CN102238543A - Wireless Portal authentication method and access controller - Google Patents

Wireless Portal authentication method and access controller Download PDF

Info

Publication number
CN102238543A
CN102238543A CN2010101608853A CN201010160885A CN102238543A CN 102238543 A CN102238543 A CN 102238543A CN 2010101608853 A CN2010101608853 A CN 2010101608853A CN 201010160885 A CN201010160885 A CN 201010160885A CN 102238543 A CN102238543 A CN 102238543A
Authority
CN
China
Prior art keywords
sta
authentication
address
vlan
certificate server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2010101608853A
Other languages
Chinese (zh)
Inventor
乔肖桉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hangzhou H3C Technologies Co Ltd
Original Assignee
Hangzhou H3C Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hangzhou H3C Technologies Co Ltd filed Critical Hangzhou H3C Technologies Co Ltd
Priority to CN2010101608853A priority Critical patent/CN102238543A/en
Publication of CN102238543A publication Critical patent/CN102238543A/en
Pending legal-status Critical Current

Links

Images

Abstract

The invention discloses a wireless Portal authentication method and an access controller. The access controller (AC) executes Portal authentication, controls a media access control (MAC) address of a station (STA) in the Portal authentication, and separates the Portal authentication from an Internet protocol (IP) address of a user. The MAC address of the STA is invariable, so only the IP address is required to be applied for according to a switched virtual local area network (VLAN) without performing the Portal authentication on the IP address again when the VLAN is switched after the Portal authentication to simplify the VLAN switching operation of the STA.

