Abstract:
Disclosed is a portal device management method, and the method includes: an instance connection between a portal client and a pre-configured portal server is established through capability negotiation; and each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end. Further disclosed are a portal device and a portal system, in the embodiments of the disclosure, an instance connection is established between a portal server and a portal client, and load balancing of the portal server is implemented based on the established instance connection; it is possible to solve the problem that the portal client and the portal server cannot upgrade smoothly; information such as a public key of an asymmetrical algorithm and an IP address pool can be automatically announced between the portal client and the portal server without manual configuration operations, thereby result in convenient and secure operation and maintenance.

Description:
TECHNICAL FIELD 
       [0001]    The present disclosure relates to network communication techniques, and in particular to a portal device management method, a portal device and a portal system. 
       BACKGROUND 
       [0002]    Web authentication techniques are widely used in scenarios such as a campus network where network access authorization is performed after users go online, and corresponding Web authentication techniques have the following problems: 
         [0003]    A portal client&#39;s selection of a portal server that performs mandatory authentication of a user client has a simple processing logic so that the portal client cannot sense the state of the portal server or accept an indication of load sharing made by the portal server, and when a portal server selected by the portal client for performing mandatory authentication of the user client is busy, the portal server fails to process in time a HyperText Transfer Protocol (HTTP) request from the user client and to push an authentication page to the user client or acquire authentication information of the user client so that the portal client fails to perform in time network authorization on the user client or an authentication failure may even be resulted, thus impacting user experiences; 
         [0004]    when information of the portal client and of the portal server such as an Internet Protocol (IP) address pool of the user client locally configured at the portal client changes, it is required to make corresponding changes manually on the portal server side, resulting in tedious operation and maintenance; 
         [0005]    when the portal client and the portal server upgrade its portal protocol, a synchronous upgrading needs to be performed on the portal server and the portal client, resulting in tedious operation and maintenance; and 
         [0006]    in order to encrypt authentication information of the user client, it is required to configure an encryption key and a decryption key symmetrically on the portal server and the portal client, and these operations impose high requirements for manual intervention, resulting in tedious operation and maintenance with poor security. 
       SUMMARY 
       [0007]    In view of the above, the embodiments of the disclosure are intended to provide a portal device management method, a portal device and a portal system so that it is possible to achieve the aim of load balancing, the portal client and the portal server can upgrade smoothly, and each of the portal client and the pre-configured portal server can announce its information to its opposite end, thus resulting in convenient and secure operation and maintenance. 
         [0008]    To this end, the technical solutions of embodiments of the disclosure are implemented as follows. 
         [0009]    An embodiment of the disclosure provides a portal device management method including: 
         [0010]    an instance connection between a portal client and a pre-configured portal server is established through capability negotiation; and 
         [0011]    each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end. 
         [0012]    In an embodiment, the step that an instance connection between a portal client and a pre-configured portal server is established through capability negotiation may include: 
         [0013]    the instance connection between the portal client and the pre-configured portal server is established when the portal client and the pre-configured portal server determine through capability negotiation that a portal protocol version and function required by the portal client match a portal version and function supported by the pre-configured portal server. 
         [0014]    In an embodiment, the method may further include: 
         [0015]    the pre-configured portal server having the instance connection established with the portal client is determined as a portal server that performs mandatory authentication of a user client supported by the portal client. 
         [0016]    In an embodiment, after the instance connection between the portal client and the pre-configured portal server is established through capability negotiation, the method may further include: 
         [0017]    the instance connection between the portal client and the pre-configured portal server is disconnected when the portal client upgrades its portal protocol, and the instance connection between the portal client and the pre-configured portal server is re-established when the portal client and the pre-configured portal server determine through capability negotiation that a portal protocol version and function required by the portal client after the upgrading match a portal version and function supported by the pre-configured portal server. 
         [0018]    In an embodiment, after the instance connection between the portal client and the pre-configured portal server is established through capability negotiation, the method may further include: 
         [0019]    the instance connection between the portal client and the pre-configured portal server is disconnected when the pre-configured portal server having the instance connection established with the portal client upgrades its portal protocol and/or function, and the instance connection between the portal client and the pre-configured portal server is re-established when the portal client and the pre-configured portal server determine through capability negotiation that a portal protocol version and function required by the portal client match a portal version and function supported by the pre-configured portal server after the upgrading. 
         [0020]    In an embodiment, the step that each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end may include: 
         [0021]    the pre-configured portal server announces its load information to the portal client having the instance connection established with the pre-configured portal server; and the method may further include: the portal client updates the instance connection between the portal client and the pre-configured portal server according to the load information. 
         [0022]    In an embodiment, the step that each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end may include: 
         [0023]    the portal client announces, to the pre-configured portal server having the instance connection with the portal client, an IP address of a user client supported by the portal client or an IP address pool locally configured at the portal client, and when the IP address of the user client supported by the portal client and/or the IP address pool locally configured at the portal client changes, the portal client announces the changed IP address or changed IP address pool to the pre-configured portal server having the instance connection with the portal client; and 
         [0024]    the pre-configured portal server announces a Uniform Resource Locator (URL) of its authentication page to the portal client having the instance connection established with the pre-configured portal server, and when the URL of the authentication page changes, announces the changed URL to the portal client having the instance connection established with the pre-configured portal server. 
         [0025]    In an embodiment, the step that each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end may include: 
         [0026]    the pre-configured portal server announces a public key of an asymmetric encryption algorithm to the portal client having the instance connection established with the pre-configured portal server. 
         [0027]    An embodiment of the disclosure further provides a portal client including a first negotiation and connection module and a first announcement module, wherein 
         [0028]    the first negotiation and connection module is configured to establish an instance connection with a pre-configured portal server through capability negotiation; and 
         [0029]    the first announcement module is configured to announce information of the portal client to the pre-configured portal server having the instance connection established with the first negotiation and connection module. 
