A Dial-up Technology Security Authentication Method Based on Radius Protocol

Abstract

The present invention relates to the field of electrical data processing technology, and specifically discloses a dial-up technology security authentication method based on the Radius protocol. The method comprises: performing dial-up technology biometric security authentication on a remote access server, performing dial-up technology Radius protocol security authentication on the remote access server that has passed the dial-up technology biometric security authentication, judging whether the remote access server has passed the dial-up technology Radius protocol security authentication and returning a response based on a credibility feature value of a request authentication credential and a credibility feature value of a request device credential. The present invention solves the problem that a traditional dial-up authentication method usually relies on a single factor authentication, which may lead to a poor user experience in an environment requiring frequent authentication, provides multiple verifications, greatly increases the security level, and can perform real-time monitoring and detailed audit tracking, which is essential for meeting compliance requirements, performing security assessments, and responding to potential security threats in a timely manner.

Description

Technical Field

[0001] The invention relates to the technical field of electric data processing, in particular to a dial-up technology security authentication method based on Radius protocol. Background Art

[0002] With the trend of globalization and mobile office, enterprises and individuals have a growing demand for secure access to company networks and resources from any location. Dial-up technology is a common way of remote access, and its security needs to be ensured to prevent unauthorized access. As the means of network attacks continue to evolve and become more complex, the old security measures can no longer meet security needs. Threats such as phishing and malware have prompted researchers to develop more secure and complex authentication mechanisms to enhance the security of dial-up access technology. With the advancement of technology, dial-up access technology has also shifted from traditional analog telephone lines to IP-based VPNs and other advanced network protocols. These technological changes have brought new security challenges and demands, and it is necessary to develop security authentication methods that match them.

[0003] Today, there are still some shortcomings in the research on dial-up technology security authentication methods. Specifically, traditional dial-up authentication methods usually rely on single-factor authentication, which may lead to poor user experience in environments that require frequent authentication. If the password is leaked or cracked, there is no other verification layer to prevent unauthorized access. The single-factor authentication system may lack the necessary auditing and monitoring functions, making it more difficult to track and prove compliance. In addition, if a single password is simple or common, it can be easily cracked quickly by automated tools by trying various combinations. Summary of the invention

[0004] In view of the deficiencies of the prior art, the present invention provides a dial-up technology security authentication method based on the Radius protocol, which can effectively solve the problems involved in the above-mentioned background technology.

[0005] To achieve the above objectives, the present invention is implemented through the following technical solutions: a dial-up technology security authentication method based on the Radius protocol, comprising the following steps: performing dial-up technology biometric security authentication on a remote access server, obtaining a biometric security authentication data set, judging whether the remote access server has passed the dial-up technology biometric security authentication based on the obtained biometric security authentication data set, and performing dial-up technology Radius protocol security authentication on the remote access server that has passed the dial-up technology biometric security authentication; obtaining a remote access server request authentication credential data set, and based on the obtained remote access server request authentication credential data set, comprehensively analyzing to obtain a request authentication credential credibility feature value; obtaining a remote access server request device credential data set, and based on the obtained remote access server request device credential data set, comprehensively analyzing to obtain a request device credential credibility feature value; judging whether the remote access server has passed the dial-up technology Radius protocol security authentication and returning a response based on the request authentication credential credibility feature value and the request device credential credibility feature value.

[0006] As a further method, the biometric security authentication data set specifically includes the movement speed of the mouse used in the remote access server, the movement angle of the mouse used in the remote access server, and the average intermittent jump duration of adjacent combination bytes of the remote access server sound verification.

[0007] As a further method, based on the acquired biometric security authentication data set, it is determined whether the remote access server has passed the dial-up technology biometric security authentication, and the dial-up technology Radius protocol security authentication is performed on the remote access server that has passed the dial-up technology biometric security authentication. The specific analysis process is: based on the acquired biometric security authentication data set, a comprehensive analysis is performed to obtain a biometric security authentication feature value, and the biometric security authentication feature value is used as an analysis basis for determining whether the remote access server has passed the dial-up technology biometric security authentication; the biometric security authentication feature value is compared with each biometric security authentication reference feature value stored in the database to determine whether the database contains the biometric security authentication feature value. A biometric security authentication reference feature value that is equal to the security authentication feature value; if there is no biometric security authentication reference feature value that is equal to the biometric security authentication feature value in the database, the remote access server corresponding to the biometric security authentication feature value has not passed the dial-up technology biometric security authentication, and the remote access server has not passed the dial-up technology security authentication; if there is a biometric security authentication reference feature value that is equal to the biometric security authentication feature value in the database, the remote access server corresponding to the biometric security authentication feature value has passed the dial-up technology biometric security authentication, and the remote access server that has passed the dial-up technology biometric security authentication is subjected to dial-up technology Radius protocol security authentication.

[0008] As a further method, the biometric security authentication feature value, the specific analysis process is:

[0009]

[0010] Wherein, δ is the biometric security authentication feature value, sd is the remote access server mouse movement speed, jd is the remote access server mouse movement angle, zt is the average intermittent jump time of adjacent combination bytes of remote access server voice verification, μ1 is the compensation factor of the remote access server mouse movement speed, μ2 is the compensation factor of the remote access server mouse movement angle, and μ3 is the compensation factor of the remote access server voice verification adjacent combination bytes.

