WLAN Gateway SIM Authentication via HTTP Redirection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for implementing SIM card-based authentication in WLAN networks, such as the EAP-SIM protocol, are complex and require modifications to WLAN access points, making them impractical for widespread adoption and failing to address roaming issues between different networks.
Innovation Solution
A WLAN authentication method that redirects HTTP requests to a login webpage, allowing the AAA server to authenticate subscribers using their SIM card identifiers, thereby performing authentication at the application layer of the OSI model, reducing software development complexity and eliminating the need for AP modifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the EAP-SIM protocol is used to implement SIM card-based authentication for WLAN network, then the authentication can be completed by borrowing the SIM card mechanism, but the technical implementation becomes extremely complex and requires modifications to access points
Solution Approach 1:
The patent introduces a gateway as an intermediary component between the WLAN access point and the AAA server. The gateway handles the complex EAP-SIM protocol processing and SIM card authentication logic, while the access point only needs to perform simple HTTP redirection. This mediator approach isolates the complexity from the access points and makes the system easier to deploy and maintain.
2Adaptability or versatility
If the EAP-SIM protocol is implemented in the operating system of a PC, then SIM card authentication can be achieved, but data interaction between the TCP/IP protocol layer and the network layer becomes extremely complex
Solution Approach 1:
The gateway serves as an intermediary that handles the complex protocol interactions between the TCP/IP layer and the EAP-SIM authentication layer. Instead of implementing EAP-SIM directly in the OS, the gateway processes authentication requests using HTTP protocols, which are already natively supported by web browsers and operating systems, thereby reducing software complexity.
Solution Approach 2:
The patent replaces the traditional EAP-SIM protocol stack implementation with an HTTP-based web authentication mechanism. Instead of using complex binary protocol interactions at the network layer, the system uses text-based HTTP requests and responses, which are simpler to implement and already widely supported by operating systems and browsers.
3Reliability
If original access points of the WLAN network are modified to support EAP-SIM transparently, then SIM card-based authentication can be achieved, but the deployment cost and complexity increase
Solution Approach 1:
The gateway acts as an intermediary that performs all the complex EAP-SIM authentication processing, allowing the use of standard, unmodified access points. The gateway receives simple HTTP requests from the access point and handles the SIM card authentication with the AAA server, eliminating the need to modify any access point hardware or firmware.
Solution Approach 2:
The patent creates a virtual authentication environment through the gateway that replicates the functionality of EAP-SIM authentication without requiring actual modifications to the physical access points. The gateway copies and implements the authentication logic in software, allowing standard access points to work with SIM card authentication through HTTP protocol interactions.
Data Source
AI summary
An authentication method, a server, and a terminal for a wireless local area network (WLAN) are provided. The method includes: redirecting a Hypertext Transfer Protocol (HTTP) request message sent by a WLAN terminal to an address of a login webpage of a WLAN network and returning the redirected HTTP request message to the WLAN terminal; sending authentication request information carrying an International Mobile Subscriber Identity (IMSI) identifier of a Subscriber Identity Module (SIM) card sent by the WLAN terminal to an Authentication/Authorization/Accounting (AAA) server corresponding to the address of the login webpage of the WLAN network, such that the AAA server performs authentication based on the IMSI identifier.