Network authentication method, method for client to request authentication, client, and device

A network server including a non-transitory computer readable medium including computer-executable instructions for carrying out a network authentication device, the network authentication device comprising:

• a first receiving unit, configured to receive synchronize (SYN) data sent by a client, wherein the SYN data comprises a sequence number SEQ1 and a network parameter, and the network parameter comprises an Identification (ID) in the header of the SYN data;
• a sending unit, configured to send synchronize acknowledge (SYN_ACK) data to the client in response to the SYN data received by the first receiving unit, wherein the SYN_ACK data comprises an acknowledgment number ACK2, a value of ACK2 is the value obtained by carrying out a function transformation according to the network parameter of the SYN data, and the network parameter used in the function transformation comprises the ID in the header of the SYN data;
• a second receiving unit, configured to receive RESET (RST) data sent by the client in response to the SYN_ACK data sent by the sending unit, wherein the RST data comprises a sequence number SEQ3 or an acknowledgment number ACK3, and a value of ACK3 is the same as that of SEQ3 or ACK2, and the RST data further comprises a network parameter the same as that of the SYN data;
• a calculating unit, configured to carry out the function transformation according to the network parameter of the RST data received by the second receiving unit to obtain a check value CHK;
• and
• an authenticating unit, configured to pass the authentication of the client when CHK calculated by the calculating unit matches SEQ3 or ACK3 of the RST data.

A network client including a non-transitory computer readable medium including computer-executable instructions for carrying out a set of functional components, the functional components comprising:

• a sending unit, configured to send synchronize (SYN) data to a gateway, wherein the SYN data comprises a sequence number SEQ1 and a network parameter, and the network parameter comprises an Identification (ID) in the header of the SYN data;
• a receiving unit, configured to receive synchronize acknowledge (SYN_ACK) data sent by the gateway in response to the SYN data, wherein the SYN_ACK data comprises an acknowledgment number ACK2, a value of ACK2 is the value obtained by carrying out a function transformation according to the network parameter of the SYN data, and the network parameter used in the function transformation comprises the ID in the header of the SYN data;
• and
• a judging unit, configured to judge whether the value of ACK2 is the same as an expected value, and if the value of ACK2 is different from the expected value, send RESET (RST) data to the gateway in response to the SYN_ACK data, wherein the RST data comprises a sequence number SEQ3 or an acknowledgment number ACK3, a value of SEQ3 or ACK3 is the same as that of ACK2, and the RST data further comprises a network parameter the same as that of the SYN data;
• and instruct the gateway to authenticate the client according to the RST data and SEQ3 or ACK3.