[0011] As a further method, the remote access server requests an authentication credential data set, specifically including the maximum byte overlap ratio between the remote access server request authentication account and password and each account and password stored in the database, and the remote access server request authentication response time.

[0012] As a further method, based on the acquired remote access server request authentication credential data set, a comprehensive analysis is performed to obtain the request authentication credential credibility feature value. The specific analysis process is: based on the acquired remote access server request authentication credential data set, a comprehensive analysis is performed to obtain the request authentication credential credibility feature value. The request authentication credential credibility feature value is used as the analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication.

[0013] As a further method, request the authentication credential credibility feature value, the specific analysis process is as follows:

[0014]

[0015] Where α is the credibility characteristic value of the requested authentication credential, zb is the maximum byte overlap ratio between the remote access server's authentication account password and each account password stored in the database, xy is the remote access server's authentication response time, σ1 is the compensation factor for the maximum byte overlap ratio between the remote access server's authentication account password and each account password stored in the database, σ2 is the compensation factor for the remote access server's authentication response time, and e is a natural constant.

[0016] As a further method, based on the acquired remote access server request device credential data set, a comprehensive analysis is performed to obtain a requested device credential credibility characteristic value. The specific analysis process is: obtain a remote access server request device credential data set, the remote access server request device credential data set specifically includes the highest proportion of byte overlap between the device identifier and each device identifier stored in the database, the highest proportion of byte overlap between the device IP address and each device IP address stored in the database, and the highest proportion of byte overlap between the device MAC address and each device MAC address stored in the database; based on the acquired remote access server request device credential data set, a comprehensive analysis is performed to obtain a requested device credential credibility characteristic value, and the requested device credential credibility characteristic value is used as an analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication.

[0017] As a further method, request the device credential credibility feature value, the specific analysis process is as follows:

[0018] β=lg(1+bs*τ1)+sin(ip*τ2+ma*τ3);

[0019] Wherein, β is the credibility characteristic value of the requesting device credential, bs is the maximum byte overlap ratio between the device identifier and each device identifier stored in the database, ip is the maximum byte overlap ratio between the device IP address and each device IP address stored in the database, ma is the maximum byte overlap ratio between the device MAC address and each device MAC address stored in the database, τ1 is the compensation factor for the maximum byte overlap ratio between the set device identifier and each device identifier stored in the database, τ2 is the compensation factor for the maximum byte overlap ratio between the set device IP address and each device IP address stored in the database, and τ3 is the compensation factor for the maximum byte overlap ratio between the set device MAC address and each device MAC address stored in the database.

[0020] As a further method, based on the request authentication credential credibility characteristic value and the request device credential credibility characteristic value, it is determined whether the remote access server has passed the dial-up technology Radius protocol security authentication and returned a response. The specific analysis process is: based on the request authentication credential credibility characteristic value and the request device credential credibility characteristic value, a comprehensive analysis is performed to obtain a request credential credibility evaluation value, and the request credential credibility evaluation value is used as an analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication; the request credential credibility evaluation value is compared with a request credential credibility reference evaluation value stored in a database; if the request credential credibility evaluation value is higher than or equal to the request credential credibility reference evaluation value, the remote access server corresponding to the request credential credibility evaluation value passes the dial-up technology Radius protocol security authentication and returns an acceptance response, and the remote access server passes the dial-up technology security authentication; if the request credential credibility evaluation value is lower than the request credential credibility reference evaluation value, the remote access server corresponding to the request credential credibility evaluation value fails to pass the dial-up technology Radius protocol security authentication and returns a rejection response, and the remote access server fails to pass the dial-up technology security authentication.

[0021] Compared with the prior art, the embodiments of the present invention have at least the following advantages or beneficial effects:

[0022] (1) The present invention provides a dial-up technology security authentication method based on the Radius protocol. By combining biometric technology and the Radius protocol, this method provides multiple verifications and greatly increases the security level. Biometrics provides a unique personal identification that is difficult to copy, while the Radius protocol strengthens the security of data transmission. This dual authentication mechanism effectively reduces the risk of unauthorized access. By collecting and analyzing the authentication data of biometrics and the Radius protocol, real-time monitoring and detailed audit tracking can be performed, which is crucial for meeting compliance requirements, conducting security assessments, and responding to potential security threats in a timely manner.

[0023] (2) The present invention performs dial-up technology biometric security authentication on the remote access server. Biometric technology ensures that only genuine users can access the system, effectively preventing password theft or misappropriation, because biometrics cannot be easily stolen or transferred like traditional passwords. Biometric technology is usually fast and intuitive, which can significantly improve the user experience. Users do not need to remember complex passwords or carry physical tokens. They can obtain access rights by scanning their biometrics, which simplifies the authentication process and makes the authentication process very fast. In a remote access environment, this means that users can obtain the required resource or service access rights almost instantly, which is particularly important for business environments that require rapid response.

