A computer-implemented method for establishing a wireless network connection, comprising: receiving a first public key being associated with a radio access point and owner information associated with the radio access point, the owner information includes information related to an identity and qualification of an owner that provides a public wireless network access service by using the radio access point; adding the first public key into a set of trusted public keys when the owner information passes authentication; receiving an access request sent by a radio access point, the access request carrying user information of a user terminal attempting to access the radio access point; obtaining a first ciphertext carried in the access request and the first public key being associated with the radio access point; checking whether the first public key exists in the set of trusted public keys; and determining that the radio access point is the trusted radio access point when the first public key exists in the set of trusted public keys; performing a first identity authentication on the user terminal when the radio access point is determined to be the trusted radio access point; and when the user terminal is authenticated by the first identity authentication, generating a master key for the user terminal and sending the master key to the user terminal; and sending the master key to the radio access point, the radio access point negotiating with the user terminal according to the master key to establish an encrypted wireless network connection. receiving a first public key being associated with a radio access point and owner information associated with the radio access point, the owner information includes information related to an identity and qualification of an owner that provides a public wireless network access service by using the radio access point; adding the first public key into a set of trusted public keys when the owner information passes authentication; receiving an access request sent by a radio access point, the access request carrying user information of a user terminal attempting to access the radio access point; obtaining a first ciphertext carried in the access request and the first public key being associated with the radio access point; checking whether the first public key exists in the set of trusted public keys; and determining that the radio access point is the trusted radio access point when the first public key exists in the set of trusted public keys; performing a first identity authentication on the user terminal when the radio access point is determined to be the trusted radio access point; and when the user terminal is authenticated by the first identity authentication, generating a master key for the user terminal and sending the master key to the user terminal; and sending the master key to the radio access point, the radio access point negotiating with the user terminal according to the master key to establish an encrypted wireless network connection. generating a master key for the user terminal and sending the master key to the user terminal; and sending the master key to the radio access point, the radio access point negotiating with the user terminal according to the master key to establish an encrypted wireless network connection. <EOS>