RESTRICTED CERTIFICATE ENROLLMENT FOR UNKNOWN DEVICES IN HOTSPOT NETWORKS

摘要

A network access system, for example, a network hotspot 110, may be used to allow a mobile network access device 180, e.g., a smartphone or WiFi-only device, to specify network access standards and / Or device identification data. The network access standard specification may be provided by the mobile network access device 180 to the online signing server 130, OSU, via the EKU key purpose field of the PKCS10 certificate signing request. The device identification data may be provided to the OSU 130 via the subject field of the signature request. The OSU 130 may require that the device identification data and the device identification data provided by the mobile network access device 180 be the same before the mobile network access device 180 requests the signed network access certificate.