Perception-free authentication method and device

Abstract

Embodiments of the invention provide a perception-free authentication method and device. The method comprises the steps of configuring a static IP address segment, receiving an ARP request packet sentby a user terminal, determining whether an IP address of the ARP request packet is in the static IP address segment, if the IP address is in the static IP address segment, storing an ARP entry corresponding to the ARP request packet in a to-be-authenticated user list, setting a timer, when the timer expires, initiating authentication according to authenticated information corresponding to the ARPentry in the to-be-authenticated user list. In the existing network, if the core NAS device learns a dynamic MAC address but cannot trigger MAB authentication. The method solves the above defect.

Description

technical field [0001] The invention relates to the field of data communication, in particular to a method and device for non-perceptual authentication. Background technique [0002] In the current college authentication system, it is supported to add the IP address + MAC address of the user terminal (as an account) in the background. After the addition is successful, the user can directly access the Internet, but it also needs to be deducted. This part of the user is a static IP address (including some application servers. and some terminals). At the same time, the student terminal accesses the Internet, using the WEB+MAB (mac-auth-bypass, MAC address authentication) method. When these static IP users want to trigger MAB authentication, there is no dynamic address allocation DHCP address application process, and MAB authentication can only be triggered through dynamic MAC address learning or HTTP messages. If the NAS device of the core network access server has received t...

AI Technical Summary

Problems solved by technology

If the NAS device of the core network access server has received the user terminal message and learned the dynamic MAC address before the MAB is configured before adding the account in the background, MAB cannot be triggered, and the application server cannot be authenticated to access the Internet (the application server does not necessarily send HTTP message)

Images