CN110213285A - A kind of method and system of campus network resource share - Google Patents

Abstract

The invention belongs to the technical field of campus network shared access, and discloses a method and system for sharing campus network resources. After the network authentication client passes the authentication of the campus network, it obtains a legal IP address and establishes a communication link with the campus network; The data packet enters the device from the Ethernet interface, and the device forwards the data through the CPU, and sends the data packet from the Ethernet port to the Wifi interface; the device connected to the campus network is connected to the campus network through the Wifi interface. Based on the wired access port, the invention converts wired network signals into wireless network signals through the campus network resource sharing method and system, so that one account can be used by multiple devices to access the campus network at the same time. The system is based on an embedded system, with flexible deployment and low cost.

Description

A method and system for sharing campus network resources

technical field

The invention belongs to the technical field of campus network shared access, and in particular relates to a method and system for sharing campus network resources.

Background technique

Currently, the closest prior art:

As a public network, the campus network needs to be authenticated for access terminals, and only legitimate users are authorized to access the campus network. The campus network only allows one device to be online for student accounts. When other devices using this account go online, the current device will be forced to go offline. Due to the needs of scientific research, social interaction, entertainment, etc., in addition to computers and mobile phones, every college student may have other network access terminal products, such as tablet computers, e-readers, smart watches, etc. Therefore, one account, multiple devices at the same time There is a large demand for accessing the campus network.

At present, there are two access methods of campus network, wired and wireless. Because wireless access is not bound by network cables and is easy to use, it is favored by everyone. However, inside the building, the wireless network signal is affected by the building structure. To achieve full coverage of the signal, it is necessary to deploy a large number of wireless network access points, which is costly. With this in mind, some wired access ports will also be distributed throughout the building. However, when the demand for network access increases, it is inconvenient to expand the number of wired access ports. It involves wiring and installing switches, which is costly and inflexible.

In summary, the problems in the prior art are:

(1) The topology of the wired network needs to be rewired and installed with switches.

(2) Deployment of new wireless network access points cannot utilize existing wired network ports.

(3) Network devices that are unable to run the campus network authentication client or perform network authentication cannot access the campus network.

The difficulty of solving the above technical problems:

At present, there is no complete solution that integrates functions such as campus network authentication and wifi launch hotspot into a low-cost embedded system.

The significance of solving the above technical problems:

(1) Quickly expand the coverage of campus network wireless access signals without rewiring or installing switches.

(2) Enable devices that are not capable of campus network authentication to access the campus network.

(3) Each college student can use his own account to enable his multiple devices to access the campus network at the same time.

Contents of the invention

Aiming at the problems existing in the prior art, the present invention provides a method and system for sharing campus network resources.

The present invention is achieved in this way, a method for sharing campus network resources, the method for sharing campus network resources includes:

After the network authentication client passes the campus network authentication, it obtains a legal IP address and establishes a communication link with the campus network;

(1) The network authentication client sends an authentication request message to the authentication request agent switch, and the authentication request message contains the user name and password to be authenticated.

(2) The authentication request agent switch forwards this packet to the authentication server. At the same time, the authentication request proxy switch blocks the network message communication port between the network authentication client and the campus network.

(3) The authentication server compares the user name and password contained in the authentication message with the database information.

(4) When the user name and password in the message exist in the database, it means that the user name and password are legal. Therefore, the authentication server sends information including the IP address to be assigned to the network authentication client to the authentication request proxy switch.

(5) After receiving the information, the authentication request proxy switch opens the port blocked in step (2).

(6) Authentication request The proxy switch sends the information to the network authentication client through the opened port. So far, the network authentication client has established a communication link with the campus network.

For data packets sent by devices connected to the campus network through the Wifi interface, the source IP address of the data packet is converted from the IP address corresponding to the network device connected to the Wifi interface to the campus network obtained by the network authentication client through the internal source address translation of the system. IP address, in order to complete the transfer of data from the device connected to the wifi to the campus network.

The data packets entering the system through the campus network, through the internal destination address translation of the system, convert the destination IP address of the data packet from the campus network IP address obtained by the network authentication client to the corresponding IP address of the network device connected to the wifi interface, In this way, the transfer of data from the campus network to the devices connected to the wifi is completed.

Another object of the present invention is to provide a terminal equipped with a server implementing the method for sharing campus network resources.

