CN113316141B - Wireless network access method, sharing server and wireless access point - Google Patents
Wireless network access method, sharing server and wireless access point Download PDFInfo
- Publication number
- CN113316141B CN113316141B CN202110557789.0A CN202110557789A CN113316141B CN 113316141 B CN113316141 B CN 113316141B CN 202110557789 A CN202110557789 A CN 202110557789A CN 113316141 B CN113316141 B CN 113316141B
- Authority
- CN
- China
- Prior art keywords
- access point
- wireless access
- terminal
- wireless
- random number
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 35
- 238000004891 communication Methods 0.000 abstract description 9
- 238000010586 diagram Methods 0.000 description 4
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000013475 authorization Methods 0.000 description 1
- 230000007812 deficiency Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/03—Protecting confidentiality, e.g. by encryption
- H04W12/037—Protecting confidentiality, e.g. by encryption of the control plane, e.g. signalling traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/60—Context-dependent security
- H04W12/69—Identity-dependent
- H04W12/73—Access point logical identity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W48/00—Access restriction; Network selection; Access point selection
- H04W48/08—Access restriction or access information delivery, e.g. discovery data delivery
- H04W48/14—Access restriction or access information delivery, e.g. discovery data delivery using user query or user detection
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
Description
技术领域technical field
本公开属于通信技术领域,具体涉及一种无线网络接入方法、共享服务器及无线接入点。The disclosure belongs to the technical field of communication, and in particular relates to a wireless network access method, a shared server and a wireless access point.
背景技术Background technique
随着暗黑客技术的发展,wifi(Wireless-Fidelity,无线网络)被曝光存在重大安全漏洞。该漏洞名为KRACK(Key Reinstallation,密钥重安装攻击),涉及范围非常广,几乎影响全部计算机、手机和路由器等wifi设备,使黑客可以监听到通过接入wifi的网络设备进行的数据通信,窃取用户隐私,并可以劫持用户客户端到一个钓鱼热点上,实现流量劫持、篡改等。它是基于WPA2(wifi Protected Access2,wifi保护访问第二版)保密协议,攻击者会重复使用客户端设备加入wifi网络时提供的一次性密钥,通过这种方法破解接入点与客户端设备之间交换的信息。这有可能导致信用卡、聊天信息和密码泄露。该漏洞的本质采用在于用共享密钥接入网络,特别是在公共wifi中共享密钥是所有的公众都知道的,从而导致无线窃听者都可以对即便是加密的无线信号进行解密。With the development of dark hacking technology, wifi (Wireless-Fidelity, wireless network) has been exposed to have major security loopholes. The vulnerability is called KRACK (Key Reinstallation, key reinstallation attack), which involves a very wide range and affects almost all wifi devices such as computers, mobile phones, and routers, allowing hackers to monitor data communications through network devices connected to wifi. Steal user privacy, and can hijack the user client to a phishing hotspot to realize traffic hijacking, tampering, etc. It is based on the WPA2 (wifi Protected Access2, wifi protected access second edition) confidentiality protocol, the attacker will reuse the one-time key provided by the client device when it joins the wifi network, and use this method to crack the access point and client device information exchanged between. This has the potential to expose credit cards, chat messages, and passwords. The essence of this vulnerability is to use a shared key to access the network, especially in public wifi, the shared key is known to all the public, so that wireless eavesdroppers can decrypt even encrypted wireless signals.
当前几乎每个终端都有自身的归属wifi,或者是家庭、或者是单位等其他可以连接的wifi。但是当终端移动到归属wifi无法覆盖的地方后,则无法获得wifi服务。即便能够搜索到很多的wifi信息也由于没有接入授权,而此时自己的归属wifi也许处于空闲状态。是否可以把wifi采用比较公正的方式互相使用,终端的归属wifi可以对外提供服务,同时,当终端到外地以后,可以安全的接入到别人的wifi中,以提高通信效率,成为当前亟须解决的问题。At present, almost every terminal has its own wifi, or other wifi that can be connected to such as home or work. However, when the terminal moves to a place where the home wifi cannot cover, the wifi service cannot be obtained. Even if you can search a lot of wifi information, because you don't have access authorization, your own wifi may be idle at this time. Whether it is possible to use wifi in a more fair way, so that the terminal's own wifi can provide external services, and at the same time, when the terminal is out of town, it can be safely connected to other people's wifi to improve communication efficiency. The problem.
发明内容Contents of the invention
本公开针对现有技术中存在的上述不足,提供一种无线网络接入方法、共享服务器及无线接入点。Aiming at the above-mentioned deficiencies in the prior art, the present disclosure provides a wireless network access method, a shared server and a wireless access point.
