clustering scenario without establishing an authentication session, the access device will push a customized portal page exclusive to the target clustering scenario to the target terminal. The system receives authentication information submitted by the target terminal through the customized portal page, and completes interactive authentication with the operator's authentication system via the access device based on the broadband dial-up authentication account. Upon successful authentication, the operator's billing system is triggered to initiate the billing process for the target terminal.

[0008] Furthermore, before receiving the broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction, the method further includes: In response to the virtual tenant creation instruction for the target clustering scenario, a target virtual tenant corresponding to the target clustering scenario is created in the cloud platform, wherein the target virtual tenant is isolated from other virtual tenants in the cloud platform.

[0009] Furthermore, before receiving the broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction, the method further includes: A customized portal page specifically for the target clustering scenario is generated. The customized portal page is associated and bound with the Service Set Identifier (SSID) of the target clustering scenario.

[0010] Furthermore, the step of translating the user identity identifier into the corresponding operator's broadband dial-up authentication account according to the broadband service activation request and the account translation rules corresponding to the target virtual tenant specifically includes: Obtain the account translation rules corresponding to the target virtual tenant; According to the account translation rules, the user identity identifier is mapped to a self-coded broadband dial-up account that conforms to the encoding specifications of the operator's authentication system, and the self-coded broadband dial-up account is used as the broadband dial-up authentication account.

[0011] Furthermore, the step of synchronizing the broadband dial-up authentication account and the selected package information to the operator's activation system to complete the broadband service activation for the target user specifically includes: Through the interface of the Central Business Support System (CBSS), the broadband dial-up authentication account and the selected package information are sent to the activation center. The activation center then synchronizes the broadband dial-up authentication account and the selected package information to the Remote Authentication Dial-up User Service (RADIUS) server via the Order Agent System (OBS) so that the broadband service account opening for the target user can be completed on the RADIUS server.

[0012] Furthermore, the authentication information includes the user's identity identifier and password. The authentication process, based on the broadband dial-up authentication account, involves interaction between the access device and the operator's authentication system, specifically including: The user identity identifier is mapped to the broadband dial-up authentication account according to the account translation rules. Based on the broadband dial-up authentication account and the password, the authentication result is obtained by performing a challenge and response interaction authentication process with the operator's authentication system through the access device.

[0013] Furthermore, the method further includes at least one of the following: In response to receiving an editing instruction for the customized portal page, the system performs add, delete, or modify operations on the customized portal page according to the editing instruction; In response to the policy configuration command for the target terminal, differentiated bandwidth, duration, or network priority are allocated to the target terminal; In response to the instruction to activate value-added services, activate network security protection or dual-exit acceleration value-added services for the target terminal; Obtain the link quality parameters of the target clustering scenario and generate visual monitoring information.

[0014] Secondly, this disclosure provides a broadband access operation device, the device comprising: The activation request receiving module is used to receive broadband service activation requests initiated by target terminals in the target clustering scenario via QR code interaction. The broadband service activation request carries the user's identity identifier and the selected package information. The broadband activation module, connected to the activation request receiving module, is used to translate the user identity identifier into the broadband dial-up authentication account of the corresponding operator according to the account translation rules corresponding to the target virtual tenant, based on the broadband service activation request, and synchronize the broadband dial-up authentication account and the selected package information to the operator's activation system to complete the broadband service activation of the target user. The target clustering scenario corresponds one-to-one with the target virtual tenant. The portal page push module, connected to the broadband activation module, is used to push a customized portal page exclusive to the target clustering scenario to the target terminal in coordination with the access device when the target terminal accesses the access device of the target clustering scenario and no authentication session is established. An interactive authentication module, connected to the portal page push module, is used to receive authentication information submitted by the target terminal through the customized portal page, and complete interactive authentication with the operator's authentication system through the access device based on the broadband dial-up authentication account. The billing process initiation module is connected to the interactive authentication module and is used to trigger the operator's billing system to initiate the billing process for the target terminal in response to successful authentication.

[0015] Thirdly, this disclosure provides an electronic device comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores one or more computer programs executable by the at least one processor, the one or more computer programs being executed by the at least one processor to enable the at least one processor to perform the broadband access operation method described in the first aspect above.

[0016] Fourthly, this disclosure provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the broadband access operation method described in the first aspect.

