WO2012122947A1

WO2012122947A1 - Method, system and apparatus for accessing wlan network

Info

Publication number: WO2012122947A1
Application number: PCT/CN2012/072446
Authority: WO
Inventors: 杨晓范; 王文明; 刘辉; 刘南; 盛凌志; 邢刚
Original assignee: 中国移动通信集团北京有限公司
Priority date: 2011-03-16
Filing date: 2012-03-16
Publication date: 2012-09-20
Also published as: CN102685743B; CN102685743A

Abstract

The present invention provides a method, a system and apparatus for accessing WLAN network, particularly comprising: an access request to access WLAN network initiated by a WLAN terminal is sent to WLAN AC in a wireless communication manner via a wireless routing device and a mobile communication network element, so that the WLAN AC can authenticate the received access request via an authentication device to achieve the purpose of connecting the WLAN terminal to the WLAN network. Since the access request initiated by a WLAN terminal is transmitted to the WLAN AC via the wireless routing device and the mobile communication network element in a wireless communication manner, flexibility of network element deployment can be effectively improved by using the wireless transmission function of the wireless routing device and the mobile communication network element, and thereby a large and continuous coverage of the WLAN network can be achieved to improve network quality of the WLAN network.

Description

Method, system and device for accessing WLAN network The application claims to be submitted to the Chinese Patent Office on March 16, 2011, the application number is 201110063162.6, and the invention name is "a method, system and device for accessing a WLAN network" Priority of Chinese Patent Application, the entire contents of which is incorporated herein by reference. Technical field

The present invention relates to the field of mobile communications technologies, and in particular, to a method, system, and device for accessing a WLAN network.

BACKGROUND OF THE INVENTION With the increasing demand for mobile data services, in particular, mobile communication terminals with wireless local area network (WLAN) modules (hereinafter referred to as WLAN terminals) are gradually popularized, and WLAN networks are used to offload mobile communication network data services. Under the pressure of the WLAN terminal, accessing the WLAN network to access the mobile Internet anytime and anywhere has become a trend of wireless broadband access networks.

The prior art provides the following methods for accessing a WLAN network through a metropolitan area network:

As shown in FIG. 1 , it is a topology diagram of a network structure of an existing WLAN network, where a WLAN terminal is connected to an WLAN access point (AP, Access Point), and the WLAN AP accesses the WLAN through a switch and a router in the metropolitan area network. The controller (AC, Access Controller) is connected, and the WLAN terminal is connected to the WLAN network through the WLAN AC.

In the network structure shown in Figure 1, the process of accessing the WLAN network is shown in Figure 2:

Step 101: The WLAN terminal accesses the WLAN AP.

Step 102: Access the WLAN service user access authentication point and service control point (AC/SC) through the WLAN AP. Step 103: Access the WLAN network through the WLAN AC/SC.

The above scheme for accessing the WLAN network is based on a fixed access network (metropolitan area network) of the entire Internet Protocol (IP), and the connection between the WLAN AP and the metropolitan area network is a wired connection. Therefore, the deployment of the WLAN AP is restricted, resulting in WLAN networks cannot achieve large-area continuous coverage, especially in mobile vehicles such as buses, trains, and subways. Because WLAN APs cannot be deployed, coverage of WLAN networks cannot be achieved, making it difficult for mobile terminals to access WLAN networks.

In order to solve the problem that the deployment of the WLAN AP is limited in the above solution, and the mobility of the WLAN AP cannot be supported, a relay access scheme of the WLAN network is proposed, including: setting the AP on the user side and the network side, and the AP on the user side. The base station AP on the network side communicates in a wireless manner. After the WLAN terminal is connected to the user-side AP, the base station AP on the network side accesses the metropolitan area network, and then connects to the WLAN AC through the metropolitan area network, and passes through the WLAN AC. The WLAN terminal accesses the WLAN network. The common network structure topology is shown in Figure 3 below.

However, the trunk access scheme of the WLAN network is still based on the metropolitan area network. Although the deployment of the WLAN AP is somewhat improved, the deployment scope of the user-side AP is expanded to some extent, but it is still subject to the network side. The impact of the base station AP coverage, the network shield capacity and continuous coverage of the WLAN network are still subject to certain restrictions.

In summary, the existing all-IP-based fixed metropolitan area network access WLAN network and the WLAN network relay access scheme do not fully consider and utilize existing mobile communication network resources, so that the WLAN network The continuous coverage capability is poor, resulting in a low network shield of the WLAN network. SUMMARY OF THE INVENTION The embodiments of the present invention provide a method, system, and device for accessing a WLAN network, which are used to solve the problem that the network shield of the WLAN network is low due to poor continuous coverage capability of the WLAN network in the prior art.

