Method and device for enabling third generation (3G) user to safely access to network

Abstract

The invention discloses a method and a device for enabling a third generation (3G) user to safely access to network. When a link control protocol (LCP) attribute and a user name of a client, which are acquired by layer 2 tunneling protocol network server (LNS), are acceptable, an temporary internet protocol (IP) address is selected from an established temporary IP address pool and distributed to the client, fixed information which is sent by the client and can verify the client identity is received, when the fixed information is received, the fixed information is correspondingly recorded with the user name and a password, the point-to-point protocol (PPP) connection with the client is disconnected to trigger the client to initiate a second time virtual private dial-up network (VPDN) call, the client is informed of the specified IP address which is distributed by authentication, authorization and accounting (AAA) server to the client according to the recorded fixed information, the user name and the password, or when the fixed information is received, the fixed information, the user name and the password are directly sent to the AAA server to verify the client, and after the client passes the authentication, the client is informed of the specified IP address which is distributed by the AAA server to the client. By means of the method and the device, the client can access to network only when the client is subjected to safety authentication by the LNS, and the safety of network access is improved.

Description

technical field [0001] The present application relates to the technical field of 3G networks, in particular to a method and equipment for realizing safe access of 3G users to the network. Background technique [0002] With the maturity of 3G network, users have more and more demand for 3G wireless applications. 3G network brings great convenience to users, and at the same time it is a good supplement to wired communication methods and improves network reliability. Among them, the more commonly used method of 3G access is virtual private dial-up network (VPDN) access, especially in finance and other industries with high security requirements. Operators assign specific user names and passwords to 3G users, and 3G users use this After the user name and password are connected to the network, the Layer 2 Tunneling Protocol Access Concentrator (LAC) of the operator's access device is responsible for establishing a Layer 2 Tunneling Protocol (L2TP) with the Enterprise Headquarters ...

AI Technical Summary

Problems solved by technology

[0007] From the above analysis, it can be seen that when the existing network is connected to the VPDN, the client can only send the user name, password and other information to the LNS for authentication through the PPP protocol, but cannot use it to identify whether the client can access The fixed information of the LNS, such as the device serial number (SN) information of the client and the International Mobile Subscriber Identity (IMSI) of the 3G UIM / SIM card, etc. Information, even if it does not use fixed information such as specified device SN information and 3G IMSI information, can also access the internal network of the enterprise, thereby reducing the security of network access

Images