Protection method of network authentication charging information

Abstract

The invention discloses a method for protecting network authentication and billing information. The method adds user authentication information locally, sets bill pools and cache queues for storing user billing bills, and enables users to perform network access or billing. Time-consuming, if the network authentication and accounting server cannot be used normally, send the user's authentication message to the local, compare with the user authentication information stored locally, after the authentication is passed, store the accounting message in the bill pool. At the end of the user's accounting operation, the user's stop accounting information will be sent to the network authentication and accounting server. If the network authentication and accounting server does not feedback a correct response, the stop accounting information will be saved in the cache queue, and the stop accounting information will be resent. When the number of retransmissions reaches the specified number of times, the transmission will stop; adopting the above scheme can improve the reliability of authentication and accounting information, and protect the interests of both users and operators.

Description

technical field [0001] The invention relates to a method for protecting network information. Background technique [0002] With the development of broadband network technology, how to protect the interests of users without damaging the interests of operators has become more and more concerned by users and operators. fee to achieve. Therefore, in the field of broadband access, how to ensure the accuracy and reliability of network information, such as authentication and billing information, is a matter of great concern to both users and operators. At present, the usual method is to use the remote authentication dial-in user (RADIUS) protocol to authenticate and charge network users. statistics on billing information. The defect of the above-mentioned method for authenticating and charging network users is that a single RADIUS server is adopted, so that the authentication and charging of network users are unreliable, which is embodied in the following two aspects: [0003] ...

AI Technical Summary

Problems solved by technology

The defect of the above-mentioned method for authenticating and charging network users is that a single RADIUS server is adopted, so that the authentication and charging of network users are unreliable, which is embodied in the following two aspects:

[0003] 1. If the link between the access device and the RADIUS server fails or the RADIUS server itself fails, the communication between the network access device and the server is interrupted, and the users who have not been online cannot go online because they cannot pass the authentication of the RADIUS server

At this time, for users who are already online, their billing information cannot be sent to the RADIUS server, so after a period of time, the network access device will cut off the user, causing the user to go offline

Similarly, after the above-mentioned failure occurs, the user's billing information (such as online time, traffic, etc.) cannot be sent to the RADIUS server, resulting in inaccurate user billing information, which damages the interests of the operator.

[0004] 2. When the RADIUS server has been running for a long time, if you want to shut down for maintenance, you have to interrupt all services

[0005] It can be seen from the above that the existing method cannot solve the security problem of the user's billing information when the above-mentioned failure occurs, resulting in the loss of the interests of the user or the operator.

Images