US 8,769,647 B2Granted

Method and system for accessing 3rd generation network

AssigneeZte Corporation

InventorsJiehui Liang, Yuanqing Shi, Jiabing Liu

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method for accessing a 3G network includes: a terminal accessing a wireless local area network by adopting a WAPI protocol, and notifying an AAA server of a 3G network through an AP of the wireless local area network that the terminal intends to access the 3G network; the AAA server obtaining identity information of the terminal through the AP, and performing an EAP-TLS negotiation process with the terminal through the AP after determining that the terminal is a subscription terminal of the 3G network according to the identity information; and the terminal accessing the 3G network after finishing the EAP-TLS negotiation process. A system for accessing a 3G network includes an AP of a wireless local area network and an AAA server of a 3G network. The present invention reduces unnecessary processes the message interacting, the certificate verification, the signature verification, and so on and improves the system efficiency.

Claims13

Dependent claims

A method for accessing a 3G network, comprising the following step of:

a terminal accessing a wireless local area network (WLAN) by adopting a Wireless Local Area Network Authentication Privacy Infrastructure (WAPI) protocol, wherein said terminal has no capability to read a Universal Integrated Circuit Card (UICC) such as a Subscriber Identity Module (SIM) card, and a WAPI terminal certificate of the terminal is used in access authentication of the access process;
after said terminal successfully accesses said WLAN, said terminal notifying an Authentication Authorization Accounting (AAA) server of a 3G network through an access point (AP) of the WLAN that said terminal intends to access the 3G network;
said AAA server obtaining identity information of said terminal recorded in said WAPI terminal certificate of the terminal through said AP, determining that said terminal is a subscription terminal of the 3G network according to said identity information, and then performing an Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) negotiation process with said terminal through the said AP, wherein during the EAP-TLS negotiation process, a TLS certificate massage sent from said terminal to said AAA server through said AP contains said WAPI terminal certificate;
and
said terminal accessing the 3G network after finishing the EAP-TLS negotiation process.

2 more elements

A system for accessing a 3G network, comprising:

an AP of a wireless local area network and an AAA server of a 3G network, wherein:
said AP is configured to perform an access authentication of the wireless local area network to a terminal by using a WAPI protocol, wherein said terminal has no capability to read a Universal Integrated Circuit Card (UICC) such as a Subscriber Identity Module (SIM) card, and a WAPI terminal certificate of the terminal is used in said access authentication, and after said terminal successfully accesses said wireless local area network, when receiving a notification message that said terminal intends to access the 3G network, send the notification message to said AAA server;
and
said AAA server is configured to, after receiving said notification message, obtain identity information of said terminal recorded in said WAPI terminal certificate of the terminal through said AP, determine that said terminal is a subscription terminal of the 3G network according to said identity information, and then perform an EAP-TLS negotiation process with said terminal through said AP, wherein during the EAP-TLS negotiation process, a TLS certificate massage sent from said terminal to said AAA server through said AP contains said WAPI terminal certificate, and allow said terminal to access the 3G network after finishing the EAP-TLS negotiation process.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 13/257,913Filed 23 Sep 2009
Priority: CN 2009 1 014044515 May 2009
Published: US 2012/0131329 A124 May 2012
Granted: 1 Jul 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 12/4625
LAN interconnection over a bridge based backbone: single bridge functionality, e.g. connection of two networks over a single bridge
H04L 12/4633
Interconnection of networks: interconnection of networks using encapsulation techniques, e.g. tunneling
H04L 63/0823
For authentication of entities: using certificates
H04L 63/0892
For authentication of entities: by using authentication-authorization-accounting [AAA] servers or protocols