CN113381917A

CN113381917A - Network access method, device and system, readable storage medium and electronic equipment

Info

Publication number: CN113381917A
Application number: CN202110652187.3A
Authority: CN
Inventors: 姚沛雯; 吴凯; 吴峰; 潘圣宇
Original assignee: China Telecom Corp Ltd
Current assignee: China Telecom Corp Ltd
Priority date: 2021-06-11
Filing date: 2021-06-11
Publication date: 2021-09-10
Anticipated expiration: 2041-06-11
Also published as: CN113381917B

Abstract

The present disclosure relates to the field of communications technologies, and provides a network access method, an apparatus, a computer-readable storage medium, and an electronic device, where the method includes: receiving a network access request of a user, wherein the network access request comprises a user account and a target network access mode; determining a target network access service identifier corresponding to a target network access mode according to a preset mapping relation; updating a historical network access service identifier corresponding to the user account in the target server according to the target network access service identifier; and determining a target network access service according to the target network access service identifier issued by the target server through the BRAS, and executing the target network access service to realize network access. The method and the device can execute the corresponding network access service according to the target network access mode selected by the user, and avoid the technical problems of resource consumption caused by the fact that the user does not open the service of the target network access mode and inconvenience in use caused by switching the special service account number.

Description

Network access method, device and system, readable storage medium and electronic equipment

Technical Field

The present disclosure relates to the field of communications technologies, and in particular, to a network access method, a network access apparatus, a network access system, a computer-readable storage medium, and an electronic device.

Background

With the development of communication technology, telecom operators can provide users with multiple network access modes. For example, access to the Internet using a dynamic IP (abbreviation of Internet Protocol) address, access to a Private Network using a VPDN (abbreviation of Virtual Private Dial Network), and the like.

In the prior art, a user transacts a network access service through a business hall, and then accesses a network by using a special account in the network access service. If a user needs to access both the internet and a remote internal network, the user needs to handle two separate services in a business hall, and the user needs to log in with different service accounts to access the corresponding network. In the prior art, the requirements of users for freely selecting and quickly modifying the access mode cannot be met, and a large amount of labor cost and time cost are consumed.

In view of the above, there is a need in the art to develop a new network access method and apparatus.

It is to be noted that the information disclosed in the above background section is only for enhancement of understanding of the background of the present disclosure, and thus may include information that does not constitute prior art known to those of ordinary skill in the art.

Disclosure of Invention

The present disclosure is directed to a network access method, a network access apparatus, a network access system, a computer-readable storage medium, and an electronic device, which solve at least some technical problems that a user cannot freely select and quickly modify an access method.

Additional features and advantages of the disclosure will be set forth in the detailed description which follows, or in part will be obvious from the description, or may be learned by practice of the disclosure.

According to an aspect of the present disclosure, there is provided a network access method, the method including: receiving a network access request of a user, wherein the network access request comprises a user account and a target network access mode; determining a target network access service identifier corresponding to the target network access mode according to a preset mapping relation; updating a historical network access service identifier corresponding to the user account in a target server according to the target network access service identifier; and determining a target network access service according to the target network access service identifier issued by the target server through a Broadband Remote Access Server (BRAS), and executing the target network access service to realize network access.

In some exemplary embodiments of the present disclosure, updating, according to the target network access service identifier, a historical network access service identifier corresponding to the user account in a target server, includes: acquiring a historical network access service identifier corresponding to the user account in the target server, and judging whether the historical network access service identifier is the same as the target network access service identifier or not; and when the historical network access service identification is different from the target network access service identification, replacing the historical network access service identification corresponding to the user account in the target server by the target network access service identification.

In some exemplary embodiments of the present disclosure, determining a target network access service according to a target network access service identifier issued by a target server through a broadband remote access server BRAS includes: and sending a target network access service identifier corresponding to the user account to the broadband remote access server BRAS through the target server, so that the broadband remote access server BRAS determines the target network access service according to the target network access service identifier.

In some exemplary embodiments of the present disclosure, before receiving a network access request of a user, the method further comprises: configuring a network access service corresponding to a network access mode and a network access service identifier corresponding to the network access service in the Broadband Remote Access Server (BRAS); and configuring the preset mapping relation according to the network access mode and the network access service identifier corresponding to the network access mode.

In some exemplary embodiments of the present disclosure, if the target network access mode includes an internet network access mode, the target network access service includes an internet access service; executing the target network access service to achieve network access, comprising: and allocating a network access address to the user terminal corresponding to the user through the broadband remote access server BRAS according to the internet access service, so that the user terminal accesses the internet according to the network access address.

In some exemplary embodiments of the present disclosure, if the target network access mode comprises a private network access mode, the target network access service comprises a private network access service; executing the target network access service to achieve network access, comprising: and establishing an L2TP tunnel between the LAC equipment and LNS equipment at the edge of the private network according to the private network access service through the broadband remote access server BRAS, so that the user terminal accesses the private network through the L2TP tunnel.

