WO2017181407A1

WO2017181407A1 - Network authentication method, client, terminal device and platform

Info

Publication number: WO2017181407A1
Application number: PCT/CN2016/079997
Authority: WO
Inventors: 陈曦
Original assignee: 华为技术有限公司
Priority date: 2016-04-22
Filing date: 2016-04-22
Publication date: 2017-10-26
Also published as: CN107534859A; CN107534859B

Abstract

A network authentication method, a client, a terminal device and a platform. The method comprises: a terminal device sending a query request to a platform when an available access point (AP) is scanned, wherein the query request is used for requesting the acquisition of an authentication feature of the AP, and the authentication feature comprises the name and a URL of an AC; the terminal device receiving a query result sent by the platform; if the query result comprises the authentication feature, the terminal device acquiring a user name and a password, wherein the user name and the password are authentication parameters used by the AC when authenticating the terminal device; and the terminal device sending the user name and the password to the AC according to the authentication feature.

Description

Network authentication method, client, terminal device and platform

Technical field

The present invention relates to the field of communications technologies, and in particular, to a network authentication method, a client, a terminal device, and a platform.

Background technique

Currently, wireless local area network (English: Wireless Local Area Network; WLAN) is developing rapidly and widely used.

The user connects to the WLAN network by searching for an available service set identifier (English: Service Set Identifier, SSID for short). After connecting to the network, the terminal device requests the network protocol from the broadband server (English: Broadband Access Server, BAS for short) through the Dynamic Host Configuration Protocol (English: Dynamic Host Configuration Protocol, DHCP). Internet Protocol, referred to as: IP) address. After obtaining the IP address, the terminal device can access the webpage through the browser. The BAS is configured to add a user access control list (English: Access Control List, ACL) service policy based on the port number and the IP address. The policy is as follows: the user can only access the portal server. Some internal servers, individual external servers, such as the Domain Name System (English: Domain Name System, referred to as: DNS). Further, the BAS also redirects the user's request to access other addresses to the mandatory website authentication server for access. The result of the performance is that the user can only access the specified page if the user is connected to the network but not authenticated. Currently, there are many WLAN access points (English: Access Point, AP for short), but most of the authentication methods use the authentication method of the portal (Web Portal).

The main process of the portal authentication method is as follows: The user performs a network access of an arbitrary address, and the BAS redirects to the authentication page of the portal. The terminal device obtains the authentication feature of the AP by parsing the authentication page. The authentication feature includes the name of an access controller (English: Access Controller, AC for short) and a uniform resource locator (English: Uniform Resource Locator, abbreviated as URL). Then on this page, the user can enter the account number and password and click "login" Button, you can also click the "Login" button without entering the account and password. The "Login" button launches a program on the portal server that sends user information (such as IP address, account number, and password) to the AC. The AC uses user information for authentication. If the authentication is passed, the successful authentication result is returned to the terminal device. The BAS modifies the user's ACL so that the user can access the external Internet or a specific network.

In the above portal authentication method, an authentication page redirected to the portal is required, and the authentication page is parsed to obtain an authentication feature of the AP, so the entire authentication process takes a long time.

Summary of the invention

The embodiment of the invention provides a network authentication method, a client, a terminal device and a platform, which are used to solve the technical problem that the network authentication process existing in the prior art is time-consuming.

In a first aspect, an embodiment of the present invention provides a network authentication method, including:

When the terminal device scans the available access point AP, the terminal device sends a query request to the platform, where the query request is used to request an authentication feature of the AP, where the authentication feature includes the name of the access controller AC. And the uniform resource locator URL; the terminal device receives the query result sent by the platform; if the query result includes the authentication feature, the terminal device acquires a user name and a password; the user name and the password are The authentication parameter used by the AC to authenticate the terminal device; the terminal device sends the username and the password to the AC according to the authentication feature.

The network authentication method in the embodiment of the present invention, by directly requesting the authentication feature required for authentication from the platform, does not need to access any address by the terminal device as in the prior art, and then the AP is forcibly redirected to the portal. The page of the website is obtained by analyzing the page to obtain the authentication features required for the authentication. Therefore, in the method in the embodiment of the present invention, the authentication process is more concise, so the authentication time is greatly shortened, so the waiting time of the user becomes shorter. Improve the user experience.

In conjunction with the first aspect, in a first possible implementation of the first aspect, the method further includes:

If the query result indicates that the authentication feature is not queried, the terminal device accesses an arbitrary network address; the terminal device receives a page of the portal website; and the terminal device parses the page by parsing And obtaining, by the terminal device, the user name and the password; and the terminal device sends the user name and the password to the AC according to the authentication feature. In this way, when the platform does not store the authentication feature of the AP, the terminal device can obtain the authentication feature in the manner in this embodiment.

