Single point authentication method and system thereof

Abstract

The invention discloses a web portal single point authentication method based on an IP under a NAT444 environment and a system thereof The method comprises the following steps that: for a user on which the web portal single point authentication carries out, the web portal redirects the user to an authentication server in a NAT444 internal network; the authentication server writes authentication information into user cookies and redirects the user to the web portal; the web portal reads the authentication information in the user cookies so as to carry out the authentication. The method and the system do not depend on a self-function of NAT444equipment. Reconstructions to a structure and a service flow of the current system can be avoided furthest. No matter under a simple IPv4 environment or a v4, v6 dual stack environment, the method and the system can be used. Versatility and flexibility are good.

Description

technical field [0001] The invention relates to the technical field of network identity authentication, in particular to a Web portal single-point authentication method and system. Background technique [0002] The use of private IPv4 addresses and the mutual translation (NAT) with public addresses are important technologies in the transition period of IPv6. During the period of transition from IPv4 to IPv6, all the evolution schemes depend on NAT except the pure IPv6 access evolution scheme. Among them, two-level NAT conversion, that is, NAT444, is one of the IPv4 address sharing technologies used by telecom operators during the transition period of IPv6. This solution realizes large-scale NAT eliminates the need to assign public IPv4 addresses to users. The NAT deployed by operators is usually also called LSN (Large Scale NAT, large-scale common address exchange) or CGN (Carrier Grade NAT). [0003] In the NAT444 environment, most of the existing services of the operato...

AI Technical Summary

Problems solved by technology

[0003] In the NAT444 environment, most of the existing services of operators will not be affected, but the IPv4-based Web portal single-point authentication platform will be affected

Some current methods rely on the functions of the NAT444 device itself to solve this problem. However, due to the differences in the ways of implementing NAT444 in various manufacturers' devices, the method of relying on the functions of the NAT444 device itself has certain limitations.

Images