作为本公开的第一个方面,提供一种无线网络接入方法,包括:As a first aspect of the present disclosure, a wireless network access method is provided, including:
接收第一无线接入点发送的认证请求,并获取其中的随机数,所述认证请求为所述第一无线接入点接收到终端发送的连接请求后发送的;receiving an authentication request sent by the first wireless access point, and acquiring a random number therein, where the authentication request is sent by the first wireless access point after receiving the connection request sent by the terminal;
响应于对所述第一无线接入点认证通过,向第二无线接入点发送随机数,所述第二无线接入点为所述终端归属的无线接入点;In response to passing the authentication of the first wireless access point, send a random number to a second wireless access point, where the second wireless access point is the wireless access point to which the terminal belongs;
响应于接收到所述第一无线接入点发送的第一加密结果,且接收到所述第二无线接入点发送的第二加密结果,根据所述第一加密结果和所述第二加密结果确定比较结果;其中,所述第一加密结果为所述终端对所述第一无线接入点发送的随机数加密生成的,所述第二加密结果为所述第二无线接入点对所述随机数加密生成的;In response to receiving the first encryption result sent by the first wireless access point and receiving the second encryption result sent by the second wireless access point, according to the first encryption result and the second encryption The result determines the comparison result; wherein, the first encryption result is generated by the terminal encrypting the random number sent by the first wireless access point, and the second encryption result is generated by the second wireless access point The random number is encrypted and generated;
将所述比较结果发送至所述第一无线接入点,以使所述第一无线接入点根据所述比较结果确定是否允许所述终端接入所述第一无线接入点对应的无线网络。Send the comparison result to the first wireless access point, so that the first wireless access point determines whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result. network.
优选地,所述对所述第一无线接入点认证通过,包括:Preferably, said passing the authentication of said first wireless access point includes:
获取所述认证请求中的无线接入点标识;Obtain the wireless access point identifier in the authentication request;
响应于在本地查询出所述无线接入点标识对应的地址,确定所述第一无线接入点认证通过。In response to finding out the address corresponding to the wireless access point identifier locally, it is determined that the first wireless access point passes the authentication.
作为本公开的第二个方面,提供一种无线网络接入方法,所述方法包括:As a second aspect of the present disclosure, a wireless network access method is provided, the method comprising:
响应于接收到终端发送的连接请求,生成随机数,并向共享服务器发送携带所述随机数的认证请求;In response to receiving the connection request sent by the terminal, generate a random number, and send an authentication request carrying the random number to the shared server;
接收共享服务器发送的比较结果,所述比较结果是比较所述终端对所述随机数加密生成的第一加密结果,与所述终端归属的第二无线接入点对所述随机数加密生成的第二加密结果得到的;receiving the comparison result sent by the sharing server, the comparison result is comparing the first encryption result generated by the terminal encrypting the random number with the result obtained by encrypting the random number generated by the second wireless access point to which the terminal belongs obtained by the second encryption result;
根据所述比较结果确定是否允许所述终端接入本第一无线接入点对应的无线网络。Determine whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result.
优选地,所述根据所述比较结果确定是否允许所述终端接入本第一无线接入点对应的无线网络,包括:Preferably, the determining whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result includes:
响应于确定出所述第一加密结果和所述第二加密结果一致,确定允许所述终端接入本第一无线接入点对应的无线网络。In response to determining that the first encryption result is consistent with the second encryption result, determine to allow the terminal to access the wireless network corresponding to the first wireless access point.
优选地,所述方法还包括:Preferably, the method also includes:
响应于接收到所述共享服务器发送的随机数,利用预设密钥对所述随机数进行加密得到第二加密结果;In response to receiving the random number sent by the shared server, encrypt the random number with a preset key to obtain a second encryption result;
将所述第二加密结果发送至所述共享服务器。Send the second encryption result to the shared server.
作为本公开的第三个方面,提供一种共享服务器,包括:As a third aspect of the present disclosure, a shared server is provided, including:
接收模块,用于接收第一无线接入点发送的认证请求,所述认证请求为所述第一无线接入点接收到终端发送的连接请求后发送的;A receiving module, configured to receive an authentication request sent by the first wireless access point, where the authentication request is sent after the first wireless access point receives the connection request sent by the terminal;
获取模块,用于获取所述认证请求中的随机数;An acquisition module, configured to acquire the random number in the authentication request;
发送模块,用于响应于对所述第一无线接入点认证通过,向第二无线接入点发送随机数,所述第二无线接入点为所述终端归属的无线接入点;A sending module, configured to send a random number to a second wireless access point in response to passing the authentication of the first wireless access point, where the second wireless access point is the wireless access point to which the terminal belongs;
确定模块,用于响应于接收到所述第一无线接入点发送的第一加密结果,且接收到所述第二无线接入点发送的第二加密结果,根据所述第一加密结果和所述第二加密结果确定比较结果;其中,所述第一加密结果为所述终端对所述第一无线接入点发送的随机数加密生成的,所述第二加密结果为所述第二无线接入点对所述随机数加密生成的;A determining module, configured to respond to receiving the first encryption result sent by the first wireless access point and receiving the second encryption result sent by the second wireless access point, according to the first encryption result and The second encryption result determines the comparison result; wherein, the first encryption result is generated by the terminal by encrypting the random number sent by the first wireless access point, and the second encryption result is the second The wireless access point encrypts and generates the random number;
所述发送模块还用于将所述比较结果发送至所述第一无线接入点,以使所述第一无线接入点根据所述比较结果确定是否允许所述终端接入所述第一无线接入点对应的无线网络。The sending module is further configured to send the comparison result to the first wireless access point, so that the first wireless access point determines whether to allow the terminal to access the first wireless access point according to the comparison result. The wireless network corresponding to the wireless access point.