With reference to the first possible implementation of the first aspect, in a second possible implementation manner of the first aspect, the method further includes: receiving, by the terminal device, a message that is sent by the AC to indicate that the authentication is passed; The terminal device transmits the authentication feature to the platform. In this embodiment, the terminal device reports the authentication feature of the AP, and the platform performs recording, so that when the other terminal device requests the authentication feature of the AP, the platform can send the authentication feature to other terminal devices to speed up other terminals. The authentication speed of the device.

In conjunction with the first aspect, or the first possible implementation of the first aspect, or the second possible implementation of the first aspect, in a third possible implementation manner of the first aspect, the terminal device acquires a user name and The password includes: the terminal device acquires the pre-configured username and the password.

In a second aspect, an embodiment of the present invention provides a network authentication method, including:

The platform receives the first query request sent by the first terminal device, where the first query request is used to request to obtain an authentication feature of the access point AP, where the authentication feature includes the name of the access controller AC and the unified resource. a locator URL; the platform queries an authentication feature of the AP; if the authentication feature of the AP is not queried, the platform sends a query indicating that the authentication feature is not queried to the first terminal device The platform receives the authentication feature of the AP sent by the first terminal device; the platform records the correspondence between the AP and the authentication feature of the AP.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the method further includes: if the authentication feature of the AP is queried, the platform sends the information to the first terminal device, including The result of the query of the authentication feature.

With reference to the second aspect, in a second possible implementation manner of the second aspect, after the receiving, by the platform, the authentication feature of the AP that is sent by the first terminal device, the method further includes:

Receiving, by the platform, a second query request sent by the second terminal device, where the second query request is And obtaining the authentication feature of the AP, where the platform sends the received authentication feature of the AP to the second terminal device.

In a third aspect, an embodiment of the present invention provides a terminal device, including:

a wireless communication module, configured to scan an available access point AP, and a transmitter, configured to send a query request to the platform when the wireless communication module scans an available AP, where the query request is used to request to acquire the AP An authentication feature, wherein the authentication feature includes a name of the access controller AC and a uniform resource locator URL; a receiver, configured to receive a query result sent by the platform; and a processor, configured to: if the query result Including the authentication feature, the user name and the password are obtained; the user name and the password are authentication parameters used by the AC to authenticate the terminal device; the sender is further configured to: according to the authentication feature Sending the username and the password to the AC.

With reference to the third aspect, in a first possible implementation manner of the third aspect, the processor is further configured to: if the query result indicates that the authentication feature is not queried, accessing an arbitrary network address; The processor is further configured to: receive a page of the portal; the processor is further configured to: obtain the authentication feature by parsing the page; and obtain the username and the password; the transmitter is further configured to: Sending the username and the password to the AC according to the authentication feature.

In conjunction with the first possible implementation of the third aspect, in a second possible implementation of the third aspect, the receiver is further configured to: receive, by the AC, a message indicating that the authentication is passed; the transmitter Also used to: send the authentication feature to the platform.

With reference to the third aspect, or the first possible implementation manner of the third aspect, or the second possible implementation manner of the third aspect, in a third possible implementation manner of the third aspect, The configured username and password.

In a fourth aspect, an embodiment of the present invention provides a platform, including:

a receiver, configured to receive a first query request sent by the first terminal device, where the first query request is used to request to acquire an authentication feature of the access point AP, where the authentication feature includes an access controller AC a name and a uniform resource locator URL; the processor is configured to: the platform queries the authentication feature of the AP; and the sender is configured to send the identifier to the first terminal device if the authentication feature of the AP is not queried Querying a query result of the authentication feature; the receiver is further configured to receive the first An authentication feature of the AP sent by the terminal device; the processor is further configured to record a correspondence between the AP and an authentication feature of the AP.

With reference to the fourth aspect, in a first possible implementation manner of the fourth aspect, the transmitter is further configured to: if the authentication feature of the AP is queried, the platform sends the information to the first terminal device, including The result of the query of the authentication feature.

With reference to the fourth aspect, in a second possible implementation manner of the fourth aspect, the receiver is further configured to: after receiving the authentication feature of the AP sent by the first terminal device, receive the second terminal a second query request sent by the device, where the second query request is used to request an authentication feature of the AP, and the sender is further configured to: send the received authentication feature of the AP to the first Two terminal devices.

