User authentication method in LAN dhcp environment

Abstract

The invention discloses a user authentication method under a local area network DHCP environment. A tetrad is used for recognizing the identity of a user, and comprises a user name, a password, a set and a session-id. A challenge-response mechanism is adopted when user authentication and an authentication server are in communication, the authentication mode of combining the user name, the password and a dynamic random value is adopted in the authentication process, it is guaranteed that authentication messages used by the user in the authentication process are different every time, and therefore an illegal user can be prevented from stealing the user name and password of the user and passing the authentication. The safety internet surfing authentication of the user is achieved, meanwhile, the password does not need to be transmitted in the authentication process, the privacy of the user is protected, and the networking cost of the user is saved. The user only needs to remember the user name and the password, and does not need to consider the set and the session-id, and therefore the user experience is not different from that of a traditional authentication mode.

Description

technical field [0001] The invention relates to a user authentication method under the local area network DHCP environment. Background technique [0002] After the "Prism Project" in the United States was exposed, the issue of network security has become the focus of the national government and enterprises. At the same time, with the development of the Internet and smart terminals, people are increasingly dependent on the Internet. Therefore, people pay more and more attention to strengthening its security when surfing the Internet. Identity authentication is the first gate of network security. Because network security technologies such as access control and information encryption are based on security certification. [0003] When the Internet was just emerging, most people surfed the Internet through the dial-up form of the Public Switched Telephone Network (PSTN), that is, a Modem was connected to the telephone line, and then the Modem was connected to computers and othe...

AI Technical Summary

Problems solved by technology

Recently, Cisco, Huawei and other equipment manufacturers have extended the DHCP protocol and proposed the DHCP+ access authentication technology, that is, the user identity is authenticated while the user obtains the IP address. DHCP+ is still in the development stage and there is no unified standard. , each company uses the Option field in the DHCP protocol to meet the different needs of different users according to actual needs

Images