[0017] The broadband access operation method, apparatus, electronic device, and storage medium provided in this disclosure automatically converts the user's identity identifier into the operator's broadband dial-up authentication account and simultaneously activates the service by receiving a broadband service activation request initiated by the terminal via QR code scanning, based on preset account translation rules. This eliminates tedious operations such as manual data entry and table import, significantly reducing the time required for broadband service acceptance and activation, enabling second-level online self-service processing, and effectively improving the overall operational efficiency of broadband services. Simultaneously, by leveraging the automatic account translation mechanism to link two independent account systems, real-time matching and cross-system synchronous transfer of the user's identity identifier and the operator's broadband dial-up authentication account are achieved, ensuring a smooth and efficient service activation and authentication process. Furthermore, when the terminal has not established an authentication session, a corresponding customized portal page is pushed to it based on the terminal's clustering scenario, enabling precise distribution of portal pages according to application scenarios. This allows for adaptation to the business operation needs of different clustering scenarios through differentiated portal pages, optimizing the user experience for service processing and internet access authentication. This solves the problems of low activation efficiency, inability to automatically transfer account systems, and lack of scenario customization attributes in existing broadband access operation methods based on dial-up access mode. Attached Figure Description

[0018] The accompanying drawings are provided to further illustrate the present disclosure and form part of the specification. They are used together with the embodiments of the present disclosure to explain the disclosure and do not constitute a limitation thereof. In the drawings: Figure 1 A flowchart illustrating a broadband access operation method provided in this embodiment of the disclosure; Figure 2 A network architecture diagram of the campus hyperconverged platform provided in this embodiment of the disclosure; Figure 3 This is a schematic diagram of the data flow for broadband service activation provided in an embodiment of this disclosure; Figure 4 A block diagram of a broadband access operation device provided in an embodiment of this disclosure; Figure 5 This is a block diagram of an electronic device provided in an embodiment of the present disclosure. Detailed Implementation

[0019] To enable those skilled in the art to better understand the technical solutions of this disclosure, exemplary embodiments of this disclosure are described below with reference to the accompanying drawings, including various details of the embodiments of this disclosure to aid understanding. These should be considered merely exemplary. Therefore, those skilled in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of this disclosure. Similarly, for clarity and conciseness, descriptions of well-known functions and structures are omitted in the following description.

[0020] Where there is no conflict, the various embodiments of this disclosure and the features thereof in the embodiments may be combined with each other.

[0021] As used herein, the term “and / or” includes any and all combinations of one or more related enumerated entries.

[0022] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit this disclosure. As used herein, the singular forms “a” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will also be understood that when the terms “comprising” and / or “made of” are used in this specification, the presence of the stated feature, integral, step, operation, element, and / or component is specified, but the presence or addition of one or more other features, integrals, steps, operations, elements, components, and / or groups thereof is not excluded. Words such as “connected” or “linked” are not limited to physical or mechanical connections but can include electrical connections, whether direct or indirect.

[0023] Unless otherwise specified, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and this disclosure, and will not be interpreted as having an idealized or overly formal meaning, unless expressly so defined herein.

[0024] Figure 1 A flowchart illustrating a broadband access operation method provided in this disclosure. (Refer to...) Figure 1 The method includes: Step S101: Receive a broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction. The broadband service activation request carries the user's identity identifier and the selected package information.

[0025] Specifically, areas with centralized broadband operation needs, such as individual schools, hospitals, urban villages, and factories, can be treated as independent cluster scenarios. The target cluster scenario can be any one of all cluster scenarios, for example, school A, school B, or urban village A. Target terminals within the target cluster scenario can initiate an online self-service broadband service application process by scanning a QR code, barcode, or other type of graphic code. For example, telecom operators can post QR codes containing service registration entry points in public areas or areas where terminal users congregate in the target cluster scenario. Target terminals can then be redirected to the broadband service activation page by scanning the QR code. The user identification is a unique identifier for the terminal user, such as an ID card number, student ID, student registration number, mobile phone number, or other unique user code. In this embodiment, the ID card number is preferred as the user identification. The selected package information includes the speed information and / or duration information corresponding to the broadband service selected by the terminal user, such as bandwidth rate, monthly duration, or data allowance.

[0026] In some embodiments, before receiving the broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction, the method further includes: In response to the virtual tenant creation instruction for the target clustering scenario, a target virtual tenant corresponding to the target clustering scenario is created in the cloud platform, wherein the target virtual tenant is isolated from other virtual tenants in the cloud platform.

[0027] Specifically, each virtual tenant is a logically isolated, independent operating space within the cloud platform, with user data, configuration data, and business data isolated from each other. Each clustering scenario corresponds to an independent virtual tenant, and administrators of different clustering scenarios can only access and manipulate the data of their own virtual tenants, and cannot view or modify the data of other virtual tenants. Through the virtual tenant mechanism, independent management and secure isolation of multiple clustering scenarios within the same cloud platform can be achieved.

