User identity authentication method and system

Abstract

The invention provides a user identity authentication method, which comprises the following steps of: uniformly storing and recording authentication parameters of user identity into a unified authentication server, and uniformly authenticating the legality of the user identity by using the unified authentication server when a user logs in network equipment. The invention also provides a user identity authentication system. By the user identity authentication method and the user identity authentication system, security-policy-based unified user management and authentication can be realized, the unified authentication of a plurality of pieces of network equipment over the user identity is realized and the maintenance difficulties and complexity of a network equipment manager are reduced simultaneously, thereby reducing production cost and threats to information security.

Description

technical field [0001] The invention relates to the field of information security, in particular to a user identity authentication method and system for network equipment. Background technique [0002] As operators build larger networks, the number of network devices increases rapidly. At present, the user information maintenance of various network devices is maintained by each device. When using the same user to log in to each network device, it is necessary to create the same user on each device. Today, with the rapid increase of the network and the rapid development of the market, the disadvantages of this management mode are becoming more and more obvious, especially when the new network uses a large number of firewalls, switches, routers, etc., this disadvantage is particularly prominent. In addition, if you want to modify a user's access control policy, you need to modify the policy on each device, which makes it difficult and cumbersome to maintain network device use...

AI Technical Summary

Problems solved by technology

Today, with the rapid increase of the network and the rapid development of the market, the disadvantages of this management mode are becoming more and more obvious, especially when the new network uses a large number of firewalls, switches, routers, etc., this disadvantage is particularly prominent

In addition, if you want to modify a user's access control policy, you need to modify the policy on each device, which makes it difficult and cumbersome to maintain network device users, which increases production costs and poses a serious threat to information security.

Images