WO2016090578A1

WO2016090578A1 - Authentication processing method, apparatus and terminal

Info

Publication number: WO2016090578A1
Application number: PCT/CN2014/093496
Authority: WO
Inventors: 陈曦
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2014-12-10
Filing date: 2014-12-10
Publication date: 2016-06-16
Anticipated expiration: 2017-06-10
Also published as: CN105874831A; CN105874831B

Abstract

Embodiments of the present invention provide an authentication processing method, an apparatus and a terminal. The method includes: when detecting a first wireless Access Point (AP), a terminal transmits management connection authentication information to the first AP, so that the first AP performs a management authentication according to the management connection authentication information; the management connection authentication information is information pre-generated and transmitted by a platform and received by the terminal; after passing the management authentication, the terminal obtains a management Internet connection, and obtains service connection authentication information from the platform through the management Internet connection; the terminal performs service authentication with a second AP according to the service connection authentication information in order to obtain the service Internet connection after passing the service authentication, which enables a user to obtain the service Internet connection conveniently when the user does not open 2G/3G/4G and other networks or 2G/3G/4G and other networks can not be used.

Description

Authentication processing method, device and terminal

Technical field

本发明实施例涉及通信技术，尤其涉及一种认证的处理方法、装置和终端。The embodiments of the present invention relate to communication technologies, and in particular, to a method, an apparatus, and a terminal for processing an authentication.

Background technique

无线局域网(Wireless Local Area Networks，简称WLAN)自动认证功能是中国移动面向WLAN业务个人用户提供的自动登录服务。The Wireless Local Area Networks (WLAN) automatic authentication function is an automatic login service provided by China Mobile for individual users of WLAN services.

目前，用户终端通过内置的T模块、WIFI伴侣、畅无线等WLAN自动认证管理工具完成自动认证时，预先使用用户移动数据网络(2G/3G/4G)获取认证信息，例如通过第二代移动通信技术(2-Generation wireless telephone technology，简称2G)网络、第三代移动通信技术(3-Generation wireless telephone technology，简称3G)网络或者第四代移动通信技术(4-Generation wireless telephone technology，简称4G)网络获取账号密码、卡号密码等认证信息，然后再启动认证过程。At present, when the user terminal completes automatic authentication through the built-in T-module, WIFI companion, and wireless WLAN automatic authentication management tool, the user mobile data network (2G/3G/4G) is used in advance to obtain authentication information, for example, through the second generation mobile communication. 2-Generation wireless telephone technology (2G) network, 3-Generation wireless telephone technology (3G) network or 4-Generation wireless telephone technology (4G) The network obtains authentication information such as account password, card number password, and then starts the authentication process.

但是，当终端使用WLAN自动认证功能时，必须先开启2G/3G/4G等网络连接Internet，当终端的2G/3G/4G等网络没有开启或者连接不到Internet时，直接导致该终端无法使用WLAN自动认证功能，进而使得用户无法获取业务Internet连接。However, when the terminal uses the WLAN automatic authentication function, you must first enable the 2G/3G/4G network to connect to the Internet. When the 2G/3G/4G network of the terminal is not enabled or cannot be connected to the Internet, the terminal cannot directly use the WLAN. The automatic authentication function prevents the user from obtaining a service Internet connection.

发明内容Summary of the invention

本发明实施例提供一种认证的处理方法、装置和终端，使得用户能在不开启2G/3G/4G等网络或者2G/3G/4G等网络不能使用时，也可以方便的获取业务Internet连接。The embodiment of the invention provides a method, a device and a terminal for processing an authentication, so that the user can conveniently obtain the service Internet connection when the network such as the 2G/3G/4G network or the 2G/3G/4G network cannot be used.

本发明实施例第一方面提供一种认证的处理方法，包括：A first aspect of the embodiments of the present invention provides a method for processing an authentication, including:

当终端检测到第一无线接入点AP时，向所述第一AP发送管理连接认证信息，以供所述第一AP根据所述管理连接认证信息进行管理认证；其中，所述管理连接认证信息为所述终端接收到的由平台预先生成并发送的信息；When the terminal detects the first wireless access point AP, the management connection authentication information is sent to the first AP, where the first AP performs management authentication according to the management connection authentication information; The management connection authentication information is information that is received and sent by the platform and received by the terminal;

所述终端在通过管理认证后，获取管理互联网Internet连接，并通过所述管理Internet连接，向所述平台获取业务连接认证信息；After the terminal passes the management authentication, the terminal acquires and manages the Internet connection of the Internet, and obtains the service connection authentication information from the platform through the management Internet connection;

所述终端根据所述业务连接认证信息，与所述第二AP进行业务认证，以在通过业务认证后获取业务Internet连接。The terminal performs service authentication with the second AP according to the service connection authentication information, so as to obtain a service Internet connection after passing the service authentication.

在第一方面的第一种可能实现方式中，所述终端通过所述管理Internet连接，向所述平台获取业务连接认证信息，具体包括：In a first possible implementation manner of the first aspect, the terminal obtains service connection authentication information from the platform by using the management Internet connection, and specifically includes:

所述终端通过所述管理Internet连接，向所述平台发送包括所述终端的位置信息和/或所述终端扫描到的AP的信息的业务连接认证信息请求，以使所述平台根据所述终端的位置信息和/或所述终端扫描到的AP的信息分配所述业务连接认证信息；Transmitting, by the terminal, the service connection authentication information request including the location information of the terminal and/or the information of the AP scanned by the terminal, by using the management Internet connection, so that the platform is configured according to the terminal according to the terminal Location information and/or information of the AP scanned by the terminal to allocate the service connection authentication information;

所述终端接收所述平台返回的所述业务连接认证信息。The terminal receives the service connection authentication information returned by the platform.

结合第一方面的第一种可能实现方式，在第一方面的第二种可能实现方式中，所述终端根据所述业务连接认证信息，与所述第二AP进行业务认证，以在业务认证后获取业务Internet连接，具体包括：With reference to the first possible implementation manner of the first aspect, in a second possible implementation manner of the first aspect, the terminal performs service authentication with the second AP according to the service connection authentication information, to perform service authentication. After obtaining the service Internet connection, specifically:

所述终端将所述业务连接认证信息发送给所述第二AP，以供所述第二AP根据所述业务连接认证信息进行业务认证；Sending, by the terminal, the service connection authentication information to the second AP, where the second AP performs service authentication according to the service connection authentication information;

所述终端通过所述业务认证后，获取业务Internet连接。After the terminal authenticates through the service, the terminal obtains a service Internet connection.

结合第一方面的第二种可能实现方式，在第一方面的第三种可能实现方式中，所述终端将所述业务连接认证信息发送给所述第二AP之前，所述方法还包括：With the second possible implementation of the first aspect, in a third possible implementation manner of the first aspect, before the sending, by the terminal, the service connection authentication information to the second AP, the method further includes:

所述终端断开所述管理Internet连接。The terminal disconnects the management Internet connection.

结合第一方面的第三种可能实现方式，在第一方面的第四种可能实现方式中，所述第二AP为所述第一AP。In conjunction with the third possible implementation of the first aspect, in a fourth possible implementation manner of the first aspect, the second AP is the first AP.

