DE10025397A1 - Operating an Internet link with a subscriber computer, involves forwarding login name and IP address to protocol unit of proxy node so that Internet activity of subscriber can be monitored - Google Patents

Abstract

A subscriber computer (1) is linked to a dialing node (11), after which the subscriber computer is authenticated via the login name used. A corresponding Internet protocol address is then allocated to the subscriber computer. The computer is then given access to a proxy node (10) to enable access to Internet services. The login name and the IP address are then given to a protocol unit (ODS) assigned to the proxy node such that certain Internet activities of the subscriber computer can be recorded.

Description

The invention relates to logging Kun's Internet activities the, with the aim of gaining data for advertising measures and customers Gutha ben to be able to credit.

The increasing importance of the Internet is, among other things, that for the participants have a wealth of information available quickly and inexpensively is available. The advantage for providers of such information is that they a very large one from the participants with relatively little technical effort Can tap into customers. In addition, it is possible for the providers to be able to specifically address customer requests and corresponding information to win more precise coordination of your offer. One way, this To match customer interests to achieve or to interest customers awaken are so-called bonus programs, in which the Internet participants for accessing information on the Internet, here comes mainly the World-wide-web service (www) via the http protocol is considered. Bonus points receive. In return, the provider distributing such bonus points receives Information about the participants from which in particular can be derived whether they are potential customers for them or other providers. Such Bonus points can be earned in kind rewards from certain internet providers that use the Distribute Internet goods or services, are implemented.

One way to operate bonus systems is when the usual dialing in of a subscriber computer with an Internet provider via a Telephone connection of the Internet provider knows the telephone number. However, this is due to legal, data protection regulations in all not generally the case, since only telephone network operators have access to the phone number of the subscriber computer calling an Internet provider.

Another option, the customer required for a bonus system Gaining information about a participant's internet activity is a install the appropriate program on the participant's computer, by from which it accesses the internet. On the one hand, this is tedious, on the other hand, it exists  the risk of undesirably disrupting the operation of the subscriber computer for example by so-called viruses.

Another option is to save a text file created by the In ternet providers can be queried while the subscriber computer is internet services. Such text files are also known as "cookies". However, they have the disadvantage that the user can save files on them must allow his computer to do what each time a "cookie" is saved Appropriate approval of the participant on the participant computer is required.

On the other hand, such "cookies" are questionable from a security point of view, because in principle, it is possible to spy out data on the subscriber computer chen. For this reason, many Internet users refuse to use "cookies" to have their computer stored.

The invention is therefore based on the object, a method for operating ben to create an Internet application for a subscriber computer that it is possible without effort for the participant for the operation of a Bonussy to obtain the information required by stems.

This object is achieved by a method according to claim 1.

According to the invention, a subscriber computer establishes a network connection a dial-in node. In the authentication that then takes place Appropriate authentication information exchanged, among other things a login name. A secret password is also preferred intended. To access the Internet later on the subscriber computer To enable and services, it must be assigned a so-called IP address become. This is preferably done dynamically, in that a currently available IP Address a subscriber computer only for the duration of the existence of the network connection is assigned to and after the end of the network connection whose subscriber computer is being assigned, which is currently in the process of being the network to establish a connection. After this dynamic IP address assignment, the Subscriber computer access to a proxy node from which access to Internet services is possible. The proxy node preferably consists of one Proxy server, to which a protocol unit is assigned, the specific Internet act vities of the participant computer are logged and assigned to the login name.  Of course, this separation can also be omitted. The logging is done in to which the Inter called from the IP address assigned to the login name net information or offers written in a log file and the Login names can be assigned. Instead of the login name you can also use one the information derived from it is used. It is particularly preferred when using a customer number.

The invention has the advantage that no data on the subscriber computer must not be saved, neither special programs, the Internet activity ten monitor so-called "cookies". This has under data security reasons great advantages, because it means spying out data on the subscriber computer is just as impossible as introducing viruses onto the participant's computer. On the other hand, the selection of internet activities to be logged can be dyna be mixed, d. H. who determines independently for each customer number the.

Finally, in a preferred embodiment of the invention Internet information made available to subscriber computers individually by allowing it depending on the customer number. Here is at For example, to think of so-called banner advertising when advertising slogans in websites can be set depending on the customer profile. It is not just a direct depend login name or customer number, but it is also possible a typing possible that the subscriber computer based on a customer number dependent profile formation Information of certain types for ver be made available.

