System and method for restricting user access of a deactivated user in a communication network
The system addresses the issue of unrestricted access by deactivated users by determining inactivity based on login timestamps, generating pop-up messages, and disabling accounts, ensuring secure access control in wireless communication networks.
Patent Information
- Application Number
- PCT/IN2025/051228
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2024-08-28
- Filing Date
- 2025-08-11
- Publication Date
- 2026-03-05
AI Technical Summary
Existing methods fail to restrict access of deactivated users via mobile applications in wireless communication networks, allowing them to access data and services despite account deactivation on web portals.
A system and method that includes receiving user login requests, determining user status based on last login timestamp, generating a pop-up message indicating deactivation, and controlling the display of this message on the user interface to restrict access, while updating the user status and disabling the account if inactive.
Effectively restricts access of deactivated users, maintaining data security by preventing unauthorized access and prompting users to reactivate their accounts through pop-up messages.
Smart Images

Figure IN2025051228_05032026_PF_FP_ABST
Abstract
Description
SYSTEM AND METHOD FOR RESTRICTING USER ACCESS OF A DEACTIVATED USER IN A COMMUNICATION NETWORKTECHNICAL FIELD
[0001] The embodiments of the present disclosure generally relate to the field of communication networks and systems. More particularly, the present disclosure relates to a system and a method for restricting user access of a deactivated user in a wireless communication network.BACKGROUND OF THE INVENTION
[0002] The subject matter disclosed in the background section should not be assumed or construed to be prior art merely due to its mention in the background section. Similarly, any problem statement mentioned in the background section or its association with the subject matter of the background section should not be assumed or construed to have been previously recognized in the prior art.
[0003] With recent advancements in communication networks, there is a massive increase in the number of users latched to a communication network. The users access various services via an application on a mobile device or web portal. In existing method, for accessing the services if a user does not make a login on the mobile device or the web portal for a number of days (for example 60 days), user account for accessing services gets deactivated in oracle table.
[0004] After the deactivation of the services the user is not able to log in via the web portal. However, the existing methods do not restrict the deactivated user from accessing certain data and services via the application on the mobile device.
[0005] In light of the aforementioned challenges, there is a need for a system and method that can address the above-mentioned issue of restricting user access via the application on the mobile device in a wireless communication network.SUMMARY
[0006] The following embodiments present a simplified summary in order to provide a basic understanding of some aspects of the disclosed invention. This summary is not an extensive overview, and it is not intended to identify key / critical elements or to delineate the scope thereof. Its sole purpose is to present some concepts in a simplified form as a prelude to the more detailed description that is presented later.
[0007] In an embodiment, a method for restricting user access of a deactivated user in a wireless communication network is disclosed. The method includes receiving, by a reception module from a user device, a request of a user to login with user credentials to access a user account. The method further includes determining, by a determination module upon receiving the request, a status of the user based on last login timestamp of the user stored in a database. Further, the method includes generating, by an output module in response to determining that the status of the user is inactive, a pop-up message indicating that the user access is deactivated. Furthermore, the method includes controlling, by a display control module, display of the pop-up message on a User Interface (UI) of the user device thereby restricting the user access of the deactivated user.
[0008] According to some aspect of the present disclosure, for determining the status of the user, the method includes fetching, by the determination module from the database, the last login timestamp of the user. Further, the method includes determining, by the determination module, that the status of user in inactive if the last login timestamp of the user indicates that the user has not logged-in for a specific number of days.
[0009] According to some aspect of the present disclosure, the method further includes fetching, a database management module, details of the user from the database based on the status of the user, wherein the pop-up message is generated using the fetched details of the user.
[0010] According to some aspect of the present disclosure, the method further includes updating, by a database management module, the status of user in the database as inactive if the user has not logged-in for a specific number of days from the last login day.
[0011] According to some aspect of the present disclosure, the method further includes restricting, by an access control module, the user access by disabling the user account in response to determining that the status of the user is inactive.
[0012] According to another aspect of the present disclosure, a system for restricting user access of a deactivated user in a wireless communication network is disclosed. The system includes a reception module configured to receive, from a user device, a request of a user to login with user credentials to access a user account. Further, the system includes a determination module configured to determine, upon receiving the request, a status of the user based on last login timestamp of the user stored in a database. Further, the system includes an output module configured to generate, in response to determining that the status of the user is inactive, a pop-up message indicating that the user access is deactivated. Furthermore, the system includes a display control module configured to control, display of the pop-up message on a User Interface (UI) of the user device thereby restricting the user access of the deactivated user.BRIEF DESCRIPTION OF DRAWINGS
[0013] Various embodiments disclosed herein will become better understood from the following detailed description when read with the accompanying drawings. The accompanying drawings constitute a part of the present disclosure and illustrate certain non-limiting embodiments of inventive concepts. Further, components and elements shown in the drawings are not necessarily to scale, emphasis instead being placed upon clearly illustrating the principles of the present disclosure. For the purpose of consistency and ease of understanding, similar components and elements are annotated by reference numerals in the exemplary drawings.
