Network access device, network connection establishing method, and mobile communication system using the same

1. A network access device, for use in a mobile communication system, comprising:

a receiving module, for receiving a packet, the packet comprising a source address and a destination address;

a parsing module connected to the receiving module, for parsing the packet to retrieve the source address and the destination address of the packet;

a storage module for saving notification messages indicating that the source of the packet has been authenticated from an authentication server, wherein each of the notification messages comprises a media access control address of the authenticated source of the packet;

a determining module for comparing the source address of the packet with the media access control addresses from the notification messages in the storage module to determine whether the source of the packet has been authenticated; and

a sending module, for sending the packet to a destination corresponding to the destination address of the packet if the source of the packet has been authenticated.

2. The network access device of claim 1 , wherein the determining module further determines whether the packet is a hypertext transfer protocol (HTTP) packet if the source of the packet has not been authenticated.

3. The network access device of claim 1 , wherein the determining module further determines whether a destination of the packet is the authentication server if the source of the packet has not been authenticated, and the sending module sends the packet to the authentication server when the destination of the packet is the authentication server.

4. The network access device of claim 1 , wherein the determining module further determines whether the packet is from the authentication server if the source of the packet has not been authenticated.

5. The network access device of claim 4 , further comprising a redirecting module for establishing a connection between the source of the packet and the authentication server, for authentication of the source of the packet by the authentication server.

6. A mobile communication system, for connecting a mobile terminal to a network, comprising:

the mobile terminal;

a plurality of network access devices connected to the network, for determining whether the mobile terminal communicating therewith has been authenticated; and

an authentication server connected to the plurality of network access devices, for authenticating the mobile terminal via one of the plurality of network access devices and sending a first notification message to the one of the plurality of the network access devices and a second notification message to others of the plurality of network access devices after authentication is finished, wherein the second notification message comprises a media access control (MAC) address of the mobile terminal;

wherein the others of the plurality of network access devices save the second notification messages from the authentication server and compare the MAC addresses in the second notification messages with the MAC address of the mobile terminal to determine whether the mobile terminal has been authenticated and connect the mobile terminal to the network if the mobile terminal has been authenticated.

7. The mobile communication system of claim 6 , wherein the first notification message comprises an address of the one of the plurality of network access devices.

8. The mobile communication system of claim 7 , wherein each of the plurality of network access devices comprises:

a storage module, for saving notification messages sent by the authentication server;

a receiving module, for receiving a packet, the packet comprising a source address and a destination address;

a parsing module connected to the receiving module, for parsing the packet to retrieve the source address and the destination address of the packet;

a determining module connected to the storage module and the parsing module, for determining whether a source of the packet has been authenticated; and

a sending module, for sending the packet to a destination corresponding to the destination address if the source of the packet has been authenticated.

9. The mobile communication system of claim 8 , wherein the determining module compares the source address of the packet with the addresses of the notification messages in the storage module to determine whether the source of the packet has been authenticated.

10. The mobile communication system of claim 8 , wherein the determining module further determines whether the packet is a hypertext transfer protocol (HTTP) packet if the source of the packet has not been authenticated.

11. The mobile communication system of claim 8 , wherein the determining module further determines whether a destination of the packet is the authentication server if the source of the packet has not been authenticated, and the sending module sends the packet to the authentication server if the destination of the packet is the authentication server.

12. The mobile communication system of claim 8 , wherein the determining module further determines whether the packet is from the authentication server if the source of the packet has not been authenticated.

13. The mobile communication system of claim 12 , wherein each of the plurality of network access devices further comprises a redirecting module for establishing a connection between the source of the packet and the authentication server, for authentication of the source of the packet by the authentication server if the packet is not from the authentication server.

14. A network connection establishing method, for use in a mobile communication system, the mobile communication system comprising a mobile terminal, a plurality of network access devices, and an authentication server, the plurality of network access devices saving notification messages sent by the authentication server, comprising:

receiving and parsing a packet to retrieve a source address of the packet by one of the plurality of network access devices;

determining by the one of the plurality of network access devices whether a source of the packet assuming as the mobile terminal has been authenticated;

determining by the one of the plurality of network access devices whether the packet is from the authentication server if the source of the packet has not been authenticated;

establishing a connection between the source of the packet and the authentication server by the one of the plurality of network access devices, for authentication of the source of the packet by the authentication server if the packet is not from the authentication server;

sending a first notification message to the one of the plurality of network access devices and a second notification message to others of the plurality of network access devices by the authentication server after authentication is finished;

communicating the mobile terminal with the network via the one of the plurality of network access devices;

allowing the mobile terminal to roam to a coverage area of another of the plurality of the network access devices;

determining by the another of the plurality of the network access devices whether the mobile terminal has been authenticated; and

establishing a connection between the mobile terminal and the network by the another of the plurality of the network access devices if the mobile terminal has been authenticated according to the second notification message from the authentication server.

15. The network connection establishing method of claim 14 , wherein the first notification message comprises an address of the one of the plurality of network access device, the second notification message comprises a media access control address of the mobile terminal, and the step of determining whether the source of the packet has been authenticated comprises comparing the source address of the packet with the addresses of the notification messages.

16. The network connection establishing method of claim 14 , further comprising:

saving the packet if the packet is from the authentication server.

17. The network connection establishing method of claim 14 , further comprising steps of:

determining whether a destination of the packet is the authentication server if the source of the packet has not been authenticated; and

sending the packet to the authentication server if the destination of the packet is the authentication server.

18. The network connection establishing method of claim 14 , further comprising steps of:

determining whether the packet is a hypertext transfer protocol (HTTP) packet if the source of the packet has not been authenticated.