Access method and system, and mobile intelligent access point

Patent metadata

Field	Value
Publication number	US-9167430-B2
Application number	US-201214235093-A
Country	US
Kind code	B2
Filing date	May 10, 2012
Priority date	Aug 3, 2011
Publication date	Oct 20, 2015
Grant date	Oct 20, 2015

Abstract

An access method is disclosed. The method includes: a mobile intelligent access point accesses a network through at least two wireless technologies; a User Equipment (UE) establishes a connection with the mobile intelligent access point; and the UE acquires access authentication from the network through the mobile intelligent access point. An access system and a mobile intelligent access point are further disclosed. With the disclosure, network authentication can be implemented to facilitate an operator to control the number of access users and to guarantee the network of the operator. Furthermore, a broadband mobile network is taken as a backhaul network, so as to reduce the reliability on a fixed network and improve the utilization of the broadband mobile network.

First claim

The invention claimed is:

1. An access method, comprising:
accessing, by a mobile intelligent access point, a network through at least two wireless technologies;
establishing, by a User Equipment (UE), a connection with the mobile intelligent access point; and
acquiring, by the UE, access authentication from the network through the mobile intelligent access point;
wherein the step of acquiring, by the UE, access authentication from the network through the mobile intelligent access point comprises:
sending, by the UE, a Hyper Text Transport Protocol (HTTP) request message to a Packet Data Network Gateway (P-GW) or a Gateway GPRS Support Node (GGSN) through the mobile intelligent access point;
sending, by the P-GW or the GGSN, a user authentication page to the UE through the mobile intelligent access point when the P-GW or the GGSN confirms that an Internet Protocol (IP) address of the UE is not authenticated and the UE accesses the network through the mobile intelligent access point; and
after a 3rd Generation Partnership Project Authentication, Authorization and Accounting (3GPP AAA) server verifies a user name and a password successfully, initiating, by a web portal server, challenge authentication to the P-GW or the GGSN, and acquiring, by the P-GW or the GGSN, charging information from the 3GPP AAA server;
wherein the step of acquiring, by the UE, the access authentication from the network through the mobile intelligent access point comprises:
sending, by the UE, an HTTP request message to the mobile intelligent access point;
forwarding, by the mobile intelligent access point, the HTTP request message to the P-GW or the GGSN, wherein the HTTP request message includes an address and a Service Set Identifier (SSID) of the web portal server;
confirming, by the P-GW or the GGSN, that the IP address of the UE is not authenticated and the UE accesses the network through the mobile intelligent access point;
pushing, by the P-GW or the GGSN, an HTTP response including a user authentication page to the mobile intelligent access point;
forwarding, by the mobile intelligent access point, the user authentication page to the UE;
after a user inputs the user name and the password on the authentication page, sending an HTTP POST request to the web portal server through the mobile intelligent access point, and the P-GW or the GGSN, wherein the HTTP POST request includes the address of the web portal server, the user name and the password;
initiating, by the web portal server, a user information request to the 3GPP AAA server;
verifying, by the 3GPP AAA server, the user name and the password;
after the user name and the password are verified successfully, sending, by the 3GPP AAA server, a user information request response message to the web portal server;
initiating, by the web portal server, challenge authentication to the P-GW or the GGSN, and acquiring, by the P-GW or the GGSN, charging information from the 3GPP AAA server; and
after the authentication is successful, sending, by the web portal server, an HTTP response including authentication success information to the UE through the P-GW or the GGSN, and the mobile intelligent access point; and
performing, by the UE, a data service through the mobile intelligent access point.

2. The method according to claim 1 , further comprising:
after the mobile intelligent access point accesses the network, providing, by the network, an uplink data policy of the mobile intelligent access point to the mobile intelligent access point; and
selecting, by the mobile intelligent access point, different data connections according to the uplink data policy to transmit uplink data after the uplink data are received by the mobile intelligent access point.

3. An access method, comprising:
accessing, by a mobile intelligent access point, a network through at least two wireless technologies;
establishing, by a User Equipment (UE), a connection with the mobile intelligent access point; and
acquiring, by the UE, access authentication from the network through the mobile intelligent access point,
herein the step of acquiring, by the UE, access authentication from the network through the mobile intelligent access point comprises:
sending, by the UE, an HTTP request message to a web portal server through the mobile intelligent access point;
sending, by the web portal server, a user authentication page to the UE through the mobile intelligent access point when the web portal server confirms that an IP address of the UE is not authenticated and the UE accesses the network through the mobile intelligent access point; and
after a 3GPP AAA server verifies the user name and the password successfully, initiating, by the web portal server, challenge authentication to the mobile intelligent access point, and acquiring, by the mobile intelligent access point, charging information from the 3GPP AAA server;
wherein the step of acquiring, by the UE, access authentication from the network through the mobile intelligent access point comprises:
sending, by the UE, an HTTP request message to the mobile intelligent access point;
forwarding, by the mobile intelligent access point, the HTTP request message to the web portal server, wherein the HTTP request message includes an address and an SSID of the web portal server; or, sending, by the mobile intelligent access point, the HTTP request message to a Broadband Remote Access Server (BRAS), and forwarding, by the BRAS, the HTTP request message to the web portal server, wherein the HTTP request message includes an address and an SSID of the web portal server;
confirming, by the web portal server, that the IP address of the UE is not authenticated and the UE accesses the network through the mobile intelligent access point;
pushing, by the web portal server, an HTTP response including a user authentication page to the mobile intelligent access point;
forwarding, by the mobile intelligent access point, the user authentication page to the UE;
after a user inputs the user name and the password on the authentication page, sending an HTTP POST request to the web portal server through the mobile intelligent access point, and the P-GW or the GGSN, wherein the HTTP POST request includes the address of the web portal server, the user name and the password;
initiating, by the web portal server, a user information request to the 3GPP AAA server;
verifying, by the 3GPP AAA server, the user name and the password, and sending a user information request response message to the web portal server after the user name and the password are verified successfully;
initiating, by the web portal server, challenge authentication to the mobile intelligent access point, and acquiring, by the mobile intelligent access point, charging information from the 3GPP AAA server; and
after the authentication is successful, sending, by the web portal server, an HTTP response including authentication success information to the UE through the mobile intelligent access point; and
performing, by the UE, a data service through the mobile intelligent access point.

4. An access system, comprising: a User Equipment (UE), a mobile intelligent access point and a network, wherein
the mobile intelligent access point is configured to access the network through at least two wireless technologies; and
the UE is configured to establish a connection with the mobile intelligent access point and acquire access authentication from the network through the mobile intelligent access point;
wherein the process that the UE acquires the access authentication from the network through the mobile intelligent access point comprises:
the UE sends a Hyper Text Transport Protocol (HTTP) request message to a Packet Data Network Gateway (P-GW) or a Gateway GPRS Support Node (GGSN) through the mobile intelligent access

Assignees

• Zhao Youchun
• You Shilin
• Zong Zaifeng
• Zhu Xiaodong
• Liu Jianye
• Wu Se
• Wang Weibin
• Zhu Jinguo
• Meng Jun
• Zte Corp

Inventors

• Zhao Youchun
• You Shilin
• Zong Zaifeng
• Zhu Xiaodong
• Liu Jianye
• Wu Se
• Wang Weibin
• Zhu Jinguo
• Meng Jun

Classifications

• H04W12/08

  Access security · CPC title

• H04L63/0892

  by using authentication-authorization-accounting [AAA] servers or protocols · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04W88/10

  adapted for operation in multiple networks, e.g. multi-mode access points · CPC title