Policy-based re-authentication method and device

Abstract

The embodiment of the invention provides a policy-based re-authentication method. In the method, a re-authentication policy of a client side is configured, and then an equipment side performs corresponding re-authentication according to the configured re-authentication policy of the client side. The policy-based re-authentication method provided by the embodiment of the invention has the beneficial effects that by configuring the re-authentication policy, influence on business flow of the legal client side can be prevented in case of network-side communication failure between the equipment side and an authentication server, thus improving the business reliability during the authentication process under the condition of ensuring the safety.

Description

technical field [0001] The present invention relates to the field of communication, in particular to a policy-based re-authentication method and device. Background technique [0002] 802.1X is a port-based network access control protocol developed by the IEEE (Institute of Electrical and Electronics Engineers), which can authenticate and control connected user equipment on ports of Ethernet access devices. The 802.1X authentication system includes three parts: the client (Supplicant), the device (Authenticator) and the authentication server (AuthenticationServer). Authentication interaction is performed between the client and the device through EAPOL (Extensible Authentication Protocol over LAN) messages; the device judges whether to authorize the access port or the MAC address of the client according to the authentication result returned by the authentication server, thereby completing the access control of the client : Only the business traffic of the authenticated client...

AI Technical Summary

Problems solved by technology

There may be many reasons for the failure of re-authentication. In addition to the replacement of illegal clients and the disconnection of legitimate clients, it may also be caused by a communication failure on the network side between the device and the authentication server, resulting in the interruption of re-authentication interactions.

At present, for re-authentication failures caused by communication failures on the network side, the processing method on the device side is still to revoke the client's authorization and prohibit the client's business traffic from entering the network.

In this case, if the device side revokes the authorization of the client by mistake, the business of the legitimate client will be interrupted, causing great losses to the user.

Images