WO2017185589A1

WO2017185589A1 - Virtual sim card-based method and device for accessing wifi hotspot

Info

Publication number: WO2017185589A1
Application number: PCT/CN2016/099095
Authority: WO
Inventors: 周新建
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-04-26
Filing date: 2016-09-14
Publication date: 2017-11-02
Also published as: CN107318110A

Abstract

Provided in an embodiment of the invention is a SIM card-based method for accessing a WiFi hotspot. The method comprises: acquiring remote SIM card information from a card pool of a remote virtual SIM card server, the remote SIM card information comprising network access identifier (NAI) information; and using the remote SIM card information to access a WiFi hotspot. Also provided in the embodiment of the invention is a SIM card-based device for accessing a WiFi hotspot.

Description

Wifi access method and device based on virtual SIM card

Technical field

The embodiment of the invention relates to a virtual subscriber identity module (SIM) card technology, in particular to a wifi access method and device based on a virtual SIM card.

Background technique

In the existing authentication method of the access network, the reference information is usually read first. If the authentication information of the last access network authentication is recorded in the reference information, the authentication method recorded by the reference information is used to initiate the authentication. If the authentication method for the last successful access to the network authentication is not recorded in the reference information, the default authentication method is adopted, or the extended authentication protocol-virtual customer identification module/authentication and key agreement (Extensible Authentication Protocol-Subscriber Identity Module/ Authentication and Key Agreement (EAP-SIM/AKA) authentication is initiated by any one of the authentication methods. After the authentication succeeds, the successful authentication mode is recorded in the reference information to facilitate authentication when accessing the network.

In the wifi hotspot of the operator's layout, there is a very common authentication method, which is the EAP-SIM/AKA mode. Generally, for this wifi hotspot, the solution adopted when connecting is that the PC side application (PCUI) is connected. During the process of wifi hotspot authentication, a lot of authentication information is read from the SIM card through the data card, and they are provided to the wifi login module. The wifi login module is submitted to the wifi hotspot during the authentication process to complete the login authentication. Wifi Internet access on the personal computer (PC) side.

However, the user uses the virtual SIM card to intelligently access the data network of the operator. If the user needs to use the EAP-SIM/AKA authentication type wifi hotspot deployed on the carrier, the SIM card information of the device itself can only be used. Registration, which requires high costs, the user experience is not good.

Summary of the invention

In order to solve the existing technical problems, the embodiment of the present invention provides a wifi access method and device based on a virtual SIM card, so that the user can use the local wifi hotspot to access the Internet when the user is in the field, thereby saving roaming charges and improving the user experience.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

A wifi access method based on a virtual customer identification module SIM card, the method comprising:

Obtaining remote SIM card information from a card pool of the remote virtual SIM card server, where the remote SIM card information includes network access identifier NAI information;

The remote SIM card information is used to access the wifi hotspot.

The method as described above, wherein the using the remote SIM card information to access a wifi hotspot comprises:

Encapsulating the NAI information into an extended authentication protocol EAP packet, and sending the information to the wifi hotspot; wherein the NAI information includes a username and a domain name;

Receiving an access authentication success message sent by the wifi hotspot, and completing wifi access.

The method as described above, wherein before the obtaining the remote SIM card information from the card pool of the remote virtual SIM card server, the method further includes:

When connecting to the wifi hotspot of the nearby carrier, start the data service of the local SIM card and access the carrier data network;

After determining to access the operator data network, performing the operation of obtaining remote SIM card information from the card pool of the remote virtual SIM card server.

The method as described above, wherein the method further comprises:

Sending a disconnection request to the remote virtual SIM card server;

Receiving a disconnected network successful response sent by the remote virtual SIM card server;

EAPol-logoff message. EAPol-logofEAPol-logoff message.

The method as described above, wherein the remote SIM card corresponding to the remote SIM card information supports the EAP-SIM/AKA function.

A wifi access device based on a virtual customer identification module SIM card, the device comprising:

Obtaining a module, configured to obtain remote SIM card information from a card pool of the remote virtual SIM card server, where the remote SIM card information includes network access identifier NAI information;

The access module is configured to use the remote SIM card information to access the wifi hotspot.

The device as described above, wherein the access module is specifically configured to:

The device as described above, wherein the access module is further configured to

The obtaining module is further configured to: after determining to access the operator data network, perform the operation of acquiring remote SIM card information from a card pool of the remote virtual SIM card server.

The device as described above, wherein the access module is further configured to:

Sending a disconnection request to the remote virtual SIM card server;

EAPol-logoff message. EAPol-logofEAPol-logoff message.

The device as described above, wherein the remote SIM card corresponding to the remote SIM card information supports the EAP-SIM/AKA function.