         [0030]    In an embodiment, the first negotiation and connection module may be further configured to establish the instance connection with the pre-configured portal server when determining through capability negotiation with the pre-configured portal server that a portal protocol version and function required by the portal client match a portal version and function supported by the pre-configured portal server. 
         [0031]    In an embodiment, the portal client may further include: 
         [0032]    a determination module configured to determine the pre-configured portal server having the instance connection established with the first negotiation and connection module as a portal server that performs mandatory authentication of a user client supported by the portal client. 
         [0033]    In an embodiment, the first negotiation and connection module may be further configured to disconnect the instance connection with the pre-configured portal server when the portal client upgrades its portal protocol, and re-establish the instance connection with the pre-configured portal server when determining through capability negotiation with the pre-configured portal server that a portal protocol version and function required by the portal client after the upgrading match a portal version and function supported by the pre-configured portal server. 
         [0034]    In an embodiment, the first negotiation and connection module may be further configured to update the instance connection with the pre-configured portal server according to load information announced by the pre-configured portal server having the instance connection established with the first negotiation and connection module. 
         [0035]    In an embodiment, the first announcement module may be configured to announce an IP address of the portal client and an IP address pool locally configured at the portal client to the pre-configured portal server having the instance connection established with the first negotiation and connection module, and when the IP address of the portal client and/or the IP address pool locally configured at the portal client change(s), announce the changed IP address and/or changed IP address pool to the pre-configured portal server having the instance connection established with the first negotiation and connection module. 
         [0036]    An embodiment of the disclosure further provides a portal server including a second negotiation and connection module and a second announcement module, wherein 
         [0037]    the second negotiation and connection module is configured to establish an instance connection with a portal client through capability negotiation; and 
         [0038]    the second announcement module is configured to announce information of the portal server to the portal client having the instance connection established with the second negotiation and connection module. 
         [0039]    In an embodiment, the second negotiation and connection module may be further configured to establish the instance connection with the portal client when determining through capability negotiation with the portal client that a portal protocol version and function required by the portal client match a portal version and function supported by the portal server. 
         [0040]    In an embodiment, the second negotiation and connection module may be further configured to disconnect the instance connection with the portal client when the portal server upgrades its portal protocol and/or function, and re-establish the instance connection with the portal client when determining through capability negotiation with the portal client that a portal protocol version and function required by the portal client match a portal version and function supported by the portal server after the upgrading. 
         [0041]    In an embodiment, the second announcement module may be configured to announce load information of the portal server to the portal client having the instance connection established with the portal server. 
         [0042]    In an embodiment, the second announcement module may be further configured to announce a Uniform Resource Locator (URL) of an authentication page of the portal server to the portal client having the instance connection established with the portal server, and when the URL of the authentication page changes, announce the changed URL to the portal client having the instance connection established with the portal server. 
         [0043]    In an embodiment, the second announcement module may be further configured to announce a public key of an asymmetric encryption algorithm to the portal client having the instance connection established with the portal server. 
         [0044]    An embodiment of the disclosure further provides a portal system including a pre-configured portal client and a portal server, wherein 
         [0045]    the pre-configured portal server is configured to establish an instance connection with the portal client through capability negotiation, and announce its information to the portal client having the instance connection established with the pre-configured portal server; and 
         [0046]    the portal client is configured to establish the instance connection with the pre-configured portal server through capability negotiation, and announce its information to the pre-configured portal server having the instance connection established with the portal client. 
         [0047]    In an embodiment, the portal client may include a first negotiation and connection module, a first announcement module and a determination module; and the pre-configured portal server may include a second negotiation and connection module and a second announcement module; and respective modules have same functions as those of the modules described above. 
         [0048]    In the technical solutions according to the embodiments of the disclosure, the portal client and portal server establish an instance connection therebetween through capability negotiation, and when the portal client or the portal server performs upgrading, the portal client or portal server can perform single-side smooth upgrading through disconnection of the instance connection without disruption of an authentication processing operation of the portal server or portal client that doesn&#39;t performs the upgrading, thus it is possible to solve a problem of tedious operation and maintenance resulted from the fact in the prior art that a portal client and a portal server matching the portal client must upgrade synchronously; 
         [0049]    the portal client announces changed IP address and/or changed IP address pool to the portal server having the instance connection established with the portal client, and a changed URL and a public key of an asymmetric encryption algorithm are announced to the portal client having the instance connection established with the portal server, thus there is no need to perform configuration on devices to modify announced information, thereby resulting in convenient and secure operation and maintenance; and 
         [0050]    the portal server having the instance connection established with the portal client is determined as a portal server that performs mandatory authentication of a user client supported by the portal client, and the established instance connection is updated according to load information of the portal server, thus it is possible to balance loads of the portal server and improve efficiency of authentication of user clients. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0051]      FIG. 1  is a flow chart of a portal device management method according to an embodiment of the disclosure; 
           [0052]      FIG. 2  is a schematic structural diagram of a portal system according to an embodiment of the disclosure; 
           [0053]      FIG. 3  is a first flow chart for implementing portal device management according to an embodiment of the disclosure; 
           [0054]      FIG. 4  is a second flow chart for implementing portal device management according to an embodiment of the disclosure; and 
           [0055]      FIG. 5  is a third flow chart for implementing portal device management according to an embodiment of the disclosure. 
       
    
    
     DETAILED DESCRIPTION 
       [0056]    The disclosure will be further elaborated below in combination with accompanying drawings and specific embodiments. 
         [0057]      FIG. 1  is a flow chart of a portal device management method according to an embodiment of the disclosure, as shown in  FIG. 1 , the method includes: 
         [0058]    step  101 , an instance connection between a portal client and a pre-configured portal server is established through capability negotiation. 
