CN102404738A - Method, system and authentication server for being switched in and retreating from wireless local area network (WLAN) - Google Patents
Method, system and authentication server for being switched in and retreating from wireless local area network (WLAN) Download PDFInfo
- Publication number
- CN102404738A CN102404738A CN2010102825250A CN201010282525A CN102404738A CN 102404738 A CN102404738 A CN 102404738A CN 2010102825250 A CN2010102825250 A CN 2010102825250A CN 201010282525 A CN201010282525 A CN 201010282525A CN 102404738 A CN102404738 A CN 102404738A
- Authority
- CN
- China
- Prior art keywords
- terminal
- wlan
- communication identifier
- terminal iidentification
- state information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
The invention provides a method, a system and an authentication server for being switched in and retreating from the wireless local area network (WLAN), which include storing corresponding relation among communication identification, terminal identification and business state information in advance in the authentication server, so that corresponding business state information can be updated to waiting for online according to the communication identification carried in online business request when the terminal demands to be on line. Therefore, when an AC conducts authentication on the terminal, the AC can search corresponding business state information according to the terminal identification, and only terminals with both the terminal identification and corresponding business state information meeting the requirements can be allowed to be switched in the WLAN network. Further, only terminals with terminal identification meeting the requirements are allowed to conduct off line operation when retreating from the WLAN network, so that generality of the WLAN business authentication is higher, no extra authentication link is required to be added, and authentication safety is higher.
Description
Technical field
The present invention relates to wireless communication field, relate in particular to a kind of access, withdraw from method, system and the certificate server of wlan network.
Background technology
WLAN (WLAN, Wireless LAN) utilizes wireless technology to realize the technology of quick access to LAN.Operator adopts the unified plan mode to carry out building of wireless network environment, in order to WLAN to be provided business of networking.
The WLAN business is guaranteed the professional fail safe of carrying out through the mode of business authentication; Business authentication can adopt client-based authentication, based on the authentication of webpage (WEB) with based on the authentication modes such as authentication of network interface card (MAC) address at terminal, respectively these three kinds of authentication modes are described below.
1, client-based authentication mode is that special-purpose client software is installed on the terminal; When the purpose network need be inserted through WLAN in the terminal; The user at first inputs WLAN accounts informations such as user name, password to client; After WLAN accounts information process certificate server (RADIUS) authentication of input is passed through, allow the terminal to insert the purpose network.
Client-based authentication mode need be installed specific client software on the terminal; And terminal type is various at present; Develop a kind of client software that is applicable to major part even all terminals and all be unusual difficulty; And adopt the carrier customization terminal and in the terminal mode of built in client, certain limitation is also arranged, can't the professional popularization of effective support WLAN.
2, the authentication mode based on WEB is meant that the terminal is when inserting the purpose network through WLAN; The access at terminal is redirected to inlet (PORTAL) webpage; The window that the user provides through the PORTAL webpage is inputed WLAN accounts informations such as user name, password; After the WLAN accounts information authentication of input is passed through, allow the terminal to insert the purpose network.
Based on the authentication mode of WEB because of need client be installed, highly versatile is used widely, but the authentication mode that is based on WEB needs initial landing PORTAL certification page, has increased the link that the user moves WLAN; And after the user reaches the standard grade; Can not close the PORTAL certification page, in a single day because close the PORTAL certification page, the user can't initiatively be rolled off the production line; Can only not have passive the rolling off the production line in the overtime back of flow by the time, the business of networking that causes the user is the problem of Fare determined by travel time accurately; In addition; Equally can not compatible all terminals based on the authentication mode of WEB, especially present PORTAL authentication mode can not compatible all mobile phone browsers, on the part mobile phone, can't correctly show the PORTAL page; And the part mobile phone can not be opened two and above browser page simultaneously; If the user need use web page browsing professional, need close the PORTAL certification page after then reaching the standard grade, cause the accurately problem of Fare determined by travel time of online.
3, the WLAN authentication method based on MAC address authentication is meant that the MAC Address based on the terminal carries out access authentication, and main operation is:
When the user uses WLAN professional first, carry out the authentication of WLAN accounts informations such as user name, password on designated terminal, behind the authentication success, network side is bound and be kept to MAC Address and this WLAN account of designated terminal; When the user uses WLAN professional once more on this designated terminal, need not import accounts information, network side carries out business authentication according to the MAC ground, terminal that identifies.
Still need carry out once the verification process of WLAN accounts informations such as user name, password based on the mode of MAC address authentication, exist the user to forget the risk of WLAN accounts information; In addition; Only utilizing MAC Address to carry out under the situation of authentication; Because MAC Address can be revised the software hack through MAC Address, therefore, when the user successfully inserted wlan network; MAC Address and WLAN account are bound, and will cause MAC Address to be stolen and afterwards illegally use the risk of WLAN account.
In sum, under the authentication mode of present WLAN business, there is the problem that the client certificate versatility is relatively poor, use WEB authentication link is more and the MAC address authentication fail safe is relatively poor.
Summary of the invention
The embodiment of the invention provides a kind of access, withdraws from the method for wlan network, system and certificate server, is used for solving the problem that the versatility that exists in the professional verification process of prior art WLAN is relatively poor, use WEB authentication link is more and the MAC address authentication fail safe is relatively poor.
A kind of method that inserts WLAN WLAN, this method comprises:
When the WLAN that receives the initiation of first terminal reaches the standard grade service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance, be first state with the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade;
When receiving the authentication request of the terminal iidentification that carries second terminal, confirm said terminal iidentification corresponding service state information, when said business state information is first state, be the IP address that second terminal distribution is used to insert wlan network.
The method of a kind of WLAN withdraw WLAN, said method comprises:
When receiving the WLAN that initiates at first terminal and rolling off the production line service request,, confirm the roll off the production line terminal iidentification of the communication identifier correspondence of carrying in the service request of said WLAN according to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance;
Be released to the IP address of the second corresponding terminal distribution of definite said terminal iidentification.