[0014] FIG. 1 illustrates a diagram depicting an exemplary wireless communication network, in accordance with an embodiment of the present disclosure.
[0015] FIG. 2 illustrates a diagram depicting a system for restricting user access of a deactivated user in the wireless communication network, in accordance with an embodiment of the present disclosure.
[0016] FIG. 3 illustrates a block diagram of an application server of the system, in accordance with an embodiment of the present disclosure.
[0017] FIG. 4 illustrates a flowchart of a method for restricting the user access of the deactivated user in the wireless communication network, in accordance with an embodiment of the present disclosure.
[0018] FIG. 5 illustrates a schematic block diagram of a computing system for restricting the user access of the deactivated user in the wireless communication network, in accordance with an embodiment of the present disclosure.DETAILED DESCRIPTION OF THE INVENTION
[0019] Inventive concepts of the present disclosure will now be described more fully hereinafter with reference to the accompanying drawings, in which examples of one or more embodiments of inventive concepts are shown. Inventive concepts may, however, be embodied in different forms and should not be construed as limited to the embodiments set forth herein. Further, the one or more embodiments disclosed herein are provided to describe the inventive concept thoroughly and completely, and to fully convey the scope of each of the present inventive concepts to those skilled in the art. Furthermore, it should be noted that the embodiments disclosed herein are not mutually exclusive concepts. Accordingly, one or more components from one embodiment may be tacitly assumed to be present or used in any other embodiment.
[0020] The following description presents various embodiments of the present disclosure. The embodiments disclosed herein are presented as teaching examplesand are not to be construed as limiting the scope of the present disclosure. The present disclosure should in no way be limited to the illustrative implementations, drawings, and techniques illustrated below, including the exemplary design and implementation illustrated and described herein, but may be modified, omitted, or expanded upon without departing from the scope of the present disclosure.
[0021] The following description contains specific information pertaining to embodiments in the present disclosure. The detailed description uses the phrases “in some embodiments” or “some implementations” which may each refer to one or more or all of the same or different embodiments or implementations. The term “some” as used herein is defined as “one, or more than one, or all.” Accordingly, the terms “one,” “more than one,” “more than one, but not all” or “all” would all fall under the definition of “some.” In view of the same, the terms, for example, “in an embodiment” or “in an implementation” refers to one embodiment or one implementation and the term, for example, “in one or more embodiments” refers to “at least one embodiment, or more than one embodiment, or all embodiments ”. Further, the term, for example, “in one or more implementations” refers to “at least one implementation, or more than one implementation, or all implementations.
[0022] The term “comprising,” when utilized, means “including, but not necessarily limited to;” it specifically indicates open-ended inclusion in the so-described one or more listed features, elements in a combination, unless otherwise stated with limiting language. Furthermore, to the extent that the terms “includes,” “has,” “have,” “contains,” and other similar words are used in either the detailed description, such terms are intended to be inclusive in a manner similar to the term “comprising.”
[0023] In the following description, for the purposes of explanation, various specific details are set forth in order to provide a thorough understanding of embodiments of the present disclosure. It will be apparent, however, that embodiments of the present disclosure may be practiced without these specificdetails. Several features described hereafter can each be used independently of one another or with any combination of other features.
[0024] The description provided herein discloses exemplary embodiments only and is not intended to limit the scope, applicability, or configuration of the present disclosure. Rather, the foregoing description of the exemplary embodiments will provide those skilled in the art with an enabling description for implementing any of the exemplary embodiments. Specific details are given in the following description to provide a thorough understanding of the embodiments. However, it may be understood by one of the ordinary skilled in the art that the embodiments disclosed herein may be practiced without these specific details.
[0025] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. As used herein the description, the singular forms "a", "an", and "the" include plural forms unless the context of the invention indicates otherwise.
[0026] The terminology and structure employed herein are for describing, teaching, and illuminating some embodiments and their specific features and elements and do not limit, restrict, or reduce the scope of the present disclosure. Accordingly, unless otherwise defined, all terms, and especially any technical and / or scientific terms, used herein may be taken to have the same meaning as commonly understood by one having ordinary skill in the art.
[0027] The term “user access” in the entire disclosure may refer to permissions or rights granted to a specific user within a system, application or network to consume or access certain resources or services. The user access is managed through authentication process using user credentials given to the specific user.
[0028] The term “user credentials” in the entire disclosure may refer to a unique set of identifiers used to verify an identity of the specific user. In a non-limiting example, the user credentials may include a combination of username and password.In other non-limiting examples, the user credentials may include biometrics, one time password, hardware token, or digital certificates.