         [0059]    The portal client and the portal server are devices that perform network access authentication of a user client, and the network access authentication of the user client can be done through cooperation of the portal server and a portal client supporting the user client. 
         [0060]    As a preferred implementation, the step that an instance connection between a portal client and a pre-configured portal server is established through capability negotiation may include: the instance connection between the portal client and the pre-configured portal server is established when the portal client and the pre-configured portal server determine through capability negotiation that a portal protocol version and function required by the portal client match a portal version and function supported by the pre-configured portal server. 
         [0061]    As a preferred implementation, the pre-configured portal server having the instance connection established with the portal client is determined as a portal server that performs mandatory authentication of a user client supported by the portal client. 
         [0062]    A processing process of network access authentication of the user client performed by the portal client and the determined portal server performing the mandatory authentication complies with portal protocol specifications. 
         [0063]    As a preferred implementation, after the instance connection between the portal client and the pre-configured portal server is established through capability negotiation, the instance connection between the portal client and the pre-configured portal server is disconnected when the portal client upgrades its portal protocol, and the instance connection between the portal client and the pre-configured portal server is re-established when the portal client and the pre-configured portal server determine through capability negotiation that a portal protocol version and function required by the portal client after the upgrading match a portal version and function supported by the pre-configured portal server. 
         [0064]    Since the portal client and the portal server have their portal protocol versions and functions matching each other before the upgrading may not match each other any more after the upgrading, in order to avoid configuring a portal server not matching the portal client to perform mandatory authentication of the portal client, it is required to disconnect firstly the instance connection between the portal server and the portal client and then re-establish the instance connection after determination of matching. 
         [0065]    As a preferred implementation, after the instance connection between the portal client and the pre-configured portal server is established through capability negotiation, the instance connection between the portal client and the pre-configured portal server is disconnected when the pre-configured portal server having the instance connection established with the portal client upgrades its portal protocol and/or function, and the instance connection between the portal client and the pre-configured portal server is re-established when the portal client and the pre-configured portal server determine through capability negotiation that a portal protocol version and function required by the portal client match a portal version and function supported by the pre-configured portal server after the upgrading. 
         [0066]    Step  102 , each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end. 
         [0067]    As a preferred implementation, the step that each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end may include: the pre-configured portal server announces its load information to the portal client having the instance connection established with the pre-configured portal server; and the method may further include: the portal client updates the instance connection between the portal client and the pre-configured portal server according to the load information. 
         [0068]    If the portal client determines according to load information that a current load of the client server exceeds a preset threshold, the instance connection with the portal server is disconnected temporarily; if subsequently the portal client determines according to the load information announced by the portal server that a current load of the client server doesn&#39;t exceed the preset threshold, the temporarily-disconnected instance connection is recovered. 
         [0069]    The load information of the portal server may include a description of the number of authentication requests from user clients currently processed by the portal server, and may also include a description of hardware load of the portal server, where the hardware load includes but is not limited to utilization rate of CPU, utilization rate of memory and utilization rate of network bandwidth. 
         [0070]    As a preferred implementation, the step that each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end may include: the portal client announces, to the pre-configured portal server having the instance connection with the portal client, an IP address of the portal client or an IP address pool locally configured at the portal client, and when the IP address of the portal client and/or the IP address pool locally configured at the portal client changes, the portal client announces the changed IP address and/or changed IP address pool to the pre-configured portal server having the instance connection with the portal client; and 
         [0071]    the pre-configured portal server announces a URL of its authentication page to the portal client having the instance connection established with the pre-configured portal server, and when the URL of the authentication page changes, announces the changed URL to the portal client having the instance connection established with the pre-configured portal server. 
         [0072]    When the portal server and the portal client perform network access authentication of a user client, the portal client needs to announce a URL of an authentication page of the portal server to the user client so as to re-direct the user client to the authentication page of the portal server; the portal server needs to determine, through an IP address of the portal client and information of an IP address pool of the user client which is locally configured at the portal client, an IP address of a portal client supporting the user client, and announces authentication information of the user client acquired through the authentication page to the portal client supporting the user client so that the authentication information of the user client can be verified by the portal client supporting the user client. 
         [0073]    As a preferred implementation, the step that each of the portal client and the pre-configured portal server having the instance connection established therebetween announces its information to its opposite end may include: the pre-configured portal server announces a public key of an asymmetric encryption algorithm to the portal client. 
         [0074]    It should be noted that the announced information described in the embodiment of the disclosure is not limited to what described herein, each of the portal client and portal server having the instance connection established therebetween can announces, to its opposite end, other information required during subsequent mandatory authentication of a user client, for example, a type of a protocol required during the authentication can be announced between the portal client and the portal server. 
         [0075]      FIG. 2  is a schematic structural diagram of a portal system according to an embodiment of the disclosure, as shown in  FIG. 2 , the system includes a portal client  21  and a pre-configured portal server  22 , 
         [0076]    the portal client  21  is configured to establish an instance connection with the pre-configured portal server  22  through capability negotiation, and announce its information to the pre-configured portal server  22  having the instance connection established with the portal client  21 ; and 
         [0077]    the pre-configured portal server  22  is configured to establish the instance connection with the portal client  21  through capability negotiation, and announce its information to the portal client  21  having the instance connection established with the pre-configured portal server  22 . 
         [0078]    The portal client  21  is further configured to establish the instance connection with the pre-configured portal server  22  when determining through capability negotiation with the pre-configured portal server  22  that a portal protocol version and function required by the portal client  21  match a portal version and function supported by the pre-configured portal server  22 . 
         [0079]    The portal client  21  is further configured to determine the pre-configured portal server  22  having the instance connection established with the portal client  21  as a portal server  22  that performs mandatory authentication of a user client supported by the portal client  21 . 
