WO2014166270A1

WO2014166270A1 - Request authentication method, access point, service station and communication system

Info

Publication number: WO2014166270A1
Application number: PCT/CN2013/088715
Authority: WO
Inventors: 杨浔; 陶源; 赵牧
Original assignee: 华为技术有限公司
Priority date: 2013-04-09
Filing date: 2013-12-06
Publication date: 2014-10-16
Also published as: CN104105094B; CN104105094A

Abstract

Disclosed are a request authentication method, an access point, a service station and a communication system. The request authentication method comprises: the access point receiving service demand information (101) carrying a service identifier as identification information of the desired service by a station to be serviced; the access point selecting a target service station which is capable of providing the service corresponding to the service identifier (102); the access point performing authentication with the target service station (103). Because the access point can actively request to establish correlation authentication relationship with the service station, the service station no longer needs to keep the correlation authentication relationship with the access point all the time. The service station can cancel the correlation authentication relationship with the access point after the service has been provided, and correspondingly release this part of the network resources, so as to improve the utilization rate of the network resources. Moreover, the service station can establish or cancel the correlation authentication relationship with the access point according to the service demand of the access point and the station, and the utilization rate and flexibility of the service station can thus be improved.

Description

Description of the book request authentication method, access point, service site and communication system

TECHNICAL FIELD Embodiments of the present invention relate to a wireless communication technology, and in particular, to a request authentication method, apparatus, and system. Background technique

The basic service set (BSS) includes an access point (AP) and at least one station (Station, STA), when the site includes a functional service site such as a projector or a printer, and the service site Once the associated authentication relationship with the access point has been established, services can be provided to other sites through the access point.

When a site needs to use a service, the access point can select a service site for the site from which it can provide services from its associated service site. Since the access point can only select the service site from the associated service site for the site that needs to be serviced, in order to ensure that the site can obtain the service in time, each service site needs to maintain an association authentication relationship with the access point.

The service site maintains an association authentication relationship with the access point that occupies network resources, and the service site is not always in a working state for providing services to other sites. When the service site occupies the network resource and maintains the associated authentication relationship with the access point, while waiting for the idle state to provide services for other sites, the utilization of network resources is reduced. SUMMARY OF THE INVENTION A first aspect of the embodiments of the present invention provides a method for requesting authentication, including:

The access point receives the service requirement information, where the service requirement information carries a service identifier, where the service identifier is identifier information of a service required by the site that needs to be served;

The access point selects a target service site that can provide a service corresponding to the service identifier; and performs authentication between the access point and the target service site.

In conjunction with the request authentication method provided by the first aspect, in a first possible implementation manner, performing authentication between the access point and the target service site includes: The access point sends the service request information to the target service site, where the service request information carries the service identifier, where the service request information is used by the target service site to determine whether the service identifier is provided. The ability of the corresponding service;

Receiving, by the access point, the service request success information sent by the target service station, where the service request success information is determined by the target service station according to the service request information, and having the capability of providing the service corresponding to the service identifier Generate

And the access point sends, according to the service request success information, authentication request information to the target service station, where the authentication request information is used for authentication between the target service site and the access point.

In conjunction with the request authentication method provided by the first aspect, in a second possible implementation manner, performing authentication between the access point and the target service site includes:

Sending, by the access point, the authentication request information that carries the service identifier to the target service site, where the authentication request information is used by the target service site after determining that the capability of providing the service corresponding to the service identifier is determined Authentication is performed with the access point.

In conjunction with the request authentication method provided by the first aspect, in a third possible implementation, the authentication between the access point and the target service site includes:

The access point sends the service request information to the target service site, where the service request information carries the service identifier, where the service request information is used by the target service site to determine whether the service identifier is provided. The ability of the corresponding service;

If the access point receives the authentication request information sent by the target service site within a preset time, the access point performs authentication with the target service site, and the authentication request information is used by the target service site according to the The service request information is sent to the access point after having the capability to provide the service corresponding to the service identifier.

In conjunction with the third possible implementation of the first aspect, in a fourth possible implementation, the method further includes:

If the access point does not receive the authentication request information sent by the target service station within the preset time, the access point resends the service request information to the target service station.

With reference to the first aspect or the first to fourth possible implementation manners, in a fifth possible implementation manner, the access point selecting, by the access point, the target service site that can provide the service corresponding to the service identifier includes: Incoming point selection can provide the service corresponding to the service identifier, and is in working time The service site within the segment acts as the target service site.

A second aspect of the embodiments of the present invention provides a method for requesting authentication, including:

The service station receives the service request information sent by the access point, where the service request information carries the capability of the service corresponding to the service identifier, where the service identifier is the service demand information sent by the access point from the site that needs to be served. Obtained in

Determining, by the service station, the service request success information to the access point after determining that the service has the capability of providing the service corresponding to the service identifier according to the service request information;

Receiving, by the service station, authentication request information sent by the access point to the service site according to the service request success information, where the authentication request information is used between the service site and the access point. Certification.