[0029] An aspect of the present disclosure is to provide a system and a method for restricting access of a deactivated user. The disclosed system and the method control the access of the deactivated users by restricting the deactivated users to access certain data and services to maintain data security.
[0030] Embodiments of the present disclosure will be described below in detail with reference to the accompanying drawings. FIG. 1 to FIG. 5, discussed below, and the one or more embodiments used to describe the principles of the present disclosure are by way of illustration only and should not be construed in any way to limit the scope of the present disclosure. Those skilled in the art will understand that the principles of the present disclosure may be implemented in any suitably arranged system or device.
[0031] FIG. 1 illustrates a diagram depicting an exemplary wireless communication network 100, in accordance with an embodiment of the present disclosure. The embodiment of the wireless communication network 100 shown in FIG. 1 is for illustration only. Other embodiments of the wireless communication network 100 may be used without departing from the scope of this disclosure.
[0032] As shown in FIG. 1, the wireless communication network 100 includes a network 102, a user device 104, an application server 106, other devices 108, a web server 110, processing modules 112, and a database 114.
[0033] The network 102 may include suitable logic, circuitry, and interfaces that may be configured to provide several network ports and several communication channels for transmission and reception of data related to operations of various entities of the wireless communication network 100. Each network port may correspond to a virtual address (or a physical machine address) for transmission and reception of the communication data. For example, the virtual address may be an Internet Protocol Version 4 (IPV4) (or an IPV6 address) and the physical addressmay be a Media Access Control (MAC) address. The network 102 may be associated with an application layer for implementation of communication protocols based on one or more communication requests from the various entities of the wireless communication network 100. The communication data may be transmitted or received via the communication protocols. Examples of the communication protocols may include, but are not limited to, Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), Simple Mail Transfer Protocol (SMTP), Domain Network System (DNS) protocol, Common Management Interface Protocol (CMIP), Transmission Control Protocol and Internet Protocol (TCP / IP), User Datagram Protocol (UDP), Long Term Evolution (LTE) communication protocols, or any combination thereof. In some aspects of the present disclosure, the communication data may be transmitted or received via at least one communication channel of several communication channels in the network 102. The communication channels may include, but are not limited to, a wireless channel, a wired channel, a combination of wireless and wired channel thereof. The wireless or wired channel may be associated with a data standard which may be defined by one of a Local Area Network (LAN), a Personal Area Network (PAN), a Wireless Local Area Network (WLAN), a Wireless Sensor Network (WSN), Wireless Area Network (WAN), Wireless Wide Area Network (WWAN), a metropolitan area network (MAN), a satellite network, the Internet, an optical fiber network, a coaxial cable network, an infrared (IR) network, a radio frequency (RF) network, and a combination thereof. Aspects of the present disclosure are intended to include or otherwise cover any type of communication channel, including known, related art, and / or later developed technologies.
[0034] The user device 104 may communicate with the application server 106 using one or more applications, for example a client application, installed in the user device 104. The user device 104 may communicate with the application server 106 and with various other entities of the wireless communication network 100 (such as a base station, a core network, and in an external user device) via the network 102 using a communication technique, such as 2nd Generation (2G) communicationtechnology, 3rd Generation (3G) communication technology, Long Term Evolution (LTE), 4th Generation (4G) LTE, 5th Generation (5G) / New Radio (NR), Long Term Evolution Advanced (LTE-A), Worldwide Interoperability for Microwave Access (WiMAX), Wireless Fidelity (Wi-Fi), or other wireless communication techniques with multiple bands and carriers of telecom operators. Typically, the term “user device” can refer to any component such as “mobile station”, “User Equipment”, “remote terminal”, “wireless terminal”, “end user device”, or the like. The user device 104 may include smartphones, tablets, laptops, or desktop computers.
[0035] The application server 106 may be a physical machine, a virtual machine in a cloud environment a network of computers, a software framework, or a combination thereof, that may provide a generalized approach to create a server implementation. Examples of the application server 106 may include, but are not limited to, personal computers, laptops, mini-computers, mainframe computers, any non-transient and tangible machine that can execute a machine-readable code, cloud-based servers, distributed server networks, or a network of computer systems. The application server 106 may be realized through various web-based technologies such as, but not limited to, a Java web -framework, a .NET framework, a personal home page (PHP) framework, or any web-application framework. The application server 106 may handle requests from the user device 104 and may perform a plurality of tasks such as processing, storage, and data retrieval.
[0036] The database 114 may store data received from network components of the wireless communication network 100. For example, the database 114 may store and manage structured data such as user login details and user data. The database 114 may include a relational database or a non-relational database. The relational database is a database system that stores and retrieves data in form of a table organized in rows and columns. The non-relational database is a database system that stores data as individual, unconnected files and can be used for complex, unstructured data types, such as documents or rich media files.