[0024] (3) The present invention performs dial-up technology Radius protocol security authentication on the remote access server that has passed the dial-up technology biometric security authentication and returns a response. The Radius protocol supports encryption of transmitted data to ensure the integrity and privacy of data during transmission, protects the user's authentication information from eavesdropping or tampering, and complies with data protection regulations in many regions. It can achieve real-time monitoring and logging of user activities, which helps to promptly discover and respond to security incidents and provides necessary audit trails. Combined with biometric and Radius protocol authentication, multiple security verifications are achieved. Biometric technology ensures the security verification of physical identity, while the Radius protocol adds a security layer for network communications. The double security measures greatly enhance the security of the system and prevent unauthorized access. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] The present invention is further described using the accompanying drawings, but the embodiments in the accompanying drawings do not constitute any limitation to the present invention. A person skilled in the art can obtain other drawings based on the following drawings without creative work.

[0026] Figure 1 It is a schematic diagram of the method flow of the present invention.

[0027] Figure 2 A flowchart showing the steps for determining whether a remote access server has passed the dial-up technology Radius protocol security authentication and returned a response. DETAILED DESCRIPTION

[0028] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0029] Reference Figure 1 As shown, the present invention provides a dial-up technology security authentication method based on the Radius protocol, including: performing dial-up technology biometric security authentication on a remote access server, obtaining a biometric security authentication data set, judging whether the remote access server has passed the dial-up technology biometric security authentication based on the obtained biometric security authentication data set, and performing dial-up technology Radius protocol security authentication on the remote access server that has passed the dial-up technology biometric security authentication.

[0030] Specifically, the biometric security authentication data set includes the remote access server mouse movement speed, the remote access server mouse movement angle, and the remote access server sound verification adjacent combination bytes’ average intermittent jump duration. The remote access server mouse movement speed refers to the remote access server mouse movement speed. The remote access server mouse movement angle refers to the angle of the moving direction when the user operates the mouse, usually expressed in degrees. The remote access server sound verification adjacent combination bytes’ average intermittent jump duration refers to the average time interval between adjacent combination bytes in the sound sample analyzed during the sound verification process.

[0031] Specifically, based on the acquired biometric security authentication data set, it is determined whether the remote access server has passed the dial-up technology biometric security authentication, and the dial-up technology Radius protocol security authentication is performed on the remote access server that has passed the dial-up technology biometric security authentication. The specific analysis process is as follows: based on the acquired biometric security authentication data set, a comprehensive analysis is performed to obtain a biometric security authentication feature value, and the biometric security authentication feature value is used as an analysis basis for determining whether the remote access server has passed the dial-up technology biometric security authentication; the biometric security authentication feature value is compared with each biometric security authentication reference feature value stored in the database to determine whether there is a feature in the database that matches the biometric security authentication. A biometric security authentication reference feature value that is equal to the biometric security authentication feature value is used as the authentication feature value; if there is no biometric security authentication reference feature value that is equal to the biometric security authentication feature value in the database, the remote access server corresponding to the biometric security authentication feature value has not passed the dial-up technology biometric security authentication, and the remote access server has not passed the dial-up technology security authentication; if there is a biometric security authentication reference feature value that is equal to the biometric security authentication feature value in the database, the remote access server corresponding to the biometric security authentication feature value has passed the dial-up technology biometric security authentication, and the dial-up technology Radius protocol security authentication is performed on the remote access server that has passed the dial-up technology biometric security authentication.

[0032] In a specific embodiment, dual authentication, i.e., the combination of biometric technology authentication and Radius protocol security authentication, greatly improves the security of remote access servers. By comparing the biometric security authentication feature values, it can be effectively confirmed whether the remote access server has passed the biometric authentication. Only servers that have passed the biometric authentication can continue with the Radius protocol security authentication, thereby increasing the security of the system. Automated biometric authentication feature value comparison and Radius protocol security authentication can improve the authentication speed and accuracy of remote access servers, while reducing the need for manual intervention and improving the efficiency of authentication.

[0033] It should be explained that the above-mentioned biometric security authentication of the remote access server through dial-up technology ensures that only real users can access the system, effectively preventing password theft or misappropriation, because biometrics cannot be easily stolen or transferred like traditional passwords. Biometric technology is usually fast and intuitive, which can significantly improve the user experience. Users do not need to remember complex passwords or carry physical tokens, but only need to scan their biometrics to gain access, which simplifies the authentication process and the authentication process is very fast. In a remote access environment, this means that users can obtain the required resource or service access rights almost instantly, which is especially important for business environments that require rapid response.

[0034] Specifically, the biometric security authentication feature value, the specific analysis process is:

[0035]

[0036] Wherein, δ is the biometric security authentication feature value, sd is the remote access server mouse movement speed, jd is the remote access server mouse movement angle, zt is the average intermittent jump time of adjacent combination bytes of remote access server voice verification, μ1 is the compensation factor of the remote access server mouse movement speed, μ2 is the compensation factor of the remote access server mouse movement angle, and μ3 is the compensation factor of the remote access server voice verification adjacent combination bytes.