In a fifth aspect, an embodiment of the present invention provides a client, including:

a sending module, configured to send a query request to the platform when the terminal device scans the available access point AP, where the query request is used to request an authentication feature of the AP, where the authentication feature includes access The name of the controller AC and the uniform resource locator URL; the terminal device is a device that runs the client; the receiving module is configured to receive a query result sent by the platform; and the acquiring module is configured to: if the query result includes the Defining a user name and a password; the user name and the password are authentication parameters used by the AC to authenticate the terminal device; the sending module is further configured to: according to the authentication feature The username and the password are sent to the AC.

With reference to the fifth aspect, in a first possible implementation manner of the fifth aspect, the client further includes an access module and a parsing module, where the access module is configured to: if the query result indicates that the authentication is not queried Feature, accessing an arbitrary network address; the receiving module is further configured to receive a page of the portal website; the parsing module is configured to obtain the authentication feature by parsing the page; the obtaining module is further configured to: acquire the The user name and the password; the sending module is further configured to: send the username and the password to the AC according to the authentication feature.

With reference to the first possible implementation manner of the fifth aspect, in a second possible implementation manner of the fifth aspect, the receiving module is further configured to: receive, by the AC, a message indicating that the authentication is passed; the sending The module is further configured to: send the authentication feature to the platform.

With reference to the fifth aspect or the first possible implementation manner of the fifth aspect, or the second possible implementation manner of the fifth aspect, in a third possible implementation manner of the fifth aspect, the acquiring module is used in advance The configured username and password.

In a sixth aspect, an embodiment of the present invention provides a terminal device, including:

a wireless communication module for scanning an available access point AP; a first possible implementation of the fifth or fifth aspect or a second possible implementation of the fifth aspect or a third of the fifth aspect The client described in the possible implementation.

DRAWINGS

FIG. 1 is a structural diagram of a network system according to an embodiment of the present invention;

2 is a flowchart of a network authentication method on a terminal device side according to an embodiment of the present invention;

FIG. 3 is a flowchart of a platform-side network authentication method according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of a specific example of network authentication according to an embodiment of the present disclosure;

FIG. 5 is a functional block diagram of a client according to an embodiment of the present invention;

FIG. 6 is a structural diagram of a terminal device according to an embodiment of the present disclosure;

FIG. 7 is a structural diagram of a platform according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be described below in conjunction with the accompanying drawings in the embodiments of the present invention.

Various aspects are described herein in connection with a terminal device, a wireless local area network access point, an access controller, and/or a platform.

The terminal device mentioned in this document may be a wireless terminal device or a wired terminal device, and the wireless terminal device may be a device that provides voice and/or other service data connectivity to the user. Handheld devices with wireless connectivity or other processing devices connected to a wireless modem. The wireless terminal device can communicate with one or more core networks via a radio access network (English: Radio Access Network; RAN), and the wireless terminal device can be a mobile terminal, such as a mobile phone (or "cellular" phone). And a computer having a mobile terminal, for example, can be a portable, pocket, handheld, computer built-in or in-vehicle mobile device that exchanges language and/or data with the wireless access network. For example, personal communication service (English: Personal Communication Service; PCS) telephone, cordless telephone, session initiation protocol (English: Session Initiation Protocol; SIP) telephone, wireless local loop (English: Wireless Local Loop; referred to as: WLL) Station, Personal Digital Assistant (English: Personal Digital Assistant; PDA for short). The wireless terminal device may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, or a remote terminal. Access Terminal, User Terminal, User Agent, User Device or User Equipment.

The wireless local area network access point in this paper is an independent access point using wireless local area network (English: Wireless Local Area Network; WLAN) technology.

The access controller in this document is the controller of the AP and belongs to the network element on the core network side.

The platform in this document may be a physical device added to an existing network, or may be a functional module integrated on a physical device in an existing network, and the present invention is not limited thereto.

Optionally, the platform may include a server for storing data (for example, an authentication feature hereinafter) and an interface module for interacting with the terminal device, for example, receiving a request of the terminal device, and querying the authentication feature and The authentication feature is sent to the terminal device, or the authentication feature reported by the terminal device is received and stored in the server.

The term "and/or" in this context is merely an association describing the associated object, indicating that there may be three relationships, for example, A and / or B, which may indicate that A exists separately, and both A and B exist, respectively. B these three situations. In addition, the character "/" in this article generally indicates that the contextual object is an "or" relationship.

The embodiment of the invention provides a network authentication method, which can be applied to a network system. Please refer to FIG. 1 , which is a simplified network system diagram provided by an embodiment of the present invention. The network system includes a terminal device, a platform, and an AC. The terminal device is, for example, a smartphone, a tablet, a smart TV, or the like. The acquisition and interaction of the authentication feature between the terminal device and the platform. The terminal device and the AC perform authentication interaction.

