Research And Implementation Of RADIUS Protocol Based On Blockchain

RADIUS(Remote Authentication Dial In User Service),which is the most widely used AAA protocol(Authentication,Authorization,Accounting).Despite of several protocol revisions,the RADIUS protocol is more secure,scalable,and manageable,and has strong billing capabilities.However,there?s some problems in the RADIUS: The first one is that RADIUS adapts centralized management.With the expansion of network scale and the increase of access devices,the pressure of protocol management and maintenance increases gradually.Second,the centralized RADIUS server is vulnerable to attack or failure,which may cause the leakage of users? account information,billing information and other sensitive data stored in the system,even may cause the server stops working.Third,RADIUS supports the server proxy function.Each proxy server has the right to record and modify the user?s authentication and billing information,and packets are prone to errors or attacks during the transmission between servers,which may lead to the situation that the users can?t be able to authenticate or inconsistent billing information.According to the above problems,the thesis uses the technique of blockchain is decentralized,trust,tamper with the reliable,can collective maintenance,has reliable database,we design a RADIUS protocol based on blockchain,the RADIUS server using smart contract implementation in the form of NAS(Network Access Server)to send the request packet to the deployed RADIUS smart contract blockchain network,using the method of interface call the smart contracts.After the processing of the smart contract,the result of the response is packaged as a packet format and returned to the NAS,and the processing information is stored in the blockchain,which realizes the function of RADIUS server.The thesis realized the RADIUS system based on the Ethereum blockchain is implemented.The four functions of account management,authentication authorization,accounting and system configuration are realized by using Truffle framework.Among them,the account management module is used to complete the add,delete,modify and query functions of user account information.The authentication authorization module is mainly used to realize the authentication authorization function and provide the authentication record inquiry function.The accounting module is mainly used to realize the billing function and provide the function of bill inquiry.System configuration is mainly used to set the shared secret,authentication port,accounting port and billing method.The thesis also tests the account management,authentication authorization,accounting and system configuration functions of the system.The authentication or accounting request packet is sent through the RADIUS server testing tool NTRad Ping Test,and the system returns the response packet after receiving and processing.Wireshark network analysis tool is used to analyze the packet and determine whether the system works normally.The experimental result shows that the system authentication authorization and accounting function are correct and available.