Multi-service authentication method and system based on ipoe

Abstract

The invention relates to a multi-service authentication method based on IPoE. The method comprises the following steps: an access server receives a DHCP Discovery message initiated by a terminal, and the DHCP Discovery message comprises serial number information and service domain information of the terminal; the access server parses and generates an authentication account number; the access server sends the authentication account number and access line information to a certificate server together; based on the authentication account number and the access line information, the certificate server inquires a user database of the certificate server and carries out authentication on the terminal. The invention also relates to a multi-service authentication system based on IPoE. According to the method and the system of the invention, a DHCP Discovery broadcast request is utilized to carry out DHCP authentication, the terminal serial number and service domain information which form the authentication account number not only can only determine a terminal, but also can distinguish different service types, and a service load of one line to a plurality of services is realized; through the authentication account number and the access line information, service authentication is carried out, inputting a username and a password in present authentication technology is not needed, and convenient authentication is realized.

Description

technical field [0001] The present invention relates to broadband network technology, in particular to a multi-service authentication method and system based on IP over Ethernet (IPoE for short). Background technique [0002] With the development of broadband networks, broadband IP terminals such as IPTV set-top boxes, VoIP phones, and home gateways are widely used. At present, terminal access authentication technologies for broadband services mainly include a point-to-point protocol over Ethernet (PPP over Ethernet, PPPoE for short) technology. PPPoE authentication needs to set the user name and authentication password in the terminal. For IPTV set-top boxes, VoIP phones and other terminals, there are problems such as complicated installation process and inconvenient use for customers. [0003] In addition, the PPPoE tunnel is initiated from the user terminal and terminated by the Broadband Remote Access Server (BRAS). It cannot support flexible multicast replication on th...

AI Technical Summary

Problems solved by technology

[0006] 1. There is no MAC entry field in the background business support system: In the existing business operation process, the background business support system does not save the terminal MAC address (only the device serial number), and the system does not have a corresponding entry field

[0007] 2. The MAC address of the terminal device is not uniquely determined: there are often more than one LAN port of the terminal device, and there are multiple possibilities for the MAC address. It is difficult to define which MAC address is used as the basis for authentication, which is easy to cause confusion

[0008] 3. Some terminal devices dynamically use MAC addresses to access, and the same business may use different MAC addresses in different periods of time.

Images