According to an aspect of the present disclosure, there is provided a network access apparatus, including: the device comprises a request receiving module, a network access request receiving module and a network access control module, wherein the network access request comprises a user account and a target network access mode; the identification determining module is used for determining a target network access service identification corresponding to the target network access mode according to a preset mapping relation; the identification updating module is used for updating the historical network access service identification corresponding to the user account in the target server according to the target network access service identification; and the network access module is used for determining a target network access service according to the target network access service identifier issued by the target server through a Broadband Remote Access Server (BRAS) and executing the target network access service to realize network access.

According to one aspect of the present disclosure, a network access system is provided, which includes a network access controller, a target server and a broadband remote access server BRAS, wherein: the network access controller is used for receiving a network access request of a user, determining a target network access service identifier corresponding to a target network access mode according to a preset mapping relation, and updating a historical network access service identifier corresponding to the user account in the target server according to the target network access service identifier; the target server is used for sending a target network access service identifier corresponding to the user account to the broadband remote access server BRAS; and the broadband remote access server BRAS is used for determining a target network access service according to the target network access service identifier and executing the target network access service aiming at the user terminal corresponding to the user account. The network access request comprises the user account and the target network access mode.

According to an aspect of the present disclosure, there is provided a computer readable medium, on which a computer program is stored, which when executed by a processor, implements a network access method as described in the above embodiments.

According to an aspect of the present disclosure, there is provided an electronic device including: one or more processors; a storage device for storing one or more programs which, when executed by the one or more processors, cause the one or more processors to implement the network access method as described in the above embodiments.

As can be seen from the foregoing technical solutions, the network access method, apparatus and system, the computer-readable storage medium and the electronic device in the exemplary embodiments of the present disclosure have at least the following advantages and positive effects:

the network access method comprises the steps of firstly, receiving a network access request of a user, wherein the network access request comprises a user account and a target network access mode; then, determining a target network access service identifier corresponding to a target network access mode according to a preset mapping relation; then, updating a historical network access service identifier corresponding to the user account in the target server according to the target network access service identifier; and finally, determining the target network access service according to the target network access service identification issued by the target server through a Broadband Remote Access Server (BRAS), and executing the target network access service to realize network access. On one hand, the network access method in the disclosure can execute the corresponding network access service according to the target network access mode, thereby avoiding the situation of network access failure caused by the fact that the user does not open the service of the target network access mode and reducing the resource consumption; on the other hand, the user account does not need to be registered aiming at different network access modes, so that the network access efficiency is improved, time resources and system resources are saved, and the user experience is better.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure. It is to be understood that the drawings in the following description are merely exemplary of the disclosure, and that other drawings may be derived from those drawings by one of ordinary skill in the art without the exercise of inventive faculty.

Fig. 1 schematically shows an architectural diagram of a network access system according to an embodiment of the present disclosure;

fig. 2 schematically shows a flow diagram of a network access method according to an embodiment of the present disclosure;

fig. 3 schematically illustrates a flowchart of a method for updating a historical network access service identity according to an embodiment of the present disclosure;

fig. 4 schematically illustrates a flow diagram of a network access method in a particular embodiment according to an embodiment of the present disclosure;

fig. 5 schematically illustrates a block diagram of a network access device according to an embodiment of the present disclosure;

FIG. 6 schematically shows a block schematic of an electronic device according to an embodiment of the present disclosure;

fig. 7 schematically shows a program product schematic according to an embodiment of the present disclosure.

Detailed Description

Example embodiments will now be described more fully with reference to the accompanying drawings. Example embodiments may, however, be embodied in many different forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of example embodiments to those skilled in the art.

Furthermore, the described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to give a thorough understanding of embodiments of the disclosure. One skilled in the relevant art will recognize, however, that the subject matter of the present disclosure can be practiced without one or more of the specific details, or with other methods, components, devices, steps, and so forth. In other instances, well-known methods, devices, implementations, or operations have not been shown or described in detail to avoid obscuring aspects of the disclosure.

The block diagrams shown in the figures are functional entities only and do not necessarily correspond to physically separate entities. I.e. these functional entities may be implemented in the form of software, or in one or more hardware modules or integrated circuits, or in different networks and/or processor means and/or microcontroller means.

The flow charts shown in the drawings are merely illustrative and do not necessarily include all of the contents and operations/steps, nor do they necessarily have to be performed in the order described. For example, some operations/steps may be decomposed, and some operations/steps may be combined or partially combined, so that the actual execution sequence may be changed according to the actual situation.

Fig. 1 shows an architecture diagram of a network access system to which the technical solution of the embodiment of the present disclosure can be applied.

As shown in fig. 1, the network access system 100 includes a network access controller 101, a target server 102 and a broadband remote access server BRAS 103. Wherein:

the network access controller 101 is configured to receive a network access request of a user, determine a target network access service identifier corresponding to a target network access mode according to a preset mapping relationship, and update a historical network access service identifier corresponding to a user account in the target server 102 according to the target network access service identifier;

the target server 102 is used for sending a target network access service identifier corresponding to the user account to a broadband remote access server BRAS;

and the broadband remote access server BRAS 103 is used for determining the target network access service according to the target network access service identifier and executing the target network access service aiming at the user terminal corresponding to the user account.