Please refer to FIG. 2, which is a flowchart of a network authentication method on the terminal device side in this embodiment. The method includes the following:

Step 101: The terminal device sends a query request to the platform when scanning the available AP, the query request is used to request to obtain an authentication feature of the AP, where the authentication feature includes the name of the access controller AC. And a uniform resource locator URL;

Step 102: The terminal device receives the query result sent by the platform.

Step 103: If the query result includes the authentication feature, the terminal device acquires a user name and a password; the user name and the password are authentication parameters used by the AC to authenticate the terminal device;

Step 104: The terminal device sends the username and the password to the AC according to the authentication feature.

In step 101, for example, the terminal device searches for an AP with the strongest signal strength by searching for the available SSID. At this time, step 101 can be triggered. The available AP described in step 101 is the AP with the strongest signal strength. . In actual use, the terminal device may also search for an available SSID, and then display a list of available APs on the display screen of the terminal device, and the user may select one of the APs according to the signal strength or other factors, and the terminal device at this time. Step 101 is performed, and the available APs described in step 101 are APs selected by the user.

The authentication feature includes the name and URL of the AC. The AC is the access controller of the AP. Because the subject that can authenticate the AP is the AC of the AP, the terminal device needs to obtain the name and URL of the AC, so that the username and password in step 103 can be sent to the AC corresponding to the AP, and the AC Username and password are authenticated.

Optionally, the authentication feature further includes an IP address of the AC and/or an SSID of the AC. Of course, in practical applications, the authentication feature may also include other feature parameters, such as action type and media. The physical access control (English: Media Access Control; MAC address), the login session identifier (logonsessid), and the user agent identifier (uaid) are not specifically limited in the present invention. After the terminal device sends the query request through step 101, the execution flow of the platform side is as shown in FIG. 3, and the method includes:

Step 201: The platform receives the first query request sent by the first terminal device, where the first query request is used to request the authentication feature of the AP; corresponding to step 101;

Step 202: The platform queries an authentication feature of the AP.

Step 203: If the authentication feature of the AP is not queried, the platform sends a query result indicating that the authentication feature is not queried to the first terminal device.

Step 204: The platform receives an authentication feature of the AP sent by the first terminal device.

Step 205: The platform records a correspondence between the AP and an authentication feature of the AP.

Optionally, if the authentication feature of the AP is queried, the platform sends a query result including the authentication feature to the first terminal device.

In step 202, the platform may obtain the authentication feature of the AP by querying the correspondence between the AP and the authentication feature. For example, a correspondence table between an identifier (ID) of an AP and an authentication feature is stored on the platform. The query request includes the ID of the AP, so when the platform receives the query request, the AP uses the ID of the AP to match in the foregoing correspondence table, and the authentication feature corresponding to the AP can be queried.

After obtaining the query result, the platform sends the query result to the first terminal device. When the authentication feature of the AP is queried, the authentication feature of the AP is carried in the query result.

If the authentication feature of the AP is not queried, step 203 is performed to indicate to the first terminal device that the query result of the authentication feature of the AP is not queried.

Correspondingly, the terminal device receives the query result sent by the platform. If the query result includes the authentication feature, go to step 103, that is, the terminal device obtains the username and password. In practical applications, the user name and password may be preset, for example, the user may set it in advance, or may be pre-distributed to the terminal device by the platform. Of course, the username and password can also be entered by the user.

Next, step 104 is performed, that is, the username and password are sent to the AC according to the authentication feature. After receiving the username and password sent by the terminal device, the AC verifies the username and password. If the verification is successful, the terminal device can also send a message that the authentication is passed. At this time, the terminal device can access the external network or the specific network through the available AP.

It should be noted that, when the authentication feature further includes the foregoing or other feature parameters, if the feature parameters are also required for authentication, such as logonsessid, the meaning expressed in step 104 also includes the need to send the authentication feature. The characteristic parameters of the AC are also sent to the AC, and the AC performs authentication according to these characteristic parameters, and performs authentication according to the user name and password.

As can be seen from the above description, the network authentication method in the embodiment of the present invention does not need to access an arbitrary address by the terminal device, and then needs to access an arbitrary address by the terminal device, as in the prior art, and then The AP is forcibly redirected to the page of the portal, and the authentication feature required for the authentication is obtained by parsing the page. Therefore, in the method in the embodiment of the present invention, the authentication process is more concise, so the authentication time is greatly shortened. The user waits for a shorter time, which improves the user experience.