优选地,所述发送模块中,对所述第一无线接入点认证通过,具体用于;Preferably, in the sending module, the authentication of the first wireless access point is passed, specifically for;
获取所述认证请求中的无线接入点标识;Obtain the wireless access point identifier in the authentication request;
响应于在本地查询出所述无线接入点标识对应的地址,确定所述第一无线接入点认证通过。In response to finding out the address corresponding to the wireless access point identifier locally, it is determined that the first wireless access point passes the authentication.
作为本公开的第四个方面,提供一种无线接入点,所述方法包括:As a fourth aspect of the present disclosure, a wireless access point is provided, and the method includes:
生成模块,用于响应于接收到终端发送的连接请求,生成随机数;A generating module, configured to generate a random number in response to receiving a connection request sent by the terminal;
发送模块,用于向共享服务器发送携带所述随机数的认证请求;A sending module, configured to send an authentication request carrying the random number to the shared server;
接收模块,用于接收共享服务器发送的比较结果,所述比较结果是比较所述终端对所述随机数加密生成的第一加密结果,与所述终端归属的第二无线接入点对所述随机数加密生成的第二加密结果得到的;The receiving module is configured to receive the comparison result sent by the shared server, the comparison result is comparing the first encryption result generated by the terminal encrypting the random number with the second wireless access point to which the terminal belongs Obtained from the second encryption result generated by encryption of the random number;
确定模块,用于根据所述比较结果确定是否允许所述终端接入本第一无线接入点对应的无线网络。A determining module, configured to determine whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result.
优选地,所述确定模块,具体用于:Preferably, the determination module is specifically used for:
响应于确定出所述第一加密结果和所述第二加密结果一致,确定允许所述终端接入本第一无线接入点对应的无线网络。In response to determining that the first encryption result is consistent with the second encryption result, determine to allow the terminal to access the wireless network corresponding to the first wireless access point.
优选地,还包括:Preferably, it also includes:
加密模块,用于响应于接收到所述共享服务器发送的随机数,利用预设密钥对所述随机数进行加密得到第二加密结果;An encryption module, configured to, in response to receiving the random number sent by the shared server, use a preset key to encrypt the random number to obtain a second encryption result;
所述发送模块还用于将所述第二加密结果发送至所述共享服务器。The sending module is further configured to send the second encryption result to the shared server.
本公开实施例中,第一无线接入点接收到终端发送的连接请求后,将随机数发送至共享服务器和终端,共享服务器在对第一无线接入点认证通过之后,向第二无线接入点发送随机数。在共享服务器分别接收到第一无线接入点发送的终端对随机数的第一加密结果,和第二无线接入点对随机数的第二加密结果之后,确定比较结果,并将比较结果发送至第一无线接入点。第一无线接入点根据比较结果确定是否允许终端接入第一无线接入点对应的无线网络。采用比较公正的方式共享wifi,当终端移动到归属wifi无法覆盖的地区时,可以连接别人的wifi,并且终端的归属wifi可以对外提供服务,提高终端的归属wifi的利用率,提高通信效率,提升用户体验。In the embodiment of the present disclosure, after receiving the connection request sent by the terminal, the first wireless access point sends the random number to the sharing server and the terminal. The entry point sends a random number. After the sharing server receives the first encryption result of the random number sent by the first wireless access point and the second encryption result of the random number sent by the second wireless access point, determine the comparison result, and send the comparison result to to the first wireless access point. The first wireless access point determines whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result. Share wifi in a more fair way. When the terminal moves to an area that cannot be covered by the home wifi, it can connect to other people's wifi, and the home wifi of the terminal can provide external services, improve the utilization rate of the home wifi of the terminal, improve communication efficiency, and improve user experience.
附图说明Description of drawings
图1为本公开实施例提供的共享服务器侧的无线网络接入方法的流程图;FIG. 1 is a flowchart of a wireless network access method on a shared server side provided by an embodiment of the present disclosure;
图2为本公开实施例提供的图1中步骤103中对第一无线接入点认证通过的一种可选实施方式;FIG. 2 is an optional implementation manner of passing the authentication of the first wireless access point in step 103 in FIG. 1 provided by an embodiment of the present disclosure;
图3为本公开实施例提供的无线接入点侧的无线网络接入方法的流程图;FIG. 3 is a flowchart of a wireless network access method on the wireless access point side provided by an embodiment of the present disclosure;
图4为本公开实施例提供的无线接入点侧的无线网络接入方法的另一流程图;FIG. 4 is another flowchart of a wireless network access method on the wireless access point side provided by an embodiment of the present disclosure;
图5为本公开实施例提供的一种共享服务器的结构示意图;FIG. 5 is a schematic structural diagram of a shared server provided by an embodiment of the present disclosure;
图6为本公开实施例提供的一种无线接入点的结构示意图。Fig. 6 is a schematic structural diagram of a wireless access point provided by an embodiment of the present disclosure.
