CN104486191A - Mobile terminal access method - Google Patents

Abstract

The invention discloses a mobile terminal access method, and relates to the field of network security. The invention aims to solve the problem that unified scheduling cannot be performed in the prior art. The method comprises the following steps: s10, the user terminal sends an access request to a preset access server, the access server can receive the access requests sent by all the user terminals in a unified way, and the access requests carry access modes; s20, the access server receives the access request sent by the user terminal and determines the access mode according to the access request; s30, if the access mode is VPDN line access, the access server sends an access request to a preset LNS server; s40, the LNS server receives the access request sent by the access server, verifies the access request to obtain a verification result, and returns the verification result to the access server; s50, the access server receives the verification result returned by the LNS server; and S60, when the verification result is that the verification fails, the access server returns a message of the failure of the verification to the user terminal.

Description

Mobile terminal access method

technical field

The invention relates to the field of network security, in particular to a mobile terminal access method.

Background technique

In the prior art, when a mobile terminal accesses an information system, it can be accessed through an Internet line, or through a virtual private dial-up network (Virtual Private Dial-up Networks, VPDN) line; Internet line access and VPDN line access Need to connect to VPN gateway and LNS server respectively, and VPN gateway and LNS server are independent of each other, that is, Internet line access and VPDN line access are independent of each other.

However, since Internet line access and VPDN line access are independent of each other, users cannot perform unified scheduling.

Contents of the invention

The invention provides a mobile terminal access method, which can facilitate users to uniformly schedule access requests of Internet lines and VPDN lines.

The present invention adopts the following technical solution to solve the technical problem: a mobile terminal access method, including: S10, the user terminal sends an access request to a preset access server, and the access server can uniformly receive the access requests sent by all user terminals request, the access request carries the access method; S20, the access server receives the access request sent by the user terminal, and determines the access method according to the access request; S30, if the access The method is VPDN line access, the access server sends the access request to a preset LNS server; S40, the LNS server verifies the access request after receiving the access request sent by the access server , obtain a verification result, and return the verification result to the access server; S50, the access server receives the verification result returned by the LNS server; S60, when the verification result is verification failure, the access The server returns a verification failure message to the user terminal.

Optionally, the mobile terminal access method provided in this embodiment further includes: S70. When the verification result is successful, the access server returns a prompt message prompting the user to input VPN information to the user terminal; S80. The user terminal prompts after receiving the prompt message sent by the access server; S90. The user terminal receives the VPN information input by the user according to the prompt, and sends it to the access server. VPN type of access; S91, the access server receives the VPN information sent by the user terminal, and selects the first VPN gateway from the preset VPN gateway cluster according to the VPN information; S92, the access server sends The first VPN gateway sends the VPN information; S93. The first VPN gateway receives the VPN information sent by the access server, and establishes a first communication logical channel with the user terminal according to the VPN information.

Optionally, the step S91 in the mobile terminal access method provided in this embodiment includes: S911, the access server determines the VPN type according to the VPN information; S912, the access server determines the VPN type according to the VPN type from the preset It is assumed that a first target gateway cluster is selected from the VPN gateway cluster; S913. The access server selects a first VPN gateway from the first target gateway cluster.

Optionally, the mobile terminal access method provided in this embodiment further includes: S94. The user terminal receives the authentication information input by the user, and sends the authentication information to the first VPN gateway through the first communication logical channel. Information; S95. The first VPN gateway receives the authentication information sent by the user terminal, and performs identity authentication according to the authentication information.

Optionally, the mobile terminal access method provided in this embodiment further includes: S96. If Internet line access is used, the access server selects a second VPN gateway from a preset VPN gateway cluster according to the access request; The access request also carries the VPN type to be accessed; S97, the access server sends the access request to the second VPN gateway; S98, the second VPN gateway receives the access request, and establish a second communication logical channel with the user terminal according to the access request.

Optionally, the step S94 in the mobile terminal access method provided in this embodiment includes: S941, the access server determines the VPN type according to the access request; S942, the access server determines the VPN type according to the VPN type Select a second target gateway cluster from the preset VPN gateway cluster; S943. The access server selects a second VPN gateway from the second target gateway cluster.

Optionally, S20 in the mobile terminal access method provided in this embodiment includes: S201, the access server monitors whether an access request is received; if yes, execute S202; otherwise, re-execute S201; In S202, the access server determines an access mode according to the access request.

Optionally, before the step S30, the mobile terminal access method provided in this embodiment further includes: S21, the access server judges whether it supports the access method; if yes, execute the step S30.

Optionally, the mobile terminal access method provided in this embodiment further includes: S22, if not supported, the access server sends a message that the access mode is not supported to the user terminal.