A method for accessing a wireless local area network WLAN network, the method comprising:

The WLAN AC receives the access request sent by the mobile communication network element, and the access request is that the WLAN terminal of the wireless local area network is forwarded to the mobile communication network element by using the wireless routing device;

The WLAN AC sends the access request to the authentication device, and the authentication device is required to authenticate the WLAN terminal according to the received access request, and when the authentication is passed, instruct the WLAN terminal to access the WLAN network. .

A system for accessing a WLAN network, the system comprising a wireless local area network WLAN terminal, a wireless routing device, a mobile communication network element, a wireless local area network access controller WLAN AC, and an authentication device, wherein:

a WLAN terminal, configured to send an access request to the wireless routing device;

a wireless routing device, configured to forward the access request to a mobile communication network element;

a mobile communication network element, configured to forward the access request to the WLAN AC;

The WLAN AC is configured to send the access request to the authentication device, and when the authentication device authenticates the WLAN terminal, instruct the WLAN terminal to access the WLAN network;

An authentication device, configured to authenticate the WLAN terminal according to the access request.

A wireless local area network access controller WLAN AC, the WLAN AC includes a first receiving module and a first sending module, where:

The first receiving module is configured to receive an access request sent by the mobile communication network element, where the access request is forwarded by the wireless local area network WLAN terminal to the mobile communication network element by using the wireless routing device;

a first sending module, configured to send the access request to the authentication device, requesting the authentication device to perform authentication on the WLAN terminal according to the received access request, and indicating the WLAN when the authentication is passed The terminal accesses the WLAN network. A mobile communication network element, comprising: an access unit and at least one data service gateway: an access unit, configured to receive an access request, where the access request is forwarded by a wireless local area network WLAN terminal by using a wireless routing device ;

The data service gateway is configured to forward the access request to the WLAN access controller WLAN AC, and the WLAN AC is required to indicate that the WLAN terminal accesses the WLAN network when the WLAN terminal authenticates.

In the technical solution provided by the embodiment of the present invention, the access request initiated by the WLAN terminal to access the WLAN network is no longer connected to the WLAN AC through the wired connection of the metropolitan area network, but through the wireless routing device and the mobile communication network element. The wireless communication mode is connected to the WLAN AC, so that the WLAN AC authenticates the received access request through the authentication device, thereby achieving the purpose of the WLAN terminal accessing the WLAN network. Since the access request initiated by the WLAN terminal is transmitted to the WLAN AC through the wireless communication method of the wireless routing device and the mobile communication network element, the wireless transmission function of the wireless routing device and the mobile communication network element can effectively improve the flexibility of the network element deployment. In turn, large-area continuous coverage of the WLAN network can be realized, and the network shield of the WLAN network can be increased. BRIEF DESCRIPTION OF DRAWINGS FIG. 1 is a topological diagram of a network structure of a WLAN network in the prior art;

2 is a schematic flowchart of a method for accessing a WLAN network in the prior art;

3 is a topological diagram of a network structure of a WLAN network in the prior art;

4 is a schematic flowchart of a method for accessing a WLAN network according to Embodiment 1 of the present invention;

FIG. 5 is a schematic flowchart of a method for accessing a WLAN network according to Embodiment 2 of the present invention;

FIG. 6 is a schematic structural diagram of a system for accessing a WLAN network according to Embodiment 3 of the present invention;

7 is a schematic structural diagram of a wireless local area network access controller according to Embodiment 4 of the present invention;

FIG. 8 is a schematic structural diagram of a mobile communication network element according to Embodiment 5 of the present invention. EMBODIMENT OF THE INVENTION The present invention provides a new network system architecture, in which WLAN terminals, wireless routing devices, mobile communication network elements, The WLAN AC and the authentication device are sequentially connected by wire or wirelessly, and the WLAN terminal can access the wireless routing device, and the wireless routing device communicates with the existing mobile communication network, and the authentication device set by the mobile communication network side The accessed WLAN terminal performs authentication authentication. When the authentication and authentication is passed, the WLAN terminal accesses the WLAN network through the WLAN AC, thereby solving the problem that the WLAN AP does not support mobility, resulting in mobile traffic such as buses, trains, and subways. On the tool, the mobile terminal uses the WLAN network to access the mobile Internet, which is more difficult. It is no longer limited by the coverage of the base station AP on the network side. The network shield capacity and continuous coverage capability are guaranteed, and at the same time, it is fully beneficial. Existing mobile communication network resources are used.

The technical solutions of the present invention will be described in detail below through various embodiments and the accompanying drawings.

Embodiment 1

A first embodiment of the present invention provides a method for accessing a WLAN network. The flowchart of the method is as shown in FIG. 4, and specifically includes the following steps:

Step 201: The WLAN terminal sends an access request.

