CN108551682B - Method for setting white list on router - Google Patents

Method for setting white list on router Download PDF

Info

Publication number
CN108551682B
CN108551682B CN201810357878.9A CN201810357878A CN108551682B CN 108551682 B CN108551682 B CN 108551682B CN 201810357878 A CN201810357878 A CN 201810357878A CN 108551682 B CN108551682 B CN 108551682B
Authority
CN
China
Prior art keywords
wireless router
equipment
new
value
manager
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201810357878.9A
Other languages
Chinese (zh)
Other versions
CN108551682A (en
Inventor
徐英杰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Priority to CN201810357878.9A priority Critical patent/CN108551682B/en
Publication of CN108551682A publication Critical patent/CN108551682A/en
Application granted granted Critical
Publication of CN108551682B publication Critical patent/CN108551682B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W48/00—Access restriction; Network selection; Access point selection
    • H04W48/02—Access restriction performed under specific conditions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/60—Router architectures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101—Access control lists [ACL]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W48/00—Access restriction; Network selection; Access point selection
    • H04W48/16—Discovering, processing access restriction or access information

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The invention discloses a method for setting a white list on a router, which comprises the following steps: A. setting stage of manager device: the manager device judges, authorizes the intensity value, the device error tolerance value; B. a new equipment adding stage: when a new device needs to be added into the wireless router, the SSID of the wireless router needs to be connected first, then the new device is close to the wireless router, and the manager device is required to be close to the wireless router at the same time; the distance between the manager device and the wireless router is required to be the same as or closer to the distance between the manager device and the wireless router when the intensity value is authorized to be recorded; the wireless router searches the signal intensity of the new equipment, the intensity of the new equipment is within the calculated error tolerance value, the MAC address of the new equipment is added into the white list, the white list setting is completed, and the new equipment is allowed to surf the internet. Through the mode, the method for setting the white list on the router provided by the invention has the advantages that the manager equipment and the new equipment are required to be close to the wireless router at the same time to serve as an authorization mechanism, and the network use safety is improved.

