Method and apparatus for realizing portal authentication

Abstract

The application provides a method and apparatus for realizing portal authentication. The method comprises: receiving a request sent by a client, carrying out interaction with a portal server by a proxy server, returning a page for authentication information inputting by a user to the client; receiving the authentication information inputted by the user and sending a request carrying the authentication information and a preset identifier to the portal server by the proxy server to enable the portal server to return response information containing the authentication information for launching authentication according to the preset identifier; and carrying out interaction with an authentication server according to the response to obtain an authentication result, sending a request containing the authentication result to the portal server by the proxy server, and receiving a response, for authentication result notification, returned by the portal server, thereby returning the authentication result to the client. According to the embodiment of the invention, UDP messages can be sent at fixed time without any access equipment, thereby effectively reducing communication consumption in a network.

Description

technical field [0001] The present application relates to the technical field of communications, and in particular to a method and device for realizing Portal authentication. Background technique [0002] Usually, an authentication client interacts with a portal (Portal) server, an authentication and accounting server, and a security policy server through an access device to complete Portal authentication. Among them, Portal authentication is to redirect the user's first Hypertext Transfer Protocol (HTTP) request to the Portal server on the access device, and then the Portal server pushes a page to the user, allowing the user to enter the user name and password to complete the authentication process . [0003] Specifically, the process of implementing Portal authentication is: the authentication client (hereinafter referred to as the client) associates with the access device and accesses any uniform resource locator (URL); After receiving the user name and password input b...

AI Technical Summary

Problems solved by technology

[0004] In the process of realizing the above authentication, the Portal server needs to know the address of the access device, but if the Portal server is deployed on the public network and the access device is deployed on the private network, the Portal server cannot know the address of the access device, so the Portal server cannot be implemented. certified

[0005] The prior art adopts the following scheme to solve the problem that Portal authentication cannot be realized because the Portal server cannot know the address of the access device: the access device regularly sends a User Datagram Protocol (UDP) message carrying its own identification to the Portal server, The Portal server receives the UDP message and records the mapping relationship between the source port of the access device, the source IP and the access device identifier; when the access device redirects the client's HTTP request, it inserts its own identifier into the HTTP payload, so that when the Portal server When receiving the user name and password submitted by the client, you can look up the mapping relationship of the local record according to the access device ID, and initiate authentication to the access device

[0006] However, the above solution needs to send messages regularly, which increases the communication consumption and the performance consumption of the Portal server

Images