具体实施方式Detailed ways
为使本领域技术人员更好地理解本公开的技术方案,下面结合附图和具体实施方式对本公开作进一步详细描述。In order to enable those skilled in the art to better understand the technical solution of the present disclosure, the present disclosure will be described in further detail below in conjunction with the accompanying drawings and specific embodiments.
为了采用比较公正的方式共享wifi,并提高终端的归属wifi的利用率,提高通信效率,提升用户体验。本公开提供一种无线网络接入方法、共享服务器及无线接入点。以下分别结合本公开提供的实施例的附图逐一进行详细说明。In order to share wifi in a relatively fair manner, improve the utilization rate of the wifi belonging to the terminal, improve communication efficiency, and improve user experience. The disclosure provides a wireless network access method, a sharing server and a wireless access point. The following will be described in detail one by one with reference to the drawings of the embodiments provided in the present disclosure.
在初始阶段,构建一台共享服务器,所有愿意共享的wifi都写入共享服务器中,所有加入到共享服务器中的终端允许正常接入共享服务中的其他wifi。每个终端都有自身归属的无线接入点(即本公开实施例中的第二无线接入点),例如homewife(家庭wifi),并且和归属的第二无线接入点有共享的预设密钥,每个终端可以正常接入自己归属的第二无线接入点的无线网络。每个终端归属的第二无线接入点将自身的无线接入点标识和对应的地址(公网ip(Internet Protocol,网络之间互连的协议)地址)发送至共享服务器保存,共享服务器收到该信息后,将其写入自身内部的wifi列表中。终端归属的无线接入点在公开的SSID(Service Set Identifier,服务集标识)中提示已经加入共享服务器。In the initial stage, a shared server is built, and all wifis willing to share are written into the shared server, and all terminals added to the shared server are allowed to normally access other wifis in the shared service. Each terminal has its own wireless access point (that is, the second wireless access point in the embodiment of the present disclosure), such as homewife (home wifi), and has a shared preset with the second wireless access point it belongs to key, each terminal can normally access the wireless network of its own second wireless access point. The second wireless access point to which each terminal belongs sends its own wireless access point identification and corresponding address (public network ip (Internet Protocol, protocol for interconnection between networks) address) to the sharing server for storage, and the sharing server receives the After receiving the information, write it into the wifi list inside itself. The wireless access point to which the terminal belongs prompts in a public SSID (Service Set Identifier, Service Set Identifier) that it has joined the shared server.
图1示出本公开实施例提供的共享服务器侧的无线网络接入方法的流程图。该无线网络接入方法可应用于共享服务器。如图1所示,本实施例提供的无线网络接入方法包括以下步骤。FIG. 1 shows a flowchart of a wireless network access method on a shared server side provided by an embodiment of the present disclosure. The wireless network access method can be applied to a shared server. As shown in FIG. 1 , the wireless network access method provided by this embodiment includes the following steps.
步骤S101,接收第一无线接入点发送的认证请求。其中,所述认证请求为第一无线接入点接收到终端发送的连接请求后发送的。Step S101, receiving an authentication request sent by a first wireless access point. Wherein, the authentication request is sent by the first wireless access point after receiving the connection request sent by the terminal.
步骤S102,获取认证请求中的随机数。Step S102, obtaining the random number in the authentication request.
步骤S103,响应于对第一无线接入点认证通过,向第二无线接入点发送随机数。Step S103, in response to passing the authentication of the first wireless access point, sending a random number to the second wireless access point.
步骤S104,响应于接收到第一无线接入点发送的第一加密结果,且接收到第二无线接入点发送的第二加密结果,根据第一加密结果和第二加密结果确定比较结果。其中,第一加密结果为终端对第一无线接入点发送的随机数加密生成的,第二加密结果为第二无线接入点对随机数加密生成的。Step S104, in response to receiving the first encryption result sent by the first wireless access point and receiving the second encryption result sent by the second wireless access point, determine a comparison result according to the first encryption result and the second encryption result. Wherein, the first encryption result is generated by the terminal by encrypting the random number sent by the first wireless access point, and the second encryption result is generated by the second wireless access point by encrypting the random number.
步骤S105,将比较结果发送至第一无线接入点,以使第一无线接入点根据比较结果确定是否允许终端接入第一无线接入点对应的无线网络。Step S105, sending the comparison result to the first wireless access point, so that the first wireless access point determines whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result.
其中,第一无线接入点为终端申请接入的无线接入点(例如,visitwife,访客wifi),第二无线接入点为终端归属的无线接入点(例如,homewife,家庭wifi)。当终端移动到第二无线接入点无法覆盖的地点时,自动搜索附近的无线网络,即搜到了第一无线接入点的无线网络,则终端向第一无线接入发送连接请求,第一无线接入点向共享服务器发送认证请求,请求共享服务器对第一无线接入点进行认证,并协助第一无线接入点验证该终端是否可靠。Wherein, the first wireless access point is a wireless access point (eg, visitwife, visitor wifi) for which the terminal applies for access, and the second wireless access point is a wireless access point (eg, homewife, home wifi) to which the terminal belongs. When the terminal moves to a location that cannot be covered by the second wireless access point, it automatically searches for nearby wireless networks, that is, it finds the wireless network of the first wireless access point, then the terminal sends a connection request to the first wireless access point, and the first wireless access point The wireless access point sends an authentication request to the sharing server, requesting the sharing server to authenticate the first wireless access point, and assist the first wireless access point in verifying whether the terminal is reliable.
