AAA service session access control system and method

Abstract

The present invention discloses a general system and a method for double controlling the flow rate and the duration in AAA service conversations. The system of the present invention comprises an access service subsystem, a Radius service subsystem and a conversation service system, wherein, the Radius service subsystem is responsible for processing verification and accounting requests of users, distributing the surplus flow rate to the access service subsystem, and distributing the surplus duration to the conversation service subsystem; the access service subsystem is responsible for monitoring the surplus flow rate of online users, sending fee counting stopping messages to the Radius service subsystem when the surplus flow rate of the users is used up, and disconnecting the user connection when the condition for canceling the user connection is provided; the conversation service subsystem is responsible for monitoring the surplus duration of the online users, and notifying the Radius service subsystem when the duration of the user is used up. The conversation server can be an independent conversation server or be placed in the Radius service process.

Description

technical field [0001] The invention belongs to the technical field of access control in network systems, and in particular relates to an access control system for controlling access duration and flow in an AAA service session and an access control method using the access control system. Background technique [0002] The so-called AAA refers to a network security system that provides authentication (Authentication), authorization (Authorization) and accounting (Accounting). The commonly used AAA protocol is Radius (Remote Authentication Dial-In User Service). According to the standard Radius protocol, when a user initiates an access request, the access server generates a request packet based on user information and sends it to the Radius server, and the Radius server authenticates the user. If the authentication passes, the Radius server sends a response message containing authorization attributes to the access server. An important piece of information contained in the autho...

AI Technical Summary

Problems solved by technology

However, in the actual operating environment, there is a demand for simultaneous control of duration and traffic, such as monthly subscription users with limited traffic in the campus network. To meet such needs, the current AAA service has the following disadvantages: If the Radius server issues the maximum online If the Radius server sends the maximum online traffic to the access server, the duration of the user session will be uncontrollable; in either case, it may bring losses to the service provider

The disadvantages of this solution are as follows: First, most access servers do not support simultaneous control of session duration and flow, which requires service providers to link a specific The servers are bundled together, so there is a lack of versatility and flexibility; secondly, due to the need to access the server and control the session duration and flow at the same time, this increases the burden on the access server and affects the performance of the access server. higher requirement

Images