Method and device for controlling multicast service access by customer device in access network

Abstract

The invention provides a method used for controlling the user equipment to access in the multicasting service in the network access equipment and network authentication equipment of the access network and a device thereof; wherein, the invention also provides a method used for controlling the user equipment to withdraw the multicasting service in the network access equipment of the access network and a device thereof; for the user equipment which applies for certain multicasting service, only the status of the user equipment needs to be authenticated; when the user equipment passes the authentication, the network authentication equipment sends the multicasting service access authority corresponding to the user equipment to the network access equipment and memorizes the multicasting service access authority in the network access equipment; detailedly, when the user equipment applies for certain multicasting service in the multicasting service, the network access equipment judges whether the user equipment has the access authority of the multicasting service according to the multicasting service authentication information memorized wherein, and needs not to carry out the status authentication on the user equipment when each multicasting service of the multicasting service is applied by the user equipment.

Description

technical field [0001] The present invention relates to an access network, in particular to a network access device and a network authentication device in the access network. Background technique [0002] At present, the computer network business is developing rapidly, and corresponding network applications emerge in endlessly, such as broadband access, VOD service, video conferencing, interactive multipoint broadcasting, etc. When network operators and service providers provide network value-added services, they generally When configuring broadband value-added services through digital subscriber lines (DSL) or other access networks, it is necessary to authenticate user equipment at the network access level (network access) and service level (service level), that is, to authenticate the identity of the user equipment And determine the authority of the user equipment to access network services, and configure ports for the user equipment on the basis of successful authenticati...

AI Technical Summary

Problems solved by technology

[0007] The disadvantages of this implementation scheme are: 1) Since the BRAS is used to determine the user's access authority to the network service, and then the access authority is pushed to the network access device, the speed is relatively slow when the channel is changed; 2) the standard Radius server needs to be extended (remote user dial-up network authentication device) function to authenticate the user based on the user-related information extracted from the IGMP association message; 3) use the private control message to transmit the access right to the network access device

[0009] The defect of this implementation scheme is: 1) there are two separate authentication steps, and the network authentication device must combine the multicast access authority from 802.1x, PPPoE or Web interface entrance authentication with the user-related information contained in the IGMP request message ( network port information); 2) the function of the standard Radius server needs to be extended to authenticate the user identity based on the user-related information extracted from the IGMP request message; 3) the multicast access authority is pushed to the network interface using private messages Incoming equipment, there is an authentication processing delay after the user terminal sends the IGMP request message

[0010] It can be seen from the above that in the prior art, there are defects of one kind or another. For example, in the above-mentioned first implementation scheme, for each network service request, the user equipment needs to be authenticated by the network authentication device, resulting in a relatively slow authentication speed. and for the second implementation scheme, the network access device can store the authenticated user equipment access authority, but the process of obtaining the user equipment access authority is relatively complicated, for example, there are two separate authentication steps, which also not a suitable solution

Images