Research Of Multi-authentication Pattern Billing System On Campus Network

Since the opening of the campus network in universities, campus network management have been plagued by the security management of campus network export. At present, the mainstream of authentication technology for campus network are PPPo E, 802.1X,and Web+Portal. Those three kinds of authentication methods each has its advantages and disadvantages in safety, versatility, convenience, and service control corresponding to different application environment. The environment of campus network is complex, it cannot be use any single authentication scheme to solve effectively the existing management problems, it caused the choice of authentication scheme by network management is difficult, and the formation of the status of multiple authentication modes, joint management of multiple sets of AAA(Authentication Authorization Accounting)system.This paper mainly studied according to the identity certification audit services to campus network which is using Ethernet access pattern requirement, Compared with PPPo E, 802.1X, and Web+Portal, based on the scheme which is according to the different business environment using different authentication implementation, provides the specific design of the system solution for specific problems encountered in the implementation process. The main works are as follows:First, analyze the current user structure of campus network in universities, use different authentication scheme by according to the actual needs manage data integration by aimed at three kinds of authentication methods, establish the three kinds of authentication methods coexist of authentication and accounting management platformSecond, research the business defects of three kinds of authentication mode, use general agreement to complement the security problems and missing data of management in authentication mode.Third, research the methods of user behavior data of different authentication mode of collecting, billing, unified storage, and reduce the storage space of the massive data, by data merge method to speed up the query speed.Finally, this paper records the process on the basis of the research, which is optimized and the deployment in the actual environment of the existing system. After one year of operation, the system has achieved the anticipated effect, to achieve the high target which is compatibility, security, and low cost.