本发明实施例第二方面提供一种认证的处理装置，包括：A second aspect of the embodiments of the present invention provides a processing device for authentication, including:

收发模块，用于当检测到第一无线接入点AP时，向所述第一AP发送管理连接认证信息，以供所述第一AP根据所述管理连接认证信息进行管理认证；其中，所述管理连接认证信息为由平台预先生成，且发送给所述终端的信息；a transceiver module, configured to: when the first wireless access point AP is detected, send management connection authentication information to the first AP, where the first AP performs management authentication according to the management connection authentication information; The management connection authentication information is information that is pre-generated by the platform and sent to the terminal;

处理模块，用于在通过管理认证后，获取管理互联网Internet连接，并触发所述收发模块通过所述管理Internet连接，向所述平台获取业务连接认证信息；a processing module, configured to acquire and manage an Internet Internet connection after passing the management authentication Sending, by the transceiver module, the service connection authentication information to the platform by using the management Internet connection;

所述收发模块，还用于根据所述业务连接认证信息，与所述第二AP进行业务认证，并在通过业务认证后触发所述处理模块获取业务Internet连接。The transceiver module is further configured to perform service authentication with the second AP according to the service connection authentication information, and trigger the processing module to obtain a service Internet connection after the service authentication is performed.

在第二方面的第一种可能实现方式中，所述收发模块还用于通过所述管理Internet连接，向所述平台发送包括所述终端的位置信息和/或所述终端扫描到的AP的信息的业务连接认证信息请求，以使所述平台根据所述终端的位置信息和/或所述终端扫描到的AP的信息分配所述业务连接认证信息；In a first possible implementation manner of the second aspect, the transceiver module is further configured to send the location information including the terminal and/or the AP scanned by the terminal to the platform by using the management Internet connection. The service of the information is connected to the authentication information request, so that the platform allocates the service connection authentication information according to the location information of the terminal and/or the information of the AP scanned by the terminal;

所述收发模块还用于接收所述平台返回的所述业务连接认证信息。The transceiver module is further configured to receive the service connection authentication information returned by the platform.

结合第二方面的第一种可能实现方式，在第二方面的第二中可能实现方式中，所述收发模块还用于将所述业务连接认证信息发送给所述第二AP，以供所述第二AP根据所述业务连接认证信息进行业务认证；With the first possible implementation of the second aspect, in a second possible implementation manner of the second aspect, the transceiver module is further configured to send the service connection authentication information to the second AP, where The second AP performs service authentication according to the service connection authentication information;

所述处理模块还用于在通过所述业务认证后，获取业务Internet连接。The processing module is further configured to obtain a service Internet connection after the service is authenticated.

结合第二方面的第二种可能实现方式，在第二方面的第三种可能实现方式中，所述处理模块还用于断开所述管理Internet连接。In conjunction with the second possible implementation of the second aspect, in a third possible implementation of the second aspect, the processing module is further configured to disconnect the management Internet connection.

本发明实施例第三方面提供一种终端，包括：A third aspect of the embodiments of the present invention provides a terminal, including:

发送器，用于当所述终端检测到第一无线接入点AP时，向所述第一AP发送管理连接认证信息，以供所述第一AP根据所述管理连接认证信息进行管理认证；其中，所述管理连接认证信息为所述终端接收到的由平台预先生成并发送的信息；a transmitter, configured to: when the terminal detects the first wireless access point AP, send management connection authentication information to the first AP, where the first AP performs management authentication according to the management connection authentication information; The management connection authentication information is information that is received and sent by the platform and received by the terminal.

处理器，用于所述终端在通过管理认证后，获取管理互联网Internet连接，并通过所述管理Internet连接，向所述平台获取业务连接认证信息；a processor, configured to acquire, by the management terminal, a management Internet Internet connection, and obtain service connection authentication information from the platform by using the management Internet connection;

所述发送器还用于所述终端根据所述业务连接认证信息，与第二AP进行业务认证，以在通过业务认证后触发所述处理器获取业务Internet连接。The transmitter is further configured to perform, by the terminal, performing service authentication with the second AP according to the service connection authentication information, to trigger the processor to obtain a service Internet connection after the service authentication is performed.

在第三方面的第一种可能实现方式中，所述发送器还用于通过所述管理Internet连接，向所述平台发送包括所述终端的位置信息和/或所述终端扫描到的AP的信息的业务连接认证信息请求，以使所述平台根据所述终端的位置信息和/或所述终端扫描到的AP的信息分配所述业务连接认证信息；In a first possible implementation manner of the third aspect, the transmitter is further configured to send the location information including the terminal and/or the AP scanned by the terminal to the platform by using the management Internet connection. The service of the information is connected to the authentication information request, so that the platform allocates the service connection authentication information according to the location information of the terminal and/or the information of the AP scanned by the terminal;

所述终端还包括接收器，用于接收所述平台返回的所述业务连接认证信息。 The terminal further includes a receiver, configured to receive the service connection authentication information returned by the platform.

结合第三方面的第一种可能实现方式，在第三方面的第二种可能实现方式中，所述发送器还用于将所述业务连接认证信息发送给所述第二AP，以供所述第二AP根据所述业务连接认证信息进行业务认证；In conjunction with the first possible implementation of the third aspect, in a second possible implementation manner of the third aspect, the transmitter is further configured to send the service connection authentication information to the second AP, where The second AP performs service authentication according to the service connection authentication information;

所述处理器还用于在通过所述业务认证后，获取业务Internet连接。The processor is further configured to obtain a service Internet connection after the service is authenticated.

结合第三方面的第二种可能实现方式，在第三方面的第三种可能实现方式中，所述处理器还用于断开所述管理Internet连接。In conjunction with the second possible implementation of the third aspect, in a third possible implementation of the third aspect, the processor is further configured to disconnect the management Internet connection.

本实施例提供的认证的处理方法，当终端检测到第一AP时，向第一AP发送管理连接认证信息，以供第一AP根据管理连接认证信息进行管理认证，在通过管理认证后，获取管理Interne连接，并通过管理Internet连接，向平台获取业务连接认证信息，终端根据业务连接认证信息，与第二AP进行业务认证，以在业务认证后获取业务Internet连接。相较于现有技术中终端使用认证功能时必须开启2G/3G/4G等网络连接Interne而言，本实施例中，由于可以通过向AP发送管理连接认证信息，在管理认证通过后，获取管理Internet连接，即可获取业务连接认证信息，因此，可以使得用户能在不开启2G/3G/4G等网络或者2G/3G/4G等网络不能使用时，也可以方便的获取业务Internet连接。The method for processing the authentication provided by the embodiment, when the terminal detects the first AP, sends the management connection authentication information to the first AP, so that the first AP performs management authentication according to the management connection authentication information, and obtains the management authentication. Manage the Interne connection and obtain the service connection authentication information from the platform by managing the Internet connection. The terminal performs service authentication with the second AP according to the service connection authentication information to obtain the service Internet connection after the service authentication. In this embodiment, the connection authentication information can be sent to the AP, and the management authentication is passed, and the management is obtained after the management authentication is passed, as in the prior art, when the terminal uses the authentication function to enable the network connection, such as 2G/3G/4G. The Internet connection can obtain the service connection authentication information. Therefore, the user can easily obtain the service Internet connection when the network such as 2G/3G/4G or the 2G/3G/4G network cannot be used.

DRAWINGS

为了更清楚地说明本发明实施例或现有技术中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作一简单地介绍，显而易见地，下面描述中的附图是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动性的前提下，还可以根据这些附图获得其他的附图。In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor.

