WO2015062105A1 - Access method and device for wireless local area network - Google Patents

Abstract

Provided are an access method and device for a wireless local area network. The method comprises: acquiring, by a user equipment (UE), first sensitive information about a wireless local area network (WLAN) from a network device of a mobile communication network, wherein the first sensitive information comprises related information for security authentication of the WLAN; and according to the first sensitive information, establishing, by the UE, a connection to an access point (AP) of the WLAN. Various embodiments of the present invention solve the problem that a UE cannot normally access a WLAN due to the fact that the related sensitive information about the WLAN is easily tampered with, realize the accurate accessing of the WLAN, and improve the access security of the WLAN.

Description

 Wireless local area network access method and device

Technical field

 The embodiments of the present invention relate to communication technologies, and in particular, to a method and an apparatus for accessing a wireless local area network. Background technique

 With the widespread use of smartphones and tablets, the use of mobile devices for a large amount of data services has led to a rapid increase in data traffic for the network, resulting in limited network capacity for mobile operators. Wireless Local Area Networks (WLAN) is a wireless access technology that can provide higher transmission rates and can be used as a supplement to mobile operators' wide-area wireless networks.

 In the prior art, the WLAN network and the mobile communication network are often combined in two ways to implement the data service of the offloaded user, thereby reducing the network burden of the operator. The first is to integrate the WLAN network as a separate access network into the mobile communication network, and to operate and maintain the WLAN network independently. The second is to aggregate the WLAN network with the mobile communication network, that is, the WLAN access point (Access Point). The AP is combined with the access network element of the mobile communication network, or the WLAN AP is deployed separately but controlled by the network element of the 3GPP access network. WLAN is used as an air interface access technology to transmit user data. These user data and data transmitted through the air interface of the traditional mobile communication network are aggregated in the mobile communication network, thereby saving operators' access to the network air interface resources and improving user access through air interfaces. Rate and capacity.

 In the above scenario, when the UE accesses the network through the WLAN, the UE first obtains related information of the WLAN network, such as a supported authentication method and an encryption algorithm, by using a received beacon frame or a probe response. Then, based on the information, the network establishment between the subsequent UE and the WLAN is completed.

However, in the above prior art, sensitive information such as a WLAN network, in particular, a Robust Security Network (RSN) information element (IE), an authentication type (Authentication Type), and the like are in plain text. The mode is transmitted to the UE, and the attacker can tamper with the sensitive information, so that the UE cannot access the WLAN network normally. Network, unable to transfer the business. Summary of the invention

 The embodiment of the invention provides a method and a device for accessing a wireless local area network, which enables the UE to obtain the relevant information of the correct WLAN network, so as to achieve correct access of the WLAN.

 A first aspect of the embodiments of the present invention provides a method for accessing a wireless local area network, including: the user equipment UE acquires first sensitive information of a wireless local area network WLAN network from a network device of the mobile communication network; wherein, the first sensitive information includes Information related to security authentication of the WLAN network;

 The UE establishes a connection with an access point AP of the WLAN network according to the first sensitive information.

 With reference to the first aspect, in a first possible implementation manner of the first aspect, the first sensitive information further includes related information that assists the UE to perform network selection.

 With reference to the first aspect, in a second possible implementation manner of the first aspect, the network device is an access network discovery and selection function ANDSF;

 And acquiring, by the UE, the first sensitive information of the WLAN network of the wireless local area network from the network device of the mobile communication network, including:

 Sending, by the UE, an access network information acquisition request to the ANDSF;

 Receiving, by the UE, a response message that includes an access network information list returned by the ANDSF, where the access network information list includes information of the WLAN network, where the information of the WLAN network includes the first sensitivity information.

 With reference to the first aspect, in a third possible implementation manner of the first aspect, the access network information acquisition request further includes location information of the UE; and correspondingly, the access network information list is the ANDSF Determined according to the location information of the UE.

 With reference to the first aspect, in a fourth possible implementation manner of the first aspect, the acquiring, by the UE, the first sensitive information of the WLAN network from the network device of the mobile communication network includes:

 Receiving, by the UE, a radio resource control RRC connection reconfiguration request sent by the network control device, where the RRC connection reconfiguration request includes the first sensitive information.

With reference to the first aspect, in a fifth possible implementation manner of the first aspect, the acquiring, by the UE, the first sensitive information of the WLAN network from the network device of the mobile communication network includes: Obtaining, by the UE, the first sensitive information of the multiple WLAN networks, and the information for determining the priority of each WLAN network, from the network device of the mobile communication network;

 Correspondingly, the establishing, by the UE, the connection with the access point AP of the WLAN network according to the first sensitive information includes: the UE selecting the first sensitive information according to the information of the WLAN network priority, The access point AP of the WLAN network establishes a connection.

 With reference to the first aspect, in a sixth possible implementation manner of the first aspect, the WLAN network is a WLAN network that has Hotspot 2.0 capability and achieves a required security level;

 Before the UE establishes a connection with the access point AP of the WLAN network according to the first sensitive information, the UE further includes:

 Sending, by the UE, an access network information query request to the AP;

 Receiving, by the UE, a query response message including status information of the WLAN network returned by the AP, and determining, according to status information of the WLAN network, that the WLAN network is available.

 With reference to the first aspect, in a seventh possible implementation manner of the first aspect, the related information that is used by the UE to perform network selection is Hotspot 2.0 capability indication information, where the Hotspot 2.0 capability indication information is used to indicate the The WLAN network has Hotspot 2.0 capabilities and achieves the required level of security.

 With reference to the first aspect, in an eighth possible implementation manner of the foregoing aspect, before the sending, by the UE, the access network information query request to the AP, the method further includes:

 The UE determines that the first sensitive information includes the Hotspot 2.0 capability indication information. With reference to the first aspect, in a ninth possible implementation manner of the first aspect, before the UE establishes a connection with the access point AP of the WLAN network according to the first sensitive information, the UE includes: Obtaining second sensitive information of the WLAN network in the WLAN network, where the second sensitive information includes related information about the WLAN network performing security authentication;

 The UE determines that the first sensitive information is consistent with the second sensitive information.

 With reference to the first aspect, in a tenth possible implementation manner of the first aspect, the UE

Acquiring the second sensitive information of the WLAN network in the WLAN network, including:

 Obtaining, by the UE, the second sensitive information from the received probe response that is sent by the AP of the WLAN network that includes the second sensitive information, where the probe response is sent by the UE to an AP of the WLAN network. Received after the probe frame; or,

Transmitting, by the UE, the second sensitive signal from the received AP of the WLAN network The second sensitive information is obtained in a beacon frame of interest.

 A second aspect of the embodiments of the present invention provides an access method for a wireless local area network, including: an access network discovery and selection function, an ANDSF receiving an access network information acquisition request sent by a user equipment UE;

 The ANDSF sends a response message including an access network information list to the UE, where the access network information list includes information of a WLAN network, where the information of the WLAN network includes first sensitive information; A sensitive information includes information related to security authentication of the WLAN network.

 With reference to the second aspect, in a first possible implementation manner of the second aspect, the first sensitive information further includes related information that is used by the UE to perform network selection.

 With reference to the second aspect, in a second possible implementation manner of the second aspect, the access network information acquisition request further includes location information of the UE, and the ANDSF sends the access network information to the UE Before the list of response messages, it also includes:

 The ANDSF determines access network information available around the UE according to the location information of the UE.

 With reference to the second aspect, in a third possible implementation manner of the second aspect, the access network information list further includes information for determining a WLAN network priority, for the information of the priority information of the UE Select the WLAN network. A third aspect of the embodiments of the present invention provides another method for accessing a wireless local area network, including:

 The network control device determines to use the wireless local area network WLAN network;

 Determining, by the network control device, a WLAN network available to the UE;

 The network control device sends a radio resource control RRC connection reconfiguration request including the first sensitive information of the WLAN network to the UE, where the RRC connection reconfiguration request is used to indicate that the UE is based on the first sensitive information. Establishing a connection with the access point AP of the WLAN network; where the first sensitive information includes related information about the WLAN network for performing security authentication.

 With reference to the third aspect, in a first possible implementation manner of the third aspect, the first sensitive information further includes related information that assists the UE to perform network selection.

 With reference to the third aspect, in a second possible implementation manner of the third aspect, the network control device determines, according to the location information of the user equipment UE, the WLAN network that is available to the UE.

With reference to the third aspect, in a third possible implementation manner of the third aspect, the network control The device determines to use a wireless LAN WLAN network, including:

 The network control device determines to use the WLAN network according to the current network policy and the capability information of the UE.

 With reference to the third aspect, in a fourth possible implementation manner of the third aspect, the RRC connection reconfiguration request further includes information for determining a WLAN network priority, for the UE to use the information according to the priority Select the WLAN network.

 A fourth aspect of the embodiments of the present invention provides a user equipment, including:

 And an acquiring module, configured to acquire first sensitive information of the WLAN network from the network device of the mobile communication network, where the first sensitive information includes related information about the WLAN network for performing security authentication;

 And a processing module, configured to establish a connection with the access point AP of the WLAN network according to the first sensitive information acquired by the acquiring module.

 With reference to the fourth aspect, in a first possible implementation manner of the fourth aspect, the first sensitive information further includes information related to the user equipment to perform network selection.

 With reference to the fourth aspect, in a second possible implementation manner of the fourth aspect, the network device is an access network discovery and selection function ANDSF;

 The acquiring module acquires the first sensitive information of the WLAN network of the wireless local area network from the network device of the mobile communication network, and includes:

 The obtaining module sends an access network information acquisition request to the ANDSF;

 The acquiring module receives a response message that is included in the ANDSF and includes an access network information list, where the access network information list includes information of the WLAN network, and the information of the WLAN network includes the first Sensitive information.