本公开实施例提供的无线网络接入方法,第一无线接入点接收到终端发送的连接请求后,生成随机数,并分别将随机数发送至共享服务器和终端,共享服务器在对第一无线接入点认证通过之后,向第二无线接入点发送随机数。在共享服务器分别接收到第一无线接入点发送的终端对随机数的第一加密结果,和第二无线接入点对随机数的第二加密结果之后,确定比较结果,并将比较结果发送至第一无线接入点。第一无线接入点根据比较结果确定是否允许终端接入第一无线接入点对应的无线网络。因此,共享服务器用于对第一无线接入点进行认证,并协助验证终端是否可靠。In the wireless network access method provided by the embodiments of the present disclosure, the first wireless access point generates a random number after receiving the connection request sent by the terminal, and sends the random number to the sharing server and the terminal respectively. After passing the authentication, the access point sends the random number to the second wireless access point. After the sharing server receives the first encryption result of the random number sent by the first wireless access point and the second encryption result of the random number sent by the second wireless access point, determine the comparison result, and send the comparison result to to the first wireless access point. The first wireless access point determines whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result. Therefore, the shared server is used to authenticate the first wireless access point and assist in verifying whether the terminal is reliable.
本公开实施例中,采用比较公正的方式共享wifi,当终端移动到归属wifi无法覆盖的地区时,可以连接别人的wifi,并且终端的归属wifi可以对外提供服务,提高终端的归属wifi的利用率,提高通信效率,提升用户体验。In the embodiment of the present disclosure, wifi is shared in a relatively fair manner. When the terminal moves to an area that cannot be covered by the home wifi, it can connect to other people's wifi, and the home wifi of the terminal can provide external services, improving the utilization rate of the home wifi of the terminal , improve communication efficiency and enhance user experience.
需要说明的是,比较结果包括第一加密结果和第二加密结果一致,或,第一加密结果和第二加密结果不一致。It should be noted that the comparison result includes that the first encryption result is consistent with the second encryption result, or that the first encryption result is inconsistent with the second encryption result.
在一种优选的实施方式中,第一无线接入点向本共享服务器发送第一加密结果时,还发送终端名称和第二无线接入点的接入点标识。In a preferred implementation manner, when the first wireless access point sends the first encryption result to the sharing server, it also sends the terminal name and the access point identifier of the second wireless access point.
图2示出本公开实施例提供的图1中步骤103中对第一无线接入点认证通过的一种可选实施方式。进一步的,如图2所示,所述步骤S103中,对第一无线接入点认证通过,包括:FIG. 2 shows an optional implementation manner of passing the authentication of the first wireless access point in step 103 in FIG. 1 provided by an embodiment of the present disclosure. Further, as shown in FIG. 2, in the step S103, passing the authentication of the first wireless access point includes:
步骤S201,获取认证请求中的无线接入点标识。Step S201, acquiring the wireless access point identifier in the authentication request.
步骤S202,响应于在本地查询出无线接入点标识对应的地址,确定第一无线接入点认证通过。Step S202, in response to finding out the address corresponding to the wireless access point identifier locally, determine that the first wireless access point has passed the authentication.
在步骤S201-步骤S202中,共享服务器在本地查询出与认证请求中的无线接入点标识对应的公网ip地址时,说明所述终端归属的第二无线接入点预先在共享服务器存储过对应的无线接入点标识和对应公网ip地址,该第二无线接入点加入了共享服务器,愿意共享自己的wifi。因此,确定对第一无线接入点认证通过,之后共享服务器可以将随机数发送至该第二无线接入点。In step S201-step S202, when the sharing server finds out the public network ip address corresponding to the wireless access point identifier in the authentication request locally, it means that the second wireless access point to which the terminal belongs has been stored in the sharing server in advance. Corresponding to the wireless access point identifier and the corresponding public network ip address, the second wireless access point has joined the sharing server and is willing to share its own wifi. Therefore, it is determined that the authentication of the first wireless access point is passed, and then the sharing server may send the random number to the second wireless access point.
图3示出本公开实施例提供的无线接入点侧的无线网络接入方法的流程图。该无线网络接入方法可应用于第一无线接入点。如图3所示,本实施例提供的无线网络接入方法包括以下步骤。Fig. 3 shows a flowchart of a wireless network access method on a wireless access point side provided by an embodiment of the present disclosure. The wireless network access method can be applied to the first wireless access point. As shown in FIG. 3 , the wireless network access method provided by this embodiment includes the following steps.
步骤S301,响应于接收到终端发送的连接请求,生成随机数。Step S301, generating a random number in response to receiving a connection request sent by a terminal.
步骤S302,向共享服务器发送携带随机数的认证请求。Step S302, sending an authentication request carrying a random number to the sharing server.
步骤S303,接收共享服务器发送的比较结果。Step S303, receiving the comparison result sent by the sharing server.