Description

A kind of method and wireless controller of wireless Portal authentication
Technical field
The present invention relates to inlet (Portal) authentication techniques, refer to a kind of method and wireless controller of wireless Portal authentication especially.
Background technology
The Portal authentication is also referred to as web authentication usually, and the Portal authentication website is also referred to as portal website.When unauthenticated user was surfed the Net, the access device force users signed in to Portal server by the Web mode, and the server that the user can only the free access specified sites is when the user just can the internet usage resource after portal website is by authentication.
Referring to Fig. 1, Fig. 1 carries out the flow chart of Portal authentication for wireless client (STA) in the wireless network.Concrete steps are as follows:
In step 101, STA sends the HTTP request to wireless controller (AC).
In step 102, AC returns the HTTP redirection instruction to STA.
In step 103, STA sends connection request according to the Portal server address of carrying in the redirect instruction to Portal server.
In step 104, Portal server is to the STA return authentication page.
In step 105, STA sends authentication request message to Portal server, wherein carries information such as user name, password.
In step 106, Portal server is to the authentication request message of AC transmission at current STA.
In step 107, AC sends the authentication request message of receiving from Portal server to certificate server.
In step 108, certificate server authenticates current STA according to the information of carrying in the authentication request message, after authentication is passed through, sends authentication to AC and passes through message.
In step 109, AC by behind the message, based on the IP address of current STA, opens the authority of this STA access internet in the authentication of receiving the certificate server transmission; And send authentication to Portal server and pass through message.
In step 110, Portal server is notified current STA authentication success after receiving that message is passed through in the authentication of AC transmission.Then, current STA has obtained the claim of access internet, and can pass through the AC access internet.
In the prior art, after STA passes through service set (SSID, Service Set Identifier) access of radio network, can be divided into acquiescently among the VLAN of this SSID correspondence.Because the employed IP of STA address is corresponding with affiliated VLAN, therefore when STA will switch VLAN, the VLAN after just must correspondingly switching redistributed the IP address.According to flow process shown in Figure 1 as can be known, since Portal authentication at be the IP address of STA, authentication by after open the authority of this IP address access internet, therefore after STA switching VLAN redistributes the IP address, also need to carry out again the Portal authentication, open the authority of distributing IP address, back access internet.
Be not difficult to find out that from foregoing description existing P ortal verification process is unfavorable for that STA carries out switching VLAN operation, handoff procedure complexity.
Summary of the invention
In view of this, main purpose of the present invention is to provide a kind of method and wireless controller of wireless Portal authentication, uses Portal authentication method provided by the present invention and wireless controller, can simplify the flow process that STA switches VLAN.
For achieving the above object, technical scheme of the present invention is achieved in that
A kind of method of wireless Portal authentication, this method comprises:
Wireless controller AC provides Portal certification page to wireless client STA, and receives the authentication information of its transmission, and this authentication information comprises user name, password and the medium access control MAC Address of this STA;
AC is mutual as Portal server and certificate server, sends authentication request message to certificate server, wherein carry current STA's and username and password;
AC is receiving that authentication that certificate server returns by behind the message, according to the MAC Address that current STA sends, opens the authority of this MAC Address access internet, and notifies current STA authentication to pass through.
A kind of wireless controller, this wireless controller comprises processing unit, authentication ' unit and control unit;
Described processing unit is used for providing Portal certification page to wireless client STA, and receives the authentication information of its transmission, and this authentication information comprises user name, password and the medium access control MAC Address of this STA;
Described authentication ' unit is used for certificate server alternately, sends authentication request message to certificate server, wherein carry current STA's and username and password;
Described control unit is used for receiving that authentication that certificate server returns by behind the message, according to the MAC Address that current STA sends, opens the authority of this MAC Address access internet, and notifies current STA authentication to pass through.
The method and the wireless controller of a kind of wireless Portal authentication provided by the present invention carry out the Portal authentication by AC, and the MAC Address to STA are controlled when Portal authenticates, and the Portal authentication is separated with user's IP address.Because the MAC of STA is constant, make when Portal authentication back switching VLAN, only need to apply for the IP address again, and need not carry out the Portal authentication at this IP address again according to the VLAN after switching, simplified the operation of STA switching VLAN.
Description of drawings
Fig. 1 carries out the flow chart of Portal authentication for prior art STA;
Fig. 2 is the exemplary process diagram of the inventive method;
Fig. 3 is the structural representation of wireless controller of the present invention;
Fig. 4 is the flow chart of first embodiment of the invention;
Fig. 5 is the flow chart of second embodiment of the invention;
Fig. 6 is the flow chart of third embodiment of the invention;
Fig. 7 is the flow chart of fourth embodiment of the invention.
Embodiment
In the detailed description of this part, only, illustrate and described preferred embodiment of the present invention by to implementing the example of the desired best mode of inventor of the present invention.It will be appreciated that and not deviate under the prerequisite of the present invention, it is made amendment with regard to each conspicuous aspect.Correspondingly, it is exemplary in itself that drawing and description should be regarded as, rather than restrictive.
Referring to Fig. 2, Fig. 2 is the exemplary process diagram of the inventive method.Specifically comprise: in step 201, AC provides Portal certification page to STA, and receives the authentication information of its transmission, and this authentication information comprises user name, password and the medium access control MAC Address of this STA; In step 202, AC is mutual as Portal server and certificate server, sends authentication request message to certificate server, wherein carry current STA's and username and password; In step 203, AC is receiving that authentication that certificate server returns by behind the message, according to the MAC Address that current STA sends, opens the authority of this MAC Address access internet, and notifies current STA authentication to pass through.
