WO2011026358A1

WO2011026358A1 - Method and system for processing abnormal off-line for web authentication user

Info

Publication number: WO2011026358A1
Application number: PCT/CN2010/073293
Authority: WO
Inventors: 袁博; 范亮
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-09-04
Filing date: 2010-05-27
Publication date: 2011-03-10
Also published as: CN101645907A

Abstract

The present invention provides a method for processing the abnormal off-line for a web authentication user. The method includes: when a user and service control node (SN) device detects a user abnormal off-line, it retains the user table item, sets the state of the authenticated user to un-authenticated and maintains it for a lease time. Accordingly, the present invention also provides a system for processing the abnormal off-line for a web authentication user. The system includes a user and service control node (SN) device, wherein the SN device is used to detect whether a user gets off-line abnormally, and when a user abnormal off-line is detected, the SN device is used to retain the user table item, set the state of the authenticated user to un-authenticated and maintain it for a lease time; and a user accessing to the network by being connected to the SN device. Therefore, the present invention can make it facilitate to notify and guide the user to be re-authenticated to get on-line.

Description

Method and system for processing abnormality of web authentication user offline

The present invention relates to the field of communications, and in particular, to a method and system for processing a web page (Web) authentication user abnormally offline. Background technique

With the widespread application of IPoE access methods, Web authentication of the Dynamic Host Configuration Protocol (DHCP) has become more and more widely used in various public places such as hotels and airports. The principle of the Web authentication is that the user first obtains an address from the DHCP server (Server) through the service node (SN, Service Node), that is, the user and the service control node. The user status is unauthenticated and can only be accessed. The specific URL provided by the provider, such as the web authentication server; when the user accesses the internet, the SN device redirects the user's request and forces the webpage to be launched to the user. After the user enters the username and password, the SN device authenticates the information. Send it to the authentication server for authentication. If the authentication is passed, the user is allowed to go online and start billing.

The user detection technology is a method for detecting whether a DHCP user is active. Generally, an address resolution protocol (ARP) can be used to detect whether a user is online, or to check whether a user is active by setting a certain traffic threshold. . When the user does not respond for a certain number of times or the user's long-term traffic is lower than a certain threshold, the user is judged to be inactive, the user resources are released, the user is stopped, the user entry is completely deleted, and the user is forced to go offline. The user needs to restart the DHCP. The process of applying for an address will be online.

The existing forced Web authentication user offline technology has a problem: when there is a link interruption between the user uplink access node (AN, Access Node) and the aggregation node (AG, Aggregation Node), due to the AN and the user. There is no interruption between the links, so during the DHCP lease period, The user host cannot detect the network failure, and the user host does not restart the DHCP protocol stack to restart the process of obtaining the address. At this time, the SN device detects the abnormality of the online user detection based on the ARP detection configured by the SN and forces the user to go offline.

Currently, the prior art uses the SN device to completely delete the user entry and release the Internet Protocol (IP) address. However, because the user host network connection is normal, the user host's own DHCP protocol stack does not know that it has abnormally gone offline. . However, since the current network DHCP lease period is generally 2 hours, the user's DHCP state machine will not release the address during the lease period, nor will the DHCP process be restarted. This results in the acquisition of the SN device and the user host during the lease term. The status of the IP address is not synchronized. Moreover, because the user entry is completely deleted on the SN device, the user information is missing and the user cannot authenticate. In this case, if the user accesses the network, the user has an IP address but cannot authenticate. If you want to log in to the network again, you must restart the DHCP and re-acquire the IP address from the SN to the DHCP server. This is not only necessary for the user's professional knowledge. And this also brings great inconvenience to the user and reduces the user experience. Summary of the invention

The main purpose of the present invention is to provide a method for processing an abnormally offline user of a Web authentication user, which can conveniently inform and guide the user to re-authenticate the online.

In order to solve the above technical problems, the present invention uses the following technical solutions:

In the processing method of the abnormality of the web authentication user offline, the user and the service control node SN device retain the user entry when detecting that the user is abnormally offline, and set the authenticated user status to unauthenticated, and maintain a lease term. time.