 With reference to the fourth aspect, in a third possible implementation manner of the fourth aspect, the access network information acquisition request further includes location information of the user equipment; correspondingly, the access network information list is The ANDSF is determined according to the location information of the user equipment.

 With reference to the fourth aspect, in a fourth possible implementation manner of the fourth aspect, the acquiring module is specifically configured to: receive, by the network control device, a radio resource control RRC connection reconfiguration request, where the RRC connection reconfiguration request includes The first sensitive information.

With reference to the fourth aspect, in a fifth possible implementation manner of the fourth aspect, the acquiring module is specifically configured to acquire, by using a network device of a mobile communication network, a first sensitive information of multiple WLAN networks Information, and information used to determine the priority of each WLAN network;

 Correspondingly, the processing module is configured to: select the first sensitive information according to the information about the WLAN network priority, and establish a connection with the access point AP of the WLAN network.

 With reference to the fourth aspect, in a sixth possible implementation manner of the fourth aspect, the WLAN network is a WLAN network that has Hotspot 2.0 capability and achieves a required security level;

 The user equipment further includes:

 a first sending module, configured to send an access network information query request to the AP before the processing module establishes a connection with the access point AP of the WLAN network according to the first sensitive information; the acquiring module further And configured to receive, by the AP, a query response message that includes status information of the WLAN network;

 The processing module is further configured to: after the obtaining module receives the query response message, determine, according to the state information of the WLAN network, that the WLAN network is available.

 With reference to the fourth aspect, in a seventh possible implementation manner of the fourth aspect, the related information that is used by the user equipment to perform network selection is Hotspot 2.0 capability indication information, where the Hotspot 2.0 capability indication information is used to indicate The WLAN network has Hotspot 2.0 capabilities and achieves the necessary level of security.

 With reference to the fourth aspect, in an eighth possible implementation manner of the fourth aspect, the processing module is further configured to: before the first sending module sends an access network information query request to the AP, The Hotspot 2.0 capability indication information is included in the first sensitive information.

 With reference to the fourth aspect, in a ninth possible implementation manner of the fourth aspect, the acquiring module is further configured to: establish, by the processing module, the access point AP of the WLAN network according to the first sensitive information Before the connection, the second sensitive information of the WLAN network is obtained from the WLAN network, where the second sensitive information includes related information about the WLAN network for performing security authentication;

 The processing module is further configured to determine that the first sensitive information is consistent with the second sensitive information before establishing the connection with the access point AP of the WLAN network according to the first sensitive information.

With reference to the fourth aspect, in a tenth possible implementation manner of the fourth aspect, the acquiring, by the acquiring module, the second sensitive information of the WLAN network, includes: receiving the WLAN from the WLAN The second sensitive information is obtained by the probe response of the second AP that is returned by the AP, and the probe response is received by the user equipment after sending the probe frame to the AP of the WLAN network; or And acquiring the second sensitive information from a received beacon frame that includes the second sensitive information sent by an AP of the WLAN network.

 A fifth aspect of the embodiments of the present invention provides an ANDSF, including:

 a receiving module, configured to receive an access network information acquisition request sent by the user equipment UE, where the second sending module is configured to send, to the UE, a response message that includes an access network information list, where the access network information list includes a WLAN The information of the network, where the information of the WLAN network includes the first sensitive information, where the first sensitive information includes related information for performing security authentication on the WLAN network.

 With reference to the fifth aspect, in a first possible implementation manner of the fifth aspect, the first sensitive information further includes related information that assists the UE to perform network selection.

 With reference to the fifth aspect, in a second possible implementation manner of the fifth aspect, the access network information acquisition request further includes location information of the UE, and the ANDSF further includes:

 And a first determining module, configured to determine, according to the location information of the UE, the access network information available around the UE, before the second sending module sends the response message including the access network information list to the UE.

 With reference to the fifth aspect, in a third possible implementation manner of the fifth aspect, the access network information list further includes information for determining a WLAN network priority, for the UE to use the priority information. Select the WLAN network. A sixth aspect of the embodiments of the present invention provides a network control device, including:

 a second determining module, configured to determine to use a wireless local area network (WLAN);

 a third determining module, configured to determine a WLAN network available to the UE;

 a third sending module, configured to send, to the UE, a radio resource control RRC connection reconfiguration request that includes first sensitive information of the WLAN network, where the RRC connection reconfiguration request is used to indicate that the UE is according to the first The sensitive information is connected to the access point AP of the WLAN network, where the first sensitive information includes related information about the WLAN network for performing security authentication.

 In conjunction with the sixth aspect, in a first possible implementation manner of the sixth aspect, the first sensitive information further includes related information that is used by the UE to perform network selection.

 With reference to the sixth aspect, in a second possible implementation manner of the sixth aspect, the third determining module is specifically configured to determine, according to location information of the user equipment UE, a WLAN network that is available to the UE.

With reference to the sixth aspect, in a third possible implementation manner of the sixth aspect, the second determining The module is specifically configured to determine to use the WLAN network according to the current network policy and the capability information of the UE.

 With reference to the sixth aspect, in a fourth possible implementation manner of the sixth aspect, the RRC connection reconfiguration request further includes information for determining a WLAN network priority, for the UE to use the information according to the priority Select the WLAN network.

 A seventh aspect of the embodiments of the present invention provides another user equipment, including:

 a receiver, configured to acquire first sensitive information of a wireless local area network (WLAN) WLAN network from a network device of the mobile communication network; wherein the first sensitive information includes related information of the WLAN network for performing security authentication;

 And a processor, configured to establish a connection with the access point AP of the WLAN network according to the first sensitive information acquired by the receiver.

 With reference to the seventh aspect, in a first possible implementation manner of the seventh aspect, the first sensitive information further includes related information that assists the UE to perform network selection.

 With reference to the seventh aspect, in a second possible implementation manner of the seventh aspect, the network device is an access network discovery and selection function ANDSF;

 The receiver acquires the first sensitive information of the WLAN network from the network device of the mobile communication network, including:

 The receiver sends an access network information acquisition request to the ANDSF;

 Receiving, by the receiver, a response message that includes an access network information list returned by the ANDSF, where the access network information list includes information of the WLAN network, where the information of the WLAN network includes the first Sensitive information.

 With reference to the seventh aspect, in a third possible implementation manner of the seventh aspect, the access network information acquisition request further includes location information of the user equipment; correspondingly, the access network information list is The ANDSF is determined according to the location information of the user equipment.

 With reference to the seventh aspect, in a fourth possible implementation manner of the seventh aspect, the receiver is configured to: receive, by the network control device, a radio resource control RRC connection reconfiguration request, where the RRC connection reconfiguration request includes The first sensitive information.

With reference to the seventh aspect, in a fifth possible implementation manner of the seventh aspect, the receiver is configured to acquire, by using a network device of a mobile communication network, first sensitive information of multiple WLAN networks, and for determining Information on the priority of each WLAN network; Correspondingly, the processor is specifically configured to: select the first sensitive information according to the information about the WLAN network priority, and establish a connection with the access point AP of the WLAN network.

 With reference to the seventh aspect, in a sixth possible implementation manner of the seventh aspect, the WLAN network is a WLAN network that has Hotspot 2.0 capability and achieves a required security level;

 The user equipment further includes:

 a transmitter, configured to send an access network information query request to the AP before the processor establishes a connection with the access point AP of the WLAN network according to the first sensitive information;

 The receiver is further configured to receive, by the AP, a query response message that includes status information of the WLAN network;

 The processor is further configured to: after the receiver receives the query response message, determine, according to status information of the WLAN network, that the WLAN network is available.

 With reference to the seventh aspect, in a seventh possible implementation manner of the seventh aspect, the related information that is used by the user equipment to perform network selection is Hotspot 2.0 capability indication information, where the Hotspot 2.0 capability indication information is used to indicate The WLAN network has Hotspot 2.0 capabilities and achieves the necessary level of security.

 With reference to the seventh aspect, in an eighth possible implementation manner of the seventh aspect, the processor is further configured to: before the sending, by the sender, an access network information query request to the AP, determining the first The Hotspot 2.0 capability indication information is included in the sensitive information.

 With reference to the seventh aspect, in a ninth possible implementation manner of the seventh aspect, the receiver is further configured to: establish, by the processor, the access point AP of the WLAN network according to the first sensitive information Before the connection, the second sensitive information of the WLAN network is obtained from the WLAN network, where the second sensitive information includes related information about the WLAN network for performing security authentication;

 The processor is further configured to determine that the first sensitive information is consistent with the second sensitive information before establishing the connection with the access point AP of the WLAN network according to the first sensitive information.

 With reference to the seventh aspect, in a tenth possible implementation manner of the seventh aspect, the acquiring, by the receiver, the second sensitive information of the WLAN network from the WLAN network, specifically:

 Obtaining the second sensitive information from the detected probe response that is sent by the AP of the WLAN network that includes the second sensitive information, where the detecting response is that the user equipment sends a sounding frame to the AP of the WLAN network. Received later; or,

a beacon including the second sensitive information sent from an AP of the WLAN network received The second sensitive information is obtained in a frame.

 An eighth aspect of the embodiment of the present invention provides another ANDSF, including:

 a receiver, configured to receive an access network information acquisition request sent by the user equipment UE;

 a transmitter, configured to send, to the UE, a response message that includes an access network information list, where the access network information list includes information of a WLAN network, where the information of the WLAN network includes first sensitive information; The first sensitive information includes related information that the WLAN network performs security authentication.

 In conjunction with the eighth aspect, in a first possible implementation manner of the eighth aspect, the first sensitive information further includes related information that assists the UE to perform network selection.

 With reference to the eighth aspect, in a second possible implementation manner of the eighth aspect, the access network information acquisition request further includes location information of the UE, and the ANDSF further includes:

 And a processor, configured to determine, according to location information of the UE, access network information that is available around the UE, before the transmitter sends a response message that includes an access network information list to the UE.