A kind of certificate server, said certificate server comprises:
Information storage module is used for the corresponding relation between storing communication sign, terminal iidentification and business state information and the three;
The first message response module; Be used for when the WLAN that receives the initiation of first terminal reaches the standard grade service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance in the information storage module, be first state with the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade;
The second message response module is used for when receiving authentication request, when the terminal iidentification corresponding service state information that indicating services server A C carries in said authentication request is first state, is the IP address that second terminal distribution is used to insert wlan network.
A kind of service server, said service server comprises:
Sending module is used to send the authentication request that carried terminal identifies;
Receiver module is used to receive said terminal iidentification corresponding service state information;
Operational module is used for when the business state information that receives is first state, is used to insert the IP address of wlan network for the corresponding terminal distribution of said terminal iidentification.
A kind of WLAN Operational Visit system, said system comprises first terminal, second terminal, server, wherein:
First terminal is used for initiating the WLAN service request of reaching the standard grade to server;
Second terminal is used for initiating the request of WLAN Operational Visit to server;
Server; Be used for when the WLAN that receives the initiation of first terminal reaches the standard grade service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance; With the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade is first state, and when receiving the authentication request of the terminal iidentification that carries second terminal, confirms said terminal iidentification corresponding service state information; When said business state information is first state, be the IP address that second terminal distribution is used to insert wlan network.
In the scheme provided by the invention; In certificate server, preserve the corresponding relation between communication identifier, terminal iidentification and the business state information in advance; So that when terminal request is reached the standard grade; Upgrading the corresponding service state information according to the communication identifier that carries in the service request of reaching the standard grade reaches the standard grade for waiting for; Make AC when carrying out authentication for the terminal, can in certificate server, inquire about the corresponding service state information according to terminal iidentification, wlan network is inserted at the terminal that only allows terminal iidentification and corresponding service state information all to satisfy the demands; And when withdrawing from wlan network, off-line operation is carried out at the terminal that also only allows terminal iidentification to satisfy the demands; Because the scheme of the embodiment of the invention need not installed client and need do not carried out terminal authentication through the PORTAL page in the terminal, improve the versatility of system, reduce WEB authentication link; And, with business state information and terminal iidentification simultaneously as the parameters for authentication of access wlan network, the fail safe that has improved access procedure.
Description of drawings
A kind of method flow diagram of opening and changing the WLAN business that Fig. 1 provides for the embodiment of the invention one;
A kind of method flow diagram that inserts wlan network that Fig. 2 provides for the embodiment of the invention two;
A kind of method flow diagram that withdraws from wlan network that Fig. 3 provides for the embodiment of the invention three;
The structural representation of a kind of WLAN Operational Visit system that Fig. 4 provides for the embodiment of the invention four;
The structural representation of a kind of certificate server that Fig. 5 provides for the embodiment of the invention five;
The structural representation of a kind of service server that Fig. 6 provides for the embodiment of the invention six.
Embodiment
Below in conjunction with Figure of description various embodiments of the present invention are described in detail.
Before the WLAN business was used at the terminal, the WLAN that need open the terminal was professional, also need the WLAN business that has opened at the terminal be changed sometimes, was elaborated through a pair of professional flow process of WLAN of opening and change the terminal of embodiment below.
Embodiment one,
As shown in Figure 1, for opening and change the professional method flow diagram of WLAN, concrete steps are following:
The WLAN service fulfillment request that step 101, accounting server (BOSS) receiving terminal are submitted to comprises communication identifier and terminal iidentification in the request of said WLAN service fulfillment.
To open WLAN professional or open WLAN when professional for the other-end request for self request at the terminal, need initiate register to BOSS.In embodiments of the present invention, the communication identifier in the request of WLAN service fulfillment is the communication identifier of initiating the terminal of this request, if the terminal is to ask to open the WLAN business for self, then said terminal iidentification is the terminal iidentification of initiating the terminal of WLAN service fulfillment request; If the terminal is to open the WLAN business for the other-end request, then said terminal iidentification is the terminal iidentification of said other-end.
WLAN is opened when professional for self or other-end request in the terminal, and the terminal iidentification that the WLAN service terminal is opened with self communication identifier and actual request in the terminal is submitted to BOSS.Subsequent descriptions for ease; The terminal that to initiate the request of WLAN service fulfillment in the present embodiment is referred to as first terminal; Actual request is opened the professional terminal of WLAN be referred to as second terminal, then first terminal and second terminal can be same terminals, also can be two terminals.For example: first terminal and second terminal are same mobile phone, and perhaps first terminal is a mobile phone, and second terminal is a computer.
Said communication identifier in the request of WLAN service fulfillment can be the phone number at first terminal, and said terminal iidentification can be network interface card (MAC) address or central processing unit (CPU) sign at second terminal.BOSS registers the terminal iidentification and the communication identifier that receive, is used for subsequent charging.
In this step, the method for WLAN service fulfillment has multiple, and the WLAN business can be opened through short message mode in first terminal, can also be to open the WLAN business through modes such as operator business hall or online business halls.
Certificate server is after receiving communication identifier and corresponding with it terminal iidentification; For the WLAN traffic assignments space of asking is used for preservation and communication identifier and terminal iidentification corresponding service state information; Said business state information representes that actual request opens the second professional terminal of WLAN and carry out the professional state of WLAN; Said state can comprise first state, second state, the third state and four condition, is that " wait is reached the standard grade ", second state are that " reaching the standard grade " and four condition are that example describes for " wait is rolled off the production line " for " rolling off the production line ", the third state with first state respectively in embodiments of the present invention.The initial condition at second terminal is " rolling off the production line ", and in the process of second terminal request operation WLAN business, its state is " wait is reached the standard grade "; In the process of operation WLAN business; Its state is " reaching the standard grade ", and in finishing the WLAN business procedure, its state is " wait is rolled off the production line "; After successfully finishing the WLAN business procedure, its state is for get back to " rolling off the production line " once more.