A third aspect of the embodiments of the present invention provides a method for requesting authentication, including:

The service station receives the authentication request information that is sent by the access point and carries the service identifier, where the service identifier is obtained by the access point from the service requirement information sent by the site that needs to be served; After the service identifier determines the capability of providing the service corresponding to the service identifier, the service identifier is authenticated according to the authentication request information and the access point.

A fourth aspect of the embodiments of the present invention provides a method for requesting authentication, including:

After the service station determines, according to the service request information, the capability of providing the service corresponding to the service identifier, the service station sends the authentication request information to the access point, where the authentication request information is used for the service site and the service site. Authenticate between access points.

A fifth aspect of the embodiments of the present invention provides an access point, including:

a receiving unit, configured to receive service requirement information, where the service requirement information carries a service identifier, where the service identifier is identifier information of a service required by a station that needs to be served;

a selection unit, configured to select a target service site that can provide a service corresponding to the service identifier; and an authentication unit, configured to perform authentication with the target service site.

In conjunction with the access point provided by the fifth aspect, in a first possible implementation manner, the authentication The unit is also used to:

Sending the service request information to the target service site, where the service request information carries the service identifier, where the service request information is used by the target service site to determine whether the service has the capability of providing the service identifier Receiving service request success information sent by the target service station, where the service request success information is generated by the target service station according to the service request information, and having the capability of providing the service corresponding to the service identifier; The service request success information is sent to the target service site for authentication request information, where the authentication request information is used for authentication between the target service site and the access point.

In conjunction with the access point provided by the fifth aspect, in a second possible implementation, the authentication unit is further configured to:

The authentication request information carrying the service identifier is sent to the target service site, and the capability of the service is subsequently authenticated with the access point.

In conjunction with the access point provided by the fifth aspect, in a third possible implementation, the authentication unit is further configured to:

Sending the service request information to the target service site, where the service request information carries the service identifier, where the service request information is used by the target service site to determine whether the service has the capability of providing the service identifier And performing authentication between the target service station and the target service station when the authentication request information sent by the target service station is received within a preset time, where the authentication request information is determined by the target service station according to the service request information. The ability to provide a service corresponding to the service identifier is then sent to the access point.

In conjunction with the third possible implementation of the fifth aspect, in a fourth possible implementation, the authenticating unit is further configured to:

And when the authentication request information sent by the target service station is not received within the preset time, the service request information is resent to the target service station.

In combination with the fifth aspect or the first to fourth possible implementation manners, in a fifth possible implementation manner, the selecting unit is further configured to:

A service site that can provide the service corresponding to the service identifier and is in a valid working period is selected as the target service site.

A sixth aspect of the embodiments of the present invention provides a service site, including: a receiving unit, configured to receive service request information sent by the access point, where the service request information carries a service identifier, where the service request information is used by the service station to determine whether the service corresponding to the service identifier is provided Capability, the service identifier is obtained by the access point from service demand information sent by a site that needs to be served;

a sending unit, configured to return, according to the service request information, the service request success information to the access point after determining the capability of providing the service corresponding to the service identifier;

An authentication unit, configured to receive, by the access point, authentication request information sent to the service site according to the service request success information, where the authentication request information is used between the service site and the access point Certify.

A seventh aspect of the embodiments of the present invention provides a service site, including:

a receiving unit, configured to receive, by the access point, the authentication request information that carries the service identifier, where the service identifier is obtained by the access point from the service requirement information sent by the site that needs to be served;

And an authentication unit, configured to perform authentication according to the service request identifier and the access point according to the service identifier, after the capability of providing the service corresponding to the service identifier is determined.

An eighth aspect of the embodiments of the present invention provides a service site, including:

a receiving unit, configured to receive service request information sent by the access point, where the service request information carries a service identifier, where the service request information is used by the service station to determine whether the service corresponding to the service identifier is provided Capability, the service identifier is obtained by the access point from service demand information sent by a site that needs to be served;

An authentication unit, configured to send, according to the service request information, an ability to provide a service corresponding to the service identifier, to send, to the access point, authentication request information, where the authentication request information is used by the service site and the The access points are authenticated.

A ninth aspect of the embodiments of the present invention provides a communication system, including the foregoing site to be served, the foregoing access point, and the service site; the site to be served, the access point, and the Communication connection between service sites.