 With reference to the eighth aspect, in a third possible implementation manner of the eighth aspect, the access network information list further includes information for determining a WLAN network priority, for the UE to use the information according to the priority Select the WLAN network.

 A ninth aspect of the embodiment of the present invention provides another network control device, including:

 a processor, configured to determine a WLAN network using a wireless local area network, and determine a WLAN network available to the UE;

 a transmitter, configured to send, to the UE, a radio resource control RRC connection reconfiguration request that includes first sensitive information of the WLAN network, where the RRC connection reconfiguration request is used to indicate that the UE is configured according to the first sensitive information Establishing a connection with the access point AP of the WLAN network; where the first sensitive information includes related information about the WLAN network for performing security authentication.

 In conjunction with the ninth aspect, in a first possible implementation manner of the ninth aspect, the first sensitive information further includes information related to the UE performing network selection.

 With reference to the ninth aspect, in a second possible implementation manner of the ninth aspect, the processor is further configured to determine, according to location information of the user equipment UE, a WLAN network that is available to the UE.

 In conjunction with the ninth aspect, in a third possible implementation of the ninth aspect, the processor is configured to determine to use the WLAN network according to the current network policy and the capability information of the UE.

With reference to the ninth aspect, in a fourth possible implementation manner of the ninth aspect, the RRC connection The reconfiguration request further includes information for determining a WLAN network priority for the UE to select the WLAN network according to the priority information.

 The method and device for accessing a wireless local area network provided by the embodiments of the present invention solve the problem that the related information of the WLAN network is easily falsified, and the UE cannot access the WLAN network normally, thereby realizing accurate access of the WLAN network and improving the access. Security of WLAN network access. DRAWINGS

 In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor.

 1 is a flowchart of a method for accessing a wireless local area network according to an embodiment of the present invention;

 2 is a flowchart of a method for accessing a wireless local area network according to another embodiment of the present invention;

 3 is a flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention;

 4 is a flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention;

 FIG. 5 is a flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention; FIG.

 FIG. 6 is a signaling flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention; FIG. 7 is a signaling flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention; FIG. 8 is a user equipment of the present invention; Schematic diagram of the structure of the embodiment;

 9 is a schematic structural diagram of an embodiment of an access network discovery and selection function device according to the present invention; FIG. 10 is a schematic structural diagram of an embodiment of a network control device according to the present invention;

 11 is a schematic structural diagram of another embodiment of a user equipment according to the present invention;

 FIG. 12 is a schematic structural diagram of another embodiment of an access network discovery and selection function device according to the present invention; FIG. 13 is a schematic structural diagram of another network control device according to an embodiment of the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. Based on the embodiments of the present invention, those of ordinary skill in the art obtain the following without creative efforts. All other embodiments obtained are within the scope of the invention.

 1 is a flowchart of a method for accessing a wireless local area network according to an embodiment of the present invention. The method is applicable to network access when a service of a mobile communication network is offloaded by using a WLAN, and the method is applicable to a mobile communication network and a WLAN aggregation deployment. The situation can also be applied to the case where the mobile communication network is deployed independently with the WLAN. As shown in Figure 1, the method includes:

 S101. The UE acquires first sensitive information of the WLAN network from a network device of the mobile communication network, where the first sensitive information includes related information that the WLAN network performs security authentication.

 The network device of the foregoing mobile communication network may be: a base station (eg, eNodeB), a radio network controller (Radio Network Controller, or RNC for short), or an access network discovery support function (Access Network Discovery Support Functions, Referred to as ANDSF). The ANDSF may be a separate ANDSF server, or a function module integrated on other devices, which is not limited herein.

 First, the UE first determines that the WLAN network needs to be used for the service offloading of the mobile communication network, and the process may be determined by the network policy delivered by the operator, or may be determined by the UE according to the local policy, and the present invention is not limited thereto. The key is mainly how the UE can accurately access the WLAN after determining the use of the WLAN for service offloading.

 In this step, you can follow two scenarios:

 Manner 1: The UE first determines whether to use the WLAN network, and after determining to use the WLAN network for service offloading, obtains the first sensitive information of the WLAN from the network device of the mobile communication network.

 In the second mode, the UE first obtains the access network information, and then determines whether to use the WLAN network. After determining to use the WLAN network for service offloading, the UE directly queries the first sensitive information of the WLAN network from the access network information.

 The mode 1 is used as an example. After determining that the UE needs to perform the offloading of the data service by using the WLAN, the UE obtains the identifier of the WLAN network and the corresponding first sensitive information from the network device of the mobile communication network, where the first sensitive information is the UE. The key access parameter information for establishing a network connection with the WLAN network may include information related to the WLAN network for performing security authentication. If the information is tampered with, the UE may not be able to access the WLAN network or be misdirected.

The mobile communication network is a 3rd Generation Partnership Project (3GPP) network, such as a Global System of Mobile Communication (GSM) network, a universal mobile communication system (Universal Mobile) Telecommunications System (UMTS) network and Long Term Evolution (LTE) network.

 Preferably, the information related to the security authentication of the WLAN network may include an RSN IE and/or an authentication type of the WLAN network.

 Further, if the mobile communication network is deployed independently of the WLAN network, the UE may obtain the first sensitive information of the WLAN network from the network device of the mobile communication network according to the following process: the UE sends an access network information acquisition request to the ANDSF;

 The UE receives the response message of the access network information list returned by the ANDSF, where the access network information list includes the information of the WLAN network, and the information of the WLAN network includes the first sensitive information.

 Further, the access network information acquisition request further includes location information of the UE; and the access network information list is determined by the ANDSF according to the location information of the UE.

 If the mobile communication network is deployed in a WLAN aggregation manner, the UE may obtain the first sensitive information of the WLAN network from the network device of the mobile communication network according to the following process:

 The UE receives an RRC connection reconfiguration request sent by the network control device, where the RRC connection reconfiguration request includes the first sensitive information of the WLAN network.

 S102. The UE establishes a connection with an access point AP of the WLAN network according to the first sensitive information.

 Specifically, after acquiring the first sensitive information of the WLAN network, the UE may establish a connection with the WLAN network according to different manners.

 The first mode: the UE directly establishes a connection with the AP of the WLAN network according to the first sensitive information of the WLAN network acquired from the network device of the mobile communication network. Specifically, after the UE initiates a probe request to the AP of the WLAN network and receives the returned probe response, or after listening to the beacon frame broadcast by the AP of the WLAN network, the UE directly according to the first sensitive information of the WLAN network. The AP of the WLAN network establishes a connection, that is, the UE does not perform sensitive information comparison, and improves the efficiency of establishing a connection with the WLAN network.

 The second mode: before the S102, the UE further acquires the second sensitive information of the WLAN network from the WLAN network, where the second sensitive information includes related information about the WLAN network for performing security authentication; get on:

The UE determines the first sensitivity of the WLAN network acquired from the network device of the mobile communication network Whether the sensing information is consistent with the second sensitive information of the WLAN network obtained from the WLAN, if the information is consistent, the UE establishes a connection with the AP of the WLAN network.

 The second sensitive information is consistent with the content included in the first sensitive information, and the difference is mainly that the first sensitive information is obtained by the UE from the mobile communication network, and the second sensitive information is the UE Obtained in the WLAN. Preferably, the information related to the security authentication of the WLAN network may include an RSN IE of the WLAN network and/or an authentication type Authentication type.

 Further, the UE obtains the second sensitive information of the WLAN AP from the WLAN network, and may be implemented as follows:

 Obtaining, by the UE, the second sensitive information, that is, the probe response that is sent by the AP of the WLAN network that is sent by the AP, and the probe response is sent by the UE after sending the probe frame to the AP of the WLAN network; Or,

 The UE acquires the second sensitive information from the received Beacon frame that is sent by the AP of the WLAN network and includes the second sensitive information.

 In this embodiment, after determining that the UE uses the WLAN to perform service offloading to the mobile communication network, the UE obtains the first sensitive information of the WLAN network from the network device of the mobile communication network, and directly initiates a connection to the WLAN according to the first sensitive information, or The first sensitive information is compared with the second sensitive information of the WLAN network acquired from the WLAN network. If they are consistent, the AP establishes a connection with the AP of the WLAN network. The method solves the problem that the UE cannot access the WLAN network due to the tampering of the sensitive information of the WLAN network, thereby realizing the accurate access of the WLAN network and improving the security of the WLAN network access.

 2 is a flowchart of a method for accessing a wireless local area network according to another embodiment of the present invention. On the basis of the foregoing embodiment, the S101 may include: the UE acquiring an available WLAN network from a network device of a mobile communication network. First sensitive information, and information for determining the priority of each WLAN network. Correspondingly, the S102 may include: the UE selecting the first sensitive information according to the information of the WLAN network priority, and establishing a connection with the AP of the selected WLAN. As shown in Figure 2, the method can be performed as follows:

 S201. The UE acquires first sensitivity information of the multiple WLAN networks and information for determining priorities of the WLAN networks from the network device of the mobile communication network.

Specifically, whether the mobile communication network is deployed independently or in the WLAN, the UE may obtain multiple WLAN networks that can be connected from the mobile communication network, and the UE is ready to connect. The selection of the incoming WLAN network needs to be judged by using the information for determining the priority of the WLAN network. At this time, the mobile communication network sends the first sensitive information of the WLAN network to the UE and uses these to determine the priority of the WLAN network. Information is also sent to the UE.

 S202. The UE selects the first sensitive information according to the information about the WLAN network priority, and establishes a connection with the access point AP of the WLAN network.

 The UE establishes a connection with the WLAN network according to the first sensitive information of the selected WLAN network, that is, the UE may directly establish a connection with the WLAN network according to the first sensitive information of the selected WLAN network, or may be the first The sensitive information is compared with the second sensitive information, and the connection is established with the WLAN network after the knowledge is consistent; if the information is inconsistent, the WLAN network with a lower priority is selected and the above process is restarted.

