Authentication and authorization method and apparatus, authentication server, and machine-readable storage medium

Abstract

The invention provides an authentication and authorization method and apparatus, an authentication server, and a machine-readable storage medium. The method comprises the following steps: receiving afirst authentication request message carrying identity information sent by an access device, and transmitting a second authentication message carrying the identity information to a third party authentication server, so that the third party authentication server authenticates a host according to the identity information; if a first authentication success message is received, and the first authentication success message carries user information, determining authorization information corresponding to the user information; and sending a second authentication success message carrying the authorization information to the access device, so that the access device determines that the authentication of the host is successful, and performs authorization processing on the host by using the authorization information. By adoption of the technical scheme of the invention, the docking of the third party authentication server and a professional authentication server is achieved, the third party authentication server performs authentication processing, and the professional authentication server performs authorization processing, thereby implementing authentication, authorization and other operationson the host.

Description

technical field [0001] The present application relates to the technical field of communications, and in particular to an authentication and authorization method, device, authentication server, and machine-readable storage medium. Background technique [0002] The authentication system may include a host, an access device, and an authentication server. Before a host accesses the network, operations such as authentication and authorization must be performed on the host. To this end, the host needs to send an authentication request message carrying user information (such as user name and password, etc.), and the access device sends the authentication request message to the authentication server after receiving the authentication request message, and the authentication server receives the authentication request message. After the request message, information such as the user name and password are parsed from the authentication request message, and the host is authenticated by us...

AI Technical Summary

Problems solved by technology

The third-party authentication server (that is, the authentication server used inside the organization) has core data. For reasons of confidentiality, the organization generally does not put these core data in the professional authentication server, but the functions of the third-party authentication server are all It is relatively simple, and the professional authentication server does not have core data, but its function is relatively powerful

In this application scenario, how to realize the connection between the third-party authentication server and the professional authentication server, so as to perform operations such as authentication and authorization on the host, at present, there is no effective implementation plan

Images