Network access control method based onuser's account number

Abstract

The present invention discloses one network access control method based on user's account number. User's network access authority is divided into different grades and control groups, different network IP addresses and address sections corresponding to different grades are set, and the corresponding relation between the user's account and the network access grade are set, so that when the user accesses, the user's access authority grade or the control group is obtained based on the user's account and the network access IP address or IP address section corresponding to the user's network access destination address is matched based on the grade or the control group. If the matching result is to allow access, the message is transmitted, or else, the access is rejected. The control method to user's network access is precise and flexible and can meet the requirement of multiple-layered access.

Description

technical field [0001] The invention relates to a user's network access control method. Background technique [0002] In the broadband access server (BAS) of the current broadband network, the forwarding of the broadband data message is inevitably involved, that is, the problem of forwarding control of the message, or the problem of network access control of the user is involved. For example, when it is necessary to restrict users accessing a website with an IP address, if the user accessing the website with the IP address satisfies the restricted conditions, the access operation will be cut off when the user accesses the network. For another example, the operator divides network access into multiple levels according to the needs of operation, and at the same time enables different users to have different levels of network access rights. its network access. In order to achieve the above control requirements, two control methods are mainly used at present: one is the contro...

AI Technical Summary

Problems solved by technology

Because the IP address obtained through the DHCP process is usually different every time a user accesses the Internet, this makes it complicated and difficult to control the user's network access

Although the accuracy of the above control methods has been improved, it still cannot achieve user-level control accuracy and hierarchical control requirements.

Images