步骤S304,根据比较结果确定是否允许终端接入本第一无线接入点对应的无线网络。Step S304, determine whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result.
本公开实施例提供的无线网络接入方法,第一无线接入点为终端申请接入的无线接入点(例如,visitwife,访客wifi),第二无线接入点为终端归属的无线接入点(例如,homewife,家庭wifi)。当终端移动到第二无线接入点无法覆盖的地点时,自动搜索附近的无线网络,即搜到了第一无线接入点的无线网络,则终端向第一无线接入发送连接请求,第一无线接入点向共享服务器发送携带随机数的认证请求,请求共享服务器对第一无线接入点进行认证,并协助验证终端是否可靠。第一无线接入点接收到共享服务器发送的比较结果,根据该比较结果确定终端是否可靠,即确定是否允许终端接入第一无线接入点对应的无线网络。In the wireless network access method provided by the embodiments of the present disclosure, the first wireless access point is the wireless access point (for example, visitwife, visitor wifi) for which the terminal applies for access, and the second wireless access point is the wireless access point to which the terminal belongs. point (eg, homewife, home wifi). When the terminal moves to a location that cannot be covered by the second wireless access point, it automatically searches for nearby wireless networks, that is, it finds the wireless network of the first wireless access point, then the terminal sends a connection request to the first wireless access point, and the first wireless access point The wireless access point sends an authentication request carrying a random number to the sharing server, requesting the sharing server to authenticate the first wireless access point and assist in verifying whether the terminal is reliable. The first wireless access point receives the comparison result sent by the sharing server, and determines whether the terminal is reliable according to the comparison result, that is, determines whether the terminal is allowed to access the wireless network corresponding to the first wireless access point.
本公开实施例中,采用比较公正的方式共享wifi,当终端移动到归属wifi无法覆盖的地区时,可以连接别人的wifi,并且终端的归属wifi可以对外提供服务,提高终端的归属wifi的利用率,提高通信效率,提升用户体验。In the embodiment of the present disclosure, wifi is shared in a relatively fair manner. When the terminal moves to an area that cannot be covered by the home wifi, it can connect to other people's wifi, and the home wifi of the terminal can provide external services, improving the utilization rate of the home wifi of the terminal , improve communication efficiency and enhance user experience.
需要说明的是,比较结果是比较终端对随机数加密生成的第一加密结果,与终端归属的第二无线接入点对随机数加密生成的第二加密结果得到的。It should be noted that the comparison result is obtained by comparing the first encryption result generated by encrypting the random number by the terminal with the second encryption result generated by encrypting the random number by the second wireless access point to which the terminal belongs.
在一种优选的实施方式中,所述连接请求中包括终端名称和第二无线接入点的无线接入点标识。第一无线接入点生成随机数之后,向共享服务器发送的认证请求中也携带终端名称和第二无线接入点的无线接入点标识。In a preferred implementation manner, the connection request includes a terminal name and a wireless access point identifier of the second wireless access point. After the first wireless access point generates the random number, the authentication request sent to the sharing server also carries the terminal name and the wireless access point identifier of the second wireless access point.
进一步的,应用于第一无线接入点。所述根据比较结果确定是否允许终端接入本第一无线接入点对应的无线网络(即步骤S304),包括:响应于确定出第一加密结果和第二加密结果一致,确定允许终端接入本第一无线接入点对应的无线网络。Further, it is applied to the first wireless access point. The determining whether to allow the terminal to access the wireless network corresponding to the first wireless access point according to the comparison result (that is, step S304) includes: determining that the terminal is allowed to access in response to determining that the first encryption result is consistent with the second encryption result The wireless network corresponding to the first wireless access point.
在该步骤中,若验证出第一加密结果和第二加密结果一致,则说明该终端可靠,允许终端接入本第一无线接入点对应的无线网络。In this step, if it is verified that the first encryption result is consistent with the second encryption result, it means that the terminal is reliable, and the terminal is allowed to access the wireless network corresponding to the first wireless access point.
本公开实施例中,终端申请连接的第一无线接入点根据共享服务器发送的比较结果,若验证出终端对随机数加密的第一加密结果和第二无线接入点对随机数加密的第二加密结果一致,则说明该终端可靠,允许终端接入本第一无线接入点对应的无线网络。实现采用比较公正的方式共享wifi,当终端移动到归属wifi无法覆盖的地区时,可以连接别人的wifi,并且终端的归属wifi可以对外提供服务,提高终端的归属wifi的利用率,提高通信效率,提升用户体验。In the embodiment of the present disclosure, according to the comparison result sent by the sharing server, the first wireless access point that the terminal applies for connection verifies that the first encryption result of the random number encrypted by the terminal and the second encryption result of the random number encrypted by the second wireless access point If the two encryption results are consistent, it means that the terminal is reliable, and the terminal is allowed to access the wireless network corresponding to the first wireless access point. Realize sharing wifi in a more fair way. When the terminal moves to an area that cannot be covered by the home wifi, it can connect to other people's wifi, and the home wifi of the terminal can provide external services, improve the utilization rate of the home wifi of the terminal, and improve communication efficiency. Improve user experience.
