Network authentication proxy device, and wired network access authentication method and system

Abstract

The invention discloses network authentication proxy equipment and a wired network access authentication method and system, and relates to the technical field of network authentication. One end of the network authentication proxy device is electrically connected with the mobile device, the other end of the network authentication proxy device is electrically connected with the network authentication system, and the network authentication proxy device is used for obtaining an MAC address of a wired network card of the mobile device, packaging a data packet of an 802.1 x protocol according to the MAC address and sending the data packet to the network authentication system. And the network authentication system carries out network access authentication on the mobile equipment. According to the network authentication proxy equipment provided by the embodiment of the invention, the mobile equipment is proxy by the network authentication proxy equipment to realize 802.1 x network authentication, so that the capability of wired network 802.1 x authentication is provided for the mobile equipment, the mobile equipment is ensured to access a secure network, deep modification and customization of a mobile system are avoided, and the security of the mobile equipment is improved. And the workload of system development and version upgrading maintenance is greatly reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of network authentication, and in particular to a network authentication proxy device, a wired network access authentication method and a system. Background Art

[0002] Currently, mobile devices on the market have built-in network access authentication functions for wireless network systems; but for wired networks, they can only connect to the Internet directly and do not have network access authentication functions, which poses a security risk.

[0003] Currently, mobile systems have basically simplified the support for 802.1x, and only retain 802.1x authentication for WiFi. If you want to perform 802.1x authentication on a wired network on a mobile device, you need to deeply modify the mobile system. Due to the permission control in the current mobile system, the application layer cannot directly communicate with the 802.1x device or server through RAW socket. The underlying layer of the mobile system must be deeply modified, and the amount of modification is very large. At the same time, it is restricted by the upstream release rules of the mobile system, which causes many inconveniences in the actual modification and maintenance process, and even makes it impossible to release the version. Summary of the invention

[0004] The present invention aims to solve at least one of the technical problems existing in the prior art. To this end, the present invention proposes a network authentication proxy device, a wired network access authentication method and a system, which can proxy a mobile device 200 to implement 802.1x network authentication, which not only provides the mobile device 200 with the ability of wired network 802.1x authentication, ensuring that the mobile device 200 accesses a secure network, but also avoids deep modification and customization of the mobile system, greatly reducing the workload of system development, version upgrade and maintenance.

[0005] In the first aspect, according to the network authentication agent device of an embodiment of the present invention, one end of the network authentication agent device is electrically connected to a mobile device, and the other end of the network authentication agent device is electrically connected to a network authentication system. The network authentication agent device is used to obtain the MAC address of the wired network card of the mobile device, encapsulate 802.1x protocol data packets according to the MAC address, and send the data packets to the network authentication system, so that the network authentication system performs network access authentication on the mobile device.

[0006] According to some embodiments of the present invention, the network authentication agent device includes a first network card and a second network card, the first network card is electrically connected to the mobile device, the second network card is electrically connected to the network authentication system, and the first network card is electrically connected to the second network card.

[0007] According to some embodiments of the present invention, the network authentication agent device also includes a third network card and a bridge, the first network card is electrically connected to the third network card, the third network card is electrically connected to the bridge, the bridge is electrically connected to the second network card, and the first network card is electrically connected to the second network card through the third network card and the bridge.

[0008] According to some embodiments of the present invention, the first network card is electrically connected to the mobile device via a type-c cable.

[0009] According to some embodiments of the present invention, the second network card is electrically connected to the network authentication system via an RJ45 interface.

[0010] According to some embodiments of the present invention, the network authentication system includes a switch and an authentication server, the switch is electrically connected to the network authentication agent device, the authentication server is electrically connected to the switch, the switch is used to forward the data packet to the authentication server, the authentication server is used to perform network access authentication on the mobile device based on the data packet, and send the access result to the mobile device through the switch and the network authentication agent device.

[0011] In a second aspect, a wired network access authentication method according to an embodiment of the present invention is applied to the network authentication agent device described in the embodiment of the first aspect, and the wired network access authentication method includes the following steps:

[0012] Get the MAC address of the wired network card of the mobile device;

[0013] Encapsulating a data packet of the 802.1x protocol according to the MAC address, and sending the data packet to the network authentication system, so that the network authentication system performs network access authentication on the mobile device;

[0014] The access result sent by the network authentication system is received, and the access result is forwarded to the mobile device.