Another object of the present invention is to provide a computer-readable storage medium, including instructions, which, when run on a computer, cause the computer to execute the method for sharing campus network resources

Another object of the present invention is to provide a campus network resource sharing system that implements the method for campus network resource sharing, and the campus network resource sharing system includes:

Network access authentication module, dynamic host setting protocol module, domain name resolution module, wifi hotspot establishment and data encryption module, data forwarding module.

The dynamic host configuration protocol module, on the one hand, provides client services, and provides the network access authentication module with the ability to obtain an IP address from the campus network. On the other hand, it provides server-side services and assigns IP addresses to network devices connected to the wifi interface.

The domain name resolution module provides the function of translating network domain names into IP addresses.

The establishment of wifi hotspot and the data encryption module are completed through the hostapd program. hostapd simulates the wifi interface of the system as a wireless access point (AP, Access Point), so that other network devices can access the system through this AP. At the same time, the hostapd program supports WEP/WPA/WPA-2 encryption security mode, and supports AES/TKIP password encryption type. The above functions are implemented through a configuration file placed in the /etc directory. When the hostapd program starts running, it will read the content of this configuration file. in,

(1) interface=wlan0: Indicates the name of the network device interface that needs to be simulated as an AP

(2) ssid=test: Indicates the name of the service set identifier (SSID) broadcast by the AP to the outside world

(3) wpa=2: It only supports WPA2. wpa=1 means WPA is supported, and wpa=3 means both are supported.

(4) wpa_passphrase=123456789a: indicates the plaintext of the password before encryption.

(5) wpa_key_mgmt=WPA-PSK: indicates the encryption key algorithm. Possible choices are WPA-PSK, WPA-EAP or both. PSK is a pre-shared key. EAP is Extensible Authentication Protocol, a framework that supports many different authentication methods.

(6) wpa_pairwise=CCMP: Indicates that the key to control and support encrypted data can use CCMP, TKIP or both. CCMP is stronger than TKIP.

The data forwarding module is divided into an application layer part and an operating system kernel layer part. The role of the application layer is to configure data port forwarding rules, and the configured rules are passed to the operating system kernel layer of the data forwarding module through the system call interface. Then, operate the hardware device through the operating system to complete the data forwarding function of the system's internal Ethernet interface and wifi interface.

In summary, the advantages and positive effects of the present invention are:

Based on the wired access port, the invention converts wired network signals into wireless network signals through the campus network resource sharing method and system, so that one account can be used by multiple devices to access the campus network at the same time. The system is based on an embedded system, with flexible deployment and low cost.

The comparison with the indicators of the existing system is as follows:

Description of drawings

FIG. 1 is a schematic diagram of a campus network resource sharing system provided by an embodiment of the present invention.

Fig. 2 is a schematic diagram of the internal structure of the campus network resource sharing system provided by the embodiment of the present invention.

Fig. 3 is the effect diagram that the Ethernet port provided by the embodiment of the present invention obtains the IP address of the campus network; the Wifi interface is set to a fixed private IP address.

Fig. 4 is an effect diagram provided by the embodiment of the present invention when five network devices are connected to the system at the same time, and each network device is assigned a private IP address.

Detailed ways

In order to make the object, technical solution and advantages of the present invention more clear, the present invention will be further described in detail below in conjunction with the examples. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

The existing technology does not convert wired network signals into wireless network signals based on wired access ports, so that one account can be used by multiple devices to access the campus network at the same time. As a result, the deployment of the existing network access system is inflexible and the cost is high.

In order to solve the above problems, the present invention will be described in detail below in conjunction with the accompanying drawings.

The method for sharing campus network resources provided by the embodiment of the present invention includes: after the network authentication client passes the authentication of the campus network, obtains a legal IP address, and establishes a communication link with the campus network. Campus network data packets enter the device through the Ethernet interface, and the device internally transmits data through the CPU, and sends the data packets from the Ethernet port to the Wifi interface, and other devices that need to access the campus network access the campus network through this Wifi interface.

As shown in Figures 1-2, the campus network resource sharing system provided by the embodiment of the present invention includes:

Network access authentication module, dynamic host setting protocol module, domain name resolution module, wifi hotspot establishment and data encryption module, data forwarding module.

Network access authentication module, dynamic host setting protocol module, domain name resolution module, wifi hotspot establishment and data encryption module, data forwarding module.

The dynamic host configuration protocol module, on the one hand, provides client services, and provides the network access authentication module with the ability to obtain an IP address from the campus network. On the other hand, it provides server-side services and assigns IP addresses to network devices connected to the wifi interface.