图1为本发明实施例一提供的认证的处理方法流程图；1 is a flowchart of a processing method for authentication according to Embodiment 1 of the present invention;

图2为本发明实施例二提供的认证的处理方法流程图；2 is a flowchart of a method for processing authentication according to Embodiment 2 of the present invention;

图3为本发明实施例三提供的认证的处理方法流程图；3 is a flowchart of a processing method for authentication according to Embodiment 3 of the present invention;

图4为本发明实施例四提供的认证的处理方法的一实例的信令交互示意图；4 is a schematic diagram of signaling interaction of an example of a method for processing authentication according to Embodiment 4 of the present invention;

图5为本发明实施例五提供的认证的处理装置的结构示意图；FIG. 5 is a schematic structural diagram of a processing apparatus for authentication according to Embodiment 5 of the present invention; FIG.

图6为本发明实施例八提供的终端的结构示意图；FIG. 6 is a schematic structural diagram of a terminal according to Embodiment 8 of the present invention;

图7为本发明实施例九提供的终端的结构示意图。 FIG. 7 is a schematic structural diagram of a terminal according to Embodiment 9 of the present invention.

detailed description

为使本发明实施例的目的、技术方案和优点更加清楚，下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

图1为本发明实施例一提供的认证的处理方法流程图，如图1所示，本实施例的方法包括：FIG. 1 is a flowchart of a method for processing an authentication according to Embodiment 1 of the present invention. As shown in FIG. 1 , the method in this embodiment includes:

步骤101、当终端检测到第一无线接入点(Access Point，简称AP)时，向第一AP发送管理连接认证信息，以供第一AP根据管理连接认证信息进行管理认证。Step 101: When the terminal detects the first access point (AP), the terminal sends the management connection authentication information to the first AP, so that the first AP performs management authentication according to the management connection authentication information.

其中，管理连接认证信息为终端接收到的由平台预先生成并发送的信息。The management connection authentication information is information that is received and sent by the platform and received by the terminal.

在本实施例中，可选地，管理连接认证信息可以为WLAN系统用于认证终端有效性的信息，认证终端有效性指的是认证设备对该终端的身份信息进行认证，若认证通过，则该终端有效，例如，当终端需要加入WLAN时，向AP发送一个管理连接认证信息，该管理连接认证信息中包括该WLAN的认证密码，AP对该认证密码进行验证，验证通过后，该终端有效，即该终端可以加入该WLAN。举例来说，管理连接认证信息具体还可以为WLAN时长卡卡号密码信息、WLAN用户名密码信息、WLAN认证数字证书信息等，例如，WLAN时长卡的卡号：00213，密码：5566。In this embodiment, optionally, the management connection authentication information may be information used by the WLAN system to authenticate the validity of the terminal, and the validity of the authentication terminal refers to the authentication device authenticating the identity information of the terminal, and if the authentication is passed, The terminal is valid. For example, when the terminal needs to join the WLAN, the terminal sends a management connection authentication information to the AP. The authentication connection authentication information includes the authentication password of the WLAN, and the AP verifies the authentication password. After the verification is passed, the terminal is valid. That is, the terminal can join the WLAN. For example, the management connection authentication information may also be WLAN duration card number password information, WLAN username password information, WLAN authentication digital certificate information, etc., for example, the WLAN duration card card number: 00213, password: 5566.

另外，管理连接认证信息由平台通过数据导入或者后台接口同步的方式获得，并将该管理连接认证信息预置于终端中。其中，数据导入的方法具体为，当运营商将分配的卡号、密码、静默热点信息、资费等作为认证信息，以数据包的方式发送给平台，平台接收到数据包之后，由工作人员在平台上建立一个表格，将数据包中认证信息进行分类存储到表格中。后台接口同步的方式具体为，在平台上设置应用程序，由平台向运营商服务器发送认证信息请求，并接受运营商服务器返回的包含认证信息的数据包，平台自动对数据包中的认证信息进行分类，并存储到预先建立的表格中。In addition, the management connection authentication information is obtained by the platform through data import or synchronization of the background interface, and the management connection authentication information is preset in the terminal. The method for data import is specifically: when the operator uses the assigned card number, password, silent hotspot information, and tariff as the authentication information, the data is sent to the platform in the form of a data packet, and after the platform receives the data packet, the staff is on the platform. A table is created to store the authentication information in the data packet into the table. The manner of synchronizing the background interface is specifically: setting an application on the platform, the platform sends an authentication information request to the operator server, and accepts the data packet containing the authentication information returned by the operator server, and the platform automatically performs the authentication information in the data packet. Sort and store in a pre-built form.

在本实施例中，管理认证的过程具体为：当终端检测到WLAN系统中的第一AP时，将管理连接认证信息发送给第一AP，第一AP根据管理连接认证信息对该终端进行认证。例如，该终端为手机，管理连接认证信息为卡号：00213，密码：5566，当第一AP进行认证时，确定该卡号为00213、密码为5566的WLAN时长卡对应的业务里面包括长途通话业务，则允许该手机使用长途通话业务。In this embodiment, the process of managing the authentication is specifically: when the terminal detects the WLAN system The first AP sends the management connection authentication information to the first AP, and the first AP authenticates the terminal according to the management connection authentication information. For example, the terminal is a mobile phone, and the management connection authentication information is card number: 00213, and the password is 5566. When the first AP performs authentication, the service corresponding to the WLAN time card with the card number of 00213 and the password of 5566 is determined to include the long distance call service. The phone is allowed to use long distance calling service.

需要说明的是，在本实施例中，终端可以为手机、平板电脑、手持终端等设备；终端检测到的第一AP可以为一个单独的AP，也可以为一个AP组，AP或者AP组是WLAN运营商的AP热点或者热点组，是现有WLAN系统网元设备；平台是网络侧运行的服务设备，如WLAN认证信息管理平台，平台存储的认证信息由运营商分配，例如，平台将运营商分配的卡号、密码、静默热点信息、资费等作为认证信息。It should be noted that, in this embodiment, the terminal may be a device such as a mobile phone, a tablet computer, or a handheld terminal; the first AP detected by the terminal may be a single AP, or an AP group, and the AP or AP group is The AP hotspot or hotspot group of the WLAN operator is the existing WLAN system network element device; the platform is a service device running on the network side, such as a WLAN authentication information management platform, and the authentication information stored by the platform is allocated by the operator, for example, the platform will operate The card number, password, silent hotspot information, and tariffs assigned by the merchant are used as authentication information.

步骤102、终端在通过管理认证后，获取管理互联网(Internet)连接，并通过管理Internet连接，向平台获取业务连接认证信息。Step 102: After the terminal passes the management authentication, obtains an Internet connection (Internet) connection, and obtains service connection authentication information from the platform by managing the Internet connection.

在本实施例中，管理Internet连接相当于一个通信通道，通过该通道可以获得建立业务Internet连接所需的参数等信息。例如，当手机的用户需要使用本地通话业务时，在通过管理认证后，可使用长途通话业务通道向平台获取与该本地通话业务对应的业务连接认证信息，如卡号：90213，密码：0066。并且，本实施例中的管理Internet连接可以为一个受限的Interne连接，例如，通过该管理Internet连接只能访问限定的互联网协议(Internet Protocol，简称IP)地址，或者，该管理Internet连接只能访问特定的服务平台，或者，该管理Internet连接只能访问只能在一定时间内使用等。In this embodiment, the management Internet connection is equivalent to a communication channel through which information such as parameters required for establishing a service Internet connection can be obtained. For example, when the user of the mobile phone needs to use the local call service, after the management authentication, the long-distance call service channel can be used to obtain the service connection authentication information corresponding to the local call service, such as the card number: 90213 and the password: 0066. Moreover, the management Internet connection in this embodiment may be a restricted Interne connection. For example, the management Internet connection can only access a limited Internet Protocol (IP) address, or the management Internet connection can only Access to a specific service platform, or the management of the Internet connection can only be accessed for a certain period of time.

