Terminal Authentication via JavaScript Tag Parsing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network authentication methods face inefficiencies due to invalid traffic requests from terminals, leading to unnecessary network resource occupation and increased portal server load, as they cannot distinguish between valid and invalid requests and often perform ineffective authentication operations.
Innovation Solution
A terminal authentication method that utilizes a JavaScript tag in HTTP responses to direct unauthorized terminals to a management server, which then directs them to the least loaded portal server for authentication, allowing for efficient authorization and authentication operations without occupying network resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the access device returns the portal server URL to all terminals without distinction, then all terminals can access the authentication page, but invalid traffic requests occupy network resources and increase portal server load
Solution Approach 1:
The patent applies local quality by making the JavaScript tag capability specific to certain applications (browser-based applications). Only applications that can parse JavaScript tags are directed to the portal server for authentication, while other applications are excluded. This creates a localized quality filter at the application level, ensuring that network resources are consumed only by capable applications that can complete authentication, thereby resolving the contradiction between providing universal authentication access and preventing resource waste from invalid requests.
2Reliability
If the terminal performs TCP handshake and SSL handshake with the portal server, then secure authentication connection is established, but invalid operations without results increase portal server load
Solution Approach 1:
The patent applies preliminary action by checking whether the terminal application can parse JavaScript tags before directing it to perform authentication operations. This preliminary capability verification prevents applications that cannot complete authentication from initiating TCP handshakes and SSL handshakes with the portal server. By performing this check in advance, the system ensures that only capable applications establish secure connections, thereby maintaining authentication security while preventing portal server load from invalid operations.
3Ease of operation
If the access device cannot identify valid and invalid traffic requests, then all requests are treated equally, but authentication operations from invalid requests are useless and waste resources
Solution Approach 1:
The patent applies a metaphorical 'color change' principle by using the presence or absence of JavaScript tag parsing capability as a distinguishing characteristic between valid and invalid requests. Applications that can parse JavaScript tags are effectively 'marked' as valid, while those that cannot are 'marked' as invalid. This simple binary distinction allows the access device to easily identify and differentiate between valid and invalid traffic requests without complex analysis, resolving the contradiction between easy request handling and accurate validity identification.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Embodiments of the present invention relate to the field of communications technologies, and provide a terminal authentication method and a device, to resolve a problem that a portal server is overloaded during terminal authentication. A specific solution is: sending, by a terminal by using a first application, an HTTP traffic request; receiving an HTTP traffic response that includes a JavaScript tag and that is sent by an access device; obtaining an address of a portal server from the JavaScript tag by using the first application; and performing the terminal's authorization and authentication based on the address of the portal server. The embodiments of the present invention are applied to a terminal's authorization and authentication process.