The request authentication method, device, and system provided by the embodiment of the present invention receive the service demand information by the access point, and select a target service site that can provide the service corresponding to the service identifier according to the service identifier carried in the service requirement information, and further, the target service site Authenticate between service sites. Since the access point can actively request an association authentication relationship with the service site, the service site no longer needs to be maintained. The association authentication relationship with the access point, the service site can cancel the association authentication relationship with the access point after the service is provided, and release the network resources accordingly, thereby improving the utilization of the network resources; Since the service site can only associate with one access point and the service requirements of the site at the same time, establishing or disassociating the authentication relationship with different access points improves the utilization and flexibility of the service site. DRAWINGS

FIG. 1 is a flowchart of a method for requesting authentication according to an embodiment of the present invention;

2 is a flowchart of another method for requesting authentication according to an embodiment of the present invention;

FIG. 3 is a flowchart of still another method for requesting authentication according to an embodiment of the present invention;

4 is a flowchart of still another method for requesting authentication according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an access point according to an embodiment of the present invention;

FIG. 5b is a schematic structural diagram of another access point according to an embodiment of the present disclosure;

6a is a schematic structural diagram of a service site according to an embodiment of the present invention;

6b is a schematic structural diagram of another service site according to an embodiment of the present invention;

FIG. 7a is a schematic structural diagram of another service site according to an embodiment of the present invention;

FIG. 7b is a schematic structural diagram of another service site according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of another service site according to an embodiment of the present disclosure;

FIG. 8b is a schematic structural diagram of another service site according to an embodiment of the present invention;

FIG. 9 is a schematic structural diagram of a communication system according to an embodiment of the present invention. detailed description

In order to solve the problem that the service resources and the access point need to maintain the associated authentication relationship and occupy the network resources, and the utilization of the network resources is reduced, the method for initiating the request authentication by the access point to the service site is introduced in the embodiments of the present invention.

Since the service site that provides the service does not currently have an associated authentication relationship with the access point, the access point can initiate an action of establishing an association authentication relationship with the service site, so the service site no longer needs to remain with the access point. Associate the authentication relationship, after the service is provided, the association relationship with the access point can be canceled, and the network resources are released accordingly, thereby improving Utilization of network resources. In the application scenario. The site described in the embodiments of the present invention is a site that needs to use a service, and the service site is a site capable of providing a service. The service site serves the site through the access point. The service site can be a functional device such as a printer or projector.

FIG. 1 is a flowchart of a method for requesting authentication according to an embodiment of the present invention. As shown in FIG. 1, the method includes:

Step 101: The access point receives the service requirement information. The service requirement information carries a service identifier, and the service identifier is identifier information of a service required by a site that needs to be served.

Specifically, when a site needs to use a service, it can send service demand information to the access point. The service requirement information carries the service identifier of the service that the site needs to use. The access point can know which service the site needs to use through the service identifier.

The access point can learn the services that each service station can provide through information exchange with each service station connected to the communication; or the service station broadcasts the service broadcast that it can provide to the access point that it can communicate with. Therefore, the access point can learn the services that each service node can provide, and store the information in the access point in the form of the correspondence between the identifier of the service site and the service identifier. The access point is informed by the correspondence that which access service can be provided indirectly by the access point and which service site or services can be provided by the service site.

The station can learn information that the access point can provide indirectly by interacting with the access point; or, the access point broadcasts the service that it can provide indirectly to each site within its coverage. Therefore, the service identifier carried in the service requirement information sent by the site to the access point is the identifier information of the service that the access point can provide.

Since the station can communicate with a plurality of access points, the station can first determine which access point or services can provide the required services according to the above method, and then send the service demand information to the access point capable of providing the service.

In an actual application, the site may carry the service identifier in the service request information, the authentication request, the association request, or other information that the access point interacts with.

Step 102: The access point selects a target service site that can provide a service corresponding to the service identifier. Specifically, the access point searches for the correspondence between the stored service identifier and the identifier of the service site according to the service identifier in the service requirement information. If the access point finds one or more service sites corresponding to the service identifier in the correspondence, the one or more service sites may be respectively used as the target service site.

It should be noted that the target service site may be one or more, and each target service site is one of the service sites, and is called a "target service site" in order to explicitly represent the object that communicates with the access point.

It is a preferred case that the site knows in advance the service that the access point can provide indirectly. If the site does not know in advance the service that the access point can provide indirectly, the access point may not find the target corresponding to the service identifier. Good service site.

In such a case, if the access point cannot find the target service site, it can communicate with the site to make the site aware that it cannot provide the service to the site indirectly.

Step 103: Perform authentication between the access point and the target service site.

Specifically, when the access point and the target service site perform the request for authentication, the following three processes may be implemented, and the specific method for requesting the authentication may use an implementation similar to that in the prior art.