When the WLAN terminal wants to access the WLAN network, it sends an access request to the wireless routing device, where the request may carry the terminal identifier.

The WLAN terminal refers to a mobile communication terminal with a WLAN module, and includes a portable computer terminal device supporting a WIFI module such as a notebook computer, a wireless fidelity (WIFI) mobile phone terminal, and a tablet computer.

Step 202: The wireless routing device sends the access request to the mobile communication network element.

The wireless routing device may be deployed in a data service hotspot area for completing the function of supporting a terminal device that supports the WIFI standard such as 802.11a/b/g/n to access a public mobile communication network, which may include a user terminal access module and data. Returning the module, and using the data backhaul module to transmit the access request sent by the WLAN terminal to the mobile communication network. Specifically, the data backhaul module can support multiple modes, for example, the data backhaul module can be time-divided TD-SCDMA (Time Division-Synchronous Code Division Multiple Access) mode, or TD-LTE (TD-SCDMA Long Term Evolution) mode, or wideband code division WCDMA (Wandaband Code Division Multiple Access) mode, or Code Division Multiple Access (CDMA) mode, or long-term evolution technology including FDD (Frequency Division Duplexing) (LTE, Long Term) Evolution 3G\4G network mode, etc., no longer here - enumeration.

The user terminal access module and the data backhaul module may each be multiple to implement data access and data backhaul respectively.

In terms of data communication, the wireless routing device is responsible for completing the encryption and decryption of data packets with the WLAN terminal, and also supports the data compression function, and the data compression and decompression processing is completed by cooperation with the network side device to improve the mobile communication. Utilization of network resources.

In terms of security control, the wireless routing device can control the WLAN terminal to access the WLAN network through the network logo.

It should be noted that when the WLAN terminal moves in the seamless coverage area of each wireless routing device, the WLAN terminal can perform handover (Handover) between different wireless routing devices, so that different wireless routing devices can access the WLAN network. Ensure that data communication is not interrupted.

The wireless routing device can be customized by the operator to write a dedicated access point name (APN, Access Point) Name) In order to access the mobile communication network corresponding to the APN, for example, the APN is China Mobile Network (CMNET, China Mobile Net), and the accessed mobile communication network is a CMNET network.

Step 203: The mobile communication network element sends the access request to the WLAN AC.

The mobile communication network element may be a network element of a TD-SCDMA network packet (PS) domain, or may be a network element of a TD-LTE network.

The mobile communication network element can include an access unit and at least one data service gateway. When the wireless access device sends the access point name (APN) to the mobile communication network element, the access unit may receive the APN by using the access unit, and determine, according to the received APN, to send to the WLAN AC. The incoming data service gateway sends an access request to the WLAN AC by the determined data service gateway, where the data service gateway can be a GGSN (Gateway GPRS Support Node) device in the 3G network, or an LTE network LTE P-GW device.

As a controller for controlling the wireless routing device, the WLAN AC is used to complete management and configuration of the wireless routing device to implement functions such as load balancing and dynamic channel allocation, and the WLAN AC serves as a security control node for the WLAN terminal access to the WLAN terminal. Completing the corresponding authentication and accounting auxiliary functions, supporting the establishment of a tunnel with the mobile communication network element, and authenticating the packets sent from the tunnel.

Step 204: The WLAN AC sends the access request to the authentication device.

In this embodiment, the WLAN terminal may be authenticated by using an authentication method based on the WEB page. When the authentication mode is used, the authentication device may include an entry (PORTAL) server and an authentication server, and the wireless routing device may The access point that is accessed by the WLAN terminal is connected to the authentication server in the background, and the authentication of the WLAN user is completed. The authentication server in the background may be a remote authentication dial in user service (RADIUS) server. The WLAN AC provides the mandatory PORTAL function, and pushes the authentication page to the WLAN terminal, and connects it as a security control point to the authentication server in the background to complete the access authentication to the WLAN terminal. After the WLAN terminal passes the authentication, the WLAN terminal service data passes through the WLAN AC. Access to the appropriate dedicated service network.

When the WLAN terminal is authenticated by using the WEB page-based authentication method, step 204 specifically includes the following steps:

Step 2051: The WLAN AC sends the access request to the ingress server.

In this step, the WLAN AC sends the access request to the ingress server, instructing the ingress server to

The WLAN terminal pushes the authentication page.

The ingress server is configured to cooperate with the WLAN AC to complete the authentication of the WLAN terminal in the WEB page-based authentication mode, that is, the ingress server passes the WLAN AC after receiving the access request of the WLAN terminal forwarded by the WLAN AC. The authentication page is displayed to the WLAN terminal, and the WLAN terminal is required to input the authentication information, where the authentication information may be a terminal identifier and a password corresponding to the terminal identifier, such as a mobile phone number and a password.

