Patent ID: 9038143
Filing Date: 2015-05-19
Classification: H04L

Abstract:
1. A method for network access control, comprising: step 1), sending, by a requester, an access request message to an access controller of a destination network, wherein the access request message comprises an access request of the requester; step 2), constructing, by the access controller, an access authentication request message comprising first identity authentication information and sending the access authentication request message to the requester after receiving the access request message, wherein the first identity authentication information is identity authentication information of the access controller; step 3), constructing, by the requester, an identity authentication request message and sending the identity authentication request message to an authentication server of the destination network after receiving the access authentication request message, wherein the identity authentication request message comprises the first identity authentication information and second identity authentication information, and the second identity authentication information is identity authentication information of the requester; step 4), generating, by the authentication server, a first authentication result after authentication on the access controller according to the first identity authentication information and generating a second authentication result after authentication on the requester according to the second identity authentication information, after receiving the identity authentication request message; and constructing, by the authentication server, an identity authentication response message and sending the identity authentication response message to the requester, wherein the identity authentication response message comprises the first authentication result and the second authentication result; step 5), constructing, by the requester, an access authentication response message according to the first authentication result and sending the access authentication response message to the access controller after receiving the identity authentication response message, wherein the access authentication response message comprises the second authentication result; and step 6), constructing, by the access controller, an access response message according to the second authentication result and an authorization policy and sending the access response message to the requester after receiving the access authentication response message, wherein the authorization policy is a policy for the access controller to authorize the access request.