The network access request comprises a user account and a target network access mode, and the target server can be a target server.

In an exemplary embodiment of the disclosure, the network access system may further include a Portal server, the user may send a network access request to the Portal server through the user terminal, the Portal server may issue a Portal page corresponding to network access to the user terminal, and respond to a trigger operation of the user on the Portal page, determine a user account and a target network access mode according to the trigger operation of the user, and send the network access request of the target network access mode with the user account to the network access controller.

The triggering operation may be an input operation or a clicking operation, the input operation may be an operation of inputting a user account at an account filling entry of a Portal page by a user, and the clicking operation may be an operation of selecting or modifying a network access mode on the Portal page by the user.

In an exemplary embodiment of the present disclosure, a network access controller may include a receiving unit, a matching unit, and an updating unit. Wherein:

the system comprises a receiving unit, a sending unit and a receiving unit, wherein the receiving unit is used for receiving a network access request sent by a user terminal, and the network access request comprises a user account and a target network access mode;

the matching unit is used for matching the target network access mode with a plurality of network access modes in a preset mapping relation and taking the network access service identifier corresponding to the network access mode matched with the target network access mode as the target network access service identifier;

and the updating unit is used for replacing the historical network access service identifier corresponding to the user account in the Radius server with the target network access service identifier.

In an exemplary embodiment of the present disclosure, the network access controller may pre-configure a preset mapping relationship according to a plurality of network access manners and a network access service identifier corresponding to each network access manner, and store the preset mapping relationship in a database corresponding to the network access controller. The network access mode of the preset mapping relation and the network access service identifier have a one-to-one correspondence relation.

In an exemplary embodiment of the present disclosure, a network access service corresponding to a plurality of network access modes and a network access service identifier corresponding to each network access service may be configured in advance by a human or a network access controller. And storing the preset mapping relation between the network access mode and the network access service identifier into the network access controller. In addition, each network access service can be configured manually or automatically through a network management system, and is issued to the broadband remote access server BRAS.

In an exemplary embodiment of the present disclosure, the broadband remote access server BRAS may determine a target network access service according to a target network access service identifier of a user account issued by the Radius server, and execute the target network access service for a user terminal corresponding to the user account, so that the user terminal accesses the internet or a private network.

Specifically, if the target network access mode comprises an internet network access mode, the broadband remote access server BRAS allocates a network access address to the user terminal corresponding to the user account according to the internet access service, so that the user terminal accesses the internet according to the network access address.

In addition, if the target Network Access mode includes a proprietary Network Access mode, the broadband remote Access Server BRAS establishes an L2TP (Layer 2Tunneling Protocol) tunnel between an LAC (L2TP Access Concentrator ) device and an LNS (L2TP Network Server, L2TP Network Server) device at the edge of the proprietary Network according to the proprietary Network Access service, so that the user terminal accesses the proprietary Network through the L2TP tunnel.

According to the network access system in the embodiment of the disclosure, through configuring the network access controller and simultaneously through interaction among the network access controller, the Radius server and the broadband remote access server BRAS, the corresponding target network access service is executed according to the target network access mode requested by a user, the requirements of the user on freely selecting and modifying the access mode are met, and the user experience is improved.

It should be noted that the network access method of the exemplary embodiment of the present disclosure is generally performed by a network access controller, and accordingly, the network access device is generally configured in the network access controller. In addition, in other embodiments of the present disclosure, the network access method provided by the embodiments of the present disclosure may also be performed by a network access apparatus.

In the related art, a telecommunications carrier may provide a user with a variety of network access methods. For example, various access methods such as accessing the Internet using a dynamic IP (Internet Protocol) address, accessing a Private Network using a VPDN (Virtual Private Dial Network), and the like are provided, and single stack mode access, IPv4(Internet Protocol version 4, 4 th edition) and IPv6(Internet Protocol version 6, 6 th edition) address dual stack mode access are supported.

In the prior art, a dedicated service subinterface is created on a broadband Remote Access server bras (broadband Remote Access server) device of a telecommunication operator for each network Access mode or network Access service, and a network Access service corresponding to the network Access mode is bound in the service subinterface. The user opens the network access service in the business hall, and registers the user account corresponding to the network access service, and the network access service corresponding to the network access mode of the user account is defaulted to be the network access service bound in the current service sub-interface.

One user account corresponds to one network access mode, and one network access mode corresponds to one network access service. Therefore, the user account and the network access service are bound to each other, and the user can only access the internet or a private network by adopting an access mode corresponding to the network access service. If the user needs to use other access modes, the user needs to register in a business hall and open a new service, and then uses a user account special for the new service to access the internet or a private network. In this case, it takes a long time to open a new service, and each service has a dedicated account, so that the user cannot quickly modify the access mode.

For example, suppose a user wants to access both the internet and a remote intranet. According to the prior art, the user needs to open two separate network access services in a business hall, one network access service meets the requirement of accessing the internet, and the other network access service meets the requirement of accessing an internal network. Moreover, two separate network access services need to correspond to two user accounts respectively, and a user needs to log in by using two different user accounts when accessing the internet and the internal network respectively. Therefore, for users who need multiple network access methods, the prior art cannot meet the requirements of users for freely selecting and quickly modifying the network access methods, and the user experience is poor.