Optionally, in the case that the username and the password are preset, the terminal device directly triggers the execution of step 104 after obtaining the username and password.

Optionally, in the case that the username and password are input by the user, after the user clicks the “login” button, the terminal device triggers execution of step 104.

Please continue to refer to Figure 2, the method further includes:

Step 105: If the query result indicates that the authentication feature is not queried, the terminal device accesses any network address.

Step 106: The terminal device receives a page of the portal website.

Step 107: The terminal device obtains an authentication feature by parsing the page.

Step 108: The terminal device acquires the username and password; then, step 104 is performed.

In step 105, the terminal device may directly trigger the access of any network address, for example, randomly selecting a network address for access in the historical access record, or accessing the preset arbitrary network address. In actual use, the user may input a network address or click a link of any one of the network addresses, and the triggering electronic device performs step 105.

When the AP detects that the terminal device accesses the network address, the AP redirects the accessed address to the portal. The address of the website, so the server of the portal will send the page of the portal to the terminal device. Correspondingly, the terminal device performs step 106, that is, receives a page of the portal website. The reception here can be understood as receiving the data of the portal and presenting the page corresponding to the data of the portal.

Next, step 107 is performed, that is, the terminal device parses the page to obtain an authentication feature. For example, the terminal device performs text parsing on the page, and then searches the text for a field containing the authentication feature, such as a login form (loginForm), and then searches for the name (wlanacname) field of the access controller of the WLAN. And get the wlanacname value.

After the authentication feature is obtained, step 108 is next performed. The case of step 108 is the same as that of step 103, and therefore will not be described herein. After step 108, step 104 is next performed.

Next, the AC authenticates the username and password. After the authentication is passed, the terminal device can access the external network or a specific network.

Optionally, the method further includes: receiving, by the terminal device, a message that is sent by the AC to indicate that the authentication is passed; the terminal device sends the authentication feature to the platform, so that the platform records the authentication feature of the AP. For example, if the terminal device passes the authentication according to the parsed authentication feature, it indicates that the authentication feature is correct and valid, and the terminal device sends the parsed authentication feature to the platform. Correspondingly, the platform performs step 204 and step 205, that is, receiving an authentication feature of the AP sent by the first terminal device, and recording a correspondence between the available AP and its authentication feature. In this way, when the terminal device requests the authentication feature of the available AP again, or another terminal device, for example, the second terminal device sends a second query request, and requests to obtain the authentication feature of the available AP, The platform sends the received authentication feature of the AP to the second terminal device.

Optionally, after the authentication feature is obtained from the platform, and the verification fails, the process of step 105 to step 104 may be performed, and after the authentication succeeds, the re-acquired authentication feature may also be reported to the platform. In order to facilitate the platform to update the original authentication features.

Therefore, in actual use, one of the sources of the correspondence between the AP stored on the platform and its authentication feature is reported by each terminal device.

It should be noted that the source of the authentication feature of the AP stored on the platform may also have other implementation manners, for example, the network system is pre-configured, for example, when an AP is added, the AP is authenticated. The feature is notified to the platform and the platform is recorded.

A specific example will be described next to explain the specific implementation process of the network authentication method in the embodiment of the present invention. Referring to FIG. 4, first, the terminal device 1 discovers an available AP, and the ID of the AP is, for example, 00:08:3A:3D:4C. The terminal device 1 then sends a request to the platform to request the authentication feature of the AP, and the ID of the AP may be carried in the query request. Then, the platform queries the authentication feature of the AP, and finds that the authentication feature of the AP is not currently recorded, so the query result indicating that the authentication feature is not queried is sent to the terminal device 1. When the terminal device receives the result of the query, it accesses any network address, such as http://www.baidu.com. The AP forcibly redirects the access to access the portal and returns the page of the portal to the terminal device 1. The terminal device 1 parses the page and obtains an authentication feature. For example, the result of the parsing is: the name of the AC is 1300.0010.100.00, and the URL of the AC is https://221.176.1.140:8090/wlan/eclient.do. Optionally, the IP address and SSID of the AC may also be parsed, for example, the IP address is 117.130.248.254, and the SSID is CMCC. The terminal device 1 then obtains a username and password, for example, the username and password are distributed for the platform. Next, the terminal device 1 transmits the username and password to the AC corresponding to the AP. The AC authenticates the username and password, and sends an authentication pass message to the terminal device 1 when the authentication is passed. After receiving the authentication pass message, the terminal device 1 indicates that the authentication feature is correct and valid, so the authentication feature of the AP is reported to the platform. For example, the content of the authentication feature of the AP that the terminal device 1 reports to the platform is as shown in Table 1.