By exemplary process diagram of the present invention as can be seen, in technical solution of the present invention, STA carries out the Portal authentication and the operation of rolling off the production line for convenience, AC is except the role who serves as access device, the role who has also served as Portal server, by AC when Portal authenticates, MAC Address to STA is controlled, the Portal authentication is separated with user's IP address, and the IP address of STA is not controlled, because the MAC of STA is constant, make when Portal authentication back switching VLAN, only need to restart application IP address, and need not carry out the Portal authentication at this IP address again, simplified the operation that STA switches VLAN according to the VLAN after switching.
By the introduction of background technology as can be known,, will be assigned among the VLAN corresponding during by SSID as STA with SSID at access of radio network.Therefore, in technical scheme of the present invention, can be in verification process, promptly in the Portal verification process, issue the information of switching VLAN by certificate server, AC switches to current STA the VLAN of this vlan information correspondence according to the vlan information that certificate server further carries in authenticating by message; And notify current STA, be used for this STA application and switch the corresponding IP address of VLAN, back.
In addition, also can receive authentication that certificate server returns by behind the message at AC, being provided with of preserving according to self switches to corresponding VLAN with current STA; And notify current STA, be used for this STA application and switch the corresponding IP address of VLAN, back.The handoff procedure of back both can occur in authentication that AC receives certificate server by behind the message, notice STA authentication by the time carry out, also can carry out by the back in notice STA authentication.In technical scheme of the present invention, owing to only need the application IP address corresponding again after switching VLAN with VLAN, and need not carry out the Portal authentication at this IP address, therefore can carry out repeatedly the switching of VLAN easily.Wherein, the described setting can be some strategies that switch VLAN, and such as the VLAN that determines according to user name to switch, affiliated class of business is determined the VLAN of switching.
In technical scheme of the present invention, can also use a kind of stateless authentication IP address, this IP address only is used for Portal authentication of the present invention, and is not used in user's actual forwarding, after treating that the user has determined the VLAN at actual place, again according to this corresponding formal IP address of VLAN application.Promptly distribute stateless authentication IP address, be used for STA and use this stateless authentication IP address to authenticate by AC.Wherein, specifically, be not described in detail in this to the known technology that is operating as this area of Dynamic Host Configuration Protocol server application IP address.
AC distributes the process of stateless authentication IP address to be: the prefix in described AC configuration authenticating address pond, and this prefix is 8 bits; And broadcast this address pool prefix, and be used for STA the address pool prefix of receiving is added the back 24bit of self MAC address, generate stateless authentication IP address.
In addition, referring to Fig. 3, Fig. 3 is a kind of wireless controller provided by the invention, and this AC comprises processing unit, authentication ' unit and control unit.Wherein, described processing unit is used for providing Portal certification page to wireless client STA, and receives the authentication information of its transmission, and this authentication information comprises user name, password and the medium access control MAC Address of this STA; Described authentication ' unit is used for certificate server alternately, sends authentication request message to certificate server, wherein carry current STA's and username and password; Described control unit is used for receiving that authentication that certificate server returns by behind the message, according to the MAC Address that current STA sends, opens the authority of this MAC Address access internet, and notifies current STA authentication to pass through.Need to prove, consider clearly that based on describing only show functional module related to the present invention among the described AC in Fig. 3, intention the present invention does not only limit to realize comprising the AC of processing unit, authentication ' unit and control unit.
Wherein, described control unit is further used for the vlan information that further carries in by message in authentication according to certificate server, current STA is switched to the VLAN of this vlan information correspondence; And notify current STA, be used for this STA application and switch the corresponding IP address of VLAN, back.
Wherein, described control unit is further used for receiving authentication that certificate server returns by behind the message that being provided with of preserving according to self switches to corresponding VLAN with current STA; And notify current STA, be used for this STA application and switch the corresponding IP address of VLAN, back.
Wherein, described processing unit is further used for distributing stateless authentication IP address, is used for STA and uses this stateless authentication IP address to authenticate.
Wherein, described processing unit, when distributing stateless authentication IP address, the prefix in configuration authenticating address pond, this prefix is 8 bits; And broadcast this address pool prefix, and be used for STA the address pool prefix of receiving is added back 24 bits of self MAC address, generate stateless authentication IP address.
Below enumerating embodiment makes a more detailed description technical scheme of the present invention.
What embodiment one described is in the Portal verification process, is just switched the flow chart of VLAN by certificate server.
In step 401, STA sends the HTTP request to AC.
The HTTP request that this HTTP request can be any webpage.
In step 402, AC is to the STA return authentication page.
In step 403, STA sends authentication request message to AC, wherein carries user name, password and the information such as MAC Address of self.
In step 404, AC sends the authentication request message of current STA to certificate server.
In step 405, certificate server authenticates current STA according to the information of carrying in the authentication request message, after authentication is passed through, sends authentication by message to AC, carries this STA and switches vlan information.
Certificate server can dispose a VLAN switching table on this equipment, the STA that comes to authenticate is carried out the switching of VLAN based on certain strategy.Strategy can be provided with according to user name, judges according to user name.
In step 406, AC based on the MAC Address of STA, opens the authority of this STA access internet after receiving that message is passed through in authentication; And, STA is switched to corresponding VLAN according to the switching vlan information of receiving.
In step 407, AC passes through to the STA notification authentication, and informs and carried out the VLAN switching.