Can confirm the WLAN current state of service that carry out at second terminal through the variation of business state information, thereby confirm the current operation that can carry out in second terminal.For example: if the state at second terminal be " wait is reached the standard grade ", then after complete to the operation of reaching the standard grade at second terminal, operation is carried out corresponding " reaching the standard grade " and is operated.
Certificate server is preserved the corresponding relation between communication identifier, terminal iidentification and the business state information, is used for follow-up authentication when using WLAN professional to second terminal, so far, accomplished to terminal WLAN professional open flow process.
Need to prove; When the WLAN service fulfillment; If first terminal and second terminal are not same terminals, in the corresponding relation between communication identifier, terminal iidentification and the business state information of certificate server foundation, can be the corresponding relation between a plurality of communication identifiers and a terminal iidentification and a service condition identify then; In the case, can reach the standard grade and following line service for the corresponding terminal request WLAN of said terminal iidentification in the terminal that each communication identifier is corresponding.Perhaps, can be the corresponding relation between a communication identifier and a plurality of terminal iidentification and a service condition identify, in the case, can only carry out the WLAN business by the corresponding terminal of a terminal iidentification simultaneously.
Behind the WLAN service fulfillment, professional to this WLAN, needs with BOSS in communication stored sign and terminal iidentification when upgrading, after step 103, also further comprise:
Said communication identifier and terminal iidentification after changing comprises following two kinds of situation:
1, after changing communication identifier and not the change terminal iidentification;
2, after changing terminal iidentification and not the change communication identifier.
BOSS is behind the communication identifier and terminal iidentification that receive after changing, and the communication identifier that renewal has been preserved and the corresponding relation of terminal iidentification also comprise following two kinds of update modes:
1, BOSS finds out the corresponding communication identifier of terminal iidentification of said not change from the corresponding relation of the communication identifier preserved and terminal iidentification, and said communication identifier is after changing replaced the communication identifier that finds out;
2, BOSS finds out the corresponding terminal iidentification of communication identifier of said not change from the corresponding relation of the communication identifier preserved and terminal iidentification, and said terminal iidentification is after changing replaced the terminal iidentification that finds out.
The communication identifier that step 105, certificate server reception and renewal have been preserved and the corresponding relation of terminal iidentification.
Certificate server also upgrades the corresponding relation between communication identifier, terminal iidentification and the business state information according to the mode identical with BOSS after the communication identifier and terminal iidentification that receive after changing.
Accomplished opening the professional change of WLAN through step 104 and step 105.
In the embodiment of the invention two and embodiment three, be that " wait is reached the standard grade ", second state are that " reaching the standard grade " and four condition are that example describes for " wait is rolled off the production line " for " rolling off the production line ", the third state still with first state.
Embodiment two,
Accomplish professional the opening and after changing of WLAN, in the professional use of WLAN, the embodiment of the invention two provides a kind of method that inserts wlan network, to improve the fail safe of verification process, prevents that the disabled user from using WLAN professional.
In the present embodiment, suppose after opening and change the WLAN business that this WLAN service fulfillment corresponding service state information that writes down in the certificate server is " rolling off the production line ".
As shown in Figure 2, be a kind of method flow diagram that inserts wlan network that the embodiment of the invention provides, concrete steps are following:
The service request of reaching the standard grade is sent to certificate server in step 201, first terminal.
When wlan network need be inserted in second terminal,, trigger second terminal and insert the wlan network process through in the service fulfillment process, initiating to reach the standard grade service request to certificate server with first terminal of second terminal binding.Said reach the standard grade service request can but be not limited to submit to certificate server through mobile phone short messages.
If the service request of reaching the standard grade is sent through the mode of SMS in first terminal; Then certificate server can extract the communication identifier at first terminal from SMS; If the service request of reaching the standard grade is sent through other signaling methods in first terminal, extract the communication identifier at first terminal in the information that then certificate server carries from signaling.
In certificate server, preserve be the corresponding relation between a plurality of communication identifiers and terminal iidentification and the service condition sign time, service request can be initiated to reach the standard grade for the second corresponding terminal of this terminal iidentification in first terminal that arbitrary communication identifier is corresponding; In certificate server, preserve be the corresponding relation between a communication identifier and a plurality of terminal iidentification and the service condition sign time, service request can be initiated to reach the standard grade for the second corresponding terminal of arbitrary terminal iidentification in first terminal that communication identifier is corresponding.
Step 202, certificate server are reached the standard grade the WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade for waiting for.
Certificate server is determined the communication identifier that carries in the service request of reaching the standard grade of first terminal transmission that receives; Corresponding relation according to the communication identifier of having preserved, terminal iidentification and business state information; With the communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade is " wait is reached the standard grade ", will upgrade business state information event notice first terminal through note or other means of signaling.
If first terminal and second terminal are same terminals, after then first terminal receives and upgrades the business state information incident, can carry out subsequent step; If first terminal and second terminal are not same terminals; Then subsequent step is carried out at renewal business state information event notice second terminal that will receive, first terminal; Or will upgrade the business state information incident and show to the user, trigger second terminal by the user and carry out subsequent step.
More excellent, in order to prevent to send the uneasy congruent factor of number of the account of not bringing into use the WLAN business to cause for a long time after the request of reaching the standard grade of WLAN business, certificate server can be when being updated to " wait is reached the standard grade " with business state information; Start timer 1, if in the duration of setting 1, business state information does not upgrade once more; Then the state at terminal is set to " rolling off the production line "; As, if in 10 minutes, business state information remains at " wait is reached the standard grade "; Then business state information is updated to " rolling off the production line ", thereby further strengthens authenticating safety.
Step 203, second terminal are submitted the request of WLAN Operational Visit to service server (AC).