Based on the problems in the related art, the embodiments of the present disclosure first provide a network access method, which can be applied to a network access system. Fig. 2 shows a flow diagram of a network access method, as shown in fig. 2, the network access method at least includes the following steps:

step S210: receiving a network access request of a user, wherein the network access request comprises a user account and a target network access mode;

step S220: determining a target network access service identifier corresponding to a target network access mode according to a preset mapping relation;

step S230: updating a historical network access service identifier corresponding to the user account in the target server according to the target network access service identifier;

step S240: and determining a target network access service according to a target network access service identifier issued by a target server through a Broadband Remote Access Server (BRAS), and executing the target network access service to realize network access.

The network access method in the embodiment of the disclosure can execute the corresponding network access service according to the target network access mode, thereby avoiding the situation of network access failure caused by the fact that the user does not open the service of the target network access mode, and reducing the resource consumption; on the other hand, the user account does not need to be registered aiming at different network access modes, so that the network access efficiency is improved, time resources and system resources are saved, and the user experience is better.

In order to make the technical solution of the present disclosure clearer, each step of the network access method is explained next.

In step S210, a network access request of a user is received, where the network access request includes a user account and a target network access mode.

In an exemplary embodiment of the present disclosure, the user account may be a network access account to which the user is registered and bound. The user account may be a character or a character string for encoding or marking a network access service of the user, and the disclosure does not specifically limit the user account. When registering the user account, the network access service corresponding to the user account can be registered at the same time, and the network access service comprises a default network access mode and a default network access service identifier corresponding to the default network access mode.

In an exemplary embodiment of the present disclosure, a network access request sent by a user at a user terminal may be received. Namely, the user inputs a user account in a network access interface of the user terminal and selects a target network access mode.

In addition, it can also send the Portal page corresponding to the network access to the user terminal of the user through the Portal server, and the Portal page can include the account number filling entry, and the entry of selecting or modifying the network access mode. So that the user can input the user account through the account filling entry and input the target network access mode through the network access mode entry selected or modified.

The Portal server can respond to the user account number and the target network access mode input by the user on the Portal page and send the user account number and the target network access mode to the network access controller.

In an exemplary embodiment of the present disclosure, the network access means may include accessing the internet using a dynamic IP address, and accessing a private network using a VPDN. The network access mode can also comprise access modes such as accessing the internet by adopting a public network double stack mode, accessing the internet by adopting a private network double stack mode and the like. Of course, the network access method may be other methods, and this disclosure does not specifically limit this.

The method for accessing the internet by using the dynamic IP address is also called automatically obtaining the IP address to surf the internet, and is one of internet access modes of ethernet access, and a user terminal automatically obtains the IP address, a subnet mask, a gateway and a DNS address through a broadband. If the user terminal is connected with the broadband wire, the user terminal only needs to be set to automatically acquire the IP address.

The VPDN realizes the access to a private network by utilizing the dialing function of the public network and an access network, and establishes a safe virtual private network for enterprises on the public network by adopting a private network encryption communication protocol. The user can remotely access the private network through the virtual encrypted tunnel via the public network, and other users on the public network cannot access the private network through the virtual tunnel. The Public Network may be an ISDN (Integrated Service Digital Network), a PSTN (Public Switched Telephone Network), or the like.

The dual stack mode access means that the network equipment can communicate with both an IPv4 network and an IPv6 network by using a dual stack protocol.

In step S220, a target network access service identifier corresponding to the target network access mode is determined according to the preset mapping relationship.

In an exemplary embodiment of the present disclosure, the network access service may be an authentication charging Domain, which includes a specific operation step of performing network access. The network access service identification may be a Domain attribute corresponding to an authentication charging Domain. Each network access service corresponds to an authentication charging Domain, and each authentication charging Domain corresponds to a Domain attribute. The Domain attribute may be any character or string of characters having an identifying meaning, which is not specifically limited by this disclosure.

In an exemplary embodiment of the disclosure, before receiving a network access request of a user, network access services corresponding to respective network access service identifications are configured in a broadband remote access server BRAS. Because the network access service identifiers correspond to the network access modes one to one, the network access service corresponding to each network access service identifier is configured, namely the network access service corresponding to each network access mode is configured.

Specifically, authentication charging domains corresponding to each network access mode are configured in the broadband remote access server BRAS in advance, and each authentication charging Domain corresponds to a Domain attribute.

In addition, before receiving a network access request of a user, a preset mapping relation is configured according to a plurality of network access modes and network access service identifications corresponding to the network access modes. That is, the preset mapping relationship includes a plurality of network access modes and Domain attributes corresponding to the network access modes.

The preset mapping relationship may be stored in the database in a form of a key-value pair, and may also be stored in the database in a table form, which is not specifically limited by the present disclosure.

In an exemplary embodiment of the present disclosure, a target network access manner is matched with a plurality of network access manners in a preset mapping relationship, and a network access service identifier corresponding to a network access manner matched with the target network access manner is used as the target network access service identifier.