         [0080]    The portal client  21  is further configured to disconnect the instance connection with the pre-configured portal server  22  when the portal client  21  upgrades its portal protocol, and re-establish the instance connection with the pre-configured portal server  22  when determining through capability negotiation with the pre-configured portal server  22  that a portal protocol version and function required by the portal client  21  after the upgrading match a portal version and function supported by the pre-configured portal server  22 . 
         [0081]    The portal client  21  is further configured to update the instance connection with the pre-configured portal server  22  according to load information announced by the pre-configured portal server  22  having the instance connection established with the first negotiation and connection module  221 . 
         [0082]    The portal client  21  is further configured to announce an IP address of the portal client  21  and an IP address pool locally configured at the portal client to the pre-configured portal server  22  having the instance connection established with the portal client  21 , and when the IP address of the portal client  21  and/or the IP address pool locally configured at the portal client change(s), announce the changed IP address and/or changed IP address pool to the pre-configured portal server  22  having the instance connection established with the portal client  21 . 
         [0083]    The pre-configured portal server  22  is further configured to establish the instance connection with the portal client  21  when determining through capability negotiation with the portal client  21  that a portal protocol version and function required by the portal client  21  match a portal version and function supported by the portal server  22 . 
         [0084]    The pre-configured portal server is further configured to disconnect the instance connection with the portal client  21  when the portal server  22  upgrades its portal protocol and/or function, and re-establish the instance connection with the portal client  21  when determining through capability negotiation with the portal client  21  that a portal protocol version and function required by the portal client  21  match a portal version and function supported by the portal server  22  after the upgrading. 
         [0085]    The pre-configured portal server  22  is further configured to announce its load information to the portal client  21  having the instance connection established with the portal server  22 . 
         [0086]    The pre-configured portal server  22  is further configured to announce a Uniform Resource Locator (URL) of an authentication page of the portal server  22  to the portal client  21  having the instance connection established with the portal server  22 , and when the URL of the authentication page changes, announce the changed URL to the portal client  21  having the instance connection established with the portal server  22 . 
         [0087]    The pre-configured portal server is further configured to announce a public key of an asymmetric encryption algorithm to the portal client  21  having the instance connection established with the pre-configured portal server  22 . 
         [0088]    The portal client  21  includes a first negotiation and connection module  211  and a first announcement module  212 , 
         [0089]    the first negotiation and connection module  211  is configured to establish an instance connection with a pre-configured portal server  22  through capability negotiation; and 
         [0090]    the first announcement module  212  is configured to announce information of the portal client  21  to the pre-configured portal server having the instance connection established with the first negotiation and connection module  211 . 
         [0091]    Specifically, the first negotiation and connection module  211  is further configured to establish the instance connection with the pre-configured portal server  22  when determining through capability negotiation with the pre-configured portal server  22  that a portal protocol version and function required by the portal client  21  match a portal version and function supported by the pre-configured portal server  22 . 
         [0092]    In an embodiment, the portal client  21  further include a determination module  213  configured to determine the pre-configured portal server  22  having the instance connection established with the first negotiation and connection module  211  as a portal server  22  that performs mandatory authentication of a user client supported by the portal client  21 . 
         [0093]    The first negotiation and connection module  211  is further configured to disconnect the instance connection with the pre-configured portal server  22  when the portal client  21  upgrades its portal protocol, and re-establish the instance connection with the pre-configured portal server  22  when determining through capability negotiation with the pre-configured portal server  22  that a portal protocol version and function required by the portal client  21  after the upgrading match a portal version and function supported by the pre-configured portal server  22 . 
         [0094]    The first negotiation and connection module  211  is further configured to update the instance connection with the pre-configured portal server  22  according to load information announced by the pre-configured portal server  22  having the instance connection established with the first negotiation and connection module  211 . 
         [0095]    The first announcement module  212  is further configured to announce an IP address of the portal client  21  and an IP address pool locally configured at the portal client  21  to the pre-configured portal server  22  having the instance connection established with the first negotiation and connection module  211 , and when the IP address of the portal client  21  and/or the IP address pool locally configured at the portal client  21  change(s), announce the changed IP address and/or changed IP address pool to the pre-configured portal server  22  having the instance connection established with the first negotiation and connection module  211 . 
         [0096]    In practical applications, the first negotiation and connection module  211 , the first announcement module  212  and the determination module  213  can all be implemented by a Central Processing Unit (CPU), a Digital Signal Processor (DSP) or a Field-Programmable Gate Array (FPGA) in the portal client  21 . 
         [0097]    The portal server  22  includes a second negotiation and connection module  221  and a second announcement module  222 , 
         [0098]    the second negotiation and connection module  221  is configured to establish an instance connection with a portal client  21  through capability negotiation; and 
         [0099]    the second announcement module  222  is configured to announce information of the portal server  22  to the portal client  21  having the instance connection established with the second negotiation and connection module  221 . 
         [0100]    The second negotiation and connection module  221  is further configured to establish the instance connection with the portal client  21  when determining through capability negotiation with the portal client  21  that a portal protocol version and function required by the portal client  21  match a portal version and function supported by the portal server  22 . 
         [0101]    The second negotiation and connection module  221  is further configured to disconnect the instance connection with the portal client  21  when the portal server  22  upgrades its portal protocol and/or function, and re-establish the instance connection with the portal client  21  when determining through capability negotiation with the portal client  21  that a portal protocol version and function required by the portal client  21  match a portal version and function supported by the portal server  22  after the upgrading. 
         [0102]    The second announcement module  222  is configured to announce load information of the portal server  22  to the portal client  21  having the instance connection established with the portal server  22 . 