[0037] The web server 110 includes software applications or interfaces that run on the user device 104 to communicate with the application server 106. The web server 110 may be a web browser or the web UI requesting data from the client application running on the user device 104.
[0038] The processing modules 112 may comprise a central processing unit (CPU) and a graphics processing unit (GPU) for performing computations and handling data processing tasks. The CPU may also be referred to as processor. The processor may include one or more general purpose processors and / or one or more special purpose processors, a microprocessor, a digital signal processor, an application specific integrated circuit, a microcontroller, a state machine, or ay any type of programmable logic array.
[0039] The other devices 108 may include at least one of databases such as relational database and non-relational database, an event streaming platform, framework servers, Internet of Things (loT) devices, or any other connected devices to handle or store data required by a user associated with the user device 104 or to transmit signals to nearby user devices.
[0040] FIG. 2 illustrates a diagram depicting a system 200 for restricting user access of a deactivated user in the wireless communication network 100, in accordance with an embodiment of the present disclosure. The system 200 may include the user device 104, a load balancer 202, the web server 110, the application server 106, an application gateway 204, micro services 206, a User Interface (UI) 208, a console host 210, and the database 114.
[0041] The user device 104 may communicate with the application server 106 using the client application for accessing the database 114. In an embodiment, the client application may be installed on the user device 104 to communicate with the application server 106. The user may send a request to login into user account through the client application, which is then forwarded to the web server 110 via the load balancer 202 for further processing.
[0042] The load balancer 202 may be a networking device that distributes and balances the incoming traffic towards the web server 110 to provide high availability, efficient utilization of servers, and high performance. The web server 110 may be a software component that delivers static data like images, files, and text in response to request received from the user device 104. The application server 106 may extend the capabilities of the web server 110 by supporting dynamic content generation, application logic, and integration with various resources. The application server 106 may provide a runtime environment to run application code and interact with other software components, like the application gateway 204, the UI 208, the console host 210, and the database 114.
[0043] The application gateway 204 sends the request from the user to the micro services 206. The micro services 206 may fetch the required data from the database 114 and send the request to the application server 106.
[0044] The console host 210 may include suitable logic, circuitry, interfaces, and / or codes that may be configured to enable the UI 208 to receive input(s) and / or render output(s). In some aspects of the present disclosure, the console host 210 may include suitable logic, instructions, and / or codes for executing various operations of one or more computer executable applications to host a console on an external user device, by way of which the user can trigger the application server 106 to receive input of the user.
[0045] The user device 104, the load balancer 202, and the web server 110 may be inside a Demilitarized Zone (DMZ). The web server 110 located in the DMZ may be bounded by firewalls, for providing secure communications between the user device 104 and back-end systems. The application server 106, the application gateway 204, the UI 208, the console host 210, the micro services 206, and the database 114 may be inside a non-DMZ zone.
[0046] FIG. 3 illustrates a block diagram 300 of the application server 106 of the system 200, in accordance with an embodiment of the present disclosure. The embodiment of the application server 106 as shown in FIG. 3 is for illustration only.However, the application server 106 may come in a wide variety of configurations, and FIG. 3 does not limit the scope of the present disclosure to any particular implementation of the application server 106.
[0047] As shown in FIG. 3, the application server 106 includes an Input-Output (VO) interface 302, one or more processors 304 (hereinafter may also be referred to as “processor 304”), a memory 306, a network communication manager 308, the console host 210, the database 114, and the processing modules 112. Components of the application server 106 are coupled to each other via a communication bus 322.
[0048] The I / O interface 302 may include suitable logic, circuitry, interfaces, and / or codes that may be configured to receive input(s) and present (or display) output(s) on the application server 106. For example, the I / O interface 302 may have an input interface and an output interface. The input interface may be configured to enable a user to provide input(s) to trigger (or configure) the application server 106 to perform various operations. Examples of the input interface may include, but are not limited to, a touch interface, a mouse, a keyboard, a motion recognition unit, a gesture recognition unit, a voice recognition unit, or the like. Aspects of the present disclosure are intended to include or otherwise cover any type of the input interface including known, related art, and / or later developed technologies without deviating from the scope of the present disclosure. The output interface is configured to control the user device 104 to display pop-up messages to the user. Examples of the output interface of the I / O interface 302 may include, but are not limited to, a digital display, an analog display, a touch screen display, an appearance of a desktop, and / or illuminated characters. In one or more embodiments, the VO interface 302 may include the UI 208.