The portal server pushes the authentication page to the WLAN terminal, which specifically includes:

The WLAN AC sends an authentication page pushed by the ingress server to the WLAN terminal to the mobile communication network element, indicating that the mobile communication network element forwards the authentication page to the WLAN terminal through the wireless routing device.

Step 2042: The WLAN AC receives the authentication page that is returned by the WLAN terminal and carries the authentication information. When receiving the authentication page pushed by the portal server, the WLAN terminal inputs the corresponding authentication information according to the indication of the authentication page, and sends the authentication page carrying the authentication information to the WLAN AC.

The WLAN AC receives the authentication page that carries the authentication information that is returned by the WLAN terminal, and specifically includes: the WLAN AC receives the authentication page that is sent by the mobile communication network element and carries the authentication information, where the authentication page that carries the authentication information is the WLAN. The terminal forwards to the mobile communication network element through the wireless routing device.

Step 2043: The WLAN AC sends the authentication information to the authentication server.

The WLAN AC sends the authentication information to the authentication server, and the authentication server is required to authenticate the WLAN terminal according to the authentication information, and the authentication server matches the received authentication information with the authentication information that has been saved by itself, and may determine When the received authentication information is the authentication information that has been saved by itself, the authentication is confirmed to pass, and the WLAN AC is instructed to access the WLAN terminal to the WLAN network.

After the WLAN terminal accesses the WLAN network, the method may further include the charging step of each WLAN terminal, and of course, the terminal identifier of the WLAN terminal that needs to pass the WLAN AC record authentication before performing the charging step, In the fee, the WLAN AC collects billing information such as the duration of the user data communication and the traffic, and sends the billing information to the authentication server and the ingress server to generate bills. The billing step includes :

Step 205: The WLAN AC receives charging information of multiple WLAN terminals accessing the WLAN network.

The WLAN AC receives charging information of a plurality of WLAN terminals accessing the WLAN network through the wireless routing device. Step 206: The WLAN AC determines, according to the recorded terminal identifier of the WLAN terminal, charging information of each WLAN terminal accessing the WLAN network.

The charging information received by the WLAN AC may be from multiple wireless routing devices, and each wireless routing device may also access multiple WLAN terminals. Therefore, in this step, the WLAN AC may be based on the saved terminal of the WLAN terminal. The identifier, classifies the received charging information, and determines charging information of each WLAN terminal separately.

Step 207: The WLAN AC sends the charging information of each WLAN terminal to the authentication server, and instructs the authentication server to perform charging for each WLAN terminal.

In this step, the WLAN AC sends the determined charging information of each WLAN terminal to the authentication server, and the authentication server performs charging according to the received charging information and generates a bill (accounting data record, ie, CDR). And the bill generated by the billing is sent to the BOSS billing subsystem through the billing data interface, thereby implementing for each WLAN Terminal billing.

Specifically, the mobile communication network element may be a network element of a TD-SCDMA network packet (PS) domain, where the access device may be a serving GPRS support node (SGSN, SERVICING GPRS SUPPORT NODE), and the data service gateway may be a gateway GPRS support node. (GGSN, Gateway GPRS Support Node), the SGSN completes the access of the authentication data and the charging data of the WLAN terminal, and the GGSN configures the dedicated APN for the wireless routing device access, and accesses the data sent by the WLAN terminal through the tunnel. Go to WLAN AC. In the following, the mobile communication network element is used as the network element of the TD-SCDMA network packet (PS) domain, and the WLAN terminal is authenticated by using the WEB page-based authentication method as an example, and the solution of the first embodiment of the present invention is performed by using a specific example. Detailed description.

Embodiment 2

FIG. 5 is a flowchart of steps of a method for accessing a WLAN network according to Embodiment 2 of the present invention, which specifically includes the following steps:

Step 301: The WLAN terminal sends an access request.

The WLAN terminal can use the public network Class C address to send an access request.

Step 302: The wireless routing device sends the access request to the mobile communication network element.

At this time, the wireless routing device includes a data backhaul module of the TD-SCDMA mode, and the data backhaul module can use the private IP address to send the access request to ensure a proprietary relationship between the wireless routing device and the WLAN AC. The tunnel, and the access request data sent by the WLAN terminal is sent to the GGSN through the SGSN.

In this step, the SGSN may select a GGSN that matches the APN according to the APN sent by the wireless routing device, and send the received access request to the selected GGSN.

Step 303: The mobile communication network element sends the access request to the WLAN AC.

