A method and system for automatically handling faults in campus network authentication and billing systems

Abstract

The present invention discloses a method and system for automatically handling faults in a campus network authentication and billing system, which relates to the technical field of campus network authentication and billing. The system comprises a system management module, a policy management module, a monitoring and analysis module, an emergency handling module, and a log and alarm push module. Utilizing these five modules, the system implements automated monitoring, automated handling, automated alarming, and automated recovery of the campus network authentication and billing system. Furthermore, when a fault occurs, automated emergency handling of the fault and service recovery after the fault has been repaired are achieved by automatically establishing a temporary emergency channel on the BRAS. The method and system for automatically handling faults in a campus network authentication and billing system can ensure smooth network operation when a fault occurs in the authentication and billing system, eliminate the impact of the fault, improve campus network availability, automate and standardize the handling process, significantly shorten handling response time, and reduce the impact of the fault.

Description

Technical Field

[0001] The present invention relates to the technical field of campus network authentication and billing, in particular to a method and system for automatically handling faults of a campus network authentication and billing system. Background Art

[0002] Currently, many university campus networks use a large, flat, two-layer network structure. Campus network users use a Broadband Remote Access Server (BRAS) that works in conjunction with the authentication and billing system to authenticate and bill users for Internet access.

[0003] In this technical architecture, the RADIUS service is the core module of the authentication and accounting system. RADIUS (Remote Authentication Dial-In User Service), defined by RFC2865 and RFC2866, is the most widely used AAA protocol. AAA is a management framework and can be implemented using a variety of protocols. In practice, Remote Authentication Dial-In User Service (RADIUS) is the most commonly used AAA implementation.

[0004] If the authentication and billing system experiences a hardware or software failure or loses communication with the BRAS, the BRAS cannot complete normal RADIUS message exchange with the authentication and billing system, or the message response is abnormal. Campus network authentication services are interrupted, and currently logged-in users will be disconnected within 30 minutes to an hour, and new users will be unable to log in.

[0005] Network administrators often only manually intervene after receiving a user report or discovering a fault during inspections. They must complete a series of tasks, including troubleshooting, locating, analyzing, emergency response, and verification testing. If all goes well, it can take tens of minutes or even hours to complete a repair. Remote repairs, without on-site personnel, take even longer. During this time, faculty and students are unable to access the campus network, severely disrupting normal work, teaching, and daily life. Summary of the Invention

[0006] The present invention provides a method and system for automatically handling faults of a campus network authentication and billing system, which solves the problem proposed in the above background technology that the campus network authentication and billing system communicates with BRAS through the RADIUS protocol to implement user authentication, authorization, and billing functions. When a fault occurs in the authentication and billing system, the RADIUS service becomes abnormal, and the BRAS cannot obtain user authentication and authorization information. At this time, new users cannot access the Internet, and existing online users will remain in an online network status within an authentication cycle, and will also be unable to access the Internet after the expiration. In addition, fault analysis and judgment often takes a long time, which will affect the basic teaching work order on campus.

[0007] The present invention provides the following technical solutions: a method and system for automatically handling faults in a campus network authentication and billing system, which automatically monitors the service availability of the authentication and billing system. When an abnormality is detected in the authentication service, the system automatically executes the emergency handling process according to the emergency response strategy pre-configured by the administrator. The system establishes a temporary Internet access channel for users on the BRAS, allowing campus network users to access the Internet by bypassing the authentication and billing system, thereby ensuring the stability and continuity of campus network services. When the authentication and billing system fault is repaired, the system can automatically detect that the authentication service is available, close the user's temporary Internet access channel on the BRAS, and switch back to the authentication and billing Internet access mode. At the same time, the system has message push and log recording functions such as SMS, WeChat, and email, providing network administrators with data basis for management and operation information and fault judgment and analysis.

