CN100395990C - Method for authorizing a device - Google Patents

Abstract

The invention discloses a method for authorizing and permitting equipment, which comprises the steps of establishing a mapping relation between an equipment identifier and an equipment serial number used by the equipment in the latest authorization and permission process in an authorization and permission server; when the authorization server can not retrieve the matched authorization information according to the equipment serial number reported by the equipment, the mapping relation is indexed according to the equipment identification of the equipment to obtain the equipment serial number used by the equipment in the latest authorization process; retrieving matched authorization permission information according to the obtained equipment serial number, and feeding back the retrieved authorization permission information to the equipment; the device provides the corresponding authorization service according to the received authorization permission information. The invention can ensure that the equipment can be authorized and approved correctly when the equipment fails or the equipment configuration is changed, so that the equipment can ensure the service quality provided for the user.

Description

Methods to authorize devices

technical field

The invention relates to an authorization technology in a communication system, in particular to a method for authorizing a device.

Background technique

At present, in the communication network system, the license server (License Server) on the equipment operator side must authorize the corresponding equipment before the equipment can provide corresponding authorization services; the equipment serial number (ESN, Equipment Serial No. .) is used to uniquely identify the identity of the device, and is also used to ensure that the authorization center on the device provider side will provide correct authorization information (the authorization information is represented by a license, and a license usually includes a license certificate, license number, license file, etc. ) key authorized to the specified device. Usually, the license file contains the ESN of the device to be authorized. The license server determines whether to authorize the current device by comparing the ESN reported by the device with the ESN contained in the corresponding license file. Serve.

Please refer to Figure 1, which is a schematic diagram of a simple process of device authorization in the prior art; the specific process of device authorization is as follows:

Step S1, the authorization server 21 in the equipment operator 2 sends authorization request information to the authorization center 11 in the equipment provider 1 according to the ESN of the equipment 22;

Step S2, the licensing center 11 generates corresponding licensing information to feed back to the licensing server 21 according to the ESN of the device 22, wherein the licensing information generated by the licensing center 11 includes the ESN of the device 22;

Step S3, during the working process, the follow-up device 22 reports its own ESN to the authorization server 21 each time it starts up;

Step S4, the license server 21 queries the corresponding license information according to the ESN reported by the device 22, and compares whether the ESN contained in the license information is consistent with the ESN reported by the device 22, and if they are consistent, feeds back the corresponding license information to the device 22 , the device 22 provides corresponding authorization services according to the received authorization information.

However, in the process of using the above method to authorize the device, when the device fails or the device configuration is changed, the ESN of the device will change, so the following two possible situations will appear:

The first is that the ESN of the device has changed permanently, so that the authorization server 21 in the device operator 2 needs to resend the authorization request information to the authorization center 11 in the device provider 1 according to the updated ESN of the device 22, The authorization center 11 regenerates new authorization information based on the updated ESN of the device 22 and feeds it back to the authorization server 21 for storage.

The second is that the ESN of the device is only temporarily changed, and there is no permanent change. At this time, it is only necessary to repair the faulty device or reconfigure the device to restore the device to normal, so there is no need to reset the device at this time. The authorization request is processed. After the device returns to normal, the original ESN of the device is still available, and the authorization server 21 only needs to use the originally applied authorization information to perform authorization processing on the device 22.

However, the above-mentioned permanent or temporary changes in the ESN of the device due to a device failure or a change in the configuration of the device will cause the authorization server 21 to renew the authorization request process or during the recovery process of the device. There is a period of time when the matching license information cannot be retrieved according to the new ESN reported by the device, so the default license information of the system can only be used to license the device, but the default license information of the system generally corresponds to the free license information of the device. Therefore, there will be relatively large restrictions on the service function, which may cause the device to be unable to obtain the original authorized service within this period of time, and thus cannot provide users with the due service quality.

Contents of the invention

The technical problem to be solved by the present invention is to propose a method for authorizing the device, so that when the device fails or the configuration of the device changes, the device can also be correctly authorized, so that the device can guarantee to provide users with quality of service.

In order to solve the above problems, the present invention proposes a method for authorizing equipment, including steps:

Establish a mapping relationship between the device identifier and the device serial number used by the device in the latest licensing process in the licensing server;

When the authorization server fails to retrieve matching authorization information according to the device serial number reported by the device, it indexes the mapping relationship according to the device identifier of the device to obtain the device serial number used by the device in the latest authorization process; and

Retrieve the matching license information according to the obtained device serial number, and feed back the retrieved license information to the device;

The device provides corresponding authorization services according to the received authorization information.

The method further includes a step of updating the mapping relationship when the device identification of the device changes or the device serial number used by the device changes during the latest authorization process.

The device identifier is the IP address of the device in the IP network; or the virtual channel identifier and virtual path identifier address pair of the device in the asynchronous transfer mode network; or the device signaling point of the device in the signaling network.

In the method of the present invention to authorize equipment, the mapping relationship between the equipment identification (EID, Equipment ID) and the ESN used by the equipment in the latest licensing process is pre-selected in the license server (LicenseServer), and according to the equipment's When the ESN cannot retrieve the matching license information, you can find the ESN used by the device in the latest authorization process according to the mapping relationship corresponding to the EID index of the device, and then retrieve the matching license information according to the found ESN, so that the When a fault occurs or the ESN of the device changes permanently or temporarily due to a change in the configuration of the device, the License Server can still retrieve the correct ESN during the period when the License Server re-issues the authorization request or recovers from the device failure. License information, so as to achieve the purpose of correct authorization of the device, so that the device can provide the user with the quality of authorized service, and effectively protect the interests of the user.

Description of drawings

FIG. 1 is a schematic diagram of a simple process of authorization of equipment in the prior art;

Fig. 2 is a flow chart of the main realization principles of the method for authorizing equipment in the present invention;

Fig. 3 is a specific implementation flow chart of implementing authorization on devices by using the method for authorization on devices according to the present invention.

Detailed ways

The present invention mainly aims at that the ESN of the equipment changes due to the failure of the equipment in the communication network system or the change of the configuration of the equipment, so that the License Server cannot retrieve the correct License information according to the changed ESN, so that the License Server cannot A method of authorizing the device with higher security is proposed to prevent the device from providing the user with the proper authorization service due to the correct authorization of the device.

The main realization principles and specific implementation methods of the method for authorizing a device according to the present invention will be described in detail below with reference to each accompanying drawing.

Please refer to Fig. 2, which is a flow chart of the main realization principle of the method for device authorization in the present invention; the main realization process is as follows:

Step S10, pre-establishing a mapping relationship between the equipment identification (EID) and the equipment serial number (ESN) used by the equipment in the latest licensing process in the licensing server (License Server);

The EID of the device can be the IP address of the device in the IP network; or the virtual channel identifier (VPI, Virtual Path Identifier) and virtual path identifier (VCI, Virtual Channel Identifier) address pair, that is, <VPI, VCI> pair; you can also choose the device signaling point of the device in the signaling network. Where the EID of the device is different from the ESN of the device:

ESN needs to guarantee the uniqueness on a global scale, while EID only needs to guarantee the uniqueness within the jurisdiction of a LicenseServer;

ESN is relatively stable, and the frequency of change is low, so as to avoid the frequent return of license information from the equipment provider to the equipment operator. Since the EID is only stored in the License Server, not in the license file, even if it changes frequently There will be no negative impact on the licensing process.

When the change of the network structure occurs, which causes the device identification to change; or the ESN used by the device in the latest licensing process changes due to a device failure or a change in the configuration of the device, the above pre-established ESN should be updated in time. The mapping relationship between <EID-the ESN used by the device in the latest authorization process>, so that the correct ESN used by the device in the latest authorization process can be indexed according to the latest EID of the device.

Step S20, when the License Server cannot retrieve the matching license information according to the ESN reported by the device, it can further index the <EID-the ESN used by the device in the latest authorization process> according to the EID of the device in step S10 mapping relationship to obtain the ESN used by the device during the latest authorization process;

Step S30, the License Server retrieves matching License information according to the ESN indexed in Step S20, and feeds back the retrieved License information to the device to be authorized for service;

In step S40, the device provides corresponding authorization services to the user according to the received License information.

After the specific implementation principle of the present invention has been described in detail above, it can be seen that when the License Server cannot retrieve the matching License information through the ESN of the device, it can then index the device according to the EID of the device used in the latest licensing process. ESN, and then retrieve the matching license information according to the indexed ESN, but at this time the License Server can only use the last used license information to provide authorization services for the device, which is a temporary authorization behavior. In this temporary authorization During the time period, the operator can re-apply for the license authorization information for the faulty device or the device whose configuration has changed, so as to ensure the service quality of the authorized service provided by the device operator to the user.

Please refer to Fig. 3, which is a specific implementation flow chart of implementing the device authorization by using the method for device authorization according to the present invention; the specific implementation process is as follows:

In step S100, the License Server first obtains the ESN reported by the device;

Step S110, the License Server retrieves the License information matching the device according to the obtained ESN;

Step S120, the License Server judges whether the matching License information can be retrieved according to the ESN of the device; if yes, execute step S170; otherwise execute step S130;

Step S130, the License Server then pre-establishes the mapping relationship of <EID-ESN used by the device in the latest licensing process> according to the EID index of the device;

Step S140, the License Server judges whether the ESN used by the device in the latest licensing process can be indexed according to the EID of the device, if yes, execute step S150; otherwise, execute step S180;

Step S150, the License Server retrieves matching License information according to the indexed ESN used by the device during the latest licensing process;

Step S160, the License Server judges whether a matching license can be retrieved according to the indexed ESN; if yes, execute step S170; otherwise execute step S180;

Step S170, the License Server feeds back the retrieved License information to the device to be authorized, so that the device can provide the user with the proper authorization service according to the received License information;

In step S180, the License Server notifies the device to be authorized that no information is found.

It should be noted here that although the preferred embodiments of the present invention have been described above, the technical solution of the present invention can carry out various changes and improvements to the disclosed solutions without departing from the protection of the present invention defined by the appended claims of the present invention. scope.

Claims (5)

1. A method for authorizing a device, comprising the steps of: Establish a mapping relationship between the device identifier and the device serial number used by the device in the latest licensing process in the licensing server; When the authorization server fails to retrieve matching authorization information according to the device serial number reported by the device, it indexes the mapping relationship according to the device identifier of the device to obtain the device serial number used by the device in the latest authorization process; and Retrieve the matching license information according to the obtained device serial number, and feed back the retrieved license information to the device; The device provides corresponding authorization services according to the received authorization information. 2. The method for authorizing a device according to claim 1, further comprising: updating the Steps of the mapping relationship. 3. The method for authorizing a device according to claim 1 or 2, wherein the device identifier is an IP address of the device in the IP network. 4. The method for authorizing a device according to claim 1 or 2, wherein the device identifier is an address pair of a virtual channel identifier and a virtual path identifier of the device in an asynchronous transfer mode network. 5. The method for authorizing a device according to claim 1 or 2, wherein the device identifier is a device signaling point of the device in the signaling network.

Images