Table I

The user IP is the IP address of the terminal device 1.

After receiving the authentication feature of the AP reported by the terminal device 1, the platform records the authentication feature of the AP. The format of the record is also shown in Table 1, for example.

After that, the terminal device 2 also finds that the AP is available, so the query request is also sent to the platform to request the authentication feature of the AP, and the query request includes, for example, the ID of the AP. Similarly, the platform performs a query, such as querying with the ID of the AP. Because the terminal device has reported the authentication feature of the AP and the platform has also recorded, the query will query the authentication feature of the AP. The platform then returns the queried authentication features to the terminal device 2. Next, the terminal device 2 acquires and sends a username and password to the AC. The AC authenticates the username and password, and sends an authentication pass message to the terminal device 2 when the authentication is passed.

It can be seen that, for the terminal device 2, the required authentication feature can be obtained directly from the platform, so that it is not necessary to access any network address first, and parse the page of the portal website like the terminal device 1 In order to obtain the required authentication features, the authentication speed of the terminal device 2 is faster, which reduces the waiting time of the user and improves the user experience. Further, as the implementation time of the method changes, more and more AP authentication features are recorded on the platform, so that more and more terminal device authentication processes can be shortened.

In practical use, the network authentication method shown in FIG. 2 can be implemented by a client, the client can run on the terminal device, and the platform forms a client-server working mode. Referring to FIG. 5, the client includes: a sending module 301, configured to send a query request to the platform when the terminal device scans an available AP, where the query request is used to request to obtain an authentication feature of the AP; The authentication feature includes the name of the AC and the URL; the receiving module 302 is configured to receive the query result sent by the platform; and the obtaining module 303 is configured to obtain the username and the username if the query result includes the authentication feature a password; the user name and the password are authentication parameters used by the AC to authenticate the terminal device; the sending module 301 is further configured to: send the user name and the password to the user according to the authentication feature Said AC.

Optionally, the client further includes an access module 304 and a parsing module 305, where the access module 304 is configured to access any network address if the query result indicates that the authentication feature is not queried; and the receiving module 302 is further configured to receive the portal website. The parsing module 305 is configured to obtain the authentication feature by parsing the page; the obtaining module 303 is further configured to: obtain the username and the password; and the sending module 301 is further configured to: according to the authentication feature Sending the username and the password to the AC.

Optionally, the receiving module 302 is further configured to: receive, by the AC, a message that indicates that the authentication is passed;

The sending module 301 is further configured to: send the authentication feature to the platform.

Optionally, the obtaining module 303 is configured to obtain the pre-configured username and the password.

The various changes and specific examples in the network authentication method in the foregoing embodiment of FIG. 2 are also applicable to the client in this embodiment. The foregoing description of the network authentication method can be clearly known to those skilled in the art. The implementation method of the client, so for the sake of brevity of the description, it will not be described in detail here.

The embodiment of the present invention further provides a terminal device, where the terminal device includes: a wireless communication module, configured to scan an available AP; and the client as described in FIG. 5 and its embodiments.

Based on the same inventive concept, an embodiment of the present invention further provides a terminal device, such as a smart phone, a tablet computer, and a desktop computer. Referring to FIG. 6, the terminal device includes a processor 10, a transmitter 20, a receiver 30, a memory 40, and a wireless communication module 50. The memory 40, the transmitter 20 and the receiver 30 and the processor 10 can be connected via a bus. Of course, in the actual application, the memory 40, the transmitter 20, and the receiver 30 and the processor 10 may not be a bus structure, but may be other structures, such as a star structure, which is not specifically limited herein.

Optionally, the processor 10 may be a central processing unit, an application specific integrated circuit (ASIC), and may be one or more integrated circuits for controlling program execution, and may be used on site. A hardware circuit developed by a Field Programmable Gate Array (FPGA) can be a baseband processor.

Alternatively, processor 10 may include at least one processing core.

Optionally, the memory 40 may include a read only memory (English: Read Only Memory, ROM for short), a random access memory (English: Random Access Memory, RAM for short), and a disk storage. The memory 40 is used to store data required by the processor 10 to operate. The number of memories 40 is one or more.

Alternatively, the transmitter 20 and the receiver 30 may be physically independent of each other or integrated.

Optionally, the wireless communication module 50 is a WLAN wireless communication module, configured to scan available APs and access APs, and thus can communicate through the WLAN.