 In this embodiment, the UE selects an available WLAN network one by one according to the information sent by the mobile communication network for determining the available WLAN network priority, and ensures that the UE can access the WLAN network with high priority.

 Based on the foregoing embodiments, the first sensitive information may further include related information that assists the UE to select a network. The information about the assisting the UE to perform the network selection may be the Hotspot 2.0 capability indication information, and the UE determines whether to establish the AP with the WLAN network by comparing the first sensitive information with the second sensitive information. When connected, the second sensitive information may also include Hotspot 2.0 capability indication information.

 The Hotspot 2.0 Capability Indication message is used to indicate that the device has Hotspot 2.0 capabilities and meets the required security level. In the case that the WLAN network is a WLAN network that has the Hotspot 2.0 capability and the required security level, the UE may further include: the UE before establishing the connection with the access point AP of the WLAN network according to the first sensitive information. And sending an access network information query request to the AP, and receiving an inquiry response message that is returned by the AP, including the status information of the WLAN network, and determining, according to the status information of the WLAN network, that the WLAN network is available.

 Specifically, the first sensitive information further includes Hotspot 2.0 capability indication information, that is, when the mobile communication network sends the first sensitive information of the WLAN network, if the WLAN network is a Hotspot 2.0 WLAN network, the first of the WLAN network The sensitive information may include Hotspot 2.0 capability indication information for identifying the WLAN network as a Hotspot 2.0 WLAN network. The UE needs to be a Hotspot 2.0 capable UE.

Further, not all of the first sensitive information is received in the first sensitive information received by the UE. The information includes the Hotspot 2.0 capability indication information, and the UE needs to determine the first before sending the access network information query request to the AP of the Hotspot 2.0 WLAN network that includes the Hotspot 2.0 capability indication information in the first sensitive information. Whether the Hotspot 2.0 capability indication information is included in the sensitive information, that is, the UE determines whether the Hotspot 2.0 capability indication information is included in the first sensitive information to determine whether to send to the AP of the Hotspot 2.0 WLAN network that includes the Hotspot 2.0 capability indication information. Access network information query request.

 In addition, the status information may be information reflecting the load condition of the Hotspot 2.0 WLAN network, but is not limited thereto. For judging whether the Hotspot 2.0 WLAN network satisfies the conditions of the available WLAN network, it may also be determined according to the actually set rules, and the judgment rule is not limited to the load situation.

 FIG. 3 is a flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention. The method is applicable to a case where a mobile communication network and a WLAN are independently deployed, and may be implemented by an ANDSF, and the function of the ANDSF is a 3GPP access network or a non- The UE of the 3GPP access network provides access information about the network connection, the purpose of which is to assist the UE to discover the access network in its vicinity, and to provide priority for access and to manage the connection rules of these networks. The non-3GPP access network includes, for example, a Worldwide Interoperability for Microwave Access (WiMAX) network, a WLAN network, and CDMA2000. As shown in Figure 3, the method can be performed as follows:

S301. The ANDSF receives an access network information acquisition request sent by the user equipment UE.

 The ANDSF may be a physical device, and may be independently installed in a mobile communication network, or may be attached to network devices of various types of mobile communication networks, that is, the ANDSF refers to all devices that can implement the access network discovery and selection function.

 5302. The ANDSF sends, to the UE, a response message that includes an access network information list, where the access network information list includes information of a WLAN network, where the information of the WLAN network includes first sensitive information. A sensitive information includes information related to security authentication of the WLAN network.

 Specifically, the ANDSF may send all the access network information lists supported by the network to the UE, and the UE may select an access network that can be discovered from the access network information list according to its own discovery capability and establish a connection.

Preferably, the access network information acquisition request further includes location information of the UE, and before the ANDSF sends the response message including the access network information list to the UE, the method further includes: the ANDSF root The access network information available around the UE is determined according to the location information of the UE.

 Specifically, after receiving the access network information acquisition request sent by the UE, the ANDSF searches for the location information of the UE that is carried in the access network information acquisition request, and searches for the surrounding area of the UE from the locally stored access network information. Incoming access network information, the access network information includes surrounding access network types, such as WLAN and WiMAX, and priority information of the access network type, which may be set by the operator. For example, in a certain area, the operator prefers to use the WLAN as the service offload network of the mobile communication network, in which the priority of the WLAN will be higher than other non-3GPP access networks such as WiMAX, that is, by the operation. The priority information set by the quotient guides the UE to preferentially select the WLAN network for access. After determining the access network information around the UE, the ANDSF returns a response message to the UE, and carries the list of the access network information in the response message and sends the response message to the UE. When the information of the WLAN network exists in the list, the information of the WLAN network includes the first sensitive information of the WLAN AP, and includes the identification information of the WLAN.

Optionally, the related information of the WLAN network for performing the security authentication may include an RSN IE of the WLAN network and/or an authentication type Authentication type. The first sensitive information further includes information related to the selection of the network, such as Hot _S pot 2.0 capability indication information, which is merely an example and is not limited thereto.

 Further, the access network information list may further include information for determining the available WLAN network priority, so that the UE selects the available WLAN network according to the information used to determine the available WLAN network priority. Establish a connected WLAN network.

 In this embodiment, in order to implement the UE to accurately access the WLAN network, the sensitive information of the WLAN network is set in the ANDSF in a certain security manner. When the UE acquires the access network information from the ANDSF, the ANDSF sends the sensitive information together. UE, because the mobile communication network has a complete security mechanism, the sensitive information of the WLAN network obtained by the UE from the ANDSF is reliable, thereby effectively ensuring the accuracy of the UE accessing the WLAN network.

FIG. 4 is a flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention. The method is applicable to a mobile communication network and a WLAN aggregation deployment, and may be implemented by a network control device of a mobile communication network. The communication network is LTE as an example. In this case, the network control device is an evolved base station (Evolved Node B, eNB for short). As shown in FIG. 4, the method may include: S401. The network control device determines to use the WLAN network.

 Due to the aggregation deployment of the LTE network and the WLAN network, the eNB side stores related information of the surrounding non-3GPP access network. The eNB may determine whether to use the WLAN network for service offload according to information such as the current network policy and the capability information of the UE. The eNB may choose to use the WLAN network to perform traffic offloading according to the actual situation. For example, all the services of a certain UE use the WLAN network for offloading, or determine that some types of services are used for offloading according to the service type of the UE, but the selection manner is not limited. It is only an example. Preferably, the network control device determines to use the wireless local area network (WLAN) WLAN network according to the current network policy and the capability information of the UE.

 For example, the current network policy may be: when the service load of the eNB exceeds a certain threshold, the UE in the guiding cell performs data service offloading through the WLAN network.

 Optionally, if the mobile communication network is a GSM network, the network control device is a Base Station Controller (BSC); if the mobile communication network is a UMTS network, the network control device is a wireless network controller. (Radio Network Controller, RNC for short); if the mobile communication network is an LTE network, the network control device is an eNB.

 Further, this step can also be performed as follows:

 The network control device receives a Data Radio Bearer (DRB) establishment request sent by a Mobility Management Entity (MME), where the DRB establishment request is determined by the MME according to a current network policy and/or a service of the UE. Determining; the network control device determines to use the WLAN network according to the DRB establishment request judgment.

 S402. The network control device determines a WLAN network available to the UE.

 Specifically, after determining that the service offload is used, the eNB may determine the WLAN network that can be accessed according to the location information of the UE.

 S403. The network control device sends, to the UE, an RRC connection reconfiguration request that includes first sensitive information of the WLAN network, where the RRC connection reconfiguration request is used to indicate that the UE is based on the first sensitive information and the WLAN network. The access point AP establishes a connection; wherein, the first sensitive information includes related information that the WLAN network performs security authentication.

Specifically, the eNB carries the information about the WLAN network that the UE can access in the Radio Resource Control (RRC) connection reconfiguration request, and sends the information to the UE. The related information of the WLAN AP includes first sensitive information and identification information of the WLAN AP. The UE can establish a connection with the WLAN network according to the first sensitive information. Optionally, the related information of the WLAN network for performing the security authentication may include an RSN IE of the WLAN network and/or an authentication type Authentication type. The first sensitive information further includes related information for assisting the UE to perform network selection, such as Hotspot 2.0 capability indication information, which is merely an example and is not limited thereto.

 Optionally, if the network control device determines that the WLAN network available at the location of the UE is multiple, the RRC connection reconfiguration request further includes information for determining a WLAN network priority, for the UE to use the priority. The information is selected from the available WLAN networks to establish a connected WLAN network.

 In this embodiment, in order to implement the UE to accurately access the WLAN network, the network control device of the mobile communication network obtains the first sensitive information of the WLAN network in a certain security manner, and the network control device sends the service to the service to be used according to the network policy. The UE, because the mobile communication network has a complete security mechanism, the sensitive information of the WLAN network obtained by the UE is reliable, thereby effectively ensuring the accuracy of the UE accessing the WLAN network.

 FIG. 5 is a flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention. The method is applicable to a WLAN supporting a Hotspot 2.0 type. The method is applicable to both a mobile communication network and a WLAN aggregation deployment or independent deployment. The Hotspot 2.0 WLAN AP implementation, as shown in Figure 5, can be performed as follows:

 5501. The Hotspot 2.0 WLAN AP receives an access network query request sent by the UE.

 5502. The Hotspot 2.0 WLAN AP sends an access network information query response message including status information of the Hotspot 2.0 WLAN network to the UE, where the Hotspot 2.0 WLAN network status information is obtained by the Hotspot 2.0 WLAN AP from the ANQP server.