STA is learning that VLAN switches, then again to the IP address of the Dynamic Host Configuration Protocol server application correspondence of place network.After obtaining new IP address, STA then can authenticate and need not carry out IP address-based Portal again by new vlan access network.
What embodiment two described is in the Portal verification process, by what AC preserved according to self the flow chart that switches STA place VLAN is set.
Step 501~504 are identical with step 401~404 among the embodiment one, are not described in detail in this.
In step 505, certificate server authenticates current STA according to the information of carrying in the authentication request message, after authentication is passed through, sends authentication to AC and passes through message.
In step 506, AC based on the MAC Address of STA, opens the authority of this STA access internet after receiving that message is passed through in the authentication of certificate server transmission; And the configuration of preserving according to self switches to corresponding VLAN with STA.
In step 507, AC passes through to the STA notification authentication, and informs and carried out the VLAN switching.
STA is learning that VLAN switches, then again to the IP address of the Dynamic Host Configuration Protocol server application correspondence of place network.After obtaining new IP address, STA then can authenticate and need not carry out IP address-based Portal again by new vlan access network.
What embodiment three described is after the Portal authentication, by what AC preserved according to self the flow chart that switches STA place VLAN is set.
Step 601~604 are identical with step 401~404 among the embodiment one, are not described in detail in this.
In step 605, certificate server authenticates current STA according to the information of carrying in the authentication request message, after authentication is passed through, sends authentication to AC and passes through message.
In step 606, AC based on the MAC Address of STA, opens the authority of this STA access internet after receiving that message is passed through in the authentication of certificate server transmission; And the configuration of preserving according to self switches to corresponding VLAN with STA.
In step 607, AC passes through to the STA notification authentication.
At this moment, the Portal authentication that AC provides finishes, and STA does not also switch VLAN.When needs STA is carried out VLAN and switch execution in step 608.
In step 608, AC switches to corresponding VLAN according to the configuration of self preserving with STA.
In step 609, AC notice STA has carried out the VLAN switching.
STA is learning that VLAN switches, then again to the IP address of the Dynamic Host Configuration Protocol server application correspondence of place network.After obtaining new IP address, STA then can authenticate and need not carry out IP address-based Portal again by new vlan access network.
In above-mentioned three embodiment, when STA authenticates employed IP address and is the STA initial access network, the Dynamic Host Configuration Protocol server IP address allocated.Because Dynamic Host Configuration Protocol server also is necessary for STA and redistributes the IP address after the STA switching VLAN, therefore in the solution of the present invention, can also adopt a kind of stateless authentication IP address that is exclusively used in authentication, the operation of Dynamic Host Configuration Protocol server distributing IP address when removing the STA initial access network from, concrete condition can be referring to the record of embodiment four.
What embodiment four described is when adopting stateless authentication IP address, is switched the flow chart of VLAN in the Portal verification process by the certificate server indication.
In step 701, in order to generate stateless authentication IP address, AC broadcast authentication address pool prefix.
Wireless controller can be on the port of having opened the Portal authentication prefix of periodic broadcasting this address pool.Because STA is behind access network, AC can distribute it to inserting the VLAN of SSID correspondence, therefore in order to make STA can receive broadcasting packet, be used for the Portal authentication the port place VLAN for the VLAN of this SSID binding.
In step 702, STA generates stateless authentication IP address according to the authenticating address pond prefix of receiving.
The concrete method that generates can be: the prefix when the authenticating address pond is 8 bits, and STA adds that with the address pool prefix of receiving back 24 bits of self MAC address generate stateless authentication IP address.
The process of step 703~709 and embodiment one step 401~407Portal authentication is identical, be employed be the stateless authentication IP address that is exclusively used in the Portal authentication, idiographic flow is not described in detail in this.
STA is learning that VLAN switches, then again to the IP address of the Dynamic Host Configuration Protocol server application correspondence of place network.After obtaining new IP address, STA then can authenticate and need not carry out IP address-based Portal again by new vlan access network.
When the STA user offline, because AC provides the service that inserts wireless network to STA, AC of the present invention has gone up the Portal function integrated simultaneously, so user's the Portal message that rolls off the production line will inevitably send on the AC, so no matter which VLAN STA is used to belong to, and all is can be by the AC operation of rolling off the production line.Be after AC receives that destination address that STA sends is the request of rolling off the production line of MAC,, therefore not need to be forwarded to again other equipment owing to self be exactly Portal server, the operation of rolling off the production line that oneself just can process user.AC deletes the information of this STA at self after receiving the request of rolling off the production line of STA transmission, sends the request of rolling off the production line to certificate server; And after receiving the response that certificate server returns, send the notice that rolls off the production line to STA.
By technical scheme of the present invention, solved the problem that prior art can only be carried out the differentiation of user right according to the SSID that the user inserts.In the prior art, when the wireless user inserts, can only carry out the differentiation of user right according to the SSID that the user inserts, and can't carry out detailed differentiation according to user employed user name user when carrying out the Portal authentication.Simultaneously, after authentication, also inconvenience is divided into the user among the different VLAN, also just can easily on the PE of up MPLS/VPN equipment the user be divided among the different VPN then, also just can't accomplish according to user's identity it to be issued different isolation authorities.
Technical scheme of the present invention is by providing a kind of Portal authentication mode that relies on MAC Address, can make STA user after the Portal authentication, carry out VLAN easily and fast and switch, satisfy the requirement of dynamically switching user vlan, the wireless user who is fit under the MPLS/VPN environment inserts.
The above only is preferred embodiment of the present invention, and is in order to restriction the present invention, within the spirit and principles in the present invention not all, any modification of being made, is equal to replacement, improvement etc., all should be included within protection scope of the present invention.

