Analysis And Design Of The Integrated Access Authentication System For IP Based MAN

Broadband IP based MAN (Metropolitan Area Network) is the bearing network for Internet services and other value-added services provided by network operators, which is one of the key aspects of the competition of network services. This competition is reflected in three areas: the competition of subscriber market share, the competition of emerging new networking technologies, and the competition of flexibility of the business models. In addition to focus on the construction of the network infrastructure, operators pay more attention to their business support systems so as to enhance their competitiveness. The ability of the business support systems is the key means of improving their core competitiveness. The access authentication system is a key sub-system of the MAN business support systems, which can support the IP based MAN services in combination with the MAN data service billing and management system. The access authentication system provides access authentication service directly to the users, with the service quality, efficiency and flexibility as the key demands to enhance the competitiveness of the operators.The main current business trends of IP based MAN can be reduced to popularity, broadband, differentiation, and integration. The construction of IP based MAN must meet these demands for bearing all kinds of services, meanwhile, the IP MAN access authentication system must also fully fulfill these requirements, providing unified authentication, supporting new MAN access authentication mode (such as IPoE), and realizing flexibility, extendibility, and other requirements of MAN business operation. Nowadays, facing the differentiation of business requirements as well as the pressure of the rapid growth of the MAN business, the MAN access authentication system is gradually falling short of capabilities, with lack of access authentication functionality for new MAN services and scalability and extendibility for current MAN services. Therefore, according to these facts, having the reality and development in mind, and based on new authentication technologies, we must replan, redesign and rebuild a brand-new MAN access authentication system, using variety of advanced technologies and meeting the current and future MAN business requirements.This thesis analyzes the MAN access authentication system based on the development of MAN network infrastructure, MAN business, MAN networking technologies, and other related areas, provides the general and detailed design of the new generation MAN integrated access authentication system, and describes the system application deployment and typical application processes. The new system uses a loosely coupled mode of system design, with each function module capable of being added or expanded based on new needs or system load to extend or enhance the capacity. Meanwhile, the new system supports multiple authentication methods, meeting all current MAN access authentication needs as well as ensuring access authentication support for new service introduction and rapid deployment. The scalability of the new system meets the basic design demands of the carrier-grade operation support system.The main tasks of this thesis are as follows:(1) Analysis of the development and services bearing of IP based MAN;(2) Analysis of the actuality and requirements of IP based MAN access authentication;(3) Research of access authentication technologies;(4) Design of general architecture and functionality of MAN integrated access authentication system;(5) Design of system deployment and application processes of the MAN integrated access authentication system.With the further booming and development of MAN services, the integrated MAN access authentication system will be bound to exert its advantages on unity, integration, high flexibility, high scalability and extendibility, and so on, providing powerful support for the full service development of the MAN business.