Wide area network endpoint access domination (EAD) authentication method, system and terminal

Abstract

The invention discloses a wide area network endpoint access domination (EAD) authentication method, comprising: after that the specified restoration documents are needed to be downloaded by a terminal is determined by EAD security inspection, an iMC security certificate server sends P2P user information table to the terminal; the P2P user information table includes a user name corresponding to the terminal which downloads the specified restoration documents; then, the terminal inquiries a terminal IP address corresponding to the user name which belongs to a branch network in the P2P user information table through an EAD control gateway of the branch network and receives a local IP address table returned by the EAD control gateway; the terminal is connected with the corresponding terminal according to the local IP address table, downloads the specified restoration documents and carries out self- restoration for EAD authentication again. The invention also discloses a wide area network EAD authentication system and the terminal. The technical proposal can save bandwidth of the wide area network and accelerates the speed of download.

Description

technical field [0001] The invention relates to the technical field of network authentication, in particular to a wide area network terminal access control authentication method, system and terminal. Background technique [0002] Endpoint Access Domination (EAD) technology is a network access scheme used to detect whether a terminal accessing the network is safe, and it mainly solves the problems of "identity authentication" and "security check" when the terminal accesses the network. [0003] The EAD solution uses network devices as the EAD control gateway for terminal access, and uses the extended Portal protocol for EAD authentication and security checks. Wherein, the security check includes but is not limited to checking the status and version of the antivirus software of the terminal, checking the software running on the terminal, and checking whether the operating system patch of the terminal meets requirements. During the security inspection stage, the terminal that ...

AI Technical Summary

Problems solved by technology

The file loading at this time will occupy the bandwidth of the WAN

[0025] 2. The terminal that needs to be repaired downloads the repair file across the WAN. Since the bandwidth of the WAN link is small (2M-10M) and unstable, it takes a long time to download a large file, which will cause the security authentication to fail over time.

Images