Claims (10)

1. the method for a wireless Portal authentication is characterized in that this method comprises:
Wireless controller AC provides Portal certification page to wireless client STA, and receives the authentication information of its transmission, and this authentication information comprises user name, password and the medium access control MAC Address of this STA;
AC is mutual as Portal server and certificate server, sends authentication request message to certificate server, wherein carry current STA's and username and password;
AC is receiving that authentication that certificate server returns by behind the message, according to the MAC Address that current STA sends, opens the authority of this MAC Address access internet, and notifies current STA authentication to pass through.
2. method according to claim 1 is characterized in that,
This method further comprises: when switching VLAN,
AC switches to current STA the VLAN of this vlan information correspondence according to the vlan information that certificate server further carries in authenticating by message; And notify current STA, be used for this STA application and switch the corresponding IP address of VLAN, back.
3. method according to claim 1 is characterized in that,
This method further comprises: when switching VLAN,
AC is receiving authentication that certificate server returns by behind the message, and being provided with of preserving according to self switches to corresponding VLAN with current STA; And notify current STA, be used for this STA application and switch the corresponding IP address of VLAN, back.
4. according to claim 1,2 or 3 described methods, it is characterized in that,
This method further comprises: AC distributes stateless authentication IP address, is used for STA and uses this stateless authentication IP address to authenticate.
5. method according to claim 4 is characterized in that,
Described AC distributes stateless authentication IP address to comprise: the prefix in described AC configuration authenticating address pond, and this prefix is 8 bits; And broadcast this address pool prefix, be used for STA the address pool prefix of receiving is added that back 24 bits of self MAC address generate stateless authentication IP address.
6. a wireless controller is characterized in that, this wireless controller comprises processing unit, authentication ' unit and control unit;
Described processing unit is used for providing Portal certification page to wireless client STA, and receives the authentication information of its transmission, and this authentication information comprises user name, password and the medium access control MAC Address of this STA;
Described authentication ' unit is used for certificate server alternately, sends authentication request message to certificate server, wherein carry current STA's and username and password;
Described control unit is used for receiving that authentication that certificate server returns by behind the message, according to the MAC Address that current STA sends, opens the authority of this MAC Address access internet, and notifies current STA authentication to pass through.
7. wireless controller according to claim 6 is characterized in that,
Described control unit is further used for the vlan information that further carries in by message in authentication according to certificate server, current STA is switched to the VLAN of this vlan information correspondence; And notify current STA, be used for this STA application and switch the corresponding IP address of VLAN, back.
8. wireless controller according to claim 6 is characterized in that,
Described control unit is further used for receiving authentication that certificate server returns by behind the message that being provided with of preserving according to self switches to corresponding VLAN with current STA; And notify current STA, be used for this STA application and switch the corresponding IP address of VLAN, back.
9. according to claim 6,7 or 8 described wireless controllers, it is characterized in that,
Described processing unit is further used for distributing stateless authentication IP address, is used for STA and uses this stateless authentication IP address to authenticate.
10. wireless controller according to claim 9 is characterized in that,
Described processing unit, when distributing stateless authentication IP address, the prefix in configuration authenticating address pond, this prefix is 8 bits; And broadcast this address pool prefix, be used for STA the address pool prefix of receiving is added that back 24 bits of self MAC address generate stateless authentication IP address.
CN2010101608853A 2010-04-27 2010-04-27 Wireless Portal authentication method and access controller Pending CN102238543A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2010101608853A CN102238543A (en) 2010-04-27 2010-04-27 Wireless Portal authentication method and access controller

