Access authentication system

1. An access authentication system for authenticating access to a first wireless local area network (W-LAN), the operator of which administers a visitor authentication, authorization and accounting (VAAA) server, wherein:

a user requesting visiting access to the first W-LAN, and having a mobile telephone, a valid cellular mobile account for the mobile telephone, a portable computing device with a browser, and a registration with a second W-LAN operator that administers a home authentication, authorization and accounting (HAAA) server, conveys to the VAAA server, by user intervention, identity information sufficient to enable said VAAA server to communicate with said HAAA server so as to authenticate the proposed connection;

said HAAA issues a personal identification number (PIN);

the PIN is encoded and forwarded to the user's mobile telephone and transferred to the browser to authenticate the requested visiting access to the W-LAN;

the cost of such access is billed to the user's cellular mobile account; and

the requested access is achieved via the user's browser.

2. A system according to claim 1 , wherein by the portable computing device conveys the identity information to the VAAA server independent of the mobile telephone.

3. A system according to claim 2 wherein the transfer of the PIN to the browser is effected manually by the user.

4. A system according to claim 2 wherein the portable computing device is coupled to the mobile telephone, and the transfer of the PIN to the browser is effected automatically by software supported by the portable computing device.

5. The system according to claim 4 , wherein the portable computing device is coupled to the mobile telephone via a wireless link.

6. A system according to claim 2 , wherein the PIN issued by the HAAA is encoded and forwarded to the user's mobile telephone by means of a short message service center.

7. A system according to claim 2 , wherein the user employs the browser to convey said identity information, via the first W-LAN, to the VAAA.

8. A system according to claim 2 , wherein the PIN is combined with masking information.

9. A system according to claim 8 wherein said masking information is randomly derived.

10. A system according to claim 2 , wherein the user calls the VAAA on the mobile telephone.

11. A system according to claim 10 wherein the telephone call from said user is routed to the HAAA through a premium rate call unit.

12. A method for obtaining access to a first wireless local area network (W-LAN), the method comprising the acts of:

transmitting, by a mobile telephone to a visitor authentication, authorization and accounting (VAAA) server, a request for access to the first W-LAN , the request including identity information of a home authentication, authorization and accounting (HAAA) server;

receiving, by the mobile telephone from the HAAA server, a personal identification number (PIN);

transferring the PIN to a browser of a portable computing device;

authenticating the portable computing device using the PIN;

accessing, by the portable computing device, the first W-LAN after the portable computing device has been authenticated, wherein the access by the portable computing device to the first W-LAN is performed independent of the mobile telephone and cost of the access is billed to a mobile account associated with the mobile telephone.

13. The method of claim 12 , wherein the PIN is transferred to the browser by a user of the mobile telephone and portable computing device.

14. The method of claim 12 , wherein the portable computing device is coupled to the mobile telephone, and the transfer of the PIN to the browser is effected automatically via a wireless link.

15. The method of claim 12 , wherein the mobile telephone receives the PIN from the HAAA server via a short message service center.

16. The method of claim 12 , further comprising the act of the mobile telephone calling the VAAA.

17. The method of claim 12 , further comprising the acts of:

receiving, by the HAAA server of a second W-LAN from the VAAA server of the first W-LAN, the request for access to the first W-LAN;

establishing, by the second W-LAN, a W-LAN account for a user of the mobile telephone;

generating, by the HAAA server, the PIN; and

transmitting, by the HAAA server, the PIN to the user.

18. An access authentication system, comprising:

a first wireless local area network (W-LAN) that includes a visitor authentication, authorization and accounting (VAAA) server;

a second W-LAN that includes a home authentication, authorization and accounting (HAAA) server;

a mobile telephone, a valid cellular mobile account for the mobile telephone;

a portable computing device with a browser;

wherein when access to the first W-LAN by the browser of the portable computing device is desired,

the system is arranged to convey identity information sufficient to enable said VAAA server to communicate with said HAAA server so as to authenticate the access by the portable computing device to the first W-LAN,

the HAAA is arranged to issue a personal identification number (PIN), encode and forward the PIN to the mobile telephone, by way of the second W-LAN,

the system is arranged to transfer the PIN to the browser, which authenticates the portable computing device's access to the second W-LAN, and

the system is arranged to bill the cost of access by the portable computing device to the second W-LAN to the cellular mobile account,

wherein the access to the first W-LAN by the browser is performed independent of the mobile telephone.

19. A system according to claim 18 , wherein the PIN issued by the HAAA is encoded and forwarded to the mobile telephone by a short message service center.

20. A system according to claim 18 , wherein the browser conveys said identity information, via the first W-LAN, to the VAAA.

21. A system according to claim 18 , wherein the user calls the VAAA on the mobile telephone.

22. A system according to claim 21 , wherein the telephone call from said user is routed to the HAAA through a premium rate call unit.