CN105873036A - Safe AP (access point) information processing method - Google Patents
Safe AP (access point) information processing method Download PDFInfo
- Publication number
- CN105873036A CN105873036A CN201610339043.1A CN201610339043A CN105873036A CN 105873036 A CN105873036 A CN 105873036A CN 201610339043 A CN201610339043 A CN 201610339043A CN 105873036 A CN105873036 A CN 105873036A
- Authority
- CN
- China
- Prior art keywords
- client
- focus
- information
- certificate server
- authentication result
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
- H04L63/1483—Countermeasures against malicious traffic service impersonation, e.g. phishing, pharming or web spoofing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/12—Detection or prevention of fraud
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/30—Connection release
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Power Engineering (AREA)
- Mobile Radio Communication Systems (AREA)
- Telephonic Communication Services (AREA)
Abstract
The invention discloses a safe AP (access point) information processing method. The method comprises steps as follows: a client scans two-dimensional codes to decode an ssid (service set identifier) and a password for accessing a hot spot, and the client prohibits other application programs from communicating through a wifi module connected with the client; the client establishes a connection with the hot spot through the wifi module connected with the client; the client sends a random number to the hot spot; the hot spot performs encryption operation on the random number with a first encryption method, and then, verification information is obtained. According to the technical scheme, unique authentication of the hot spot can be realized through an authentication server, and the situation that an AP is phished is avoided.
Description
Technical field
The present invention relates to AP safety management technology field, particularly relate to a kind of safe AP information processing side
Method.
Background technology
AP (wireless access points (WirelessAccessPoint)), i.e. wifi access point.Existing
Wifi becomes more and more popular, everybody all with, a device that can provide wifi signal is exactly focus, greatly
Family can be attached after searching focus with mobile phone or notebook, and it is all according to ssid that existing focus connects
Be attached with password, as long as and near the focus of the most identical ssid and password occurs in,
Just can connect, so facilitate everybody connection.Such as the focus of existing bus, user takes
Bus or i.e. can connect bus focus around bus.But have a problem that, as
Fruit is that illegal ssid becomes with cryptographic camouflage and bus wifi, and it is non-that such user just can connect this
The focus of method, will result in focus and " goes fishing ", and the most illegal focus pretends to be legal focus.This focus is such as
Fruit is to have information interception function, then user is during normal online, accidentally it is possible to cause
The leakage of information, such as bank card information, consequently, it is possible to cause serious safety issue.
Summary of the invention
For this reason, it may be necessary to provide a kind of safe AP information processing method, solve spoofed the asking of existing focus
Topic.
For achieving the above object, inventor provide a kind of safe AP information processing method, be applied to visitor
Between family end, focus and certificate server, focus has unique first encryption method, and certificate server is deposited
There is the first decryption method corresponding with the first encryption method, comprise the steps:
Focus changes ssid and password at set intervals；
Quick Response Code is generated after focus encryption ssid and password；
Focus is two-dimensional code display information on the display being attached thereto；
The deciphering of client scan Quick Response Code obtains ssid and the password of focus；
Client forbids that other application programs communicate by being attached thereto wifi module；
Client, according to the ssid obtained and password, is set up even to focus by the wifi module being attached thereto
Connect；
Client sends and counts to focus at random；
Focus uses the first encryption method to be verified information after random number is encrypted computing；
Focus replys checking information to client；
Client sends focus identification information, checking information and counts to certificate server at random；
Certificate server obtains first decryption method according to focus identification information；
After certificate server uses first decryption method to be decrypted checking information and compare with random number
Relatively obtain authentication result；
Certificate server replys authentication result to client；
Client judges whether authentication result is passed through；
If passed through, then other application programs are allowed to communicate by being attached thereto wifi module；
If do not passed through, then disconnect the connection between focus.
Further, having unique second encryption method between certificate server, client has and second
The second decryption method that encryption method is corresponding, wherein:
When client sends authentication information to certificate server, client sends client identification information to recognizing
Card server；
After certificate server obtains authentication result, obtain the second encryption method according to client identification information,
Using the second encryption method to be encrypted authentication result and random number, then certificate server replys encryption
After authentication result to client；
Client judges, when whether authentication result is passed through, to enter authentication result initially with the second decryption method
Row deciphering, it is judged that random number is the most correct and whether authentication result is passed through；
If random number is correct and authentication result is passed through, then allow other application programs by being attached thereto wifi
Module communicates；
Otherwise, then the connection between focus is disconnected.
