Authentication processing method for broadband network

Abstract

The invention provides a method for authentication processing in a broadband network, the core of which is: record the address information of the network terminal in the online state; when receiving the authentication request message of the network terminal, obtain the address of the network terminal sending the authentication request message information; match the acquired address information with the recorded address information, and determine the network terminal matching the recorded address information; according to the authentication request message of the network terminal matching the recorded address information, the network The terminal is authenticated. The present invention utilizes the authentication request message of the network terminal and the address information of the network terminal to ensure the real-time performance of the detection of the network terminal being hanged, to ensure that the normal network terminal can surf the Internet casually and normally, and to avoid forcing the normal network terminal to go offline The phenomenon of dispersing the processing load of network equipment; thereby achieving the purpose of improving the reliability of authentication processing, reducing the potential threat of network equipment, and reducing the potential cost of network equipment authentication processing.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a method for authentication processing in a broadband network. Background technique [0002] With the development of broadband networks, it has become a fairly popular phenomenon that network terminals access the broadband network through broadband access services and access the Internet (Internet) through the broadband network. A schematic diagram of a network terminal accessing a broadband network through a broadband access service is attached figure 1 shown. [0003] exist figure 1 Among them, BNAS (Broadband Network Access Server) is a broadband access control device located between the network terminal and the Internet, and the AAA (Authorization, Authentication, Accounting) server provides functions such as authorization, authentication, and accounting for the network terminal. The network terminal accesses the broadband network through broadband access met...

AI Technical Summary

Problems solved by technology

[0010] 2. After the network terminal passes the authentication and goes online normally, BNAS has abnormal phenomena such as restarting, and the status of each network terminal in BNAS is all lost, and BNAS does not send the accounting stop message of each network terminal in the lost state to the AAA server

[0011] 3. When the network terminal passes the authentication, goes online normally, and goes offline normally, the AAA server cannot receive the accounting stop message of the network terminal sent by the BNAS due to an abnormality in the network between the BNAS and the AAA server. After the network with the AAA server is restored, BNAS will not resend the accounting stop message of the network terminal

[0012] 4. When the network terminal passes the authentication, goes online normally, and goes offline normally, the AAA server cannot correctly process the billing stop message sent by the network terminal sent by the BNAS due to phenomena such as restarting the AAA server, abnormal database, etc. After the AAA server returns to normal, BNAS will not resend the accounting stop message of the network terminal, and the AAA server will not reprocess the accounting stop message of the network terminal

Using this method will also bring a new problem, when the network between BNAS and AAA server has a short-term abnormality, such as the loss of some intermediate accounting packets, but the network terminal, BNAS and AAA server are not abnormal In some cases, this method will cause the network terminal to be forced to go offline abnormally

[0026] To sum up, when the AAA server authenticates the network terminal, the detection method provided by the existing technology cannot timely and accurately detect whether the network terminal is hanged, resulting in poor reliability of the AAA authentication process, making normal The network terminals cannot access the Internet normally; and the AAA server concentrates on processing a large number of hanged network terminals, occupying a large amount of network resources in a short time, increasing the potential threat of network equipment and increasing the potential cost of network equipment authentication processing

Images