The first type is that the service request information is sent by the access point to the target service station, and the service request information carries the service identifier obtained from the service requirement information; the target service station determines whether the service identifier is provided according to the service identifier. Identifying the capability of the corresponding service, if yes, returning the service request success information to the access point, and if not, returning the service request failure information to the access point; if the access point receives the service request success information, Sending the authentication request information to the target service site, and performing the authentication process between the two through the communication interaction between the access point and the target service site; if the access point receives the service request failure information, the subsequent authentication is not required to be initiated. Process.

The second method is: sending, by the access point, the authentication request information to the target service site, where the authentication request information carries the service identifier obtained from the service requirement information; after receiving the authentication request information, the target service site uses the The service identifier determines whether it has the ability to improve the service corresponding to the service identifier; if the target service site has the capability of providing the service corresponding to the service identifier, the authentication process between the two is performed through communication interaction with the access point. If the target service site does not have the capability to provide the service corresponding to the service identifier, the information for characterizing the failure is fed back to the access point.

The third type is that the service request information is sent by the access point to the target service station, and the service request information carries the service identifier obtained from the service requirement information; the target service station determines whether the service identifier is provided according to the service identifier. The ability to identify the corresponding service, and if so, to the connection The ingress returns the service request success information, and if not, returns the service request failure information to the access point; if the target service station returns the service request success information to the access point, it will continue to send the authentication request information to the access point. Through the communication interaction between the access point and the target service site, the authentication process between the two is performed; if the target service site returns the service request failure information to the access point, the subsequent authentication process is not required to be initiated.

With any of the above three methods, an association authentication relationship can be established between the access point and the target service site. Moreover, during the association of the associated authentication relationship, both the access point and the target service site maintain an associated authentication relationship between the two.

The request authentication method provided by the embodiment of the present invention receives the service demand information by the access point, and selects a target service site that can provide the service corresponding to the service identifier according to the service identifier carried in the service requirement information, and further, between the target service site and the target service site. Certify. Since the access point can actively request an association authentication relationship with the service site, the service site no longer needs to maintain the association authentication relationship with the access point, and the service site can cancel the connection with the access point after providing the service. Associate the authentication relationship, and release the network resources accordingly, thereby improving the utilization of the network resources. In addition, since the service site can only have an associated authentication relationship with one access point at the same time, the The method can enable the service station to establish or de-associate the authentication relationship with different access points according to the service requirements of the access point and the site, thereby improving the utilization and flexibility of the service site.

FIG. 2 is a flowchart of another method for requesting authentication according to an embodiment of the present invention. As shown in FIG. 2, the method includes:

Step 201: The access point receives the service requirement information.

For details, refer to the implementation manner described in step 101.

Step 202: The access point selects a target service site that can provide a service corresponding to the service identifier. For details, refer to the implementation manner described in step 102.

Further, the access point selects a service site that can provide the service corresponding to the service identifier and is in a valid working period as the target service site.

Specifically, because the access point stores the corresponding relationship between the service identifier and the identifier of the service site, the effective working period of each service station may also be stored. In other words, each service station can work normally during which time period.

The access point queries one or more service sites that can provide the service corresponding to the service identifier After that, it is further determined whether the current time is within the effective working period of these service stations.

If the access point queries for a service site that is capable of providing the service corresponding to the service identifier and is within the valid working period, it is used as the target service site.

If the access point queries that there is no service site that can provide the service corresponding to the service identifier and is in the valid working period, but queries the service site that can provide the service corresponding to the service identifier, then the part can provide the service. The site serves as the target service site; or the service site that is capable of providing the service but is not currently in a valid working period, and waits until its effective working time comes, and then uses it as the target service site.

If the access point queries that there is no service site capable of providing the service corresponding to the service identifier, the target site cannot be determined.

Step 203: The access point sends the service request information to the target service site.

The service request information carries the service identifier, and the service request information is specific. When the target service site is multiple, the access point may send the service request information to each target service site in the following manner. .

The first is that after the access point sends the service request information to a target service site, it will wait to receive the reply from the target service site; if the access point receives the reply from the target service site, it can continue to serve other targets. The station sends the service request information; if the access point does not receive the reply of the target service station after the waiting time exceeds a certain time, the service request information is continuously sent to other target service stations.

The second is that after the access point sends the service request information to a target service site, it can continue to send the service request information to other target service stations without waiting for the reply.

The third type is that the access point can use the multicast method to send the service request information to each target service station.

In the above three manners, the access point may stop sending the service request information to other target service stations after receiving a reply from the target service station.

The access point may also send the service request information to all target service sites, and select a service site as a final target according to certain screening conditions from one or more target service sites that receive the reply within a certain period of time. Service site.