The GGSN can send the received access request to the WLAN AC through the Gi interface configured between the GGSN and the WLAN AC.

Step 304: The WLAN AC points the received access request to the ingress server.

Step 305: The portal server pushes a PORTAL web authentication page to the WLAN terminal.

Specifically, the WLAN AC sends the PORTAL web authentication page that the ingress server pushes to the WLAN terminal to the GGSN, and the GGSN sends the received authentication page to the wireless routing device through the SGSN, instructing the wireless routing device to forward the authentication page to the WLAN terminal. .

Step 306: The WLAN terminal pushes the authentication page carrying the authentication information to the authentication server.

The WLAN terminal user can enter the terminal identifier (eg, mobile phone number) and password in the PORTAL WEB authentication page, and then the authentication page carrying the authentication information is routed to the authentication server by the wireless routing device, the SGSN, the GGSN, and the WLAN AC.

Step 307: After the authentication is passed, the WLAN AC controls and allows the WLAN terminal to access the Internet (Internet) route. The authentication server authenticates the WLAN terminal, and notifies the WLAN terminal to the WLAN terminal through the WLAN AC, and when the authentication passes, instructs the WLAN AC to access the WLAN terminal to the WLAN network.

Step 308: The WLAN AC receives charging information of multiple WLAN terminals accessing the WLAN network.

Step 309: The WLAN AC determines, according to the recorded terminal identifier of the WLAN terminal, charging information of each WLAN terminal accessing the WLAN network.

Step 310: The WLAN AC sends the charging information of each WLAN terminal to the authentication server, and instructs the authentication server to perform charging for each WLAN terminal.

Steps 308 to 310 are respectively corresponding to steps 205 to 207 in the first embodiment, and are not described herein again. The solution for accessing the WLAN network provided by the first embodiment and the second embodiment of the present invention can support the access of various WLAN terminals by including the wireless routing device, and utilize the existing mobile communication system resources, and wirelessly. The routing device and the mobile communication system resources can be wirelessly connected, thereby realizing that the mobile terminal can wirelessly access the mobile Internet for data service communication using the WLAN technology in a mobile place, such as a bus, a train, a subway, etc., and is based on mobile The base station equipment in the communication system resources has a wide network coverage, and the network shield capacity and continuous coverage capability are well guaranteed, and the existing wireless system resources are fully utilized.

The solution for accessing the WLAN network proposed by the present invention does not require major changes to the wireless routing device, and the WLAN AC for access control of the WLAN terminal is placed at the back end of the mobile communication network, and the WLAN terminal is received. Through the data forwarded by the data service gateway (for example, GGSN), the access authentication and charging processing of the WLAN terminal is controlled, so that one WLAN AC at the back end of the network can implement multiple wireless routing devices dispersed in different locations. Unified control and management facilitates large-scale deployment of wireless routing devices, and can also save the input cost of network devices (usually the cost of an AC is hundreds of times the cost of an AP).

In addition, in the process of access authentication to the WLAN terminal, a WEB page-based authentication mode can be implemented, and the WLAN terminal can provide a terminal identifier (eg, a mobile phone number) and password information in the web authentication page, and implements a single WLAN. Terminal authentication and billing processing.

Embodiment 3

The method for accessing a WLAN network according to the first embodiment of the present invention provides an access method according to Embodiment 3 of the present invention.

WLAN network system, FIG. 6 is a schematic structural diagram of a system for accessing a WLAN network according to Embodiment 3 of the present invention, where the system includes a wireless local area network WLAN terminal 11, a wireless routing device 12, a mobile communication network element 13, and a wireless local area network access. The controller 14 and the authentication device 15 , wherein:

The WLAN terminal 11 is configured to send an access request to the wireless routing device; the wireless routing device 12 is configured to forward the access request to the mobile communication network element; and the mobile communication network element 13 is configured to forward the access request to the WLAN AC The WLAN access controller 14 is configured to send the access request to the authentication device, and when the authentication device authenticates the WLAN terminal, instruct the WLAN terminal to access the WLAN network; the authentication device 15 is configured to use the The access request authenticates the WLAN terminal. The mobile communication network element 13 includes an access unit 131 and at least one data service gateway 132: The wireless routing device 12 is further configured to send an access point name APN to the access unit.

The access unit 131 is configured to determine a data service gateway according to the received APN.

A data service gateway 132, determined by the access unit, is configured to send the access request to the WLAN AC.

The authentication device 15 includes an ingress server 151 and an authentication server 152;

The WLAN access controller 14 is specifically configured to send the access request to the ingress server, and receive an authentication page that carries the authentication information returned by the WLAN terminal, and send the authentication information to the authentication server.

The portal server 151 is configured to push an authentication page to the WLAN terminal after receiving the access request. The authentication server 152 is configured to authenticate the WLAN terminal according to the received authentication information.