[0028] In some embodiments, before receiving the broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction, the method further includes: A customized portal page specifically for the target clustering scenario is generated. The customized portal page is associated and bound with the SSID (Service Set Identifier) ​​of the target clustering scenario.

[0029] Specifically, customized portal pages can be designed and generated independently according to the operational needs of different clustering scenarios. Customized portal pages for different clustering scenarios can have different page styles. After the customized development of the portal page is completed, a binding mapping relationship is established between the page and the SSID configured for the current clustering scenario. Subsequently, the cloud platform can quickly match the portal page resources to which it belongs based on the SSID corresponding to the terminal when it accesses the network.

[0030] Step S102: According to the broadband service activation request, the user identity identifier is translated into the broadband dial-up authentication account of the corresponding operator according to the account translation rules corresponding to the target virtual tenant, and the broadband dial-up authentication account and the selected package information are synchronized to the operator's activation system to complete the broadband service activation of the target user. The target clustering scenario corresponds one-to-one with the target virtual tenant.

[0031] Specifically, the account translation rules are used to map the user identity identifier used by the end user to a broadband dial-up authentication account in the format required by the telecommunications operator's authentication system. Since the end user uses the user identity identifier for service application and authentication login, while the telecommunications operator uses a self-encoded broadband dial-up authentication account for user identity verification and billing management, the two sets of accounts are independent. The cloud platform uses the account translation rules to establish a mapping and binding relationship between the two types of accounts, achieving automatic association and conversion between different account systems. After completing the account translation, the cloud platform encapsulates the generated broadband dial-up authentication account and the user-selected package parameters, and transmits them to the operator's activation system through a pre-configured interface, thereby completing the online broadband account opening process.

[0032] In some embodiments, the step of translating the user identity into the corresponding operator's broadband dial-up authentication account according to the broadband service activation request and the account translation rules corresponding to the target virtual tenant specifically includes: Obtain the account translation rules corresponding to the target virtual tenant; According to the account translation rules, the user identity identifier is mapped to a self-coded broadband dial-up account that conforms to the encoding specifications of the operator's authentication system, and the self-coded broadband dial-up account is used as the broadband dial-up authentication account.

[0033] Specifically, the mapping can be implemented in various ways. For example, using the user's unique identifier as an index, a user-exclusive broadband dial-up account can be automatically generated according to the operator's preset character format and encoding length requirements. This account is the terminal network access identity credential that is uniquely recognized by the operator's RADIUS (Remote Authentication Dial-In User Service) authentication and billing system.

[0034] In some embodiments, synchronizing the broadband dial-up authentication account and the selected package information to the operator's activation system to complete the broadband service activation for the target user specifically includes: Through the interface of CBSS (Central Business Support System), the broadband dial-up authentication account and the selected package information are sent to the activation center. The activation center then synchronizes the broadband dial-up authentication account and the selected package information to the remote authentication dial-up user service RADIUS server via OBS (Order Broker System) to complete the broadband service account opening for the target user on the RADIUS server.

[0035] Specifically, the cloud platform pushes the encapsulated account and package service data to the operator's centralized business support system (CBSS) through standardized interfaces. The CBSS then issues the service order to the operator's internal service activation center. After receiving the order, the activation center synchronizes the user's broadband dial-up account and package permission configuration data to the operator's RADIUS server through the order agent system (OBS). Once the RADIUS server completes the user account profile and package permission binding, the user's broadband online automatic account opening operation is completed.

[0036] Step S103: When the target terminal accesses the access device of the target clustering scenario and no authentication session is established, the access device is coordinated to push a customized portal page exclusive to the target clustering scenario to the target terminal.

[0037] Specifically, after the target terminal connects to the access device in the corresponding cluster scenario via wired or wireless means, the access device will assign a local area network IP address to the terminal and check whether the terminal has a valid network authentication session. If the detection determines that the terminal has not yet established an authentication session, the access device will intercept the external network access request initiated by the terminal and trigger a page redirection mechanism. The cloud platform, in collaboration with the access device, will retrieve the customized portal page pre-bound to the target cluster scenario to which the terminal belongs and distribute it to the terminal for display. The access device is either a BRAS (Broadband Remote Access Server) or a BNC (Broadband Network Core).

[0038] Step S104: Receive the authentication information submitted by the target terminal through the customized portal page, and complete interactive authentication with the operator's authentication system through the access device based on the broadband dial-up authentication account.

[0039] Specifically, the authentication information is the identity verification data entered by the target terminal user on the customized portal page. The operator authentication system is a remote authentication dial-up user service RADIUS server, and the interactive authentication is completed using a challenge and response authentication protocol. The challenge and response authentication protocol is CHAP (Challenge Handshake Authentication Protocol) based on the MD5 (Message-Digest Algorithm 5) encryption algorithm.