Another advantage is that the type of Bo nuts can be chosen freely, monetary amounts are also possible. After all, is one such bonus system tamper-proof, since no manipulable participation of the Participant computer is necessary.

Advantageous developments of the invention are the subject of the Unteran claims.

The invention is described below with reference to the drawing in Exemplary embodiments explained in more detail. The drawing shows:  

Fig. 1 is a simplified block diagram of a subscriber computer, which has access to Internet services,

FIG. 2 shows a further block diagram similar to FIG. 1.

In Fig. 1 in a simplified block diagram of a subscriber calculation is shown ners 1 which, egg NEN via a telephone connection (dial-up connection) DUC dial-in node 11 and a proxy node 10 has access to the Internet I. The Internet is a global network of different computers on which a wide variety of information and service offers can be found. A well-known protocol under which these offers are processed is the HTTP protocol on the World-wide-web (www). The subscriber computer 1 dials a dial-up server 2 via a corresponding telephone number, which can be preconfigured, for example, in the software of this computer. This dial-in server has corresponding interfaces via which the DOC telephone connection can be established. This can be done either using ISDN technology or in analog technology using a modem. The PPP protocol is used to set up the invention and to operate this connection.

After dialing the dial-in server 2, the authentication is made of the subscriber computer. 1 For this purpose, a radius server 3 is provided, which supplies the dial-in server with the authentication data via the radius protocol (in accordance with the technical documentation RFC2138). The dial-in server 2 reports a successful logon and a corresponding logout via the Radius Accounting Protocol (according to the technical documentation RFC2139) to the Radius server 3 . From the dial-in node 11 , in particular from the radius server 3 , a coupling to a log unit ODS designed as a database is provided, which logs the logon and logoff of the subscriber computer 1 and, as will be described below, its internet activity. After successful authentication at the dial-in node 11 , the subscriber computer 1 is assigned an IP address, the function of which is known to the person skilled in the art. This is a dynamic IP address management, ie IP addresses are assigned to subscriber computers 1 only for the duration of their connection to the dial-in server 2 . Using the IP address, the subscriber computer 1 can access a proxy server 4 in a known manner, which enables access to the Internet I. The proxy server 4 can be an http proxy server, but other Internet protocols are also conceivable, e.g. B. ftp, news or gopher. The proxy server 4 logs every request from the customer computer 1 . The proxy server 4 has access to all or a predetermined scope of all information content on the Internet and forwards the information requested by the subscriber computer to it. The protocol data accumulated on the proxy server 4 are processed in fixed chronological states and communicated to the protocol unit ODS.

It is with this forwarding of the access data to the protocol unit ODS advantageous to carry out a certain selection in order to reduce the amount of data The following selection is possible with the http protocol:

Only the calls to error-free information in the http protocol continue headed. For the http protocol, this means that the status code of the calls NEN pages must be less than 400.

Furthermore, only the logging of text files is forwarded, graphic and sound contents are not captured. To do this, the mime type of the called Pages are "text / html".

Only pure queries are forwarded. This is the case if the corresponding http command is "get". Let through such restrictions in the case of the http protocol, the data traffic to the protocol unit forwarded access data drastically, for example by approx. 85% compared to full logging.

A similar reduction is also the case with the other protocols mentioned possible.

The protocol unit ODS automatically and continuously calculates corresponding information about the profile of the Internet services and information retrieved from the subscriber computer 1 from the reported access data. In the case of a bonus system, this means that it is evaluated which Internet information and services have been called up by the subscriber computer 1 and corresponding credits are made. This is done as follows:

Corresponding Internet information and services are listed in a database, and credits are issued for accessing them. The credit can be designed depending on the type of call, for example, according to the duration of how the information retrieved was displayed on the subscriber computer 1 . The type of credit, i.e. whether it is bonus points or cash credits, is freely possible.

When training for a bonus system, the ODS protocol unit determines the credits to be credited to the subscriber computer 1 using this database and maintains a corresponding account for the customer. For this purpose, the assignment between the IP address and login name or customer number communicated by dial-in node 11 is used. The log unit ODS therefore maintains a list for each customer number with the corresponding account balance and the customer profile or the past internet activities that were logged for this customer.

