A method for controlling an internet access, comprising: a WAP gateway acquiring an internet range allowed to be accessed by a monitored user using a mobile terminal; the WAP gateway determining whether an internet address to be accessed by the monitored user falls within the internet range allowed to be accessed; and based on that the internet address to be accessed by the monitored user does not fall within the internet range allowed to be accessed, the WAP gateway refusing an access of the monitored user to the internet address; the communication between the WAP gateway and a monitoring user and/or the communication between the WAP gateway and the monitored user is implemented by means of one of the following: a text message, Web page, Unstructured Supplementary Service Data, USSD, and Interactive Voice Response,IVR; wherein acquiring the internet range allowed to be accessed by the monitored user using the mobile terminal comprises: receiving the internet range allowed to be accessed by the monitored user, wherein the internet range allowed to be accessed by the monitored user is provided by a monitoring user corresponding to the monitored user; characterized in that in the case where there are multiple monitoring users corresponding to the monitored user, after receiving multiple internet ranges allowed to be accessed by the monitored user that is provided by the multiple monitoring users corresponding to the monitored user, the method further comprises: merging the multiple internet ranges allowed to be accessed that are provided by the multiple monitoring users. a WAP gateway acquiring an internet range allowed to be accessed by a monitored user using a mobile terminal; the WAP gateway determining whether an internet address to be accessed by the monitored user falls within the internet range allowed to be accessed; and based on that the internet address to be accessed by the monitored user does not fall within the internet range allowed to be accessed, the WAP gateway refusing an access of the monitored user to the internet address; the communication between the WAP gateway and a monitoring user and/or the communication between the WAP gateway and the monitored user is implemented by means of one of the following: a text message, Web page, Unstructured Supplementary Service Data, USSD, and Interactive Voice Response,IVR; wherein acquiring the internet range allowed to be accessed by the monitored user using the mobile terminal comprises: receiving the internet range allowed to be accessed by the monitored user, wherein the internet range allowed to be accessed by the monitored user is provided by a monitoring user corresponding to the monitored user; characterized in that in the case where there are multiple monitoring users corresponding to the monitored user, after receiving multiple internet ranges allowed to be accessed by the monitored user that is provided by the multiple monitoring users corresponding to the monitored user, the method further comprises: merging the multiple internet ranges allowed to be accessed that are provided by the multiple monitoring users. receiving the internet range allowed to be accessed by the monitored user, wherein the internet range allowed to be accessed by the monitored user is provided by a monitoring user corresponding to the monitored user; characterized in that in the case where there are multiple monitoring users corresponding to the monitored user, after receiving multiple internet ranges allowed to be accessed by the monitored user that is provided by the multiple monitoring users corresponding to the monitored user, the method further comprises: merging the multiple internet ranges allowed to be accessed that are provided by the multiple monitoring users.