In step S230, the historical network access service identifier corresponding to the user account in the target server is updated according to the target network access service identifier.

In an exemplary embodiment of the present disclosure, the historical network access service identifier may be a default network access service identifier corresponding to the user account, and the target server may be a Radius server.

After registering the user account and the network access service, the user account, the default network access mode corresponding to the user account, and the network access service identifier corresponding to the default network access service may be stored in the Radius server.

In addition, the historical network access service identifier may also be a network access service identifier corresponding to the user account when performing network access last time. For example, when the user account accesses the internet using the dynamic IP address last time the network access is performed, the historical network access service identifier stored in the Radius server is the Domain attribute of the authentication charging Domain corresponding to the dynamic IP address access mode.

Therefore, the historical network access service identifier corresponding to the user account in the present disclosure may be a default network access service identifier corresponding to the user account, or may also be a network access service identifier corresponding to the user account when network access was performed last time, which is not specifically limited in the present disclosure.

In an exemplary embodiment of the present disclosure, fig. 3 is a schematic flowchart illustrating a method for updating a historical network access service identifier, where as shown in fig. 3, the process at least includes steps S310 to S320, and in step S310, a historical network access service identifier corresponding to a user account is obtained in a target server, and it is determined whether the historical network access service identifier is the same as the target network access service identifier; in step S320, when the historical network access service identifier is different from the target network access service identifier, the historical network access service identifier corresponding to the user account is replaced with the target network access service identifier in the target server. That is, the historical network access service identifier corresponding to the user account in the Radius server is modified to the target network access service identifier, and after the historical network access service identifier is modified, an updated tag may be added to the user account.

In addition, when the historical network access service identifier is the same as the target network access service identifier, no operation is performed, an updated label can be added to the user account, and the target network access service identifier or the historical network access service identifier corresponding to the user account is sent to the broadband remote access server BRAS through the Radius server.

In step S240, the target network access service is determined by the broadband remote access server BRAS according to the target network access service identifier issued by the target server, and the target network access service is executed to implement network access.

In an exemplary embodiment of the disclosure, a target network access service identifier corresponding to a user account is sent to a broadband remote access server BRAS through a Radius server, so that the broadband remote access server BRAS determines a target network access service according to the target network access service identifier.

According to the network access method provided by the disclosure, the priority of the target network access service identifier sent by the Radius server is higher than the priority of the default network access service identifier bound on the broadband remote access server BRAS. Therefore, the broadband remote access server BRAS determines the target network access service according to the target network access service identifier, so that the user is connected to the internet or a private network through a network access mode corresponding to the target network access service identifier issued by the Radius server.

In an exemplary embodiment of the present disclosure, if the target network access manner includes an internet network access manner, the target network access service determined by the above embodiment is an internet access service. Then, the target network access service is executed to implement network access, and the specific steps may include: and allocating a network access address to a user terminal corresponding to the user through a broadband remote access server BRAS according to the internet access service so that the user terminal accesses the internet according to the network access address.

The internet network access mode means all network access modes accessing the internet. For example, the internet network access method may include: the method comprises the steps of accessing the Internet by using a dynamic IP address, accessing the Internet by adopting a private network double stack mode, accessing the Internet by adopting a public network double stack mode and the like.

For example, if the target network access mode selected or modified by the user is to use a dynamic IP address to access the internet. Firstly, modifying the historical Domain attribute corresponding to the user account in the Radius server into the Domain attribute using the dynamic IP address; then, the Radius server sends the user account and the corresponding Domain attribute using the dynamic IP address to a Broadband Remote Access Server (BRAS); finally, the broadband remote access server BRAS executes the pre-configured authentication billing Domain using the dynamic IP address, and allocates the dynamic IP address for the user terminal so that the user terminal can access the Internet by using the dynamic IP address.

And if the target network access mode selected or modified by the user is to access the Internet by adopting a private network dual-stack mode. Firstly, modifying the historical Domain attribute corresponding to the user account in the Radius server into the Domain attribute of a private network dual-stack mode; then, the Radius server sends the user account and the corresponding Domain attribute of the private network dual-stack mode to a Broadband Remote Access Server (BRAS); and finally, the broadband remote access server BRAS executes authentication charging Domain of a pre-configured private network double stack mode, and distributes a private network IPv4 address and a private network IPv6 address to the user terminal so that the user terminal can access the Internet by using the private network IPv4 address and the private network IPv6 address.

And if the target network access mode selected or modified by the user is to access the Internet by adopting a public network dual-stack mode. Firstly, modifying the historical Domain attribute corresponding to the user account in the Radius server into the Domain attribute of a public network dual-stack mode; then, the Radius server sends the user account and the corresponding Domain attribute of the public network dual-stack mode to a Broadband Remote Access Server (BRAS); and finally, the broadband remote access server BRAS executes authentication charging Domain of a pre-configured public network dual stack mode, and distributes a public network IPv4 address and a public network IPv6 address to the user terminal so that the user terminal can access the Internet by using the public network IPv4 address and the public network IPv6 address.

