Patent ID: 7519036

Claim:
A method of user access authorization in a wireless local area network, comprising: when a Wireless Local Area Network (WLAN) user terminal is accessing a WLAN operational network, an authentication procedure including authenticating the WLAN user terminal; an authorization procedure to access the WLAN operational network before a service authorization including: verifying whether to allow the WLAN user terminal to access the WLAN operational network according to authorization conditions, and determining access rules of the WLAN user terminal according to the authorization conditions if the WLAN user terminal is allowed to access the WLAN operational network, wherein the access rules including a limitation rule on the access of the WLAN user terminal to the WLAN operational network, wherein the service authorization determines whether the WLAN terminal user has access to a service; implementing restriction on the access to the WLAN operational network of the WLAN user terminal according to the access rules; sending the determined access rules to one or more than one related entity implementing the access rules so as to implement the restriction on the access of the WLAN user terminal; after the WLAN user terminal sends an access request to the WLAN operational network, the WLAN operational network first performing the legality authentication of the currently accessing WLAN user terminal, if the WLAN user terminal passes the legality authentication, judging whether the WLAN user terminal is allowed to access according to the authorization conditions; and otherwise, sending the information of the access failure to the WLAN user terminal.