This assignment of customer number and IP address together with customer profile information also makes it possible, when accessing proxy server 4 for the first time, to provide a start page 5 , which is adapted to the customer's specific needs, by the protocol unit ODS based on the IP address known customer profile, the information content of this homepage 5 is specified accordingly. This makes it possible to meet the interests of a customer in a tailor-made manner, e.g. B. Select advertising banners accordingly. This makes this system very attractive for advertising partners, since their advertising is used for specific target groups.

Fig. 2 shows schematically the interaction of the protocol unit with other databases. The subscriber computer 1 is connected to the proxy node 10 when the telephone connection DUC is established, the proxy server 4 establishing the connection to the Internet I. The ODS protocol unit is also connected to a database 6 . This is in turn connected to a database 7 . Both databases 6 and 7 are connected to a registration center 8 , to which a special registration connection 9 can be established from the subscriber computer 1 . As mentioned, the ODS protocol unit contains the assignment of the IP address to the customer number and receives the preferably filtered access data of the subscriber computer 1 to the Internet I from the proxy server 4 at certain intervals. The ODS protocol unit reports the customer profile it has created or the protocols Internet activities associated with customer numbers are assigned to database 6 , which in turn provides information to protocol unit 1 , for example an assignment list between customer numbers and login name. The database 7 contains the customer master data assigned to the customer numbers, ie name, address, bank details, etc. The databases 6 and 7 are separated for security reasons. Both databases 6 and 7 are connected to a registration center 8 , which is able to create new data records accordingly. In order to log on to the system, a subscriber must set up a login connection 9 . This can be done from the subscriber computer 1 , for example by calling up a corresponding page on the Internet, but is also possible by telephone or in writing. The registration center 8 effects the creation of a new customer set with the creation of the customer master data and the customer number and, if necessary, carries out corresponding economic data checks for the customer. Only after the registration center 8 has created corresponding customer data, in particular has allocated a customer number, does the protocol unit ODS cause the proxy server 4 to allow the subscriber computer 1 access to the Internet. Optionally, this activation can also take place on the Radius server 3 .

Since the telephone connection between subscriber computer 1 and proxy server 4 or dial-in server 2 should be as short as possible for cost reasons, it makes sense to provide a dialing node 11 and proxy node 10 regionally distributed with a provider operating over a larger region. In contrast, databases 6 and 7 should be provided centrally as close as possible to registration center 8 , since their data records must be maintained centrally and should not be distributed for security reasons. The dial-in nodes 11 , on the other hand, are reasonably to be provided locally, the subdivisions dial-in server 2 and radius server 3 not being absolutely necessary; another subdivision is also possible, for example with a single server or several servers. The same applies to the proxy node 10 , which does not necessarily have to be divided into a protocol unit ODS and a proxy server 4 . Rather, it is possible to provide the ODS protocol unit in a computer together with the proxy server 4 .

Claims (5)

1. Method for operating an Internet connection for a subscriber computer ( 1 ), wherein

• a) a network connection (DUC) from the subscriber computer ( 1 ) to a dial-in node ( 11 ) is established,
• b) authentication of the subscriber computer ( 1 ) is carried out on the dial-in node ( 11 ) by querying a login name,
• c) the subscriber computer ( 1 ) is assigned an IP address,
• d) the subscriber computer ( 1 ) is given access to a proxy node ( 10 ) from which access to Internet services (I) is possible, and
• e) the login name and the IP address of a proxy node ( 11 ) assigned protocol unit (ODS) are communicated, which logs certain Internet activities of the subscriber computer ( 1 ) and assigns the login name and / or information derived therefrom.

2. The method according to claim 1, characterized in that the protocol unit (ODS) assigns the login name to a customer number and the specific Internet activities of the subscriber computer ( 1 ) logs assigned to the customer number. 3. The method according to claim 1, characterized in that the dial-in node ( 11 ) from a dial-up server ( 2 ) and a radius server ( 3 ) is constructed, the dial-in server ( 2 ) providing the appropriate interface for establishing the network connection (DUC) and receives the authentication data from the Radius server, preferably using a Radius protocol. 4. The method according to any one of the preceding claims, characterized in that the proxy node ( 4 ) to the subscriber computer ( 1 ) provides information contents ( 5 ) which are selected depending on the specifications of the protocol unit (ODS). 5. The method according to any one of the preceding claims, characterized in that the protocol unit (ODS) uses the logging of certain Internet activities to create a subscriber profile, and the proxy node ( 10 ) gives access to the subscriber computer ( 1 ) to the Internet services I and / or the start page ( 5 ) designed depending on the participant profile.