US 11,895,157 B2 · Network security management method, and apparatus

Abstract

Embodiments of this application provide a network security management method and an apparatus. The method includes: receiving, by a first network device, a session request sent by a terminal device, where the session request is used to request establishment of a first session with a first data network, the session request includes first authentication information for the first session, and the first authentication information includes identifier information of the first data network; obtaining, by the first network device, second authentication information for a second session of the terminal device, where the second authentication information includes identifier information of a second data network to which the second session is connected; and if the identifier information of the first data network is the same as the identifier information of the second data network, authorizing the terminal device to establish the first session with the first data network.

Claims21

Dependent claims

A method for network security management, the method comprising:

forwarding, by a second network device to a first network device, a first session request from a terminal device, wherein the first session request is used to request establishment of a first session with a first data network, wherein the first session request comprises identifier information of the first data network;
receiving, by the first network device, the first session request;
obtaining, by the first network device, identifier information of a second data network that has previously authenticated a second session of the terminal device, wherein the second session has been established between the terminal device and the second data network;
and
in response to determining that the identifier information of the first data network is the same as the identifier information of the second data network, authorizing, by the first network device, the terminal device to establish the first session with the first data network.

2 more elements

A system, comprising:

a first device;
and
a second device,
wherein the second device is configured to forward a first session request from a terminal device to the first device;
and
wherein the first device is configured to:
receive the first session request from the terminal device via the second device, wherein the first session request is used to request establishment of a first session with a first data network, wherein the first session request comprises identifier information of the first data network;
obtain identifier information of a second data network that has previously authenticated a second session of the terminal device, wherein the second session has been established between the terminal device and the second data network;
and
in response to determining that the identifier information of the first data network is the same as the identifier information of the second data network, directly authorize the terminal device to establish the first session with the first data network without authenticating the first session by the first data network.

7 more elements

Dependencies are inferred from the claim text.

Network security management method, and apparatus

Life of this patent

Network security management method, and apparatus

Life of this patent

Abstract

Claims21