In addition, the above screening conditions may be service requirements of a site that needs to be served, for example Service type, time and price, etc.; can also communicate with the target service site and the access point, such as channel conditions, busyness, communication quality, support rate, etc. These parameters are available at the access point and target service. Obtained in the interaction of the site.

Step 204: The access point receives the service request success information sent by the target service station. The service request success information is generated by the target service station according to the service request information, and is determined to have the capability of providing the service corresponding to the service identifier.

Specifically, after receiving the service request information sent by the access point, the target service station needs to determine whether it has the capability of providing the service corresponding to the service identifier according to the service identifier in the service request information.

The ability to determine whether the service is provided includes the following aspects: whether the service item is available on the target service site; whether the target service site currently has an associated authentication relationship with other access points; whether the target service site is currently in the Normal working conditions, etc.

Specifically, the judgment criteria are used to measure whether the target service site is capable of providing corresponding services, and can be set as needed.

If the target service station determines that it has the capability of providing the service corresponding to the service identifier, returns the service request success information to the access point; if the target service site determines that it does not have the capability to provide the service corresponding to the service identifier , the service request failure information is returned to the access point.

Step 205: The access point sends the authentication request information to the target service site according to the service request success information. The authentication request information is used for authentication between the target service site and the access point.

Specifically, if the access point receives the service request success information returned by the target service site, the access point sends the authentication request information to the target service site.

The purpose of the authentication request information is to authenticate between the target service site and the access point. The method for authenticating between the target service site and the access point may use an implementation similar to that in the prior art.

FIG. 3 is a flowchart of still another method for requesting authentication according to an embodiment of the present invention. As shown in FIG. 3, the method includes:

Step 301: The access point receives the service requirement information.

For details, refer to the implementation manner described in step 101.

Step 302: The access point selects a target service site that can provide a service corresponding to the service identifier. For details, refer to the implementation manners described in step 102 or 202.

Step 303: The access point sends, to the target service site, authentication request information that carries the service identifier. The authentication request information is used for the target service station to perform authentication with the access point after determining the capability of providing the service corresponding to the service identifier.

Specifically, the access point may directly send the authentication request information to the target service site, and carry the service identifier in the authentication request information.

After receiving the authentication request information, the target service station may determine whether it is capable of providing the service according to the service identifier therein. For the implementation of determining whether the service capability is available, refer to the related content described in step 204.

When the target service site is multiple, the access point sends the authentication request information. For details, see the method for sending the service request information in step 203.

If the target service site determines that it has the capability to provide the service, it performs authentication between the two through communication interaction with the access point; if the target service site determines that it does not have the service provided Capability, no authentication between the two.

FIG. 4 is a flowchart of still another method for requesting authentication according to an embodiment of the present invention. As shown in FIG. 4, the method includes:

Step 401: The access point receives the service requirement information.

For details, refer to the implementation manner described in step 101.

Step 402: The access point selects a target service site that can provide a service corresponding to the service identifier. For details, refer to the implementation described in step 102 or 202.

Step 403: The access point sends the service request information to the target service station.

The service request information carries the service identifier, and the service request information is specific. For details, refer to the implementation manner described in step 203.

Step 404: The service station determines, according to the service request information, that the device has the capability of providing the service corresponding to the service identifier, and sends the authentication request information to the access point. The authentication request information is used for authentication with the service site. Specifically, after receiving the service request information sent by the access point, the target service station needs to determine whether it has the capability of providing the service corresponding to the service identifier according to the service identifier in the service request information.

If the target service station determines that it has the capability of providing the service corresponding to the service identifier, it returns service request success information to the access point, and sends the authentication request information to the access point. If the target service site determines that it does not have the capability to provide the service corresponding to the service identifier, the service request failure information is returned to the access point, and the authentication request information is not sent to the access point.

Step 405: If the access point receives the authentication request information sent by the target service station within a preset time, the access point performs authentication with the target service station.

Specifically, the access point is pre-set with a length of time to represent the maximum time that the access point can wait to receive the authentication request information after sending the service request information to the target service station. The access point determines whether the authentication request information sent by the target service station is received within the preset time.

If the access point receives the authentication request information within a preset time, the authentication process between the two is performed through communication interaction with the target service site.

If the access point does not receive the association request information sent by the target service station within the preset time, the service request information may be resent to the target service site; or may not be resent. Or send the service request information to other target service sites.

FIG. 5a is a schematic structural diagram of an access point according to an embodiment of the present invention. As shown in FIG. 5a, the access point includes: a receiving unit 11, a selecting unit 12, and an authenticating unit 13.

The receiving unit 11 is configured to receive service requirement information, where the service requirement information carries a service identifier, where the service identifier is identifier information of a service required by a site that needs to be served;

The selecting unit 12 is configured to select a target service site that can provide a service corresponding to the service identifier; The authentication unit 13 is configured to perform authentication with the target service site.