[0008] A campus network authentication and billing system fault automatic handling method and system, the campus network authentication and billing system fault automatic handling system includes a system management module, a policy management module, a monitoring and analysis module, an emergency handling module, a log and alarm push module; the system management module is used to complete the basic parameter operation configuration of the system, the interface configuration with the BRAS device, the interface call configuration with the DHCP server and the authentication and billing system; the policy management module is used to control the execution process of the system's emergency handling method, handling response time, handling authority, handling operation frequency, and security management and control strategy; the monitoring and analysis module is used to control the system's emergency handling method execution process, handling response time, handling authority, handling operation frequency, and security management and control strategy through multiple automated monitoring methods. The method realizes multi-dimensional and stereoscopic monitoring of the availability of RADIUS service of the authentication and billing system; the emergency response module is used to complete the system emergency response operation through the preset emergency process, emergency strategy and system call BRAS interface linkage, and when the campus network authentication and billing system fails, the system establishes a temporary Internet access channel for the user on the BRAS to ensure the stability and continuity of the campus network business. When the authentication and billing system failure is repaired, the system can automatically detect that the authentication service is available, close the user's temporary Internet access channel on the BRAS, and switch back to the authentication and billing Internet access mode; the log and alarm push module is used to realize the system log recording and alarm push functions;

[0009] The above-mentioned automatic fault handling method of the campus network authentication and billing system automatic fault handling system includes the following steps:

[0010] Step 1: Complete the basic parameter operation configuration of the system, determine the system's emergency response method execution process, response time, authority, frequency of operation, and security management and control strategy, and activate each functional module within the system;

[0011] Step 2: Use multiple methods to monitor the RADIUS service status of the authentication and billing system. Comprehensively analyze and determine service availability and quality through various monitoring indicators. Record system operation, monitoring and analysis, emergency response, and recovery execution in real time. Push alerts for important work nodes. When the system determines that the service is unavailable or service quality indicator parameters are below the threshold, the emergency response module promptly responds and proceeds to steps 3 and 4 in sequence.

[0012] Step 3: The emergency response module automatically executes the emergency response process based on the emergency response strategy pre-configured by the administrator, establishing a temporary Internet access channel for users on the BRAS to ensure smooth access to the campus network;

[0013] Step 4. The system automatically executes operations item by item according to the predetermined script and pre-configured command list. When the system automatically detects that the authentication service is available, it cancels the establishment of a temporary authentication-free Internet access channel on the BRAS, synchronously resets the authentication and billing system and the temporary authentication-free user online information saved on the BRAS, switches back to the authentication and billing Internet access mode, and repeats step 2.

[0014] Preferably, the system management module supports manual operation and disposal of the system and supports a visual management interface.

[0015] Preferably, the log and alarm push module supports docking with platforms such as SMS, WeChat, and email, and when the system is running, the log and alarm push module monitors business interruptions and performs important disposal actions and pushes alarm information to the administrator through a unified communication interface.

[0016] Preferably, the monitoring and analysis module includes a service process monitoring and analysis submodule, a communication message monitoring and analysis submodule, an alarm log monitoring and analysis submodule, a database monitoring and analysis submodule and a business simulation probe submodule.

[0017] Preferably, the service process monitoring and analysis submodule monitors the working status of the RADIUS service process of the authentication and billing system in real time through the authentication and billing system API interface or deploys a monitoring proxy client in the background of the authentication and billing system, and realizes threshold alarms and trend warnings by collecting and analyzing key indicator items; the monitoring indicators of the service process monitoring and analysis submodule are the CPU utilization rate, memory occupancy, port usage, network card traffic, and hard disk usage rate of the RADIUS service process.

[0018] Preferably, the communication message monitoring and analysis submodule monitors the number of RADIUS request / response messages sent and received between the BRAS and the authentication and billing system through the switch mirror port, and triggers an alarm by comparing the number of messages when the ratio of the number of RADIUS request messages to the number of RADIUS response messages exceeds a certain ratio threshold.

[0019] Preferably, the alarm log monitoring and analysis submodule monitors the log information of BRAS and authentication and billing system through API interface or deploys a third-party log platform; the alarm log monitoring and analysis submodule periodically reads the log information, and when the corresponding alarm log is monitored and matched, it determines that the authentication and billing system has a fault; the monitoring indicators of the alarm log monitoring and analysis submodule are error logs, system alarm logs and service alarm logs.