In an embodiment of the method for processing an abnormality of the web authentication user, the SN device detects that the user succeeds before the lease time of the reserved user entry expires, if the user retains the original The IP address, the SN device directly re-authenticates the user and accesses the network.

In an embodiment of the web authentication user abnormal offline processing method, in the reserved Before the expiration of the lease time of the user entry, the SN device detects that the user is successful. If the original IP address of the user has been released, the SN device finds that the user applies for the IP address. If the status of the user is unauthenticated, the original IP address of the user recorded in the user entry is directly assigned to the user, and the original user entry is used or overwritten, and then the user is re-authenticated. Access to the network.

In an embodiment of the method for processing an abnormality of the web authentication user, the SN device detects that the user fails or still meets the mandatory offline condition when the reserved lease time of the user entry expires. Then delete the user entry.

In an embodiment of the method for processing an abnormality of the web authentication user, the user is offline, and the user is offline due to a link failure, or the user traffic, service, and network security do not meet the network requirement, and the user is SN. The device is forced to go offline.

In an embodiment of the method for processing an abnormality of the Web authentication user offline, the one lease time held is a time of a lease period after the last successful renewal.

Correspondingly, the present invention also discloses a processing system for an abnormally offline user of a web authentication user, which includes a user and a service control node SN device, and the SN device is configured to detect whether the user is abnormally offline, and detects that the user is abnormally offline. When the user entry is retained, the authenticated user state is set to unauthenticated and a lease time is maintained; the user accesses the network by connecting to the SN device.

In the above system, the SN device is further configured to: when the user is successful, if the user retains the original IP address, the SN device directly re-authenticates the user and accesses the network.

In the above system, the SN device is further configured to delete the user entry when the user fails to be detected.

In the system, the SN device is further configured to: when the user is successful, if the original IP address of the user has been released, the SN device finds the message when processing the packet of the user requesting the IP address. If the status of the user is unauthenticated, the user is directly assigned the original IP address, and the original user entry is used or overwritten, and then the user is re-authenticated and accesses the network. Compared with the prior art, the present invention retains the user entry after the user and the service control node SN device detect that the abnormality of the user is offline, and sets the authenticated user state to be unauthenticated, and maintains a lease time. During a lease period, the synchronized SN device and the user host obtain or release the status of the IP address and guide the user to re-authenticate. In order to realize the notification and guidance function for the user when an abnormality occurs, the present invention can solve the problem of re-online after abnormal offline after the user is not required to have relevant professional knowledge, thereby improving the efficiency of the user accessing the network. It can improve the user experience and save users' expenses. DRAWINGS

1 is a schematic diagram of a network topology of a processing system in which an abnormality of a web authentication user is offline;

detailed description

The present invention will be further described in detail below with reference to the drawings in conjunction with the specific embodiments. As shown in FIG. 1 , a schematic diagram of a network topology of an embodiment of a processing system for an abnormally offline user of a web authentication user, the system includes: a user gateway (RG, Route Gateway), an access node AN, a sink node AG, and a user. And the service control node SN device, the user authentication server AAA Server, the dynamic host configuration protocol server DHCP server, and the user authentication web server (Web Server). The Web authentication user (referred to as the user) is connected to the SN device through the RG through the RG, and the user authentication server AAA Server, the dynamic host configuration protocol server DHCP server, and the user authentication web server Web Server respectively. Connected to the SN device.

The AAA server is used for user authentication, the DHCP server is used to assign a network IP address to the user, and the Web server is used to pop up the authentication interface, reminding and guiding the user to authenticate, and sending the user authentication information to the user authentication server AAA for authentication. Embodiment 1: As shown in Figure 2, when the Web authentication user goes offline and does not release the original IP address but retains the original IP address, accessing the network to the user includes the following steps:

Step 101: The user accesses the network, that is, the user goes online;

If the user is authenticated, the status of the user is authenticated on the SN device; if the user fails to pass the authentication, the status of the user is not authenticated on the SN device.