Specifically, when the UE determines that the WLAN AP is a Hotspot 2.0 WLAN AP, the UE sends an access network query request to the Hotspot 2.0 WLAN AP, and the Hotspot 2.0 WLAN AP receives the status information acquisition request, and then queries the access network to the access protocol. The network query protocol (ANQP) forwards the status information acquisition request, and the ANQP server sends the status information of the Hotspot 2.0 WLAN AP to the Hotspot 2.0 WLAN AP after receiving the access network query request, and the status information includes but is not limited to the Hotspot 2.0 WLAN AP load information, connection capability, etc. are used to determine whether to select the network and some information used to determine the network priority. After that, the Hotspot 2.0 WLAN AP sends the status information of the Hotspot 2.0 WLAN network that is obtained from the ANQP server to the UE, and the UE determines, according to the status information, whether to set the Hotspot 2.0. The WLAN network acts as an available WLAN network. For example, if the status information indicates that the Hotspot 2.0 WLAN network is currently loaded and busy, the UE will not include the Hotspot 2.0 WLAN network in the available WLAN network.

 Optionally, if the Hotspot 2.0 WLAN AP is aggregated with the ANQP server, the status information of the Hotspot 2.0 WLAN network is obtained by the Hotspot 2.0 WLAN AP from locally stored information. SP, if the function of the ANQP server is placed on the Hotspot 2.0 WLAN AP, that is, the ANQP server and the Hotspot 2.0 WLAN AP are combined, the Hotspot 2.0 WLAN AP receives the access network query request sent by the UE directly. The status information of the Hotspot 2.0 WLAN network is obtained in the related information stored in the local ANDSF module, and the status information is carried in the access network information query response message and sent to the UE.

 In this embodiment, the network control device of the mobile communication network sends the Hotspot 2.0 capability indication information indicating that the WLAN AP is the Hotspot 2.0 WLAN AP, as part of the first sensitive information, to the UE, and sends the UE to the Hotspot 2.0 WLAN AP. The access network queries the request to determine whether the state of the Hotspot 2.0 WLAN network is suitable as an available WLAN network, enabling compatibility with the Hotspot 2.0 WLAN network.

 The above method is exemplified from different scenarios.

 Scenario 1, the mobile communication network and the WLAN are deployed independently (taking the mobile communication network as an example for the LTE network).

 FIG. 6 is a signaling flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention. As shown in FIG. 6, the method may be performed according to the following process:

 5601. The UE accesses an LTE network.

 First, the UE first attaches to the LTE network, that is, the UE first accesses the LTE network and interacts with a Packet Data Network Gateway (PGW).

 S602. The UE determines to use a non-3GPP access network to perform service offload according to an operator policy. Specifically, the operator policy may be a mobility policy of a different system, etc., and the carrier policy may be sent to the UE by the ANDSF of the LTE network, or may be a local policy locally stored by the UE. Make any restrictions.

 S603. The UE sends an access network information request to the ANDSF.

 The access network information request message optionally includes location information of the UE.

S604. The ANDSF determines, according to the location information of the UE, an access network available around the UE. The access network available around the UE is, for example, WLAN or WiMAX. When the location information of the UE is not included in the request message, the ANDSF will return all available access network information.

 S605: The ANDSF sends an access network response message to the UE.

 The response message carries an access network information list, where the access network information list may include information such as an available access network type, an access network identifier, and a public land mobile network identity. Information for determining the priority of the access network may be included. Meanwhile, if the access network information list includes information of the WLAN network, the information includes the first sensitive information of the WLAN network. Since the present invention is mainly directed to the design of accurate access of a WLAN, the case where the information of the WLAN network is not included in the access network information list is not considered here.

 S606. The UE determines, according to the access network information list in the response message, the WLAN network to be accessed.

 The type of the access network to be accessed, such as WiMAX or WLAN, is determined according to the access network type and the access network priority information in the access network information list. Based on the present invention, the UE determines to use the WLAN network for service offload according to the access network priority information, and uses the WLAN network in the access network information list as an available WLAN network.

 Further, the access network information list may further include information for determining the available WLAN network priority, and the UE may select the highest priority according to the information used to determine the available WLAN network priority. A WLAN network acts as a WLAN network to be connected.

 S607. The UE sends a probe request to an AP of the WLAN network.

 The WLAN network is a previously determined WLAN network to be connected.

 S608. The AP of the WLAN network sends a probe response to the UE.

 The probe response includes second sensitive information of the AP of the WLAN network.

 Specifically, in this step, the UE acquires the information of the WLAN network from the WLAN network, where the information includes the second sensitive information of the WLAN network. The UE associates with the AP of the WLAN network according to the first sensitive information and the second sensitive information. That is, the UE needs to compare the first sensitive information of the WLAN network with the second sensitive information, and after determining the consistency, establish an association with the AP of the WLAN network.

Optionally, the UE may also establish a network connection with the AP of the WLAN network according to the first sensitive information without performing sensitive information comparison. Further, S607 and S608 may be replaced by the following steps: The UE listens to the Beacon frame to obtain the second sensitive information.

 S609: The UE determines consistency of the first sensitive information of the WLAN network acquired from the ANDSF and the second sensitive information of the WLAN network obtained from the WLAN network.

 If the first sensitive information and the second sensitive information are inconsistent, then the next advanced WLAN network is selected from the access network information list to perform step S607; if yes, S610 is performed.

 5610. The UE establishes a network connection with the WLAN network.

 Scenario 2: Mobile communication network and WLAN aggregation deployment (taking the mobile communication network as an LTE network as an example).

 FIG. 7 is a signaling flowchart of a method for accessing a wireless local area network according to still another embodiment of the present invention. As shown in FIG. 6, the method may be performed according to the following process:

 S701. The UE accesses an LTE network.

 First, the UE first attaches to the LTE network, that is, the UE first accesses the LTE network and interacts with the MME.

 S702. The MME sends a DRB establishment request to the eNB.

 The MME determines that the eNB needs to establish a new DRB according to the network policy and/or actual service requirements.

 S703. The eNB determines, according to the service type, the capability information, and the load condition of the UE, that the UE uses the WLAN to perform service offloading.

 The eNB determines whether the UE is a WLAN-capable UE according to the capability information of the UE, and determines whether the WLAN needs to be used for service offloading according to the received DRB establishment request.

 Optionally, S701 and S702 are not required, and the eNB may directly determine, according to its own policy, which UEs need to use WLAN for service offloading.

 S704. The eNB sends an RRC connection reconfiguration request to the UE.

 The RRC connection reconfiguration request includes the first sensitive information of the WLAN network and the identifier information of the AP of the WLAN network, after determining that the UE has the WLAN capability and determining that the UE uses the WLAN to perform service offloading.

Further, the RRC connection reconfiguration request may further include information for determining a WLAN network priority. When there are multiple available WLAN networks around the UE, the UE may use the UE according to the usage. The WLAN network with the highest priority is selected as the WLAN network with the highest priority, and the probe request is sent to the AP of the WLAN network.

 S705: The UE sends a probe request to the AP of the WLAN network.

 After receiving the RRC connection reconfiguration request, the UE determines the WLAN network to be connected, and sends a probe request to the AP of the WLAN network.

 5706. The AP of the WLAN network sends a probe response to the UE.

 The probe response includes second sensitive information of the WLAN network.

 Further, S705 and S706 may be replaced by the following steps: The UE listens to the Beacon frame to obtain the second sensitive information.

 S707. The UE determines consistency of the first sensitive information of the WLAN network acquired from the eNB and the second sensitive information of the WLAN network obtained from the WLAN network.

 If the first sensitive information and the second sensitive information are inconsistent, then selecting one WLAN network from the plurality of WLAN networks included in the RRC connection reconfiguration request to perform step S705; if yes, executing S708.

 Optionally, the UE may also perform the step S707, directly according to the first sensitive information and the

The APs of the WLAN network establish associations and complete network connections.

 S708. The UE establishes a network connection with the WLAN network.

 FIG. 8 is a schematic structural diagram of an embodiment of a user equipment according to the present invention. As shown in FIG. 8, the UE includes: an obtaining module 81 and a processing module 82, where the obtaining module 81 is configured to obtain a wireless local area network from a network device of a mobile communication network. The first sensitive information of the WLAN network, where the first sensitive information includes related information for performing security authentication on the WLAN network, and the processing module 82 is configured to use the first sensitive information acquired by the obtaining module 81 and the WLAN network. The access point AP establishes a connection.

 Optionally, the information related to the security authentication of the WLAN network may include, but is not limited to, an RSN IE and/or an authentication type of the WLAN network.

Optionally, the first sensitive information further includes related information that assists the UE to perform network selection. Optionally, the network device is an access network discovery and selection function ANDSF. Correspondingly, the obtaining module 81 acquires the first sensitive information of the WLAN network from the network device of the mobile communication network, and the acquiring module 81 sends an access network information obtaining request to the ANDSF, and receives the list of the access network information returned by the ANDSF. Response message, wherein the access network information list The information of the WLAN network is included, and the information of the WLAN network includes the first sensitive information. Further, the access network information acquisition request further includes location information of the user equipment. Correspondingly, the access network information list is determined by the ANDSF according to the location information of the user equipment. In the above embodiment, the obtaining module 81 is specifically configured to: receive, by the network control device, a radio resource control RRC connection reconfiguration request, where the RRC connection reconfiguration request includes the first sensitive information.

 In the foregoing embodiment, the obtaining module 81 is further configured to acquire, from the network device of the mobile communication network, first sensitive information of the multiple WLAN networks, and information for determining priorities of the WLAN networks; correspondingly, the processing module 82 is specifically And for selecting, according to the information about the priority of the WLAN network, the first sensitive information, and establishing a connection with an access point AP of the WLAN network.

 In the above embodiment, the WLAN network is a WLAN network having the Hotspot 2.0 capability and the required security level; correspondingly, the user equipment further includes a first sending module 83, and the processing module 82 is configured to Before the sensitive information establishes a connection with the access point AP of the WLAN network, the access network information query request is sent to the AP. Correspondingly, the obtaining module 81 is further configured to: receive, by the AP, a query response message that includes the status information of the WLAN network; the processing module 82 is further configured to: after the obtaining module 81 receives the query response message, The status information of the WLAN network determines that the WLAN network is available.

