Authentication method for network security access and authentication system for implementing method

Abstract

The invention discloses an authentication method for network security access and an authentication system for implementing the method. Multi-tuple binding of an access user is realized in a Web authentication way on a network access layer, and checking and setting for a DSCP (Differentiated Services Code Point) value of a user IP (Internet Protocol) message is realized. The authentication method is based on Web authentication of multi-tuple binding, more suitable for various network access environments and application safety demands, simple in internal state, and convenient for trouble shooting and system stability improvement. In conjunction with Web authentication of multi-tuple binding of QoS (Quality of Service) level assurance, the problems of irregular DSCP value or DSCP value cheating and the like in the network IP message are solved effectively, and an Internet service provider can provide IP QoS assurance for various services more easily.

Description

technical field [0001] The invention discloses a network security access technology, in particular to an authentication method for network security access and an authentication system for realizing the method. Background technique [0002] With the rapid increase in the number and types of access network devices, network management and security issues are becoming more and more severe, and network users have different needs for accessing the network, and the traditional secure access system is becoming more and more difficult to adapt to the increase in network scale and user needs. The requirement of diversity makes the disadvantages of traditional network access increasingly prominent. Web authentication is a widely used secure access authentication method at present. It relies on a Web browser to perform interactive authentication with a Web authentication server through the HTTP protocol. The current IP Quality of Service (QoS) technology mainly adopts the differential ...

AI Technical Summary

Problems solved by technology

There are mainly following shortcomings and deficiencies in the prior art: 1. Since there is no source MAC address and source IP address legality check for the user IP message that has passed Web authentication, false address spoofing and related network attacks may occur, and this Such network deception and attacks are difficult to track, making it increasingly difficult for network managers to effectively manage the network

2. Since the DSCP value of the IP packet is mainly set by the user terminal when sending the packet, the network access system does not check the legality of the DSCP value of the IP packet, resulting in some DSCP values ​​of the IP packet appearing in the network Irregularities or DSCP value spoofing, etc., it is difficult for network service providers to provide differentiated services for various services based on the DSCP value of IP packets

Images