[0020] Preferably, the database monitoring and analysis submodule monitors the DHCP server database and the authentication and billing system database through a remote database interface or a system API interface, and statistically compares the IP fields in the two databases based on the DHCP server IP address lease database-address lease allocation table-IP address field and the authentication and billing system database-online user table-IP address field indicators. When the consistency difference between the two database fields exceeds a threshold, it is determined that there is an abnormality in the RADIUS service.

[0021] Preferably, the service simulation probe submodule monitors the RADIUS service interface response content and response delay of the RADIUS service interface of the authentication and accounting system, and comprehensively determines whether the RADIUS service is normal.

[0022] Compared with the prior art, the present invention has the following beneficial effects:

[0023] 1. The automatic fault handling method and system of the campus network authentication and billing system realizes automatic emergency handling of faults and business recovery after fault repair by automatically establishing a temporary emergency channel on the BRAS, so as to ensure network smoothness when the authentication and billing system fails, eliminate the impact of the failure, and improve the availability of the campus network.

[0024] 2. The automatic fault handling method and system of the campus network authentication and billing system realizes the automatic monitoring and handling of faults in the campus network authentication and billing system, significantly shortens the handling response time, and reduces the impact of faults; realizes the automation and standardization of the handling process, and reduces the probability of erroneous operation compared with traditional manual handling methods; and provides alarm push to facilitate network administrators to grasp the network status and handling process in real time. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 This is a schematic diagram of the deployment topology of the system of the present invention;

[0026] Figure 2 This is a schematic diagram of the system architecture design of the present invention;

[0027] Figure 3 This is a schematic screenshot of the system management interface of the present invention;

[0028] Figure 4 Schematic diagram of the system workflow of the present invention. DETAILED DESCRIPTION

[0029] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0030] As an important information infrastructure for schools, the security and stability of the campus network are directly related to the normal operation of the school. To ensure the high availability of the campus network, minimize fault handling time, and avoid the uncertainty and hidden dangers brought by manual operation, the present invention provides a campus network authentication and billing system fault automatic handling system. The handling system automatically monitors the service availability of the authentication and billing system through automated monitoring, automated handling, automated alarming, and automated recovery. When an abnormality in the authentication service is detected, the emergency handling process is automatically executed according to the emergency response strategy pre-configured by the administrator, and a temporary Internet access channel is established for the user on the BRAS. This allows campus network users to access the Internet by bypassing the authentication and billing system, ensuring the stability and continuity of campus network services. When the authentication and billing system fault is repaired, the system can automatically detect that the authentication service is available, close the user's temporary Internet access channel on the BRAS, and switch back to the authentication and billing Internet access mode.

[0031] The above-mentioned campus network authentication and billing system fault automatic handling system includes a system management module, a policy management module, a monitoring and analysis module, an emergency handling module, and a log and alarm push module.

[0032] The system management module completes the basic parameter operation configuration of the system, the interface configuration with the BRAS device, the interface configuration with the DHCP server, and the interface call configuration with the authentication and billing system. At the same time, this module supports manual operation of the system and supports a visual management interface (see the attached manual). Figure 3 ).

[0033] The policy management module is used to control the system's emergency response method execution process, response time, authority, frequency of operations, and security management strategies.

[0034] The monitoring and analysis module uses a variety of means to monitor the RADIUS service status of the authentication and billing system, and judges the service availability and service quality through comprehensive analysis of various monitoring indicators. When the system determines that the service is unavailable or the parameters of the service quality indicator item are lower than the threshold, the emergency response module will make a timely response; the monitoring and analysis module includes a service process monitoring and analysis sub-module, a communication message monitoring and analysis sub-module, an alarm log monitoring and analysis sub-module, a database monitoring and analysis sub-module, and a business simulation probe sub-module.