 In the foregoing embodiment, the information related to the selection of the network by the UE may be Hotspot 2.0 capability indication information, but is not limited thereto. The Hotspot 2.0 capability indication information is used to indicate that the WLAN network has Hotspot 2.0 capability and achieves a required security level. The processing module 82 is further configured to: before the first sending module 83 sends an access network information query request to the AP, determine that the first sensitive information includes the Hotspot 2.0 capability indication information.

In the above embodiment, the obtaining module 81 is further configured to: before the processing module 82 establishes a connection with the access point AP of the WLAN network according to the first sensitive information, acquire the first part of the WLAN network from the WLAN network. The second sensitive information includes information about security authentication performed by the WLAN network. Correspondingly, the processing module 82 is further configured to determine that the first sensitive information is consistent with the second sensitive information before establishing the connection with the access point AP of the WLAN network according to the first sensitive information. Further, the acquiring module 81 acquires the second sensitive information of the WLAN network from the WLAN network, and specifically includes: acquiring, by using the detected response that includes the second sensitive information that is returned by the AP of the WLAN network The second sensitive information, The probe response is received after the user equipment sends a sounding frame to the AP of the WLAN network; or, from the received beacon frame that is sent by the AP of the WLAN network, including the second sensitive information. Obtaining the second sensitive information. For the user equipment provided in this embodiment, the processing procedure in the foregoing method embodiments may be specifically described. For the function, refer to the foregoing method embodiment, and details are not described herein again.

 The user equipment provided in this embodiment solves the problem that the UE cannot access the WLAN network due to the tampering of the sensitive information of the WLAN network, thereby achieving accurate access of the WLAN network and improving the security of the WLAN network access. .

 FIG. 9 is a schematic structural diagram of an embodiment of an access network discovery and selection function device according to the present invention. As shown in FIG. 9, the ANDSF may include a receiving module 91 and a second sending module 92, where the receiving module 91 is configured to receive user equipment. The access network information acquisition request sent by the UE; the second sending module 92 is configured to send, to the UE, a response message including an access network information list, where the access network information list includes information of a WLAN network, where the WLAN network The first sensitive information is included in the information, and the first sensitive information includes related information that the WLAN network performs security authentication.

 Optionally, the information related to the security authentication of the WLAN network may include, but is not limited to, an RSN IE and/or an authentication type of the WLAN network.

Optionally, the first sensitive information further includes related information, such as Hot _S pot 2.0 capability indication information, for assisting the UE to perform network selection, but is not limited thereto.

 Optionally, the access network information obtaining request further includes location information of the UE;

The ANDSF further includes: a first determining module 93, configured to determine, according to the location information of the UE, the available access around the UE, before the second sending module 92 sends the response message including the access network information list to the UE Web information.

 In the above embodiment, the access network information list further includes information for determining a WLAN network priority, so that the UE selects the WLAN network according to the priority information.

 The ANDSF provided in this embodiment may be specifically the processing procedure in the foregoing method embodiments. For details, refer to the foregoing method embodiments, and details are not described herein again.

The ANDSF provided in this embodiment solves the problem that the UE cannot access the WLAN network due to the fact that the relevant sensitive information of the WLAN network is easily falsified, thereby realizing accurate access of the WLAN network and improving the security of the WLAN network access. 10 is a schematic structural diagram of an embodiment of a network control device according to the present invention. As shown in FIG. 10, the network control device may include a second determining module 101, a third determining module 102, and a third sending module 103, where the second determining module The third determining module 102 is configured to determine a WLAN network that is available to the UE, and the third sending module 103 is configured to send, to the UE, the wireless information that includes the first sensitive information of the WLAN network. The RRC connection reconfiguration request is used to indicate that the UE establishes a connection with the access point AP of the WLAN network according to the first sensitive information, where the first sensitive information includes The WLAN network performs related information about security authentication.

 Optionally, the information related to the security authentication of the WLAN network may include, but is not limited to, an RSN IE and/or an authentication type of the WLAN network.

 Optionally, the first sensitive information further includes related information, such as Hotspot 2.0 capability indication information, for assisting the UE to perform network selection, but is not limited thereto. In the above embodiment, the second determining module 102 is specifically configured to determine to use the WLAN network according to the current network policy and the capability information of the UE.

 In the foregoing embodiment, the third determining module 102 is specifically configured to determine, according to location information of the user equipment UE, a WLAN network that is available to the UE.

 In the above embodiment, the RRC connection reconfiguration request further includes information for determining a WLAN network priority, so that the UE selects the WLAN network according to the priority information.

 For the network control device provided by this embodiment, the processing procedure in the foregoing method embodiments may be specifically described. For the function, refer to the foregoing method embodiment, and details are not described herein again.

 The network control device provided in this embodiment solves the problem that the UE cannot access the WLAN network due to the tampering of the sensitive information of the WLAN network, thereby achieving accurate access of the WLAN network and improving the security of the WLAN network. Sex.

 FIG. 11 is a schematic structural diagram of another embodiment of a user equipment according to the present invention. As shown in FIG. 11, the UE may include a receiver 111 and a processor 112, where the receiver 111 is configured to acquire a wireless local area network from a network device of the mobile communication network. The first sensitive information of the WLAN network, where the first sensitive information includes related information for performing security authentication on the WLAN network, and the processor 112 is configured to use the first sensitive information acquired by the receiver 111 and the WLAN network. The access point AP establishes a connection.

Optionally, the information related to the WLAN network for performing the security authentication may include the WLAN network. RSN IE and/or authentication type, but not limited to this.

Optionally, the first sensitive information further includes related information, such as Hot _S pot 2.0 capability indication information, for assisting the UE to perform network selection, but is not limited thereto.

 Optionally, the network device is an access network discovery and selection function ANDSF. Further, the receiver 111 acquires the first sensitive information of the wireless local area network WLAN network from the network device of the mobile communication network, and the method includes: the receiver 111 sends an access network information acquisition request to the ANDSF, and receives the returned by the ANDSF, including a response message of the access network information list, where the access network information list includes information of the WLAN network, and the information of the WLAN network includes the first sensitive information.

 Further, the access network information acquisition request further includes location information of the user equipment; correspondingly, the access network information list is determined by the ANDSF according to location information of the user equipment.

 Optionally, the receiver 111 is specifically configured to: receive, by the network control device, a radio resource control RRC connection reconfiguration request, where the RRC connection reconfiguration request includes the first sensitive information.

 Optionally, the receiver 111 is specifically configured to acquire multiple devices from a network device of the mobile communication network.

The first sensitive information of the WLAN network and the information used to determine the priority of each WLAN network. Correspondingly, the processor 112 is specifically configured to: select the first sensitive information according to the information of the WLAN network priority, and establish a connection with the access point AP of the WLAN network.

 Optionally, the WLAN network is a WLAN network with Hotspot 2.0 capability and the required security level. The user equipment further includes a transmitter 113, configured to send an access network information query request to the AP before the processor 112 establishes a connection with the access point AP of the WLAN network according to the first sensitive information. Correspondingly, the receiver 111 is further configured to: receive, by the AP, a query response message that includes status information of the WLAN network, where the processor 112 is further configured to: after the receiver receives the query response message, Determining that the WLAN network is available according to status information of the WLAN network.

 Optionally, the information related to the user equipment for performing network selection is Hotspot 2.0 capability indication information, where the Hotspot 2.0 capability indication information is used to indicate that the WLAN network has Hotspot 2.0 capability and reaches a required security level.

Optionally, the processor 112 is further configured to: before the transmitter 113 sends an access network information query request to the AP, determine that the first sensitive information includes Hotspot 2.0 capability indication information. Optionally, the receiver 111 is further configured to: acquire, after the processor 112 establishes a connection with the access point AP of the WLAN network according to the first sensitive information, obtain a second of the WLAN network from the WLAN network. Sensitive information, the second sensitive information includes related information that the WLAN network performs security authentication. Correspondingly, the processor 112 is further configured to determine that the first sensitive information is consistent with the second sensitive information before establishing the connection with the access point AP of the WLAN network according to the first sensitive information.

 Optionally, the receiver 111 obtains the second sensitive information of the WLAN network from the WLAN network, specifically:

 Obtaining the second sensitive information from the detected probe response that is sent by the AP of the WLAN network that includes the second sensitive information, where the detecting response is that the user equipment sends a sounding frame to the AP of the WLAN network. Received later; or,

 And acquiring the second sensitive information from a received beacon frame that includes the second sensitive information sent by an AP of the WLAN network.

 For the user equipment provided in this embodiment, the processing procedure in the foregoing method embodiments may be specifically described. For the function, refer to the foregoing method embodiment, and details are not described herein again.

 The user equipment provided in this embodiment solves the problem that the UE cannot access the WLAN network due to the tampering of the sensitive information of the WLAN network, thereby achieving accurate access of the WLAN network and improving the security of the WLAN network access. .

 FIG. 12 is a schematic structural diagram of another embodiment of an access network discovery and selection function device according to the present invention. As shown in FIG. 12, the ANDSF may include a receiver 121 and a transmitter 122, where the receiver 121 is configured to receive a user equipment UE. The access network information acquisition request is used by the transmitter 122 to send a response message including the access network information list to the UE, where the access network information list includes information of the WLAN network, and the information of the WLAN network includes The first sensitive information includes: the first sensitive information includes related information that the WLAN network performs security authentication.

 Optionally, the information related to the WLAN network for performing the security authentication may include the WLAN network.

RSN IE and / or authentication type, but not limited to this.

Optionally, the first sensitive information further includes related information, such as Hot _S pot 2.0 capability indication information, for assisting the UE to perform network selection, but is not limited thereto.