The domain name resolution module provides the function of translating network domain names into IP addresses.

The establishment of wifi hotspot and the data encryption module are completed through the hostapd program. hostapd simulates the wifi interface of the system as a wireless access point (AP, Access Point), so that other network devices can access the system through this AP. At the same time, the hostapd program supports WEP/WPA/WPA-2 encryption security mode, and supports AES/TKIP password encryption type. The above functions are implemented through a configuration file placed in the /etc directory. When the hostapd program starts running, it will read the content of this configuration file. in,

(1) interface=wlan0: Indicates the name of the network device interface that needs to be simulated as an AP

(2) ssid=test: Indicates the service set identifier (SSID) name broadcast by the AP to the outside world

(3) wpa=2: It only supports WPA2. wpa=1 means WPA is supported, and wpa=3 means both are supported.

(4) wpa_passphrase=123456789a: indicates the plaintext of the password before encryption.

(5) wpa_key_mgmt=WPA-PSK: indicates the encryption key algorithm. Possible choices are WPA-PSK, WPA-EAP or both. PSK is a pre-shared key. EAP is Extensible Authentication Protocol, a framework that supports many different authentication methods.

(6) wpa_pairwise=CCMP: Indicates that the key to control and support encrypted data can use CCMP, TKIP or both. CCMP is stronger than TKIP.

The data forwarding module is divided into an application layer part and an operating system kernel layer part. The role of the application layer is to configure data port forwarding rules, and the configured rules are passed to the operating system kernel layer of the data forwarding module through the system call interface. Then, operate the hardware device through the operating system to complete the data forwarding function of the system's internal Ethernet interface and wifi interface.

The invention enables one campus network account to be used by multiple devices to access the campus network at the same time.

The invention provides a way to access the campus network for devices without a display interface or unable to run authentication clients.

The method for sharing campus network resources provided by the embodiments of the present invention includes:

After the network authentication client passes the campus network authentication, it obtains a legal IP address and establishes a communication link with the campus network;

(1) The network authentication client sends an authentication request message to the authentication request agent switch, and the authentication request message contains the user name and password to be authenticated.

(2) The authentication request agent switch forwards this packet to the authentication server. At the same time, the authentication request proxy switch blocks the network message communication port between the network authentication client and the campus network.

(3) The authentication server compares the user name and password contained in the authentication message with the database information.

(4) When the user name and password in the message exist in the database, it means that the user name and password are legal. Therefore, the authentication server sends information including the IP address to be assigned to the network authentication client to the authentication request proxy switch.

(5) After receiving the information, the authentication request proxy switch opens the previously blocked port.

(6) Authentication request The proxy switch sends the information to the network authentication client through the opened port. So far, the network authentication client has established a communication link with the campus network.

For data packets sent by devices connected to the campus network through the Wifi interface, the source IP address of the data packet is converted from the IP address corresponding to the network device connected to the Wifi interface to the campus network obtained by the network authentication client through the internal source address translation of the system. IP address, in order to complete the transfer of data from the device connected to the wifi to the campus network.

The data packets entering the system through the campus network, through the internal destination address translation of the system, convert the destination IP address of the data packet from the campus network IP address obtained by the network authentication client to the corresponding IP address of the network device connected to the wifi interface, In this way, the transfer of data from the campus network to the devices connected to the wifi is completed.

Further description will be made below in conjunction with the manufacturing steps of the system of the present invention.

The manufacturing steps of the system of the present invention are as follows:

(1) On the 32bit Ubuntu 16.04 system, install the Buildroot tool software.

(2) Put the system software packages, u-boot software, and Linux kernel code into the Buildroot software directory.

(3) Compile the software code in (2) through a cross compiler to form a target machine burning file.

(4) Burn the files of the target machine into the Flash memory device on the BeagleBone Black circuit board.

The present invention will be further described below in combination with the implementation effects.

Implementation effect of the present invention has:

As shown in Figure 3, the Ethernet port obtains the IP address of the campus network. The Wifi interface is set to a fixed private IP address.

As shown in Figure 4, five network devices are connected to the system at the same time, and each network device is assigned a private IP address.

The line speed of the Ethernet port is 100Mbps, and the actual speed of the wifi interface can be stabilized at around 30Mbps.