需要说明的是，在本实施例中，业务连接认证信息和管理连接认证信息都为WLAN系统用于认证终端有效性的信息，由平台通过数据导入或者后台接口同步的方式获得，不同的是，业务连接认证信息和管理连接认证信息的作用、参数及业务属性不同。管理连接认证信息用于终端向第一AP进行管理认证，以在认证通过后，获取管理Internet连接，从而向平台获取业务连接认证信息。业务连接认证信息用于终端向第二AP进行业务认证，以在业务认证通过后，终端可以使用某项业务，例如本地通话业务。业务连接认证信息和管理连接认证信息的参数及业务属性不同具体表现在服务集标识(Service Set Identifier，简称SSID)、AP的介质访问控制地址(Media Access Control Address，简称MAC地址)、用户名密码或者卡号密码等AP鉴权参数不同，以及是否支持漫游，资费单价等业务属性不同。例如，管理连接认证信息中包括的信息有：卡号：00213，密码：5566，业务资费为0.5元/分钟；业务连接认证信息包括的信息有：卡号：90213，密码：0066，业务资费为0.15元/分钟，即该管理连接认证信息和业务连接认证信息的卡号、密码以及资费均不相同。It should be noted that, in this embodiment, the service connection authentication information and the management connection authentication information are information used by the WLAN system to authenticate the validity of the terminal, and are obtained by the platform through data import or synchronization of the background interface. The difference is that The role, parameters, and service attributes of the service connection authentication information and the management connection authentication information are different. The management connection authentication information is used by the terminal to perform management authentication on the first AP to obtain a management Internet connection after the authentication is passed, thereby obtaining service connection authentication information from the platform. The service connection authentication information is used by the terminal to perform service authentication on the second AP. After the service authentication is passed, the terminal can use a certain service, such as a local call service. The parameters of the service connection authentication information and the management connection authentication information and the service attributes are different in the Service Set Identifier (SSID) and the media access control address of the AP (Media Access Control). The AP authentication parameters such as the Address (MAC address), the user name password, or the card number password are different, and whether the service attributes such as roaming and the unit price of the tariff are different. For example, the information included in the management connection authentication information includes: card number: 00213, password: 5566, service charge is 0.5 yuan/minute; service connection authentication information includes: card number: 90213, password: 0066, service charge is 0.15 yuan /minute, that is, the card number, password, and tariff of the management connection authentication information and the service connection authentication information are different.

步骤103、终端根据业务连接认证信息，与第二AP进行业务认证，以在通过业务认证后获取业务Internet连接。Step 103: The terminal performs service authentication with the second AP according to the service connection authentication information, so as to obtain the service Internet connection after the service authentication.

在本实施例中，终端根据业务连接认证信息，与第二AP进行业务认证，业务认证的具体过程为，终端将业务连接认证信息发送给第二AP，第二AP根据业务连接认证信息对终端的有效性进行验证，例如，手机将包括卡号：90213和密码：0066的业务连接认证信息发送给AP，AP进行认证，确定该卡号为90213和密码为0066的WLAN时长卡对应的业务里包括本地通话业务，则认证通过后，该手机可使用该本地通话业务。In this embodiment, the terminal performs service authentication with the second AP according to the service connection authentication information. The specific process of the service authentication is that the terminal sends the service connection authentication information to the second AP, and the second AP uses the service connection authentication information to the terminal. The validity of the service is verified. For example, the mobile phone sends the service connection authentication information including the card number: 90213 and the password: 0066 to the AP, and the AP performs authentication, and determines that the service corresponding to the WLAN time card with the card number of 90213 and the password of 0066 includes the local service. For the call service, the mobile phone can use the local call service after the authentication is passed.

需要说明的是，在本实施例中，业务Internet连接不同于管理Internet连接，具体表现为：管理Internet连接相当于一个通信通道，终端通过该管理Internet连接向平台获取业务连接认证信息，并且，管理Internet连接是一种受限的访问方式。业务Internet连接为通常意义上的Internet连接，例如，获取业务Internet连接后，用户可以上网，且该访问不受限制，或者，在获取业务Internet连接后，终端可以使用某一项业务，例如本地通话业务等。It should be noted that, in this embodiment, the service Internet connection is different from the management Internet connection, and the specific performance is: the management Internet connection is equivalent to a communication channel, and the terminal obtains the service connection authentication information from the platform through the management Internet connection, and manages Internet connectivity is a limited form of access. The service Internet connection is an Internet connection in the usual sense. For example, after obtaining the service Internet connection, the user can access the Internet, and the access is not restricted. Alternatively, after obtaining the service Internet connection, the terminal can use a certain service, such as a local call. Business, etc.

本实施例提供的认证的处理方法，当终端检测到第一AP时，向第一AP发送管理连接认证信息，以供第一AP根据管理连接认证信息进行管理认证，在通过管理认证后，获取管理Interne连接，并通过管理Internet连接，向平台获取业务连接认证信息，终端根据业务连接认证信息，与第二AP进行业务认证，以在业务认证后获取业务Internet连接。相较于现有技术中终端使用认证功能时必须开启2G/3G/4G等网络连接Interne而言，本实施例中，由于可以通过向第一AP发送管理连接认证信息，获取管理Internet连接，即可获取业务连接认证信息，因此，可以使得用户能在不开启2G/3G/4G等网络或者2G/3G/4G等网络不能使用时，也可以方便的获取业务Internet连接。The method for processing the authentication provided by the embodiment, when the terminal detects the first AP, sends the management connection authentication information to the first AP, so that the first AP performs management authentication according to the management connection authentication information, and obtains the management authentication. Manage the Interne connection and obtain the service connection authentication information from the platform by managing the Internet connection. The terminal performs service authentication with the second AP according to the service connection authentication information to obtain the service Internet connection after the service authentication. In this embodiment, the network connection of the network connection 2G/3G/4G must be enabled in the prior art. In this embodiment, the management connection can be obtained by sending the management connection authentication information to the first AP. The service connection authentication information can be obtained. Therefore, the user can conveniently obtain the service Internet connection when the network such as 2G/3G/4G or the 2G/3G/4G network cannot be used.

图2为本发明实施例二提供的认证的处理方法流程图。在上述图1所示实施例一的基础上，步骤“终端通过管理Internet连接，向平台获取业务连接认证信息”的具体实现方法包括以下步骤：FIG. 2 is a flowchart of a method for processing authentication according to Embodiment 2 of the present invention. As shown in Figure 1 above On the basis of the first embodiment, the specific implementation method of the step “the terminal obtains the service connection authentication information by managing the Internet connection” includes the following steps:

步骤201、终端通过管理Internet连接，向平台发送包括终端的位置信息和/或终端扫描到的AP的信息的业务连接认证信息请求，以使平台根据终端的位置信息和/或终端扫描到的AP的信息分配业务连接认证信息。Step 201: The terminal sends a service connection authentication information request including location information of the terminal and/or information of the AP scanned by the terminal to the platform, by using the management Internet connection, so that the platform can scan the AP according to the location information of the terminal and/or the terminal. The information is assigned to the business connection authentication information.