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2010101608853A CN102238543A (en) 2010-04-27 2010-04-27 Wireless Portal authentication method and access controller

Publications (1)

Publication Number Publication Date
CN102238543A true CN102238543A (en) 2011-11-09

Family

ID=44888645

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2010101608853A Pending CN102238543A (en) 2010-04-27 2010-04-27 Wireless Portal authentication method and access controller

Country Status (1)

Country Link
CN (1) CN102238543A (en)

Cited By (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103457740A (en) * 2013-09-06 2013-12-18 上海斐讯数据通信技术有限公司 Portal certification system and method
CN104104516A (en) * 2014-07-30 2014-10-15 杭州华三通信技术有限公司 Portal authentication method and device
WO2015000313A1 (en) * 2013-07-03 2015-01-08 Hangzhou H3C Technologies Co., Ltd. Access terminal
CN104836812A (en) * 2015-05-26 2015-08-12 杭州华三通信技术有限公司 Portal authentication method, device and system
CN105142189A (en) * 2015-08-11 2015-12-09 深圳市华讯方舟科技有限公司 Method and device for roaming control of site
CN105141618A (en) * 2015-09-15 2015-12-09 华为技术有限公司 Authentication method of network connection and network access device
CN105306448A (en) * 2015-09-22 2016-02-03 深圳前海华视移动互联有限公司 Method for accessing extranet data, car-mounted multimedia terminal and kernel Netfilter module of car-mounted multimedia terminal
CN107360077A (en) * 2017-06-14 2017-11-17 上海斐讯数据通信技术有限公司 VLANID distribution methods and VLAN implementation methods, cloud controller and WAP
CN107547565A (en) * 2017-09-28 2018-01-05 新华三技术有限公司 A kind of network access verifying method and device
CN108551675A (en) * 2014-04-14 2018-09-18 阿里巴巴集团控股有限公司 A kind of applications client, server-side and corresponding portal authentication method
CN108718280A (en) * 2018-08-30 2018-10-30 新华三技术有限公司 A kind of message forwarding method and device
CN109413649A (en) * 2018-11-06 2019-03-01 新华三技术有限公司 A kind of access authentication method and device

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1976309A (en) * 2006-12-22 2007-06-06 杭州华为三康技术有限公司 Method for wireless user inserting network service, inserting controller and server
CN101296240A (en) * 2008-06-20 2008-10-29 中国移动通信集团北京有限公司 Authentication method and system for access to wireless network
CN101465856A (en) * 2008-12-31 2009-06-24 杭州华三通信技术有限公司 Method and system for controlling user access
CN101651682A (en) * 2009-09-15 2010-02-17 杭州华三通信技术有限公司 Method, system and device of security certificate

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1976309A (en) * 2006-12-22 2007-06-06 杭州华为三康技术有限公司 Method for wireless user inserting network service, inserting controller and server
CN101296240A (en) * 2008-06-20 2008-10-29 中国移动通信集团北京有限公司 Authentication method and system for access to wireless network
CN101465856A (en) * 2008-12-31 2009-06-24 杭州华三通信技术有限公司 Method and system for controlling user access
CN101651682A (en) * 2009-09-15 2010-02-17 杭州华三通信技术有限公司 Method, system and device of security certificate