[0037] It should be explained that the above-mentioned biometric security authentication characteristic value is calculated by using the remote access server mouse movement speed, the remote access server mouse movement angle, and the average intermittent jump duration of adjacent combination bytes of the remote access server sound verification. The remote access server mouse movement speed, the remote access server mouse movement angle, and the average intermittent jump duration of adjacent combination bytes of the remote access server sound verification are normalized, and multiple biometric feature data, such as mouse movement speed, angle, and sound verification, are combined to comprehensively evaluate the authenticity of the user's identity, improve the accuracy and reliability of authentication, and combine multiple biometric feature data for authentication, effectively prevent identity fraud and impersonation, and enhance the system's Security, ensure that only legitimate users can access the remote server, reduce potential security risks, use multiple biometric data to calculate biometric feature values, reduce authentication loopholes and the possibility of false matches, improve the accuracy of the system's user identity, reduce authentication risks, ensure the safe operation of the information system, and achieve a more intelligent authentication method. No additional user steps are required, which improves the convenience and user experience of the authentication process. Use multiple biometric data to calculate biometric feature values ​​to help managers conduct real-time monitoring and auditing, detect abnormal behavior in a timely manner and take corresponding measures, improve system monitoring and security, and obtain the user's mouse movement speed and angle data on the remote access server through the mouse recorder device. This This type of device usually records information such as the mouse's movement trajectory, speed, and angle, so that the user's mouse behavior during remote operation can be analyzed. The user's voice verification data is obtained through the voiceprint recognition device, and the user's voice information is collected using a microphone. Then, voice verification is achieved through acoustic feature extraction and analysis. The characteristics of the voice can be identified by recording the average intermittent jump duration of adjacent combined bytes and used for authentication and recognition. The set remote access server mouse usage movement speed, remote access server mouse usage movement angle, and remote access server voice verification average intermittent jump duration of adjacent combined bytes are obtained from the database. The remote access server mouse usage movement speed measured historically is established based on historical data. A mapping set of the remote access server mouse usage speed, the remote access server mouse usage movement angle, the average intermittent jump time of adjacent combined bytes of remote access server sound verification and the compensation factors of the remote access server mouse usage speed, the remote access server mouse usage angle, and the average intermittent jump time of adjacent combined bytes of remote access server sound verification is obtained to obtain the compensation factors of the remote access server mouse usage speed, the remote access server mouse usage angle, and the average intermittent jump time of adjacent combined bytes of remote access server sound verification corresponding to the current remote access server mouse usage speed, the remote access server mouse usage angle, and the average intermittent jump time of adjacent combined bytes of remote access server sound verification.

[0038] A remote access server request authentication credential data set is obtained, and based on the obtained remote access server request authentication credential data set, a comprehensive analysis is performed to obtain a request authentication credential credibility feature value.

[0039] Specifically, the remote access server requests an authentication credential data set, specifically including the maximum byte overlap ratio between the remote access server's authentication account password and each account password stored in the database, and the remote access server's authentication response time. The maximum byte overlap ratio between the remote access server's authentication account password and each account password stored in the database refers to when the remote access server performs account password authentication, the input account password is compared with the account password stored in the database to find the highest byte overlap with a certain account password in the database, which can be used to verify the similarity between the input account password and the account password already stored in the database to determine the accuracy and security of the authentication. The remote access server's authentication response time refers to the length of time it takes for the remote access server to return the authentication result after receiving the account password for authentication request. This time includes the entire process of the server processing the authentication request, verifying the account password, generating the authentication result, and returning the authentication result to the client. A short authentication response time indicates that the server processes the authentication request efficiently, otherwise it may indicate problems with server performance or network latency.

[0040] In a specific embodiment, if the byte overlap ratio of the input account password and a certain account password in the database is high, then the verification process may take less time, thereby reducing the authentication response time. If the byte overlap ratio of the input account password and the account password stored in the database is low, then the verification process may require more time for comparison and confirmation, thereby increasing the authentication response time. In addition to the data comparison time, system performance and network delay will also affect the authentication response time. If the server has strong processing power and a stable network connection, then the authentication response time may be relatively short.

[0041] Furthermore, based on the acquired remote access server request authentication credential data set, a comprehensive analysis is performed to obtain a request authentication credential credibility characteristic value. The specific analysis process is as follows: based on the acquired remote access server request authentication credential data set, a comprehensive analysis is performed to obtain a request authentication credential credibility characteristic value. The request authentication credential credibility characteristic value is used as an analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication.

[0042] In a specific embodiment, by comprehensively analyzing various characteristic values, the credibility of authentication requests can be evaluated more comprehensively and accurately, the misjudgment rate can be reduced, and the accuracy of authentication can be improved. By establishing an authentication mechanism based on credibility characteristic values, the security of remote access servers can be effectively improved, and the possibility of malicious access and attacks can be reduced. Based on automatic judgment of credibility characteristic values, efficient processing and management of authentication requests can be achieved, the authentication process can be accelerated, and the user experience can be improved. By continuously analyzing the credibility characteristic values ​​of requested authentication credentials, problems can be discovered, authentication strategies can be improved, and authentication mechanisms can be continuously optimized to improve security and efficiency.

