Abstract: A Wireless Local Access Network (WLAN) user policy distribution device and method are described. One embodiment of such a device comprises: a first receiving module, configured to receive a WLAN user policy actively sent by an upstream policy decision distribution device; and a first forwarding module, configured to forward the WLAN user policy to a WLAN user policy execution device. Through the technical solution provided in one embodiment of such a device, the absence of a necessary policy control management mechanism in the existing WLAN is solved, thereby implementing the WLAN user policy control effectively.

Abstract: The disclosure discloses a device and a method for distributing a Wireless Local Access Network (WLAN) user policy. The device comprises: a first receiving module, configured to receive a WLAN user policy actively sent by an upstream policy decision distribution device; and a first forwarding module, configured to forward the WLAN user policy to a WLAN user policy execution device. Through the technical solution provided by the disclosure, the absence of a necessary policy control management mechanism in the existing WLAN is solved, thereby implementing the WLAN user policy control effectively.

Abstract: A pre-authentication method and an authentication system related to the mobile communications field are disclosed. The pre-authentication method includes: when a mobile node (MN) enters a visited network other than a home network, the MN obtains the identity information of the visited network, selects, according to the identity information of the visited network, a first pre-auth-key-file corresponding to the visited network and a first ticket corresponding to the visited network, where the first ticket carries the first pre-auth-key-file, and authenticates the visited authentication, authorization and accounting (VAAA) server according to the first pre-auth-key-file.

Abstract: A pre-authentication method and an authentication system related to the mobile communications field are disclosed. The pre-authentication method includes: when a mobile node (MN) enters a visited network other than a home network, the MN obtains the identity information of the visited network, selects, according to the identity information of the visited network, a first pre-auth-key-file corresponding to the visited network and a first ticket corresponding to the visited network, where the first ticket carries the first pre-auth-key-file, and authenticates the visited authentication, authorization and accounting (VAAA) server according to the first pre-auth-key-file.

Abstract: A method, system, terminal, and server for negotiating a network service are provided, which belong to the field of network access technology. The method includes: an AAA server for providing basic access (AAAn server) receives a network access identifier (NAI) from a terminal during an authentication process, where the NAI contains service identifier information of a service requested by the terminal. The AAAn server performs identity authentication on the terminal according to the NAI and information associated with the terminal stored in a database of the AAAn server. The AAAn server judges whether the terminal can obtain the requested service according to the service identifier information of the service requested by the terminal contained in the NAI after the terminal successfully passes the identity authentication. The system includes a terminal and an AAAn server. The technical solutions can simplify the negotiation process, and facilitate the network management and operation.