[0040] In some embodiments, the authentication information includes the user's identity identifier and password, and the interactive authentication based on the broadband dial-up authentication account, performed via the access device and the operator's authentication system, specifically includes: The user identity identifier is mapped to the broadband dial-up authentication account according to the account translation rules. Based on the broadband dial-up authentication account and the password, the authentication result is obtained by performing a challenge and response interaction authentication process with the operator's authentication system through the access device.

[0041] Specifically, the authentication information uploaded by the target terminal mainly includes an identity identifier used to uniquely identify the user and the user's pre-set internet access password. The cloud platform calls the account translation rules stored under the current virtual tenant to remap the user identity identifier submitted for authentication to the corresponding broadband dial-up authentication account on the operator's side. Based on this account, the identity verification is completed using a challenge-response encrypted interaction method. The operator's authentication system sends a random challenge value to the access device, and after combining it with the user's password for encrypted verification, it returns the final authentication pass or authentication failure result, thereby effectively avoiding the network security risks caused by the plaintext transmission of account passwords.

[0042] Step S105: In response to successful authentication, the operator's billing system is triggered to initiate the billing process for the target terminal.

[0043] Specifically, after successful authentication, the operator authentication system returns an authentication success message to the access device. Based on this successful authentication message, the access device updates the target terminal's session state to authenticated, allowing the target terminal to access Internet resources. At the same time, the access device sends a billing start request to the operator billing system. Upon receiving the billing start request, the operator billing system starts billing statistics for the target terminal's network usage data.

[0044] In some embodiments, the method further includes at least one of the following: In response to receiving an editing instruction for the customized portal page, the system performs add, delete, or modify operations on the customized portal page according to the editing instruction; In response to the policy configuration command for the target terminal, differentiated bandwidth, duration, or network priority are allocated to the target terminal; In response to the instruction to activate value-added services, activate network security protection or dual-exit acceleration value-added services for the target terminal; Obtain the link quality parameters of the target clustering scenario and generate visual monitoring information.

[0045] Specifically, operations and maintenance personnel can issue portal page editing commands based on the operational and promotional needs of clustering scenarios, performing operations such as adding, deleting, or modifying content on display modules and business entry points within the page, flexibly adjusting the portal's displayed content; they can also issue policy configuration commands based on the business permissions of different users, configuring differentiated network bandwidth limits, available internet access time, and data transmission priorities for different terminals; they can activate various value-added network services for corresponding terminals based on user-submitted application commands, for example, configuring value-added capabilities such as network security protection and dual-line exit acceleration; the cloud platform can periodically collect link quality parameters such as link latency, packet loss rate, and bandwidth utilization in the target clustering scenario, organize and statistically analyze the collected multi-dimensional operational data, and generate visual charts, making it convenient for operations and maintenance personnel to intuitively view the overall network operating status and promptly detect network anomalies.

[0046] Taking a campus as an example, Figure 2 The diagram illustrates the network architecture of the campus hyperconverged platform (hereinafter referred to as the cloud platform), with two target clustering scenarios, Campus A and Campus B, selected as typical deployment cases. User terminals within each campus can access the local network wirelessly via APs (Access Points) or wired via switches. Service traffic is aggregated to the campus hyperconverged platform via BRAS and BNC edge devices. This campus hyperconverged platform is equipped with a campus general component platform, an edge collaborative scheduling module, an operation and billing module, and a campus authentication and billing module. It can uniformly complete functions such as broadband self-service acceptance, automatic account translation, internet access authentication, differentiated network policy configuration, and link visualization operation and maintenance in multiple campus scenarios. Simultaneously, it can connect to the authentication and billing systems of multiple operators to achieve unified activation and billing management of broadband services across multiple scenarios.

[0047] based on Figure 2 The network architecture diagram shown, taking a school as an example of a target clustering scenario, illustrates that the broadband access operation method may include the following steps: Step 1: Tenant Creation and Portal Customization A corresponding virtual tenant is created for the school within the cloud platform. A virtual tenant is a logically isolated, independent operating space within the cloud platform; data between virtual tenants of different schools is isolated and does not interfere with each other. After tenant creation, based on the business negotiations with the school, a customized Portal page is generated specifically for the school, tailored to its management needs and usage scenarios. This customized Portal page has the ability to add, delete, modify, review, and preview templates. After customization, the Portal page is associated and bound to the Service Set Identifier (SSID) configured for the school. Since different schools each have independent SSIDs, the cloud platform can subsequently identify the target cluster scenario to which the terminal belongs based on the SSID corresponding to the terminal's network access, quickly matching and pushing the exclusive Portal page bound to that scenario. After the above software deployment is completed, the cloud platform provides the Portal page to telecom operators and school faculty and students.

