Method and equipment for processing messages

Abstract

The invention discloses a method and equipment for processing messages. The method comprises the steps that an authentication server receives an authentication request message from a client terminal; if items corresponding to marking information exist in an authentication failure time record table, the authentication server queries authentication failure time corresponding to the marking information in the items; and if the authentication failure time exceeds a prearranged threshold, the authentication server abandons the authentication request message. In the invention, protective measures can be taken on the authentication request message of an attacker so that an RADIUS server has certain attack resistance, thereby reinforcing the stability of the RADIUS server.

Description

technical field [0001] The present invention relates to the technical field of communication, in particular to a message processing method and equipment. Background technique [0002] RADIUS (Remote Authentication Dial In User Service) is a network access device (such as a switch, router, firewall, etc.) that works at the network access layer and reports requests from clients to The protocol for carrying authentication, authorization, accounting and configuration information between the RADIUS server (used to verify user identity information and respond according to the response policy) , and has the following characteristics: using client / server structure, using shared keys to ensure network transmission security, good scalability, and flexible authentication mechanism. [0003] Because the RADIUS protocol stipulates that as long as the client's authentication or accounting message conforms to the format and other basic requirements of the RADIUS protocol, the RADIUS serve...

AI Technical Summary

Problems solved by technology

[0003] Because the RADIUS protocol stipulates that as long as the client's authentication or accounting message conforms to the format and other basic requirements of the RADIUS protocol, the RADIUS server needs to respond, which leads to potential security risks; that is, an attacker can use multiple clients to quickly and continuously send Authentication request packets, so that the RADIUS server needs to process a large number of authentication request packets, and cannot process normal authentication request packets sent by non-attackers in time, thus forming an attack

[0004] In the existing technology, no protection measures are taken for the authentication request message sent by the attacker, and the processing method is the same as that of the normal authentication request message, which causes the decline of the processing performance of the RADIUS server

Images