Description

Method for setting white list on router
Technical Field
The invention relates to the technical field of wireless routers, in particular to a method for setting a white list on a router.
Background
The user connection mode of the existing wireless router is to input a connection password to connect the internet after the SSID of the wireless router is connected. In such a way, some hacker software such as APP (application) like a master key can obtain the connection password without permission of the owner of the wireless router by storing the password in the cloud and sharing the password to other people, so that the other people can connect the wireless router to surf the internet.
In order to prevent other people from using the wireless router without authorization, the solution is to set a white list on the wireless router to prevent unauthorized connection. Each device (e.g., cell phone, tablet, computer, etc.) connected to the wireless router has a six byte number, called the MAC address. The white list mode is to record the MAC address of the device in the wireless router, after the device passes SSID connection and password verification, the wireless router will find out whether the MAC address of the device is recorded in the white list, only the device in the white list can allow to connect the Internet.
The operation mode is not a mode that ordinary people can understand and operate correctly, and is usually set by technical personnel who know the network, so that after an ordinary user buys the wireless router, the white list setting cannot be carried out, and the wireless router is easy to be hacked by some hacker software. How to enable a general user to conveniently set a white list without entering a background of the wireless router can greatly improve the security of the wireless router.
Beijing child Bao science and technology Limited provides a white list setting method for a wireless router, and the white list setting can be implemented without entering a management background. The method is that when the equipment is connected with the router, the intensity of the wireless signal of the equipment is used as the judgment of approaching the router, when the equipment approaches the router, the monitoring of the equipment is triggered and started through the design of infrared sensing of the wireless router, the equipment within a certain distance is searched, the equipment is automatically added into a white list, and the judgment of the distance is determined according to the intensity of the signal transmitted by the router judgment equipment.
The judgment mode is that only the equipment which can be close to the wireless router can automatically add a white list to surf the internet, so that two loopholes exist, namely, a manager of the router can obtain the authorization of surfing the internet by being close to the router under the conditions of no knowledge or no consent, or the authorization of surfing the internet is obtained by simulating the situation close to the wireless router through the signal enhancement of the wave enhancer.
Disclosure of Invention
The invention mainly solves the technical problem of providing a method for setting a white list on a router without logging in a management background, which can prevent new equipment without the authorization of a manager from directly getting the authorization of surfing the internet by approaching a wireless router.
In order to solve the technical problems, the invention adopts a technical scheme that: a method for setting a white list on a router is provided, which comprises the following steps:
A. setting stage of manager device:
the manager device determines: after the wireless router is reset, the wireless router is in a factory state, and the first device connected with the router is regarded as manager equipment;
authorized strength value: recording the equipment signal intensity of the manager equipment when the manager equipment is added into the wireless router as an authorization intensity value, wherein the intensity value is adjusted by the distance close to the wireless router and is used as the basis of the distance of the manager equipment close to the wireless router when subsequent authorization is carried out;
device error tolerance value: the device error tolerance value is a tolerance range weaker than the authorized strength value, such as X dB weaker than the authorized strength value, where X is a preset value or a value adjustable by a manager, the fault tolerance range is defined as the strength of a signal when a new device joins the wireless router, the new device is to be close to the wireless router when joining the wireless router, and the strength of the signal of the new device must be within the fault tolerance range, the magnitude of the signal strength is adjusted by the distance from the new device to the wireless router, and the authorized strength value > the device error tolerance value > the authorized strength value-X;
B. a new equipment adding stage:
when a new device needs to be added into the wireless router, the SSID of the wireless router needs to be connected first, then the new device is close to the wireless router, and meanwhile, the manager device is required to be close to the wireless router at the same time;
the distance between the manager device and the wireless router is required to be the same as or closer to the distance between the manager device and the wireless router when the intensity value is authorized to be recorded;
the wireless router searches the signal intensity of the new equipment, the intensity of the new equipment is within the calculated error tolerance value, the MAC address of the new equipment is added into a white list, the white list setting is completed, the new equipment is allowed to surf the internet, and otherwise, the new equipment is refused to surf the internet.
In a preferred embodiment of the invention, the authorization strength value is recorded with the administrator device placed on or in close proximity to the wireless router.
In a preferred embodiment of the present invention, the authorized strength value is recorded within 0.0-0.2 m of the administrator device from the wireless router, but not limited to this distance.
In a preferred embodiment of the present invention, when the new device is to join the wireless router, the distance between the new device and the wireless router is such that the signal strength of the new device is within the device tolerance value.
In a preferred embodiment of the present invention, the administrator device and the new device are networking devices with wireless network cards.
In a preferred embodiment of the present invention, the networking device with a wireless network card includes a notebook computer, a smart speaker, a set-top box, a smart phone, a tablet computer, and the like.