[0048] Step 2: The user initiates a service activation request. Taking student Xiaoming as an example, after enrolling in school, Xiaoming chose to use the school's WiFi network. The school's WiFi network is managed independently by each of the three major internet service providers (ISPs). Xiaoming scanned a QR code posted in a public area of ​​the school using his mobile phone. After scanning, his phone was redirected to a broadband service activation page, which was embedded in the ISP's portal interface. On this page, Xiaoming filled in his personal information, including his username, ID card number, uploaded an image of his ID card, selected the desired data plan, confirmed, submitted the application, and completed the payment. This information was then uploaded to the ISP's management interface via a cloud platform.

[0049] Step 3: The platform automatically completes account translation and operator-side account opening.

[0050] The three-tiered operator side has a pre-configured automatic package matching strategy. After receiving the user's activation request, the cloud platform automatically matches the corresponding operator package plan according to this strategy. Simultaneously, the cloud platform calls the account translation rules configured under the school's virtual tenant, using Xiaoming's ID number as a unique identifier throughout the process, mapping it to a self-coded broadband dial-up authentication account that conforms to the operator's authentication system coding specifications, thus completing the translation from user identity to operator broadband dial-up authentication account. After translation, the cloud platform encapsulates the generated broadband dial-up authentication account and selected package information into a service activation message, and sends it to the activation center through the standardized interface of the centralized business support system (CBSS). Upon receiving the order, the activation center synchronizes the user's broadband dial-up authentication account and package permission configuration data to the RADIUS server via the order broker system (OBS). After the RADIUS server completes the user account creation and package permission binding, the service activation for the user on the operator side is complete. The OBS then transmits the service data generated during the activation process back to the three-tiered operator's management interface for presentation. The data flow diagram for broadband service activation is shown below. Figure 3 As shown.

[0051] Step 4: Terminal access and trigger Portal redirection

[0052] Xiaoming turns on his phone's Wi-Fi and connects to the wireless access point (AP) deployed at the school. The phone and the access device BRAS / BNC sequentially complete wireless probe request and response, authentication, and association interactions, successfully connecting to the BRAS / BNC network. After connection, the BRAS / BNC assigns Xiaoming's phone an IP (Internet Protocol) address, granting the phone basic network layer connectivity. However, at this point, authentication is not yet complete, and internet access is still unavailable.

[0053] When Xiaoming opened his mobile browser and tried to access any website, an HTTP (Hypertext Transfer Protocol) request was sent to BRAS / BNC. BRAS / BNC detected that the terminal had not yet established a valid authentication session, and then intercepted the HTTP request, redirecting it to the URL (Uniform Resource Locator) address of a customized portal page bound to the school's SSID in the cloud platform. Xiaoming's mobile browser was forced to jump to this customized portal page.

[0054] Step 5: Submit authentication information and perform challenge-response authentication

[0055] Xiaoming enters his personal identification and preset internet password on the Portal page. The terminal uploads the authentication information to the cloud platform via HTTPS. The cloud platform retrieves the account translation rules of the virtual tenant and maps the user's submitted identity to the operator's broadband dial-up authentication account. After the Portal server and BRAS / BNC complete the challenge-response security interaction, BRAS / BNC sends an access authentication request to the RADIUS server carrying the account, password, and challenge verification information.

[0056] After the RADIUS server completes the user information verification, it returns an authentication success or failure result to BRAS / BNC. The authentication result is synchronized to the cloud platform Portal page via BRAS / BNC and pushed to the user terminal for display. If the authentication verification is successful, BRAS / BNC updates the terminal session status to authenticated, granting the terminal permission to access the Internet and allowing the user to access Internet resources.

[0057] Step Six: Start Billing Statistics

[0058] After successful authentication, BRAS / BNC sends a billing start request message to the RADIUS server. The RADIUS server returns the corresponding billing response message, and the billing statistics are officially carried out based on the user's broadband dial-up authentication account, and the terminal's Internet access time and traffic usage data are calculated.

[0059] At this point, Xiaoming has completed the entire broadband service application process, from self-service account opening via QR code, automatic account translation, online account opening with the operator, to seamless internet access authentication and billing on the terminal.

[0060] It should be noted that the broadband access operation method provided in this disclosure, by constructing an identity authentication system and information management of network resource data, can achieve end-to-end visual control capabilities, and can monitor end-to-end network quality and authentication success rate, promptly discovering deep-seated business problems that manifest as faults and reduced authentication success rate, thereby improving overall service quality.