在本实施例中，终端可以将终端的位置信息发送给平台，由平台根据终端的位置信息分配业务连接认证信息，例如，平台可以根据终端的位置信息，为终端匹配一个最优的AP，并将该最优的AP的参数和属性信息作为业务连接认证信息发送给终端。或者，终端可以将扫描的AP的信息发送给平台，平台根据AP的信息查找AP对应的一些参数和属性信息，例如，AP的网速、单价、资费、安全性等，平台根据AP的参数和属性信息为该终端匹配一个最优的AP，将该最优AP的参数和属性信息作为业务连接认证信息发送给终端。或者，终端将终端的位置信息和扫描到的AP的信息都发送给平台，平台根据位置信息和扫描到的AP的信息分配业务连接认证信息。In this embodiment, the terminal may send the location information of the terminal to the platform, and the platform allocates the service connection authentication information according to the location information of the terminal. For example, the platform may match the terminal to an optimal AP according to the location information of the terminal, and The parameter and attribute information of the optimal AP are sent to the terminal as service connection authentication information. Alternatively, the terminal may send the information of the scanned AP to the platform, and the platform searches for some parameters and attribute information corresponding to the AP according to the information of the AP, for example, the network speed, unit price, tariff, security, etc. of the AP, and the platform according to the parameters of the AP and The attribute information is that the terminal matches an optimal AP, and the parameter and attribute information of the optimal AP are sent to the terminal as service connection authentication information. Alternatively, the terminal sends the location information of the terminal and the information of the scanned AP to the platform, and the platform allocates the service connection authentication information according to the location information and the information of the scanned AP.

并且，在本实施例中，平台中还可以存储静默热点信息，即某些AP被设置为静默状态，终端无法扫描到处于静默状态的AP，当平台根据终端的位置信息检测到该终端被静默热点所覆盖，则将该静默状态的AP的信息分配给该终端，如将该静默状态的AP的验证密码作为业务连接认证信息发送给终端。AP的信息中包括了AP的标识、编号等信息，而且，AP的信息可以为一个AP的信息，也可以为一个AP组的AP的信息列表，例如，当终端扫描到多个AP时，可以将扫描的所有AP的信息以列表的形式发送给平台，以供平台分配业务连接认证信息。In addition, in this embodiment, the platform may also store the silent hotspot information, that is, some APs are set to the silent state, and the terminal cannot scan the AP in the silent state, and the platform detects that the terminal is silent according to the location information of the terminal. If the hotspot is overwritten, the information of the AP in the silent state is allocated to the terminal, and the authentication password of the AP in the silent state is sent to the terminal as the service connection authentication information. The information of the AP includes the information such as the identifier and the number of the AP. The information of the AP can be the information of one AP or the information of the AP of the AP group. For example, when the terminal scans multiple APs, The information of all scanned APs is sent to the platform in the form of a list for the platform to allocate service connection authentication information.

步骤202、终端接收平台返回的业务连接认证信息。Step 202: The terminal receives the service connection authentication information returned by the platform.

在本实施例中，以手机从WLAN的主网络1进入子网络2为例，说明本实施例的技术方案。管理Internet连接相当于主网络1，手机通过主网络1向平台发送业务连接认证信息请求，该请求中包括子网络2的SSID，平台根据业务连接认证信息请求中的SSID分配对应的业务连接认证信息，例如加入子网络2的认证密码，并将该业务连接认证信息返回给终端，以使终端根据业务连接认证信息向第二AP进行业务认证。In this embodiment, the technical solution of the embodiment is described by taking the mobile phone from the main network 1 of the WLAN into the sub-network 2 as an example. The management Internet connection is equivalent to the primary network 1. The mobile phone sends a service connection authentication information request to the platform through the primary network 1. The request includes the SSID of the sub-network 2, and the platform allocates the corresponding service connection authentication information according to the SSID in the service connection authentication information request. For example, the authentication password of the sub-network 2 is added, and the service connection authentication information is returned to the terminal, so that the terminal performs service authentication to the second AP according to the service connection authentication information.

在本实施例中，其它的方法步骤的实现原理和图1所示实施例一中的实现原理相同，此处不再赘述。In this embodiment, the implementation principle of other method steps and the implementation in the first embodiment shown in FIG. The principle is the same and will not be described here.

本实施例提供的认证的处理方法，当终端检测到第一AP时，向第一AP发送管理连接认证信息，以供第一AP根据管理连接认证信息进行管理认证，在通过管理认证后，获取管理Interne连接，并通过管理Internet连接，向平台发送包括终端的位置信息和/或终端扫描到的AP的信息的业务连接认证信息请求，以使平台根据终端的位置信息和/或终端扫描到的AP的信息分配业务连接认证信息，并接收平台返回的业务连接认证信息，终端根据业务连接认证信息，与第二AP进行业务认证，以在业务认证后获取业务Internet连接。相较于现有技术中终端使用认证功能时必须开启2G/3G/4G等网络连接Interne而言，本实施例中，由于可以通过向第一AP发送管理连接认证信息，获取管理Internet连接，即可获取业务连接认证信息，因此，可以使得用户能在不开启2G/3G/4G等网络或者2G/3G/4G等网络不能使用时，也可以方便的获取业务Internet连接。并且，在本实施例中，不需要改变AP的认证机制或者升级AP等网络侧设备，只需要平台根据终端的位置信息和AP的列表信息分配业务连接认证信息，即可方便的获取业务Internet连接，实现方式简单，并且有效节省了设备成本。The method for processing the authentication provided by the embodiment, when the terminal detects the first AP, sends the management connection authentication information to the first AP, so that the first AP performs management authentication according to the management connection authentication information, and obtains the management authentication. Manage the Interne connection, and send a service connection authentication information request including the location information of the terminal and/or the information of the AP scanned by the terminal to the platform by managing the Internet connection, so that the platform scans according to the location information of the terminal and/or the terminal. The information distribution service of the AP is connected to the authentication information, and receives the service connection authentication information returned by the platform. The terminal performs service authentication with the second AP according to the service connection authentication information, so as to obtain the service Internet connection after the service authentication. In this embodiment, the network connection of the network connection 2G/3G/4G must be enabled in the prior art. In this embodiment, the management connection can be obtained by sending the management connection authentication information to the first AP. The service connection authentication information can be obtained. Therefore, the user can conveniently obtain the service Internet connection when the network such as 2G/3G/4G or the 2G/3G/4G network cannot be used. In addition, in this embodiment, it is not necessary to change the authentication mechanism of the AP or upgrade the network side device such as the AP, and the platform only needs to allocate the service connection authentication information according to the location information of the terminal and the list information of the AP, so that the service Internet connection can be conveniently obtained. The implementation method is simple, and the equipment cost is effectively saved.

图3为本发明实施例三提供的认证的处理方法流程图。在上述实施例一或者实施例二的基础上，如图3所示，步骤“终端根据业务连接认证信息，与第二AP进行业务认证，以在业务认证后获取业务Internet连接”具体包括如下步骤：FIG. 3 is a flowchart of a method for processing authentication according to Embodiment 3 of the present invention. On the basis of the foregoing embodiment 1 or the second embodiment, as shown in FIG. 3, the step “the terminal performs service authentication with the second AP according to the service connection authentication information to obtain the service Internet connection after the service authentication” includes the following steps. :

步骤301、终端将业务连接认证信息发送给第二AP，以供第二AP根据业务连接认证信息进行业务认证。Step 301: The terminal sends the service connection authentication information to the second AP, so that the second AP performs service authentication according to the service connection authentication information.

步骤302、终端通过业务认证后，获取业务Internet连接。Step 302: After the terminal passes the service authentication, obtain the service Internet connection.

