Authentication server and method for controlling mobile communication terminal access to virtual private network

An authentication server, comprising a non-transitory computer readable medium configured to store computer executable instructions, and a processor configured to execute the computer executable instructions in the following modules:

• a first store module, to store a first characteristic information of a mobile communication terminal allowed to access;
• a receiving module, to receive a virtual private network (VPN) access requesting message from a terminal to access;
• a judgment module, connected to the receiving module, to judge the type of the terminal to access and obtain a judgment result;
• an information acquisition module, connected to the judgment module, to obtain a second characteristic information of the terminal to access when the judgment result indicates that the terminal to access is a mobile communication terminal;
• a first comparison module, connected to the first store module and the information acquisition module, to compare the second characteristic information with the first characteristic information and obtain a first comparison result;
• a first execution module, connected to the first comparison module, to allow the terminal to access to continuatively perform an access process, when the first comparison result indicates that the second characteristic information is identical with one piece of characteristic information in the first characteristic information, otherwise refuse the terminal to access to continuatively perform the access process;
• a second store module, connected to a second comparison module, to store a third characteristic information of the mobile communication terminal which is not allowed to access;
• the second comparison module, connected to the information acquisition module and the first execution module, to compare the second characteristic information with the third characteristic information when the first execution module refuses the terminal to access to continuatively perform the access process, and obtain a second comparison result;
• and
• a second execution module, connected to the second comparison module, to send an instruction for deleting VPN configuration information to the terminal to access when the second comparison result indicates that the second characteristic information is identical with one piece of characteristic information in the third characteristic information.