Method and system for accessing network based on user identification authorization

Abstract

The invention discloses a method and a system for an authorized access network based on the user identity, wherein, the method comprises the following steps: the SLCC in user equipment generates a corresponding SAML document identity message according to the identity information input by a user and sends the message to PAA; the PAA encapsulates the message, converts PNNA signaling into Diameter signaling by the connected SLCC, and transmits the message to Diameter repeater equipment; the Diameter repeater equipment transmits the message to a corresponding network by Diameter redirect equipment; analysis is carried out to the message by an AAA server which receives the message, then URA authenticates the analyzed user identity and obtains the attributes and the role information of the userby APRRA; PDP obtains authorized decision-making information from the APRRA by the attributes and the role information, and EP sets user equipment access permission and allocates network resources according to the authorized decision-making information. The invention can reasonably set the user permission and allocate the network resources.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and system for authorizing access to a network based on user identity. Background technique [0002] In current network access technologies, two authentication mechanisms, IEEE802.1X and PPPOE, are commonly used. The point-to-point connection protocol (PPPOE) carried by Ethernet applies the PPP link protocol, and establishes a point-to-point PPP link channel between the user and the authentication server. It does not use the development of multicast services, and its access method requires Increase the encapsulation overhead of the frame, mainly applicable in the Ethernet range. [0003] In IEEE802.1X authentication, the user and the authenticator transmit authentication messages through the Extended Authentication Protocol over Local Area Network (EAPOL) carrying the Extensible Authentication Protocol (EAP). The state of the port controls user access. [0004]...

AI Technical Summary

Problems solved by technology

[0005] In view of this, the present invention is to provide a method and system for authorizing access to the network based on user identity, so as to solve the above-mentioned problems that if each user is assigned the same authority and resources, the utilization rate of network resources will decrease and resources will be wasted

Images