The system is installed and the equipment is on board, but there are compliance risks inherent in the authentication process.
The public security rarely cares about you when checking WiFi's actual name.“How many ways have you supported it?”The real concern is:
-
Is this authentication methodReal verifiable
-
Is it suitable for actual hotel occupancy?
-
Is it possible to complete a closed link with the log, export controls?
So, the WiFi authenticated was in compliance.The first step is not to select the device, but to design the authentication method.。
i. Hotel WiFi authenticated, must be distinguished first“Residents, employees, outsiders”
WiFi's real name certification must first be resolved in the hotel network environment.Identity boundary issues。
If a WiFi real name certification programme is available, it is not possible to distinguish between the following three groups of people:
-
Residents
-
Hotel staff
-
Non-resident external staff
From the public security perspective, then, there are natural regulatory gaps in this system.
NATSHEL_BRAND, in the WiFi Real name certification programme for hotels, explicitly requires:
-
Different identities, different authentication strategies
-
Different authentication methods, corresponding to different areas of competence
-
All identities are eventually controlled in the export.
II. Core principles of WiFi authenticating: based on the fact of residence
In the hotel scene, public security has a basic awareness of WiFi ' s actual name:
Residents have completed their physical registration at the front desk, and WiFi authenticated must be based on this fact rather than duplicated data.
Therefore, the most secure and least risky way of authenticating WiFi residents must be around“Room + Info”Expand.
The actual accessibility of residential accreditation includes:
-
Room number + mobile phone number authentication
-
Room number + identification of the back of the document
-
PMS System Auto Generates Authentication Conditions
Common features of such approaches are:
-
Identified sources
-
Checking with front desk registration information
-
You don't have to fill in at random.
III. Ext. WiFi authenticated, must be designed separately and not use domestic logic
In foreign hotels, if WiFi's authenticated, it still supports only:
-
Domestic cell phone number
-
Chinese Page
-
Text Authentication
The police are not allowed to use the police force.It must be judged impossible to implement the programme。
NatShell has adopted the following logic in its actual name certification of a foreign hotel WiFi:
-
Use of independent authentication for outside guests
-
Do not force domestic cell numbers
-
Certification based on passport information and room number
The following are the means of authenticating the names of frequent guests WiFi:
-
Room number + the last few passports
-
Direct matching of registered passport information in PMS
Also, it will be associated with the multilingual certification page to ensure that outside visitors can independently complete WiFi real name authentication.
IV. SMS authentication is not the core, but a supplementary tool
In many hotel projects, WiFi's actual name certification was wrongly understood to mean:
“Just text-writing certification is required.”
The government has been trying to protect the public security sector.SMS certification does not prove a connection.and can only be used as a support.
NatShell, in the WiFi real name authentication design for hotels, specifies the boundaries of use of SMS certification:
-
Useable for residential identification
-
Do Not As the only Authentication Basis
-
Must use the number of the house, and the combination of the info.
Thus, the model of true compliance is:
SMS validation + stay in message check instead of a separate release.
V. Multiple certification combinations are required for the hotel WiFi authenticated
The structure of the hotel population varies greatly:
-
Commercial hotels
-
A chain hotel.
-
Foreign hotels
-
Conference-type hotels
If WiFi authenticated only supports a single approach, it is bound to be operationalized“People are bypassing.”。
NatShell WiFi Supported:
-
Enable multiple authentications in parallel
-
A flexible mix of hotel strategies.
-
Automatched by Role
For example:
-
Regular Resident: Room number + Cell phone number
-
Foreign guests: Room number + the last few passports
-
Staff: Work Number / Account Certification
Certification is conducted in a variety of ways, but export controls are always uniform.
All forms of authentication, and ultimately must be returned“Export controls”
Regardless of how flexible the WiFi authenticated frontend is designed, one principle cannot be changed:
Successful certification requires a direct decision on whether to get out of the network.
NatShell Hotel WiFi Real Name Certification Program:
-
If AC supports external Portal, it is directly controlled by AC
-
If not supported, through NATSHEL_AUTH_GATEWAY under the Uniform Export Control
Any form of authentication must ultimately satisfy:
-
No access to the extranet without authentication
-
The authentication is disabled and the network is off immediately.
-
The logbook is actually from export traffic.
The accreditation process and the log must be one-to-one.
The following problems are common in the public security inspections:
“What's your record of Internet access?”
If WiFi is unable to do this:
-
Authentication log corresponds to IP
-
Authentication record corresponds to MAC
-
Authentication record corresponds to time period
Even if the authentication process is complicated, it's considered to beNon-retroactive scheme。
NATHHEL_BRAND in the design of the system, it is mandatory to:
-
Each authentication produces a unique identification
-
Bind with Internet Session Log
-
Link to the five-dollar group log
Hotel WiFi is not authenticated“Front desk operating system”
A common error was to shift the complexity of WiFi authenticated.
The principles of NatShell in the hotel project are very clear:
-
Do not add front-office operating steps
-
Not relying on manual judgment.
-
No artificial release.
Enable WiFi to authenticate at the backstage through PMS docking and system automation, instead of relying on front desk“Cooperation”。
IX. A uniform certification strategy is a prerequisite for the replicable nature of hotel groups
For hotel chains and group clients, WiFi authenticated if:
-
Every shop has a logic.
-
A set of practices per city
Then the risk will be infinity.
NatShell Hotel WiFi Real Name Certification Program, which supports:
-
Harmonized authentication strategy template
-
Multi-storey Quick Copy
-
Different hotel deployments at different scales
Strategy is uniform and flexible.
The authentication method is wrong, and all the input behind it can be wasted.
Among the hotel WiFi real name certification projects, the most common failure is not equipment but:
The certification method was not designed in the public security logic from the outset.
Only in the form of certification:
-
Fit to occupancy
-
Cover the outside guest scene
-
It's a closed loop with logs and exits.
WiFi's real name certification is what a hotel is.Basic compliance capacity。