[0043] Specifically, the request authentication credential credibility feature value, the specific analysis process is:

[0044]

[0045] Where α is the credibility characteristic value of the requested authentication credential, zb is the maximum byte overlap ratio between the remote access server's authentication account password and each account password stored in the database, xy is the remote access server's authentication response time, σ1 is the compensation factor for the maximum byte overlap ratio between the remote access server's authentication account password and each account password stored in the database, σ2 is the compensation factor for the remote access server's authentication response time, and e is a natural constant.

[0046] It should be explained that the credibility characteristic value of the above-mentioned authentication request credential is calculated by the maximum byte overlap ratio between the remote access server authentication account password and each account password stored in the database, and the remote access server authentication request response time. The maximum byte overlap ratio between the remote access server authentication account password and each account password stored in the database, and the remote access server authentication request response time are normalized, and the maximum byte overlap ratio between the authentication request account password and each account password stored in the database is calculated, so as to more effectively judge whether the credentials entered by the user are consistent with the credentials stored in the database, improve the accuracy of authentication, and ensure the user's The authenticity and legitimacy of user identities can be effectively prevented from identity disguise, impersonation and other fraudulent behaviors, thereby enhancing the security of the authentication system. It can also evaluate the speed and efficiency of the system's response to authentication requests, help optimize the performance of the authentication system, and improve the system's processing speed and efficiency for user authentication requests. Accurate and fast authentication credential credibility feature values ​​can effectively reduce authentication risks, reduce the possibility of the system being attacked by malicious attacks, and reduce maintenance and recovery costs. With the authentication credential credibility feature value requested, users can complete the authentication process more quickly, reduce cumbersome authentication steps, and improve user experience. The authentication server records the user's login request and authentication results, and obtains remote access server requests. The authentication account password is the data with the highest byte overlap ratio with each account password stored in the database. The authentication server is responsible for verifying the authentication credentials entered by the user, and comparing them with the account password stored in the database, calculating the overlap ratio, and using network performance monitoring tools to monitor the response time of the remote access server to the authentication request, and record the time interval from the request to the receipt of the response, so as to calculate the remote access server request authentication response time. The maximum byte overlap ratio of the remote access server request authentication account password and each account password stored in the database, and the compensation factor for the remote access server request authentication response time are obtained from the database, and a historically measured remote access server is established based on historical data. A mapping set of the maximum byte overlap ratio between the remote access server request for authentication account password and each account password stored in the database, the maximum byte overlap ratio between the remote access server request for authentication account password and each account password stored in the database, and the compensation factor for the remote access server request for authentication response time is obtained, and the maximum byte overlap ratio between the current remote access server request for authentication account password and each account password stored in the database, the maximum byte overlap ratio between the remote access server request for authentication account password and each account password stored in the database, and the compensation factor for the remote access server request for authentication response time are obtained.

[0047] A remote access server request device credential data set is obtained, and based on the obtained remote access server request device credential data set, a comprehensive analysis is performed to obtain a request device credential credibility feature value.

[0048] Specifically, based on the acquired remote access server request device credential data set, a comprehensive analysis is performed to obtain the requested device credential credibility feature value. The specific analysis process is: obtain the remote access server request device credential data set. The remote access server request device credential data set specifically includes the highest byte overlap ratio between the device identifier and each device identifier stored in the database, the highest byte overlap ratio between the device IP address and each device IP address stored in the database, and the highest byte overlap ratio between the device MAC address and each device MAC address stored in the database. The highest byte overlap ratio between the device identifier and each device identifier stored in the database indicates the degree of match between the identifier data sent by the device to the server and the device identifier data stored in the database at the byte level during the authentication process. The higher the ratio, the more the identifier data provided by the device matches the identifier data stored in the database, and the higher the credibility of the authentication. The highest proportion of byte overlap between the device IP address and each device IP address stored in the database indicates the degree of match at the byte level between the IP address data sent by the device to the server and the device IP address data stored in the database. A high proportion indicates that the device IP address data has a high degree of match, and the authentication credibility will increase accordingly. The highest proportion of byte overlap between the device MAC address and each device MAC address stored in the database indicates the degree of match at the byte level between the MAC address data sent by the device to the server and the device MAC address data stored in the database. A high proportion indicates that the device MAC address data has a high degree of match, and the authentication credibility will increase accordingly. Based on the acquired remote access server request device credential data set, a comprehensive analysis is performed to obtain the requested device credential credibility feature value, and the requested device credential credibility feature value is used as the analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication.

[0049] It should be explained that the above comprehensive analysis of the matching degree of device identifier, IP address and MAC address can obtain a relatively comprehensive authentication basis, improve the accuracy and reliability of authentication, and the characteristic value based on the highest proportion of byte overlap can effectively detect the counterfeiting or tampering of the device, thereby enhancing the authentication security and preventing illegal access. The characteristic value provides a quantitative indicator, which is conducive to the system to perform automated authentication judgment and processing, reduce the need for manual intervention, and improve authentication efficiency. By continuously recording and analyzing the characteristic values ​​of the credibility of the requested device credentials, we can discover the direction of improving the authentication strategy, continuously optimize the authentication mechanism, and improve the security and stability of the authentication system.

