A network access system and method based on ndis filter driver

Abstract

The invention relates to a network admission system based on an NDIS (Network Driver Interface Specification) filter driver. The network admission system comprises an enterprise internal system, a client, NDIS admission equipment and an authentication server, wherein the NDIS admission equipment comprises an application layer program module and an NDIS filter driver module; and the authentication server is used for providing a Web authentication page. The method comprises the following steps: connecting a computer to the NDIS admission equipment through switch equipment, and connecting the NDIS admission equipment, the authentication server and the enterprise internal system to the Ethernet through a three-layer switch respectively; and releasing, discarding or redirecting past data packets by the NDIS admission equipment according to a computer not passing identity authentication and a computer passing the identity authentication. Through adoption of the network admission system, a network admission function is realized through the NDIS filter drive module based on the NDIS admission equipment. The network admission system is high in universality, low in cost, and convenient for installation and maintenance. Moreover, a redirected data packet is directly constructed on a driving layer, so that the working efficiency is increased effectively.

Description

technical field [0001] The invention relates to the field of network access systems, in particular to an NDIS filter-driven network access system and method. Background technique [0002] The internal network resources of the enterprise are the property and confidentiality of the company, and cannot be accessed by external computers at will. It is necessary to ensure that the identity of the computer is trustworthy before the computer accesses the network resources, so identity authentication must be performed before the computer accesses the network. Identity authentication, also known as identity verification or authentication, refers to the process of confirming the identity of the operator in the computer network system, so as to determine whether the user has access and use rights to certain resources, and then make the computer and network system access policies It can be executed reliably and effectively, preventing attackers from impersonating legitimate users to gai...

AI Technical Summary

Problems solved by technology

[0003] In the prior art, identity authentication is usually based on customized hardware devices to implement network access methods such as PPPOE, Web+Portal, and 802.1x. However, the above-mentioned methods put forward high hardware requirements for computers and network systems. Purchasing special hardware equipment has disadvantages such as poor versatility and high implementation cost, and installation and maintenance are more troublesome. If the hardware is damaged, you need to find a special organization for repairs, which seriously reduces work efficiency.

Images