[0049] The processor 304 may include various processing circuitry and communicates with the memory 306, the network communication manager 308, the console host 210, and the database 114 via the communication bus 322. The processor 304 is configured to execute instructions 306A (hereinafter also referredto as “a set of instructions 306 A”) stored in the memory 306 and to perform various processes. The processor 304 may include one or a plurality of processors, including a general-purpose processor, such as, for example, and without limitation, a central processing unit (CPU), an application processor (AP), a dedicated processor, a graphics-only processing unit such as a graphics processing unit (GPU) or the like, a programmable logic device, or any combination thereof.
[0050] The memory 306 stores the set of instructions 306A required by the processor 304 of the application server 106 for controlling its overall operations. The memory 306 may include non-volatile storage elements. Examples of such nonvolatile storage elements may include magnetic hard discs, optical discs, floppy discs, flash memories, or forms of electrically programmable memories (EPROM) or electrically erasable and programmable (EEPROM) memories. In addition, the memory 306 may, in some examples, be considered a non -transitory storage medium. The "non-transitory" storage medium is not embodied in a carrier wave or a propagated signal. However, the term "non-transitory" should not be interpreted as the memory 306 is non-movable. In some examples, the memory 306 may be configured to store larger amounts of information. In certain examples, a non- transitory storage medium may store data that can, over time, change (e.g., in Random Access Memory (RAM) or cache). The memory 306 may be an internal storage unit or an external storage unit of the application server 106, cloud storage, or any other type of external storage. In certain examples, the memory 306 configured as the non-transitory storage medium may include hard drives, solid- state drives, flash drives, Compact Disk (CD), Digital Video Disk (DVD), and the like. Further, the memory 306 may include any type of non-transitory storage medium, without deviating from the scope of the present disclosure.
[0051] More specifically, the memory 306 may store computer-readable instructions 306 A including instructions that, when executed by a processor (e.g., the processor 304) cause the application server 106 to perform various functions described herein. In some cases, the memory 306 may contain, among other things,a BIOS which may control basic hardware or software operation such as the interaction with peripheral components or devices.
[0052] The network communication manager 308 may manage communications with a core network or the user device 104 (e.g., via one or more wired backhaul links). For example, the network communications manager 308 may manage the transfer of data communications for the user device 104 and client devices. The network communication manager 308 may include an electronic circuit specific to a standard that enables wired or wireless communication. The network communication manager 308 is configured for communicating with external devices via one or more networks.
[0053] The console host 210 may include suitable logic, instructions, and / or codes for executing various operations of one or more computer executable applications to host the console on the external user device, by way of which the user can trigger the application server 106 to receive input of the user. In some other aspects of the present disclosure, the console host 210 may provide a Graphical User Interface (GUI) for the application server 106 for user interaction.
[0054] The database 114 is managed by the processor 304 and configured to store the data such as a detail of a user account including the user login details and the user data. The database 114 may also store last login timestamps of users for each user accounts. Further, the database 114 may also store an status of the user or the user account as one of active or inactive.
[0055] The processing module(s) 112 may be implemented as a combination of hardware and programming (for example, programmable instructions) to implement one or more functionalities of the application server 106. In non-limiting examples, described herein, such combinations of hardware and programming may be implemented in several different ways. For example, the programming for the processing modules(s) 112 may be processor-executable instructions stored on a non-transitory machine-readable storage medium and the hardware for the processor 304 may comprise a processing resource (for example, one or more processors), toexecute such instructions. In the present examples, the machine-readable storage medium may store instructions that, when executed by the processing resource, implement the processing module(s) 112. In such examples, the application server 106 may also comprise the machine-readable storage medium storing the instructions and the processing resource to execute the instructions, or the machine- readable storage medium may be separate but accessible to the application server 106 and the processing resource. In other examples, the processing module(s) 112 may be implemented using an electronic circuitry.
[0056] In one or more embodiments, the processing module(s) 112 may include a reception module 310, a determination module 312, an output module 314, a display control module 316, a database management module 318, an access control module 320.
[0057] In an embodiment, the processor 304, using the reception module 310, may receive a request of the user to login with the user credentials to access the user account. For instance, the user may send the request by performing one or more input operations on a User Interface (UI) of the client application installed on the user device 104. The one or more input operations may correspond to operations for inputting the user credential on the UI of to access the user account via the client application.