[0035] The service process monitoring and analysis submodule monitors the status of the RADIUS service process in the authentication and billing system through the authentication and billing system API or by deploying a monitoring proxy client in the authentication and billing system backend. The service process monitoring and analysis submodule monitors metrics such as RADIUS service process CPU utilization, memory usage, port usage, network card traffic, and hard disk usage. The service process monitoring and analysis submodule uses analysis methods to collect and analyze key indicators to generate threshold alerts and trend warnings.

[0036] The communication message monitoring and analysis submodule monitors RADIUS request / response messages between the BRAS and the authentication and billing system through the switch mirrored port. The communication message monitoring and analysis submodule monitors the number of RADIUS request / response messages sent and received. The communication message monitoring and analysis submodule analyzes the number of messages. When the ratio of the number of RADIUS request messages to the number of RADIUS response messages exceeds a certain threshold, it indicates that the RADIUS service is not responding in a timely manner and cannot provide authentication services normally, triggering an alarm.

[0037] The alarm log monitoring and analysis submodule monitors log information from the BRAS and authentication and billing systems through APIs or third-party logging platforms. Monitoring metrics include error logs, system alarm logs, and service alarm logs. Analysis methods for the alarm log monitoring and analysis submodule include periodic log reading and, when a matching alarm log is detected, a fault in the authentication and billing system is identified.

[0038] The database monitoring and analysis submodule monitors: the DHCP server database and the authentication and billing system database through a remote database interface or a system API interface. The database monitoring and analysis submodule monitors: the DHCP server IP address lease database - address lease allocation table - IP address field and the authentication and billing system database - online user table - IP address field. The database monitoring and analysis submodule analyzes: statistically compares the IP fields in the two databases. When the consistency difference between the two database fields exceeds a threshold, it is determined that an anomaly exists in the RADIUS service. (Under normal circumstances, after the user onboarding process is completed, IP address records are generated in both databases, and the total number of online IP addresses recorded in the IP segment of the two system databases remains dynamically balanced.)

[0039] The service simulation probe submodule monitors the RADIUS service interface of the authentication and billing system. Monitoring metrics include the response content and response delay of the RADIUS service interface. Analysis methods for the service simulation probe submodule include: The service simulation probe encapsulates RADIUS request messages, simulating the BRAS initiating RADIUS requests to the authentication and billing server, and statistically analyzing the response messages. Based on the response status, response content, and response delay, the module comprehensively determines whether the RADIUS service is functioning properly.

[0040] Through the above setting of the monitoring and analysis module, the monitoring and analysis module realizes multi-dimensional and stereoscopic monitoring of the availability of the RADIUS service of the authentication and billing system through multiple automated monitoring methods, so that the system can realize automated monitoring.

[0041] The emergency response module is used to complete the emergency response operation after the detection and analysis module determines that the authentication and billing system has failed. The specific operation process of the emergency response module is as follows: 1. Matching the response strategy. The system matches and judges the response time, the authority, the frequency of the operation, and the security control strategy. If the execution conditions are met, the next step of the process is allowed to proceed. If the conditions are not met, the process is terminated and an alarm is thrown to record the response log. 2. Execute the emergency response operation. The system clears the automation list and executes the operation item by item according to the predetermined script and pre-configured command. Establish a temporary Internet access channel without authentication on the BRAS to ensure the smooth operation of the campus network. 3. Execute the recovery operation. The system clears the automation list and executes the operation item by item according to the predetermined script and pre-configured command. Cancel the establishment of a temporary Internet access channel without authentication on the BRAS, and simultaneously reset the online information of temporary users without authentication saved on the authentication and billing system and the BRAS, and the campus network restores the authentication Internet access status.

[0042] From the above description of the emergency response module, it can be seen that the system uses the emergency response module to achieve automated handling and automated recovery. Through preset emergency processes and emergency strategies, the system calls the BRAS interface for linkage handling to achieve standardization and standardization of the system's emergency processes. After the certificate and billing system fault is repaired, the system can automatically monitor and discover that the service is available, release the emergency mode, close the temporary authentication-free Internet access channel, and restore normal authentication and billing Internet access status.

