Method and system for wireless access based on identity authentication

Abstract

The invention discloses a method and system for wireless access based on identity authentication. The method comprises the steps: receiving an encrypted identity authentication message associated withthe identity authentication of user equipment, and decrypting the encrypted identity authentication message, so as to obtain an authentication request message from the user equipment; verifying the first digital signature of the authentication request message to determine whether the authentication request message passes signature verification; matching account data in the request information with a forwarding rule to determine an authentication server to which the authentication request message belongs; prompting an authentication server to which the authentication request message belongs toperform identity authentication on the authentication request message based on the identity information; and when the user equipment passes the identity authentication, sending the authorization level information and the identification information to gateway equipment to which the user equipment belongs, so that the user equipment can access the Internet through the gateway equipment in a wireless access mode based on the identity authentication.

Description

technical field [0001] The present invention relates to the field of data communication, and more specifically, to a method and system for wireless access based on identity authentication. Background technique [0002] Wi-Fi authentication in public places usually uses the Portal (portal website) authentication method, that is, after the user equipment accesses an open (unencrypted) Wi-Fi network, if it detects that the connected Wi-Fi network belongs to Captive Network, the Portal of the Wi-Fi operator will pop up automatically. Users need to be authenticated by password / verification code and can access the Internet only after the authentication is passed. The current Wi-Fi access method of open Wi-Fi+Portal authentication has the following problems: 1. Security issues: Open Wi-Fi is not encrypted. 2. The user experience process is relatively cumbersome: Compared with the 4G / 5G connection of the mobile network, Portal authentication requires the user to manually enter the...

AI Technical Summary

Problems solved by technology

The current open Wi-Fi+Portal authentication Wi-Fi access method has the following problems: 1. Security issues: open Wi-Fi is not encrypted

2. The user experience process is relatively cumbersome: Compared with the 4G / 5G connection of the mobile network, Portal authentication requires the user to manually enter the account / mobile phone number, password or verification code, etc., and click to accept the license terms, etc.

[0004] However, the Hotspot 2.0 protocol has certain limitations in the actual implementation process: 1. SIM card authentication services can only be provided by mobile operators, and Wi-Fi operating points (airports, shopping malls, Hotels, etc.) need to connect with the operator RADIUS (Remote Authentication Dial In User Service, remote user dial-in authentication service) to realize the Hotspot 2.0 SIM card authentication service

Images