Identity authentication method, identity authentication system and related equipment

Abstract

The embodiment of the invention discloses an identity authentication method and related equipment, which are used for authenticating and authenticating a dialing enterprise user in a virtual access router scene. The method provided by the embodiment of the invention comprises the following steps: only when the virtual access router determines that the received first identity information of the user in the first PADI broadcast message sent by the client is matched with the identity of the virtual access router, the virtual access router sending a second PADI broadcast message to the PPPOE server to request the PPPOE server for service, and the virtual access router also needing to send a second PADO response message carrying the routing identity information to the client device for verification of the routing identity information; and after the virtual access router establishes a first session with the PPPOE server and a second session with the client device, forwarding user second identity information sent by the client device to the PPPOE server for identity authentication through the first session and the second session.

Description

technical field [0001] The invention relates to the communication field, in particular to an identity authentication method, an identity authentication system and related equipment. Background technique [0002] The traditional access router (AR) is placed on the user (enterprise) side, and the user performs Point-to-Point Protocol over Ethernet (PPPoE) dial-up on the AR, and the operator's network equipment authenticates and authenticates the user. After passing the authentication, the Internet Protocol (IP) address for the interconnection between public networks will be assigned to its Wide Area Network (WAN) port. Among them, the PPPoE protocol provides a standard for connecting multiple hosts to a remote broadband access server in an Ethernet network. Its essence is to establish a point-to-point tunnel on the Ethernet, with functions of user authentication and IP address notification. Perform PPPoE dial-up on the traditional AR to complete user authentication, and the ...

AI Technical Summary

Problems solved by technology

[0004] However, in the virtual access router scenario, using this method for authentication will make the access link between the enterprise user side and the vAR unauthenticated, and the security will not be guaranteed.

Images