Second terminal is submitted the request of WLAN Operational Visit to AC after definite certificate server business state information has upgraded, request is through wlan network access destination network.
Step 204, AC confirm the terminal iidentification that carries in the request of WLAN Operational Visit, and send the authentication request of carried terminal sign to certificate server.
AC is when the WLAN Operational Visit request that receives second terminal; The terminal iidentification at second terminal of confirming to carry in the request of WLAN Operational Visit; And the terminal iidentification at said second terminal that will determine submits to certificate server through authentication request, and the request authentication server carries out authentication to second terminal that said terminal iidentification is represented.
Step 205, certificate server return to AC with the terminal iidentification corresponding service state information that receives.
Certificate server is confirmed the terminal iidentification corresponding service state information that receives according to the corresponding relation of communication identifier, terminal iidentification and the business state information preserved.
When step 206, AC are " wait is reached the standard grade " at the business state information that receives, be the said second terminal distribution IP address.
In this step; Have only the terminal iidentification at second terminal to be kept at certificate server; And when its corresponding service state information is " wait is reached the standard grade "; Just through the authentication at second terminal that said terminal iidentification is represented, promptly preserved through terminal iidentification respectively and business state information is set to " wait is reached the standard grade " two-layer authentication is carried out at second terminal that request inserts wlan network, improved authenticating safety.
When being the second terminal distribution IP; AC can also add the terminal iidentification at said second terminal in the white list; Automatically jump to the PORTAL certification page when preventing said second terminal, practiced thrift joining procedure, improved access efficiency through the IP address allocated access network.
Step 207, AC send the response message of reaching the standard grade to certificate server.
AC is after being the said second terminal distribution IP address, and wlan network is successfully inserted according to IP address allocated in second terminal, and at this moment, AC can send the response message of reaching the standard grade to certificate server, and wlan network has been inserted at current second terminal of notification authentication server.
Step 208, the said business state information of certificate server are set to " reaching the standard grade ".
This step is a preferred steps; Certificate server is reached the standard grade during response message what receive that AC sends; Confirm said second terminal access network; The state at said second terminal is set to " reaching the standard grade ", thereby business state information is upgraded in time, is convenient to other follow-up associative operations.
Certificate server in the embodiment of the invention two and service server can be two equipment independently, also can be integrated in the equipment.The foregoing description two is to be that two separate equipment are that example describes with certificate server and service server; If certificate server and service server are integrated into a server; Then this server can be realized certificate server and the function of professional device among the embodiment two, and the certificate server that relates among the embodiment two and the information interaction between the service server will become the server internal information transmission after integrated.
Embodiment three,
After the method for utilizing the embodiment of the invention two inserts wlan network; The embodiment of the invention three also provides a kind of method that withdraws from wlan network; Be illustrated in figure 3 as a kind of method flow diagram that withdraws from wlan network that the embodiment of the invention three provides; Certificate server and service server also can be two separate equipment in the present embodiment, also can be to be integrated into an equipment.Similar with embodiment two; If certificate server and service server are integrated into a server; Then this server can be realized certificate server and the function of professional device in embodiment following examples three, and the certificate server that relates among the embodiment three and the information interaction between the service server will become the server internal information transmission after integrated.
The embodiment of the invention three is that two separate equipment are that example describes with certificate server and service server, and concrete steps are following:
The service request that rolls off the production line is sent to certificate server in step 301, first terminal.
In the time of need finishing the WLAN business at second terminal,, trigger second terminal and withdraw from the wlan network process through in the service fulfillment process, initiating to roll off the production line service request to certificate server with first terminal of second terminal binding.Described request can but be not limited to submit to certificate server through short message mode.
If the service request that rolls off the production line is sent through the mode of SMS in first terminal; Then certificate server can extract the communication identifier at first terminal from SMS; If the service request that rolls off the production line is sent through other signaling methods in first terminal, extract the communication identifier at first terminal in the information that then certificate server carries from signaling.
With last line process similarly; In certificate server, preserve be the corresponding relation between a plurality of communication identifiers and terminal iidentification and the service condition sign time, service request can be initiated to roll off the production line for the second corresponding terminal of this terminal iidentification in first terminal that arbitrary communication identifier is corresponding; In certificate server, preserve be the corresponding relation between a communication identifier and a plurality of terminal iidentification and the service condition sign time, service request can be initiated to roll off the production line for the second corresponding terminal of arbitrary terminal iidentification in first terminal that communication identifier is corresponding.
More excellent, when certificate server can need withdraw from wlan network at definite second terminal, the state at said second terminal is updated to " wait is rolled off the production line ".
After step 304, AC are released to the IP address of said second terminal distribution, send the response message that rolls off the production line to certificate server.
AC receives withdrawal that certificate server sends when distributing to the indication of IP address at said second terminal; Confirm that said second terminal need break off network and connect; Be released to the IP address of said second terminal distribution; And sending the response message that rolls off the production line to certificate server, the wlan network that notice has been broken off said second terminal connects.
More excellent, AC can delete the terminal iidentification at said second terminal after the IP address at said second terminal is distributed in release from white list.
This step is a preferred steps, and certificate server rolls off the production line during response message what receive that AC sends, confirms that the network that has broken off said second terminal connects, and is " rolling off the production line " with the terminal iidentification corresponding service state information updating at said second terminal.
Embodiment four,
As shown in Figure 4, the structural representation of a kind of WLAN Operational Visit system that provides for the embodiment of the invention four, said system comprises first terminal 11, second terminal 12 and server 13, wherein, first terminal and second terminal are meant same terminal or two terminals:
First terminal 11 is used for initiating the WLAN service request of reaching the standard grade to server; Second terminal 12 is used for initiating the request of WLAN Operational Visit to server; Server 13 is used for when the WLAN that receives the initiation of first terminal reaches the standard grade service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance; With the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade is first state; And when receiving the authentication request of the terminal iidentification that carries second terminal; Confirming said terminal iidentification corresponding service state information, when said business state information is first state, is the IP address that second terminal distribution is used to insert wlan network.