[0043] The aforementioned log and alarm push module is used to implement logging and alarm push functions. Logging is used to record system operation, monitoring and analysis, and the execution of emergency and recovery measures. The alarm push function is used to push information about important work nodes, supporting SMS, WeChat, email, and other platforms. Through the log and alarm push module, the system implements automated alarm functions. While the system is running, it pushes alarm information to administrators via the unified communication interface when it monitors business interruptions and executes important remedial actions.

[0044] This application proposes a method for automatically handling faults in a campus network authentication and billing system, comprising the following steps:

[0045] Step 1: Complete the basic parameter operation configuration of the system, determine the system's emergency response method execution process, response time, authority, frequency of operation, and security management and control strategy, and activate each functional module within the system;

[0046] Step 2: Use multiple methods to monitor the RADIUS service status of the authentication and billing system. Comprehensively analyze and determine service availability and quality through various monitoring indicators. Record system operation, monitoring and analysis, emergency response, and recovery execution in real time. Push alerts for important work nodes. When the system determines that the service is unavailable or service quality indicator parameters are below the threshold, the emergency response module promptly responds and proceeds to steps 3 and 4 in sequence.

[0047] Step 3: The emergency response module automatically executes the emergency response process based on the emergency response strategy pre-configured by the administrator, establishing a temporary Internet access channel for users on the BRAS to ensure smooth access to the campus network;

[0048] Step 4. The system automatically executes operations item by item according to the predetermined script and pre-configured command list. When the system automatically detects that the authentication service is available, it cancels the establishment of a temporary authentication-free Internet access channel on the BRAS, synchronously resets the authentication and billing system and the temporary authentication-free user online information saved on the BRAS, switches back to the authentication and billing Internet access mode, and repeats step 2.

[0049] To sum up: the automatic fault handling method and system of the campus network authentication and billing system realize the automatic monitoring and handling of faults in the campus network authentication and billing system when used, greatly shortening the handling response time, reducing the impact of faults, and automating and standardizing the fault handling process. Compared with traditional manual handling methods, the probability of misoperation is reduced. The system has message push and log recording functions such as SMS, WeChat, and email, providing network administrators with data basis for management and operation information and fault judgment and analysis.

[0050] The standard parts used in the present invention can all be purchased from the market, and special-shaped parts can be customized according to the description in the specification and the drawings. The specific connection methods of each part adopt conventional means such as mature bolts, rivets, welding, etc. in the existing technology. The machinery, parts and equipment all adopt conventional models in the existing technology and will not be described in detail here. The contents not described in detail in this specification belong to the existing technology known to professional and technical personnel in this field. Although the embodiments of the present invention have been shown and described, it can be understood by ordinary technicians in this field that various changes, modifications, substitutions and modifications can be made to these embodiments without departing from the principles and spirit of the present invention. The scope of the present invention is defined by the attached claims and their equivalents.