Cited By (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104283848B (en) * 2013-07-03 2018-02-09 新华三技术有限公司 Terminal access method and device
WO2015000313A1 (en) * 2013-07-03 2015-01-08 Hangzhou H3C Technologies Co., Ltd. Access terminal
CN104283848A (en) * 2013-07-03 2015-01-14 杭州华三通信技术有限公司 Terminal access method and device
US10237271B2 (en) 2013-07-03 2019-03-19 Hewlett Packard Enterprise Development Lp Access terminal
EP3017584A4 (en) * 2013-07-03 2017-03-08 Hangzhou H3C Technologies Co., Ltd. Access terminal
CN103457740A (en) * 2013-09-06 2013-12-18 上海斐讯数据通信技术有限公司 Portal certification system and method
CN108551675B (en) * 2014-04-14 2022-04-15 创新先进技术有限公司 Application client, server and corresponding Portal authentication method
CN108551675A (en) * 2014-04-14 2018-09-18 阿里巴巴集团控股有限公司 A kind of applications client, server-side and corresponding portal authentication method
CN104104516A (en) * 2014-07-30 2014-10-15 杭州华三通信技术有限公司 Portal authentication method and device
CN104104516B (en) * 2014-07-30 2018-12-25 新华三技术有限公司 A kind of portal authentication method and equipment
CN104836812A (en) * 2015-05-26 2015-08-12 杭州华三通信技术有限公司 Portal authentication method, device and system
CN105142189A (en) * 2015-08-11 2015-12-09 深圳市华讯方舟科技有限公司 Method and device for roaming control of site
CN105142189B (en) * 2015-08-11 2018-10-23 华讯方舟科技有限公司 The roam control method and device of website
CN105141618A (en) * 2015-09-15 2015-12-09 华为技术有限公司 Authentication method of network connection and network access device
CN105306448A (en) * 2015-09-22 2016-02-03 深圳前海华视移动互联有限公司 Method for accessing extranet data, car-mounted multimedia terminal and kernel Netfilter module of car-mounted multimedia terminal
CN107360077A (en) * 2017-06-14 2017-11-17 上海斐讯数据通信技术有限公司 VLANID distribution methods and VLAN implementation methods, cloud controller and WAP
CN107547565A (en) * 2017-09-28 2018-01-05 新华三技术有限公司 A kind of network access verifying method and device
CN107547565B (en) * 2017-09-28 2020-08-14 新华三技术有限公司 Network access authentication method and device
CN108718280A (en) * 2018-08-30 2018-10-30 新华三技术有限公司 A kind of message forwarding method and device
CN108718280B (en) * 2018-08-30 2021-05-25 新华三技术有限公司 Message forwarding method and device
CN109413649A (en) * 2018-11-06 2019-03-01 新华三技术有限公司 A kind of access authentication method and device

Similar Documents

Publication Publication Date Title
CN102238543A (en) Wireless Portal authentication method and access controller
US20140094119A1 (en) Systems and methods for device-to-device communication in the absence of network coverage
CN104580116B (en) A kind of management method and equipment of security strategy
US9246872B2 (en) Methods and arrangements for enabling data transmission between a mobile device and a static destination address
EP3319354B1 (en) V2x communication methods and related apparatuses
US9716719B2 (en) Communication managing method and communication system
CN104104516A (en) Portal authentication method and device
CN103188207A (en) Cross-domain single sign-on realization method and system
CN102547701A (en) Authentication method and wireless access point as well as authentication server
CN106572148A (en) Intelligent product network configuration method and network configuration system
CN108259469A (en) Cluster security authentication method based on block chain, node and cluster
CN101447879A (en) Charging method and access equipment therefor
CN106105321A (en) IMS network is connected subscriber equipment to for method that real-time Communication for Power Network services by web browser
CN101616405A (en) Wireless Internet access method and wireless router
CN105429988A (en) IMS (Internet Protocol Multimedia Subsystem) registration method and IMS registration system based on multiple services
CN112910863A (en) Network tracing method and system
CN105323325A (en) Address assignment method for identity and position separation network, and access service node
CN108419305A (en) A kind of WLAN small wireless network network-building methods of lightweight
CN106060186B (en) A kind of message processing method and device
CN101951380B (en) Access control method and device used therein in dual-stack lite network
CN106878481A (en) A kind of Internet protocol IP address acquisition methods, device and system
EP2663949A1 (en) Method and system for authentication-based multi-user online video game
CN102740290B (en) Method for pre-authentication and pre-configuration, and system thereof
CN101184100A (en) User access authentication method based on dynamic host machine configuration protocol
CN103986793B (en) A kind of method and system of lifting Portal certification IP address service efficiencies

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20111109