In an exemplary embodiment of the present disclosure, if the target network access mode includes a private network access mode, the target network access service determined by the above embodiment is a private network access service. Then, the target network access service is executed to implement network access, and the specific steps may include: an L2TP tunnel is established between the LAC device and an LNS device at the edge of the private network according to the private network access service through a broadband remote access server BRAS to enable the user terminal to access the private network through the L2TP tunnel.

The private network access mode means all network access modes accessing the private network. For example, the proprietary network access method may include: the private network is accessed using the VPDN.

For example, if the target network access mode selected or modified by the user is to use the VPDN to access the private network. Firstly, modifying the historical Domain attribute corresponding to the user account in the Radius server into the Domain attribute of the VPDN; then, the Radius server sends the user account and the Domain attribute of the corresponding VPDN to a broadband remote access server BRAS; then, the broadband remote access server BRAS authenticates the user account once, establishes an L2TP tunnel with LNS equipment at the edge of the private network, and finally, after the user account passes through the secondary authentication of the LNS equipment, the user terminal can access the private network.

Specifically, an L2TP tunnel may be established between the LAC device and the LNS device at the edge of the private network. The LAC device is a device with a PPP end system and L2TP processing capability on a switching network, and is generally a network access server NAS, which provides access services to users through a PSTN/ISDN network. The LAC device is located between the LNS device and the private network (remote subscriber and remote branch office), and transfers packets between the LNS device and the remote system: the information packet received from the remote system is encapsulated by L2TP and sent to the LNS; the packets received from the LNS are decapsulated and sent to the remote system. The LAC device and the remote system may use a local connection or PPP link, which is typically used in VPDN applications. The LNS device is a device on the PPP end system that handles the L2TP protocol server side part. The LNS device is a peer device of the LAC as the other end point of the L2TP tunnel, and is a logical termination end point of the PPP session tunneled by the LAC.

The network access method in this exemplary embodiment is described in detail below with reference to specific application scenarios, where the specific application scenarios are as follows: the user transacts the network access service in the business hall of the telecom operator in advance, registers the user account and applies for the dynamic IP address to access the internet service, but the user needs to use a VPDN private network at present. Fig. 4 is a schematic flowchart of a network access method in an embodiment of the present disclosure, and as shown in fig. 4, the flowchart at least includes steps S410 to S460, which are described in detail as follows:

in step S410, the network access controller receives a user account of a user and a target network access mode for accessing a private network by using a VPDN;

in step S420, the network access controller determines a target Domain attribute matched with the VPDN accessing the private network through a preset mapping relationship;

in step S430, the network access controller modifies the historical Domain attribute corresponding to the Radius server and the user account into the target Domain attribute;

in step S440, the Radius server sends the user account and the target Domain attribute corresponding to the user account to the broadband remote access server BRAS;

in step S450, the broadband remote access server BRAS determines a target authentication billing Domain according to a target Domain attribute corresponding to the user account;

in step S460, the broadband remote access server BRAS executes the target authenticated billing Domain, and establishes an L2TP tunnel for the user terminal, so that the user terminal accesses the private network after the authentication is passed.

When the broadband remote access server BRAS executes the target authentication charging Domain, the primary authentication is carried out on the user account number, an L2TP tunnel is established between the user account number and the edge LNS equipment of the private network, the secondary authentication is carried out, and after the user account number passes the secondary authentication of the LNS equipment, the user terminal can access the private network. In addition, the target authentication billing Domain is an authentication billing Domain that accesses a private network using a VPDN.

Those skilled in the art will appreciate that all or part of the steps implementing the above embodiments are implemented as computer programs executed by a CPU. The computer program, when executed by the CPU, performs the functions defined by the method provided by the present invention. The program may be stored in a computer readable storage medium, which may be a read-only memory, a magnetic or optical disk, or the like.

Furthermore, it should be noted that the above-mentioned figures are only schematic illustrations of the processes involved in the method according to exemplary embodiments of the invention, and are not intended to be limiting. It will be readily understood that the processes shown in the above figures are not intended to indicate or limit the chronological order of the processes. In addition, it is also readily understood that these processes may be performed synchronously or asynchronously, e.g., in multiple modules.

The following describes an apparatus embodiment of the present disclosure, which may be used to perform the above-mentioned network access method of the present disclosure. For details that are not disclosed in the embodiments of the apparatus of the present disclosure, refer to the embodiments of the network access method described above in the present disclosure.

Fig. 5 schematically shows a block diagram of a network access device according to one embodiment of the present disclosure.

Referring to fig. 5, a network access apparatus 500 according to an embodiment of the present disclosure, the network access apparatus 500 includes: a request receiving module 501, an identity determining module 502, an identity updating module 503, and a network access module 504. Specifically, the method comprises the following steps:

a request receiving module 501, configured to receive a network access request of a user, where the network access request includes a user account and a target network access mode;

an identifier determining module 502, configured to determine, according to a preset mapping relationship, a target network access service identifier corresponding to a target network access manner;

the identifier updating module 503 is configured to update a historical network access service identifier corresponding to the user account in the target server according to the target network access service identifier;

and the network access module 504 is configured to determine a target network access service according to the target network access service identifier issued by the target server through the broadband remote access server BRAS, and execute the target network access service to implement network access.

