Two New Items on the Opening Acceptance Form: Real-Name Authentication and Internet Logs — What Counts as Compliance

As renovation wraps up for a new store, the operations manager ticks off items on the opening acceptance checklist. On the last page, two unfamiliar lines appear: Wi‑Fi real-name authentication and internet access log retention, marked “on-site verification required”. This raises a key question: what exactly meets the standard? Is a simple captive portal enough, or must records be retrieved on the spot?

I. Why These Two Items Are Added

These requirements are not an arbitrary addition from headquarters. For public venues offering Wi‑Fi access, Decree No.176 mandates that operators record and retain user registration data and internet access logs.
Inspections include online audits, remote vulnerability scanning, penetration testing and on-site verification. By adding authentication and logging to the acceptance checklist, compliance becomes a prerequisite for opening, rather than a post-launch afterthought.

Store managers need to understand the core requirement before signing off: the checklist does not ask whether Wi‑Fi is available. It verifies whether user identities and access records can be produced upon request. Signing the form means the store can account for every connected user and every online session. Failure to pass acceptance may lead to delayed opening or non-compliance records that affect all future spot checks, so these items cannot be marked off casually.

II. Real-Name Authentication: Link Every Customer to a Traceable Identity

The compliance standard for real-name authentication is straightforward: every customer connecting to Wi‑Fi must complete valid verification, and identities must be traceable.

The AINOPOL Dream Gateway acts as the authentication egress. A captive portal pops up automatically once users join the Wi‑Fi network. Customers may verify via SMS code, document verification (including passports and Mainland Travel Permits for Hong Kong, Macao and Taiwan residents), WeChat and other supported methods. After approval, the user identity is bound to the network session, creating a clear record of who connected, from which terminal and at what time. The Dream Gateway comes with built-in compliant SMS authentication capability, removing the need for separate qualification applications.

A portal page alone does not equal compliance. The system must retrieve the corresponding network session by mobile number or ID document. Stores that deploy a portal without valid verification, allowing users to submit fake information, will still fail inspection. Many outlets make this mistake: they treat the portal as a formality, only to find no matching records when auditors look up a specific user.

III. Internet Access Logs: Complete Fields and Sufficient Retention Period

The criteria for log retention are more specific. The Dream Gateway stores logs locally on the hard drive with a rolling retention period of no less than 180 days. Mandatory fields include mobile number / document ID, terminal MAC address, IP address, login timestamp, visited URL and uplink/downlink traffic.

Missing any of these six fields may result in a non-compliance ruling. For example, logs without URLs cannot show which websites users accessed; records with IP addresses but no MAC addresses fail to identify individual devices when multiple terminals share the same connection; missing traffic data leaves incomplete activity trails. The underlying logic for both checklist items is consistent: identities must map to real people, and online behaviors must map to complete records.

IV. One-Click Export of Compliance Reports for On-Site Acceptance

Even with stored logs, stores may still fail if records cannot be exported. The Dream Gateway supports searches by mobile number or time window and one-click generation of standard compliance reports. If auditors request access records for a certain period or a specific user, the full list can be ready within minutes, without relying on technical staff or complex database queries.

The simple benchmark for store managers: the store passes acceptance if a full-field report covering the 180-day retention window with traceable identities can be pulled up on site. Printing the report and attaching it to the acceptance form gives full confidence before signing.

The two new checklist items essentially ask one question: can your Wi‑Fi system answer who connected, at what time, and what websites were visited? Built on all‑optical infrastructure, audio & video engine and security shielding, AINOPOL delivers the integrated “connectivity & security” solution. Real-name authentication enables identity tracing, and log retention captures online behaviors. The Dream Gateway consolidates both functions into one-click exportable reports, so the store passes acceptance smoothly.

FAQ

Q: Does exporting reports require dedicated technical personnel?
A: Standard compliance reports can be exported with one click after searching by mobile number or time range. No full-time IT staff is required; store managers can complete the operation on-site during acceptance.

Q: Can authentication methods be changed after acceptance?
A: Yes. Authentication rules are configured on the centralized management backend by headquarters or individual stores. Multiple verification modes can run in parallel. Adjustments do not affect existing logs, which continue to be retained under the rolling policy.