Optionally, the terminal device further includes a display screen for displaying data in the terminal device, so that the user can operate the terminal device.

Specifically, the sender 20 is configured to send a query request to the platform when the wireless communication module 50 scans an available AP, where the query request is used to request an authentication feature of the AP, where the authentication feature includes The name of the AC and the URL; the receiver 30 is configured to receive the query result sent by the platform; the processor 10 is configured to obtain a user name and a password if the query result includes the authentication feature; the user name and the The password is an authentication parameter used by the AC to authenticate the terminal device. The sender 20 is further configured to: send the username and the password to the AC according to the authentication feature.

Optionally, the processor 10 is further configured to: if the query result indicates that the authentication feature is not queried, accessing any network address;

The receiver 30 is further configured to: receive a page of the portal website;

The processor 10 is further configured to: obtain the authentication feature by parsing the page; and obtain the username and the password;

The transmitter 20 is further configured to: send the username and the password to the AC according to the authentication feature.

Optionally, the receiver 30 is further configured to: receive, by the AC, a message that indicates that the authentication is passed;

The transmitter 20 is further configured to: send the authentication feature to the platform.

Optionally, the processor 10 is configured to obtain the pre-configured username and the password.

The various changes and specific examples in the foregoing network authentication method in the embodiment of FIG. 2 are also applicable to the terminal device in this embodiment. Through the foregoing detailed description of the network authentication method, those skilled in the art can clearly understand the present embodiment. The implementation method of the terminal device is so detailed for the sake of brevity of the description.

Based on the same inventive concept, an embodiment of the present invention further provides a platform, such as a server. Referring to FIG. 7, the server includes a processor 60, a transmitter 80, a receiver 70, and a memory 90. Different from the terminal device in FIG. 6, the platform in this embodiment may not include the wireless communication module, and the remaining components are similar to the components named in the terminal device in FIG. 6, so the same portion will no longer be used. To be described, portions of the components of the platform in this embodiment which are different from those of the terminal device of FIG. 6 will be described below.

Specifically, the receiver 70 is configured to receive a first query request sent by the first terminal device, where the query request is used to request an authentication feature of the AP, where the authentication feature includes an AC name and a URL; The device 60 is configured to query, by the platform, the authentication feature of the AP, and the sender 80 is configured to send, to the first terminal device, a query indicating that the authentication feature is not queried, if the authentication feature of the AP is not queried The result is that the receiver 70 is further configured to receive an authentication feature of the AP sent by the first terminal device; the processor 60 is further configured to record a correspondence between the AP and an authentication feature of the AP. For example, processor 60 records the correspondence on memory 90.

Optionally, the sender 80 is further configured to: if the authentication feature of the AP is queried, the platform sends a query result including the authentication feature to the first terminal device.

Optionally, the receiver 70 is further configured to: after receiving the authentication feature of the AP sent by the first terminal device, receive a second query request sent by the second terminal device, where the second query request is used to request to obtain the The authentication feature of the AP is further configured to: send the received authentication feature of the AP to the second terminal device.

The various changes and specific examples in the network authentication method in the foregoing embodiment of FIG. 3 are also applicable to the platform in this embodiment. The foregoing detailed description of the network authentication method can be clearly known to those skilled in the art. The implementation method of the platform, so for the sake of brevity of the description, it will not be described in detail here.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.

The present invention is directed to a method, apparatus (system), and computer program according to an embodiment of the present invention. The flow chart and/or block diagram of the product is described. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

A network authentication method, comprising:

When the terminal device scans the available access point AP, the terminal device sends a query request to the platform, where the query request is used to request an authentication feature of the AP, where the authentication feature includes the name of the access controller AC. And a uniform resource locator URL;

Receiving, by the terminal device, a query result sent by the platform;

If the query result includes the authentication feature, the terminal device acquires a user name and a password; the user name and the password are authentication parameters used by the AC to authenticate the terminal device;

The terminal device sends the username and the password to the AC according to the authentication feature.
The method of claim 1 wherein the method further comprises:

If the query result indicates that the authentication feature is not queried, the terminal device accesses any network address;

Receiving, by the terminal device, a page of a portal website;

The terminal device obtains the authentication feature by parsing the page;

The terminal device acquires the username and the password;

The terminal device sends the username and the password to the AC according to the authentication feature.
The method of claim 2, wherein the method further comprises:

Receiving, by the terminal device, a message that is sent by the AC to indicate that the authentication is passed;

The terminal device sends the authentication feature to the platform.
The method according to any one of claims 1-3, wherein the terminal device acquires a username and password, including:

The terminal device acquires the pre-configured username and the password.
A network authentication method, comprising:

The platform receives the first query request sent by the first terminal device, where the first query request is used to request to obtain an authentication feature of the access point AP, where the authentication feature includes the name of the access controller AC and the unified resource. Locator URL;

The platform queries an authentication feature of the AP;

If the authentication feature of the AP is not queried, the platform sends a query result indicating that the authentication feature is not queried to the first terminal device;

Receiving, by the platform, an authentication feature of the AP sent by the first terminal device;

The platform records a correspondence between the AP and an authentication feature of the AP.
The method of claim 5, wherein the method further comprises:

If the authentication feature of the AP is queried, the platform sends a query result including the authentication feature to the first terminal device.
The method of claim 5, wherein after the platform receives the authentication feature of the AP sent by the first terminal device, the method further includes:

Receiving, by the platform, a second query request sent by the second terminal device, where the second query request is used to request to acquire an authentication feature of the AP;

The platform sends the received authentication feature of the AP to the second terminal device.
A terminal device, comprising:

a wireless communication module, configured to scan an available access point AP;

a transmitter, configured to send a query request to the platform when the wireless communication module scans an available AP, where the query request is used to request an authentication feature of the AP; wherein the authentication feature includes access The name of the controller AC and the Uniform Resource Locator URL;

a receiver, configured to receive a query result sent by the platform;

a processor, configured to acquire a user name and a password if the query result includes the authentication feature; the user name and the password are authentication parameters used by the AC to authenticate the terminal device;

The transmitter is further configured to: send the username and the password to the AC according to the authentication feature.
The terminal device according to claim 8, wherein the processor is further configured to: if the query result indicates that the authentication feature is not queried, accessing an arbitrary network address;

The receiver is further configured to: receive a page of a portal website;

The processor is further configured to: obtain the authentication feature by parsing the page; and obtain the username and the password;

The transmitter is further configured to: send the username and the password to the AC according to the authentication feature.
The terminal device according to claim 9, wherein the receiver is further configured to: receive, by the AC, a message indicating that the authentication is passed;

The transmitter is further configured to: send the authentication feature to the platform.
The terminal device according to any one of claims 8 to 10, wherein the processor is configured to acquire the pre-configured user name and the password.
A platform, comprising:

a receiver, configured to receive a first query request sent by the first terminal device, where the first query request is used to request to acquire an authentication feature of the access point AP, where the authentication feature includes an access controller AC Name and Uniform Resource Locator URL;

a processor, configured to query an authentication feature of the AP;

a sender, configured to send, to the first terminal device, a query result that does not query the authentication feature, if the authentication feature of the AP is not queried;

The receiver is further configured to receive an authentication feature of the AP sent by the first terminal device;

The processor is further configured to record a correspondence between the AP and an authentication feature of the AP.
The platform according to claim 12, wherein the transmitter is further configured to: if the authentication feature of the AP is queried, the platform sends the authentication function including the authentication feature to the first terminal device search result.
The platform according to claim 12, wherein the receiver is further configured to: after receiving the authentication feature of the AP sent by the first terminal device, receive a second query sent by the second terminal device Requesting, the second query request is used to request to acquire an authentication feature of the AP;

The transmitter is further configured to: send the received authentication feature of the AP to the second terminal device.
A client, comprising:

a sending module, configured to send a query request to the platform when the terminal device scans the available access point AP, where the query request is used to request an authentication feature of the AP, where the authentication feature includes access a name of the controller AC and a uniform resource locator URL; the terminal device is a device running the client;

a receiving module, configured to receive a query result sent by the platform;

An obtaining module, configured to obtain a user name and a password if the query result includes the authentication feature; the user name and the password are authentication parameters used by the AC to authenticate the terminal device;

The sending module is further configured to: send the username and the password to the AC according to the authentication feature.
The client according to claim 15, wherein the client further comprises an access module and a parsing module.

The access module is configured to access any network address if the query result indicates that the authentication feature is not queried;

The receiving module is further configured to receive a page of a portal website;

The parsing module is configured to obtain the authentication feature by parsing the page;

The obtaining module is further configured to: obtain the username and the password;

The sending module is further configured to: send the username and the password to the AC according to the authentication feature.
The client according to claim 16, wherein the receiving module is further configured to: receive a message sent by the AC to indicate that the authentication is passed;

The sending module is further configured to: send the authentication feature to the platform.
The client according to any one of claims 15-17, wherein the obtaining module is configured to pre-configure the username and the password.
A terminal device, comprising:

a wireless communication module, configured to scan an available access point AP;

A client as claimed in any of claims 15-18.