在本实施例中，以手机从WLAN主网络1加入WLAN子网络2为例来说本实施例的技术方案，手机通过WLAN主网络1从平台获取到业务连接认证信息，例如WLAN子网络2的认证密码，终端将该认证密码发送给第二AP，第二AP验证该认证密码正确，即通过业务认证，则该终端可以加入并使用该WLAN子网络2。In this embodiment, the mobile phone is added to the WLAN sub-network 2 from the WLAN main network 1 as an example. The mobile phone obtains service connection authentication information from the platform through the WLAN main network 1, for example, the WLAN sub-network 2 The authentication password is sent by the terminal to the second AP, and the second AP verifies that the authentication password is correct, that is, the service authentication, the terminal can join and use the WLAN subnetwork 2.

在本实施例中，其它的方法步骤的实现原理与图1所示实施例一或图2所示实施例二中的实现原理相同，此处不再赘述。 In this embodiment, the implementation principles of the other method steps are the same as those in the first embodiment shown in FIG. 1 or the second embodiment shown in FIG. 2, and details are not described herein again.

本实施例提供的认证的处理方法，当终端检测到第一AP时，向第一AP发送管理连接认证信息，以供第一AP根据管理连接认证信息进行管理认证，在通过管理认证后，获取管理Interne连接，并通过管理Internet连接，向平台发送业务连接认证信息请求，以使平台根据业务连接认证信息请求分配业务连接认证信息，并接收平台返回的业务连接认证信息，终端将业务连接认证信息发送给第二AP，以供第二AP根据业务连接认证信息进行业务认证，终端通过业务认证后，获取业务Internet连接。相较于现有技术中终端使用认证功能时必须开启2G/3G/4G等网络连接Interne而言，本实施例中，由于可以通过向第一AP发送管理连接认证信息，获取管理Internet连接，即可获取业务连接认证信息，因此，可以使得用户能在不开启2G/3G/4G等网络或者2G/3G/4G等网络不能使用时，也可以方便的获取业务Internet连接。The method for processing the authentication provided by the embodiment, when the terminal detects the first AP, sends the management connection authentication information to the first AP, so that the first AP performs management authentication according to the management connection authentication information, and obtains the management authentication. Manage the Interne connection, and send a service connection authentication information request to the platform by managing the Internet connection, so that the platform requests the service connection authentication information according to the service connection authentication information request, and receives the service connection authentication information returned by the platform, and the terminal connects the service connection authentication information. The second AP is sent to the second AP for service authentication according to the service connection authentication information, and the terminal obtains the service Internet connection after the service is authenticated. In this embodiment, the network connection of the network connection 2G/3G/4G must be enabled in the prior art. In this embodiment, the management connection can be obtained by sending the management connection authentication information to the first AP. The service connection authentication information can be obtained. Therefore, the user can conveniently obtain the service Internet connection when the network such as 2G/3G/4G or the 2G/3G/4G network cannot be used.

优选地，在上述实施例三的基础上，终端将业务连接认证信息发送给第二AP之前，该方法还包括：终端断开管理Internet连接。Preferably, on the basis of the foregoing Embodiment 3, before the terminal sends the service connection authentication information to the second AP, the method further includes: the terminal disconnects and manages the Internet connection.

在本实施例中，终端将业务连接认证信息发送给第二AP之前，断开管理Internet连接，例如，手机用户在使用本地通话业务之前，先将长途通话业务关闭或注销，从而节省了开支。In this embodiment, before the terminal sends the service connection authentication information to the second AP, the terminal disconnects and manages the Internet connection. For example, the mobile phone user turns off or cancels the long distance call service before using the local call service, thereby saving expenses.

可选地，在上述任一实施例的基础上中，第二AP为第一AP。Optionally, on the basis of any of the foregoing embodiments, the second AP is the first AP.

在本实施例中，第二AP为第一AP，或者，第二AP也可以为终端扫描到的除第一AP以外的其它AP。即第一AP和第二AP可以为同一个AP，也可以为同一个运营商运营的两个AP，或者，第一AP和第二AP也可以为不同的运营商运营的两个AP。并且，第二AP可以为一个单独的AP，也可以为一个AP组。终端可以灵活的在不同的AP之间进行切换，即终端可以在不同的网络、业务之间进行切换，例如，用户可以选择当前资费最低的业务进行切换，或者选择当前网速最好的网络进行切换等，使得用户可以方便的选择最优化的网络、业务等。In this embodiment, the second AP is the first AP, or the second AP may also be other APs than the first AP scanned by the terminal. That is, the first AP and the second AP may be the same AP, or may be two APs operated by the same operator, or the first AP and the second AP may also be two APs operated by different operators. Moreover, the second AP may be a single AP or an AP group. The terminal can flexibly switch between different APs, that is, the terminal can switch between different networks and services. For example, the user can select the service with the lowest current tariff to switch, or select the network with the best network speed. Switching, etc., allows users to easily select the optimal network, service, and so on.

图4本发明实施例四提供的认证的处理方法的一实例的信令交互示意图。该技术方案包括一个由中国移动(China Mobile Communications Corporation，CMCC简称)运营的AP、一个由中国电信(ChinaNet)运营的AP、终端和平台，其中，CMCC AP为第一AP，ChinaNet AP为第二AP，终端同时被CMCC AP的WLAN和ChinaNet AP的WLAN覆盖，且该终端可以为双待终端，例如双卡双待终端或者单卡多模双待终端。如图5所示，该方法包括以下步骤：FIG. 4 is a schematic diagram of signaling interaction of an example of a method for processing authentication provided by Embodiment 4 of the present invention. The technical solution includes an AP operated by China Mobile Communications Corporation (CMCC), an AP, terminal and platform operated by ChinaNet. The CMCC AP is the first AP and the ChinaNet AP is the second. AP, the terminal is simultaneously covered by the WLAN of the CMCC AP and the WLAN of the ChinaNet AP, and the terminal It can be a dual standby terminal, such as a dual card dual standby terminal or a single card multimode dual standby terminal. As shown in FIG. 5, the method includes the following steps:

步骤401、平台生成管理连接认证信息，具体为：运营商：中国移动，卡号：00213，密码：5566。Step 401: The platform generates management connection authentication information, specifically: operator: China Mobile, card number: 00213, password: 5566.

步骤402、将管理连接认证信息预置于终端，具体为：运营商：中国移动，卡号：00213，密码：5566。Step 402: Pre-set the management connection authentication information to the terminal, specifically: operator: China Mobile, card number: 00213, password: 5566.

步骤403、终端发布。Step 403: The terminal issues.

本实施例中，终端发布指的是终端出厂，进行市场销售。In this embodiment, the terminal issuance refers to the terminal leaving the factory for market sales.

步骤404、终端在连接CMCC AP时首先使用管理连接认证信息进行管理认证，具体为将运营商：中国移动，卡号：00213，密码：5566发送给CMCCAP。Step 404: When the terminal connects to the CMCC AP, the terminal first uses the management connection authentication information for management authentication, specifically, the operator: China Mobile, the card number: 00213, and the password: 5566 are sent to the CMCCAP.

步骤405、终端通过CMCC AP认证后，获取管理Internet连接。Step 405: After the terminal passes the CMCC AP authentication, the terminal acquires a management Internet connection.

步骤406、终端通过管理Internet连接向平台获取业务连接认证信息。Step 406: The terminal acquires service connection authentication information from the platform by managing the Internet connection.

步骤407、平台分配业务连接认证信息，分配的业务连接认证信息具体为：运营商：中国电信，卡号：90213，密码：0066。Step 407: The platform allocates service connection authentication information, and the service connection authentication information is specifically: operator: China Telecom, card number: 90213, password: 0066.

步骤408、平台返回业务连接认证信息给终端，具体包括：运营商：中国电信，卡号：90213，密码：0066。Step 408: The platform returns the service connection authentication information to the terminal, specifically: the operator: China Telecom, card number: 90213, password: 0066.