Optionally, the access network information obtaining request further includes location information of the UE. The ANDSF further includes: the processor 123, configured to send, by the transmitter 122, the access network information list to the UE Before the response message, the access network information available around the UE is determined according to the location information of the UE. Optionally, the access network information list further includes information for determining a WLAN network priority, where the UE selects the WLAN network according to the priority information.

 The ANDSF provided in this embodiment may be specifically the processing procedure in the foregoing method embodiments. For details, refer to the foregoing method embodiments, and details are not described herein again.

 The ANDSF provided in this embodiment solves the problem that the UE cannot access the WLAN network due to the fact that the relevant sensitive information of the WLAN network is easily falsified, thereby realizing the accurate access of the WLAN network and improving the security of the WLAN network access.

 FIG. 13 is a schematic structural diagram of another embodiment of a network control device according to the present invention. As shown in FIG. 13, the network control device may include a processor 131 and a transmitter 132, where the processor 131 is configured to determine a WLAN network using a wireless local area network, and Determining a WLAN network available to the UE; the transmitter 132 is configured to send, to the UE, a radio resource control RRC connection reconfiguration request that includes first sensitive information of the WLAN network, where the RRC connection reconfiguration request is used to indicate The UE establishes a connection with the access point AP of the WLAN network according to the first sensitive information, where the first sensitive information includes related information of the WLAN network for performing security authentication.

 Optionally, the information related to the security authentication of the WLAN network may include, but is not limited to, an RSN IE and/or an authentication type of the WLAN network.

Optionally, the first sensitive information further includes related information, such as Hot _S pot 2.0 capability indication information, for assisting the UE to perform network selection, but is not limited thereto.

 Optionally, the processor 131 may determine, according to location information of the user equipment UE, a WLAN network that is available to the UE.

 Optionally, the processor 131 is specifically configured to determine to use the WLAN network according to the current network policy and the capability information of the UE.

 Optionally, the RRC connection reconfiguration request further includes information for determining a WLAN network priority, so that the UE selects the WLAN network according to the information of the priority.

 For the network control device provided by this embodiment, the processing procedure in the foregoing method embodiments may be specifically described. For the function, refer to the foregoing method embodiment, and details are not described herein again.

The network control device provided in this embodiment solves the problem that the UE cannot access the WLAN network due to the tampering of the sensitive information of the WLAN network, thereby achieving accurate access of the WLAN network and improving the security of the WLAN network. Sex. In the several embodiments provided by the present invention, it should be understood that the disclosed apparatus and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

 The units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solution of the embodiment.

 In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

 The above-described integrated unit implemented in the form of a software functional unit can be stored in a computer readable storage medium. The software functional unit is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to perform the method of various embodiments of the present invention. Part of the steps. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program code. .

 A person skilled in the art can clearly understand that for the convenience and brevity of the description, only the division of each functional module described above is exemplified. In practical applications, the above function assignment can be completed by different functional modules as needed, that is, the device is installed. The internal structure is divided into different functional modules to perform all or part of the functions described above. For the specific working process of the device described above, refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

Finally, it should be noted that the above embodiments are only for explaining the technical solutions of the present invention, and are not intended to be limiting thereof; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the foregoing embodiments can still be modified. Equivalent to some or all of the technical features, and the modifications or substitutions do not depart from the scope of the technical solutions of the embodiments of the present invention.

