公开(公告)号：US11405783B2

公开(公告)日：2022-08-02

申请号：US16472728

申请日：2017-08-29

Applicant: China Academy of Telecommunications Technology

Inventor： Shanzhi Chen ,  Zhonglin Chen ,  Ming Ai

IPC: G06F7/04 ,  H04W12/069 ,  H04W12/08 ,  H04L9/40 ,  H04W12/06 ,  H04W48/20 ,  H04W12/71

Abstract: Embodiments of the present invention relate to the technical field of wireless communications, and in particular to an access control method and device, for use in resolving the problem in the prior art that a user equipment cannot securely access an access points group (APG). According to the embodiments of the present invention, when a user equipment needs to access a network, the user equipment conducts network-layer two-way authentication with a local service center; after the network-layer two-way authentication succeeds, the user equipment conducts access-layer two-way authentication with a corresponding APG so as to enable the user equipment to access the corresponding APG after the access-layer two-way authentication succeeds. The embodiments of the present invention use dual-layer two-way authentication, and enables the user equipment to access a corresponding APG after the dual-layer two-way authentication succeeds, so that the user equipment can securely access the corresponding APG.

公开(公告)号：US11265708B2

公开(公告)日：2022-03-01

申请号：US16472208

申请日：2017-10-20

Applicant: China Academy of Telecommunications Technology

Inventor： Shanzhi Chen ,  Zhonglin Chen ,  Ming Ai

IPC: H04L29/06 ,  H04W12/06 ,  H04L9/32 ,  H04W12/08 ,  H04W12/069

Abstract: Embodiments of the present invention relate to the technical field of wireless communications, especially a method and device for joining an access node group (APG), for use in resolving the problem in the prior art of an access node being unable to join an APG securely. In the embodiments of the present invention, the access node performs network layer two-way authentication with a local service center after determining to join the APG; and the access node performs network configuration according to configuration information in a network configuration message after receiving the network configuration message sent by the local service center. Therefore, an APG corresponding to a user equipment follows the user equipment, and at the same time, it can be ensured that an access node may join the APG securely.