Access control method and equipment for dual-stack user

An access control and user technology, applied in electrical components, transmission systems, etc., to solve the problems of inability to access dual-stack Internet access for the same user, inability to learn IPv4/IPv6 address associations, etc.

Active Publication Date: 2012-02-01
XINHUASAN INFORMATION TECH CO LTD
View PDF4 Cites 16 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0017] The present invention provides a method and equipment for access control of dual-stack users, which is used to solve the problem that the PORTAL authentication gateway cannot know the association between the IPv4 / IPv6 addresses of the same user in the prior art, and thus cannot perform dual-stack access control for the same user. The problem of access control on stack Internet

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Access control method and equipment for dual-stack user
  • Access control method and equipment for dual-stack user
  • Access control method and equipment for dual-stack user

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0043] The embodiment of the present invention proposes a technical solution for dual-stack address association when the PORTAL authentication gateway in the access device cannot obtain the dual-stack address association information of the dual-stack user, and uses this association to control the user's Internet access. Specifically, the embodiment of the present invention deploys an IPv4 / IPv6 address mapping algorithm on the DHCPv4 / DHCPv6 server and the PORTAL authentication gateway, and pre-allocates an IP address of another protocol when assigning an IPv4 address or an IPv6 address to a user , so as to establish the IPv4 / IPv6 user association relationship, and then complete the user's dual-stack authority control on the PORTAL authentication gateway.

[0044] Embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

[0045] In the PORTAL networking architecture of the embodiment of the present invention, the DHCPv...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an access control method and equipment for a dual-stack user. The method and equipment are used in a PORTAL network system, wherein a mapping algorithm between an IPv4 address and an IPv6 address is configured on a DHCPv4 server, a DHCPv6 server and a PORTAL authentication gateway respectively. The method comprises the following steps that: when the DHCPv4 / DHCPv6 server receives an address allocation request of the client, the DHCPv4 / DHCPv6 server judges whether an IP address of a corresponding protocol is pre-allocated to the client; if so, the DHCPv4 / DHCPv6 server allocates the pre-allocated IP address to the client; otherwise, the DHCPv4 / DHCPv6 server allocates an IP address to the client, and pre-allocates an IP address of another protocol to the client according to the mapping algorithm between the IPv4 address and the IPv6 address; when the PORTAL authentication gateway receives a network access request based on the IPv4 address or the IPv6 address from the client and the client passes the authentication, the PORTAL authentication gateway obtains an IP address of the other protocol according to the mapping algorithm between the IPv4 address and the IPv6 address, and performs network access right control on the client according to the IPv4 address and the IPv6 address of the client.

Description

technical field [0001] The invention relates to video surveillance technology in the field of communication technology, in particular to a method and equipment for access control of dual-stack users. Background technique [0002] IPv6 (Internet Protocol Version 6, Internet Protocol Version 6) is the second-generation standard protocol of the network layer protocol, also known as IPng (IP Next Generation, Next Generation Internet), it is IETF (Internet Engineering Task Force, Internet Engineering Task Force Group) designed a set of specifications, is an upgraded version of IPv4. The most notable difference between IPv6 and IPv4 is that the length of the IP address is increased from 32 bits to 128 bits. [0003] The IPv6 address can be configured manually or through an automatic configuration method, which includes ND stateless automatic address configuration and DHCP (Dynamic Host Configuration Protocol, Dynamic Host Configuration Protocol) stateful configuration. DHCPv6 (D...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06H04L29/12
Inventor 林涛
Owner XINHUASAN INFORMATION TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products