Step 102, the SN device detects whether the user is abnormally offline, and if it detects that the user is abnormally offline, step 103 is performed; otherwise, the process proceeds to step 102;

It should be noted that the SN device detects that the user can use ARP detection, and other detection means can also be used.

Step 103: Reserve the user entry, set the user status to unauthenticated, stop charging, and keep the state for a lease period;

The SN retains the user entry in a lease period, and can synchronize the state of the SN and the host to obtain or release the IP address. If the authenticated user state is set to unauthenticated, the user can be forced to perform authentication, thereby avoiding the user having Access to the network, but the failure to re-authenticate and access to the network has increased the efficiency of users accessing the network and reduced the professional knowledge of users.

It should be noted that the user entry records include: an original IP address of the user, and a Media Access Control (MAC) address. The time of one lease period refers to the time of a lease period after the last successful lease renewal.

It should be noted that the abnormal offline of the user includes: the user is offline due to a link failure between the AN and the AG, or the user is offline due to any link failure between the user and the SN, or user traffic, service, and network security. When the status does not meet the network requirements, the user is forced to go offline.

In this embodiment, by detecting that the user is offline abnormally and stopping charging in time, not only the user's expenses can be saved, but also the user can be provided with more humanized service.

In step 104, the SN device continuously detects whether the user goes online before the time when the user entry is expired. If the user goes online before the time when the user entry expires, the SN device detects the user. At this time, if the user retains the original IP address, when the user performs the operation, the Web Server pops up the authentication interface to remind and guide the user to re-authenticate;

The pop-up interface reminds the user that the user can be notified that an abnormal offline has occurred, especially in the case that the user is forced to go offline, to prevent the user from being processed without the user's knowledge.

Step 105: The Web Server sends the user authentication information to the AAA Server for authentication via the SN. After the authentication is passed, the SN directly accesses the user to the network, and sets the user status to “authenticated,”.

It should be noted that after the SN synchronizes with the state of acquiring or releasing the IP address of the user host, the user does not need to restart the DHCP process, and only needs simple authentication to access the network, which is convenient to operate and improves the efficiency of the user accessing the network. , reducing the professional knowledge requirements of users.

The above describes the process of the user accessing the network when the Web authentication user is offline. When the original IP address is retained, the following describes the process of accessing the network when the original IP address is released. process. Embodiment 2:

As shown in Figure 2, when the web authentication user is offline and the original IP address is released, connecting the user to the network includes the following steps:

Step 201: The user accesses the network, that is, the user goes online;

Step 202, the SN detects whether the user is abnormally offline, and if it detects that the user is abnormally offline, step 203 is performed; otherwise, the process proceeds to step 202;

In this step, the original IP address is released when the user goes offline abnormally.

Step 203: Reserve the user entry, set the user status to unauthenticated, stop charging, and keep the state for a lease period;

If the SN device detects that the user is abnormally offline, the user entry is retained, the user status is set to "unauthenticated", the accounting is stopped, and the state is maintained for a lease period. Here, the time of one rental period is the time of one rental period after the last successful renewal. In step 204, the SN device continues to detect whether the user goes online before the time when the user entry is expired. If the user goes online, the SN detects the user successfully and receives the packet from the DHCP server to apply for an IP address. If the user status is unauthenticated, the user is directly assigned the original IP address, that is, the original IP address recorded in the user entry is assigned to the user, and the original user is used or overwritten. The entry, and the Web Server pops up the authentication interface to remind and guide the user to re-authenticate;

In this step, by assigning the original address to the user, using or overwriting the original user entry, not only the time for allocating the address but also the system resources can be saved, and the efficiency of the user accessing the network can be improved.

Step 205: The Web Server sends the user authentication information to the AAA Server for authentication via the SN. After the authentication is passed, the user is connected to the network, and the user status is set to “authenticated”.

