System, method and computer readable medium for message authentication to subscribers of an internet service provider
An internet service provider (ISP) is configured to provide notification messages such as service updates to subscribers via redirected web pages. In order for the web pages to be treated as originating from the ISP, the ISP provides a shared secret in the browser message. The shared secret may be a secret not derivable by viruses or trojans in the subscriber computer, such as a MAC address of the subscriber modem.
1. A method, comprising:
identifying, via a processor, that a notification is pending for a subscriber;
retrieving, via the processor, a shared secret from a database in response to the identifying the notification is pending, wherein the shared secret comprises at least one of information provided by the subscriber and information derived from a service detail of a subscriber device associated with the subscriber;
generating, by a processor, a message comprising the notification and the shared secret;
transmitting, via the processor, the message to the subscriber device for display via a browser interface of the subscriber device.
2. The method according to claim 1 , further comprising:
determining an identity of the subscriber based on a uniform resource locator (URL) page request from the subscriber device associated with the subscriber,
wherein the determining comprises:
determining an internet protocol (IP) address, and
retrieving the identity of the subscriber from the database using the IP address.
3. The method according to claim 1 , where the identifying that the notification is pending for the subscriber further comprises:
executing a query on the database using the subscriber identity, wherein the identity of the subscriber is associated with the shared secret.
4. The method according to claim 1 , further comprising:
displaying the notification via the subscriber device.
5. The method according to claim 1 , further comprising:
generating the pending notification.
6. The method according to claim 1 , further comprising:
storing the pending notification in the database.
7. The method according to claim 2 , wherein the generating the message further comprises:
generating the message in response to receiving the URL page request.
8. The method according to claim 2 , wherein the transmitting the message to the subscriber device further comprises:
redirecting the URL page request to a destination server that combines the URL of the URL page request and a URL of the message into a new page direction.
9. The method according to claim 8 , wherein the message comprises information for fixing an issue associated with the subscriber.
10. A network redirection device, comprising:
a processor that when executing instructions stored in an associated memory is configured to:
identify that a notification is pending for a subscriber; and
retrieve a shared secret from a database in response to an identification that the notification is pending, wherein the shared secret comprises at least one of information provided by the subscriber and information derived from a service detail of a subscriber device associated with the subscriber;
generate a message comprising the notification and the shared secret; and
transmit the message to the subscriber device for display via a browser of the subscriber device.
11. The network redirection device according to claim 10 , wherein, when the processor transmits the message to the subscriber device, the processor is further configured to:
redirect a URL page request to a destination server that combines the URL of the URL page request and a URL of the message into a new page direction.
12. The network redirection device according to claim 10 , wherein the processor is further configured to:
determine an identity of the subscriber based on a uniform resource locator (URL) page request from the subscriber device associated with the subscriber.
13. The network redirection device according to claim 10 , wherein the shared secret comprises a MAC address of the subscriber device.
14. The network redirection device according to claim 13 , wherein the subscriber device comprises a modem.
15. A non-transitory computer readable medium comprising instructions that when executed by a processor cause the processor to perform:
identifying that a notification is pending for a subscriber;
retrieving a shared secret from a database in response to the identifying the notification is pending, wherein the shared secret comprises at least one of information provided by the subscriber and information derived from a service detail of a subscriber device associated with the subscriber;
generating a message comprising the notification and the shared secret;
transmitting the message to the subscriber device for display via a browser interface of the subscriber device.
16. The non-transitory computer readable medium according to claim 15 , wherein the instructions cause the processor to perform:
determining an identity of the subscriber based on a uniform resource locator (URL) page request from the subscriber device associated with the subscriber,
wherein the determining comprises:
determining an internet protocol (IP) address, and
retrieving the identity of the subscriber from the database using the IP address.
17. The non-transitory computer readable medium according to claim 15 , wherein the identifying that the notification is pending for the subscriber further comprises:
executing a query on the database using the subscriber identity, wherein the identity of the subscriber is associated with the shared secret.
18. The non-transitory computer readable medium according to claim 15 , wherein the instructions cause the processor to perform:
displaying the notification via the subscriber device.
19. The non-transitory computer readable medium according to claim 15 , wherein the instructions cause the processor to perform:
generating the pending notification.
20. The non-transitory computer readable medium according to claim 15 , wherein the instructions cause the processor to perform:
storing the pending notification in the database.