Further, client sends and the information of reception certificate server includes: client passes through mobile phone
Radio-frequency module sends and receives certificate server information.
Further, before this method starts, further comprise the steps of:
Client judges around whether there is the focus that two or more ssid information is identical with mac information, as
Fruit has, then point out this focus.
Further, also comprise the steps: to detect focus signal intensity, be less than at focus signal intensity
After preset value, disconnect the connection with focus and delete hot information.
Being different from prior art, technique scheme passes through certificate server, it is possible to achieve focus unique
Property certification, it is to avoid the situation that AP is gone fishing occurs.
Accompanying drawing explanation
Fig. 1 is the system architecture schematic diagram of the present invention.
Detailed description of the invention
By describing the technology contents of technical scheme, structural feature in detail, being realized purpose and effect, below
It is explained in detail in conjunction with specific embodiments.
Refer to shown in Fig. 1, present embodiments provide a kind of safe AP information processing method, Ke Yiying
In the system 100 of Fig. 1, being applied between client, focus and certificate server, client is permissible
It is mobile phone 101 or notebook client.Focus 102 has unique first encryption method, is uniquely
Different from other focuses, uniqueness association can be carried out by the identification information of focus.Certificate server
103 have the first decryption method corresponding with the first encryption method.
This method comprises the steps: that focus changes ssid and password at set intervals；Focus encryption ssid
With generation Quick Response Code after password；Focus is two-dimensional code display information on the display being attached thereto.So ssid
Just it is not easy with password artificially to be cracked.
Client obtains the ssid of focus and password by photographic head scanning Quick Response Code deciphering, i.e. ssid and close
Code is encryption, and decipherment algorithm is deposited on the client.This Quick Response Code can be pasted onto and have this focus
The doorway of trade company, so want the user's relative difficult forging illegal focus to know ssid and password,
User, without being manually entered these information, quickly connects after convenience.Client forbids that other apply journey
Sequence communicates by being attached thereto wifi module；Client is typically mounted in operating system, operation system
Having other application programs on system, operating system connects wifi module, and application program can pass through wifi
Module communicates with external program.Client forbids that other application programs have many by wifi module communication
Plant implementation, by intercepting the communication of other application programs and data packet discarding can be fallen, or set
Put an invalid route, thus by all of application program all by this routing forwarding, i.e. can forbid
The communication of these application programs.
Client, according to the ssid obtained and password, is set up even to focus by the wifi module being attached thereto
Connect.
Client sends and counts to focus at random；Client can generate a random number, this random number
There is various ways.Focus uses the first encryption method to be verified after random number is encrypted computing
Information；Checking information is i.e. the random number after encryption.
Focus replys checking information to client；Client send focus identification information, checking information and with
Certificate server counted to by machine.Focus identification information can be mac address information or other information of focus,
If other information, focus replys checking information to client when, focus can be sent together by focus
Identification information is to client.
Certificate server obtains first decryption method according to focus identification information；Certificate server uses first
After checking information is decrypted by decryption method and compare with random number and obtain authentication result；Certification takes
Business device replys authentication result to client；Client judges whether authentication result is passed through.
If passed through, then other application programs are allowed to communicate by being attached thereto wifi module；If
Do not pass through, then disconnect the connection between focus.So, the focus falsely used owing to not knowing encryption method,
Then random number can not be encrypted and obtain correct checking information, natural nothing on certificate server
Method certification is passed through.Then client just can disconnect and the connection of the focus falsely used, thus avoids illegal focus
Connection.
Focus in order to avoid falsely using directly transmits legal authentication result to client, in some embodiment
In, there is unique second encryption method between certificate server, client has and the second encryption method pair
The second decryption method answered, wherein: when client sends authentication information to certificate server, client is sent out
Send client identification information to certificate server；After certificate server obtains authentication result, according to client
Identification information obtains the second encryption method, uses the second encryption method to add authentication result and random number
Close, the authentication result after then certificate server replys encryption is to client；Client judges authentication result
When whether passing through, initially with the second decryption method, authentication result is decrypted, it is judged that whether random number
Whether correct and authentication result is passed through；If random number is correct and authentication result is passed through, then other are allowed to answer
Communicate by being attached thereto wifi module by program；Otherwise, then the connection between focus is disconnected.
So, authentication result is also the data of encryption, if the focus falsely used at will sends other legal recognizing
Card result, then do not encrypt through the second encryption method due to this authentication result, then cannot decipher
To correct random number and authentication result.Thus avoiding the focus falsely used, arbitrarily send one other are legal
Authentication result to client, and cause the problem that client connects.