[0015] In a third aspect, a wired network access authentication method according to an embodiment of the present invention is applied to a mobile device, and the wired network access authentication method includes the following steps:

[0016] Sending the MAC address of the wired network card to the network authentication agent device described in the first aspect of the embodiment, so that the network authentication agent device encapsulates a data packet of the 802.1x protocol according to the MAC address, and sends the data packet to the network authentication system, so that the network authentication system performs network access authentication on the mobile device;

[0017] The access result forwarded by the network authentication system through the network authentication proxy device is obtained, and the access result is displayed on a display screen.

[0018] In a fourth aspect, a wired network access authentication method according to an embodiment of the present invention is applied to a network authentication system, wherein the network authentication system includes a switch and an authentication server, and the wired network access authentication method includes the following steps:

[0019] The switch obtains a data packet sent by the network authentication agent device as described in the first aspect of the embodiment, and forwards the data packet to the authentication server; the data packet is an 802.1x protocol data packet encapsulated by the network authentication agent device according to the MAC address of the mobile device;

[0020] The authentication server performs network access judgment on the mobile device, obtains an access result, and sends the access result to the switch;

[0021] The switch sends the admission result to the mobile device through the network authentication agent device.

[0022] In a fifth aspect, a wired network access authentication system according to an embodiment of the present invention includes:

[0023] mobile device;

[0024] The network authentication proxy device as described in the first aspect of the embodiment, one end of the network authentication proxy device is electrically connected to the mobile device;

[0025] A network authentication system, the other end of the network authentication agent device being electrically connected to the network authentication system;

[0026] Among them, the network authentication agent device is used to obtain the MAC address of the wired network card of the mobile device, encapsulate the 802.1x protocol data packet according to the MAC address, and send the data packet to the network authentication system. The network authentication system is used to perform network access authentication for the mobile device according to the data packet.

[0027] The network authentication proxy device, wired network access authentication method and system according to the embodiments of the present invention have at least the following beneficial effects: 802.1x network authentication is implemented by the network authentication proxy device acting as a proxy for the mobile device, which not only provides the mobile device with the ability of wired network 802.1x authentication and ensures that the mobile device accesses a secure network, but also avoids deep modification and customization of the mobile system, greatly reducing the workload of system development, version upgrade and maintenance.

[0028] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0030] Figure 1 A schematic diagram of the structure of a wired network access authentication system according to an embodiment of the present invention;

[0031] Figure 2 A schematic diagram of the working process of the wired network access authentication system according to an embodiment of the present invention;

[0032] Figure 3 A flowchart of a wired network access authentication method according to an embodiment of the present invention;

[0033] Figure 4 A flowchart of a wired network access authentication method according to another embodiment of the present invention;

[0034] Figure 5 A flowchart of a wired network access authentication method according to another embodiment of the present invention;

[0035] The network authentication agent device 100 , the first network card 110 , the second network card 120 , the third network card 130 , the bridge 140 , the mobile device 200 , the network authentication system 300 , the switch 310 , and the authentication server 320 . DETAILED DESCRIPTION

[0036] Embodiments of the present invention are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present application, and are not to be construed as limitations on the present application. For the step numbers in the following embodiments, they are only provided for the convenience of explanation, and the order between the steps is not limited in any way, and the execution order of each step in the embodiment can be adaptively adjusted according to the understanding of those skilled in the art.

[0037] In the description of the present invention, it should be understood that descriptions involving orientations, such as up, down, front, back, left, right, etc., and orientations or positional relationships indicated are based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present invention.

[0038] The terms "first", "second", "third" and "fourth" etc. in the specification and claims of the present invention and the drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0039] Reference to "embodiments" in the present invention means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0040] Currently, mobile devices on the market (such as tablets, mobile phones, laptops, etc.) have built-in network access authentication functions for wireless network systems; while for wired networks, they can only connect to the Internet directly and have no network access authentication function, which poses a security risk.