In an exemplary embodiment of the present disclosure, the identifier updating module 503 may be further configured to obtain, in the target server, a historical network access service identifier corresponding to the user account, and determine whether the historical network access service identifier is the same as the target network access service identifier; and when the historical network access service identification is different from the target network access service identification, replacing the historical network access service identification corresponding to the user account with the target network access service identification in the target server.

In an exemplary embodiment of the present disclosure, the network access module 504 may be further configured to send, by the target server, a target network access service identifier corresponding to the user account to the broadband remote access server BRAS, so that the broadband remote access server BRAS determines the target network access service according to the target network access service identifier.

In an exemplary embodiment of the present disclosure, the network access module 504 may be further configured to allocate a network access address to a user terminal corresponding to the user according to an internet access service through the broadband remote access server BRAS, so that the user terminal accesses the internet according to the network access address. The target network access mode comprises an internet network access mode, and the target network access service comprises an internet access service.

In an exemplary embodiment of the present disclosure, the network access module 504 may be further configured to establish an L2TP tunnel between the LAC device and an LNS device at an edge of the private network according to the private network access service through the network access module broadband remote access server BRAS, so that the user terminal accesses the private network through the L2TP tunnel. The target network access mode comprises a proprietary network access mode, and the target network access service comprises a proprietary network access service.

In an exemplary embodiment of the present disclosure, the network access apparatus 500 further includes a pre-configuration module (not shown in the figure), configured to configure, in the broadband remote access server BRAS, a network access service corresponding to a network access mode and a network access service identifier corresponding to the network access service before receiving a network access request of a user; and configuring a preset mapping relation according to the network access mode and the network access service identifier corresponding to the network access mode.

The details of each network access apparatus are already described in detail in the corresponding network access method, and therefore are not described herein again.

It should be noted that although in the above detailed description several modules or units of the apparatus for performing are mentioned, such a division is not mandatory. Indeed, the features and functionality of two or more modules or units described above may be embodied in one module or unit, according to embodiments of the present disclosure. Conversely, the features and functions of one module or unit described above may be further divided into embodiments by a plurality of modules or units.

In an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above method is also provided.

As will be appreciated by one skilled in the art, aspects of the present invention may be embodied as a system, method or program product. Thus, various aspects of the invention may be embodied in the form of: an entirely hardware embodiment, an entirely software embodiment (including firmware, microcode, etc.) or an embodiment combining hardware and software aspects that may all generally be referred to herein as a "circuit," module "or" system.

An electronic device 600 according to this embodiment of the invention is described below with reference to fig. 6. The electronic device 600 shown in fig. 6 is only an example, and should not bring any limitation to the functions and the scope of use of the embodiments of the present invention.

As shown in fig. 6, the electronic device 600 is embodied in the form of a general purpose computing device. The components of the electronic device 600 may include, but are not limited to: the at least one processing unit 610, the at least one memory unit 620, a bus 630 connecting different system components (including the memory unit 620 and the processing unit 610), and a display unit 640.

Wherein the storage unit stores program code that is executable by the processing unit 610 to cause the processing unit 610 to perform steps according to various exemplary embodiments of the present invention as described in the above section "exemplary methods" of the present specification. For example, the processing unit 610 may execute step S210 shown in fig. 2, and receive a network access request of a user, where the network access request includes a user account and a target network access manner; step S220, determining a target network access service identifier corresponding to a target network access mode according to a preset mapping relation; step S230, updating a historical network access service identifier corresponding to the user account in the target server according to the target network access service identifier; step S240, the broadband remote access server BRAS determines the target network access service according to the target network access service identification issued by the target server, and executes the target network access service to realize network access.

The storage unit 620 may include readable media in the form of volatile memory units, such as a random access memory unit (RAM)6201 and/or a cache memory unit 6202, and may further include a read-only memory unit (ROM) 6203.

The memory unit 620 may also include a program/utility 6204 having a set (at least one) of program modules 7205, such program modules 6205 including, but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which, or some combination thereof, may comprise an implementation of a network environment.

Bus 630 may be one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

The electronic device 600 may also communicate with one or more external devices 800 (e.g., keyboard, pointing device, bluetooth device, etc.), with one or more devices that enable a viewer to interact with the electronic device 600, and/or with any devices (e.g., router, modem, etc.) that enable the electronic device 600 to communicate with one or more other computing devices. Such communication may occur via an input/output (I/O) interface 650. Also, the electronic device 600 may communicate with one or more networks (e.g., a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network such as the Internet) via the network adapter 660. As shown, the network adapter 660 communicates with the other modules of the electronic device 600 over the bus 630. It should be appreciated that although not shown in the figures, other hardware and/or software modules may be used in conjunction with the electronic device 600, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, among others.

Through the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein may be implemented by software, or by software in combination with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure may be embodied in the form of a software product, which may be stored in a non-volatile storage medium (which may be a CD-ROM, a usb disk, a removable hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which may be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the embodiments of the present disclosure.

