a mechanism to improve the security and access control over a network , such as a wireless local area network , that takes advantage of web browser interactions without requiring explicit separate communication session between a hot spot network and a service provider network . the method comprises receiving a request to access the wlan from a mobile terminal / client disposed within a coverage area of the wlan . the access point of the network associates a session id and randomized number with an identifier associated with the mt and stores data mapping the session id to the identifier of the mt and randomized number . the local server transmits an authentication request in the form of a web page , which includes the session id and randomized number , to the mt . the ap receives from the mt a digitally signed authentication message , a parameter list containing user credential information , session id , and randomized number concerning the mt , the authentication message being digitally signed using the session id and randomized number together with the parameter list . the ap correlates the session id and parameter list received from the mt and , using the stored mapping data , generates a local digital signature for comparison with the received digitally signed authentication message for controlling access of the mt to the wlan .