[0061] The broadband access operation method provided in this disclosure automatically converts the user's identity identifier into the operator's broadband dial-up authentication account based on preset account translation rules and simultaneously completes the service activation by receiving a broadband service activation request initiated by the terminal via QR code scanning. This eliminates tedious operations such as manual data entry and table import, significantly reducing the time required for broadband service acceptance and activation, and enabling second-level online self-service processing, effectively improving the overall operational efficiency of broadband services. Simultaneously, by leveraging the automatic account translation mechanism to link two independent account systems, real-time matching and cross-system synchronous transfer of the user's identity identifier and the operator's broadband dial-up authentication account are achieved, ensuring a smooth and efficient entire process of service activation and authentication. Furthermore, when the terminal has not established an authentication session, a corresponding customized portal page is pushed to it based on the terminal's clustering scenario. This allows for precise distribution of portal pages according to application scenarios, enabling the adaptation of differentiated portal pages to meet the business operation needs of different clustering scenarios and optimizing the user experience for service processing and internet access authentication. This solves the problems of low activation efficiency, inability to automatically transfer account systems, and lack of scenario-customizable portal page attributes in existing broadband access operation methods based on dial-up access.

[0062] It is understood that the various method embodiments mentioned above in this disclosure can be combined with each other to form combined embodiments without violating the principle and logic. Due to space limitations, this disclosure will not elaborate further. Those skilled in the art will understand that in the above methods of specific implementation, the specific execution order of each step should be determined by its function and possible internal logic.

[0063] Figure 4 This is a block diagram of a broadband access operation device provided in an embodiment of the present disclosure.

[0064] Reference Figure 4 This disclosure provides a broadband access operation apparatus for executing the above-described broadband access operation method. The apparatus includes: The activation request receiving module 11 is used to receive broadband service activation requests initiated by target terminals in the target clustering scenario via QR code interaction. The broadband service activation request carries user identity identifier and selected package information. Broadband activation module 12, connected to activation request receiving module 11, is used to translate the user identity identifier into the broadband dial-up authentication account of the corresponding operator according to the account translation rules corresponding to the target virtual tenant, based on the broadband service activation request, and synchronize the broadband dial-up authentication account and the selected package information to the operator activation system to complete the broadband service activation of the target user, wherein the target clustering scenario corresponds one-to-one with the target virtual tenant; The portal page push module 13 is connected to the broadband activation module 12 and is used to push a customized portal page exclusive to the target clustering scenario to the target terminal in coordination with the access device when the target terminal accesses the access device of the target clustering scenario and no authentication session is established. The interactive authentication module 14 is connected to the portal page push module 13 and is used to receive the authentication information submitted by the target terminal through the customized portal page, and complete interactive authentication with the operator authentication system through the access device based on the broadband dial-up authentication account. The billing process initiation module 15 is connected to the interactive authentication module 14 and is used to trigger the operator's billing system to initiate the billing process for the target terminal in response to successful authentication.

[0065] Optionally, the device further includes: The virtual tenant creation module is used to create a target virtual tenant corresponding to the target clustering scenario in the cloud platform in response to the virtual tenant creation instruction for the target clustering scenario, wherein the target virtual tenant is isolated from other virtual tenants in the cloud platform.

[0066] Optionally, the device further includes: The portal page customization module is used to customize and generate a portal page specific to the target clustering scenario. The association and binding module is used to associate and bind the customized portal page with the service set identifier (SSID) of the target clustering scenario.

[0067] Optionally, the broadband activation module 12 includes: The translation rule acquisition unit is used to acquire the account translation rule corresponding to the target virtual tenant; The account translation unit is used to map the user identity identifier to a self-coded broadband dial-up account that conforms to the encoding specifications of the operator's authentication system according to the account translation rules, and to use the self-coded broadband dial-up account as the broadband dial-up authentication account.

[0068] Optionally, the broadband activation module 12 further includes: The broadband activation unit is used to send the broadband dial-up authentication account and the selected package information to the activation center through the interface of the centralized business support system CBSS. The activation center then synchronizes the broadband dial-up authentication account and the selected package information to the remote authentication dial-up user service RADIUS server via the order agent system OBS, so as to complete the broadband service account activation for the target user in the RADIUS server.

[0069] Optionally, the authentication information includes the user's identity identifier and password, and the interactive authentication module 14 includes: The identifier mapping unit is used to map the user identity identifier to the broadband dial-up authentication account according to the account translation rules. The response interaction unit is used to perform a challenge and response interaction authentication process with the operator's authentication system through the access device based on the broadband dial-up authentication account and the password, and obtain the authentication result.