In an exemplary embodiment of the present disclosure, there is also provided a computer-readable storage medium having stored thereon a program product capable of implementing the above-described method of the present specification. In some possible embodiments, aspects of the invention may also be implemented in the form of a program product comprising program code means for causing a terminal device to carry out the steps according to various exemplary embodiments of the invention described in the above section "exemplary methods" of the present description, when said program product is run on the terminal device.

Referring to fig. 7, a program product 700 for implementing the above method according to an embodiment of the present invention is described, which may employ a portable compact disc read only memory (CD-ROM) and include program code, and may be run on a terminal device, such as a personal computer. However, the program product of the present invention is not limited in this regard and, in the present document, a readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

The program product may employ any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. A readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive list) of the readable storage medium include: an electrical connection having one or more wires, a portable disk, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

A computer readable signal medium may include a propagated data signal with readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A readable signal medium may also be any readable medium that is not a readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.

Program code embodied on a readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

Program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computing device, partly on the user's device, as a stand-alone software package, partly on the user's computing device and partly on a remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., through the internet using an internet service provider).

Furthermore, the above-described figures are merely schematic illustrations of processes involved in methods according to exemplary embodiments of the invention, and are not intended to be limiting. It will be readily understood that the processes shown in the above figures are not intended to indicate or limit the chronological order of the processes. In addition, it is also readily understood that these processes may be performed synchronously or asynchronously, e.g., in multiple modules.

Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. This application is intended to cover any variations, uses, or adaptations of the disclosure following, in general, the principles of the disclosure and including such departures from the present disclosure as come within known or customary practice within the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

Claims

1. A network access method, comprising:

receiving a network access request of a user, wherein the network access request comprises a user account and a target network access mode;

determining a target network access service identifier corresponding to the target network access mode according to a preset mapping relation;

updating a historical network access service identifier corresponding to the user account in a target server according to the target network access service identifier;

and determining a target network access service according to the target network access service identifier issued by the target server through a Broadband Remote Access Server (BRAS), and executing the target network access service to realize network access.

2. The network access method of claim 1, wherein updating the historical network access service identifier corresponding to the user account in the target server according to the target network access service identifier comprises:

acquiring a historical network access service identifier corresponding to the user account in the target server, and judging whether the historical network access service identifier is the same as the target network access service identifier or not;

and when the historical network access service identification is different from the target network access service identification, replacing the historical network access service identification corresponding to the user account in the target server by the target network access service identification.

3. The network access method of claim 2, wherein determining a target network access service according to the target network access service identifier issued by the target server through a Broadband Remote Access Server (BRAS), comprises:

and sending a target network access service identifier corresponding to the user account to the broadband remote access server BRAS through the target server, so that the broadband remote access server BRAS determines the target network access service according to the target network access service identifier.

4. The network access method of claim 3, wherein prior to receiving the network access request of the user, the method further comprises:

configuring a network access service corresponding to a network access mode and a network access service identifier corresponding to the network access service in the Broadband Remote Access Server (BRAS);

and configuring the preset mapping relation according to the network access mode and the network access service identifier corresponding to the network access mode.

5. The network access method of claim 3, wherein if the target network access mode comprises an Internet network access mode, the target network access service comprises an Internet access service;

executing the target network access service to achieve network access, comprising:

and allocating a network access address to the user terminal corresponding to the user through the broadband remote access server BRAS according to the internet access service, so that the user terminal accesses the internet according to the network access address.

6. The network access method of claim 3, wherein if the target network access mode comprises a private network access mode, the target network access service comprises a private network access service;

and establishing an L2TP tunnel between the LAC equipment and LNS equipment at the edge of the private network according to the private network access service through the broadband remote access server BRAS, so that the user terminal accesses the private network through the L2TP tunnel.

7. A network access apparatus, comprising:

the device comprises a request receiving module, a network access request receiving module and a network access control module, wherein the network access request comprises a user account and a target network access mode;

the identification determining module is used for determining a target network access service identification corresponding to the target network access mode according to a preset mapping relation;

the identification updating module is used for updating the historical network access service identification corresponding to the user account in the target server according to the target network access service identification;

and the network access module is used for determining a target network access service according to the target network access service identifier issued by the target server through a Broadband Remote Access Server (BRAS) and executing the target network access service to realize network access.

8. A network access system, characterized in that the network access system comprises a network access controller, a target server and a broadband remote access server BRAS, wherein:

the network access controller is used for receiving a network access request of a user, determining a target network access service identifier corresponding to a target network access mode according to a preset mapping relation, and updating a historical network access service identifier corresponding to the user account in the target server according to the target network access service identifier;

the target server is used for sending a target network access service identifier corresponding to the user account to the broadband remote access server BRAS;

the broadband remote access server BRAS is used for determining a target network access service according to the target network access service identifier and executing the target network access service aiming at a user terminal corresponding to the user account;

the network access request comprises the user account and the target network access mode.

9. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the network access method according to any one of claims 1 to 6.

10. An electronic device, comprising:

one or more processors;

storage means for storing one or more programs which, when executed by the one or more processors, cause the one or more processors to implement the network access method of any one of claims 1 to 6.