So far, the above two embodiments describe the process of re-accessing the network after the user goes online within the lease time, that is, before the time when the user entry is expired, and the following is for the user during the lease time. Please explain if you are not online. Embodiment 3:

As shown in Figure 2, the user does not go online during the lease time. The processing of the user includes the following steps: Step 301: The user accesses the network, that is, the user goes online;

Step 302, the SN detects whether the user is abnormally offline. If the abnormality of the user is detected, the process proceeds to step 303; otherwise, the process continues to step 302;

Step 303: Reserve the user entry, set the user status to "unauthenticated", stop charging, and keep the state for a lease period;

If the SN device detects that the user is offline, the user entry is retained, the user status is set to "unauthenticated", the accounting is stopped, and the state is maintained for a lease period. The lease time is The time of a lease after a successful renewal.

Step 304: The SN device continuously detects whether the user expires before the time when the user entry is reserved. On the line, if the user fails to be detected after the time when the user entry is expired, the user entry is deleted.

After the time when the user entry is expired, the user host also cannot obtain the address after the lease expires, so that the user host and the information on the SN are synchronized. Therefore, the next time the user host accesses the network, The user host will restart the DHCP process.

After detecting that the abnormality of the user is offline, the user and the service control node SN retain the user entry, and set the authenticated user state to unauthenticated, and maintain a lease time, which can be synchronized within one lease time. The SN and the user host obtain or release the state of the IP address, and force the user to re-authenticate; thereby realizing the notification and guiding function to the user when an abnormality occurs, without requiring the user to have relevant professional knowledge, the problem can be solved after the abnormal offline The problem of going online improves the efficiency of users accessing the network, which not only improves the user experience, but also saves users' expenses. However, this is only an example for ease of understanding, and the specific implementation of the present invention should not be construed as being limited to the description. It is to be understood by those skilled in the art that various changes and substitutions may be made without departing from the spirit and scope of the invention.

Claims

Claim

A method for processing an abnormality of a web authentication user offline, the method comprising: the user and the service control node SN device retaining the user entry when detecting that the user abnormally goes offline, and setting the authenticated user state Is not certified and maintains a lease time. The method also includes:

The SN device detects that the user succeeds before the lease time of the reserved user entry expires. If the user retains the original IP address, the SN device directly re-authenticates the user and accesses the network. The method also includes:

Before the lease time of the reserved user entry expires, the SN device detects that the user is successful, if the original IP address of the user has been released, and the SN device processes the user to apply for an IP address report. If the status of the user is unauthenticated, the original IP address of the user recorded in the user entry is directly assigned to the user, and the original user entry is used or overwritten, and then the The user accesses the network after re-authentication. The method also includes:

The user entry is deleted when the SN device detects that the user fails or still meets the mandatory offline condition when the reserved lease time of the user entry expires.

The method for processing an abnormality of a web authentication user offline according to any one of claims 1 to 4, wherein the user abnormally offline includes: a user disconnected due to a link failure, or user traffic and service If the network security does not meet the network requirements, the user is forced to go offline.

The method for processing an abnormality of a web authentication user offline according to any one of claims 1 to 4, wherein the one lease time of the hold is a lease period after the last successful lease renewal. Time.

A system for processing an abnormality of a web authentication user offline, characterized in that the system includes a user and an SN device, wherein

The SN device is configured to detect whether the user is offline abnormally, and when the abnormal user goes offline, the user entry is retained, and the authenticated user state is set to be unauthenticated, and a lease time is maintained; The SN device is connected to access the network.

The SN device is further configured to: when the user is successful, if the user retains the original IP address, the SN device is further processed by the SN device. The user is directly authenticated and then accesses the network.

The device for processing an abnormality of the Web authentication user offline according to claim 7, wherein the SN device is further configured to delete the user entry when the user fails to be detected.

The processing system for the abnormality of the web authentication user offline according to claim 7, wherein the SN device is further configured to: if the original IP address of the user has been released, when the detecting user succeeds, The user is directly assigned the original IP address, and the original user entry is used or overwritten, and then the user is re-authenticated and accesses the network.