The Design And Implementation Of3A System In IMS Network

With the development of network technology and the diversity of network services, it’s more and more important and complicate to manage the resource of user profiles and network configurations. This is3A (Authentication, Authorization, Accounting)system’s responsibility. The complicate network environment requires3A system to be more real-time, more secure and more effective. Since more users are accessing the network in different ways, some existing3A systems cannot handle all these requests when they are facing numerous clients, especially if the network environment is not so satisfying. Besides, the way of authentication and authorization cannot be extended, and when the server system downs, it lacks of available mechanism to protect users’ account information.RADIUS protocol is short for Remote Authentication Dial-In User Service. It is most properly used where there are many users trying to connect to network applications. The multi-thread structure which handles many requests at a time is what it famous of. The UDP communication way makes it more in-time. This paper describes the specific implementation of3A service based on RADIUS protocol to support general access of mobile network, wireless network and so on. Based on the standard of RADIUS protocol, the server system deals with the users’ requests which are encapsulated as UDP data packets. On the guarantee of the clients’ retransmission mechanism, all the users’ requests can be handled properly even in poor environment. The3A service system adopts MYSQL cluster database to store the data in the plurality of data storage nodes. Thus if a single node or several storage nodes fail, the user information can maintain integrity and the system can still provide services and ensure the data security and the system’s high availability.In order to realize the real-time response to users’ requests, the system architecture is divided in to modules according to the function. They are data layer module, protocol stack module, core processing module and service process module. All the modules are combined in a hierarchical manner and communicate through TCP sockets, so that they can be deployed on different physical machines. It enables the system to maximize performance to make a timely response on user request and ensure the system’s flexible scalability. This paper elaborates the whole system’s frame structure, and describes each module in the significance and design. Besides, it will focus on the data layer and the design and realization of service processing module. The data layer design included the data tables and the framework which provides interfaces for applications to accessing the database. Since the system has to be able to support the changing users’requests about the ways of authentication, authorization and accounting, this paper provides an plug-in design method to meet this demand. So the processing module is divided into two parts including plug-in framework and plug-ins. The plug-in framework loads the corresponding plug-in according to the configuration and plug-in trigger logic. The plug-ins part include the basic3A service like CHAP plug-in, PAP plug-in, Authorization plug-in and Accounting plug-in. The whole processing module fulfills the logic process from authentication, authorization to accounting, and makes the business logic with a good scalability.The realization of this system has solved the real-time problem and user information security problem when authenticating, authorizing and accounting. MYSQL cluster database can safely manage the user information and ensure that the user information and the service configuration be of high availability. It reduces the system’s requirement of hardware resources by enabling the system to deploy each module in different physical machines, and gives the purpose of timely and accurate response. And the plug-in method improves3A system’s scalability and substitutability...