| 摘要 |
The invention relates to techniques for restricting a wireless network access for a mobile device (200). There is provided an additional cross-checking functionality on a comparator (106) of an intermediate node (100). The mobile device (200) receives a user key (88) indicating a general validation to access the WLAN of a third party. The third party operates a key server (300). The key server (300) issues a key pair, consisting of the user key (88) and an operator key (99). The operator key (99) is sent to the intermediate node (100) and is processed by a processor (105). The mobile device (200) applies the received user key (88) to an identification set (200i), identifying the device's user, and sends a reference message (22) to the intermediate node (100) via a second communication channel (2). Thereinafter, the device (200) sends its identification set (200i) via another first communication channel (1) for authentication and for cross checking to the intermediate node (100). The intermediate node (100) in turn applies the received operator key (99) to the received message (22) and compares a validation result (33) thereof with the identification set (200i), received via the first communication channel (1). The WLAN network access for the device is only granted in case of identity. |