The present invention has the following beneficial effects: the access request is received by the access server, and the access mode is determined according to the access request; when the access mode is VPDN line access, the access server sends the access request to the LNS server , so that the LNS server verifies the access request, and returns the verification result to the user terminal when the verification fails. Since the access requests sent by all user terminals are uniformly received through the access server, the Internet line access and VPDN line access can be uniformly scheduled through the access server, so that the technical solution provided by the embodiment of the present invention solves the problem of the prior art Since Internet line access and VPDN line access are independent of each other, users cannot perform unified scheduling. In addition, the solution manages the access requests sent by all user terminals through the same access server, which can also reduce hardware costs and improve management efficiency.

Description of drawings

FIG. 1 is a flowchart of a mobile terminal access method provided in Embodiment 1 of the present invention;

FIG. 2 is a flowchart 1 of a mobile terminal access method provided in Embodiment 2 of the present invention;

FIG. 3 is a second flow chart of the mobile terminal access method provided by Embodiment 2 of the present invention;

FIG. 4 is a flowchart of a mobile terminal access method provided in Embodiment 3 of the present invention;

FIG. 5 is a flowchart of a mobile terminal access method provided in Embodiment 4 of the present invention;

FIG. 6 is a first flowchart of a mobile terminal access method provided in Embodiment 5 of the present invention;

FIG. 7 is a second flow chart of the mobile terminal access method provided by Embodiment 5 of the present invention.

Detailed ways

The technical solutions of the present invention will be further described below in conjunction with the embodiments and the accompanying drawings.

Example 1

As shown in Figure 1, this embodiment provides a mobile terminal access method, including:

Step 101, the user terminal sends an access request to a preset access server.

In this embodiment, in step 101, the access server can uniformly receive the access requests sent by all user terminals; the access request carries the access mode. Wherein, the access mode includes: Internet line access or VPDN line access.

Step 102, the access server receives the access request sent by the user terminal, and determines the access method according to the access request.

In this embodiment, step 102 may include: the access server monitors whether an access request is received; if yes, the access server determines an access method according to the access request; otherwise, continues to monitor.

Step 103, if the access mode is VPDN line access, the access server sends the access request to the preset LNS server.

Step 104: After receiving the access request sent by the access server, the LNS server verifies the access request, obtains a verification result, and returns the verification result to the access server.

Step 105, the access server receives the verification result returned by the LNS server.

Step 106, when the verification result is verification failure, the access server returns a verification failure message to the user terminal.

The present invention has the following beneficial effects: the access request is received by the access server, and the access mode is determined according to the access request; when the access mode is VPDN line access, the access server sends the access request to the LNS server , so that the LNS server verifies the access request, and returns the verification result to the user terminal when the verification fails. Since the access requests sent by all user terminals are uniformly received through the access server, the Internet line access and VPDN line access can be uniformly scheduled through the access server, so that the technical solution provided by the embodiment of the present invention solves the problem of the prior art Since Internet line access and VPDN line access are independent of each other, users cannot perform unified scheduling. In addition, the solution manages the access requests sent by all user terminals through the same access server, which can also reduce hardware costs and improve management efficiency.

Example 2

As shown in Figure 2, this embodiment provides a mobile terminal access method, which is similar to that shown in Figure 1, the difference is that it also includes:

Step 107, when the verification result is that the verification is successful, the access server returns a prompt message prompting the user to input VPN information to the user terminal.

Step 108, the user terminal prompts after receiving the prompt message sent by the access server.

Step 109, the user terminal receives the VPN information input by the user according to the prompt, and sends it to the access server.

In this embodiment, the VPN information in step 109 carries the VPN type to be accessed.

Step 110, the access server receives the VPN information sent by the user terminal, and selects a first VPN gateway from the preset VPN gateway cluster according to the VPN information.

In this embodiment, the process of selecting the first VPN gateway in step 110 may include: the access server determines the VPN type according to the VPN information; the access server selects the first target gateway cluster from the preset VPN gateway cluster according to the VPN type; then The ingress server selects the first VPN gateway from the first target gateway cluster. In particular, in order to achieve load balancing, the process for the access server to select the first VPN gateway from the first target gateway cluster may be: obtain the first VPN gateway with the least access pressure from the first target gateway cluster by polling .

Step 111, the access server sends VPN information to the first VPN gateway.

Step 112, the first VPN gateway receives the VPN information sent by the access server, and establishes a first communication logical channel with the user terminal according to the VPN information.

Further, as shown in FIG. 3, the mobile terminal access method provided in this embodiment may also include:

Step 113, the user terminal receives the authentication information input by the user, and sends the authentication information to the first VPN gateway through the first communication logical channel.

Step 114, the first VPN gateway receives the authentication information sent by the user terminal, and performs identity authentication according to the authentication information.

In this embodiment, after successfully passing the LNS verification, a VPN gateway is required, which reduces the dependence on the operator's private network—VPDN private line, and improves the security of virtual private network access.

The present invention has the following beneficial effects: the access request is received by the access server, and the access mode is determined according to the access request; when the access mode is VPDN line access, the access server sends the access request to the LNS server , so that the LNS server verifies the access request, and returns the verification result to the user terminal when the verification fails. Since the access requests sent by all user terminals are uniformly received through the access server, the Internet line access and VPDN line access can be uniformly scheduled through the access server, so that the technical solution provided by the embodiment of the present invention solves the problem of the prior art Since Internet line access and VPDN line access are independent of each other, users cannot perform unified scheduling. In addition, the solution manages the access requests sent by all user terminals through the same access server, which can also reduce hardware costs and improve management efficiency.

Example 3

As shown in Figure 4, the mobile terminal access method provided in this embodiment is similar to that shown in Figure 1, the difference is that it also includes:

Step 115, if it is Internet line access, the access server selects a second VPN gateway from the preset VPN gateway cluster according to the access request.

In this embodiment, if the access is via an Internet line, the access request not only carries the access method, but also carries the type of VPN to be accessed. The process of selecting the second VPN gateway through step 115 includes: the access server determines the VPN type according to the access request; the access server selects the second target gateway cluster from the preset VPN gateway cluster according to the VPN type; the access server selects the second target gateway cluster from the first VPN gateway cluster; The second VPN gateway is selected from the second target gateway cluster. In particular, in order to achieve load balancing, the process of selecting the second VPN gateway by the access server includes: obtaining the second VPN gateway with the least access pressure from the second target gateway cluster in a polling manner.

Step 116, the access server sends an access request to the second VPN gateway.

Step 117, the second VPN gateway receives the access request sent by the access server, and establishes a second communication logical channel with the user terminal according to the access request.

The present invention has the following beneficial effects: the access request is received by the access server, and the access mode is determined according to the access request; when the access mode is VPDN line access, the access server sends the access request to the LNS server , so that the LNS server verifies the access request, and returns the verification result to the user terminal when the verification fails. Since the access requests sent by all user terminals are uniformly received through the access server, the Internet line access and VPDN line access can be uniformly scheduled through the access server, so that the technical solution provided by the embodiment of the present invention solves the problem of the prior art Since Internet line access and VPDN line access are independent of each other, users cannot perform unified scheduling. In addition, the solution manages the access requests sent by all user terminals through the same access server, which can also reduce hardware costs and improve management efficiency.

Example 4

As shown in Figure 5, the mobile terminal access method provided in this embodiment includes:

Step 501, the user terminal sends an access request to a preset access server. This process is similar to step 101 shown in FIG. 1 , and will not be repeated here.

Step 502, the access server monitors whether an access request is received.

In this embodiment, when the monitoring result of step 502 is yes, step 503 is executed; otherwise, step 502 is re-executed.

Step 503, the access server determines the access mode according to the access request.

From step 504 to step 507, if the access mode is VPDN line access, verify through the LNS server, and return a message of verification failure to the user terminal when the verification result is verification failure. The above process is similar to step 103 to step 106 shown in FIG. 1 , and will not be repeated here.

The present invention has the following beneficial effects: the access request is received by the access server, and the access mode is determined according to the access request; when the access mode is VPDN line access, the access server sends the access request to the LNS server , so that the LNS server verifies the access request, and returns the verification result to the user terminal when the verification fails. Since the access requests sent by all user terminals are uniformly received through the access server, the Internet line access and VPDN line access can be uniformly scheduled through the access server, so that the technical solution provided by the embodiment of the present invention solves the problem of the prior art Since Internet line access and VPDN line access are independent of each other, users cannot perform unified scheduling. In addition, the solution manages the access requests sent by all user terminals through the same access server, which can also reduce hardware costs and improve management efficiency.

Example 5

As shown in Figure 6, the mobile terminal access method provided in this embodiment includes:

From step 601 to step 602, the user terminal sends an access request to the access server, and the access server determines the access mode according to the access request. This process is similar to step 101 to step 102 shown in FIG. 1 , and will not be repeated here.

Step 603, the access server judges whether it supports the access mode.

In this embodiment, if it is determined in step 603 that the access server supports the access mode, step 604 is executed.

From step 604 to step 607, if the access mode is VPDN line access, verify through the LNS server, and return a message of verification failure to the user terminal when the verification result is verification failure. The above process is similar to step 103 to step 106 shown in FIG. 1 , and will not be repeated here.

Further, as shown in FIG. 7, if it is determined in step 603 that the access server does not support the access method, the mobile terminal access method provided in this embodiment further includes:

Step 608, the access server sends a message that the access method is not supported to the user terminal.

The present invention has the following beneficial effects: the access request is received by the access server, and the access mode is determined according to the access request; when the access mode is VPDN line access, the access server sends the access request to the LNS server , so that the LNS server verifies the access request, and returns the verification result to the user terminal when the verification fails. Since the access requests sent by all user terminals are uniformly received through the access server, the Internet line access and VPDN line access can be uniformly scheduled through the access server, so that the technical solution provided by the embodiment of the present invention solves the problem of the prior art Since Internet line access and VPDN line access are independent of each other, users cannot perform unified scheduling. In addition, the solution manages the access requests sent by all user terminals through the same access server, which can also reduce hardware costs and improve management efficiency.

The mobile terminal access method provided by the embodiment of the present invention can be applied to information systems such as national e-government extranets with diversified access terminals and high security requirements.

The sequence of the above embodiments is only for convenience of description, and does not represent the advantages or disadvantages of the embodiments.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (9)

1. a mobile terminal cut-in method, is characterized in that, comprising:

S10, user terminal send access request to default access server, and described access server can unify the access request receiving the transmission of all user terminals, carries access way in described access request;

S20, described access server receive the access request that described user terminal sends, and determine the mode of access according to described access request;

If the mode of S30 access is the access of VPDN circuit, described access server sends described access request to default LNS server;

S40, described LNS server are verified described access request after receiving the access request of described access server transmission, are verified result, and return this result to described access server;

S50, described access server receive the result that described LNS server returns;

S60, when described the result is authentication failed, described access server returns the message of authentication failed to described user terminal.

2. mobile terminal cut-in method according to claim 1, is characterized in that, also comprise:

S70, when described the result is for being proved to be successful, described access server returns prompting user to described user terminal and inputs the prompting message of VPN information;

S80, described user terminal are pointed out after receiving the prompting message of described access server transmission;

S90, described user terminal receive the VPN information of user according to prompting input, and send to described access server, carry VPN type to be accessed in described VPN information;

S91, described access server receive the VPN information that described user terminal sends, and from default vpn gateway cluster, choose the first vpn gateway according to described VPN information;

S92, described access server send described VPN information to described first vpn gateway;

S93, described first vpn gateway receive the VPN information that described access server sends, and link up logical channel according to described VPN information foundation with first of described user terminal.

3. mobile terminal cut-in method according to claim 1, is characterized in that, described S91, comprising:

S911, described access server determine VPN type according to described VPN information;

S912, described access server choose first object gateway cluster according to this VPN type from default vpn gateway cluster;

S913, described access server choose the first vpn gateway from described first object gateway cluster.

4. mobile terminal cut-in method according to claim 2, is characterized in that, also comprise:

S94, described user terminal receive the authentication information of user's input, and send described authentication information by described first communication logical channel to described first vpn gateway;

S95, described first vpn gateway receive the authentication information that described user terminal sends, and carry out authentication according to described authentication information.

5. mobile terminal cut-in method according to claim 1, is characterized in that, also comprise:

S96 is if the Internet lines access, and described access server chooses the second vpn gateway according to described access request from default vpn gateway cluster; Described access request also carries VPN type to be accessed;

S97, described access server send described access request to described second vpn gateway;

S98, described second vpn gateway receive the access request that described access server sends, and link up logical channel according to described access request foundation with second of described user terminal.

6. mobile terminal cut-in method according to claim 5, is characterized in that, described S94, comprising:

S941, described access server determine VPN type according to described access request;

S942, described access server choose the second intended gateway cluster according to this VPN type from default vpn gateway cluster;

S943, described access server choose the second vpn gateway from described second intended gateway cluster.

7. mobile terminal cut-in method as claimed in any of claims 1 to 6, is characterized in that, described S20, comprising:

S201, described access server monitor whether receive access request; If so, S202 is performed; Otherwise, re-execute described S201;

The mode accessed determined by described S202, described access server according to this access request.

8. mobile terminal cut-in method as claimed in any of claims 1 to 6, is characterized in that, before described S30, also comprises:

S21, described access server judge its mode whether supporting this access; If supported, perform described S30.

9. mobile terminal cut-in method according to claim 8, is characterized in that, also comprise:

S22, if do not supported, described access server sends the message not supporting the mode of this access to described user terminal.