Method and system for WLAN access authentication based on WWW

Abstract

The embodiment of the invention discloses a wireless local area network (WLAN) access authentication method and system based on World Wide Web. The WLAN access authentication method comprises the following steps: AC intercepts a DNS (domain name server) analysis request sent by a WLAN terminal and judges whether the WLAN terminal has passed user authentication or not; if the WLAN terminal does not pass the user authentication, the AC redirects the DNS analysis request to a local DNS which is isolated with a public network; the local DNS constructs a DNS response data packet pointing to an IP address of a portal server and returns to the AC; in response to receiving an HTTP request or an HTTPS request sent by an unauthorized WLAN terminal, a controller is accessed to redirect the HTTP request or the HTTPS request to the portal server; and the portal server sends a WEB authentication page to the WLAN terminal, acquires a user name and password input by the WLAN terminal by virtue of the WEB authentication page, and performs user authentication on the WLAN terminal according to the user name and the password. By adopting the WLAN access authentication method and system disclosed by the embodiment of the invention, the technical problem that the unauthorized WLAN terminal bypasses a Portal authentication process to perform illegal network access in the prior art can be solved.

Description

technical field [0001] The present invention relates to communication technology, in particular to a method and system for access authentication of a wireless local area network (Wireless Local Area Network, WLAN) based on the World Wide Web (WEB). Background technique [0002] When a user accesses the network through a WLAN, he must first pass the authentication of the WLAN operator. WLAN operators usually use the WEB-based WLAN access authentication method to authenticate users. The specific process is as follows: [0003] A user terminal that supports WLAN access (hereinafter referred to as: WLAN terminal) establishes a physical connection with the operator's access point (AccessPoint, AP), and initiates the process after obtaining the Internet Protocol (IP) address through the access controller (Access Control, AC). Hyper Text Transport Protocol (Hyper Text Transport Protocol, HTTP) request; the user enters any URL in the browser address bar to jump to the portal (Porta...

AI Technical Summary

Problems solved by technology

[0008] One of the technical problems to be solved by the embodiments of the present invention is to provide a WWW-based WLAN access authentication method and system to solve the problem of unauthenticated WLAN terminals passing UDP53 in the prior art WEB-based WLAN access authentication method. The port accesses the public network server or encapsulates the Internet access data packet in the DNS resolution request packet, resulting in the technical problem that the unauthenticated WLAN terminal bypasses the Portal authentication process to access the Internet illegally

Images