Method for providing special access process to different terminals in WLAN

Abstract

The invention relates to a method for providing special access process to different terminals in WLAN, which comprises the following steps: (1) wireless association of users is carried out; (2) a certificate authentication process is implemented; (3) after the certificate authentication, an entity staying in a discriminator entity announces terminal online information and user information of a terminal to an access controller, and the online information comprises an issuer name and a serial number of a certificate of the terminal; (4) the access controller sends the online information and theuser information of the terminal to an authentication server, and applies access authorization; (5) the authentication server queries attribute information corresponding to a local stored certificateaccording to the issuer name and the serial number of the certificate, obtains terminal type attribute of the certificate, and feeds back different access processes to the access controller in an authorized mode according to pre-set strategy; and (6) when the access controller is authorized, the access controller respectively adopts different access process modes according to the authorized information and the terminal types of the certificate. The invention has flexible application, is suitable for various operating environment, and meets different operating needs.

Description

technical field [0001] The present invention relates to a method for realizing specific access network flow for different terminals, in particular to a method for providing specific access flow for different terminals in WLAN. Background technique [0002] Because mobile phones with WLAN functions were not allowed to go on the market in China before, in the operation network of WLAN, users mainly use computers to access the network. At the same time, since there is no relevant information on the terminal that can represent the identity of the user, the following methods were generally used for user access authentication and billing in the operation network in the past: [0003] 1. Set the access security mode on the AP to OPEN mode, and do not authenticate users when connecting through a WLAN layer 2 link. [0004] 2. When the user completes the WLAN wireless association with the AP, the user is required to enter the user name or password through PPPOE or WEB+DHCP to comple...

AI Technical Summary

Problems solved by technology

[0005] However, with the launch of WLAN mobile phones and the possibility of accessing other WLAN terminals besides computers, the original access methods no longer meet operational needs in terms of operational management capabilities and user habits.

In addition, with the application of the WAPI standard, it is possible to perform relevant user authentication through certificates on the terminal