步骤409、终端将管理Internet连接断开，即从CMCC AP断开。Step 409: The terminal disconnects the management Internet connection, that is, disconnects from the CMCC AP.

步骤410、终端使用业务连接认证信息向ChinaNet AP进行业务认证，具体为将运营商：中国电信，卡号：90213，密码：0066发送给ChinaNet AP。Step 410: The terminal uses the service connection authentication information to perform service authentication to the ChinaNet AP, specifically, the operator: China Telecom, card number: 90213, password: 0066 is sent to the ChinaNet AP.

步骤411、ChinaNet AP认证通过后，终端获取业务Internet连接。Step 411: After the ChinaNet AP is authenticated, the terminal obtains a service Internet connection.

本实施例提供的认证的处理方法，当终端在连接CMCC AP时首先使用管理连接认证信息进行认证，通过CMCC AP认证后，获取管理Internet连接，并通过管理Internet连接向平台获取业务连接认证信息后，终端从CMCC AP断开，使用业务连接认证信息向ChinaNet AP认证，ChinaNet AP认证通过后，终端获得业务Internet连接。本实施例中，当终端使用认证功能时，通过向AP发送管理连接认证信息，获取管理Internet连接，即可获取业务连接认证信息，使得用户能在不开启2G/3G/4G等网络或者2G/3G/4G等网络不能使用时，也可以方便的获取业务Internet连接。The method for processing the authentication provided by the embodiment is to use the management connection authentication information to authenticate the terminal when the terminal is connected to the CMCC AP, obtain the management Internet connection after the CMCC AP authentication, and obtain the service connection authentication information after the Internet connection is obtained through the management Internet connection. The terminal is disconnected from the CMCC AP and authenticates to the ChinaNet AP using the service connection authentication information. After the ChinaNet AP authentication is passed, the terminal obtains the service Internet connection. In this embodiment, when the terminal uses the authentication function, by sending the management connection authentication information to the AP and obtaining the management Internet connection, the service connection authentication information can be obtained, so that the user can not open the network such as 2G/3G/4G or 2G/. When a network such as 3G/4G cannot be used, it is also convenient to obtain a service Internet connection.

图5为本发明实施例五提供的认证的处理装置的结构示意图。如图5所示，该装置包括收发模块11和处理模块12。其中，收发模块11用于当检测到第一AP时，向第一AP发送管理连接认证信息，以供第一AP根据管理连接认证信息进行管理认证；其中，管理连接认证信息为终端接收到的由平台预先生成并发送的信息。处理模块12用于在通过管理认证后，管理互联网Internet连接，并触发收发模块11通过管理Internet连接，向平台获取业务连接认证信息。收发模块11还用于根据业务连接认证信息，与第二AP进行业务认证，并在业务认证后触发处理模块12获取业务Internet连接。FIG. 5 is a schematic structural diagram of a processing apparatus for authentication according to Embodiment 5 of the present invention. As shown in Figure 5 The device includes a transceiver module 11 and a processing module 12. The transceiver module 11 is configured to: when the first AP is detected, send the management connection authentication information to the first AP, where the first AP performs management authentication according to the management connection authentication information; where the management connection authentication information is received by the terminal. Information that is pre-generated and sent by the platform. The processing module 12 is configured to manage the Internet connection of the Internet after passing the management authentication, and trigger the transceiver module 11 to obtain the service connection authentication information by managing the Internet connection. The transceiver module 11 is further configured to perform service authentication with the second AP according to the service connection authentication information, and trigger the processing module 12 to obtain the service Internet connection after the service authentication.

本实施例的装置，可以用于执行图1所示方法实施例的技术方案，其实现原理和技术效果类似，此处不再赘述。The device in this embodiment may be used to implement the technical solution of the method embodiment shown in FIG. 1 , and the implementation principle and technical effects are similar, and details are not described herein again.

进一步的，在上述实施例五的基础上，在本发明提供的实施例六中，收发模块11还用于通过管理Internet连接，向平台发送包括终端的位置信息和/或终端扫描到的AP的信息的业务连接认证信息请求，以使平台根据终端的位置信息和/或终端扫描到的AP的信息分配业务连接认证信息。收发模块11还用于接收平台返回的业务连接认证信息。Further, on the basis of the foregoing embodiment 5, in the sixth embodiment provided by the present invention, the transceiver module 11 is further configured to send the location information including the terminal and/or the AP scanned by the terminal to the platform by managing the Internet connection. The service of the information is connected to the authentication information request, so that the platform allocates the service connection authentication information according to the location information of the terminal and/or the information of the AP scanned by the terminal. The transceiver module 11 is further configured to receive service connection authentication information returned by the platform.

本实施例的装置，可以用于执行图2所示方法实施例的技术方案，其实现原理和技术效果类似，此处不再赘述。The device in this embodiment may be used to implement the technical solution of the method embodiment shown in FIG. 2, and the implementation principle and technical effects are similar, and details are not described herein again.

更进一步的，在上述实施例五或实施例六的基础上，在本发明提供的实施例七中，收发模块11还用于将业务连接认证信息发送给第二AP，以供第二AP根据业务连接认证信息进行业务认证。处理模块12还用于在通过业务认证后，获取业务Internet连接。Further, on the basis of the foregoing embodiment 5 or the sixth embodiment, in the seventh embodiment of the present invention, the transceiver module 11 is further configured to send the service connection authentication information to the second AP, so that the second AP is configured according to the second AP. Service connection authentication information for service authentication. The processing module 12 is further configured to obtain a service Internet connection after passing the service authentication.

优选地，在本实施例中，处理模块12还用于断开所述管理Internet连接。Preferably, in this embodiment, the processing module 12 is further configured to disconnect the management Internet connection.

本实施例的装置，可以用于执行图3所示方法实施例的技术方案，其实现原理和技术效果类似，此处不再赘述。The device in this embodiment may be used to implement the technical solution of the method embodiment shown in FIG. 3, and the implementation principle and technical effects are similar, and details are not described herein again.

图6为本发明实施例八提供的终端的结构示意图。本发明实施例提供的终端可以用于实施上述图1所示的本发明实施例实现的方法，为了便于说明，仅示出了与本发明实施例相关的部分，具体技术细节未揭示的，请参照图1所示的本发明各实施例。FIG. 6 is a schematic structural diagram of a terminal according to Embodiment 8 of the present invention. The terminal provided by the embodiment of the present invention may be used to implement the method implemented by the embodiment of the present invention shown in FIG. 1 . For the convenience of description, only the part related to the embodiment of the present invention is shown, and the specific technical details are not disclosed, please Reference is made to the various embodiments of the invention illustrated in FIG.

如图6所示，该终端包括发送器21和处理器22。发送器21用于当终端检测到第一无线接入点AP时，向第一AP发送管理连接认证信息，以供第一AP根据管理连接认证信息进行管理认证。其中，管理连接认证信息为终端接收到的由平台预先生成并发送的信息。处理器22用于终端在通过管理认证后，获取管理互联网Internet连接，并通过管理Internet连接，向平台获取业务连接认证信息。发送器21还用于终端根据业务连接认证信息，与第二AP进行业务认证，以在通过业务认证后触发处理器22获取业务Internet连接。As shown in FIG. 6, the terminal includes a transmitter 21 and a processor 22. The transmitter 21 is configured to: when the terminal detects the first wireless access point AP, send the management connection authentication information to the first AP, so that the first AP performs management authentication according to the management connection authentication information. The management connection authentication information is a terminal connection. Received information pre-generated and sent by the platform. The processor 22 is configured to acquire and manage an Internet connection of the Internet after the terminal passes the management authentication, and obtain the service connection authentication information from the platform by managing the Internet connection. The transmitter 21 is further configured to perform service authentication with the second AP according to the service connection authentication information, so as to trigger the processor 22 to obtain the service Internet connection after passing the service authentication.