Said system also comprises:
Accounting server 15 is used for confirming communication identifier and the terminal iidentification that the WLAN service fulfillment request that receives is carried, and communication identifier of determining and terminal iidentification are sent to certificate server.
Said accounting server 15 also is used for confirming the communication identifier after changing that the information-change request that receives is carried and the terminal iidentification of change not; Or the terminal iidentification after changing and the communication identifier of change not, and terminal iidentification of determining and communication identifier sent to certificate server.
Said first terminal 11 also is used for initiating the WLAN service request that rolls off the production line to server.
Said server 13 also is used for when the WLAN that receives the initiation of first terminal rolls off the production line service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance; Confirm the corresponding terminal iidentification of communication identifier that said WLAN rolls off the production line and carries in the service request, be released to the IP address of the second corresponding terminal distribution of definite said terminal iidentification.
Said server 13 can further include certificate server 131 and service server 132, wherein:
Said certificate server 131 is used for when the WLAN that receives the initiation of first terminal reaches the standard grade service request; With the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade is first state; When receiving the authentication request of AC transmission; Said terminal iidentification corresponding service state information is sent to AC, and when the WLAN that receives the initiation of first terminal rolls off the production line service request, the terminal iidentification of confirming is sent to AC.
Said service server 132 is used for when the said business state information that receives is first state; It is the IP address that second terminal distribution is used to insert wlan network; And; When receiving the terminal iidentification of certificate server transmission, be released to the IP address of the second corresponding terminal distribution of this terminal iidentification.
When said certificate server 131 also is used for not receiving the authentication request of AC transmission in the setting duration after upgrading business state information, business state information is updated to four condition by first state.
Said certificate server 131 also is used for after AC is the second terminal distribution IP address, after wlan network is inserted according to said IP address in second terminal, said business state information is updated to second state.
Said certificate server 131 also is used for when the WLAN that receives the initiation of first terminal rolls off the production line service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance; Confirm the corresponding terminal iidentification of communication identifier that said WLAN rolls off the production line and carries in the service request, the terminal iidentification of confirming is sent to AC.
Said certificate server 131 also is used to receive WLAN and rolls off the production line after the service request, and terminal iidentification is sent to before the AC, is the third state with the said WLAN communication identifier corresponding service state information updating that carries in the service request that rolls off the production line.
Said certificate server 131 also is used for after the IP address that AC is released to the second corresponding terminal distribution of the terminal iidentification that receives, is four condition with the said WLAN communication identifier corresponding service state information updating that carries in the service request that rolls off the production line.
Said service server 132 also is used for sending the response message of reaching the standard grade to certificate server and confirms to be the said second terminal distribution IP address.
Said service server 132 also is used to be released to the IP address of second terminal distribution of the terminal iidentification correspondence that receives.
Said service server 132 also is used for sending the IP address that the response message that rolls off the production line confirms to be released to second terminal distribution of the terminal iidentification correspondence that receives to certificate server.
The certificate server 131 in the embodiment of the invention four and the function of service server 132 can be carried out by server 13.
Embodiment five,
As shown in Figure 5; The structural representation of a kind of certificate server that provides for the embodiment of the invention five; Said certificate server comprises information storage module 21, the first message response module 22 and the second message response module 23; Wherein, first terminal and second terminal are meant same terminal or two terminals:
Said certificate server also comprises:
The 3rd message response module 24 is used for when receiving the WLAN four condition service request of initiating at first terminal; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance in the information storage module; The terminal iidentification that the communication identifier of confirming to carry in the said WLAN four condition service request is corresponding, indication AC is released to the IP address of the second corresponding terminal distribution of definite terminal iidentification.
Said information storage module 21 specifically is used to receive communication identifier and the terminal iidentification that BOSS sends; Set up and also to preserve said communication identifier, terminal iidentification and to be the corresponding relation between the business state information of said WLAN traffic assignments, said communication identifier and terminal iidentification are to carry in the WLAN service fulfillment request that receives of BOSS.
Said information storage module 21 specifically is used to receive the communication identifier after changing of BOSS transmission and the terminal iidentification that does not change; From the corresponding relation of the communication identifier preserved and terminal iidentification; Find out the corresponding communication identifier of terminal iidentification of said not change; And the communication identifier that said communication identifier replacement is after changing found out; Said communication identifier and the terminal iidentification of not change after changing is to carry in the information-change request that receives of BOSS; Perhaps receive the terminal iidentification after changing that BOSS sends and the communication identifier of change not, from the corresponding relation of the communication identifier preserved and terminal iidentification, find out the terminal iidentification of the said communication identifier correspondence that does not change; And the terminal iidentification that said terminal iidentification replacement is after changing found out, said terminal iidentification after changing and the communication identifier that does not change are to carry in the information-change request that receives of BOSS.
When the said first message response module 22 also is used for not receiving the authentication request of AC transmission in the setting duration after upgrading business state information, business state information is updated to four condition by first state.
The said second message response module 23 also is used for after AC is the second terminal distribution IP address, after wlan network is inserted according to said IP address in second terminal, said business state information is updated to second state.
Said the 3rd message response module 24 also is used to receive WLAN and rolls off the production line after the service request, and terminal iidentification is sent to before the AC, is the third state with the said WLAN communication identifier corresponding service state information updating that carries in the service request that rolls off the production line.
Said the 3rd message response module 24 also is used for after the IP address that AC is released to the second corresponding terminal distribution of the terminal iidentification that receives, is four condition with the said WLAN communication identifier corresponding service state information updating that carries in the service request that rolls off the production line.