Certainly, as long as client is not by being the wifi module acquisition that is authenticated result, it is possible to significantly
Improve the correctness of authentication result, as mobile phone radio frequency module (2G, 3G, 4G communication module can be passed through
Deng), client sends and receives the information of certificate server and includes: client is sent out by mobile phone radio frequency module
Send and receive certificate server information.Wifi pattern when so the focus owing to falsely using is carried out, and mobile phone is penetrated
Frequency module cannot be falsely used, then client is legal recognizing from the authentication result that mobile phone radio frequency module gets
Card result.
Many times, the focus falsely used and legal focus are in a place, for this illegal feelings
Condition, needs to remind in time user.Then before this method starts, further comprise the steps of: client and judge around
Whether exist two or more ssid (abbreviation of Service Set Identifier, service set) information and
Mac (Media Access Control, media interviews control, and can be obtained by the beacon frame of scan hot spot)
The focus that information is identical, if it has, then point out this focus.Prompting can be by dialog box or highlighted aobvious
The mode shown is carried out, and user one sees such situation, will vigilance relatively when of connection.
In order to avoid connecting illegal focus elsewhere, present invention additionally comprises following steps: detection
Focus signal intensity, after focus signal intensity is less than preset value, disconnects the connection with focus and deletes heat
Dot information.After deleting hot information, the equipment installing client just cannot connect this hot information automatically,
Thus ensure safety.
Although being described the various embodiments described above, but those skilled in the art once learn
Basic creative concept, then can make other change and amendment to these embodiments, so above institute
Stating only embodiments of the invention, not thereby limit the scope of patent protection of the present invention, every utilization is originally
Equivalent structure or equivalence flow process that description of the invention and accompanying drawing content are made convert, or directly or indirectly use
In the technical field that other are relevant, within being the most in like manner included in the scope of patent protection of the present invention.
Claims (3)
1. an AP information processing method for safety, is applied between client, focus and certificate server,
Focus has unique first encryption method, and certificate server has first corresponding with the first encryption method
Decryption method, it is characterised in that comprise the steps:
Focus changes ssid and password at set intervals；
Quick Response Code is generated after focus encryption ssid and password；
Focus is two-dimensional code display information on the display being attached thereto；
The deciphering of client scan Quick Response Code obtains ssid and the password of focus；
Client forbids that other application programs communicate by being attached thereto wifi module；
Client, according to the ssid obtained and password, is set up even to focus by the wifi module being attached thereto
Connect；
Client sends and counts to focus at random；
Focus uses the first encryption method to be verified information after random number is encrypted computing；
Focus replys checking information to client；
Client sends focus identification information, checking information and counts to certificate server at random；
Certificate server obtains first decryption method according to focus identification information；
After certificate server uses first decryption method to be decrypted checking information and compare with random number
Relatively obtain authentication result；
Certificate server replys authentication result to client；
Client judges whether authentication result is passed through；
If passed through, then other application programs are allowed to communicate by being attached thereto wifi module；
If do not passed through, then disconnect the connection between focus；
Detection focus signal intensity, after focus signal intensity is less than preset value, disconnects the connection with focus
And delete hot information.
A kind of safe AP information processing method the most according to claim 1, it is characterised in that
Having unique second encryption method between certificate server, client has corresponding with the second encryption method
Second decryption method, wherein:
When client sends authentication information to certificate server, client sends client identification information to recognizing
Card server；
After certificate server obtains authentication result, obtain the second encryption method according to client identification information,
Using the second encryption method to be encrypted authentication result and random number, then certificate server replys encryption
After authentication result to client；
Client judges, when whether authentication result is passed through, to enter authentication result initially with the second decryption method
Row deciphering, it is judged that random number is the most correct and whether authentication result is passed through；
If random number is correct and authentication result is passed through, then allow other application programs by being attached thereto wifi
Module communicates；
Otherwise, then the connection between focus is disconnected.