[0050] Furthermore, the device credential credibility feature value is requested. The specific analysis process is as follows:

[0051] β=lg(1+bs*τ1)+sin(ip*τ2+ma*τ3);

[0052] Wherein, β is the credibility characteristic value of the requesting device credential, bs is the maximum byte overlap ratio between the device identifier and each device identifier stored in the database, ip is the maximum byte overlap ratio between the device IP address and each device IP address stored in the database, ma is the maximum byte overlap ratio between the device MAC address and each device MAC address stored in the database, τ1 is the compensation factor for the maximum byte overlap ratio between the set device identifier and each device identifier stored in the database, τ2 is the compensation factor for the maximum byte overlap ratio between the set device IP address and each device IP address stored in the database, and τ3 is the compensation factor for the maximum byte overlap ratio between the set device MAC address and each device MAC address stored in the database.

[0053] It should be explained that the credibility characteristic value of the above-mentioned requested device credential is calculated by the highest byte overlap ratio between the device identifier and each device identifier stored in the database, the highest byte overlap ratio between the device IP address and each device IP address stored in the database, and the highest byte overlap ratio between the device MAC address and each device MAC address stored in the database. The highest byte overlap ratio between the device identifier and each device identifier stored in the database, the highest byte overlap ratio between the device IP address and each device IP address stored in the database, and the highest byte overlap ratio between the device MAC address and each device MAC address stored in the database are normalized, and the device's identifier, IP address, MAC address and other information are compared with the information stored in the database, which can improve the authentication security of the device. A high overlap ratio means that the authenticity of the device credential is higher, which helps to exclude access by false devices and unauthorized devices. The calculated credibility characteristic value can be used in the access control policy to decide whether to authorize the device access based on the authenticity of the device credential. Highly credible device credentials help provide more precise access control and prevent unauthorized devices from accessing the network. Verifying the credibility characteristic value of the device credential can help managers better understand Understand the device situation in the network, optimize network resource allocation and management, devices with real credentials can get better resource services, improve network efficiency, identify devices with low credential authenticity, help timely discover potential security vulnerabilities and take precautions, and reduce the risk of malicious attacks on the network. The device management system can obtain the device's identifier, IP address, MAC address and other information, and compare this information with the device information stored in the database to calculate the overlap ratio. The device management system usually records the device's unique identifier, IP address, MAC address and other information for device management and identification. It can also capture the device identifier, IP address and MAC address and other information transmitted in the network traffic through network monitoring devices, so as to analyze and compare the device information and calculate the highest byte overlap ratio of each piece of information. The network monitoring device can monitor the device activity and communication on the network in real time and obtain device information. The compensation factors for the highest byte overlap ratio between the device identifier and each device identifier stored in the database, the highest byte overlap ratio between the device IP address and each device IP address stored in the database, and the highest byte overlap ratio between the device MAC address and each device MAC address stored in the database are obtained from the database.A mapping set of compensation factors of the highest byte overlap ratio of the device identifier and each device identifier stored in the database, the highest byte overlap ratio of the device IP address and each device IP address stored in the database, and the highest byte overlap ratio of the device MAC address and each device MAC address stored in the database, and the highest byte overlap ratio of the device identifier and each device identifier stored in the database, the highest byte overlap ratio of the device IP address and each device IP address stored in the database, and the highest byte overlap ratio of the device MAC address and each device MAC address stored in the database are established based on historical data, and the compensation factors of the highest byte overlap ratio of the device identifier and each device identifier stored in the database, the highest byte overlap ratio of the device IP address and each device IP address stored in the database, and the highest byte overlap ratio of the device MAC address and each device MAC address stored in the database corresponding to the current highest byte overlap ratio of the device identifier and each device identifier stored in the database, the highest byte overlap ratio of the device IP address and each device IP address stored in the database, and the highest byte overlap ratio of the device MAC address and each device MAC address stored in the database are obtained.

[0054] Based on the credibility feature value of the request authentication credential and the credibility feature value of the request device credential, it is determined whether the remote access server has passed the dial-up technology Radius protocol security authentication and returned a response.

[0055] Specifically, based on the credibility feature value of the request authentication credential and the credibility feature value of the requesting device credential, it is determined whether the remote access server has passed the dial-up technology Radius protocol security authentication and returned a response, such as Figure 2 As shown, the specific analysis process is: based on the request authentication credential credibility characteristic value and the request device credential credibility characteristic value, a comprehensive analysis is performed to obtain a request credential credibility evaluation value, and the request credential credibility evaluation value is used as an analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication; the request credential credibility evaluation value is compared with the request credential credibility reference evaluation value stored in the database; if the request credential credibility evaluation value is higher than or equal to the request credential credibility reference evaluation value, the remote access server corresponding to the request credential credibility evaluation value passes the dial-up technology Radius protocol security authentication and returns an acceptance response, and the remote access server passes the dial-up technology security authentication; if the request credential credibility evaluation value is lower than the request credential credibility reference evaluation value, the remote access server corresponding to the request credential credibility evaluation value fails to pass the dial-up technology Radius protocol security authentication and returns a rejection response, and the remote access server fails to pass the dial-up technology security authentication.