[0058] Upon receiving the request, the processor 304, using the determination module 312, may determine a status of the user based on last login timestamp of the user stored in the database 114. For instance, to determine the status of the user, the processor 304 may fetch the last login timestamp of the user from the database 114. The last login timestamp may refer to information of last login day of the user. Thereafter, the processor 304 may determine the status of the user based on the fetched information. For instance, the processor 304 may determine that the status of user in inactive if the last login timestamp of the user indicates that the user has not logged-in for a specific number of days. The processor 304 may first compare the last login timestamp with a current timestamp and determine that the status ofthe user based a result of the comparison. Further, the specific number of days may be a predefined number of days or may be configurable number of days configurable by the end user at network operator side. In a non-limiting example, the specific number of days may be sixty days. In a non-limiting example, if the specific number of days is sixty days and the last login timestamp indicate that the last login day of the user is 30 days prior to current day, the processor 304 may determine that the status of user in active. In another non-limiting example, if the specific number of days is sixty days and the last login timestamp indicate that the last login day of the user is 61 days prior to current day, the processor 304 may determine that the status of user in inactive. In the above example, the processor 304 may also update the status of user in the database 114 as inactive when the last login day of the user crosses the specific number of days (60 days), and the processor 304 may determine that status of the user is inactive using information of status of the user stored in the database 114.
[0059] Further, the processor 304, using the output module 314 in response to determining that the status of the user is inactive, may generate a pop-up message indicating that the user access is deactivated.
[0060] In one or more embodiments, the processor 304, using the database management module 318, fetches details of the user from the database 114 based on the status of the user. Thereafter, the processor 304, using the output module 314, generates the pop-up message using the fetched details of the user. In a non-limiting example, the fetched details may include the last login timestamp and determined status of the user.
[0061] Further, the processor 304, using the display control module 316, may display of the pop-up message on the UI of the user device 104. In a non-limiting example, the pop-up message may include a text stating that “user access is deactivated” or “user access is deactivated as the user has not logged in for XX days”. In another non-limiting example, the pop-up message may include instructions for user to activate the user account. In another non-limiting, the displaycontrol module 316 may also display one or more options on the UI to enable the user to reactivate the user account.
[0062] In one or more embodiments, the processor 304, using the database management module 318, may also update the status of user in the database 114 as inactive if the user has not logged-in for the specific number of days from the last login day. The status of the user is automatically updated in the database 114 when the when the last login day of the user exceeds the specific number of days.
[0063] In one or more embodiments, the processor 304, using the access control module 320, may restrict the user access by disabling the user account in response to determining that the status of the user is inactive. For instance, the processor 304 may disable the user account by locking the user account or by temporary suspending the user account. In a non-limiting example, the processor 304 may disable the password login completely and may prompt user to login via One Time Password (OTP) over mobile or email.
[0064] In one or more embodiments, the processor 304, using the access control module 320, may allow the user access by enabling the user account based on a determination that the user reactivated the user account. In one or more embodiments, the processing modules 112 of application server 106 usually performs the status verification of the user, controls the deactivation of the user account, generates the pop-up message for the user as feedback.
[0065] Although FIG. 3 illustrates one example of the application server 106, various changes may be made to FIG. 3. Further, the application server 106 may include any number of components in addition to those shown in FIG. 3, without deviating from the scope of the present disclosure. Further, various components in FIG. 3 may be combined, further subdivided, or omitted and additional components may be added according to particular needs. For example, in some aspects of the present disclosure, the application server 106 may be coupled to an external database that provides data storage space to the application server 106.
[0066] FIG. 4 illustrates a flowchart of a method 400 for restricting the user access of the deactivated user in the wireless communication network 100, in accordance with an embodiment of the present disclosure. The method 400 comprises a series of operation steps indicated by blocks 402 through 408 performed by the system 200. The method 400 starts at block 402.
[0067] At block 402, the reception module 310 may receive the request of the user to login with the user credentials to access the user account. For instance, the user device 104 may receive the one or more input operations of the user to request the application server 106 to access the user account. The user device 104 may trigger an Application Programming Interface (API) which route the request to the micro services 206 which send the request to the application server 106.
[0068] At block 404, the determination module 312 may determine the status of the user based on the last login timestamp of the user stored in the database 114. For instance, the determination module 312 may determine that the status of user in inactive if the last login timestamp of the user indicates that the user has not logged- in for the specific number of days from the last login day of the user.
[0069] At block 406, the output module 314 may generate the pop-up message indicating that the user access is deactivated in response to determining that the status of the user is inactive.
[0070] At block 408, the display control module 316 may display of the pop-up message on the UI of the user device 104. Further, the display control module 316 may also display information to activate the user account.
[0071] FIG. 5 illustrates a schematic block diagram of a computing system 500 for restricting the user access of the deactivated user in the wireless communication network 100, in accordance with an embodiment of the present disclosure.
[0072] The computing system 500 includes a network 502, a network interface 504, a processor 506 (similar in functionality to the processor 304 of FIG. 3), anInput / Output (I / O) interface 508 (similar in functionality to the I / O interface 302 of FIG. 3), and a non-transitory computer readable storage medium 510 (hereinafter may also be referred to as the “storage medium 510” or the “storage media 510”). The network interface 504 includes an Ethernet card, Universal Serial Bus (USB), a communication port, or a Personal Computer Memory Card International Association (PCMCIA) slot and card.