需要说明的是,若验证出终端对随机数加密的第一加密结果和第二无线接入点对随机数加密的第二加密结果不一致,则说明该终端不可靠,不允许终端接入本第一无线接入点对应的无线网络。It should be noted that if it is verified that the first encryption result of the random number encrypted by the terminal is inconsistent with the second encryption result of the random number encrypted by the second wireless access point, it means that the terminal is unreliable, and the terminal is not allowed to access the second wireless access point. A wireless network corresponding to a wireless access point.
图4示出本公开实施例提供的无线接入点侧的无线网络接入方法的另一流程图。进一步的,该无线网络接入方法可应用于第二无线接入点,如图4所示,所述方法还包括:Fig. 4 shows another flow chart of the wireless network access method on the wireless access point side provided by an embodiment of the present disclosure. Further, the wireless network access method may be applied to a second wireless access point, as shown in FIG. 4, the method further includes:
步骤S401,响应于接收到共享服务器发送的随机数,利用预设密钥对随机数进行加密得到第二加密结果。Step S401, in response to receiving the random number sent by the shared server, encrypt the random number with a preset key to obtain a second encryption result.
步骤S402,将第二加密结果发送至共享服务器。Step S402, sending the second encryption result to the shared server.
在步骤S401-步骤S402中,第二无线接入点接收到共享服务器发送的随机数,利用与终端共享的预设密钥按照预设算法进行加密得到第二加密结果,并将第二加密结果发送至共享服务器。In step S401-step S402, the second wireless access point receives the random number sent by the sharing server, uses the preset key shared with the terminal to encrypt according to the preset algorithm to obtain the second encryption result, and sends the second encryption result sent to a shared server.
需要说明的是,终端收到第一无线接入点发送的随机数之后,利用与第二无线接入点共享的预设密钥按照预设算法进行加密得到第一加密结果,并通过第一无线接入点将第一加密结果发送至共享服务器。It should be noted that after receiving the random number sent by the first wireless access point, the terminal uses the preset key shared with the second wireless access point to encrypt according to the preset algorithm to obtain the first encryption result, and passes the first The wireless access point sends the first encryption result to the sharing server.
图5示出本公开实施例提供的共享服务器的结构示意图。基于与图1对应的实施例相同的技术构思,如图5所示,本公开实施例提供的共享服务器,包括如下模块。FIG. 5 shows a schematic structural diagram of a shared server provided by an embodiment of the present disclosure. Based on the same technical concept as the embodiment corresponding to FIG. 1 , as shown in FIG. 5 , the shared server provided by the embodiment of the present disclosure includes the following modules.
接收模块11,用于接收第一无线接入点发送的认证请求,所述认证请求为所述第一无线接入点接收到终端发送的连接请求后发送的。The receiving
获取模块12,用于获取所述认证请求中的随机数。An obtaining
发送模块13,用于响应于对所述第一无线接入点认证通过,向第二无线接入点发送随机数,所述第二无线接入点为所述终端归属的无线接入点。The sending
确定模块14,用于响应于接收到所述第一无线接入点发送的第一加密结果,且接收到所述第二无线接入点发送的第二加密结果,根据所述第一加密结果和所述第二加密结果确定比较结果;其中,所述第一加密结果为所述终端对所述第一无线接入点发送的随机数加密生成的,所述第二加密结果为所述第二无线接入点对所述随机数加密生成的。The
所述发送模块13还用于将所述比较结果发送至所述第一无线接入点,以使所述第一无线接入点根据所述比较结果确定是否允许所述终端接入所述第一无线接入点对应的无线网络。The sending
在一些实施例中,所述发送模块13中,对所述第一无线接入点认证通过,具体用于;In some embodiments, in the sending
获取所述认证请求中的无线接入点标识。Obtain the wireless access point identifier in the authentication request.
响应于在本地查询出所述无线接入点标识对应的地址,确定所述第一无线接入点认证通过。In response to finding out the address corresponding to the wireless access point identifier locally, it is determined that the first wireless access point passes the authentication.
图6示出本公开实施例提供的无线接入点的结构示意图。基于与图3对应的实施例相同的技术构思,如图5所示,本公开实施例提供的无线接入点,包括如下模块。Fig. 6 shows a schematic structural diagram of a wireless access point provided by an embodiment of the present disclosure. Based on the same technical concept as the embodiment corresponding to FIG. 3 , as shown in FIG. 5 , the wireless access point provided by the embodiment of the present disclosure includes the following modules.
生成模块21,用于响应于接收到终端发送的连接请求,生成随机数。The generating
发送模块22,用于向共享服务器发送携带所述随机数的认证请求。The sending
接收模块23,用于接收共享服务器发送的比较结果,所述比较结果是比较所述终端对所述随机数加密生成的第一加密结果,与所述终端归属的第二无线接入点对所述随机数加密生成的第二加密结果得到的。The receiving
确定模块24,用于根据所述比较结果确定是否允许所述终端接入本第一无线接入点对应的无线网络。The
在一些实施例中,所述确定模块24,具体用于:In some embodiments, the determining
响应于确定出所述第一加密结果和所述第二加密结果一致,确定允许所述终端接入本第一无线接入点对应的无线网络。In response to determining that the first encryption result is consistent with the second encryption result, determine to allow the terminal to access the wireless network corresponding to the first wireless access point.