[0070] Optionally, the device further includes at least one of the following: The page editing module is used to respond to receiving an editing instruction for the customized portal page, and to perform add, delete or modify operations on the customized portal page according to the editing instruction; The policy configuration module is used to allocate differentiated bandwidth, duration or network priority to the target terminal in response to the policy configuration command for the target terminal. The value-added service activation module is used to activate network security protection or dual-exit acceleration value-added services for the target terminal in response to the value-added service activation command. The visualization module is used to obtain the link quality parameters of the target clustering scenario and generate visual monitoring information.

[0071] Figure 5 This is a block diagram of an electronic device provided in an embodiment of the present disclosure.

[0072] Reference Figure 5 This disclosure provides an electronic device, which includes: at least one processor 701; at least one memory 702; and one or more I / O interfaces 703 connected between the processor 701 and the memory 702; wherein the memory 702 stores one or more computer programs that can be executed by the at least one processor 701, and the one or more computer programs are executed by the at least one processor 701 to enable the at least one processor 701 to perform the above-described broadband access operation method.

[0073] This disclosure also provides a computer-readable storage medium storing a computer program thereon, wherein the computer program, when executed by a processor, implements the aforementioned broadband access operation method. The computer-readable storage medium may be volatile or non-volatile.

[0074] In summary, the broadband access operation method, apparatus, electronic device, and storage medium provided in this disclosure automatically converts the user's identity identifier into the operator's broadband dial-up authentication account and simultaneously completes the service activation by receiving a broadband service activation request initiated by the terminal via QR code scanning interaction, based on preset account translation rules. This eliminates tedious operations such as manual data entry and table import, significantly reducing the time required for broadband service acceptance and activation, achieving second-level online self-service processing, and effectively improving the overall operational efficiency of broadband services. Simultaneously, by leveraging the automatic account translation mechanism to link two independent account systems, real-time matching and cross-system synchronous transfer of the user's identity identifier and the operator's broadband dial-up authentication account are achieved, ensuring a smooth and efficient entire process of service activation and authentication interaction. Furthermore, when the terminal has not established an authentication session, a corresponding customized portal page is pushed to it according to the clustering scenario to which the terminal belongs. This enables precise distribution of portal pages according to application scenarios, allowing for adaptation to the business operation needs of different clustering scenarios through differentiated portal pages, thus optimizing the user's service processing and internet access authentication experience. This solves the problems of low activation efficiency, inability to automatically transfer account systems, and lack of scenario customization attributes in existing broadband access operation methods based on dial-up access mode.

[0075] Those skilled in the art will understand that all or some of the steps, systems, and apparatuses disclosed above, and their functional modules / units, can be implemented as software, firmware, hardware, or suitable combinations thereof. In hardware implementations, the division between functional modules / units mentioned above does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed collaboratively by several physical components. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit (ASIC). Such software can be distributed on a computer-readable storage medium, which may include computer storage media (or non-transitory media) and communication media (or transient media).

[0076] As is known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information, such as computer-readable program instructions, data structures, program modules, or other data. Computer storage media includes, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), static random access memory (SRAM), flash memory or other memory technologies, portable compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical disc storage, magnetic cartridges, magnetic tape, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and is accessible to a computer. Furthermore, it is known to those skilled in the art that communication media typically contain computer-readable program instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and may include any information delivery medium.

[0077] The computer-readable program instructions described herein can be downloaded from computer-readable storage media to various computing / processing devices, or downloaded via a network, such as the Internet, local area network, wide area network, and / or wireless network, to an external computer or external storage device. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers, and / or edge servers. A network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards them to the computer-readable storage media in the respective computing / processing device.

[0078] Computer program instructions used to perform the operations of this disclosure may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, status setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk, C++, etc., and conventional procedural programming languages ​​such as the "C" language or similar programming languages. The computer-readable program instructions may execute entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or may be connected to an external computer (e.g., via the Internet using an Internet service provider). In some embodiments, electronic circuitry, such as programmable logic circuitry, field-programmable gate arrays (FPGAs), or programmable logic arrays (PLAs), is personalized by utilizing the status information of the computer-readable program instructions to implement various aspects of this disclosure.

[0079] This disclosure has disclosed exemplary embodiments, and although specific terminology has been used, it is for general illustrative purposes only and should not be construed as limiting. In some instances, it will be apparent to those skilled in the art that features, characteristics, and / or elements described in conjunction with particular embodiments may be used alone, or in combination with features, characteristics, and / or elements described in conjunction with other embodiments, unless otherwise expressly indicated. Therefore, those skilled in the art will understand that various changes in form and detail may be made without departing from the scope of this disclosure as set forth by the appended claims.

