【作者】 张娜；

【导师】 王剑；

【作者基本信息】 东北大学 ， 计算机系统结构， 2009， 硕士

【摘要】 随着学校硬件设备的不断健全,用户的复杂性及多样性,对网络提出了安全认证的需求,网络需要运营,因此也有了计费收费的需要。各个学校根据自身特点,开发一套合理、有效的认证计费系统是十分必要的。本文主要介绍了一个校园网认证计费系统的开发过程。该系统采用复合的层次结构,包括应用层、网络层、业务逻辑层和物理层。以Microsoft SQL Server 2000作为数据库,选用Windows下比较流行的GCC移植版-Cygwin实现底层认证、计费等通讯功能,采用基于J2EE的Struts+Hibernate+Spring结构实现上层Web管理功能。该系统基于802.1X协议对用户进行身份认证,做到入网即认证,保证只有申请开通的合法用户才‘可能使用网络；用RADIUS服务器配合流量统计装置对用户进行流量统计,并制定了灵活多样的计费策略和折扣策略对用户进行计费;以Web方式作为本系统的管理方式,通过优化管理界面、计费策略来降低管理者的工作强度,同时也为用户提供自助查询服务,让用户感觉到使用方便,收费合理。论文首先从系统的开发背景、现实需求和实现意义谈起；之后,介绍了传统的安全认证方法和基于802.1X+RADIUS的校园网的认证；然后重点介绍了系统的设计和实现。设计部分从系统实现目标、实现思路和系统分析着手,提出了系统的总体设计方案,并对系统的功能设计和数据库设计做了详细的说明；实现部分重点介绍了认证子系统、计费子系统和Web管理子系统等功能模块的实现。最后,对主要功能模块进行了详细测试,给出了测试方法,并对测试内容和测试结果作了详细的描述。更多还原

【Abstract】 With the development of hardware device on campus, and the complexity and variety of users, the requirement of security authentication has been put forward network. As network should be well-operated, the requirement of accounting has been discoverd. According to the features of each school, it is essential to develop a reasonable and effective authentication and accounting system.The development process of a campus network authentication and accounting system is introduced in this thesis. The system adopts complex hierarchical structure, including application layer, network layer, business logic layer and physical layer. Microsoft SQL Server 2000 is used as the database, Cygwin that is the ported version of GCC on the windows platform is used to implement the underlying communication functions such as authentication and accounting, and the structure of Struts+Hibernate+ Spring based on J2EE is adopted to implement top web management. Users’ identification authentication is achieved based on 802.1X; therefore the authentication is needed at the moment of network access, ensuring that only legal users who have applied for permission can get access to network. RADIUS server combined with data flow calculation instrument is used to make data flow statistics for users. In addition, various flexible accounting strategies and discounting strategies are established to charge users. Taking web method as management method of such system, labor intensity of managers has been decreased by optimizing management interface and accounting strategy. Meanwhile self-service is also provided to users to make that it is convenient to use and charges reasonably.In this thesis the system development background, the realistic demand and the implementation significance are mentioned firstly. After that, traditional security authentication method and campus network authentication based on 802.1X+RADIUS are introduced. Then the design and implementation of system are discussed with emphasis. In the system design part, embarking from design objective, implementation thought and system analysis, the overall design scheme of the system is proposed, and the function design and database design are described in detail. In the system implementation part, the implementation of authentication sub-system, accounting sub-system and Web management sub-system are introduced with emphasis. At last, detailed testing is done on the main modules of system, the environment and method of testing are given, and a detailed description is listed on the contents and results of testing.更多还原