[0056] In a specific embodiment, a comprehensive evaluation of the credibility of the request credentials can more comprehensively consider the authentication status of the device, reduce misjudgments and counterfeiting, and improve the accuracy and reliability of authentication. By comparing and judging the credibility evaluation values ​​of the request credentials, it is possible to promptly identify and reject devices that have not passed the security authentication, effectively prevent illegal access and network attacks, and improve the security of the system. The automated authentication judgment process reduces the need for manual intervention, improves the efficiency and response speed of the authentication system, and enhances the user experience. Records and audits can be made based on the comparison results of the credibility evaluation values ​​of the request credentials, making it convenient for managers to monitor and analyze the authentication process, promptly discover and handle abnormal situations, and ensure the safe and stable operation of the system.

[0057] It should be explained that the above request credential credibility evaluation value is analyzed in the following specific process:

[0058] γ=α β +α+β+β α ;

[0059] Where γ is the credibility evaluation value of the requested credentials, α is the credibility feature value of the requested authentication credentials, and β is the credibility feature value of the requested device credentials.

[0060] It needs to be explained that the above-mentioned request credential credibility evaluation value is calculated based on the request authentication credential credibility characteristic value and the request device credential credibility characteristic value. Comprehensive analysis of the request credential credibility characteristic value and the request device credential credibility characteristic value can more comprehensively evaluate the identity authentication of users and devices, improve the accuracy of authentication, and use the request credential credibility evaluation value as the basis for authentication judgment, which can effectively reduce authentication vulnerabilities and security risks, ensure that only legitimate users and devices can enter the system through authentication, and can promptly detect and reject unauthorized access requests, thereby improving the security of the system and preventing unauthorized access and attacks. It can also simplify the authentication process, improve authentication efficiency, reduce user operation steps, and improve user experience. Using the request credential credibility evaluation value as the basis for authentication analysis can facilitate management personnel to monitor and audit, promptly detect abnormal situations and take corresponding measures to ensure system security.

[0061] It should be explained that the above-mentioned dial-up technology Radius protocol security authentication is performed on the remote access server that has passed the dial-up technology biometric security authentication and a response is returned. The Radius protocol supports encryption of transmitted data to ensure the integrity and privacy of data during transmission, protects the user's authentication information from eavesdropping or tampering, and complies with data protection regulations in many regions. It can realize real-time monitoring and logging of user activities, helps to promptly discover and respond to security incidents, and provides the necessary audit trails. Combining biometrics and Radius protocol authentication, multiple security verifications are achieved. Biometric technology ensures the security verification of physical identity, and the Radius protocol adds a security layer for network communications. The double security measures greatly enhance the security of the system and prevent unauthorized access.

[0062] It needs to be explained that the above-mentioned dial-up technology security authentication method based on the Radius protocol provides multiple verifications by combining biometric technology and the Radius protocol, which greatly increases the security level. Biometrics provides a unique personal identification that is difficult to copy, while the Radius protocol strengthens the security of data transmission. This dual authentication mechanism effectively reduces the risk of unauthorized access. By collecting and analyzing the authentication data of biometrics and the Radius protocol, real-time monitoring and detailed audit tracking can be carried out, which is essential for meeting compliance requirements, conducting security assessments and responding to potential security threats in a timely manner.

[0063] The above contents are merely examples and explanations of the structure of the present invention. The technicians in this technical field may make various modifications or additions to the specific embodiments described or replace them in a similar manner. As long as they do not deviate from the structure of the invention or exceed the scope defined by the claims, they should all fall within the protection scope of the present invention.