[0041] Currently, mobile systems have basically simplified their support for the 802.1x protocol, and only retain 802.1x authentication for WiFi. If you want to perform 802.1x authentication on a mobile device, you need to deeply modify the mobile system. Due to the permission control in the current mobile system, the application layer cannot directly communicate with the 802.1x device or server through RAW sockets. You must deeply modify the underlying layer of the mobile system, which requires a lot of changes. At the same time, it is restricted by the upstream release rules of the mobile system, which causes many inconveniences in the actual modification and maintenance process, and even makes it impossible to release the version.

[0042] RAW socket: Raw socket is a special type of network socket. Raw Socket allows applications to directly send and receive underlying network data packets without going through standard transport layer protocols (such as TCP or UDP). It provides low-level access to the network protocol stack, enabling applications to access and modify network protocol headers such as IP headers, TCP headers, and UDP headers to implement complex network operations.

[0043] In order to solve the above problems, the embodiments of the present invention provide a network authentication proxy device, a wired network access authentication method and a system, which implement 802.1x network authentication by using the network authentication proxy device as a proxy for the mobile device, thereby providing the mobile device with the capability of wired network 802.1x authentication and avoiding deep modification and customization of the mobile system, thus greatly reducing the workload of system development, version upgrade and maintenance.

[0044] The following describes in detail the network authentication proxy device, wired network access authentication method and system according to the embodiments of the present invention in conjunction with the accompanying drawings.

[0045] On the one hand, the embodiment of the present invention provides a network authentication agent device 100, such as Figure 1 As shown, one end of the network authentication agent device 100 is electrically connected to the mobile device 200, and the other end of the network authentication agent device 100 is electrically connected to the network authentication system 300. The network authentication agent device 100 is used to obtain the MAC address of the wired network card of the mobile device 200, encapsulate the 802.1x protocol data packet according to the MAC address, and send the data packet to the network authentication system 300, so that the network authentication system 300 performs network access authentication on the mobile device 200.

[0046] Specifically, when the mobile device 200 needs to access the secure network, the mobile device 200 is connected to the network authentication agent device 100, and the user sends the account information to the network authentication agent device 100 through the app on the mobile device 200. After the network authentication agent device 100 obtains the account information, it obtains the MAC address of the wired network card of the mobile device 200, uses the MAC address to encapsulate the data packet corresponding to the 802.1x protocol, and disguises itself as the mobile device 200 for network access authentication. After the network authentication system 300 passes the network access, the mobile device 200 can access the secure network normally.

[0047] The network authentication proxy device 100 according to the embodiment of the present invention can act as an agent for the mobile device 200 to implement 802.1x network authentication, which not only provides the mobile device 200 with the capability of wired network 802.1x authentication and ensures that the mobile device 200 can access a secure network, but also avoids deep modification and customization of the mobile system, thus greatly reducing the workload of system development, version upgrade and maintenance.

[0048] like Figure 1As shown, in some embodiments of the present invention, the network authentication agent device 100 includes a first network card 110 and a second network card 120, the first network card 110 is electrically connected to the mobile device 200, the second network card 120 is electrically connected to the network authentication system 300, and the first network card 110 is electrically connected to the second network card 120. The network authentication agent device 100 obtains the account information of the mobile device 200 through the first network card 110, and then obtains the MAC address of the wired network card of the mobile device 200; after the network authentication agent device 100 uses the MAC address to encapsulate the data packet corresponding to the 802.1x protocol, the data packet is sent to the network authentication system 300 through the second network card 120, so that the network authentication system 300 performs network access authentication.

[0049] Furthermore, if Figure 1 As shown, in some embodiments of the present invention, the network authentication agent device 100 further includes a third network card 130 and a bridge 140, the first network card 120 is electrically connected to the third network card 130, the third network card 130 is electrically connected to the bridge 140, the bridge 140 is electrically connected to the second network card 120, and the first network card 120 is electrically connected to the second network card 120 through the third network card 130 and the bridge 140. Through the third network card 130 and the bridge 140, the connection between the first network card 110 and the second network card 120 is realized, so that the data of the first network card 110 can be forwarded to the network authentication system 300 through the second network card 120.