         [0103]    The second announcement module  222  is further configured to announce a Uniform Resource Locator (URL) of an authentication page of the portal server  22  to the portal client  21  having the instance connection established with the portal server  22 , and when the URL of the authentication page changes, announce the changed URL to the portal client  21  having the instance connection established with the portal server  22 . 
         [0104]    The second announcement module  222  is further configured to announce a public key of an asymmetric encryption algorithm to the portal client  21  having the instance connection established with the portal server  22 . 
         [0105]    In practical applications, the second negotiation and connection module  221  and the second announcement module  222  can both be implemented by a CPU, DSP or FPGA in the portal server  22 . 
         [0106]    In below embodiments, since a type of interactive message (the message type value is from 0x1 to 0x10) between a portal client and a portal server defined by existing portal protocols cannot meet requirements from interaction between the portal client and the portal server according to embodiments of the disclosure, it is required to extend the type of message defined by the existing portal protocols. For example, it can be extended to types of messages as follows. 
         [0107]    REQ_JOIN message with its value being 0x11: when requesting to join the portal server, the portal client transmits a REQ_JOIN message to the portal server, wherein the REQ_JOIN message carries a c and function required by the portal client, and after receiving the message, the portal server determines whether a portal protocol version and function supported by the portal server match the portal protocol version and function required by the portal client (hereinafter the matching of the portal protocol version and function supported by the portal server and the portal protocol and function required by the portal client is referred simply as the matching of the portal server and the portal client); the REQ_JOIN message includes a capability parameter field with variable field length configured to carry information regarding the portal protocol version and function required by the portal client, and the capability parameter field is organized according to a Type length Value (TLV) format; 
         [0108]    ACK_JOIN message with its value being 0x12: after receiving the REQ_JOIN message and determining a matching result, the portal server carries the matching result in an ACK_JOIN message and transmits the ACK_JOIN message to the portal client, if an ErrCode field of the ACK_JOIN message is 0, it indicates that the portal server matches the portal client requesting to join therein, and if the ErrCode field of the ACK_JOIN message is 1, it indicates that the portal server doesn&#39;t match the portal client requesting to join therein; the ACK_JOIN message may further include an authentication method (Authen-Method) field with its length being 1 bit, for example, a value of the field being 0, 1 or 2 indicates that protocols used during authentication performed by the portal server and the portal client are respectively a Challenge Handshake Authentication Protocol (CHAP), a Password Authentication Protocol (PAP) or an Extensible Authentication Protocol (EAP); 
         [0109]    REQ_CONFIG message with its value being 0x13: when the portal client receives the ACK_JOIN message, if an ErrCode field of the message is 0, a REQ_CONFIG message is transmitted to the portal server transmitting the ACK_JOIN message to request for a URL of an authentication page of the portal server; 
         [0110]    ACK_CONFIG with its value being 0x14: when receiving the REQ_CONFIG message transmitted from the portal client, the portal server returns, to the portal client, the URL of the authentication page of the portal server, wherein the ACK_CONFIG message include a URL field carrying the URL of the authentication page of the portal server; and the URL field is organized according to the TLV format; 
         [0111]    INFO_NOTIFY message with its value being 0x15: when receiving an ACK_JOIN message with its ErrCode field being 0, the portal client transmits an INFO_NOTIFY message to the portal server transmitting the ACK_JOIN message, the INFO_notify message carries an IP address of the portal client and an IP address pool locally configured at the portal client, and when the IP address of the portal client and/or the IP address pool locally configured at the portal client change(s), the portal client transmits, to the portal server transmitting the ACK_JOIN message, an INFO_NOTIFY message carrying the changed IP address of the portal client and/or the changed IP address pool locally configured at the portal client; after the portal server transmits an ACK_CONFIG with its Errcode field being 0 to the portal client and when the URL of the authentication page of the portal server changes, the portal server carries the changed URL in the INFO_NOTIFY message and transmits the INFO_NOTIFY message to the portal client, wherein the ACK_CONFIG message includes a URL field carrying a URL of the authentication page of the portal server. The URL field is organized according to the TLV format; the portal server carries load information in the INFO_NOTIFY message and transmits the INFO_NOTIFY message to a portal client matching the portal server; 
         [0112]    wherein a server state (Server-State) field of the INFO_NOTIFY message carries the load information of the portal server, for example, it is defined as an idle state when the load of the portal server is smaller than a preset threshold, and defined as a busy state when the load of the portal server is not smaller than the preset threshold, and below convention can be made to the Server-State field: when the Server-State field is binary 1, it indicates that the portal server is in the busy state, when the Server-State field is binary 0, it indicates that the portal server is in the idle state; after the portal server upgrades its portal protocol and/or function and then it matches a portal client which doesn&#39;t match the portal server before the upgrading, the portal server carries information that it matches the portal client in the INFO_NOTIFY message and then transmits the INFO_NOTIFY message to the portal client; 
         [0113]    ACK_INFO_NOTIFY message with its value being 0x16: when receiving the INFO_NOTIFY message, the portal client returns an ACK_INFO_NOTIFY message to the portal server transmitting the INFO_NOTIFY message to acknowledge that the URL of the portal server has been updated; when receiving the INFO_NOTIFY message, the portal server returns the CK_INFO_NOTIFY to the portal client transmitting the INFO_NOTIFY message to acknowledge that the IP address of the portal client and/or the IP address pool locally configured at the portal client have been saved; when receiving an INFO_NOTIFY message carrying the load information of the portal server, the portal client returns the ACK_INFO_NOTIFY message to the portal client server transmitting the INFO_NOTIFY message to acknowledge that the established instance connection has been updated; 
         [0114]    FORCE_LEAVE message with its value being 0x17: when upgrading its portal protocol and/or function, the portal server transmits a FORCE_LEAVE message to a portal client matching the portal server to forcibly separate from the management of the portal client; 
         [0115]    ACK_FORCE_LEAVE message with its value being 0x18: when receiving the FORCE_LEAVE message transmitted from the portal server matching the portal client, the portal client cancels labeling the portal server as a portal server matching the portal client, and transmits an ACK_FORCE_LEAVE message to the portal server to announces that it has separated from the management of the portal server; 
         [0116]    REQ_LEAVE message with its value being 0x18: when upgrading its portal protocol, the portal client transmits a REQ_LEAVE message to the portal server matching the portal client to request for separation from management of the portal server; 
         [0117]    ACK_LEAVE message with its value being 0x1a: when receiving the REQ_LEAVE message transmitted from the portal client matching the portal server, the portal server labels the portal client as a portal client not matching the portal server, and transmits an ACK_LEAVE message to the portal client to announce that the portal client has separated from management. 
