Secondary authentication method and system

Abstract

The invention relates to a secondary authentication method, which includes two steps. Firstly, when a user gets online, the internal network authentication is first carried out, then the external network authentication is carried out, and consequently, the user can be billed according to an billing policy of using an internal network; when the user gets offline, the external network authentication is first carried out, then the internal network authentication is carried out, and consequently, the user can be billed according to an billing policy of using an external network. The secondary authentication method of the invention combines the prior 802.1x and Portal authentications, so that administrators can respectively control the resources of internal and external networks and control the user accesses of the resources of internal and external networks according to different rights, and moreover, the invention provides a method and a system for differentiating the user accesses of the resources of internal and external networks, so users can be billed on the basis of different billing policies according to the IP addresses of access devices when users access the resources.

Description

technical field [0001] The present invention relates to the authentication of 802.1x protocol and Web Portal authentication technology, especially when the administrator needs to restrict according to the user's access authority, and the authentication server needs to distinguish the user's access area, that is, the internal and external network, so that the authentication server can adopt different internal and external networks. A secondary authentication method and system for billing by billing policy. Background technique [0002] Campus networks and enterprise networks can perform user authentication through multiple methods such as 802.1x and Web Portal, but it is difficult to distinguish the user's access area, that is, the internal and external network, if only one authentication is performed; Billing according to the requirements of separate billing by the network. [0003] The message flow chart of successful 802.1X user authentication, such as figure 2 Shown, in...

AI Technical Summary

Problems solved by technology

[0002] Campus networks and enterprise networks can perform user authentication through multiple methods such as 802.1x and Web Portal, but it is difficult to distinguish the user's access area, that is, the internal and external network, if only one authentication is performed; billing according to the requirements of network separate billing

Images