Embodiment six,
The embodiment of the invention six provides a kind of service server, and the structural representation of said service server is as shown in Figure 6, comprises sending module 31, receiver module 32 and operational module 33, wherein:
Sending module 31 is used to send the authentication request of carried terminal sign; Receiver module 32 is used to receive said terminal iidentification corresponding service state information; Operational module 33 is used for when the business state information that receives is first state, is used to insert the IP address of wlan network for the corresponding terminal distribution of said terminal iidentification.
Said operational module 33 also is used for when receiver module receives terminal iidentification, is released to the IP address of the terminal distribution of the terminal iidentification correspondence that receives.
Server among the embodiment four can be regarded as certificate server and the service server among the embodiment six integrated among the embodiment five, and this server can comprise certificate server and each module in the service server among the embodiment six among the embodiment five and realize the function of each module; Equally, the certificate server among the embodiment five can have the function that certificate server had among the embodiment four, and the service server among the embodiment six can have the function that service server had among the embodiment four.
Except the technical problem that can solve the present invention's proposition; In embodiments of the present invention; In certificate server, can preserve the corresponding relation of a communication identifier and a plurality of terminal iidentification and a business state information; Can realize WLAN account of a plurality of terminals share, make things convenient for the user on different terminal, to use WLAN professional; Also can preserve the corresponding relation of a plurality of communication identifiers and a terminal iidentification and a business state information, for the user provides multiple control modes, the user can pass through any one approach control terminal visited WLAN network.
In embodiments of the present invention; Owing to need not input WLAN accounts informations such as user name, password, when not having input interface, still can carry out authentication to the terminal at the terminal; And the business state information in the certificate server that can upgrade in time according to the state of WLAN business in the terminal; So that the operation of being correlated with, simultaneously, when not receiving the authentication request of AC transmission in the setting duration after certificate server upgrades business state information; Certificate server is reached the standard grade business state information and is updated to rolling off the production line of four condition by the wait of first state; Prevent that wait as long for from receiving in the process of authentication request, cause the leakage of WLAN accounts information, further strengthened authenticating safety.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, belong within the scope of claim of the present invention and equivalent technologies thereof if of the present invention these are revised with modification, then the present invention also is intended to comprise these changes and modification interior.
Claims (22)
1. a method that inserts WLAN WLAN is characterized in that, this method comprises:
When the WLAN that receives the initiation of first terminal reaches the standard grade service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance, be first state with the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade;
When receiving the authentication request of the terminal iidentification that carries second terminal, confirm said terminal iidentification corresponding service state information, when said business state information is first state, be the IP address that second terminal distribution is used to insert wlan network.
2. the method for claim 1 is characterized in that, reaches the standard grade before the service request receiving WLAN, and said method also comprises:
Receive communication identifier and terminal iidentification that accounting server BOSS sends, said communication identifier and terminal iidentification are to carry in the WLAN service fulfillment request that receives of BOSS;
Set up and preserve said communication identifier, terminal iidentification and be the corresponding relation between the business state information of said WLAN traffic assignments.
3. method as claimed in claim 2 is characterized in that, preserves after the corresponding relation between communication identifier, terminal iidentification and the business state information, and receives WLAN and reach the standard grade before the service request, and said method also comprises:
Receive the communication identifier after changing that BOSS sends and the terminal iidentification of change not, said communication identifier and the terminal iidentification that do not change after changing is to carry in the information-change request that receives of BOSS;
From the corresponding relation of the communication identifier preserved and terminal iidentification, find out the corresponding communication identifier of terminal iidentification of said not change, and said communication identifier is after changing replaced the communication identifier that finds out;
Perhaps
Receive the terminal iidentification after changing that BOSS sends and the communication identifier of change not, said terminal iidentification and the communication identifier that do not change after changing is to carry in the information-change request that receives of BOSS;
From the corresponding relation of the communication identifier preserved and terminal iidentification, find out the corresponding terminal iidentification of communication identifier of said not change, and said terminal iidentification is after changing replaced the terminal iidentification that finds out.
4. the method for claim 1 is characterized in that, does not receive authentication request as if business state information being updated in first state setting duration afterwards, then said business state information is updated to second state by first state.
5. the method for claim 1 is characterized in that, is that said method also comprises after the second terminal distribution IP address:
After wlan network is inserted according to said IP address in second terminal, said business state information is updated to the third state.
6. like the arbitrary described method of claim 1～5, it is characterized in that,
Said communication identifier is the phone number at first terminal, and said terminal iidentification is the MAC Address of Network Card or the central processor CPU sign at second terminal.
7. like the arbitrary described method of claim 1～5, it is characterized in that said first terminal and second terminal are meant same terminal or two terminals.
8. the method for a WLAN withdraw WLAN is characterized in that, said method comprises:
When receiving the WLAN that initiates at first terminal and rolling off the production line service request,, confirm the roll off the production line terminal iidentification of the communication identifier correspondence of carrying in the service request of said WLAN according to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance;
Be released to the IP address of the second corresponding terminal distribution of definite said terminal iidentification.
9. method as claimed in claim 8 is characterized in that, receive WLAN and roll off the production line after the service request, and before the releasing IP addresses, said method also comprises:
With the said WLAN communication identifier corresponding service state information updating that carries in the service request that rolls off the production line is four condition.
10. method as claimed in claim 9 is characterized in that, after the releasing IP addresses, said method also comprises:
With the said WLAN communication identifier corresponding service state information updating that carries in the service request that rolls off the production line is second state.
11., it is characterized in that said first terminal and second terminal are meant same terminal or two terminals like the arbitrary described method of claim 8～10.
12. a certificate server is characterized in that, said certificate server comprises:
Information storage module is used for the corresponding relation between storing communication sign, terminal iidentification and business state information and the three;
The first message response module; Be used for when the WLAN that receives the initiation of first terminal reaches the standard grade service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance in the information storage module, be first state with the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade;
The second message response module is used for when receiving authentication request, when the terminal iidentification corresponding service state information that indicating services server A C carries in said authentication request is first state, is the IP address that second terminal distribution is used to insert wlan network.