[0050] Furthermore, if Figure 1 As shown, in some embodiments of the present invention, the first network card 110 is electrically connected to the mobile device 200 via a type-c cable. The first network card 110 is connected to the mobile device 200 via type-c, providing the mobile device 200 with a USB wired network card and a USB communication interface, and providing the mobile device 200 with an Ethernet networking function.

[0051] Furthermore, if Figure 1 As shown, in some embodiments of the present invention, the second network card 120 is electrically connected to the network authentication system 300 via an RJ45 interface. The second network card 120 is connected to the network authentication system 300 via an RJ45 interface to provide the network authentication agent device 100 with networking capability.

[0052] Furthermore, if Figure 1As shown, in some embodiments of the present invention, the network authentication system 300 includes a switch 310 and an authentication server 320, the switch 310 is electrically connected to the network authentication agent device 100, the authentication server 320 is electrically connected to the switch 310, the switch 310 is used to forward the data packet to the authentication server 320, the authentication server 320 is used to perform network access authentication on the mobile device 200 according to the data packet, and send the access result to the mobile device 200 through the switch 310 and the network authentication agent device 100. The complete process of network access authentication is as follows Figure 2 As shown, Figure 2 The expansion dock is the network authentication agent device 100.

[0053] On the other hand, the embodiment of the present invention also proposes a wired network access authentication method applied to the network authentication agent device 100, such as Figure 3 As shown, the method comprises the following steps:

[0054] Step S100: Obtain the MAC address of the wired network card of the mobile device 200;

[0055] Step S200: encapsulating a data packet of the 802.1x protocol according to the MAC address, and sending the data packet to the network authentication system 300, so that the network authentication system 300 performs network access authentication on the mobile device 200;

[0056] Step S300 : receiving the admission result sent by the network authentication system, and forwarding the admission result to the mobile device 200 .

[0057] Specifically, Figure 2 As shown, when the user enters the account information in the app on the mobile device 200, the mobile device 200 will send the account information to the network authentication agent device 100 through the type-c line; after the network authentication agent device 100 obtains the account information, it obtains the MAC address of the wired network card of the mobile device 200, uses the MAC address to encapsulate the data packet corresponding to the 802.1x protocol, and the network authentication agent device 100 sends the data packet to the network authentication system 300, disguised as the mobile device 200 for network access authentication. After the network authentication system 300 passes the network access, it sends the access result to the mobile device 200, and the mobile device 200 can access the secure network normally.

[0058] According to the wired network access authentication method of an embodiment of the present invention, 802.1x network authentication is implemented by the network authentication agent device 100 acting as an agent for the mobile device 200, which not only provides the mobile device 200 with the ability of wired network 802.1x authentication and ensures that the mobile device 200 accesses a secure network, but also avoids deep modification and customization of the mobile system, greatly reducing the workload of system development, version upgrade and maintenance.

[0059] On the other hand, the embodiment of the present invention also proposes a wired network access authentication method applied to the mobile device 200, such as Figure 4 As shown, the method comprises the following steps:

[0060] Step S400: Send the MAC address of the wired network card to the network authentication agent device 100, so that the network authentication agent device 100 encapsulates the 802.1x protocol data packet according to the MAC address, and sends the data packet to the network authentication system 300, so that the network authentication system 300 performs network access authentication on the mobile device 200;

[0061] Step S500: obtaining the admission result forwarded by the network authentication system 300 through the network authentication agent device 100, and displaying the admission result on the display screen.

[0062] Specifically, Figure 2 As shown, when the network authentication agent device 100 obtains the MAC address of the wired network card of the mobile device 200, it will use the MAC address to encapsulate the data packet corresponding to the 802.1x protocol, and then send the data packet to the network authentication system 300, disguised as the mobile device 200 for network access authentication. After the network authentication system 300 passes the network access, it sends the access result to the mobile device 200, and the mobile device 200 will display the access result on the display screen for the user to view.

