Patent ID: 8589675

Claim:
A wireless local area network (WLAN) authentication method, comprising: redirecting, by a WLAN gateway, a Hypertext Transmission Protocol (HTTP) request message sent by a WLAN terminal to an address of a login webpage of a WLAN, and returning the redirected HTTP request message to the WLAN terminal, wherein the WLAN gateway is arranged between the WLAN terminal and an Authentication/Authorization/Accounting (AAA) server of the WLAN; and sending, by the WLAN gateway, authentication request information carrying a subscriber identifier of a subscriber identification module sent by the WLAN terminal to the AAA server corresponding to the address of the login webpage of the WLAN such that the AAA server performs authentication based on the subscriber identifier, wherein the subscriber identifier is acquired by the WLAN terminal from the subscriber identification module when it is detected that the subscriber identity module is currently connected, wherein sending the authentication request information to the AAA server corresponding to the login webpage of the WLAN comprises: sending the authentication request information to the AAA server such that the AAA server requests and acquires from a third generation (3G) mobile network authentication center second authentication data corresponding to the subscriber identifier based on the subscriber identifier, wherein the second authentication data comprises a random number, a first expected response, a first key, a first integrity key and an authentication token; forwarding the random number and the authentication token sent by the AAA server to the WLAN such that the WLAN authenticates the authentication token through the subscriber identification module and acquires, based on the random number from the subscriber identification module, a second expected response corresponding to the random number after the authentication succeeds; forwarding the second expected response sent by the WLAN terminal to the AAA server such that the AAA server compares the second expected response with the first expected response, wherein an authentication result of authentication success is obtained when the second expected response is identical to the first expected response, and wherein an authentication result of authentication failure is obtained when the second expected response is not identical to the first expected response; and forwarding the authentication result sent by the AAA server to the WLAN terminal.