In the above embodiments, all or part of them may be implemented by software, hardware, firmware or any combination thereof. When implemented wholly or partly in the form of a computer program product, said computer program product comprises one or more computer instructions. When the computer program instructions are loaded or executed on the computer, the processes or functions according to the embodiments of the present invention will be generated in whole or in part. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server or data center Transmission to another website site, computer, server or data center by wired (eg coaxial cable, fiber optic, digital subscriber line (DSL) or wireless (eg infrared, wireless, microwave, etc.)). The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media. The available medium may be a magnetic medium (for example, a floppy disk, a hard disk, or a magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, a Solid State Disk (SSD)).

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention should be included in the protection of the present invention. within range.

Claims (7)

1. A method for campus network resource sharing, characterized in that, the method for campus network resource sharing comprises: After the network authentication client passes the campus network authentication, it obtains a legal IP address and establishes a communication link with the campus network; The campus network data packet enters the device from the Ethernet interface, and the device internally transmits the data through the CPU, and sends the data packet from the Ethernet port to the Wifi interface; The devices connected to the campus network are connected to the campus network through the Wifi interface. 2. The method for sharing campus network resources as claimed in claim 1, wherein the network authentication client obtains a legal IP address after passing through the campus network authentication, and establishes a communication link with the campus network, further comprising: (1) The network authentication client initiates an authentication request message to the authentication request agent switch, and the authentication request message includes the user name and password that need to be authenticated; (2) the authentication request agent switch forwards this message to the authentication server; meanwhile, the authentication request agent switch blocks the network message communication port between the network authentication client and the campus network; (3) The authentication server compares the user name and password contained in the authentication message with the database information; (4) When the user name and password in the message exist in the database, the user name and password are legal; the authentication server will include the IP address information to be distributed to the network authentication client, and send it to the authentication request agent switch; (5) After the authentication request proxy switch receives the information, it opens the blocked port in the step (2); (6) The authentication request proxy switch sends the information to the network authentication client through the opened port; the network authentication client establishes a communication link with the campus network. 3. the method for campus network resource sharing as claimed in claim 1, is characterized in that, campus network data packet enters equipment from Ethernet interface, and inside equipment carries out data forwarding by CPU, and data packet is sent to Wifi interface from Ethernet interface , further includes: for the data packet sent by the device connected to the campus network through the Wifi interface, through the internal source address translation of the system, the source IP address of the data packet is converted from the IP address corresponding to the network device connected to the wifi interface to the network authentication client The obtained IP address of the campus network completes the transfer of data from the device connected to the wifi to the campus network. 4. The method for sharing campus network resources as claimed in claim 1, wherein the equipment for accessing the campus network accesses the campus network through a Wifi interface, further comprising: The data packets entering the system through the campus network, through the internal destination address translation of the system, convert the destination IP address of the data packet from the campus network IP address obtained by the network authentication client to the corresponding IP address of the network device connected to the wifi interface, Complete the transfer of data from the campus network to the devices connected to the wifi. 5. A terminal, characterized in that the terminal is equipped with a server implementing the method for sharing campus network resources according to any one of claims 1-4. 6. A computer-readable storage medium, comprising instructions, which, when run on a computer, cause the computer to execute the method for sharing campus network resources according to any one of claims 1-4. 7. A campus network resource sharing system implementing the method for campus network resource sharing described in claim 1, wherein said campus network resource sharing system comprises: Network access authentication module, dynamic host setting protocol module, domain name resolution module, wifi hotspot establishment and data encryption module and data forwarding module; The dynamic host setting protocol module is used to provide client services and provide the network access authentication module with the ability to obtain IP addresses from the campus network; it is also used to provide server-side services and assign IP addresses to network devices connected to the wifi interface; Domain name resolution module, used to translate network domain names into IP addresses; Wifi hotspot establishment and data encryption module, through the hostapd program, the wifi interface of the system is simulated as a wireless access point, and other network devices are connected to the system through this wireless access point; At the same time, the hostapd program supports WEP/WPA/WPA-2 encryption security mode, and supports the password encryption type of AES/TKIP; when the hostapd program is running, it reads the content of the configuration file placed in the /etc directory; The data forwarding module is divided into the application layer part and the operating system kernel layer part; the application layer part is used to configure the data port forwarding rules, and the configured rules are passed to the operating system kernel layer of the data forwarding module through the system call interface; then, through the operation The system operates hardware devices to complete the data forwarding function of the system's internal Ethernet interface and wifi interface.