Access method, system, and device of terminal, and computer storage medium

Patent metadata

Field	Value
Publication number	US-2016277928-A1
Application number	US-201415028180-A
Country	US
Kind code	A1
Filing date	Mar 31, 2014
Priority date	Oct 9, 2013
Publication date	Sep 22, 2016
Grant date	—

Abstract

The present disclosure discloses a terminal access method, system and device, and a computer storage medium. The method comprises: after establishing an WiFi connection with a wireless gateway, a terminal sends a terminal identity verification request and a gateway identity verification request to the wireless gateway; and after confirming that the terminal identity verification and gateway identity verification succeed, accesses to a wireless broadband network through the WiFi connection.

First claim

1 .- 5 . (canceled)

6 . A wireless access method, comprising:
establishing, by a wireless gateway after successfully verifying information carried in a Wireless Fidelity WiFi connection request of a terminal, a WiFi connection with the terminal; correspondingly conducting terminal identity verification and gateway identity verification according to a terminal identity verification request and a gateway identity verification request initiated by the terminal; and accessing the terminal to a wireless broadband network through the WiFi connection when both the terminal identity verification and gateway identity verification succeed.

7 . The method of claim 6 , wherein conducting terminal identity verification comprises:
deciphering the terminal identity verification request to obtain a terminal ID by the wireless gateway; querying the terminal ID in a terminal identity validity list; and judging that terminal identity verification succeeds when the terminal ID is found out, and judging that terminal identity verification fails when the terminal ID is not found out.

8 . The method of claim 6 , wherein conducting gateway identity verification comprises:
deciphering the gateway identity verification request to obtain a gateway ID by the wireless gateway; and comparing the gateway ID obtained by decryption with a gateway ID of the wireless gateway, and judging that gateway identity verification succeeds when the gateway ID obtained by decryption is as same as the gateway ID of the wireless gateway; when the gateway ID obtained by decryption is different from the gateway ID of the wireless gateway, judging that gateway identity verification fails.

9 . The method of claim 6 , further comprising:
calculating to obtain a second encryption key according to random numbers, and sending the second encryption key to the terminal; accordingly, conducting gateway identity verification comprises: extracting the gateway ID of the wireless gateway as a plaintext by the wireless gateway, and encrypting the extracted gateway ID using the second encryption key and a second encryption algorithm, wherein the second encryption algorithm is an irreversible encryption algorithm; and comparing the ciphertext obtained by decryption with the ciphertext carried in the gateway identity verification request, and judging that gateway identity verification fails when the ciphertext obtained by decryption is different from the ciphertext carried in the gateway identity verification request; and judging that gateway identity verification succeeds when the ciphertext obtained by decryption is as same as the ciphertext carried in the gateway identity verification request.

10 . A terminal, comprising: a first wireless fidelity WiFi module, an identity verification request module and a first wireless broadband module, wherein
the first WiFi module is configured to establish an WiFi connection with a wireless gateway; the identity verification request module is configured to initiate terminal identity verification and gateway identity verification to the wireless gateway; and the first wireless broadband module is configured to access to a wireless broadband network through the WiFi connection after the terminal identity verification and gateway identity verification initiated by the identity verification request module succeed.

11 . The terminal of claim 10 , wherein
the identity verification request module is further configured to send a terminal identity verification request to the wireless gateway, wherein the terminal identity verification request carries terminal identity information; and send a gateway identity verification request to the wireless gateway when the terminal identity information is successfully verified, wherein the gateway identity verification request carries gateway identity information.

12 . The terminal of claim 10 , wherein
the identity verification request module is further configured to extract the terminal ID of the terminal as a plaintext, and calculate the terminal ID using an Internet protocol (IP) address and/or a medium access control (MAC) address to obtain a first encryption key; encrypt the terminal ID using the first encryption key and a first encryption algorithm; and carry a ciphertext obtained by encryption in the terminal identity verification request and send the ciphertext to the wireless gateway.

13 . The terminal of claim 10 , wherein
the identity verification module is further configured to extract the gateway ID as a plaintext, and encrypt the gateway ID using a second encryption key and a second encryption algorithm; and carry the ciphertext obtained by encryption in the gateway identity verification request and send the ciphertext to the wireless gateway.

14 . A wireless gateway, comprising: a second wireless fidelity (WiFi) module, an identity verification module, a route control module and a second wireless broadband module, wherein
the second WiFi module is configured to establish an WiFi connection with a terminal after successfully verifying information carried in an WiFi connection request of the terminal; the identity verification module is configured to correspondingly conduct terminal identity verification and gateway identity verification according to a terminal identity verification request and a gateway identity verification request initiated by the terminal; the route control module is configured to establish a connection for the terminal, of which both terminal identity verification and gateway identity verification succeed, with the wireless broadband network via the second wireless broadband module through the WiFi connection; and the second wireless broadband module is configured to establish a connection with the wireless broadband network.

15 . The wireless gateway of claim 14 , wherein the wireless gateway further comprises an identity management module which is configured to store a terminal identity validity list and a gateway ID of the wireless gateway; and
the identity verification module is further configured to decipher the terminal identity verification request to obtain a terminal ID, query the terminal ID in the terminal identity validity list stored in the identity management module, and judge that the terminal identity verification succeeds when the terminal ID is found out; and judge that the terminal identity verification fails when the terminal ID is not found out.

16 . The wireless gateway of claim 14 , wherein
the identity verification module is further configured to decipher the gateway identity verification request to obtain a gateway ID, compare the gateway ID obtained by decryption with the gateway ID stored in the identity management module, and judge that gateway identity verification succeeds if the gateway ID obtained by decryption is as same as the gateway ID stored in the identity management module; when the gateway ID obtained by decryption is different from the gateway ID stored in the identity management module, judge that gateway identity verification fails.

17 . The wireless gateway of claim 14 , wherein the identity verification module is further configured to calculate to obtain a second encryption key according to random number, and send the second encryption key to the terminal;
the identity verification module is further configured to adopt the gateway ID stored in the identity management module as a plaintext when the terminal initiates the gateway identity verification request, and encrypt the gateway ID using the second encryption key and a second encryption algorithm, wherein the second encryption algorithm is an irreversible encryption algorithm;

Assignees

• Zte Corp

Inventors

• Yue Zonghe
• Xu Jing

Classifications

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/0869

  for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273) · CPC title

• H04W76/10

  Connection setup · CPC title

• H04W12/06 Primary

  Authentication · CPC title