An integrated system and method for supporting regional network management

Abstract

The present invention provides an integrated system and method for supporting regional network management, wherein a network interconnection device redirects to a Portal page provided by a management server; a client enters login information on the Portal page; a service control module receives the login information and calls a local Portal module, forms a Portal authentication request message based on the login information and sends it to the network interconnection device; after receiving the Portal authentication request message, the network interconnection device sends a user authentication request message to the management server, and after the local Radius module monitors the user authentication request message, the service control module performs authentication, authorization and billing, and the network interconnection device releases the client after the service control module authorizes the client. The AAA authentication protocol and PORTAL are integrated into one server, reducing costs and improving efficiency.

Description

Technical Field

[0001] The present invention relates to the field of local area network management and wireless authentication technology, and in particular to an integrated system and method for supporting local area network management. Background Art

[0002] The network operation and maintenance projects mainly used in campus scenarios are mainly based on independent deployment of AAA servers and PORTAL servers. The deployment and operation costs are high, which affects the construction of campus networks. The multi-server solution has defects such as long protocol communication and interaction between servers, low business processing efficiency, high resource consumption, and inconvenient maintenance. Summary of the invention

[0003] Based on the above content, the present invention provides an integrated system and method for supporting local area network management, which only solves the technical problems of high cost and low efficiency of using multiple servers for Internet authentication in the prior art.

[0004] An integrated system supporting regional network management includes a client, a management server and a network interconnection device, wherein the management server includes a service control module, a local portal module and a local radius module;

[0005] When the client initiates a WIFI network connection request, the network interconnection device redirects the client to the Portal page provided by the management server according to the WIFI network connection request;

[0006] The client enters login information on the Portal page;

[0007] The service control module receives the login information and calls the local Portal module. The local Portal module forms a Portal authentication request message based on the login information and sends it to the network interconnection device.

[0008] After receiving the Portal authentication request message, the network interconnection device sends a user authentication request message containing login information to the management server. After the local Radius module monitors the user authentication request message sent by the network interconnection device, it is handed over to the business control module to perform authentication, authorization and billing. The network interconnection device releases the client after the business control module authorizes the client.

[0009] Furthermore, after the local Radius module monitors the user authentication request message sent by the network interconnection device, it forwards it to the service control module;

[0010] The service control module is used to: verify the login information and user billing information after receiving the user authentication request, and set the user Internet access policy. After the verification is successful, the verification success result is returned to the local Radius module;

[0011] After obtaining the verification success result sent by the service control module, the local Radius module sends a response user authentication request message to the network interconnection device;

[0012] The network interconnection device releases the client according to the response to the user authentication request message.

[0013] Further, after the network interconnection device releases the client, it sends a billing start message to the local Radius module;

[0014] The local Radius module forwards the accounting start message to the service control module, which starts accounting and records session information, and returns the accounting success result to the local Radius module.

[0015] After receiving the successful accounting result, the local Radius module sends a response accounting start message to the network interconnection device.

[0016] Further, after receiving the response accounting start message, the network interconnection device sends a response portal authentication request message to the local portal module;

[0017] After receiving the response to the portal authentication request message, the local portal module sends the login authentication result to the business control module;

[0018] After receiving the login authentication result, the business control module returns the login authentication result to the client interface.

[0019] Further, the system also includes a cache module, and the service control module is connected to the cache module;

[0020] The business control module records in real time each interaction process information with the network interconnection device, the local Portal module, and the local Radius module, and saves the interaction process information in the cache module so that the business control module can directly retrieve the associated interaction process information from the cache module when it subsequently interacts with the network interconnection device, the local Portal module, and the local Radius module.

[0021] Furthermore, the system also includes a database storing Internet access configuration data, and the management server is connected to the database;

[0022] After receiving the login information, the service control module is further used to: when the cache module is initially loaded and is empty, query the Internet access configuration data from the database and save the Internet access configuration policy to the cache module;

[0023] The service control module obtains Internet access configuration data from the cache module to perform user Internet access policy setting and billing.

[0024] An integrated method for supporting local area network management, using the aforementioned integrated system for supporting local area network management, comprising:

[0025] Step A1: When the client initiates a WIFI network connection request, the network interconnection device redirects the client to a portal page provided by the management server according to the WIFI network connection request;

[0026] Step A2: The client enters login information on the Portal page;

[0027] Step A3: The service control module receives the login information and calls the local Portal module. The local Portal module forms a Portal authentication request message based on the login information and sends it to the network interconnection device.

[0028] Step A4, after receiving the Portal authentication request message, the network interconnection device sends a user authentication request message containing login information to the management server. After the local Radius module monitors the user authentication request message sent by the network interconnection device, it is handed over to the service control module to perform authentication, authorization and billing. The network interconnection device releases the client after the service control module authorizes the client.

[0029] Further, step A4 includes:

[0030] Step A41, the local Radius module monitors the user authentication request message sent by the network interconnection device and forwards it to the service control module;

[0031] Step A42, after receiving the user authentication request, the service control module verifies the login information and the user billing information, and sets the user's Internet access policy. After the verification is successful, the verification success result is returned to the local Radius module;

[0032] Step A43, after obtaining the verification success result sent by the service control module, the local Radius module sends a response user authentication request message to the network interconnection device;

[0033] Step A44, the network interconnection device releases the client according to the response to the user authentication request message.

[0034] Furthermore, after step A4, the following steps are further included:

[0035] Step A5: After the network interconnection device releases the client, it sends a billing start message to the local Radius module;

[0036] Step A6: The local Radius module forwards the billing start message to the service control module. The service control module starts billing and records session information, and returns a billing success result to the local Radius module.

[0037] Step A7: After receiving the successful billing result, the local Radius module sends a response billing start message to the network interconnection device.

[0038] Furthermore, after step A7, the following steps are further included:

[0039] Step A8: After receiving the response accounting start message, the network interconnection device sends a response Portal authentication request message to the local Portal module;

[0040] Step A9: After receiving the response to the Portal authentication request message, the local Portal module sends the login authentication result to the service control module;

[0041] Step A10: After receiving the login authentication result, the service control module returns the login authentication result to the client interface.

[0042] The beneficial technical effect of the present invention is that the present invention integrates the AAA authentication protocol and PORTAL into one server, so that in network access control, a single server can be deployed to support the PORTAL protocol and AAA protocol functions, without the need to deploy other RADIUS servers and PORTAL servers, thereby reducing the deployment cost and operating cost of network operators. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 A schematic diagram of the service structure of an integrated system supporting regional network management according to the present invention;

[0044] Figure 2 A schematic diagram of an interactive process of an integrated system supporting regional network management according to the present invention;

[0045] Figure 3 A schematic diagram of a cache flow of an integrated system supporting regional network management according to the present invention;

[0046] Figure 4-7 The present invention is a flowchart of the steps of an integrated method for supporting area network management. DETAILED DESCRIPTION

[0047] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0048] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments may be combined with each other.

[0049] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments, but they are not intended to limit the present invention.

[0050] See also Figure 1-2 The present invention provides an integrated system for supporting regional network management, comprising a client (1), a management server (2) and a network interconnection device (3), wherein the management server (2) comprises a service control module (21), a local portal module (22) and a local radius module (23);

[0051] When the client (1) initiates a WIFI network connection request, the network interconnection device (3) redirects the client (1) to a portal page provided by the management server (2) according to the WIFI network connection request;

[0052] The client (1) enters login information on the Portal page;

[0053] The service control module (21) receives the login information and submits it to the local portal module (22); the local portal module (22) forms a portal authentication request message based on the login information and sends it to the network interconnection device (3);

[0054] After receiving the portal authentication request message, the network interconnection device (3) sends a user authentication request message containing login information to the management server (2). After the local Radius module (23) monitors the user authentication request message sent by the network interconnection device (3), it is handed over to the service control module (21) to perform authentication, authorization and billing. After the service control module (21) authorizes the client (1), the network interconnection device (3) releases the client (1).

[0055] Specifically, the network interconnection device (3) is a gateway or a BRAS (Broadband Remote Access Server, BRAS for short).

[0056] Specifically, the login information includes a user name and a password.

[0057] The service control module (21) adopts a private protocol, converts the login authentication request into the Portal protocol, calls the local Portal module (22) and sends it to the network interconnection device. When performing AAA verification, the network interconnection device converts it into the Radius protocol. The local Radius module monitors the user authentication request message, converts it into the private protocol and sends it to the service control module (21) to perform authentication, authorization and billing.

[0058] Specifically, the management server is a GIWIFI server, and the service control module is GIWIFI.

[0059] Furthermore, the local Radius module (23) forwards the user authentication request message sent by the network interconnection device (3) to the service control module (21);

[0060] The service control module (21) is used to: verify the login information and user billing information after receiving the user authentication request, and set the user Internet access policy, and then return the verification success result to the local Radius module (23);

[0061] After obtaining the verification success result sent by the service control module (21), the local Radius module (23) sends a response user authentication request message to the network interconnection device (3);

[0062] The network interconnection device (3) releases the client (1) in response to the user authentication request message.

[0063] The service control module (21) receives the user authentication request and is responsible for verifying the user name and password, obtaining the user billing policy, verifying the user billing information, verifying whether the user name exists, whether the password is correct, whether there is an Internet package under the account, whether the Internet package has timed out, and whether the Internet can continue to be accessed. The user Internet policy is set according to the verified information, such as Internet bandwidth, port and timing policy. After the verification, i.e. the authentication is successful, the corresponding permission, i.e. the authorization, is opened, and then the verification success result is returned, and the network interconnection device releases the client.

[0064] Furthermore, after the network interconnection device (3) releases the client (1), it sends a billing start message to the local Radius module (23);

[0065] The local Radius module (23) forwards the billing start message to the service control module (21), the service control module (21) starts billing and records session information, and returns a billing success result to the local Radius module (23);

[0066] After receiving the successful billing result, the local Radius module (23) sends a response billing start message to the network interconnection device (3).

[0067] The billing start message sent by the network interconnection device (3) is a Radius protocol. The local Radius module (23) converts it into a protocol used by the service control module and then forwards it to the service control module. The service control starts timing. If the timing starts successfully, a timing success result is returned to call the local Radius module (23) to send a response billing start message to the network interconnection device.

[0068] Further, after receiving the response billing start message, the network interconnection device (3) sends a response portal authentication request message to the local portal module (22);

[0069] After receiving the response to the portal authentication request message, the local portal module (22) sends a login authentication result to the service control module (21);

[0070] After receiving the login authentication result, the service control module (21) returns the login authentication result to the client (1) interface.

[0071] By displaying the login authentication result on the client (1) interface, the user is informed that the authentication is passed and can access the Internet.

[0072] See also Figure 3 , further, the system also includes a cache module (24), and the service control module (21) is connected to the cache module (24);

[0073] The service control module (21) records in real time each interaction process information with the network interconnection device (3), the local portal module (22), and the local radius module (23), and saves the interaction process information in the cache module (24), so that the service control module (21) can directly retrieve the associated interaction process information from the cache module (24) when interacting with the network interconnection device (3), the local portal module (22), and the local radius module (23) next time.

[0074] Furthermore, the system also includes a database (4), the database (4) stores Internet access configuration data, and the management server (2) is connected to the database (4);

[0075] After receiving the login information, the service control module (21) is also used to: when the cache module is initially loaded and is empty, query the Internet access configuration data from the database (4) and save the Internet access configuration policy to the cache module (24); obtain the Internet access configuration data from the cache module (24) to set the user Internet access policy and bill the client for Internet access usage.

[0076] Since the Radius protocol has multiple interactions, in order to improve business concurrency processing, the data in the intermediate interaction steps are obtained from the cache module. The advantage of using the cache module is that it reduces the resource consumption of the database and reduces the processing speed caused by reducing the establishment of database connections. The relevant Internet configuration data is only loaded once when the system is initialized, and then the relevant session information is basically obtained from the cache module to improve the processing speed. After the RADIUS protocol process is completed, the session record is finally persisted and stored in the database as historical data.

[0077] like Figure 3As shown, the Internet access configuration data includes various Internet access packages, billing strategies, etc. So that the business control module can call and use it when setting user Internet access strategies and billing. Specifically, when the business control module receives the login information and submits the login information to the local PORTAL module, it will save the current session information to the cache module. Then send the PORTAL protocol to the local PORTAL module. When receiving the user authentication request formed by the Radius protocol sent by the local Radius module, the previous session information is loaded from the cache module, and the cache module returns the session information, and the authentication and authorization have been performed. The final user billing information and login information during the authentication process are saved to the cache module, and then the authorized radius release protocol is sent. After the network interconnection device releases the client, the business control module starts billing, caches the billing information and login information in real time, and finally generates a client record and saves it to the database.

[0078] The integrated management server of the present invention supports providing diverse billing services, supports account purchase of packages, the package time unit is day, and the minimum calculation time granularity of authentication is minute. It supports unlimited daily billing and limited daily billing. It supports free trial for newly registered users. It supports non-billable trial for all users and non-billable regional modes. It supports multiple billing packages for users. For example, when the user's own package expires, he can continue to use trial package one. When trial package one ends, he can continue to use trial package two.

[0079] In addition, the present invention can also provide diverse authentication services, supporting the same account to use different client type devices at the same time, such as mobile phones, PCs, and PADs for authentication, and be online at the same time. Support the same account to allow a differentiated number of different client types to be online, for example, two mobile phones, a computer, and three pads to be online at the same time. Support the same account to only allow authentication on designated devices (requires the client to install APP or network support). Support the packages purchased by the same account, and when authenticating in different areas (logical divisions), the speed and terminal quantity restrictions can be differentiated.

[0080] This architecture provides a variety of terminal access control, account billing diversity and other functions. This product also provides strong business concurrent processing capabilities, has been applied in dozens of campus scenarios, and has a wealth of experience. It can effectively reduce costs, improve business processing efficiency, and it is easy to iterate versions, and maintenance and upgrades can be hot-fixed.

[0081] See also Figure 4 The present invention also provides an integrated method for supporting regional network management, using the aforementioned system for supporting regional network management, including:

[0082] Step A1: When the client initiates a WIFI network connection request, the network interconnection device redirects the client to a portal page provided by the management server according to the WIFI network connection request;

[0083] Step A2: The client enters login information on the Portal page;

[0084] Step A3: The service control module receives the login information and submits it to the local Portal module. The local Portal module forms a Portal authentication request message based on the login information and sends it to the network interconnection device.

[0085] Step A4, after receiving the Portal authentication request message, the network interconnection device sends a user authentication request message containing login information to the management server. After the local Radius module monitors the user authentication request message sent by the network interconnection device, it is handed over to the service control module to perform authentication, authorization and billing. The network interconnection device releases the client after the service control module authorizes the client.

[0086] Specifically, login information includes username and password.

[0087] The service control module (21) adopts a private protocol, converts the login authentication request into the Portal protocol, calls the local Portal module (22) and sends it to the network interconnection device. When performing AAA verification, the network interconnection device converts it into the Radius protocol. The local Radius module monitors the user authentication request message, converts it into the private protocol and sends it to the service control module (21) to perform authentication, authorization and billing.

[0088] See also Figure 5 , further, step A4 comprises:

[0089] Step A41, the local Radius module monitors the user authentication request message sent by the network interconnection device and forwards it to the service control module;

[0090] Step A42, after receiving the user authentication request, the service control module verifies the login information and the user billing information, and sets the user Internet access policy, and then returns the verification success result to the local Radius module;

[0091] Step A43, after obtaining the verification success result sent by the service control module, the local Radius module sends a response user authentication request message to the network interconnection device;

[0092] Step A44, the network interconnection device releases the client according to the response to the user authentication request message.

[0093] The service control module receives the user authentication request and is responsible for verifying the user name and password, obtaining the user billing policy, verifying the user billing information, verifying whether the user name exists, whether the password is correct, whether there is an Internet package under the account, whether the Internet package has timed out, and whether the Internet can continue to be online. According to the verified information, the user Internet policy is set, such as Internet bandwidth, port and timing policy. After the verification is successful, the corresponding permission is opened, that is, authorization, and then the verification success result is returned, and the network interconnection device releases the client.

[0094] See also Figure 6 , further, after step A4, the following steps are further included:

[0095] Step A5: After the network interconnection device releases the client, it sends a billing start message to the local Radius module;

[0096] Step A6: The local Radius module forwards the billing start message to the service control module, and the service control module starts billing and records session information, and returns a billing success result to the local Radius module;

[0097] Step A7: After receiving the successful billing result, the local Radius module sends a response billing start message to the network interconnection device.

[0098] The billing start message sent by the network interconnection device is the Radius protocol. The local Radius module (23) converts it into the protocol used by the service control module and then forwards it to the service control module. The service control starts timing. If the timing starts successfully, a timing success result is returned to call the local Radius module (23) to send a response billing start message to the network interconnection device.

[0099] See also Figure 7 , further, after step A7, the following steps are further included:

[0100] Step A8: After receiving the response accounting start message, the network interconnection device sends a response Portal authentication request message to the local Portal module;

[0101] Step A9: After receiving the response to the Portal authentication request message, the local Portal module sends the login authentication result to the service control module;

[0102] Step A10: After receiving the login authentication result, the service control module returns the login authentication result to the client interface.

[0103] A management server, i.e., an authentication and billing server of the present invention can provide all the functions of a PORTAL server and an AAA server. Only a single hardware server is required for deployment, which reduces operating costs. It provides flexible and multiple user billing modes and flexible network terminal authentication control functions, which can cover the diverse operational requirements of network operators. The user authentication and billing processes are on the same server, which consumes little server resources, has fast response, low communication time, low cost, and high efficiency. Most business process interactions are in a cached form to reduce database resource consumption. Client authentication method for client users: supports tools such as browsers and mobile phone APPs. In addition, the server of the present invention also supports the cloud management information to be sent to the local configuration, and supports automatic synchronization of local data to the cloud.

[0104] The above are only preferred embodiments of the present invention, and are not intended to limit the implementation methods and protection scope of the present invention. Those skilled in the art should be aware that all solutions obtained by equivalent substitutions and obvious changes made using the description and illustrations of the present invention should be included in the protection scope of the present invention.

Claims

1. An integrated system for supporting regional network management, characterized in that: It includes a client, a management server and a network interconnection device, wherein the management server includes a service control module, a local Portal module and a local Radius module; When the client initiates a WIFI network connection request, the network interconnection device redirects the client to a Portal page provided by the management server according to the WIFI network connection request; The client enters login information on the Portal page; The service control module receives the login information and calls the local Portal module, and the local Portal module forms a Portal authentication request message based on the login information and sends it to the network interconnection device; After receiving the Portal authentication request message, the network interconnection device sends a user authentication request message containing the login information to the management server. After the local Radius module monitors the user authentication request message sent by the network interconnection device, it is handed over to the service control module to perform authentication, authorization and billing. The network interconnection device releases the client after the service control module authorizes the client.

2. The integrated system for supporting local area network management as claimed in claim 1, characterized in that: After the local Radius module monitors the user authentication request message sent by the network interconnection device, it forwards it to the service control module; The service control module is used to: verify the login information and user billing information after receiving the user authentication request, and set the user Internet access policy, and return the verification success result to the local Radius module after the verification is successful; After obtaining the verification success result sent by the service control module, the local Radius module sends a response user authentication request message to the network interconnection device; The network interconnection device releases the client according to the response user authentication request message.

3. The integrated system supporting local area network management as claimed in claim 1, characterized in that: After the network interconnection device releases the client, it sends a billing start message to the local Radius module; The local Radius module forwards the accounting start message to the service control module, and the service control module starts accounting and records session information, and returns an accounting success result to the local Radius module; After receiving the successful billing result, the local Radius module sends a response billing start message to the network interconnection device.

4. The integrated system for supporting local area network management as claimed in claim 3, characterized in that: After receiving the response accounting start message, the network interconnection device sends a response Portal authentication request message to the local Portal module; After receiving the response to the portal authentication request message, the local portal module sends a login authentication result to the service control module; After receiving the login authentication result, the service control module returns the login authentication result to the client interface.

5. The integrated system for supporting local area network management as claimed in claim 3, characterized in that: The system further comprises a cache module, and the service control module is connected to the cache module; The business control module records in real time each interaction process information with the network interconnection device, the local Portal module, and the local Radius module, and saves the interaction process information in the cache module, so that the business control module can directly retrieve the associated interaction process information from the cache module during subsequent interactions with the network interconnection device, the local Portal module, and the local Radius module.

6. The integrated system for supporting local area network management as claimed in claim 5, characterized in that: The system further comprises a database, wherein the database stores Internet access configuration data, and the management server is connected to the database; After receiving the login information, the service control module is further used to: when the cache module is initially loaded and is empty, query the Internet access configuration data from the database and save the Internet access configuration policy to the cache module; The service control module obtains the Internet access configuration data from the cache module to perform user Internet access policy setting and billing.

7. An integrated method for supporting regional network management, characterized in that: An integrated system for supporting area network management as described in any one of claims 1 to 6, comprising: Step A1, when the client initiates a WIFI network connection request, the network interconnection device redirects the client to a Portal page provided by the management server according to the WIFI network connection request; Step A2, the client enters login information on the Portal page; Step A3, the service control module receives the login information and calls the local Portal module, and the local Portal module forms a Portal authentication request message based on the login information and sends it to the network interconnection device; Step A4, after receiving the Portal authentication request message, the network interconnection device sends a user authentication request message containing the login information to the management server. After the local Radius module monitors the user authentication request message sent by the network interconnection device, it is handed over to the business control module to perform authentication, authorization and billing. The network interconnection device releases the client after the business control module authorizes the client.

8. The integrated support area network management method as claimed in claim 7, characterized in that: The step A4 comprises: Step A41, the local Radius module monitors the user authentication request message sent by the network interconnection device and forwards it to the service control module; Step A42, after receiving the user authentication request, the service control module verifies the login information and the user billing information, and sets the user Internet access policy. After the verification is successful, the verification success result is returned to the local Radius module; Step A43, after obtaining the verification success result sent by the service control module, the local Radius module sends a response user authentication request message to the network interconnection device; Step A44, the network interconnection device releases the client according to the response to the user authentication request message.

9. The integrated support area network management method as claimed in claim 7, characterized in that: After step A4, the following steps are further included: Step A5, after the network interconnection device releases the client, it sends a billing start message to the local Radius module; Step A6, the local Radius module forwards the billing start message to the service control module, the service control module starts billing and records session information, and returns a billing success result to the local Radius module; Step A7: After receiving the successful billing result, the local Radius module sends a response billing start message to the network interconnection device.

10. The integrated support area network management method as claimed in claim 9, characterized in that: After step A7, the following steps are further included: Step A8, after receiving the response accounting start message, the network interconnection device sends a response Portal authentication request message to the local Portal module; Step A9, after receiving the response to the Portal authentication request, the local Portal module sends a login authentication result to the business control module; Step A10: After receiving the login authentication result, the service control module returns the login authentication result to the client interface.

Images