According to still another embodiment of the present invention, a storage medium is also provided. The storage medium is arranged to store program code for performing the following steps:

The remote SIM card information is used to access the wifi hotspot.

Optionally, the storage medium is further arranged to store program code for performing the following steps:

Sending a disconnection request to the remote virtual SIM card server;

EAPol-logoff message. EAPol-logofEAPol-logoff message.

The method and device for accessing a wifi based on a virtual SIM card according to an embodiment of the present invention obtains remote SIM card information from a card pool of a remote virtual SIM card server, where the remote SIM card information includes a network access identifier (Network Access) Identifier (NAI) information; accessing the wifi hotspot using the remote SIM card information. Therefore, the user can use the information of the virtual SIM card to register the operator's EAP-SIM/AKA wifi hotspot when in the field, save roaming charges, and avoid the user to replace the SIM card, thereby improving the user experience.

DRAWINGS

In the drawings, which are not necessarily to scale, the Like reference numerals with different letter suffixes may indicate different examples of similar components. The drawings generally illustrate the various embodiments discussed herein by way of example and not limitation.

FIG. 1 is a flowchart of a wifi access method based on a virtual SIM card according to an embodiment of the present invention; Figure

2 is a flowchart of accessing a wifi hotspot by using a virtual SIM card-based wifi access method according to an embodiment of the present invention;

FIG. 3 is a flowchart of a user offline in a wifi access method based on a virtual SIM card according to an embodiment of the present disclosure;

FIG. 4 is a schematic structural diagram of a wifi access device based on a virtual SIM card according to an embodiment of the present invention.

detailed description

In the embodiments of the present invention, the terminal device supporting the virtual SIM card function is connected to an Extensible Authentication Protocol-Subscriber Identity Module/Authentication and Key Agreement (EAP). -SIM/AKA) When using the wifi hotspot in the authentication mode, first use the SIM card information of the terminal device to connect to the carrier's data network first. After the connection is successful, obtain the EAP-SIM/AKA function from the remote virtual SIM card server. A remote SIM information is downloaded to the local, and then the EAP-SIM/AKA authentication is performed with the wifi hotspot using the obtained remote SIM card information. After the authentication is completed, the terminal device disconnects the data network connected to the SIM card, and uses the virtual The wifi connection established by the remote SIM card information can save roaming charges and improve user experience.

FIG. 1 is a flowchart of a virtual SIM card-based wifi access method according to an embodiment of the present invention. As shown in FIG. 1 , the method provided in this embodiment may be specifically implemented by a terminal device that supports a virtual SIM card function. Specifically, the method provided in this embodiment includes:

Step 101: Acquire remote SIM card information from a card pool of a remote virtual SIM card server, where the remote SIM card information includes NAI information.

In the actual use process, before performing this step, the user turns on the wifi function on the terminal device, searches for the wifi hotspot of the nearby operator, and when connecting the wifi hotspot of the nearby operator, first starts the data service of the local SIM card, and then connects. Enter the carrier network; judge the data service access After this is done, this step is performed, that is, an operation of acquiring remote SIM card information from the card pool of the remote virtual SIM card server is performed.

It should be noted that the SIM card corresponding to the remote SIM card information supports the EAP-SIM/AKA function.

Step 102: Access the wifi hotspot by using the remote SIM card information.

Specifically, in this step, the NAI information is encapsulated into an EAP packet and sent to a wifi hotspot for authentication; wherein the NAI information includes a username and a domain name; and the access sent by the wifi hotspot is received. The authentication success message completes the wifi access.

Message Authentication Code-Signed RESPONSE (MAC-SRES) and other authentication information are returned to the scheduling module, which is returned by the scheduling module to the wifi access module, and the wifi access module will add the new MAC_SRES and other authentication. The information is forwarded to the WLAN AN, which is forwarded to the 3GPP AAA Server for verification. If the wifi access module receives the authentication successfully, it indicates that the networking is successful. After the authentication succeeds, the scheduling module is notified to disconnect the data service of the local SIM card. The device uses the virtual SIM card to access the EAP-SIM/AKA wifi hotspot process. At this point, the wifi connection is established, and the user starts to access the Internet using the information of the virtual SIM.

FIG. 2 is a flowchart of accessing a wifi hotspot by using a virtual SIM card-based wifi access method according to an embodiment of the present invention. As shown in FIG. 2, when the terminal device accesses the hotspot of the EAP-SIM/AKA authentication by using the virtual SIM card-based wifi access method provided in this embodiment, the specific access process is:

Step 201: After the terminal device and the WLAN AN are associated, the EAP authentication is started.

Step 202: The terminal device reads the NAI information of a remote SIM card of a local operator from the remote server.