Further, the authentication unit 13 is further configured to:

Sending, to the target service site, authentication request information carrying the service identifier, where the authentication request information is used after the target service site determines that the device has the capability of providing the service corresponding to the service identifier, and the access point Authenticate between.

Further, the authentication unit 13 is further configured to:

Further, the selecting unit 12 is further configured to:

FIG. 5b is a schematic structural diagram of another access point according to an embodiment of the present invention. As shown in FIG. 5b, the access point includes: a processor 21, a memory 22, a bus 23, and a communication interface 24. The processor 21, the memory 22 and the communication interface 24 are connected by a bus 23 and communicate with each other.

The processor 21 may be a single core or multi-core central processing unit (Central Processing Unit, The CPU), either an Application Specific Integrated Circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present invention.

The memory 22 can be a high speed RAM memory or a non-volatile memory, and at least one disk can be stored.

The memory 22 is used to store the program 221. Specifically, the program 221 may include program code, where the program code includes computer operation instructions.

The communication interface 24 is configured to receive service requirement information, where the service requirement information carries a service identifier, and the service identifier is identifier information of a service required by a site that needs to be served.

The processor 21 runs the program 221 to execute:

Selecting a target service site that can provide a service corresponding to the service identifier; and authenticating with the target service occupancy point.

Specifically, the method for requesting authentication by the access point provided by the embodiment of the present invention can refer to the operation steps described in the foregoing method embodiment.

The access point provided by the embodiment of the present invention receives the service requirement information, and selects a target service site that can provide a service corresponding to the service identifier according to the service identifier carried in the service requirement information, and then performs authentication with the target service site. Since the access point can actively request an association authentication relationship with the service site, the service site no longer needs to maintain the association authentication relationship with the access point, and the service site can cancel the connection with the access point after providing the service. Associate the authentication relationship, and release the network resources accordingly, thereby improving the utilization of the network resources. In addition, since the service site can only have an associated authentication relationship with one access point at the same time, the The method can enable the service station to establish or de-associate the authentication relationship with different access points according to the service requirements of the access point and the site, thereby improving the utilization and flexibility of the service site.

FIG. 6 is a schematic structural diagram of a service site according to an embodiment of the present invention. As shown in FIG. 6a, the service site includes: a receiving unit 31, a sending unit 32, and an authentication unit 33.

The receiving unit 31 is configured to receive service request information sent by the access point, where the service request information carries a service identifier, where the service request information is used by the service station to determine whether the service corresponding to the service identifier is provided. Capability, the service identifier is obtained by the access point from service demand information sent by a site that needs to be served;

The sending unit 32 is configured to: after determining, according to the service request information, the capability of providing the service corresponding to the service identifier, return service request success information to the access point; The authentication unit 33 is configured to receive authentication request information sent by the access point to the service site according to the service request success information, where the authentication request information is used for authentication with the service site.

FIG. 6b is a schematic structural diagram of another service site according to an embodiment of the present invention. As shown in FIG. 6b, the service site includes: a processor 41, a memory 42, a bus 43, and a communication interface 44. The processor 41, the memory 42 and the communication interface 44 are connected by a bus 43 and communicate with each other.

The processor 41 may be a single core or multi-core central processing unit (CPU), or an Application Specific Integrated Circuit (ASIC), or one or more integrated systems configured to implement the embodiments of the present invention. Circuit.

The memory 42 can be a high speed RAM memory or a nonvolatile memory.

(non-volatile memory), at least one disk is stored in the program.

The memory 42 is used to store the program 421. Specifically, the program 421 may include program code, where the program code includes computer operation instructions.

The communication interface 44 is configured to receive the service request information sent by the access point, where the service request information carries a service identifier, where the service request information is used by the service station to determine whether the service corresponding to the service identifier is provided. Capability, the service identifier is obtained by the access point from service demand information sent by a site that needs to be served.

The processor 41 runs the program 421 to execute:

Determining, after determining the capability of providing the service corresponding to the service identifier, the service request success information to the access point according to the service request information; receiving the access point according to the service request success information, to the Authentication request information sent by the service site, where the authentication request information is used for authentication between the service site and the access point.

Specifically, the method for receiving the request authentication by the service site provided by the embodiment of the present invention may refer to the operation steps described in the foregoing method embodiment.

The service station provided by the embodiment of the present invention receives the service request information sent by the access point, and after determining the capability of providing the service corresponding to the service identifier according to the service request information, the service request is successfully returned to the access point. Receiving, by the access point, the authentication request information sent by the access point to the service site according to the service request success information, where the authentication request information is used for authentication between the service site and the access point; Since the access point can actively request an association authentication relationship with the service site, the service site no longer needs to maintain the association with the access point. Certificate relationship, the service site can cancel the association authentication relationship with the access point after providing the service, and release the network resources accordingly, thereby improving the utilization of network resources; in addition, since the service site is only at the same time The method can be associated with an access point, and the method in the embodiment of the present invention can enable the service station to establish or cancel the association relationship with different access points according to the service requirements of the access point and the site, thereby improving the authentication relationship. Service site utilization and flexibility.

