Method of user access authorization in wireless local area network

A system for user access control, the system comprising:

• a wireless local area network (WLAN) user terminal;
• and
• an authentication, authorization and accounting (AAA) server included in a WLAN operational network and in communication with the WLAN user terminal,
• wherein the WLAN user terminal is configured to send an access request for accessing the WLAN operational network to the AAA server,
• the AAA server is configured to:
• perform an access authentication process including authenticating eligibility of the WLAN user terminal upon receiving the access request, and
• perform an access authorization after the access authentication process is successful;
• wherein the access authorization includes:
• verifying whether the WLAN user terminal is allowed to access the WLAN operational network according to authorization conditions, and
• determining access rules to be applied to the WLAN user terminal at least based on the authorization conditions, wherein the determined access rules include an access limitation policy configured to restrict the access of the WLAN user terminal to access the WLAN operational network,
• and if the access request complies with the access rules, the AAA server is further configured to:
• perform a service authorization, wherein the service authorization determines whether the WLAN user terminal is allowed to access a service.

A wireless telecommunications network, comprising:

• an access authentication module, configured to authenticate a wireless local area network (WLAN) user terminal requesting an access to the network, in response to an access request for accessing the network from the user terminal;
• an access authorization module, configured to perform an access authorization of the WLAN user terminal after the access authentication module successfully authenticates the WLAN user terminal;
• and
• a service authorization module;
• wherein the access authorization process comprises verifying whether the WLAN user terminal is allowed to access the network according to authorization conditions and determining access rules to be applied to the WLAN user terminal based on the authorization conditions,
• wherein the access rules are configured to allow the network to restrict the access of the user terminal to access the WLAN operational network, and
• wherein if the access request complies with the access rules, the service authorization module is configured to perform a service authorization process to determine whether the WLAN user terminal is allowed to access a service.

An authentication, authorization and accounting (AAA) server, comprising:

• a receiver, configured to receive an access request for accessing a wireless local area network (WLAN) operational network from a WLAN user terminal;
• and
• a processor, configured to:
• authenticate the WLAN user terminal in response to the access request from the WLAN user terminal;
• and
• perform an access authorization process of the WLAN user terminal after the WLAN user terminal is authenticated successfully;
• wherein the access authorization process comprises verifying whether the WLAN user terminal is allowed to access the WLAN operational network according to authorization conditions;
• and determining access rules to be applied to the WLAN user terminal based on the authorization conditions;
• wherein the access rules are configured to allow the WLAN operational network to restrict the access of the user terminal to access the WLAN operational network;
• and
• wherein if the access request complies with the access rules, the processor is further configured to:
• perform a service authorization process to determine whether the WLAN user terminal is allowed to access a service.