13. certificate server as claimed in claim 12 is characterized in that,
Said information storage module; Specifically be used to receive communication identifier and the terminal iidentification that accounting server BOSS sends; Set up and also to preserve said communication identifier, terminal iidentification and to be the corresponding relation between the business state information of said WLAN traffic assignments, said communication identifier and terminal iidentification are to carry in the WLAN service fulfillment request that receives of BOSS.
14. certificate server as claimed in claim 12 is characterized in that, said certificate server also comprises:
The 3rd message response module; Be used for when the WLAN that receives the initiation of first terminal rolls off the production line service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance in the information storage module; Confirm the corresponding terminal iidentification of communication identifier that said WLAN rolls off the production line and carries in the service request, indication AC is released to the IP address of the second corresponding terminal distribution of definite terminal iidentification.
15. like the arbitrary described certificate server of claim 12～14, it is characterized in that,
Said first terminal and second terminal are meant same terminal or two terminals.
16. a service server is characterized in that, said service server comprises:
Sending module is used to send the authentication request that carried terminal identifies;
Receiver module is used to receive said terminal iidentification corresponding service state information;
Operational module is used for when the business state information that receives is first state, is used to insert the IP address of wlan network for the corresponding terminal distribution of said terminal iidentification.
17. service server as claimed in claim 16 is characterized in that,
Said operational module also is used for when receiver module receives terminal iidentification, is released to the IP address of the terminal distribution of the terminal iidentification correspondence that receives.
18. a WLAN Operational Visit system is characterized in that said system comprises first terminal, second terminal, server, wherein:
First terminal is used for initiating the WLAN service request of reaching the standard grade to server;
Second terminal is used for initiating the request of WLAN Operational Visit to server;
Server; Be used for when the WLAN that receives the initiation of first terminal reaches the standard grade service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance; With the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade is first state, and when receiving the authentication request of the terminal iidentification that carries second terminal, confirms said terminal iidentification corresponding service state information; When said business state information is first state, be the IP address that second terminal distribution is used to insert wlan network.
19. system as claimed in claim 18 is characterized in that,
Said first terminal also is used for initiating the WLAN service request that rolls off the production line to server;
Said server; Also be used for when the WLAN that receives the initiation of first terminal rolls off the production line service request; According to the corresponding relation between the communication identifier, terminal iidentification and the business state information three that preserve in advance; Confirm the corresponding terminal iidentification of communication identifier that said WLAN rolls off the production line and carries in the service request, be released to the IP address of the second corresponding terminal distribution of definite said terminal iidentification.
20. system as claimed in claim 19 is characterized in that, said server comprises certificate server and service server AC, wherein:
Certificate server; Be used for when the WLAN that receives the initiation of first terminal reaches the standard grade service request; With the said WLAN communication identifier corresponding service state information updating that carries in the service request of reaching the standard grade is first state, when receiving the authentication request that AC sends, said terminal iidentification corresponding service state information is sent to AC; And when the WLAN that receives the initiation of first terminal rolls off the production line service request, the terminal iidentification of confirming is sent to AC;
Said AC; Being used for when the said business state information that receives is first state, is the IP address that second terminal distribution is used to insert wlan network, and; When receiving the terminal iidentification of certificate server transmission, be released to the IP address of the second corresponding terminal distribution of this terminal iidentification.
21. system as claimed in claim 20 is characterized in that, said system also comprises:
Accounting server BOSS is used for confirming communication identifier and terminal iidentification that the WLAN service fulfillment request that receives is carried, and communication identifier of determining and terminal iidentification are sent to certificate server;
Said certificate server also is used to receive communication identifier and the terminal iidentification that BOSS sends, and sets up and preserves said communication identifier, terminal iidentification and be the corresponding relation between the business state information of said WLAN traffic assignments.
22., it is characterized in that said first terminal and second terminal are meant same terminal or two terminals like the arbitrary described system of claim 18～21.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201010282525.0A CN102404738B (en) | 2010-09-14 | 2010-09-14 | Method, system and authentication server for being switched in and retreating from wireless local area network (WLAN) |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201010282525.0A CN102404738B (en) | 2010-09-14 | 2010-09-14 | Method, system and authentication server for being switched in and retreating from wireless local area network (WLAN) |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102404738A true CN102404738A (en) | 2012-04-04 |
| CN102404738B CN102404738B (en) | 2014-01-08 |
Family
ID=45886419
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201010282525.0A Active CN102404738B (en) | 2010-09-14 | 2010-09-14 | Method, system and authentication server for being switched in and retreating from wireless local area network (WLAN) |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102404738B (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103249115A (en) * | 2013-05-07 | 2013-08-14 | 中国联合网络通信集团有限公司 | Policy configuration method and device |