[0073] The processor 506 may include various processing circuitry / modules and communicate with the storage medium 510 and the I / O interface 508. The processor 506 and the I / O interface 508 are configured to perform various steps described above for restricting the user access of the deactivated user in the wireless communication network 100. The processor 506 may include an intelligent hardware device including a general-purpose processor, such as, for example, and without limitation, the CPU, the AP, the dedicated processor, or the like, the graphics-only processing unit such as the GPU, the microcontroller, the FPGA, the programmable logic device, the discrete hardware component, or any combination thereof. The processor 506 may be configured to execute computer-readable instructions 510-1 stored in the storage medium 510 to cause the system 300 to perform various functions disclosed throughput the disclosure.
[0074] The storage medium 510 stores a set of instructions i.e., computer program instructions 510-1 (hereinafter may also be referred to as instructions 510-1) required by the processor 506 for controlling its overall operations. The storage media 510 may include an electronic storage medium, a magnetic storage medium, an optical storage medium, a quantum storage medium, or the like. For example, the storage media 510 may include, but are not limited to, hard drives, floppy diskettes, optical disks, ROMs, RAMs, EPROMs, EEPROMs, flash memory, magnetic or optical cards, solid-state memory devices, or other types of physical media suitable for storing electronic instructions. In one or more embodiments, the storage media 510 includes a Compact Disk-Read Only Memory (CD-ROM), a Compact Disk- Read / Write (CD-R / W), and / or a Digital Video Disc (DVD). In one or more implementations, the storage medium 510 stores computer program code configuredto cause the computing system 500 to perform at least a portion of the processes and / or methods disclosed herein throughput the disclosure.
[0075] Embodiments of the present disclosure have been described above with reference to flowchart illustrations of methods and systems according to embodiments of the disclosure, and / or procedures, algorithms, steps, operations, formulae, or other computational depictions, which may also be implemented as computer program products. In this regard, each block or step of the flowchart, and combinations of blocks (and / or steps) in the flowchart, as well as any procedure, algorithm, step, operation, formula, or computational depiction can be implemented by various means, such as hardware, firmware, and / or software including one or more computer program instructions embodied in computer-readable program code. As will be appreciated, any such computer program instructions may be executed by one or more computer processors, including without limitation a general -purpose computer or special purpose computer, or other programmable processing apparatus to perform a group of operations comprising the operations or blocks described in connection with the disclosed method.
[0076] Further, these computer program instructions, such as embodied in computer-readable program code, may also be stored in one or more computer- readable memory or memory devices (for example, the memory 306 or the storage medium 510) that can direct a computer processor or other programmable processing apparatus to function in a particular manner, such that the instructions 510-1 stored in the computer-readable memory or memory devices produce an article of manufacture including instruction means which implement the function specified in the block(s) of the flowchart(s).
[0077] It will further be appreciated that the term “computer program instructions” as used herein refer to one or more instructions that can be executed by the one or more processors (for example, the processor 304 or the processor 506) to perform one or more functions as described herein. The instructions 510-1 may also be storedremotely such as on a server, or all or a portion of the instructions can be stored locally and remotely.
[0078] Now, referring to the technical abilities and advantageous effect of the present disclosure, operational advantages that may be provided by embodiments disclosed herein may include restricting the user access on the mobile device or the web portal if the user status is inactive (if a user does not make a login on the mobile device or the web portal for a number of days), thereby safeguarding the user data in case of unauthorized access. The disclosed method adds information in the database that the user account is deactivated by updating the user status information in oracle table thereby restricting the user access of the deactivated user. Also, the present disclosure displays a pop-up message to the user to prompt to the user to take appropriate action.
[0079] Those skilled in the art will appreciate that the methodology described herein in the present disclosure may be carried out in other specific ways than those set forth herein in the above disclosed embodiments without departing from essential characteristics and features of the present invention. The above-described embodiments are therefore to be construed in all aspects as illustrative and not restrictive.
[0080] The drawings and the forgoing description give examples of embodiments. Those skilled in the art will appreciate that one or more of the described elements may well be combined into a single functional element. Alternatively, certain elements may be split into multiple functional elements. Elements from one embodiment may be added to another embodiment. For example, orders of processes described herein may be changed and are not limited to the manner described herein. Any combination of the above features and functionalities may be used in accordance with one or more embodiments.