         [0118]    In a preferred embodiment of the disclosure, when a portal protocol version and function supported by a portal server match a portal protocol version and function required by a portal client, the portal client establishes an instance connection with the portal server; the portal client announces an IP address of the portal client and an IP address pool locally configured at the portal client to the portal server having the instance connection established with the portal client, and requests the portal sever for a URL of an authentication page of the portal server; the portal client re-directs, a user client that has logged in, to the authentication page of the portal server having the instance connection established with the portal client so that the portal server acquires authentication information of the user client and network access authentication of the user client is performed according to the authentication information returned by the portal server.  FIG. 3  is a first flow chart of a device management method according to an embodiment of the disclosure, as shown in  FIG. 3 , the method includes: 
         [0119]    step  301 , a portal client requests to join a portal server. 
         [0120]    The portal server that the portal client requests to join is a portal server pre-configured to perform network access authentication of the portal client, and there are one or more such portal servers; 
         [0121]    the portal client transmits a REQ_JOIN message to the portal server to request to join the portal server, wherein the message carries information regarding a portal protocol version and function required by the portal client. 
         [0122]    Step  302 , the portal server returns a matching result to the portal client. 
         [0123]    The portal server determines, according to received information regarding a portal protocol version and function required by the portal client carried in the REQ_JOIN message, whether a portal protocol version and function supported by the portal server match those required by the portal client, if yes, the portal server returns, to the portal client, an ACK_JOIN message with its ErrCode field being 0; otherwise, the portal server returns, to the portal client, an ACK_JOIN message with its Errcode field being 1. 
         [0124]    The above steps  301  and  302  are a processing process of establishing an instance connection between the portal client and the portal server through capability negotiation. 
         [0125]    Step  303 , the portal client labels a valid instance of the portal client and the portal server having an instance connection therebetween. 
         [0126]    The portal client records the currently established instance connection by labeling a valid instance, when the portal server returns the ACK_JOIN message with its ErrCode field being 0 to the portal client, it represents that the portal server returning the ACK_JOIN message matches the portal client and the portal client and the portal server has established the instance connection therebetween; accordingly, the portal client labels a valid instance of the portal server including the portal client and returning the CK_JOIN message. 
         [0127]    The processing of steps  301  to  303  can be exemplified as below: when a portal client B requests to join a portal server A 1  and a portal server A 2 , if the portal server A 1  returns an ACK_JOIN message with its ErrCode field being 0, it represents that the portal server A 1  and the portal client B establish an instance connection through capability negotiation, and then the portal client B sets a valid instance &lt;portal client B, portal server A 1 &gt;. 
         [0128]    Step  304 , the portal client requests the portal server having the instance connection established with the portal client for a URL of an authentication page. 
         [0129]    The portal client transmits an REQ_CONFIG message to a portal server in the set valid instance so as to request for URL information of the authentication page of the portal server. 
         [0130]    Step  305 , the portal server returns the URL of the authentication page to the portal client; 
         [0131]    the portal server carries the URL information of the authentication page in the ACK_CONFIG message and returns the message to the portal server. 
         [0132]    Step  306 , the portal client announces, to the portal server having the instance connection with the portal client, an IP address of the portal client and/or an IP address pool locally configured at the portal client; 
         [0133]    the portal client carries the announced information in an INFO_NOTIFY message and transmits the message to a portal server in the set valid instance. 
         [0134]    It should be noted that steps  304  and  306  implemented by the portal client can be swapped. 
         [0135]    Step  307 , the portal server acknowledges that the IP address of the portal client and the IP address pool locally configured at the portal client have been saved. 
         [0136]    The portal server acknowledges, through transmitting the INFO_NOTIFY message, that the information announced by the portal client has been saved. 
         [0137]    Step  308 , the portal server announces load information and/or a changed URL of the authentication page to the portal client having the instance connection established with the configured portal server. 
         [0138]    The information announced by the portal server is carried in the INFO_NOTIFY message transmitted to the portal client having the instance connection established with the portal server. 
         [0139]    Step  309 , the portal client updates the established instance connection and/or the URL of the authentication page of the portal server. 
         [0140]    If in step  308  the portal server announces that it is in a busy state, the portal client having the instance connection established with the portal server in this step is disconnected temporarily; accordingly, if the portal client receives subsequently an INFO_NOTIFY message announcing that the portal server is in an idle state, the temporarily-disconnected instance connection is recovered; if in step  308  the portal server announces a changed URL of the authentication page of the portal server, the portal client having the instance connection established with the portal server in this step updates its saved URL of the authentication page of the portal server. 
         [0141]    Step  310 , the portal client acknowledges that the established instance connection and/or the URL of the authentication page of the portal server have been updated. 
         [0142]    The portal client carries the acknowledge information in an ACK_INFO_NOTIFY message and transmits the message to a portal server matching the portal client. 
         [0143]    Step  311 , a user client and the portal client establishes a connection therebetween. 