| CN103501495A (en) * | 2013-10-16 | 2014-01-08 | 苏州汉明科技有限公司 | Perception-free WLAN (Wireless Local Area Network) authentication method fusing Portal/Web authentication and MAC (Media Access Control) authentication |
| WO2018133683A1 (en) * | 2017-01-19 | 2018-07-26 | 阿里巴巴集团控股有限公司 | Network authentication method and apparatus |
| WO2019158050A1 (en) * | 2018-02-13 | 2019-08-22 | 华为技术有限公司 | Method for controlling terminal to use wireless network and related device |
| WO2021103599A1 (en) * | 2019-11-26 | 2021-06-03 | 华为技术有限公司 | Contract information processing method, apparatus, and device |
| WO2024022400A1 (en) * | 2022-07-26 | 2024-02-01 | 中国电信股份有限公司 | Cloud resource configuration method and related device |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1487705A (en) * | 2002-09-30 | 2004-04-07 | ��Ϊ��������˾ | Active user's off-line processing method while intercommunicating radio LAN and mobile communication system |
| CN1691653A (en) * | 2004-04-16 | 2005-11-02 | 美国博通公司 | Method and system for providing registration, authentication and access via broadband access gateway |
| CN1842000A (en) * | 2005-03-29 | 2006-10-04 | 华为技术有限公司 | Method for realizing access authentication of WLAN |
| EP1871128B1 (en) * | 2006-06-20 | 2008-10-22 | Alcatel Lucent | A method for a handover procedure of a mobile terminal, a base station and a network therefor |
| CN101416548A (en) * | 2006-04-20 | 2009-04-22 | 高通股份有限公司 | Wireless handoffs between multiple networks |
| CN101547444A (en) * | 2009-03-11 | 2009-09-30 | 西安西电捷通无线网络通信有限公司 | Method for providing special access process to different terminals in WLAN |
-
2010
- 2010-09-14 CN CN201010282525.0A patent/CN102404738B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1487705A (en) * | 2002-09-30 | 2004-04-07 | ��Ϊ��������˾ | Active user's off-line processing method while intercommunicating radio LAN and mobile communication system |
| CN1691653A (en) * | 2004-04-16 | 2005-11-02 | 美国博通公司 | Method and system for providing registration, authentication and access via broadband access gateway |
| CN1842000A (en) * | 2005-03-29 | 2006-10-04 | 华为技术有限公司 | Method for realizing access authentication of WLAN |
| CN101416548A (en) * | 2006-04-20 | 2009-04-22 | 高通股份有限公司 | Wireless handoffs between multiple networks |
| EP1871128B1 (en) * | 2006-06-20 | 2008-10-22 | Alcatel Lucent | A method for a handover procedure of a mobile terminal, a base station and a network therefor |
| CN101547444A (en) * | 2009-03-11 | 2009-09-30 | 西安西电捷通无线网络通信有限公司 | Method for providing special access process to different terminals in WLAN |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103249115A (en) * | 2013-05-07 | 2013-08-14 | 中国联合网络通信集团有限公司 | Policy configuration method and device |
| CN103249115B (en) * | 2013-05-07 | 2015-12-02 | 中国联合网络通信集团有限公司 | Tactics configuring method and device |
| CN103501495A (en) * | 2013-10-16 | 2014-01-08 | 苏州汉明科技有限公司 | Perception-free WLAN (Wireless Local Area Network) authentication method fusing Portal/Web authentication and MAC (Media Access Control) authentication |
| WO2018133683A1 (en) * | 2017-01-19 | 2018-07-26 | 阿里巴巴集团控股有限公司 | Network authentication method and apparatus |
| CN108337677A (en) * | 2017-01-19 | 2018-07-27 | 阿里巴巴集团控股有限公司 | Network authentication method and device |
| CN108337677B (en) * | 2017-01-19 | 2020-10-09 | 阿里巴巴集团控股有限公司 | Network authentication method and device |
| TWI745473B (en) * | 2017-01-19 | 2021-11-11 | 香港商阿里巴巴集團服務有限公司 | Network verification method and device |
| WO2019158050A1 (en) * | 2018-02-13 | 2019-08-22 | 华为技术有限公司 | Method for controlling terminal to use wireless network and related device |
| US11553389B2 (en) | 2018-02-13 | 2023-01-10 | Huawei Technologies Co., Ltd. | Method for controlling terminal to use wireless network and related device |
| WO2021103599A1 (en) * | 2019-11-26 | 2021-06-03 | 华为技术有限公司 | Contract information processing method, apparatus, and device |
| CN112954694A (en) * | 2019-11-26 | 2021-06-11 | 上海华为技术有限公司 | Method, device and equipment for processing subscription information |
| WO2024022400A1 (en) * | 2022-07-26 | 2024-02-01 | 中国电信股份有限公司 | Cloud resource configuration method and related device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102404738B (en) | 2014-01-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10917781B2 (en) | Implementation and communication methods, apparatus and system of virtual subscriber identity module | |
| CN105916134A (en) | METHOD AND APPARATUS FOR SELECTING BOOTSTRAP Esims | |
| CN101232509A (en) | Equipment, system and method for supporting insulation mode network access control | |
| CN102404738B (en) | Method, system and authentication server for being switched in and retreating from wireless local area network (WLAN) | |
| US20120149331A1 (en) | Method and system for remote control of smart card | |
| CN102855555A (en) | System and method for identifying payment risks based on position transformation | |
| US9769247B2 (en) | Application distribution method, terminal, and server | |
| CN106899972B (en) | Vehicle registration method, vehicle charging method, device and system | |
| CN106211131A (en) | The management method of virtual SIM card, managing device, server and terminal | |
| CN106211129B (en) | A kind of method, system and platform for opening card in the air | |
| CN108306882A (en) | A kind of method and the network equipment of terminal access business | |
| CN103186853A (en) | Mobile payment method, device and system for server side and client side | |
| WO2020027265A1 (en) | Charging control system, application program, and control method in charging control system | |
| CN106856585A (en) | Set up the method and device of short-distance wireless passage | |
| CN101835138A (en) | Provisioning system, relative device and charging system of data card service | |
| US11625492B2 (en) | Method and system for securely providing vehicle services data to a vehicle | |
| CN102469437A (en) | Method for opening communication service, system and equipment thereof | |
| CN103124252A (en) | Client application access authentication processing method and device | |
| CN102693506B (en) | Device and method for supporting operation of mobile traction business process | |
| CN108347732A (en) | A kind of bluetooth security communication means of shared automobile and mobile phone | |
| CN106657067A (en) | Smart secret key control system of mobile security network | |
| CN104918221A (en) | Terminal peripheral login, logout and standby processing method and system | |
| CN111050323B (en) | Terminal switching method, device and system | |
| CN105634771A (en) | User side device and network side device in communication system, and wireless communication method | |
| EP3002722A1 (en) | Distributed processing system for processing transportation fees and operating method thereof |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |