Method for conversing network access authentication as well as system and apparatus thereof

Abstract

A method for converting the network access authentication, includes the following steps: receiving a first authentication protocol packet transmitted by a first side which supports the first authentication protocol; converting the first authentication protocol packet to a second authentication protocol packet, and transmitting the converted second authentication protocol packet to a second side which supports the second authentication protocol. A network node device and a system for converting the network access authentication are disclosed. Through implementing the embodiments of the invention, an authentication relay converts the layer-2 authentication protocol message to the layer-3 authentication protocol message, and authentication and authorization are performed in the network in which the authenticator lies, thus the problem of performing authentication in the next generation access network is resolved.

Description

technical field [0001] The invention relates to the field of network communication, in particular to a method, system and device for network access authentication conversion. Background technique [0002] Network Access Authentication Bearer Protocol (Protocol for carrying Authentication for Network Access, PANA) is a layer 3 authentication protocol, and this layer 3 authentication protocol system generally includes a PANA client (PANA Client, PaC), a PANA authentication agent ( PANA Authentication Agent, PAA), authentication server (Authentication Server, AS) and control point (Enforcement Point, EP). Among them, the PaC is located at the client side of the PANA protocol, used to obtain access to the network described by the PAA, and participate in the authentication process of the PANA protocol; the PAA is located at one end of the access network, and is responsible for communicating with the AS to verify the authenticity of the PaC authentication certificate. It also pro...

AI Technical Summary

Problems solved by technology

[0004] Existing user terminals basically use layer 2 authentication protocols, such as a layer 2 authentication method 802.1x and point-to-point protocol (Point-to-Point Protocol, PPP), etc., figure 1 When the TE access layer 2 RG or access point (Access Point, AP) is authenticated through the layer 2 protocol, the layer 2 authentication protocol cannot pass through the layer 3 RG, and even the layer 2 RG does not support Transparent transmission of layer 2 broadcast information

If the Layer 2 protocol authentication can pass through the RG of Layer 3, but cannot pass through the AN or IP convergence node of Layer 3 to reach the IP edge node where the PAA is located, and with the development of the access network, the AN or IP convergence node of Layer 3 It is the development trend of the next-generation access network, which requires the client to meet the requirements of the Layer 3 authentication protocol. However, PANA of the Layer 3 authentication protocol is a new authentication protocol. If PANA is used for authentication, all Clients that support all layer 2 authentication protocols are upgraded or replaced with clients that support layer 3 authentication protocols, but the cost of this upgrade or replacement will be high

Images