The WLAN access controller 14 is specifically configured to send an authentication page that the portal server pushes to the WLAN terminal to the mobile communication network element, and receive an authentication page that carries the authentication information returned by the mobile communication network element.

The mobile communication network element 13 is further configured to send the received authentication page to the wireless routing device, and send the authentication page carrying the authentication information returned by the wireless routing device to the WLAN AC.

The wireless routing device 12 is further configured to forward the received authentication page to the WLAN terminal, and receive the authentication page that carries the authentication information returned by the WLAN terminal, and send the authentication page to the mobile communication network element.

The WLAN access controller 14 is further configured to record the terminal identifier of the WLAN terminal through which the authentication is passed, and after the WLAN terminal accesses the WLAN network, receive charging information of multiple WLAN terminals that access the WLAN network through the wireless routing device, The charging information of each WLAN terminal accessing the WLAN network is determined according to the recorded terminal identifier of the WLAN terminal, and the charging information of each WLAN terminal is sent to the authentication server.

The authentication server 152 is also used to charge each WLAN terminal separately.

The system may further include a WLAN network management module 16:

The WLAN network management module is used to connect to the WLAN AC to complete configuration update, network management, fault diagnosis, and status monitoring of the remote wireless routing device.

Embodiment 4

A method for accessing a WLAN network according to Embodiment 1 of the present invention is provided in Embodiment 4 of the present invention.

WLAN AC, FIG. 7 is a schematic structural diagram of a wireless local area network access controller according to Embodiment 4 of the present invention, where the WLAN AC includes a first receiving module 21 and a first sending module 22, where:

The first receiving module 21 is configured to receive an access request sent by the mobile communication network element, where the access request is that the WLAN terminal of the wireless local area network is forwarded to the mobile communication network element by using the wireless routing device; the first sending module 22 is configured to: The access request is sent to the authentication device, and the authentication device is required to authenticate the WLAN terminal according to the received access request, and when the authentication is passed, instruct the WLAN terminal to access the WLAN network.

The first sending module 22 includes a page sending submodule 221 and an information sending submodule 222, where: the page sending submodule 221 is configured to send the access request to an ingress server in the authentication device, indicating the portal The server sends an authentication page to the WLAN terminal. The information sending sub-module 222 is configured to send the received authentication information to the authentication server in the authentication device, and request the authentication server to authenticate the WLAN terminal according to the authentication information.

The first receiving module 21 is further configured to receive an authentication page that carries the authentication information returned by the WLAN terminal, and send the authentication information to the information sending submodule.

The WLAN AC further includes a second receiving module 23 and a second sending module 24:

The second receiving module 23 is configured to receive an authentication page that the portal server pushes to the WLAN terminal, where the second sending module 24 is configured to send an authentication page that is sent by the portal server that is received by the second receiving module to the WLAN terminal. Sending to the mobile communication network element, instructing the mobile communication network element to forward the authentication page to the WLAN terminal through the wireless routing device.

The first receiving module 21 is specifically configured to receive an authentication page that carries the authentication information sent by the mobile communication network element, where the authentication page that carries the authentication information is forwarded by the WLAN terminal to the mobile communication network element by using the wireless routing device.

The WLAN AC further includes a recording module 25, wherein:

The recording module 25 is configured to record, when the authentication server authenticates the WLAN terminal, the terminal identifier of the WLAN terminal through which the authentication is passed.

The first receiving module 21 is further configured to: after the WLAN terminal accesses the WLAN network, receive charging information of multiple WLAN terminals that access the WLAN network through the wireless routing device;

The first sending module 22 is further configured to determine, according to the recorded terminal identifier of the WLAN terminal, charging information of each WLAN terminal that accesses the WLAN network, and send charging information of each WLAN terminal to the authentication server, indicating the authentication server. Billing is performed for each WLAN terminal separately.

In this embodiment, as shown in FIG. 2, the first receiving module of the WLAN AC receives the information from the mobile communication network element, and sends the information to the authentication device through the first sending module, thereby implementing the mobile communication network element to the Communication of the right device; The second receiving module of the WLAN AC receives the information from the authentication device, and transmits the information to the mobile communication network element through the second sending module, thereby implementing communication from the authentication device to the mobile communication network element.

Embodiment 5

A method for accessing a WLAN network according to the first embodiment of the present invention, a mobile communication network element according to Embodiment 5 of the present invention, FIG. 8 is a schematic structural diagram of a mobile communication network element according to Embodiment 5 of the present invention, where The mobile communication network element includes an access unit 31 and at least one data service gateway 32, wherein:

The access unit 31 is configured to receive an access request, where the access request is forwarded by the wireless local area network WLAN terminal by using a wireless routing device; and the data service gateway 32 is configured to forward the access request to the wireless local area network access controller WLAN AC The WLAN AC is required to instruct the WLAN terminal to access the WLAN network when the WLAN terminal authenticates.

