移动过程中Web认证连续性的设计与实现

Design and Implementation of Continuity of Web Authentication During Mobile Handoff

为了解决已经通过Web认证上网的用户在从一个接入路由器移动到另外一个接入路由器之后,由于通信链路的中断被迫重新进行Web认证而造成Web认证服务在移动切换情况下的不连续的问题。在普通Web认证的基础上加入了precheck过程,通过在认证网关强迫用户重定向到认证服务器进行Web认证之前先查询该用户的认证状态,保证已通过认证的用户无需再次认证,其发送的数据包被直接放行,从而保证了Web认证在移动切换过程中的连续性。

After a client＇s movement from one access router to another, the communication connection will be broken. Therefore the client can＇t get normal service from the Internet until an extra authentication process forced by authentication gateway can be finished even if it has passed the Web authentication before the movement. In order to solve this problem, a precheck process can be added into normal Web authentication process. Under the precheck mode： authentication gateway will check the client＇s authentication status from authentication server before forcing the client authentication when a client＇s http packet arrives. If the client has passed authentication already, its packet will be allowed to pass directly without extra authentication. As a result, this design guarantees the continuity of Web authentication during mobile handoff.