Wlan user authentication method, authentication server and user equipment

Abstract

The invention provides a wireless local area network (WLAN) user authentication method, authentication server and user equipment. The WLAN user authentication method of the present invention includes: the authentication server obtains the authentication request message initiated by the user equipment UE, and the authentication request message includes the account data information generated by the UE according to the digital certificate issued by the authentication server; The authentication server parses the account data information, and returns an authentication success message to the UE when the account data information is valid. In the method of the present invention, the WLAN user authentication is performed by verifying the account data information generated by the UE according to the digital certificate issued by the authentication server, without the need for the user to input the account number and password each time, quick authentication can be realized, and the use of dictionaries or exhaustive methods is avoided. Crack account passwords, enhance the ability to resist attacks, and improve the security of WLAN user authentication.

Description

technical field [0001] The present invention relates to a wireless communication technology, and in particular, to a wireless local area network (Wireless Local Area Networks, WLAN for short) user authentication method, an authentication server and a user equipment (User Equipment, UE for short). Background technique [0002] A WLAN system generally consists of a terminal browser, a portal server, a Broadband Remote Access Server (BRAS for short), a local authentication, authorization, and accounting server (Authentication, Authorization, Accounting Server, or AAA server for short), a national roaming center, and a home AAA server. Responsible for the entire process of user access, authentication, and billing. [0003] In existing WLANs, user authentication is performed by verifying that the "account" and "password" match. Among them, the password is randomly generated by the system, which is generally a sequence of alphanumeric characters, and the password is limited to th...

AI Technical Summary

Problems solved by technology

[0005] The first aspect of the present invention is to provide a wireless local area network WLAN user authentication method to solve the problem that the WLAN system in the prior art adopts the method of verifying that the "account number" and "password" match to perform user authentication, and the account number and password are vulnerable. Dictionary or brute force attacks, poor security flaws, to achieve security authentication of WLAN systems, improve the ability to resist attacks

[0006] Another aspect of the present invention is to provide an authentication server, which is used to solve the defect of poor authentication security of the WLAN system in the prior art, and realize the security authentication of the WLAN system, so that the user authentication of the WLAN has strong anti-defense means and high security

[0007] Another aspect of the present invention is to provide a user equipment, which is used to solve the defect of poor authentication security of the WLAN system in the prior art, enhance WLAN user authentication anti-resistance means, and improve the security of users accessing the WLAN network

Images