I.IndustryBackground
As business information continues to evolve and the trend towards mobile officeing has led many enterprises to start adding more accessible, easy and mobile wireless access networks to meet their development needs, building on old cable connectivity. This allows both insiders and visitors to easily access enterprise local area networks and Internet sites through wireless networks at all times in offices and business parks, thus enabling them to handle various business processes.But traditional wireless access means users need to know their WiFi passwords or not to have them directly into the wireless network, and there are not only some risks to the company’s network security, but also a lack of stability in its operation and control over visitors. More importantly, in large businesses, it is not possible to establish a virtuous interaction with staff and visitors through WiFi that does not play its part, thereby reducing the effectiveness of WiFi.
II. NEEDS ANALYSIS
The problems that enterprises face in building their own wireless networks and WiFi require a fast, low-cost, simple and easy-to-use wireless certification solution which meets the following needs:1. (b) Support for multiple authentication methods, including text messages and 2D-code certifications for visitors online, static user name password authentication for internal staff, and mailbox validation when texting is not convenient to foreign users;
2. Reciprocal certification can be done in conjunction with existing enterprise systems such as OA, CRM, LDAP and the enterprise ' s staff are certified online through existing accounts, all user data need only be created or removed from an enterprise ' s management system, and the certification system does not require secondary operation;
3. The certification page, the certification successful page, can be highly customized to support multiple web design languages in order to achieve a need for custom design of authentication pages;
4. The enterprise wireless network can be divided into multiple separate SSIDs, used by business managers, business employees and business visitors respectively, with different certification pages being pushed for different SSIDs to achieve different authentication strategies;
5. (b) To be easily managed and to achieve control management of access time, upload-down speed and validity for users accessing wireless networks, with different user attributes adopting different strategies for access;
6. Successful certification allows for mandatory leapfrogging to the Enterprise Officer Network or other designated websites, and effective branding and promotion;
7. Support for secondary development, which will allow future authorization management of visitor access rights on the enterprise ' s existing OA, CRM or other systems;
8. Deployment is easy and maintenance simple, while the overall equipment needs to be easily managed and extended to include increased coverage and user numbers that can be easily upgraded in the future.
III. PROJECT-DINATION PRINCIPLES
NATSHEL_BRAND Wireless Certification System is based on our many years of experience in product operations and a profound understanding of the operational needs of wireless certification networks, targeting the need for wireless certification by enterprises and being launched in conjunction with existing products“Business Wireless Certification Solutions”From the perspective of building a manageable and operational wireless certification network, work is being done to build an efficient, reliable and low-cost business wireless certification network for clients, making it easy, reliable and efficient to deploy. Based on user needs and user network characteristics, programme design follows the following principles:1. High reliability, reliable and stable operation of wireless networks is a key guarantee for the proper functioning of access certification systems, selection of high reliability network products in network design, rational design of network architecture appropriate to 7×24 uninterrupted operation;
2. (a) Technological sophistication and utility, while ensuring that wireless access certification is met, while reflecting the advanced nature of access certification systems, taking into account the current state of application and future trends in system applications and enabling easy extension of functionality;
3. (a) Standard openness, support for network protocols of international common standards and the Portal protocol norms supporting mobile WLAN operations in China, which will help to ensure smooth connectivity with other networks and equipment, as well as future expansion of networks;
4. Flexibility and scalability, allowing networks and equipment to be expanded and upgraded smoothly in line with future business growth and changes, and adjusting network structures and existing equipment to the maximum extent possible during expansion and upgrading;
5. (b) Manageability, centralized monitoring and analysis of network conditions, with statistical analysis and management functions for access users, equipment, networks, traffic etc.;
6. Upgradeability and the need for systems to have upgrading features in response to management needs for future potentials.
IV.Programme narrative
By combining the broad needs of the Wireless Certification Market for Businesses, a company-level Portal Wireless Certification System and wireless network products such as ACs and APs are introduced to maximize the market demand for existing WiFi certifications. Through the harmonization of Portal Wireaucrification series, users can easily form wireless authentication networks that fulfil the multiple functions of WEB certification, information delivery, user administration etc.
4.1Program Top-top
The enterprise wireless certification system consists mainly of mobile terminals (smart phones, tablets, notebooks, etc.), AC controllers, AP, Portal servers, Radius servers and SMS, micro-mail servers.