The access unit 31 is further configured to receive an access point name APN sent by the wireless routing device, and according to the received

The APN determines the data service gateway that sends the access request to the WLAN AC. The data service gateway 32 is further configured to receive an authentication page that is pushed by the WLAN AC, where the authentication page is pushed by the ingress server to the WLAN AC, and the authentication page that carries the authentication information returned by the access unit is received, and the authentication page is carried. The authentication page for the information is pushed to the WLAN AC.

The access unit 31 is further configured to: push the authentication page sent by the data service gateway to the WLAN terminal, receive the authentication page that carries the authentication information returned by the WLAN terminal, and send the authentication page that carries the authentication information to the data service. Gateway.

The access unit 31 is further configured to receive charging information of a plurality of WLAN terminals accessing the WLAN network.

The data service gateway 32 is further configured to send the charging information received by the access unit to the WLAN AC.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the present invention can be embodied in the form of a computer program product embodied on one or more computer-usable storage interfaces (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each process and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

Although the preferred embodiment of the invention has been described, it will be apparent to those of ordinary skill in the art that <RTIgt; Therefore, the appended claims are intended to be construed as including the preferred embodiments and the modifications

It is apparent that those skilled in the art can make various modifications and variations to the embodiments of the present invention without departing from the spirit and scope of the embodiments of the present invention. Thus, if such modifications and variations of the embodiments of the invention are within the scope of the invention The present invention is also intended to cover such modifications and variations within the scope of the equivalents.

Claims

Rights request

2. The method according to claim 1, wherein the mobile communication network element comprises an access unit and at least one data service gateway, and the access request received by the WLAN AC is in the at least one data service gateway. Sent by a data service gateway;

The data service gateway that sends an access request to the WLAN AC is determined by:

The access unit receives the access point name APN sent by the wireless routing device;

The access unit determines, according to the received APN, a data service gateway that sends an access request to the WLAN AC.

3. The method according to claim 1, wherein the authentication device comprises an ingress server and an authentication server;

The WLAN AC requires the authentication device to authenticate the WLAN terminal according to the received access request, including:

The WLAN AC sends the access request to the ingress server, instructing the ingress server to push the authentication page to the WLAN terminal;

The WLAN AC receives the authentication page that carries the authentication information returned by the WLAN terminal, and sends the authentication information to the authentication server, and requests the authentication server to authenticate the WLAN terminal according to the authentication information.

4. The method of claim 3, wherein

The WLAN AC instructs the ingress server to push the authentication page to the WLAN terminal, which specifically includes:

The WLAN AC sends an authentication page that the portal server pushes to the WLAN terminal to the mobile communication network element, and indicates that the mobile communication network element forwards the authentication page to the WLAN terminal by using the wireless routing device;

The WLAN AC receives the authentication page that is returned by the WLAN terminal and carries the authentication information, and specifically includes:

The WLAN AC receives the authentication page that carries the authentication information sent by the mobile communication network element, and the authentication page that carries the authentication information is forwarded by the WLAN terminal to the mobile communication network element by using the wireless routing device.

The method according to claim 3, wherein the authentication information includes a terminal identifier of the WLAN terminal;

After the authentication device authenticates the WLAN terminal, the method further includes:

The terminal identifier of the WLAN terminal through which the WLAN AC record is authenticated;

After the WLAN terminal accesses the WLAN network, the method further includes: The WLAN AC receives charging information of multiple WLAN terminals accessing the WLAN network through the wireless routing device; the WLAN AC determines charging information of each WLAN terminal accessing the WLAN network according to the recorded terminal identifier of the WLAN terminal, and each The charging information of the WLAN terminals is sent to the authentication server, and the authentication server is instructed to charge each WLAN terminal separately.

6. A system for accessing a wireless local area network WLAN network, characterized in that the system comprises a wireless local area network

WLAN terminal, wireless routing device, mobile communication network element, wireless local area network access controller WLAN AC and authentication device, wherein:

7. The system of claim 6, wherein the mobile communication network element comprises an access unit and at least one data service gateway:

a wireless routing device, further configured to send an access point name APN to the access unit;

The access unit is configured to determine a data service gateway according to the received APN;

A data service gateway determined by the access unit, configured to send the access request to the WLAN AC.

8. The system according to claim 6, wherein the authentication device comprises an ingress server and an authentication server;

The WLAN AC is specifically configured to send the access request to the ingress server, and receive an authentication page that carries the authentication information returned by the WLAN terminal, and send the authentication information to the authentication server.