Claims

1. A campus network authentication and billing system fault automatic handling system, characterized by: The campus network authentication and billing system fault automatic handling system includes a system management module, a policy management module, a monitoring and analysis module, an emergency handling module, and a log and alarm push module; the system management module is used to complete the basic parameter calculation configuration of the system, the interface configuration with the BRAS device, and the interface call configuration with the DHCP server and the authentication and billing system; The policy management module is used to control the system's emergency response method execution process, response time, authority, frequency of operation, and security management and control strategies; The monitoring and analysis module is used to realize multi-dimensional and stereoscopic monitoring of the availability of the RADIUS service of the authentication and billing system through a variety of automated monitoring methods; the emergency response module is used to complete the system emergency response operation through the preset emergency process, emergency strategy and system call BRAS interface linkage response, and when the campus network authentication and billing system fails, the system establishes a temporary Internet access channel for the user on the BRAS to ensure the stability and continuity of the campus network business. When the authentication and billing system failure is repaired, the system can automatically detect that the authentication service is available, close the user's temporary Internet access channel on the BRAS, and switch back to the authentication and billing Internet access mode; the log and alarm push module is used to realize the system log recording and alarm push functions; The monitoring and analysis module includes a service process monitoring and analysis submodule, a communication message monitoring and analysis submodule, an alarm log monitoring and analysis submodule, a database monitoring and analysis submodule and a business simulation probe submodule; The communication message monitoring and analysis submodule monitors the number of RADIUS request / response messages sent and received between the BRAS and the authentication and accounting system through the switch mirror port, and triggers an alarm when the ratio of the number of RADIUS request messages to the number of RADIUS response messages exceeds a certain ratio threshold by comparing the message numbers. The system performs the following steps: Step 1: Complete the basic parameter operation configuration of the system, determine the system's emergency response method execution process, response time, authority, frequency of operation, and security management and control strategy, and activate each functional module within the system; Step 2: Use multiple methods to monitor the RADIUS service status of the authentication and billing system. Comprehensively analyze and determine service availability and quality through various monitoring indicators. Record system operation, monitoring and analysis, emergency response, and recovery execution in real time. Push alerts for important work nodes. When the system determines that the service is unavailable or service quality indicator parameters are below the threshold, the emergency response module promptly responds and proceeds to steps 3 and 4 in sequence. Step 3: The emergency response module automatically executes the emergency response process based on the emergency response strategy pre-configured by the administrator, establishing a temporary Internet access channel for users on the BRAS to ensure smooth access to the campus network; Step 4. The system automatically executes operations item by item according to the predetermined script and pre-configured command list. When the system automatically detects that the authentication service is available, it cancels the establishment of a temporary authentication-free Internet access channel on the BRAS, synchronously resets the authentication and billing system and the temporary authentication-free user online information saved on the BRAS, switches back to the authentication and billing Internet access mode, and repeats step 2.

2. The automatic fault handling system for campus network authentication and billing system according to claim 1 is characterized by: The system management module supports manual operation and disposal of the system and supports a visual management interface.

3. The automatic fault handling system for campus network authentication and billing system according to claim 1 is characterized by: The log and alarm push module supports docking with platforms such as SMS, WeChat, and email, and when the system is running, the log and alarm push module monitors business interruptions and performs important disposal actions and pushes alarm information to the administrator through the unified communication interface.

4. The automatic fault handling system for campus network authentication and billing system according to claim 1 is characterized by: The service process monitoring and analysis submodule monitors the working status of the RADIUS service process of the authentication and billing system in real time through the authentication and billing system API interface or deploys a monitoring proxy client in the authentication and billing system background, and realizes threshold alarm and trend warning by collecting and analyzing key indicator items; The monitoring indicators of the service process monitoring and analysis submodule are RADIUS service process CPU utilization, memory usage, port usage, network card traffic, and hard disk usage.

5. The automatic fault handling system for campus network authentication and billing system according to claim 1 is characterized by: The alarm log monitoring and analysis submodule monitors the log information of BRAS and authentication and billing system through API interface or deploying a third-party log platform; the alarm log monitoring and analysis submodule periodically reads the log information, and when the corresponding alarm log is monitored and matched, it determines that the authentication and billing system has failed; the monitoring indicators of the alarm log monitoring and analysis submodule are error logs, system alarm logs and service alarm logs.

6. The automatic fault handling system for campus network authentication and billing system according to claim 1 is characterized by: The database monitoring and analysis submodule monitors the DHCP server database and the authentication and billing system database through a remote database interface or a system API interface, and compares the IP fields in the two databases based on the IP address field in the address lease allocation table of the DHCP server IP address lease database and the IP address field in the online user table of the authentication and billing system database. When the consistency difference between the two database fields exceeds a threshold, it is determined that there is an abnormality in the RADIUS service.

7. The automatic fault handling system for campus network authentication and billing system according to claim 1 is characterized by: The service simulation probe submodule monitors the RADIUS service interface response content and response delay of the RADIUS service interface of the authentication and accounting system, and comprehensively determines whether the RADIUS service is normal.

Images