Claims

1. A broadband access operation method, characterized in that, The method includes: Receive broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction, the broadband service activation request carrying user identity identifier and selected package information; According to the broadband service activation request, the user identity identifier is translated into the broadband dial-up authentication account of the corresponding operator according to the account translation rules corresponding to the target virtual tenant, and the broadband dial-up authentication account and the selected package information are synchronized to the operator's activation system to complete the broadband service activation of the target user. The target clustering scenario corresponds one-to-one with the target virtual tenant. When the target terminal accesses the access device of the target clustering scenario without establishing an authentication session, the access device will push a customized portal page exclusive to the target clustering scenario to the target terminal. The system receives authentication information submitted by the target terminal through the customized portal page, and completes interactive authentication with the operator's authentication system via the access device based on the broadband dial-up authentication account. Upon successful authentication, the operator's billing system is triggered to initiate the billing process for the target terminal.

2. The method according to claim 1, characterized in that, Before receiving the broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction, the method further includes: In response to the virtual tenant creation instruction for the target clustering scenario, a target virtual tenant corresponding to the target clustering scenario is created in the cloud platform, wherein the target virtual tenant is isolated from other virtual tenants in the cloud platform.

3. The method according to claim 1, characterized in that, Before receiving the broadband service activation request initiated by the target terminal in the target clustering scenario via QR code interaction, the method further includes: A customized portal page specifically for the target clustering scenario is generated. The customized portal page is associated and bound with the Service Set Identifier (SSID) of the target clustering scenario.

4. The method according to claim 1, characterized in that, The step of translating the user identity identifier into the corresponding operator's broadband dial-up authentication account according to the broadband service activation request and the account translation rules corresponding to the target virtual tenant specifically includes: Obtain the account translation rules corresponding to the target virtual tenant; According to the account translation rules, the user identity identifier is mapped to a self-coded broadband dial-up account that conforms to the encoding specifications of the operator's authentication system, and the self-coded broadband dial-up account is used as the broadband dial-up authentication account.

5. The method according to claim 1, characterized in that, The step of synchronizing the broadband dial-up authentication account and the selected package information to the operator's activation system to complete the broadband service activation for the target user specifically includes: Through the interface of the Central Business Support System (CBSS), the broadband dial-up authentication account and the selected package information are sent to the activation center. The activation center then synchronizes the broadband dial-up authentication account and the selected package information to the Remote Authentication Dial-up User Service (RADIUS) server via the Order Agent System (OBS) so that the broadband service account opening for the target user can be completed on the RADIUS server.

6. The method according to claim 1, characterized in that, The authentication information includes the user's identity identifier and password. The authentication process, based on the broadband dial-up authentication account, involves interactive authentication between the access device and the operator's authentication system, specifically including: The user identity identifier is mapped to the broadband dial-up authentication account according to the account translation rules. Based on the broadband dial-up authentication account and the password, the authentication result is obtained by performing a challenge and response interaction authentication process with the operator's authentication system through the access device.

7. The method according to claim 1, characterized in that, The method further includes at least one of the following: In response to receiving an editing instruction for the customized portal page, the system performs add, delete, or modify operations on the customized portal page according to the editing instruction; In response to the policy configuration command for the target terminal, differentiated bandwidth, duration, or network priority are allocated to the target terminal; In response to the instruction to activate value-added services, activate network security protection or dual-exit acceleration value-added services for the target terminal; Obtain the link quality parameters of the target clustering scenario and generate visual monitoring information.

8. A broadband access operation device, characterized in that, The device includes: The activation request receiving module is used to receive broadband service activation requests initiated by target terminals in the target clustering scenario via QR code interaction. The broadband service activation request carries the user's identity identifier and the selected package information. The broadband activation module, connected to the activation request receiving module, is used to translate the user identity identifier into the broadband dial-up authentication account of the corresponding operator according to the account translation rules corresponding to the target virtual tenant, based on the broadband service activation request, and synchronize the broadband dial-up authentication account and the selected package information to the operator's activation system to complete the broadband service activation of the target user. The target clustering scenario corresponds one-to-one with the target virtual tenant. The portal page push module, connected to the broadband activation module, is used to push a customized portal page exclusive to the target clustering scenario to the target terminal in coordination with the access device when the target terminal accesses the access device of the target clustering scenario and no authentication session is established. An interactive authentication module, connected to the portal page push module, is used to receive authentication information submitted by the target terminal through the customized portal page, and complete interactive authentication with the operator's authentication system through the access device based on the broadband dial-up authentication account. The billing process initiation module is connected to the interactive authentication module and is used to trigger the operator's billing system to initiate the billing process for the target terminal in response to successful authentication.

9. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores one or more computer programs that can be executed by the at least one processor, the one or more computer programs being executed by the at least one processor to enable the at least one processor to perform the broadband access operation method as described in any one of claims 1-7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the broadband access operation method as described in any one of claims 1-7.

Images