Authority setting method of user access network and equipment

Abstract

The invention discloses an authority setting method of a user access network and equipment, which are applied to a network system comprising a network authentication server and a plurality of network access areas. The network authentication server stores access authority information of at least one user name in the plurality of network access areas respectively; when a user request is accessed, the user name and the position recognition information of the current network access area are provided, the corresponding resource access authority is obtained and network access is carried out. The invention realizes access authority allocation based on the actual access position of the user, can avoid that the access authority can not be controlled due to change of the access area, can adopt uniform access authority control for unfixed staff in all access areas, and adopts a single account number mode to access, thus providing convenience for use of users, improving network security of the network and simultaneously user experience.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and device for setting permissions for users to access a network. Background technique [0002] With the continuous popularization and development of network applications, network security has gradually become an issue that enterprises attach great importance to. Among them, how to control user access is a crucial issue. Allowing legal users to use the network and performing correct authentication and authorization are the most basic requirements for network access control of users. The Remote Access Dial In User Services (RADIUS) protocol is a standard protocol for controlling network user access, based on the client / server (Client / Server, C / S) model. Before accessing the network, the user must be authenticated by the authentication, authorization and accounting (AuthenticationAuthorization Accounting, AAA) server to ensure that only authenticated legal users ca...

AI Technical Summary

Problems solved by technology

[0008] 1. If the employee cannot access the R&D department network with his access user name (the access system is not authorized to access the R&D area), the employee cannot use the current network resources;

[0009]2. If the employee can access the R&D area and use the established network security control strategy of the R&D area to access the resources of the R&D area, it may cause R&D information leakage

[0014] 3. A large number of account management configurations and access rights assignments bring a lot of repetitive work to network administrators;

[0015] 4. It is impossible to effectively control the life cycle of the account. For example, when an employee resigns, although the account of his department is also canceled at the same time, his roaming account still exists in the system, which brings backdoor hidden dangers to the enterprise network;

[0016]5. There is a lack of unified management of the security access rights of roaming users in each administrative region. It is inevitable that some roaming users may access unauthorized authorized web resources

Images