An ingress server, configured to: after receiving the access request, push an authentication page to the WLAN terminal; and an authentication server, configured to authenticate the WLAN terminal according to the received authentication information.

9. The system of claim 8 wherein:

The WLAN AC is specifically configured to send an authentication page that the ingress server pushes to the WLAN terminal to the mobile communication network element, and receive an authentication page that carries the authentication information returned by the mobile communication network element;

The mobile communication network element is further configured to send the received authentication page to the wireless routing device, and send the authentication page carrying the authentication information returned by the wireless routing device to the WLAN AC;

The wireless routing device is further configured to forward the received authentication page to the WLAN terminal, and receive an authentication page that carries the authentication information returned by the WLAN terminal, and send the authentication page to the mobile communication network element.

10. The system of claim 8 wherein:

The WLAN AC is also used to record the terminal identifier of the WLAN terminal through which authentication is passed, and access the WLAN terminal. After the WLAN network, receiving charging information of multiple WLAN terminals accessing the WLAN network through the wireless routing device, determining charging information of each WLAN terminal accessing the WLAN network according to the recorded terminal identifier of the WLAN terminal, and The charging information of the WLAN terminals is sent to the authentication server;

The authentication server is also used to charge each WLAN terminal separately.

A WLAN AC, wherein the WLAN AC includes a first receiving module and a first sending module, where:

a first sending module, configured to send the access request to the authentication device, requesting the authentication device to perform authentication on the WLAN terminal according to the received access request, and indicating the WLAN when the authentication is passed The terminal accesses the WLAN network.

The WLAN AC according to claim 11, wherein the first sending module comprises a page sending submodule and an information sending submodule, wherein:

a page sending submodule, configured to send the access request to an ingress server in the authentication device, to instruct the ingress server to push the authentication page to the WLAN terminal;

An information sending submodule, configured to send the received authentication information to an authentication server in the authentication device, and request the authentication server to authenticate the WLAN terminal according to the authentication information;

The first receiving module is further configured to receive an authentication page that carries the authentication information returned by the WLAN terminal, and send the authentication information to the information sending submodule.

The WLAN AC according to claim 12, wherein the WLAN AC further includes a second receiving module and a second sending module:

The second receiving module is configured to receive an authentication page that is sent by the portal server to the WLAN terminal, where the second sending module is configured to send an authentication page that is sent by the portal server that is received by the second receiving module to the WLAN terminal. Sending to the mobile communication network element, instructing the mobile communication network element to forward the authentication page to the WLAN terminal by using the wireless routing device;

The first receiving module is configured to receive an authentication page that is sent by the mobile communication network element and that carries the authentication information. The authentication page that carries the authentication information is forwarded by the WLAN terminal to the mobile communication network element by using the wireless routing device.

The WLAN AC according to claim 12, wherein the WLAN AC further comprises a recording module, and the towel:

a recording module, configured to record, when the authentication server authenticates the WLAN terminal, the terminal identifier of the WLAN terminal through which the authentication is passed;

The first receiving module is further configured to: after the WLAN terminal accesses the WLAN network, receive charging information of multiple WLAN terminals that access the WLAN network through the wireless routing device; The first sending module is further configured to determine, according to the recorded terminal identifier of the WLAN terminal, charging information of each WLAN terminal that accesses the WLAN network, and send charging information of each WLAN terminal to the authentication server to indicate the authentication server. Billing is performed for each WLAN terminal separately.

A mobile communication network element, wherein the mobile communication network element comprises an access unit and at least one data service gateway:

An access unit, configured to receive an access request, where the access request is forwarded by a wireless local area network WLAN terminal by using a wireless routing device;

16. The mobile communication network element of claim 15 wherein:

The access unit is further configured to receive an access point name APN sent by the wireless routing device, and determine, according to the received APN, a data service gateway that sends an access request to the WLAN AC.

17. The mobile communication network element of claim 15 wherein:

The data service gateway is further configured to receive an authentication page that is pushed by the WLAN AC, where the authentication page is pushed by the ingress server to the WLAN AC, and the authentication page that carries the authentication information returned by the access unit is received, and the authentication page is carried. The authentication page of the information is pushed to the WLAN AC;

The access unit is further configured to: send an authentication page sent by the data service gateway to the WLAN terminal, receive an authentication page that carries the authentication information returned by the WLAN terminal, and send an authentication page that carries the authentication information to the data service. Gateway.

18. The mobile communication network element of claim 15 wherein:

The access unit is further configured to receive charging information of multiple WLAN terminals accessing the WLAN network;

The data service gateway is further configured to send the charging information received by the access unit to the WLAN AC.