Authentication authorization method and apparatus thereof

Abstract

The invention discloses an authentication authorization method and an apparatus thereof, and belongs to the communication network field. The method comprises the following steps: a device sends a first authentication request to a RADIUS (Remote Authentication Dial In User Service) server, sends a second authentication request when not receiving a first authentication response returned by the RADIUS server in a preset time, and sends the first authentication request to the RADIUS again when receives a second authentication response returned by the RADIUS server in the preset time to enable the RADIUS server to return the first authentication response according to the first authentication request. The authentication authorization apparatus comprises a receiver, a transmitter and a determination module. According to an embodiment of the invention, a problem that a service is interrupted when authenticates an original RADIUS anew is solved, and acquiring wide scope of authority for a user in a condition of not interrupting a user service is ensured.

Description

technical field [0001] The invention relates to the field of communication networks, in particular to a method and device for authentication and authorization. Background technique [0002] RADIUS (Remote Authentication Dial In User Service) is a protocol for authentication, authorization, and accounting information between a network access server that needs to authenticate its link and a shared authentication server. The device can act as a client to communicate with the RADIUS server. Configure user information on the RADIUS server. The device sends the user name and password to the RADIUS server through the RADIUS protocol. The RADIUS server completes user authentication and returns the authentication result to the device. [0003] When the RADIUS server is unreachable, the device authenticates the user locally and authorizes the authenticated user locally so that the user can go online successfully. The user can access the network according to the local authorization in...

AI Technical Summary

Problems solved by technology

[0005] The level and allowed range of the local authorization information of the device to the user and the authorization information of the RADIUS server to the user are different, which limits the scope of the user's business and cannot meet the user's needs.

However, when the RADIUS server changes from the unreachable state to the reachable state, if the locally authenticated user wants to obtain the authorization information of the RADIUS server in the unreachable state, he needs to go offline and then go online again, which will interrupt the service of the user and affect the service quality.

Images