The NAI information includes a username and a realm.

Step 203: The terminal device encapsulates the NAI information into an EAP packet and sends the information to the WLAN AN.

Step 204: The WLAN AN encapsulates the EAP packet by using a RADIUS Access-Request message and sends it to the 3GPP AAA Server for verification.

The message authentication code authentication response (Message Authentication Code-Signed RESPONSE, MAC-SRES) and other authentication information are returned to the scheduling module, and the scheduling module returns the wifi access module to the wifi access module. Forwarding the new MAC_SRES and other authentication information to the WLAN AN, and forwarding it to the 3GPP AAA Server for verification. If the wifi access module receives the authentication successfully, it indicates that the networking is successful. After the authentication succeeds, the scheduling scheduling module disconnects the local SIM. The data service of the card, at this point, the terminal device uses the virtual SIM card to access the EAP-SIM/AKA wifi hotspot process. At this time, the wifi connection is established, and the user starts to access the Internet using the information of the virtual SIM.

The NAI information includes a username and a realm.

Step 205: The 3GPP AAA Server performs matching and verification with the information of the operator. After the verification succeeds, a random code is generated, and then the random code, the message authentication code, and the user identifier are sent to the WLAN AN. If the failure is successful, the step returns. Failure, the process is terminated.

Step 206: The WLAN AN forwards the received information to the terminal device.

Step 207: The terminal device sends the received random code, the message authentication code, and the user identifier to the remote server for authentication.

Step 208: The remote server performs verification on the SIM card pool side for the received information.

Specifically, the step includes: parsing the received random code, using an algorithm to calculate a comparison between the MAC value and the received MAC value; if the comparison is successful, indicating that the 3GPP AAA Server is authenticated. The new MAC_SRES and other authentication information are then calculated and sent to the terminal device over the network.

Step 209: The terminal device forwards the received information to the 3GPP AAA Server by the WLAN AN.

Step 210: The 3GPP AAA Server generates its own MAC_SRES value by using the random code generated by itself, and compares it with the received MAC_SRES value forwarded by the LWAN AN. After the comparison is successful, the client authentication passes, and the server charges are started, and The WLAN AN notifies the terminal device that the authentication is successful.

At this point, the terminal device uses the virtual remote SIM card to access the EAP-SIM/AKA wifi hotspot process.

For example, when a user brings a terminal device that supports the virtual SIM card function to a foreign country, it is desired to connect the local operator's EAP-SIM/AKA encrypted wifi hotspot through the terminal device. At this time, the terminal device detects the wifi connection. Action, connect the remote card pool database in the background, read any SIM card containing EAP-SIM/AKA information from the operator, and then use the information of this SIM card to register the current operator's wifi network, that is equivalent Registering a local carrier wifi network with a local card eliminates roaming charges and preserves a good wifi experience.

Further, when the user needs to disconnect the network, the terminal device sends a disconnection request to the remote virtual SIM card server; receives a disconnected network successful response sent by the remote virtual SIM card server; according to the received disconnected network Successfully responding, sending an EAPol-logoff message to the wifi hotspot.

FIG. 3 is a flowchart of a user offline in a wifi access method based on a virtual SIM card according to an embodiment of the present invention. As shown in Figure 3, the service flow of the user actively closing the wifi connection on the terminal device is as follows:

Step 301: The wifi access module of the terminal device initiates a network disconnection operation, and notifies the scheduling module.

Step 302: The scheduling module notifies the remote access module that the network is disconnected.

Step 303: The remote access module sends a disconnect request to the remote server.

Step 304: Remotely release the remote SIM card status that has been allocated, return to the remote access module of the terminal device, and return to the scheduling module.

Step 305: The wifi access module receives the network disconnection result, and sends an EAPol-logoff to the WLAN AN.

Step 306: The WLAN AN initiates a offline operation to the 3GPP AAA Server to complete the disconnection; the accounting server stops charging. The process ends.

The method provided in this embodiment can greatly facilitate the user to use the local wifi hotspot to access the Internet in foreign countries, and realizes the virtual remote SIM card, which can save a large roaming cost, and avoids the user to replace the SIM card, thereby improving the user experience. .

FIG. 4 is a schematic structural diagram of a wifi access device based on a virtual SIM card according to an embodiment of the present invention. As shown in FIG. 4, the apparatus provided in this embodiment includes: an obtaining module 11 and an access module 12.

The obtaining module 11 is configured to obtain remote SIM card information from a card pool of the remote virtual SIM card server, where the remote SIM card information includes NAI information;

The access module 12 is configured to access the wifi hotspot using the remote SIM card information.

The access module 12 is specifically configured to: encapsulate the NAI information into an extended authentication protocol EAP message, and send the information to the wifi hotspot; wherein the NAI information includes a user name and a domain name; and receiving the wifi hotspot sending Access authentication success message and complete wifi access.

Further, the access module 12 is further configured to: when connecting the wifi hotspot of the nearby carrier, start the data service of the local SIM card, and access the operator data network; the obtaining module 11 is further configured to: After accessing the carrier data network, performing the operation of obtaining remote SIM card information from the card pool of the remote virtual SIM card server.

Further, the access module 12 is further configured to: send a disconnection request to the remote virtual SIM card server; receive a disconnected network successful response sent by the remote virtual SIM card server; and successfully disconnect the network according to the received network In response, an EAPol-logoff message is sent to the wifi hotspot.

It should be noted that the SIM card corresponding to the remote SIM card information is supported. EAP-SIM/AKA function.

The virtual SIM card-based wifi access device provided in this embodiment may be used to implement the technical solution of the foregoing method embodiment, and the implementation principle and the technical effect are similar, and details are not described herein again.

In an actual application, the acquiring module 11 and the access module 12 may each be a Central Processing Unit (CPU) or a Micro Processor Unit (MPU) located in a virtual SIM card-based wifi access device. , Digital Signal Processor (DSP) or Field Programmable Gate Array (FPGA) implementation.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on the computer or other programmable device to produce the computer The implemented processing, such as instructions executed on a computer or other programmable device, provides steps for implementing the functions specified in one or more blocks of the flowchart or in a block or blocks of the flowchart.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Industrial applicability

In the embodiment of the present invention, in the wifi access process based on the virtual SIM card, the remote SIM card information is obtained from the card pool of the remote virtual SIM card server, where the remote SIM card information includes a network access identifier (Network Access Identifier). , NAI) information; accessing the wifi hotspot using the remote SIM card information. Therefore, the user can use the information of the virtual SIM card to register the operator's EAP-SIM/AKA wifi hotspot when in the field, save roaming charges, and avoid the user to replace the SIM card, thereby improving the user experience.

Claims

A wifi access method based on a virtual customer identification module SIM card, the method comprising:

Obtaining remote SIM card information from a card pool of the remote virtual SIM card server, where the remote SIM card information includes network access identifier NAI information;

The remote SIM card information is used to access the wifi hotspot.
The method of claim 1, wherein the using the remote SIM card information to access a wifi hotspot comprises:

Encapsulating the NAI information into an extended authentication protocol EAP packet, and sending the information to the wifi hotspot; wherein the NAI information includes a username and a domain name;

Receiving an access authentication success message sent by the wifi hotspot, and completing wifi access.
The method of claim 1, wherein before the obtaining the remote SIM card information from the card pool of the remote virtual SIM card server, the method further comprises:

When connecting to the wifi hotspot of the nearby carrier, start the data service of the local SIM card and access the carrier data network;

After determining to access the operator data network, performing the operation of obtaining remote SIM card information from the card pool of the remote virtual SIM card server.
The method according to any one of claims 1 to 3, wherein the method further comprises:

Sending a disconnection request to the remote virtual SIM card server;

Receiving a disconnected network successful response sent by the remote virtual SIM card server;

EAPol-logoff message. EAPol-logofEAPol-logoff message.
The method according to any one of claims 1 to 3, wherein the remote SIM card corresponding to the remote SIM card information supports an EAP-SIM/AKA function.
A wifi access device based on a virtual customer identification module SIM card, wherein the device comprises:

Obtaining a module, configured to obtain remote SIM card information from a card pool of the remote virtual SIM card server, where the remote SIM card information includes network access identifier NAI information;

The access module is configured to use the remote SIM card information to access the wifi hotspot.
The device according to claim 6, wherein the access module is specifically configured to:

Encapsulating the NAI information into an extended authentication protocol EAP packet, and sending the information to the wifi hotspot; wherein the NAI information includes a username and a domain name;

Receiving an access authentication success message sent by the wifi hotspot, and completing wifi access.
The device according to claim 6, wherein the access module is further configured to activate a data service of the local SIM card and connect to the operator data network when connecting the wifi hotspot of the nearby operator;

The obtaining module is further configured to: after determining to access the operator data network, perform the operation of acquiring remote SIM card information from a card pool of the remote virtual SIM card server.
The apparatus according to any one of claims 6 to 8, wherein the access module is further configured to:

Sending a disconnection request to the remote virtual SIM card server;

Receiving a disconnected network successful response sent by the remote virtual SIM card server;

EAPol-logoff message. EAPol-logofEAPol-logoff message.
The apparatus according to any one of claims 6 to 8, wherein the remote SIM card corresponding to the remote SIM card information supports an EAP-SIM/AKA function.