Patent ID: 8374582

Claim:
A method for accessing a cellular mobile communication network, comprising: after a terminal and a base station complete a ranging process, the terminal carrying out a basic capability negotiation with the base station, after completing the basic capability negotiation process, the base station and the terminal carrying out a wireless local area network authentication privacy infrastructure (WAPI) access authentication process; and after completing the access authentication process, the terminal carrying out a subsequent access flow to access the cellular mobile communication network; wherein said WAPI access authentication process comprises: the terminal sending an access authentication request packet to the base station, wherein the packet comprises: a certificate of the terminal and a signature of the terminal; after receiving the access authentication request packet, the base station authenticating the signature of the terminal, after authenticating the signature successfully, the base station comprising the certificate of the terminal into a certificate authentication request packet to send to an authentication server to perform validation; after successfully validating the certificate of the terminal, the base station sending an access authentication response packet to the terminal, and carrying out a unicast session key negotiation with the terminal to obtain a unicast session key; wherein, before the step of the terminal sending the access authentication request packet to the base station, said WAPI access authentication process further comprises: the terminal generating a temporary public key px and a temporary private key sx for an Elliptic Curve Diffie-Hellman (ECDH) exchange; said access authentication request packet further comprises said px; after the step of successfully validating the certificate of the terminal, said WAPI access authentication process further comprises: the base station generating a temporary private key sy and a temporary public key py for the ECDH exchange, and using said px and sy to carry out an ECDH calculation to obtain a basic key BK; said access authentication response packet comprises said py; said WAPI access authentication process further comprises: the terminal using said py and sx to carry out the ECDH calculation after receiving said access authentication response packet to obtain said basic key BK; in the step of carrying out the unicast session key negotiation with the terminal, the terminal and the base station use said basic key BK to negotiate and obtain said unicast session key.