1. Mobile terminals: users connect to the enterprise WLAN wireless network using mobile terminal devices such as cell phones, tablets and so on;
2. AP: Wireless access points to achieve wireless signal coverage within a given area;
3. AC controller: central control over all AP equipment and establishment of a unified SSID, as required;
4. Portal server: docking with AC devices to achieve the pop-up and wireless authentication process for Portal certification pages, which supports custom design in any web language;
5. Radius system: enables the establishment of a suite and accounts to enable authentication of account password information for online users;
6. SMS server: responsible for sending passwords to cellular users so that they can be Wireless authenticated online by entering a password;
7. (a) Micromail server: responsible for sending validation notices to managers for ease of review by them;
8. Enterprise OA or CRM server: The enterprise ' s employees are certified through the OA account or CRM and require a certification system to be able to real-time account information in the OA server database.
4.2 Programme specialPoints
1) Wireless + Wireless Uniform Access CertificationAll access terminals are authenticated, and both cable and wireless are certified by PORTAL, which is redirected to Portal certification page when the user connects to the network when a request for access to http is launched;
2) Authentication Page Customisation
Both certification pages/accreditation success page can be customized to support any language of web design and achieve good page performance; the certificate page and the certification success page are free to design the hosting of corporate advocacy and notification messages;
3) based on the AC setting of two different SSIDs, corporate SSIDs are hidden and only employees can access the Internet by way of an AD domain account; visitors to SSID are open and business visitors can access the Internet through a text message or a key login certification;
4) achieves different certification pages for staff and visitors based on the different Portal authentication page URL parameters of AC for different SSIDs;
5) Page Jump
When visitors complete SMS certification or staff members complete certification, they automatically jump to the Enterprise Officer Network or other designated sites to promote and enhance branding;
6) Multiple ways of authentication
In addition to SMS certification, OA account authentication, Portal can also provide a key login and other authentication methods that offer more options for Wireless Certification of an enterprise;
Support for corporate visitor accreditation, such as mail validation, scanning certification and administrative clearance of registered temporary Internet users;
7. Classification of Internet Access Strategies
(b) Corporate visitors authenticate the Internet by text messages via mobile phones, and business employees certify the Internet by entering OA accounts. The two categories of users adopt different access strategies that can differentiate and limit their progress in terms of speed and length of access;
8) User management
A strong user management function that allows for the setting up of uploads, download speed and online duration of users who authenticate text messages on their cell phones, as well as the management of wireless access user speed, online user numbers, Internet access time, etc.;
9) Visitors' Scanning Certification
Assisting in scanning: the best way to authenticate visitors online
Visitors are authorized on a one-to-one basis, using a swathe between visitors and interviewees. This applies to temporary visitors from companies with high network security requirements. When visitors enter the cyberspace, they need to scan and authorize them before they can use the network.
Advantages of this authentication method:
1. One-on-one certification authority to strengthen enterprise audit retrospectives of visitors and interviewees;
2. Users are allowed to use only within the prescribed authorized time.
10) Support for Mail Authentication
Mail authentication is used in environments that do not facilitate the use of SMS certification, such as foreign visitors or a larger number of visitors, where the introduction of SMS can lead to higher costs and technology.
Process for mail authentication:
1. Connect the user to WIFI and pop up PORTAL pages;
2. On the Portal page, users enter information specified by the administrator such as name, unit and their own email address, click to get a authentication code and apply for access to passwords;
3. After user application, the system transmits the user ' s request to the administrator via the micro-mail service, pending clearance;
4. The administrator receives information on the cell phone micro-mail, clicks on the information, i.e. entering the audit page, viewing and checking it, receiving clearances, opening accounts automatically and sending mail to users, informing them of user account passwords, usage times etc., receiving mail, reconnecting with WIFI according to its contents, and login on to the Internet using account numbers and passwords;
5. The system can open a default package or be assigned by the administrator at the time of review, generating a short-duration package based on the length of the package and after expiry, users need to reapprovise the application and access the Internet after clearance.
Micromail verification requirements: Businesses need to open a micro-mail service.
11) Support for Dynamic Password Authentication
12) Support for Secondary Development
Portal and Radius systems provide secondary development interfaces that allow easy access to the various systems and databases available in the enterprises and enable more business functionality.