         [0144]    The user client and the portal client interact with each other according to specifications of Transmission Control Protocol/Internet Protocol (TCP/IP) to establish the connection. 
         [0145]    Step  312 , the portal client determines the portal server having the instance connection established with the portal client as a portal server that performs mandatory authentication of the user client. 
         [0146]    The portal server having the instance connection established with the portal client is in an idle state, thus the portal server determines a portal server in a currently labeled valid instance as the portal server that performs mandatory authentication of the user client. 
         [0147]    Step  313 , the portal client announces a URL of an authentication page of the determined portal server to the portal client. 
         [0148]    The user client logs in to an authentication page of the portal server corresponding to the announced URL, the portal server acquires, through the authentication page, authentication information of the user client, which includes a user name and a password. 
         [0149]    Step  314 , the portal client logs in to the authentication page of the portal server according to the URL. 
         [0150]    Step  315 , the portal server transmits an authentication request to a portal client supporting the user client. 
         [0151]    The authentication request carries the authentication information of the user client which is acquired from the authentication page by the user client. 
         [0152]    The portal server queries the saved IP address of the portal client and the saved IP address pool locally configured at the portal client by being indexed by an IP address of the user client to determine an IP address of a portal client supporting the user client and to transmit, according to the IP address, the authentication request to the portal client supporting the user client. 
         [0153]    Step  316 , the portal client returns an authentication result to the portal server. 
         [0154]    The portal client performs network access authentication of the user client according to the authentication information that is carried in the authentication request message and includes the user name and password of the user client. 
         [0155]    Step  317 , the portal server pushes an authentication result page to the user client. 
         [0156]    If in step  316  the portal client returns authentication success information, the portal server pushes an authentication success page, then proceed to step  317 ; otherwise, the portal server pushes an authentication failure page and then the processing ends. 
         [0157]    Step  318 , the portal client authorizes the user client to get network access. 
         [0158]    In a preferred embodiment of the disclosure, when a portal client doesn&#39;t match a portal client request to join therein, the portal server stores a portal protocol version and function required by the portal client; when the portal server upgrades its portal protocol and/or function, it forcibly separates from a portal client matching the portal server to disconnect an instance connection, the portal server and portal client having the instance connection therebetween disconnected perform capability negotiation so that after the upgrading the portal server determines whether it match the portal client having its instance connection disconnected, and the instance connection is re-established when the two match; when the upgraded portal server determines, according to the saved portal protocol version and function required by the non-matching portal client before the upgrading, that it matches the portal client that the portal server doesn&#39;t match before the upgrading, the portal server announces the matching to the portal client to establish an instance connection with the portal client. 
         [0159]      FIG. 4  is a second flow chart of a device management method according to an embodiment of the disclosure, as shown in  FIG. 4 , the method includes: 
         [0160]    step  401 , a portal client requests to join a portal server. 
         [0161]    The portal server that the portal client requests to join is a portal server pre-configured to perform network access authentication of the portal client. 
         [0162]    the portal client transmits a REQ_JOIN message to the portal server to request to join the portal server, wherein the message carries information regarding a portal protocol version and function required by the portal client. 
         [0163]    Step  402 , the portal server returns a matching result to the portal client. 
         [0164]    The portal server determines, according to received information regarding a portal protocol version and function required by the portal client carried in the REQ_JOIN message, whether the portal server matches the portal client, if yes, the portal server transmits, to the portal client, an ACK_JOIN message with its ErrCode field being 0 to return matching success information; otherwise, the portal server transmits, to the portal client, an ACK_JOIN message with its ErrCode field being 1 to return non-matching information, and saves a portal protocol version and function required by a non-matching portal client. 
         [0165]    The above steps  401  and  402  are a processing process of establishing an instance connection between the portal client and the portal server through capability negotiation. 
         [0166]    Step  403 , the portal client labels a valid instance between the portal client and the portal server having the instance connection therebetween. 
         [0167]    The portal client records the currently established instance connection by labeling a valid instance, the processing of steps  401  to  403  can be exemplified as below: a portal client B requests to join a portal server A 1  and a portal server A 2 , in step  402  the portal server A 1  returns matching success information and the portal server A 2  returns non-matching information, then the portal client B sets a valid instance &lt;portal client B, portal server A 1 &gt;. 
         [0168]    Step  404 , when the portal server upgrades its portal protocol and/or function, the portal server forcibly separates from management of a matching portal client. 
         [0169]    The portal server requests to forcibly separate from the management of the portal client through transmitting a FORCE_LEAVE to the matching portal client so as to disconnect the instance connection with the portal client. 
         [0170]    Step  405 , the portal client acknowledges that the portal server has separated from its management. 
         [0171]    When receiving the FORCE_LEAVE message, the portal client cancels setting a valid instance including the portal server transmitting the FORCE_LEAVE message, and returns an ACK_FORCE_LEAVE message to the portal server to announce that the portal server has separated from its management. 
         [0172]    The processing of steps  401  to  403  is exemplified as below: when upgrading its portal protocol and/or function, a portal server A 1  transmits a FORCE_LEAVE message to its matching portal client B, the portal client B cancels its set valid instance &lt;portal client B, portal server A 1 &gt;, and returns an ACK_FORCE_LEAVE message to the portal server A 1  to announce that the portal server A 1  has separated from its management. 
         [0173]    Step  406 , the portal client requests to join a portal server upgrading its portal protocol and/or function. 
         [0174]    The portal client periodically transmits a REQ_JOIN message to the portal server that have separated from its management to request to re-join. 
         [0175]    Step  407 , the portal server after completing its portal protocol and/or function upgrading returns matching result information to a portal client requesting to join. 