Claims

claims 1. A wireless local area network access method, characterized by including: The user equipment UE obtains the first sensitive information of the wireless local area network WLAN network from the network equipment of the mobile communication network; wherein the first sensitive information includes relevant information for security authentication of the WLAN network; The UE establishes a connection with the access point AP of the WLAN network based on the first sensitive information. 2. The method according to claim 1, wherein the first sensitive information also includes relevant information that assists the UE in selecting a network. 3. The method according to claim 1 or 2, characterized in that the network device is an access network discovery and selection function ANDSF; The UE obtains the first sensitive information of the wireless local area network WLAN network from the network equipment of the mobile communication network, including: The UE sends an access network information acquisition request to the ANDSF; The UE receives a response message including an access network information list returned by the ANDSF, where the access network information list includes information about the WLAN network, and the information about the WLAN network includes the first sensitive information. 4. The method according to claim 3, characterized in that, the access network information acquisition request further includes the location information of the UE; accordingly, the access network information list is the ANDSF according to the UE The location information is determined. 5. The method according to claim 1 or 2, characterized in that the UE obtains the first sensitive information of the WLAN network from the network device of the mobile communication network, including: The UE receives a radio resource control RRC connection reconfiguration request sent by a network control device, and the RRC connection reconfiguration request includes the first sensitive information. 6. The method according to any one of claims 1 to 5, characterized in that, the UE obtaining the first sensitive information of the WLAN network from the network device of the mobile communication network includes: The UE obtains the first sensitive information of multiple WLAN networks from the network equipment of the mobile communication network, and the information used to determine the priority of each WLAN network; Correspondingly, the UE establishing a connection with the access point AP of the WLAN network based on the first sensitive information includes: the UE selecting the first based on the WLAN network priority information. Sensitive information, establishing a connection with the access point AP of the WLAN network. 7. The method according to any one of claims 2 to 6, characterized in that the WLAN network is a WLAN network that has Hotspot2.0 capabilities and reaches a necessary security level; Before the UE establishes a connection with the access point AP of the WLAN network based on the first sensitive information, the method further includes: The UE sends an access network information query request to the AP; The UE receives the query response message including the status information of the WLAN network returned by the AP, and determines that the WLAN network is available according to the status information of the WLAN network. 8. The method according to claim 7, wherein the relevant information assisting the UE in selecting a network is Hotspot 2.0 capability indication information, and the Hotspot 2.0 capability indication information is used to indicate that the WLAN network has Hotspot2 .0 capabilities and meet the required security level. 9. The method according to claim 8, characterized in that, before the UE sends the access network information query request to the AP, it further includes: The UE determines that the first sensitive information includes the Hotspot 2.0 capability indication information. 10. The method according to any one of claims 1 to 9, characterized in that, before the UE establishes a connection with the access point AP of the WLAN network based on the first sensitive information, it includes: The UE obtains second sensitive information of the WLAN network from the WLAN network, and the second sensitive information includes information related to security authentication of the WLAN network; The UE determines that the first sensitive information is consistent with the second sensitive information. 11. The method according to claim 10, wherein the UE obtains the second sensitive information of the WLAN network from the WLAN network, including: The UE obtains the second sensitive information from the received detection response including the second sensitive information returned by the AP of the WLAN network, and the detection response is sent by the UE to the AP of the WLAN network received after the probe frame; or, The UE obtains the second sensitive information from the received beacon frame including the second sensitive information sent by the AP of the WLAN network. 12. A wireless local area network access method, characterized by including: Access network discovery and selection function ANDSF receives the access network information acquisition request sent by the user equipment UE; The ANDSF sends a response message including an access network information list to the UE, and the access The network information list includes information about the WLAN network, and the information about the WLAN network includes first sensitive information; wherein the first sensitive information includes information related to security authentication of the WLAN network. 13. The method according to claim 12, wherein the first sensitive information also includes relevant information that assists the UE in selecting a network. 14. The method according to claim 12 or 13, wherein the access network information acquisition request further includes the location information of the UE, then the ANDSF sends the access network information list to the UE. Before responding to the message, also include: The ANDSF determines available access network information around the UE based on the location information of the UE. 15. The method according to claim 12 or 13 or 14, characterized in that the access network information list also includes information for judging WLAN network priority, so that the UE can determine the priority based on the priority information. Select the WLAN network. 16. A wireless local area network access method, characterized by including: The network control device determines to use the wireless LAN WLAN network; The network control device determines the WLAN network available to the UE; The network control device sends a radio resource control RRC connection reconfiguration request containing the first sensitive information of the WLAN network to the UE, and the RRC connection reconfiguration request is used to instruct the UE to perform the radio resource control according to the first sensitive information. Establish a connection with the access point AP of the WLAN network; wherein the first sensitive information includes information related to security authentication of the WLAN network. 17. The method according to claim 16, wherein the first sensitive information also includes relevant information that assists the UE in selecting a network. 18. The method according to claim 16 or 17, characterized in that the network control device determines the WLAN network available to the UE including: The network control device determines the location information available to the user equipment UE based on the location information of the user equipment UE. WLAN network. 19. The method according to claim 16 or 17 or 18, characterized in that the network control device determines to use a wireless local area network WLAN network, including: The network control device determines to use the WLAN network according to the current network policy and the capability information of the UE. 20. The method according to any one of claims 16 to 19, characterized in that the RRC connection reconfiguration request also includes information used to determine the WLAN network priority, so that the UE can determine the WLAN network priority based on the priority information. Select the WLAN network. 21. A user equipment, characterized by: including: An acquisition module, configured to acquire the first sensitive information of the wireless local area network WLAN network from the network equipment of the mobile communication network; wherein the first sensitive information includes relevant information for security authentication of the WLAN network; A processing module, configured to establish a connection with the access point AP of the WLAN network according to the first sensitive information obtained by the acquisition module. 22. The user equipment according to claim 21, wherein the first sensitive information also includes relevant information that assists the user equipment in selecting a network. 23. The user equipment according to claim 21 or 22, characterized in that the network device is an access network discovery and selection function ANDSF; The acquisition module acquires the first sensitive information of the wireless local area network WLAN network from the network equipment of the mobile communication network, including: The acquisition module sends an access network information acquisition request to the ANDSF; The acquisition module receives a response message including an access network information list returned by the ANDSF, where the access network information list includes the information of the WLAN network, and the information of the WLAN network includes the first Sensitive information. 24. The user equipment according to claim 23, characterized in that, the access network information acquisition request further includes location information of the user equipment; accordingly, the access network information list is obtained by the ANDSF according to the The location information of the user equipment is determined. 25. The user equipment according to any one of claims 21 to 24, characterized in that the acquisition module is specifically configured to receive a radio resource control RRC connection reconfiguration request sent by a network control device, and the RRC connection reconfiguration request including the first sensitive information. 26. The user equipment according to any one of claims 21 to 25, characterized in that the acquisition module is specifically configured to acquire the first sensitive information of multiple WLAN networks from the network equipment of the mobile communication network, and is configured to Information to determine the priority of each WLAN network; Correspondingly, the processing module is specifically configured to select the first sensitive information according to the WLAN network priority information, and establish a connection with the access point AP of the WLAN network. 27. The user equipment according to any one of claims 22 to 26, characterized in that the WLAN network is a WLAN network with Hotspot2.0 capability and reaching a necessary security level; The user equipment also includes: A first sending module, configured to send an access network information query request to the AP before the processing module establishes a connection with the access point AP of the WLAN network based on the first sensitive information; The acquisition module is also configured to receive a query response message returned by the AP including the status information of the WLAN network; The processing module is also configured to, after the acquisition module receives the query response message, determine that the WLAN network is available according to the status information of the WLAN network. 28. The user equipment according to claim 27, wherein the relevant information assisting the user equipment in selecting a network is Hotspot 2.0 capability indication information, and the Hotspot 2.0 capability indication information is used to indicate the WLAN network It has Hotspot2.0 capabilities and reaches the required security level. 29. The user equipment according to claim 28, characterized in that, the processing module is further configured to, before the first sending module sends an access network information query request to the AP, determine that the first sensitive The information includes the Hotspot 2.0 capability indication information. 30. The user equipment according to any one of claims 21 to 29, characterized in that, the obtaining module is further configured to: in the processing module, according to the first sensitive information and the access point AP of the WLAN network Before establishing the connection, obtain second sensitive information of the WLAN network from the WLAN network, where the second sensitive information includes information related to security authentication of the WLAN network; The processing module is further configured to determine that the first sensitive information is consistent with the second sensitive information before establishing a connection between the first sensitive information and the access point AP of the WLAN network. 31. The user equipment according to claim 30, wherein the acquisition module acquires the second sensitive information of the WLAN network from the WLAN network, specifically including: The second sensitive information is obtained from a received detection response including the second sensitive information returned by the AP of the WLAN network, where the detection response is sent by the user equipment to the WLAN Received after the network AP sends a probe frame; or, The second sensitive information is obtained from the received beacon frame including the second sensitive information sent by the AP of the WLAN network. 32. An ANDSF, characterized by including: A receiving module, configured to receive an access network information acquisition request sent by the user equipment UE; a second sending module, configured to send a response message including an access network information list to the UE, where the access network information list includes WLAN Network information, the WLAN network information includes first sensitive information; wherein, the first sensitive information includes information related to security authentication of the WLAN network. 33. The ANDSF according to claim 32, wherein the first sensitive information also includes relevant information that assists the UE in selecting a network. 34. The ANDSF according to claim 32 or 33, wherein the access network information acquisition request further includes the location information of the UE; the ANDSF further includes: The first determining module is configured to determine the available access network information around the UE based on the location information of the UE before the second sending module sends a response message including an access network information list to the UE. 35. The ANDSF according to claim 32 or 33 or 34, characterized in that the access network information list further includes information for judging WLAN network priority, so that the UE can determine the priority based on the priority information. Select the WLAN network. 36. A network control device, characterized by including: The second determination module is used to determine the use of a wireless local area network WLAN network; The third determination module is used to determine the WLAN network available to the UE; A third sending module, configured to send a radio resource control RRC connection reconfiguration request containing the first sensitive information of the WLAN network to the UE, where the RRC connection reconfiguration request is used to instruct the UE according to the first The sensitive information establishes a connection with the access point AP of the WLAN network; wherein the first sensitive information includes information related to security authentication of the WLAN network. 37. The network control device according to claim 36, wherein the first sensitive information also includes relevant information that assists the UE in selecting a network. 38. The network control device according to claim 36 or 37, characterized in that the third determination module is specifically configured to determine the available information of the user equipment UE according to the location information of the user equipment UE. WLAN network. 39. The network control device according to claim 36 or 37, characterized in that the second determination module is specifically configured to determine to use the WLAN network according to the current network policy and the capability information of the UE. 40. The network control device according to any one of claims 36 to 39, characterized in that: The RRC connection reconfiguration request also includes information used to determine the priority of the WLAN network, so that the UE can select the WLAN network based on the priority information. 41. A user equipment, characterized by: including: A receiver configured to obtain the first sensitive information of the wireless local area network WLAN network from the network equipment of the mobile communication network; wherein the first sensitive information includes relevant information for security authentication of the WLAN network; A processor, configured to establish a connection with the access point AP of the WLAN network according to the first sensitive information obtained by the receiver. 42. The user equipment according to claim 41, characterized in that the first sensitive information also includes relevant information that assists the UE in selecting a network. 43. The user equipment according to claim 41 or 42, characterized in that the network device is an access network discovery and selection function ANDSF; The receiver obtains the first sensitive information of the wireless local area network WLAN network from the network equipment of the mobile communication network, including: The receiver sends an access network information acquisition request to the ANDSF; The receiver receives a response message including an access network information list returned by the ANDSF, where the access network information list includes the information of the WLAN network, and the information of the WLAN network includes the first Sensitive information. 44. The user equipment according to claim 43, characterized in that, the access network information acquisition request further includes location information of the user equipment; accordingly, the access network information list is obtained by the ANDSF according to the The location information of the user equipment is determined. 45. The user equipment according to claim 43 or 44, characterized in that the receiver is specifically configured to receive a radio resource control RRC connection reconfiguration request sent by a network control device, and the RRC connection reconfiguration request includes the Describe the first sensitive information. 46. The user equipment according to any one of claims 41 to 45, characterized in that: the receiving The device is specifically used to obtain the first sensitive information of multiple WLAN networks from the network equipment of the mobile communication network, and the information used to determine the priority of each WLAN network; Correspondingly, the processor is specifically configured to select the first sensitive information according to the WLAN network priority information, and establish a connection with the access point AP of the WLAN network. 47. The user equipment according to any one of claims 42 to 46, characterized in that the WLAN network is a WLAN network with Hotspot2.0 capability and reaching a necessary security level; The user equipment also includes: A sender configured to send an access network information query request to the AP before the processor establishes a connection with the access point AP of the WLAN network based on the first sensitive information; The receiver is further configured to receive a query response message returned by the AP including the status information of the WLAN network; The processor is further configured to, after the receiver receives the query response message, determine that the WLAN network is available according to the status information of the WLAN network. 48. The user equipment according to claim 47, wherein the relevant information assisting the user equipment in selecting a network is Hotspot 2.0 capability indication information, and the Hotspot 2.0 capability indication information is used to indicate the WLAN network It has Hotspot2.0 capabilities and reaches the required security level. 49. The user equipment according to claim 48, characterized in that the processor is further configured to, before the sender sends an access network information query request to the AP, determine that the first sensitive information Includes Hotspot 2.0 capability indication information. 50. The user equipment according to any one of claims 41 to 49, characterized in that the receiver is further configured to: when the processor determines the first sensitive information and the access point AP of the WLAN network Before establishing the connection, obtain second sensitive information of the WLAN network from the WLAN network, where the second sensitive information includes relevant information for security authentication of the WLAN network; The processor is also configured to: based on the first sensitive information and the access point of the WLAN network Before establishing a connection, the AP determines that the first sensitive information is consistent with the second sensitive information. 51. The user equipment according to claim 50, wherein the receiver obtains the second sensitive information of the WLAN network from the WLAN network, specifically including: The second sensitive information is obtained from a received detection response including the second sensitive information returned by the AP of the WLAN network, where the detection response is sent by the user equipment to the WLAN Received after the network AP sends a probe frame; or, The second sensitive information is obtained from the received beacon frame including the second sensitive information sent by the AP of the WLAN network. 52. An ANDSF, characterized by including: A receiver, configured to receive an access network information acquisition request sent by the user equipment UE; A transmitter configured to send a response message including an access network information list to the UE, where the access network information list includes WLAN network information, and the WLAN network information includes first sensitive information; wherein, The first sensitive information includes information related to security authentication of the WLAN network. 53. The ANDSF according to claim 52, wherein the first sensitive information also includes relevant information that assists the UE in selecting a network. 54. The ANDSF according to claim 52 or 53, wherein the access network information acquisition request further includes the location information of the UE; the ANDSF further includes: A processor, configured to determine available access network information around the UE based on the location information of the UE before the sender sends a response message including an access network information list to the UE. 55. The ANDSF according to claim 52 or 53 or 54, characterized in that the access network information list further includes information for judging WLAN network priority, so that the UE can determine the priority based on the priority information. Select the WLAN network. 56. A network control device, characterized by including: Processor, used to determine the use of a wireless local area network WLAN network, and determine the UE available WLAN network; A transmitter configured to send a radio resource control RRC connection reconfiguration request containing first sensitive information of the WLAN network to the UE, where the RRC connection reconfiguration request is used to instruct the UE to perform the radio resource control according to the first sensitive information. Establish a connection with the access point AP of the WLAN network; wherein the first sensitive information includes information related to security authentication of the WLAN network. 57. The network control device according to claim 56, wherein the first sensitive information also includes relevant information that assists the UE in selecting a network. 58. The network control device according to claim 56 or 57, characterized in that the processor is further configured to determine the WLAN network available to the user equipment UE according to the location information of the user equipment UE. 59. The network control device according to claim 56 or 57 or 58, characterized in that: The processor is specifically configured to determine to use the WLAN network according to the current network policy and the capability information of the UE. 60. The network control device according to any one of claims 56 to 59, characterized in that the RRC connection reconfiguration request also includes information used to determine the WLAN network priority, so that the UE can determine the WLAN network priority according to the priority. information to select the WLAN network.