在一些实施例中,所述无线接入点还包括:In some embodiments, the wireless access point also includes:
加密模块,用于响应于接收到所述共享服务器发送的随机数,利用预设密钥对所述随机数进行加密得到第二加密结果。The encryption module is configured to, in response to receiving the random number sent by the shared server, use a preset key to encrypt the random number to obtain a second encryption result.
所述发送模块22还用于将所述第二加密结果发送至所述共享服务器。The sending
可以理解的是,以上实施方式仅仅是为了说明本公开的原理而采用的示例性实施方式,然而本公开并不局限于此。对于本领域内的普通技术人员而言,在不脱离本公开的精神和实质的情况下,可以做出各种变型和改进,这些变型和改进也视为本公开的保护范围。It can be understood that, the above implementations are only exemplary implementations adopted to illustrate the principle of the present disclosure, but the present disclosure is not limited thereto. For those skilled in the art, without departing from the spirit and essence of the present disclosure, various modifications and improvements can be made, and these modifications and improvements are also regarded as the protection scope of the present disclosure.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110557789.0A CN113316141B (en) | 2021-05-21 | 2021-05-21 | Wireless network access method, sharing server and wireless access point |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110557789.0A CN113316141B (en) | 2021-05-21 | 2021-05-21 | Wireless network access method, sharing server and wireless access point |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113316141A CN113316141A (en) | 2021-08-27 |
| CN113316141B true CN113316141B (en) | 2022-11-18 |
Family
ID=77374075
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110557789.0A Active CN113316141B (en) | 2021-05-21 | 2021-05-21 | Wireless network access method, sharing server and wireless access point |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113316141B (en) |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100547975C (en) * | 2004-03-25 | 2009-10-07 | 联想(北京)有限公司 | A Roaming Method of Wireless Local Area Network |
| EP2824973A1 (en) * | 2013-07-09 | 2015-01-14 | Orange | Network architecture enabling a mobile terminal to roam into a wireless local area network |
| CN107690138B (en) * | 2016-08-05 | 2020-08-14 | 华为技术有限公司 | Fast roaming method, device, system, access point and mobile station |
| JP6621146B2 (en) * | 2017-08-09 | 2019-12-18 | Necプラットフォームズ株式会社 | COMMUNICATION DEVICE, COMMUNICATION TERMINAL, COMMUNICATION SYSTEM, COMMUNICATION CONTROL METHOD, AND COMMUNICATION CONTROL PROGRAM |
| CN110519747A (en) * | 2018-05-21 | 2019-11-29 | 中兴通讯股份有限公司 | A kind of loaming method and AP and AP collaborative work controller |
| CN110213046A (en) * | 2019-05-30 | 2019-09-06 | 全链通有限公司 | Auth method, equipment and storage medium based on alliance's block chain |
-
2021
- 2021-05-21 CN CN202110557789.0A patent/CN113316141B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN113316141A (en) | 2021-08-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP4804983B2 (en) | Wireless terminal, authentication device, and program | |
| KR100961087B1 (en) | Context-limited shared secret | |
| US8327143B2 (en) | Techniques to provide access point authentication for wireless network | |
| KR100952269B1 (en) | Safe access to subscription module | |
| CN112566119B (en) | Terminal authentication method, device, computer equipment and storage medium | |
| CN103596173B (en) | Wireless network authentication method, client and service end wireless network authentication device | |
| EP1994715B1 (en) | Sim based authentication | |
| US20160219050A1 (en) | Dynamically generated ssid | |
| CN110545252B (en) | A method, terminal, control function entity and application server for authentication and information protection | |
| CN108880813A (en) | A kind of implementation method and device of attachment flow | |
| CN101895881B (en) | Method for realizing GBA secret key and pluggable equipment of terminal | |
| US20150249639A1 (en) | Method and devices for registering a client to a server | |
| CN113316139B (en) | Wireless network access method and wireless access point | |
| US20210256102A1 (en) | Remote biometric identification | |
| JP2006109449A (en) | Access point that wirelessly provides encryption key to authenticated wireless station | |
| JP4663596B2 (en) | Mutual authentication system, method and program | |
| CN115022850A (en) | A D2D communication authentication method, device, system, electronic device and medium | |
| JP5388088B2 (en) | Communication terminal device, management device, communication method, management method, and computer program. | |
| CN106714158B (en) | A kind of WiFi access method and device | |
| CN113316141B (en) | Wireless network access method, sharing server and wireless access point | |
| WO2016003310A1 (en) | Bootstrapping a device to a wireless network | |
| CN113347628A (en) | Method, access point and terminal for providing network access service | |
| KR100463751B1 (en) | Method for generating packet-data in wireless-communication and method and apparatus for wireless-communication using that packet-data | |
| CN113691974B (en) | Method and device for verifying wireless access point | |
| HK40043385A (en) | Terminal authentication method, device, computer equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |