Authentication method, device and system

Abstract

The embodiment of the invention provides an authentication method, device and system, relates to the technical field of communication, and aims to screen authentication behaviors specific to a client on access equipment in order to prevent the client from accessing a network without authorization, reduce resources consumed by authentication and increase the authentication efficiency. The method comprises the following steps: receiving an authentication starting message which includes a client MAC (Media Access Control) address and is sent by the client; matching the MAC address of the client with a preset MAC address table including legal client MAC addresses; and when the MAC address of the client is not matched with the preset MAC address table, discarding the authentication starting message. The embodiment of the invention is used for performing authentication on the access equipment.

Description

technical field [0001] The embodiments of the present invention relate to the communication field, and in particular, to an authentication method, device and system. Background technique [0002] With the popularization of network applications, it is more and more important to improve network security. At present, in a process of accessing a network, a user usually accesses an access device connected to the network to access the network. Before the access device provides users with network access services, it is one of the methods to maintain the network security of the network they access, by checking the user's legality to control the user's network access behavior. [0003] In the prior art, the 802.1X protocol proposed by the IEEE (Institute of Electrical and Electronics Engineers, full name: Institute of Electrical and Electronics Engineers) standardization organization is usually used to check the validity of the connected user / device. The 802.1X protocol is an acces...

AI Technical Summary

Problems solved by technology

[0004] However, in the existing 802.1X authentication method, the illegal client can continuously send EAPoL packets to the authentication server through the access device, and determine whether there is a corresponding User name, and then from the EAPoL message sent from the authentication server to the illegal client to request the authentication certificate, the authentication method and authentication certificate corresponding to the user name are deduced, which leads to the leakage of user information and increases the risk of network attack. During this process, the illegal client will continuously send messages to the authentication server, which will also increase the workload of the authentication server and consume a lot of resources, resulting in a decrease in authentication efficiency.

Images