本实施例的终端，可以用于执行本发明图1所示实施例提供的认证的处理方法的技术方案，其实现原理和技术效果类似，此处不再赘述。The terminal of the embodiment may be used to perform the technical solution of the processing method of the authentication provided by the embodiment shown in FIG. 1 , and the implementation principle and technical effects thereof are similar, and details are not described herein again.

图7为本发明实施例九提供的终端的结构示意图。在图6所示实施例的基础上，如图7所示，该终端还包括接收器23，用于接收平台返回的业务连接认证信息。发送器21还用于通过管理Internet连接，向平台发送包括终端的位置信息和/或终端扫描到的AP的信息的业务连接认证信息请求，以使平台根据终端的位置信息和/或终端扫描到的AP的信息分配业务连接认证信息。FIG. 7 is a schematic structural diagram of a terminal according to Embodiment 9 of the present invention. On the basis of the embodiment shown in FIG. 6, as shown in FIG. 7, the terminal further includes a receiver 23, configured to receive service connection authentication information returned by the platform. The transmitter 21 is further configured to send, by using the management Internet connection, a service connection authentication information request including location information of the terminal and/or information of the AP scanned by the terminal, so that the platform scans according to the location information of the terminal and/or the terminal. The AP's information is assigned to the business connection authentication information.

进一步地，在本实施例中，发送器21还用于将业务连接认证信息发送给第二AP，以供第二AP根据业务连接认证信息进行业务认证。处理器22还用于在通过业务认证后，获取业务Internet连接。Further, in this embodiment, the transmitter 21 is further configured to send the service connection authentication information to the second AP, so that the second AP performs service authentication according to the service connection authentication information. The processor 22 is further configured to obtain a service Internet connection after passing the service authentication.

更进一步地，在本实施例中，处理器22还用于断开管理Internet连接。Further, in the embodiment, the processor 22 is further configured to disconnect the management Internet connection.

本实施例的终端，可以用于执行本发明任意实施例所提供的认证的处理方法的技术方案，其实现原理和技术效果类似，此处不再赘述。The terminal of the embodiment may be used to implement the technical solution of the processing method of the authentication provided by any embodiment of the present invention, and the implementation principle and technical effects thereof are similar, and details are not described herein again.

本领域普通技术人员可以理解：实现上述各方法实施例的全部或部分步骤可以通过程序指令相关的硬件来完成。前述的程序可以存储于一计算机可读取存储介质中。该程序在执行时，执行包括上述各方法实施例的步骤；而前述的存储介质包括：ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。One of ordinary skill in the art will appreciate that all or part of the steps to implement the various method embodiments described above may be accomplished by hardware associated with the program instructions. The aforementioned program can be stored in a computer readable storage medium. The program, when executed, performs the steps including the foregoing method embodiments; and the foregoing storage medium includes various media that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.

最后应说明的是：以上各实施例仅用以说明本发明的技术方案，而非对其限制；尽管参照前述各实施例对本发明进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分或者全部技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本发明各实施例技术方案的范围。 Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the foregoing embodiments may be modified, or some or all of the technical features may be equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present invention. range.

Claims

A method for processing authentication, characterized in that it comprises:

When the terminal detects the first wireless access point AP, the management connection authentication information is sent to the first AP, where the first AP performs management authentication according to the management connection authentication information; wherein the management connection authentication The information is information received by the terminal and generated and sent by the platform in advance;

After the terminal passes the management authentication, the terminal acquires and manages the Internet connection of the Internet, and obtains the service connection authentication information from the platform through the management Internet connection;

The terminal performs service authentication with the second AP according to the service connection authentication information, so as to obtain a service Internet connection after passing the service authentication.

The method according to claim 1, wherein the terminal obtains service connection authentication information from the platform by using the management Internet connection, which specifically includes:

Transmitting, by the terminal, the service connection authentication information request including the location information of the terminal and/or the information of the AP scanned by the terminal, by using the management Internet connection, so that the platform is configured according to the terminal according to the terminal Location information and/or information of the AP scanned by the terminal to allocate the service connection authentication information;

The terminal receives the service connection authentication information returned by the platform.

The processing method of the authentication according to claim 1 or 2, wherein the terminal performs service authentication with the second AP according to the service connection authentication information, so as to obtain a service Internet connection after the service authentication, specifically:

Sending, by the terminal, the service connection authentication information to the second AP, where the second AP performs service authentication according to the service connection authentication information;

After the terminal authenticates through the service, the terminal obtains a service Internet connection.

The method according to claim 3, wherein the method further includes: before the terminal sends the service connection authentication information to the second AP, the method further includes:

The terminal disconnects the management Internet connection.

The method according to any one of claims 1 to 4, wherein the second AP is the first AP.

An authentication processing device, comprising:

The transceiver module is configured to: when the first wireless access point AP is detected, send management connection authentication information to the first AP, where the first AP performs management identification according to the management connection authentication information. The management connection authentication information is information received by the terminal and generated and transmitted by the platform in advance;

a processing module, configured to obtain a management Internet Internet connection after passing the management authentication, and trigger the transceiver module to obtain service connection authentication information from the platform by using the management Internet connection;

The transceiver module is further configured to perform service authentication with the second AP according to the service connection authentication information, and trigger the processing module to obtain a service Internet connection after the service authentication is performed.

The device according to claim 6, wherein the transceiver module is further configured to send the location information including the terminal and/or the AP scanned by the terminal to the platform by using the management Internet connection. The service of the information is connected to the authentication information request, so that the platform allocates the service connection authentication information according to the location information of the terminal and/or the information of the AP scanned by the terminal;

The transceiver module is further configured to receive the service connection authentication information returned by the platform.

The device according to claim 6 or 7, wherein the transceiver module is further configured to send the service connection authentication information to the second AP, where the second AP is authenticated according to the service connection. Information for business certification;

The processing module is further configured to obtain a service Internet connection after the service is authenticated.

The device according to claim 8, wherein the processing module is further configured to disconnect the management Internet connection.

A terminal, comprising:

a transmitter, configured to: when the terminal detects the first wireless access point AP, send management connection authentication information to the first AP, where the first AP performs management authentication according to the management connection authentication information; The management connection authentication information is information that is received and sent by the platform and received by the terminal.

a processor, configured to acquire, by the management terminal, a management Internet Internet connection, and obtain service connection authentication information from the platform by using the management Internet connection;

The transmitter is further configured to perform, by the terminal, performing service authentication with the second AP according to the service connection authentication information, to trigger the processor to obtain a service Internet connection after the service authentication is performed.

The terminal according to claim 10, wherein the transmitter is further configured to send, by using the management Internet connection, location information including the terminal and/or the The service connection authentication information request of the information of the AP scanned by the terminal, so that the platform allocates the service connection authentication information according to the location information of the terminal and/or the information of the AP scanned by the terminal;

The terminal further includes a receiver, configured to receive the service connection authentication information returned by the platform.

The terminal according to claim 10 or 11, wherein the transmitter is further configured to send the service connection authentication information to the second AP, where the second AP authenticates according to the service connection. Information for business certification;

The processor is further configured to obtain a service Internet connection after the service is authenticated.

The terminal according to claim 12, wherein the processor is further configured to disconnect the management Internet connection.