Claims

1. A dial-up technology security authentication method based on Radius protocol, characterized in that: The following steps are involved: Perform dial-up technology biometric security authentication on the remote access server, obtain a biometric security authentication data set, determine whether the remote access server has passed the dial-up technology biometric security authentication based on the obtained biometric security authentication data set, and perform dial-up technology Radius protocol security authentication on the remote access server that has passed the dial-up technology biometric security authentication; Acquire a remote access server request authentication credential data set, and obtain a request authentication credential credibility feature value by comprehensive analysis based on the acquired remote access server request authentication credential data set; The remote access server request authentication credential data set specifically includes the maximum byte overlap ratio between the remote access server request authentication account and password and each account and password stored in the database, and the remote access server request authentication response time; The remote access server request authentication credential data set obtained by comprehensive analysis is used to obtain the request authentication credential credibility feature value. The specific analysis process is as follows: Based on the acquired remote access server request authentication credential data set, a comprehensive analysis is performed to obtain a request authentication credential credibility feature value, which is used as an analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication; The specific analysis process of the request authentication credential credibility feature value is as follows: ； In the formula, is the credibility feature value of the authentication request, zb is the maximum byte overlap ratio between the authentication account and password of the remote access server and the account and password stored in the database, xy is the duration of the remote access server authentication request response, The compensation factor for the highest percentage of overlap between the account and password of the remote access server request authentication and the bytes of each account and password stored in the database. is the compensation factor for the remote access server request authentication response time, and e is a natural constant; Acquire a remote access server request device credential data set, and obtain a request device credential credibility feature value based on a comprehensive analysis of the acquired remote access server request device credential data set; The remote access server request device credential data set is obtained by comprehensive analysis to obtain the request device credential credibility feature value. The specific analysis process is as follows: Obtaining a remote access server request device credential data set, the remote access server request device credential data set specifically including a maximum byte overlap ratio between a device identifier and each device identifier stored in a database, a maximum byte overlap ratio between a device IP address and each device IP address stored in a database, and a maximum byte overlap ratio between a device MAC address and each device MAC address stored in a database; Based on the acquired remote access server request device credential data set, a comprehensive analysis is performed to obtain a request device credential credibility feature value, and the request device credential credibility feature value is used as an analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication; The specific analysis process of the request device credential credibility feature value is as follows: ； In the formula, is the credibility feature value of the requested device credential, bs is the highest byte overlap ratio between the device identifier and each device identifier stored in the database, ip is the highest byte overlap ratio between the device IP address and each device IP address stored in the database, ma is the highest byte overlap ratio between the device MAC address and each device MAC address stored in the database, The compensation factor for the highest percentage of byte overlap between the set device identifier and each device identifier stored in the database. The compensation factor for the highest percentage of overlap between the set device IP address and the IP addresses of each device stored in the database. The compensation factor for the highest percentage of byte overlap between the set device MAC address and the MAC addresses of each device stored in the database; Based on the credibility feature value of the request authentication credential and the credibility feature value of the request device credential, determine whether the remote access server has passed the dial-up technology Radius protocol security authentication and returns a response; Based on the credibility feature value of the request authentication credential and the credibility feature value of the request device credential, it is determined whether the remote access server has passed the dial-up technology Radius protocol security authentication and returned a response. The specific analysis process is as follows: Based on the credibility feature value of the request authentication credential and the credibility feature value of the request device credential, a comprehensive analysis is performed to obtain a credibility evaluation value of the request credential, which is used as an analysis basis for determining whether the remote access server has passed the dial-up technology Radius protocol security authentication; comparing the request credential credibility evaluation value with the request credential credibility reference evaluation value stored in the database; If the request credential credibility evaluation value is higher than or equal to the request credential credibility reference evaluation value, the remote access server corresponding to the request credential credibility evaluation value passes the dial-up technology Radius protocol security authentication and returns an acceptance response, and the remote access server passes the dial-up technology security authentication; If the request credential credibility evaluation value is lower than the request credential credibility reference evaluation value, the remote access server corresponding to the request credential credibility evaluation value has not passed the dial-up technology Radius protocol security authentication and returns a rejection response, and the remote access server has not passed the dial-up technology security authentication; Request credential credibility evaluation value. The specific analysis process is as follows: ； In the formula, To request a credential credibility evaluation value, To request the authentication credential credibility feature value, Request device credential trustworthiness feature value.

2. According to claim 1, a dial-up technology security authentication method based on the Radius protocol is characterized in that: The biometric security authentication data set specifically includes the movement speed of the mouse used in the remote access server, the movement angle of the mouse used in the remote access server, and the average intermittent jump duration of adjacent combination bytes of the remote access server sound verification.

3. According to claim 2, a dial-up technology security authentication method based on the Radius protocol is characterized in that: Based on the acquired biometric security authentication data set, it is determined whether the remote access server has passed the dial-up technology biometric security authentication, and the dial-up technology Radius protocol security authentication is performed on the remote access server that has passed the dial-up technology biometric security authentication. The specific analysis process is as follows: Based on the acquired biometric security authentication data set, a comprehensive analysis is performed to obtain a biometric security authentication feature value, which is used as an analysis basis for determining whether the remote access server has passed the dial-up technology biometric security authentication; Compare the biometric security authentication feature value with each biometric security authentication reference feature value stored in the database to determine whether there is a biometric security authentication reference feature value equal to the biometric security authentication feature value in the database; If there is no biometric security authentication reference feature value equal to the biometric security authentication feature value in the database, then the remote access server corresponding to the biometric security authentication feature value has not passed the dial-up technology biometric security authentication, and the remote access server has not passed the dial-up technology security authentication; If there is a biometric security authentication reference feature value equal to the biometric security authentication feature value in the database, the remote access server corresponding to the biometric security authentication feature value shall perform dial-up technology biometric security authentication, and the remote access server that has passed the dial-up technology biometric security authentication shall perform dial-up technology Radius protocol security authentication on the remote access server.

4. According to claim 3, a dial-up technology security authentication method based on the Radius protocol is characterized in that: The specific analysis process of the biometric security authentication feature value is as follows: ； In the formula, is the biometric security authentication feature value, sd is the movement speed of the remote access server mouse, jd is the movement angle of the remote access server mouse, zt is the average intermittent jump duration of adjacent combined bytes of the remote access server sound verification, The compensation factor for the mouse movement speed set for the remote access server. The compensation factor for the mouse movement angle used by the remote access server is set. The compensation factor for the average intermittent jump time of adjacent combined bytes for the remote access server voice verification.

Images