Digital certificate obtaining method and apparatus

Patent metadata

Field	Value
Publication number	US-12413570-B2
Application number	US-202118011591-A
Country	US
Kind code	B2
Filing date	May 20, 2021
Priority date	Jul 6, 2020
Publication date	Sep 9, 2025
Grant date	Sep 9, 2025

Abstract

A digital certificate obtaining method and apparatus. The method includes: a routing device receives a network access request sent by a terminal on the basis of a first virtual local area network, wherein the first virtual local area network is associated with a uniform resource locator (URL) of a server, so that the terminal obtains, by means of the server, a digital certificate used for accessing a second virtual local area network; and in response to the network access request sent by the terminal on the basis of the first virtual local area network, the routing device sends the URL of the server to the terminal, so that the terminal obtains the digital certificate from the server according to the URL.

First claim

What is claimed is:

1. A digital certificate obtaining method, comprising:
receiving, by a routing device, a network access request sent by a terminal based on a first virtual local area network, wherein the first virtual local area network is associated with a Uniform Resource Locator (URL) of a server such that the terminal obtains a digital certificate for accessing a second virtual local area network by the server;
sending, by the routing device, the URL of the server to the terminal in response to the network access request sent by the terminal based on the first virtual local area network such that the terminal obtains the digital certificate from the server according to the URL.

2. The method according to claim 1 , further comprising:
receiving, by the routing device, a network access request sent by the terminal based on the second virtual local area network;
performing, by the routing device, a digital certificate authentication with the terminal according to the network access request sent by the terminal based on the second virtual local area network, and establishing a network connection with the terminal after the authentication passes.

3. The method according to claim 2 , wherein the routing device is configured with a first service set identification and a second service set identification, the first service set identification being configured to identify the first virtual local area network and the second service set identification being configured to identify the second virtual local area network.

4. The method according to claim 1 , wherein the sending, by the routing device, the URL of the server to the terminal in response to the network access request sent by the terminal based on the first virtual local area network, comprises:
sending a DNS resolution response to the terminal after a proxy domain name system (DNS) service in the routing device receives a DNS resolution request sent by the terminal based on the first virtual local area network, the DNS resolution response carrying an IP address of a proxy WEB service in the routing device; and
receiving, by the proxy WEB service, a network access request sent by the terminal according to the IP address of the proxy WEB service and based on the first virtual local area network, and sending redirection information carrying the URL of the server to the terminal, wherein the server enables the terminal to obtain a digital certificate for accessing the second virtual local area network.

5. The method according to claim 4 , wherein the routing device is configured with a first service set identification and a second service set identification, the first service set identification being configured to identify the first virtual local area network and the second service set identification being configured to identify the second virtual local area network.

6. The method according to claim 1 , wherein the sending, by the routing device, the URL of the server to the terminal in response to the network access request sent by the terminal based on the first virtual local area network, comprises:
sending the redirection information carrying the URL of the server to the terminal after the proxy DNS service in the routing device receives the DNS resolution request sent by the terminal based on the first virtual local area network, wherein the server enables the terminal to obtain a digital certificate for accessing the second virtual local area network.

7. The method according to claim 6 , wherein the routing device is configured with a first service set identification and a second service set identification, the first service set identification being configured to identify the first virtual local area network and the second service set identification being configured to identify the second virtual local area network.

8. The method according to claim 1 , wherein the routing device is configured with a first service set identification and a second service set identification, the first service set identification being configured to identify the first virtual local area network and the second service set identification being configured to identify the second virtual local area network.

9. A routing device, comprising a processor, a memory, and a communication interface; wherein
the communication interface receives and sends data under control of the processor;
the memory stores computer instructions; and
the processor is configured to read the computer instructions to perform followings:
receiving a network access request sent by a terminal based on a first virtual local area network, wherein the first virtual local area network is associated with a Uniform Resource Locator (URL) of a server such that the terminal obtains a digital certificate for accessing a second virtual local area network by the server;
sending the URL of the server to the terminal in response to the network access request sent by the terminal based on the first virtual local area network such that the terminal obtains the digital certificate from the server according to the URL.

10. The routing device according to claim 9 , wherein the processor is further configured to read the computer instructions to perform followings:
receiving a network access request sent by the terminal based on the second virtual local area network;
performing a digital certificate authentication with the terminal according to the network access request sent by the terminal based on the second virtual local area network, and establishing a network connection with the terminal after the authentication passes.

11. The routing device according to claim 9 , wherein the processor is configured to read the computer instructions to send the URL of the server to the terminal in response to the network access request sent by the terminal based on the first virtual local area network, by:
sending a DNS resolution response to the terminal after a proxy domain name system (DNS) service in the routing device receives a DNS resolution request sent by the terminal based on the first virtual local area network, the DNS resolution response carrying an IP address of a proxy WEB service in the routing device; and
receiving, by the proxy WEB service, a network access request sent by the terminal according to the IP address of the proxy WEB service and based on the first virtual local area network, and sending redirection information carrying the URL of the server to the terminal, wherein the server enables the terminal to obtain a digital certificate for accessing the second virtual local area network.

12. The routing device according to claim 9 , wherein the processor is configured to read the computer instructions to send the URL of the server to the terminal in response to the network access request sent by the terminal based on the first virtual local area network, by:
sending the redirection information carrying the URL of the server to the terminal after the proxy DNS service in the routing device receives the DNS resolution request sent by the terminal based on the first virtual local area network, wherein the server enables the terminal to obtain a digital certificate for accessing the second virtual local area network.

13. The routing device according to claim 9 , wherein the routing device is configured with a first service set identification and a second service set identification, the first service set identification being configured to identify the first virtual local area network and the second service set identification being configured to identify the second virtual local area network.

14. A non-transitory computer-readable storage

Assignees

• China Iwncomm Co Ltd

Inventors

• Chen Weigang
• Li Peng
• Chen Geng
• Yan Xiang
• Zhang Guoqiang

Classifications

• H04L63/0272

  Virtual private networks · CPC title

• H04L63/0281

  Proxies · CPC title

• H04L61/103

  across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP] · CPC title

• H04L63/00

  Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00) · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title