Network access method, apparatus and system

• US 9,154,950 B2
• Filed: 03/04/2011
• Issued: 10/06/2015
• Est. Priority Date: 01/10/2011
• Status: Active Grant

• Current Assignee: ZTE Corporation
• Original Assignee: ZTE Corporation
• Inventors: Yue, Xiaopin
• Primary Examiner(s): Darrow, Justin T
• Assistant Examiner(s): SONG, HEE K
• Application Number:
  US13/977,746
• Publication Number:
  US 20130298196A1
• Time in Patent Office: 1,677 Days
• Field of Search: 726/3, 726/10, 455/406, 455/408, 455/412.2
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

The disclosure discloses a network access method, apparatus and system. The method includes: a network side determines that a first User Equipment (UE) requests to use the account of a second UE for access; the network side determines that the account of the second UE is successfully authenticated; the network determines that the user to which the second UE belongs allows the first UE to access the network side by the account of the second UE; and the first UE accesses the network side. The disclosure can ensure the security of the master user.

Claims

1. A network access method, comprising:

a network side determining that a first User Equipment (UE) requests to use an account of a second UE for access;

the network side determining that the account of the second UE is successfully authenticated;

the network side receiving access admission information from a third UE and determining that a user to which the second UE belongs allows the first UE to access the network side by the account of the second UE according to the access admission information, wherein the third UE is to be allowed by the user to which the second UE belongs, and to authenticate other UEs except the second and third UEs to access the network side by the account of the second UE; and

the network side accepting an access of the first UE.

2. The method according to claim 1, wherein the network side determining that the user to which the second UE belongs allows the first UE to access the network side by the account of the second UE comprises:

the network side acquiring the MAC address and/or the SIM number of the first UE;

the network side sending the MAC address and/or the SIM number to the user to which a third UE belongs;

the network side receiving access admission information from the third UE, wherein the access admission information is used for indicating the user to which the second UE belongs to allow the first UE to access the network side by the account of the second UE; and

the network side determining that the user to which the second UE belongs allows the first UE to access the network side by the account of the second UE according to the access admission information.

3. The method according to claim 2, wherein,

the network side sending the MAC address and/or the SIM number in a form of a short message or voice prompt information through a Wireless Local Area Network (WLAN) or a Time Division-Synchronization Code Division Multiple Access (TD-SCDMA) network or an Enhanced Data rate for Global system for mobile communication (EDG) network;

and

the network side receiving the access admission information by a short message or voice prompt information.

4. The method according to claim 1, wherein after the first UE accesses the network side, the method further comprises:

the network side notifying all UEs using the account of the second UE, of the access of the first UE in a form of a short message or voice prompt information through a WLAN or a TD-SCDMA network or an EDG network.

5. The method according to claim 1, wherein after the first UE accesses the network side, the method further comprises:

the network side determining that WLAN function of the second UE is not enabled; and

the network side allowing the first UE to transmit data independently.

6. The method according to claim 1, wherein after the first UE accesses the network side, the method further comprises at least one of:

transmitting data between the network side and the first UE according to the Transmission Control Protocol (TCP);

transmitting data between the first UE and the second UE according to the User Datagram Protocol (UDP); and

transmitting data between the first UE and a third UE according to the UDP, the third UE being allowed by the user to which the second UE belongs to access the network side by the account of the second UE.

7. The method according to claim 1, wherein the network side determining that the account of the second UE is successfully authenticated comprises at least one of:

the network side determining that the account of the second UE is successfully authenticated by a WLAN access device by a short message or voice prompt information;

the network side determining that the account of the second UE is successfully authenticated by a provincial Authentication Server (AS) by a short message or voice prompt information; and

the network side determining that the account of the second UE is successfully authenticated by a national AS by a short message or voice prompt information.

8. A network access apparatus, applied to a network side, comprising a hardware processor configured to execute program units stored on a memory, the program units comprising:

a first determining module, configured to determine that a first UE requests to use an account of a second UE for access;

a second determining module, configured to determine that the account of the second UE is successfully authenticated;

a third determining module, configured to receive access admission information from a third UE and determine that a user to which the second UE belongs allows the first UE to access the network side by the account of the second UE according to the access admission information, wherein the third UE is to be allowed by the user to which the second UE belongs, and to authenticate other UEs except the second and third UEs to access the network side by the account of the second UE; and

an access module, configured to implement the access of the first UE.

9. A network access system, comprising a first UE, a second UE and a network side, wherein the network side comprises a hardware processor configured to execute program units stored on a memory, the program units comprising:

a first determining module, configured to determine that the first UE requests to use an account of a second UE for access;

a second determining module, configured to determine that the account of the second UE is successfully authenticated;

a third determining module, configured to receive access admission information from a third UE and determine that a user to which the second UE belongs allows the first UE to access the network side by the account of the second UE according to the access admission information, wherein the third UE is to be allowed by the user to which the second UE belongs, and to authenticate other UEs except the second and third UEs to access the network side by the account of the second UE; and

an access module, configured to implement the access of the first UE.