[0081] In the present disclosure, each of the embodiments has been described with reference to numerous specific details which may vary from embodiment to embodiment. The foregoing description of the specific embodiments disclosedherein may reveal the general nature of the embodiments herein that others may, by applying current knowledge, readily modify and / or adapt for various applications such specific embodiments without departing from the generic concept, and, therefore, such adaptations and modifications are intended to be comprehended within the meaning of the disclosed embodiments. It is to be understood that the phraseology or terminology employed herein is for the purpose of description and is not limited in scope.LIST OF REFERENCE NUMERALS
[0082] The following list is provided for convenience and in support of the drawing figures and as part of the text of the specification, which describe innovations by reference to multiple items. Items not listed here may nonetheless be part of a given embodiment. For better legibility of the text, a given reference number is recited near some, but not all, recitations of the referenced item in the text. The same reference number may be used with reference to different examples or different instances of a given item. The list of reference numerals is:100 - Wireless communication network102 - Network104 - User device106 - Application server108 - Other devices110 - Web server112 - Processing modules114 - Database200 - System for restricting user access of a deactivated user202 - Load balancer204 - Application gateway206 - Micro services208 - User Interface210 - Console host300 - Block diagram of the application server302 - Input-Output (I / O) interface304 - Processor306 - Memory306 A - Set of instructions308 - Network communication manager310 - Reception module312 - Determination module314 - Output module316 - Display control module318 - Database management module320 - Access control module322 - Communication bus400 - Method for restricting the user access of the deactivated user402-408 - Operation steps of the method 400500 - Block diagram of a computing system502 - Network504 - Network interface506 - Processor508 - Input / Output (I / O) interface510 - Non-transitory computer readable storage medium510-1 - Set of instructions
Claims
We Claim:
1. A method (400) for restricting user access of a deactivated user in a wireless communication network (100), the method (400) comprising: receiving (402), by a reception module (310) from a user device (104), a request of a user to login with user credentials to access a user account; determining (404), by a determination module (312) upon receiving the request, a status of the user based on a last login timestamp of the user stored in a database (114); generating (406), by an output module (314) in response to determining that the status of the user is inactive, a pop-up message indicating that the user access is deactivated; and controlling (408), by a display control module (316), display of the pop-up message on a User Interface (UI) of the user device (104) thereby restricting the user access of the deactivated user.
2. The method (400) as claimed in claim 1, wherein for determining the status of the user, the method (400) comprises: fetching, by the determination module (312) from the database (114), the last login timestamp of the user; and determining, by the determination module (312), that the status of user in inactive if the last login timestamp of the user indicates that the user has not logged- in for a specific number of days.
3. The method (400) as claimed in claim 1, further comprising: fetching, a database management module (318), details of the user from the database (114) based on the status of the user, wherein the pop-up message is generated using the fetched details of the user.
4. The method (400) as claimed in claim 1, further comprising updating, by a database management module (318), the status of user in the database (114) asinactive if the user has not logged-in for a specific number of days from the last login day.
5. The method (400) as claimed in claim 1, further comprising restricting, by an access control module (320), the user access by disabling the user account in response to determining that the status of the user is inactive.
6. A system (200) for restricting user access of a deactivated user in a wireless communication network (100), the system (200) comprising: a reception module (310) configured to receive, from a user device (104), a request of a user to login with user credentials to access a user account; a determination module (312) configured to determine, upon receiving the request, a status of the user based on last login timestamp of the user stored in a database (114); an output module (314) configured to generate, in response to determining that the status of the user is inactive, a pop-up message indicating that the user access is deactivated; and a display control module (316) configured to control, display of the pop-up message on a User Interface (UI) of the user device (104) thereby restricting the user access of the deactivated user.
7. The system (200) as claimed in claim 6, wherein to determine the status of the user, the determination module (312) is configured to: fetch, from the database (114), the last login timestamp of the user; and determine that the status of user in inactive if the last login timestamp of the user indicates that the user has not logged-in for a specific number of days.
8. The system (200) as claimed in claim 6, further comprising: a database management module (318) configured to fetch details of the user from the database (114) based on the status of the user, wherein the output module(314) is further configured to generate the pop-up message using the fetched details of the user.
9. The system (200) as claimed in claim 6, further comprising a database management module (318) configured to update the status of user in the database (114) as inactive if the user has not logged-in for a specific number of days from the last login day.
10. The system (200) as claimed in claim 6, further comprising an access control module (320) configured to restrict the user access by disabling the user account in response to determining that the status of the user is inactive.
11. A computer program product comprising computer-executable instructions that are stored on a non-transitory computer-readable medium and that, when executed by at least one processor performs operations comprising: receiving, from a user device (104), a request of a user to login with user credentials to access a user account; determining, upon receiving the request, a status of the user based on last login timestamp of the user stored in a database (114); generating, in response to determining that the status of the user is inactive, a pop-up message indicating that user access is deactivated; and controlling display of the pop-up message on a User Interface (UI) of the user device (104) thereby restricting the user access of the deactivated user.
Citation Information
Patent Citations
System and method for managing access to services of an account for an electronic communication device
EP2063674A1
Log collection, structuring and processing
US20120246303A1