         [0176]    The portal server determines after upgrading its portal protocol and/or function whether the updated portal protocol and/or function match a portal protocol and function required by the portal client requesting to join, if yes, the portal server transmits, to the portal client, an ACK_JOIN message with its ErrCode field being 0 to return matching success information, and proceed to step  408 ; otherwise, the portal server transmits, to the portal client, an ACK_JOIN message with its ErrCode field being 1 to return non-matching information, stores a portal protocol version and function required by a non-matching portal client, and ends the processing. 
         [0177]    The above steps  406  and  407  are a processing process of performing capability negotiation by the portal client and the portal server having their instance connection disconnected. 
         [0178]    Step  408 , the portal client labels a valid instance of the portal client and the portal server having the instance connection therebetween. 
         [0179]    The processing of steps  406  to  408  can be exemplified as below: when a portal client B requests to re-join a portal server A 1  that has forcibly separated from its management in step  405 , if the portal server A 1  returns matching success information to the portal client B, it represents that the portal server A 1  and the portal client B establish an instance connection through capability negotiation, and then the portal client B sets a valid instance &lt;portal client B, portal server A 1 &gt;. 
         [0180]    Step  409 , the portal server after the portal protocol and/or function upgrading announces matching information to its matching portal client. 
         [0181]    When the portal server determines, according to a portal protocol version and function required by the non-matching portal client before the upgrading and stored in step  402 , determines that the portal server after the upgrading matches a portal server that doesn&#39;t match it before the upgrading, the portal server transmits an INFO_NOTIFY message to the portal client to announce that the portal server matches the portal client, and when the portal client receives the INFO_NOTIFY message and determines that the portal server matches the portal client, the portal client performs capability negotiation to establish an instance connection, and the specific processing process is the same as steps  401  to  403 . 
         [0182]    In a preferred embodiment of the disclosure, when upgrading its portal protocol, a portal client requests to separate from management of a portal server matching the portal client to disconnect an instance connection, and performs capability negotiation after the upgrading; when an IP address of the portal client and an IP address pool locally configured at the portal client changes, a portal server matching the portal client updates, according to an announcement from the portal client, a saved IP address of the portal client and saved IP address pool locally configured at the portal client. 
         [0183]      FIG. 5  is a flow chart of a device management method according to an embodiment of the disclosure, as shown in  FIG. 5 , the method includes: 
         [0184]    step  501 , when upgrading its portal protocol, a portal client requests to separate from management of a portal server matching the portal client. 
         [0185]    When upgrading its portal protocol, the portal client cancels a set valid instance, transmits an ASK_LEAVE message to a portal server included in the canceled valid instance, and requests for separation from the management of the portal server so as to disconnect an instance connection with the portal client. 
         [0186]    Step  502 , the portal server matching the portal client acknowledges that the portal client has separated from its management. 
         [0187]    When receiving the ASK_LEAVE message, the portal server labels the portal client as a non-matching portal client, and transmits an ACK_LEAVE message to the portal client to announce that the portal client has separated from its management. 
         [0188]    step  503 , a portal client after the portal protocol upgrading requests to join a portal server. 
         [0189]    The portal server that the portal client requests to join is a portal server pre-configured to perform network access authentication of the portal client. 
         [0190]    the portal client transmits a REQ_JOIN message to the portal server, wherein the message carries information regarding a portal protocol version and function required by the portal client. 
         [0191]    Step  504 , the portal server returns a matching result to the portal client after the upgrading that requests to join. 
         [0192]    The portal server determines, according to received information regarding a required portal protocol version and function carried in the REQ_JOIN message, whether the portal server matches the portal client, if yes, the portal server transmits, to the portal client, an ACK_JOIN message with its ErrCode field being 0 to return matching success information; otherwise, the portal server transmits, to the portal client, an ACK_JOIN message with its ErrCode field being 1 to return non-matching information, and saves a portal protocol version and function required by a non-matching portal client. 
         [0193]    The above steps  503  and  504  are a processing process of performing capability negotiation by the portal client and the portal server having their instance connection disconnected. 
         [0194]    Step  505 , the portal client after the upgrading sets a valid instance between the portal client and the portal server having the instance connection therebetween. 
         [0195]    The portal client records the currently established instance connection by labeling a valid instance, when the portal client after the upgrading receives an ACK_JOIN message with its ErrCode field being 0 returned by the portal server, it represents that the portal server returning the ACK_JOIN message matches the portal client after the upgrading, and then the portal client after the upgrading sets a valid instance of the portal server including the portal client and returning the CK_JOIN message. 
         [0196]    For example, a portal client B after the upgrading requests to join a portal server A 1  and a portal server A 2 , if the portal server A 1  returns an ACK_JOIN message with its ErrCode field being 0, it represents that the portal server A 1  and the portal client B establish an instance connection through capability negotiation, and then the portal client B sets a valid instance &lt;portal client B, portal server A 1 &gt;. 
         [0197]    Step  506 , when an IP address of the portal client and/or an IP address pool locally configured at the portal client, the portal client announces the changed IP address of the portal client and/or the changed IP address pool locally configured at the portal client to the portal server having the instance connection established with the portal client. 
         [0198]    The changed IP address of the portal client and/or the changed IP address pool locally configured at the portal client are carried in an INFO_NOTIFY message. 
         [0199]    Step  507 , the portal server acknowledges that the IP address of the portal client and the IP address pool locally configured at the portal client have been updated. 
         [0200]    The portal server receives the IP address of the portal client and/or the IP address pool locally configured at the portal client, which are carried in the INFO_NOTIFY message, updates its stored IP address of the portal client and/or IP address pool locally configured at the portal client, and returns an ACK_INFO_NOTIFY to acknowledge that the IP address and IP address pool have been updated. 
         [0201]    What described are merely preferable embodiments of the disclosure, and are not intended to limit the disclosure.