Communication network management certificate authority system and method

Abstract

The invention relates to a communication network management certificate authority system and method, and relates to the field of communication network management. The certificate authority system comprises a network management server, an access management terminal, an certification server and a communication station network, certification information is allocated on the certification server in a concentrated mode, and authority information is allocated on each station; a user conducts station management through the network management server or the access management terminal; the certification information is sent to the certification server through the stations to be certificated, and the stations record information of users who conduct login at present and inform the users; the users send management information interaction commands to the login stations, and after authority function modules of the stations receive the management information interaction commands, whether the users and the corresponding authority limits exist in the authority information are stored in the stations or not is determined; or user logout is carried out, and the stations delete successful login records of the users in the stations. According to the communication network management certificate authority system and method, the requirements for high performance of the certification server in the communication network are reduced, and influences on the performance of the network management system when the certification server side is abnormal in communication are eliminated to the greatest degree.

Description

technical field [0001] The invention relates to the field of communication network management, in particular to an authentication and authorization system and method for communication network management. Background technique [0002] The elements of the communication network include network management and communication equipment sites. The network management manages the communication equipment network through the management channel. Different users can use various forms of network management terminals to access the communication network in various ways, such as in-band and out-of-band. Security and management layering, authentication and authorization are essential, and have been more and more widely used in site management of communication networks. [0003] Such as figure 1 As shown, it is a communication network topology diagram with authentication and authorization functions. The traditional authentication and authorization method adopts centralized management, that is,...

AI Technical Summary

Problems solved by technology

In addition, when the network communication status of the authentication server itself or the authentication server side is abnormal, the communication between some sites and the authentication server will be interrupted. To ensure the security of communication content, the management information exchange between the network management server (or access management terminal) Cannot get the authorization response from the authentication server and has to be terminated, although the communication channel between the network management and the site is normal

Images