FIG. 7a is a schematic structural diagram of another service site according to an embodiment of the present invention. As shown in FIG. 7a, the service site includes: a receiving unit 51 and an authentication unit 52.

The receiving unit 51 is configured to receive, by the access point, the authentication request information that carries the service identifier, where the service identifier is obtained by the access point from the service requirement information sent by the site that needs to be served;

The authentication unit 52 is configured to perform authentication according to the authentication request information and the access point after determining, according to the service identifier, the capability of providing the service corresponding to the service identifier.

FIG. 7b is a schematic structural diagram of another service site according to an embodiment of the present invention. As shown in FIG. 7b, the service site includes: a processor 61, a memory 62, a bus 63, and a communication interface 64. The processor 61, the memory 62 and the communication interface 64 are connected by a bus 63 and communicate with each other.

The processor 61 may be a single core or multi-core central processing unit (CPU), or an Application Specific Integrated Circuit (ASIC), or one or more integrated systems configured to implement the embodiments of the present invention. Circuit.

The memory 62 can be a high speed RAM memory or a non-volatile memory, and at least one disk can be stored.

The memory 62 is used to store the program 621. Specifically, the program 421 may include program code, where the program code includes computer operation instructions.

The communication interface 64 is configured to receive the authentication request information that is sent by the access point and carries the service identifier, where the service identifier is obtained by the access point from the service requirement information sent by the site that needs to be served.

The processor 61 runs the program 621 to execute:

After determining, according to the service identifier, the capability of providing the service corresponding to the service identifier, performing authentication according to the authentication request information and the access point.

Specifically, the method for receiving the request for authentication by the service site provided by the embodiment of the present invention can be referred to the operation steps described in the foregoing method embodiment. The service station provided by the embodiment of the present invention receives the authentication request information that is sent by the access point and carries the service identifier, and after determining the capability of providing the service corresponding to the service identifier according to the service identifier, according to the authentication request information, The authentication is performed between the access points. Because the access point can actively request to establish an association authentication relationship with the service site, the service site no longer needs to maintain the association authentication relationship with the access point. The service site can be provided. After the service, the association relationship between the access point and the access point is cancelled, and the network resources are released accordingly, thereby improving the utilization of the network resources. In addition, since the service station can only be associated with one access point at the same time. The service requirements of the site, establishing or disassociating authentication relationships with different access points, improve the utilization and flexibility of the service site.

FIG. 8 is a schematic structural diagram of another service site according to an embodiment of the present invention. As shown in FIG. 8a, the service site includes: a receiving unit 71 and an authentication unit 72.

The receiving unit 71 is configured to receive service request information sent by the access point, where the service request information carries a service identifier, where the service request information is used by the service site to determine whether the service corresponding to the service identifier is provided. Capability, the service identifier is obtained by the access point from service demand information sent by a site that needs to be served;

The authentication unit 72 is configured to: after determining, according to the service request information, the capability of providing the service corresponding to the service identifier, send the authentication request information to the access point, where the authentication request information is used for the service site Authenticate between.

FIG. 8b is a schematic structural diagram of another service site according to an embodiment of the present invention. As shown in FIG. 8b, the service site includes: a processor 81, a memory 82, a bus 83, and a communication interface 84. The processor 81, the memory 82, and the communication interface 84 are connected by a bus 83 and communicate with each other.

The processor 81 may be a single core or multi-core central processing unit (CPU), or an Application Specific Integrated Circuit (ASIC), or one or more integrated systems configured to implement the embodiments of the present invention. Circuit.

The memory 82 may be a high speed RAM memory or a non-volatile memory, and at least one of the disks may be stored.

The memory 82 is used to store the program 821. Specifically, the program 821 may include program code, where the program code includes computer operation instructions.

The communication interface 84 is configured to receive service request information sent by the access point, where the service request information is Carrying a service identifier, where the service request information is used by the service site to determine whether it has the capability of providing a service corresponding to the service identifier, where the service identifier is sent by the access point from a site that needs to be served. Obtained in the service demand information.

The processor 81 runs the program 821 to execute:

And after determining, according to the service request information, the capability of providing the service corresponding to the service identifier, sending, to the access point, authentication request information, where the authentication request information is used by the service site and the access point Authenticate between.

