Access control method and system and access terminal
Embodiments of the present invention provide an access control method, an access control system, and an access terminal. The method includes: receiving, by an access terminal, an HTTP request message transmitted by a UE where a destination IP address is an IP address of the access terminal; obtaining an actual IP address corresponding to a website domain name according to DNS resolution when the website domain name is not the IP address of the access terminal, and controlling, according to the actual IP address, the UE to access a target site corresponding to the website domain name. The technical solutions of the present invention solve the problem that a user cannot access the target site because of the cache characteristic of the user equipment.
1. An access control method implemented in a web browsing session, comprising:
receiving, by an access terminal, a Hypertext Transport Protocol (HTTP) request message from a user equipment (UE), wherein the HTTP request message comprises a website domain name and an IP address, and wherein if there is a correspondence between the website domain name and an IP address cached in the UE, the IP address in the HTTP request is the IP address cached in the UE;
determining, by the access terminal, whether the IP address in the HTTP request message is an IP address of the access terminal;
if the IP address in the HTTP request message is the IP address of the access terminal, and the website domain name in the HTTP request message does not match a domain name of the access terminal, obtaining, by the access terminal, an actual IP address corresponding to the website domain name in the HTTP request message via a domain name system (DNS) resolution; and
controlling, by the access terminal, the UE to access a target website corresponding to the actual IP address.
2. The access control method according to claim 1 , wherein controlling, by the access terminal, the UE to access the target website corresponding to the actual IP address comprises:
replacing, by the access terminal, the IP address of the access terminal with the actual IP address corresponding to the website domain name and redirecting a browser to the actual IP address.
3. The access control method according to claim 1 , wherein controlling, by the access terminal, the UE to access the target website corresponding to the actual IP address comprises:
initiating, by the access terminal, an HTTP redirection request message to the UE,
wherein the HTTP redirection request message comprises the actual IP address corresponding to the website domain name, and wherein the UE retransmits the HTTP request message according to the correspondence between the website domain name and the actual IP address.
4. The access control method according to claim 3 , wherein initiating, by the access terminal, the HTTP redirection request message to the UE comprises:
transmitting, by the access terminal, an HTTP redirection request packet or an HTTP redirection page to the UE.
5. The access control method according to claim 4 , wherein the HTTP redirection packet is one of:
an HTTP response code 300,
an HTTP response code 301,
an HTTP response code 302, and
an HTTP response code 307.
6. The access control method according to claim 1 , further comprising:
if the website domain name in the HTTP request message matches the domain name of the access terminal, transmitting, by the access terminal, a DNS reply packet including the IP address of the access terminal to the UE, so as to redirect the UE to a Web management page of the access terminal.
7. An access terminal in communication with a user equipment (UE) in a web browsing session, comprising:
a receiver, configured to receive a Hypertext Transport Protocol (HTTP) request message from the UE, wherein the HTTP request message comprises a website domain name and an IP address, and wherein if there is a correspondence between the website domain name and an IP address cached in the UE, the IP address in the HTTP request is the IP address cached in the UE; and
a processor, configured to:
determine whether the IP address in the HTTP request message is an IP address of the access terminal;
if the IP address in the HTTP request message is the IP address of the access terminal, and the website domain name in the HTTP request message does not match a domain name of the access terminal, obtain an actual IP address corresponding to the website domain name in the HTTP request message via a domain name system (DNS) resolution, and
control the UE to access a target website corresponding to the actual IP address.
8. The access terminal according to claim 7 , wherein in controlling the UE to access the target website corresponding to the actual IP address, the processor is configured to replace the IP address of the access terminal with the actual IP address corresponding to the website domain name, and redirect a browser to the actual IP address.
9. The access terminal according to claim 7 , further comprising a transmitter; wherein in controlling the UE to access the target website corresponding to the actual IP address, the processor is configured to initiate an HTTP redirection request message, and the transmitter is configured to transmit the HTTP redirection request message to the UE,
wherein the HTTP redirection request message comprises the actual IP address corresponding to the website domain name, and wherein the UE retransmits the HTTP request message according to the correspondence between the website domain name and the actual IP address.
10. The access terminal according to claim 9 , wherein in transmitting the HTTP redirection request message to the UE, the transmitter is configured to transmit an HTTP redirection request packet or an HTTP redirection page to the UE.
11. The access terminal according to claim 8 , further comprising a transmitter; wherein if the website domain name in the HTTP request message matches the domain name of the access terminal, the transmitter is further configured to transmit a domain name system DNS reply packet including the IP address of the access terminal to the UE under control of the processor, so as to redirect the UE to a Web management page of the access terminal.
12. A computer program product comprising a non-transitory computer readable storage medium storing program code thereon for use by an access terminal in a web browsing session, the program code comprising:
instructions for receiving a Hypertext Transport Protocol (HTTP) request message from a user equipment (UE), wherein the HTTP request message comprises a website domain name and an IP address, and wherein if there is a correspondence between the website domain name and an IP address cached in the UE, the IP address in the HTTP request is the IP address cached in the UE;
instructions for determining whether the IP address in the HTTP request message is an IP address of the access terminal;
instruction for, if the IP address in the HTTP request message is the IP address of the access terminal, and the website domain name in the HTTP request message does not match a domain name of the access terminal, obtaining an actual IP address corresponding to the website domain name in the HTTP request message via a domain name system (DNS) resolution; and
instructions for controlling the UE to access a target website corresponding to the actual IP address.
13. The access control method according to claim 1 , wherein before receiving the HTTP request message by the access terminal, the method further comprises:
receiving, by the access terminal, a domain name system (DNS) resolution request message from the UE, wherein the DNS resolution request message comprises the website domain name inputted by a user of the UE; and
sending, by the access terminal, a DNS response message to the UE,
wherein the DNS response message comprises an IP address, if the access terminal fails to connect to the Internet, the IP address in the DNS response message is an IP address of the access terminal, or, if the access terminal connects to the Internet, the IP address in the DNS response message is the actual IP address corresponding to the website domain name, and
wherein after receiving the DNS response message, the UE caches a correspondence between the website domain name and the IP address provided by the access terminal.
14. The access terminal according to claim 7 , further comprising a transmitter, wherein before receiving the HTTP request message,
the receiver is further configured to receive a domain name system (DNS) resolution request message from the UE, wherein the DNS resolution request message comprises the website domain name inputted by a user of the UE; and
the transmitter is configure to send a DNS response message to the UE,
wherein the DNS response message comprises an IP address, if the access terminal fails to connect to the Internet, the IP address in the DNS response message is an IP address of the access terminal, or, if the access terminal connects to the Internet, the IP address in the DNS response message is the actual IP address corresponding to the website domain name, and
wherein after receiving the DNS response message, the UE caches a correspondence between the website domain name and the IP address provided by the access terminal.
15. The computer program product according to claim 12 , wherein the program code further comprises:
instructions for receiving a domain name system (DNS) resolution request message from the UE before receiving the HTTP request message, wherein the DNS resolution request message comprises the website domain name inputted by a user of the UE; and
instructions for sending a DNS response message to the UE,
wherein the DNS response message comprises an IP address, if the access terminal fails to connect to the Internet, the IP address in the DNS response message is an IP address of the access terminal, or, if the access terminal connects to the Internet, the IP address in the DNS response message is the actual IP address corresponding to the website domain name, and
wherein after receiving the DNS response message, the UE caches a correspondence between the website domain name and the IP address provided by the access terminal.