Patent ID: 8621572

Claim:
A method for updating an Authentication, Authorization and Accounting (AAA) session in a network system comprising a first and second network access servers, comprising: receiving an AAA session request sent by the second network access server, wherein the AAA session request comprises a second session identifier and an EAP Re-authentication Protocol (ERP) message; and updating a session according to the second session identifier and a stored first session identifier after successful user authentication that is performed according to the ERP message, wherein the first session identifier and the second session identifier correspond to a same user; wherein updating the session according to the second session identifier and the stored first session identifier comprises: associating the first session identifier with the second session identifier; and performing session identifier replacement on a received session according to the association between the first session identifier and the second session identifier; wherein before receiving the AAA session request carrying the second session identifier, the method further comprises: when a user is attached to the first network access server, receiving an AAA session request sent by the first network access server to the home AAA server, wherein the AAA session request comprises a third session identifier and an EAP message; storing the third session identifier; creating a first session having a session identifier being the first session identifier, and associating the first session identifier with the third session identifier; and using the first session identifier to replace the third session identifier in the AAA session request sent by the first network access server, and forwarding, to the AAA server, the AAA session request on which session identifier replacement is performed, so that the home AAA server stores the first session identifier after successful user authentication that is performed according to the EAP message.