The service station provided by the embodiment of the present invention receives the service request information sent by the access point, and after determining the capability of providing the service corresponding to the service identifier, according to the service request information, sending the authentication request information to the access point. The authentication request information is used for authentication between the service site and the access point; since the access point can actively request to establish an association authentication relationship with the service site, the service site no longer needs to be maintained and accessed at all times. The association authentication relationship between the points, the service site can cancel the association authentication relationship with the access point after the service is provided, and release the network resources accordingly, thereby improving the utilization of the network resources; The site can only associate with one access point at the same time, and the method in the embodiment of the present invention can enable the service station to establish or de-associate with different access points according to the service requirements of the access point and the site. The authentication relationship improves the utilization and flexibility of the service site.

FIG. 9 is a schematic structural diagram of a communication system according to an embodiment of the present invention. As shown in FIG. 9, the communication system includes a site 1 to be served, an access point 2 as shown in FIG. 5a or 5b, and a service site 3. The service site 3 can be as shown in FIG. 6a or 6b, as shown in FIG. 7a or 7b, and can also be as shown in FIG. 8a or 8b. A communication connection between the site 1, the access point 2, and the service site 3 that need to be served.

Specifically, the method for implementing the request for authentication in the communication system provided by the embodiment of the present invention may be referred to the operation steps described in the foregoing method embodiments.

It will be understood by those skilled in the art that all or part of the steps of implementing the above method embodiments may be performed by hardware related to the program instructions. The aforementioned program can be stored in a computer readable storage medium. The program, when executed, performs the steps including the foregoing method embodiments; and the foregoing storage medium includes: ROM, RAM, disk or optical disk, and the like, which can store program codes. Medium.

Finally, it should be noted that the above embodiments are only for explaining the technical solutions of the present invention, and are not intended to be limiting thereof; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the foregoing embodiments may be modified, or some or all of the technical features may be equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present invention. range.

Claims

Claim

A request authentication method, which is characterized by comprising:

The request authentication method according to claim 1, wherein the authentication between the access point and the target service site comprises:

And the access point sends the authentication request information to the target service site according to the service request success information, where the authentication request information is used for authentication between the target service site and the access point.

If the access point receives the authentication request information sent by the target service site within a preset time, the access point performs authentication with the target service site, and the authentication request information is used by the target service site according to the Service request information has the ability to provide a service corresponding to the service identifier Then sent to the access point.

The method for requesting authentication according to claim 4, wherein the method further comprises: if the access point does not receive the authentication request sent by the target service station within the preset time The information is then resent to the target service site to send the service request information.

The request authentication method according to any one of claims 1-5, wherein the access point selects a target service site that can provide a service corresponding to the service identifier, including:

The access point selects a service site that can provide a service corresponding to the service identifier and is in a valid working period as a target service site.

7. A method for requesting authentication, characterized in that it comprises:

8. A method for requesting authentication, characterized in that it comprises:

9. A method for requesting authentication, characterized in that it comprises:

After the service station determines, according to the service request information, the capability of providing the service corresponding to the service identifier, the service station sends the authentication request information to the access point, where the authentication request information is used. Authentication is performed between the service site and the access point.

10. An access point, comprising:

The access point according to claim 10, wherein the authentication unit is further configured to: send service request information to the target service station, where the service request information carries the service identifier, where The service request information is used by the target service station to determine whether it has the capability of providing a service corresponding to the service identifier; receiving service request success information sent by the target service station, where the service request success information is served by the target service And generating, according to the service request information, the capability of providing the service corresponding to the service identifier, and generating, according to the service request success information, authentication request information, where the authentication request information is used for The target service site authenticates with the access point.

The access point according to claim 10, wherein the authentication unit is further configured to: send, to the target service site, authentication request information that carries the service identifier, after the capability of the service Authentication is performed with the access point.

The access point according to claim 10, wherein the authentication unit is further configured to: send service request information to the target service station, where the service request information carries the service identifier, where The service request information is used by the target service station to determine whether the service corresponding to the service identifier is provided; when the authentication request information sent by the target service station is received within a preset time, the target service is The authentication is performed between the sites, and the authentication request information is sent by the target service site to the access point after determining the capability of providing the service corresponding to the service identifier according to the service request information.

The access point according to claim 13, wherein the authentication unit is further configured to: when the authentication request information sent by the target service station is not received within the preset time, Sending the service request information to the target service site.

The access point according to any one of claims 10-14, wherein the selecting unit is further configured to: A service site that can provide the service corresponding to the service identifier and is in a valid working period is selected as the target service site.

16. A service site, comprising:

17. A service site, comprising:

18. A service site, comprising:

A communication system, comprising: a site to be served, an access point according to any one of claims 10-15, and a service site according to claim 16, 17 or 18; The communication connection between the site to be served, the access point, and the service site.