A kind of safe AP information processing method the most according to claim 2, it is characterised in that
Client send and receive certificate server information include: client by mobile phone radio frequency module send and
Receive certificate server information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610339043.1A CN105873036A (en) | 2016-05-19 | 2016-05-19 | Safe AP (access point) information processing method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610339043.1A CN105873036A (en) | 2016-05-19 | 2016-05-19 | Safe AP (access point) information processing method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105873036A true CN105873036A (en) | 2016-08-17 |
Family
ID=56635534
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610339043.1A Pending CN105873036A (en) | 2016-05-19 | 2016-05-19 | Safe AP (access point) information processing method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105873036A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107635231A (en) * | 2017-09-12 | 2018-01-26 | 中国联合网络通信集团有限公司 | Control method, device and the mobile terminal of focus WIFI switches |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101083843A (en) * | 2007-07-17 | 2007-12-05 | 中兴通讯股份有限公司 | Method and system for confirming terminal identity in mobile terminal communication |
| CN103763631A (en) * | 2014-01-07 | 2014-04-30 | 青岛海信信芯科技有限公司 | Authentication method, server and television |
| CN104244245A (en) * | 2014-09-12 | 2014-12-24 | 普联技术有限公司 | Wireless access authentication method, wireless router device and wireless terminal |
| CN104580401A (en) * | 2014-12-23 | 2015-04-29 | 小米科技有限责任公司 | Connecting method and device |
| CN104883343A (en) * | 2014-02-28 | 2015-09-02 | 致伸科技股份有限公司 | Online sharing method, system and transaction machine thereof |
| CN105188055A (en) * | 2015-08-14 | 2015-12-23 | 中国联合网络通信集团有限公司 | Wireless network access method, wireless access point and server |
-
2016
- 2016-05-19 CN CN201610339043.1A patent/CN105873036A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101083843A (en) * | 2007-07-17 | 2007-12-05 | 中兴通讯股份有限公司 | Method and system for confirming terminal identity in mobile terminal communication |
| CN103763631A (en) * | 2014-01-07 | 2014-04-30 | 青岛海信信芯科技有限公司 | Authentication method, server and television |
| CN104883343A (en) * | 2014-02-28 | 2015-09-02 | 致伸科技股份有限公司 | Online sharing method, system and transaction machine thereof |
| CN104244245A (en) * | 2014-09-12 | 2014-12-24 | 普联技术有限公司 | Wireless access authentication method, wireless router device and wireless terminal |
| CN104580401A (en) * | 2014-12-23 | 2015-04-29 | 小米科技有限责任公司 | Connecting method and device |
| CN105188055A (en) * | 2015-08-14 | 2015-12-23 | 中国联合网络通信集团有限公司 | Wireless network access method, wireless access point and server |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107635231A (en) * | 2017-09-12 | 2018-01-26 | 中国联合网络通信集团有限公司 | Control method, device and the mobile terminal of focus WIFI switches |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8327143B2 (en) | Techniques to provide access point authentication for wireless network | |
| CN103139768B (en) | Authentication method in fusing wireless network and authentication device | |
| CN106559783B (en) | Authentication method, device and system for WIFI network | |
| US11381977B2 (en) | System and method for decrypting communication exchanged on a wireless local area network | |
| CN105792194B (en) | Authentication method, authentication device, the network equipment, the Verification System of base station legitimacy | |
| CN107005927A (en) | Cut-in method, equipment and the system of user equipment (UE) | |
| DK2924944T3 (en) | Presence authentication | |
| CN106488453A (en) | A kind of method and system of portal certification | |
| US11848926B2 (en) | Network authentication | |
| CN104284331B (en) | A kind of method and system connecting portable WLAN hot spot | |
| CN106559785B (en) | Authentication method, device and system, access device and terminal | |
| US20170034164A1 (en) | Multifactor authentication for mail server access | |
| US20190075465A1 (en) | Systems and Methods for Providing Wireless Access Security by Interrogation | |
| CN103139750A (en) | Processing system, processing method, identification server and access controller for user logoff | |
| CN105873035A (en) | Safe AP (access point) information processing method | |
| CN105873034A (en) | Safe hot spot information processing method | |
| CN106028327A (en) | Method for realizing hotspot security through authentication server | |
| KR20130057678A (en) | Apparatus for verifying certificate and method thereof, and recording medium storing program for executing method of the same in computer | |
| CN106028328A (en) | NFC-based hotspot authentication method | |
| CN106101058A (en) | A kind of hot information processing method based on Quick Response Code | |
| CN105873036A (en) | Safe AP (access point) information processing method | |
| CN105915557A (en) | Network authentication method, access control method and network access equipment | |
| CN106412904B (en) | Method and system for preventing counterfeit user authentication authority | |
| CN105898739A (en) | Method for preventing hot spot from being illegally simulated | |
| CN106878989A (en) | A kind of connection control method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20160817 |