[0063] According to the wired network access authentication method of an embodiment of the present invention, 802.1x network authentication is implemented by the network authentication agent device 100 acting as an agent for the mobile device 200, which not only provides the mobile device 200 with the ability of wired network 802.1x authentication and ensures that the mobile device 200 accesses a secure network, but also avoids deep modification and customization of the mobile system, greatly reducing the workload of system development, version upgrade and maintenance.

[0064] On the other hand, the embodiment of the present invention also proposes a wired network access authentication method applied to the network authentication system 300, such as Figure 1 As shown, the network authentication system 300 includes a switch 310 and an authentication server 320. Figure 5 As shown, the method comprises the following steps:

[0065] Step S600: the switch 310 obtains the data packet sent by the network authentication agent device 100 and forwards the data packet to the authentication server 320; the data packet is an 802.1x protocol data packet encapsulated by the network authentication agent device 100 according to the MAC address of the mobile device 200;

[0066] Step S700: the authentication server 320 performs network access judgment on the mobile device 200, obtains an access result, and sends the access result to the switch 310;

[0067] Step S800 : the switch 310 sends the admission result to the mobile device 200 via the network authentication agent device 100 .

[0068] Specifically, Figure 2 As shown, when the user enters the account information in the app on the mobile device 200, the mobile device 200 will send the account information to the network authentication agent device 100 through the type-c line; after the network authentication agent device 100 obtains the account information, it obtains the MAC address of the wired network card of the mobile device 200, uses the MAC address to encapsulate the data packet corresponding to the 802.1x protocol, and the network authentication agent device 100 sends the data packet to the network authentication system 300, disguised as the mobile device 200 for network access authentication. After receiving the data packet, the switch 310 will forward the data packet to the authentication server 320, and the authentication server 320 will make a network access judgment on the mobile device 200, obtain the access result, and send the access result to the switch 310; the switch 310 then sends the access result to the mobile device 200 through the network authentication agent device 100.

[0069] According to the wired network access authentication method of an embodiment of the present invention, 802.1x network authentication is implemented by the network authentication agent device 100 acting as an agent for the mobile device 200, which not only provides the mobile device 200 with the ability of wired network 802.1x authentication and ensures that the mobile device 200 accesses a secure network, but also avoids deep modification and customization of the mobile system, greatly reducing the workload of system development, version upgrade and maintenance.

[0070] On the other hand, the embodiment of the present invention also proposes a wired network access authentication system, such as Figure 1 As shown, the system includes:

[0071] Mobile device 200;

[0072] A network authentication agent device 100, one end of which is electrically connected to a mobile device 200;

[0073] The network authentication system 300, the other end of the network authentication agent device 100 is electrically connected to the network authentication system 300;

[0074] The network authentication agent device 100 is used to obtain the MAC address of the wired network card of the mobile device 200, encapsulate the 802.1x protocol data packet according to the MAC address, and send the data packet to the network authentication system 300. The network authentication system 300 is used to perform network access authentication on the mobile device 100 according to the data packet.

[0075] Specifically, when the mobile device 200 needs to access the secure network, the mobile device 200 is connected to the network authentication agent device 100, and the user sends the account information to the network authentication agent device 100 through the app on the mobile device 200. After the network authentication agent device 100 obtains the account information, it obtains the MAC address of the wired network card of the mobile device 200, uses the MAC address to encapsulate the data packet corresponding to the 802.1x protocol, and disguises itself as the mobile device 200 for network access authentication. After the network authentication system 300 passes the network access, the mobile device 200 can access the secure network normally.

[0076] The network authentication proxy device 100 according to the embodiment of the present invention can act as an agent for the mobile device 200 to implement 802.1x network authentication, which not only provides the mobile device 200 with the capability of wired network 802.1x authentication and ensures that the mobile device 200 can access a secure network, but also avoids deep modification and customization of the mobile system, thus greatly reducing the workload of system development, version upgrade and maintenance.

[0077] Although specific embodiments are described herein, those of ordinary skill in the art will recognize that many other modifications or alternative embodiments are also within the scope of the present disclosure. For example, any of the functions and / or processing capabilities described in conjunction with a particular device or component may be performed by any other device or component. In addition, although various exemplary implementations and architectures have been described according to embodiments of the present disclosure, those of ordinary skill in the art will recognize that many other modifications to the exemplary implementations and architectures described herein are also within the scope of the present disclosure.

[0078] The embodiments of the present invention are described in detail above with reference to the accompanying drawings, but the present invention is not limited to the above embodiments, and various changes can be made within the knowledge scope of ordinary technicians in the relevant technical field without departing from the purpose of the present invention.

Claims

1. A network authentication proxy device, characterized in that: One end of the network authentication proxy device is electrically connected to the mobile device, and the other end of the network authentication proxy device is electrically connected to the network authentication system. The network authentication proxy device is used to obtain the MAC address of the wired network card of the mobile device, encapsulate the 802.1x protocol data packet according to the MAC address, and send the data packet to the network authentication system, so that the network authentication system performs network access authentication on the mobile device.

2. The network authentication agent device according to claim 1, characterized in that: The network authentication agent device includes a first network card and a second network card, the first network card is electrically connected to the mobile device, the second network card is electrically connected to the network authentication system, and the first network card is electrically connected to the second network card.

3. The network authentication proxy device according to claim 2, characterized in that: The network authentication agent device also includes a third network card and a bridge, the first network card is electrically connected to the third network card, the third network card is electrically connected to the bridge, the bridge is electrically connected to the second network card, and the first network card is electrically connected to the second network card through the third network card and the bridge.

4. The network authentication proxy device according to claim 2, characterized in that: The first network card is electrically connected to the mobile device via a type-c cable.

5. The network authentication proxy device according to claim 2, characterized in that: The second network card is electrically connected to the network authentication system via an RJ45 interface.

6. The network authentication agent device according to claim 1, characterized in that: The network authentication system includes a switch and an authentication server, wherein the switch is electrically connected to the network authentication agent device, and the authentication server is electrically connected to the switch. The switch is used to forward the data packet to the authentication server, and the authentication server is used to perform network access authentication on the mobile device according to the data packet, and send the access result to the mobile device through the switch and the network authentication agent device.

7. A wired network access authentication method, characterized in that: Applied to the network authentication agent device according to any one of claims 1 to 6, the wired network access authentication method comprises the following steps: Get the MAC address of the wired network card of the mobile device; Encapsulating a data packet of the 802.1x protocol according to the MAC address, and sending the data packet to the network authentication system, so that the network authentication system performs network access authentication on the mobile device; The access result sent by the network authentication system is received, and the access result is forwarded to the mobile device.

8. A wired network access authentication method, characterized in that: Applied to a mobile device, the wired network access authentication method comprises the following steps: Sending the MAC address of the wired network card to the network authentication agent device according to any one of claims 1 to 6, so that the network authentication agent device encapsulates a data packet of the 802.1x protocol according to the MAC address, and sends the data packet to the network authentication system, so that the network authentication system performs network access authentication on the mobile device; The access result forwarded by the network authentication system through the network authentication proxy device is obtained, and the access result is displayed on a display screen.

9. A wired network access authentication method, characterized in that: Applied to a network authentication system, the network authentication system includes a switch and an authentication server, and the wired network access authentication method includes the following steps: The switch obtains a data packet sent by the network authentication agent device according to any one of claims 1 to 6, and forwards the data packet to the authentication server; the data packet is an 802.1x protocol data packet encapsulated by the network authentication agent device according to the MAC address of the mobile device; The authentication server performs network access judgment on the mobile device, obtains an access result, and sends the access result to the switch; The switch sends the admission result to the mobile device through the network authentication agent device.

10. A wired network access authentication system, characterized in that: include: mobile device; The network authentication proxy device according to any one of claims 1 to 6, wherein one end of the network authentication proxy device is electrically connected to the mobile device; A network authentication system, the other end of the network authentication agent device being electrically connected to the network authentication system; Among them, the network authentication agent device is used to obtain the MAC address of the wired network card of the mobile device, encapsulate the 802.1x protocol data packet according to the MAC address, and send the data packet to the network authentication system. The network authentication system is used to perform network access authentication for the mobile device according to the data packet.

Images