Radius

Radius (Remote Authentication Dial-In User Service) is a protocol that allows the implementation of login, authentication, and collection of data about the resources involved for each user.

Radius was created for data exchange between the used devices and the central platform. It is used for billing system of resources used by a certain subscriber/user.

Diameter protocol borrows from Radius, improving its various aspects quite significantly. This next generation protocol is used for authorization, authentication, and AAA (Authentication, Authorization, and Accounting).

Diameter is widely used in IMS architecture, and is used to transfer AAA data between different IMS structures. Diameter is used in mobile operator networks.

Radius capabilities

. Radius is an element of a large billing system, Radius-server is a special interface that provides work with telecommunication server and switches, routers and is able to implement various auxiliary services for this system, which can be divided into: general, authorization, authentication and accounting.

Among the general ones:

• management of the subscriber’s account from a personal cabinet (e.g., through an online interface);
• defining access rules (PIN and login) for the provision of limited services (e.g., Internet access);
• blocking of the subscriber’s account after reaching a specified limit or a specified parameter manually or automatically;
• collection, systematization and storage of information about user sessions;
• forming reports on certain criteria;
• forming and sending invoices for payment of services;
• authentication of server requests from the service system.

. Among the authentication ones:

• entry and authentication of a subscriber connecting to the Radius server;
• analyzing data from the subscriber’s account on request.

Among the authorization ones:

• sending data about blocking the account of a certain subscriber;
• distribution of authorizations for access to some services;
• distribution of information based on the statistics of service usage by the user.

Among the accounting ones:

• online accounting with the help of Radius server;
• real-time accounting of subscriber funds;
• session duration notifications;
• forced termination of a particular session;
• sending a BOOT message packet (when the system reboots to terminate sessions).

Radius is most often used to connect to wireless and private (Wi-Fi, VPN) networks, DSL and other types of network access. Radius is characterized by openness, ease of implementation and today is considered literally the standard for providing remote authentication.