The invention has the beneficial effects that: the invention provides a method for setting a white list on a router, which aims to use a new device of a wireless router, needs a manager device to be close to the wireless router at the same time before adding the white list, takes whether the manager device is within a specific distance of the wireless router as a condition of adding or not the new device, and takes the manager device and the new device to be close to the wireless router at the same time as an authorization mechanism, thereby greatly improving the convenience of operation and the safety of network use.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The embodiment of the invention comprises the following steps:
example 1:
a method of setting a white list on a router, comprising the steps of:
A. setting stage of manager device:
the manager device determines: after the wireless router is reset, the wireless router is in a factory state, and the first device connected with the router is regarded as a manager device, such as a smart phone;
authorized strength value: recording the signal intensity of the equipment when the manager equipment is added into the wireless router as an authorized intensity value, wherein the intensity value is adjusted by the distance close to the wireless router, for example, a smart phone is placed on the wireless router, and the authorized intensity value is-35 dB, which is used as the basis for the distance close to the wireless router when the manager equipment is subsequently authorized;
device error tolerance value: the device error tolerance value is a tolerance range weaker than the authorized intensity value, for example, 20 dB weaker than the authorized intensity value, the fault tolerance range is defined as the intensity of a signal when a new device is added into the wireless router, the new device is close to the wireless router when the new device is added into the wireless router, and the intensity of the signal of the new device is required to be within the fault tolerance range, the intensity of the signal is adjusted through the distance between the new device and the wireless router, -35 dB > the device error tolerance value > -55 dB;
B. a new equipment adding stage:
when a new device needs to be added into the wireless router, the SSID of the wireless router needs to be connected first, and then the new device is placed within 0.5m of the wireless router, and meanwhile, the manager device is required to be placed on the wireless router;
the wireless router searches the signal intensity of the new equipment, the intensity of the new equipment is within the calculated error tolerance value, the MAC address of the new equipment is added into a white list, the white list setting is completed, the new equipment is allowed to surf the internet, and otherwise, the new equipment is refused to surf the internet.
Example 2:
a method of setting a white list on a router, comprising the steps of:
A. setting stage of manager device:
the manager device determines: after the wireless router is reset, the wireless router is in a factory state, and the first device connected with the router is regarded as a manager device, such as a tablet computer;
authorized strength value: recording the signal intensity of the device when the manager device joins the wireless router as an authorized intensity value, wherein the intensity value is adjusted by the distance close to the wireless router, for example, a tablet computer is placed at a position 15cm away from the wireless router, and the authorized intensity value is-38 dB, which is used as the basis for the distance of the manager device close to the wireless router during subsequent authorization;
device error tolerance value: the device error tolerance value is a tolerance range weaker than the authorized intensity value, for example, weaker than 10 dB than the authorized intensity value, the fault tolerance range is defined as the intensity of a signal when a new device is added into the wireless router, the new device is close to the wireless router when the new device is added into the wireless router, and the intensity of the signal of the new device is required to be within the fault tolerance range, and the intensity of the signal is adjusted by the distance between the new device and the wireless router, -38 dB > the device error tolerance value > -48 dB;
B. a new equipment adding stage:
when a new device needs to be added into the wireless router, the new device is placed within 1m of the wireless router after the SSID of the wireless router needs to be connected, and meanwhile, the manager device is required to be placed 15cm away from the wireless router or closer;
the wireless router searches the signal intensity of the new equipment, the intensity of the new equipment is within the calculated error tolerance value, the MAC address of the new equipment is added into a white list, the white list setting is completed, the new equipment is allowed to surf the internet, and otherwise, the new equipment is refused to surf the internet.
In summary, the method for setting the white list on the router according to the present invention needs to place the new device and the administrator device within a specific distance range from the wireless router, respectively, to add the MAC address of the new device to the white list, thereby improving network security and greatly reducing the network handover problem.
The above description is only an embodiment of the present invention, and not intended to limit the scope of the present invention, and all modifications of equivalent structures and equivalent processes, which are made by the present specification, or directly or indirectly applied to other related technical fields, are included in the scope of the present invention.

Claims (6)

1. A method for setting a white list on a router, comprising the steps of:
A. setting stage of manager device:
the manager device determines: after the wireless router is reset, the wireless router is in a factory state, and the first device connected with the router is regarded as manager equipment;
authorized strength value: recording the equipment signal intensity of the manager equipment when the manager equipment is added into the wireless router as an authorization intensity value, wherein the intensity value is adjusted by the distance close to the wireless router and is used as the basis of the distance of the manager equipment close to the wireless router when subsequent authorization is carried out;
device error tolerance value: the equipment error tolerance value is a tolerance range weaker than the authorized strength value, when the equipment error tolerance value is weaker than the authorized strength value by X dB, the X is a preset value or a value adjustable by a manager, the fault tolerance range is limited by the signal strength of new equipment when the new equipment is added into the wireless router, the new equipment is close to the wireless router when the new equipment is added into the wireless router, the signal strength of the new equipment is required to be within the fault tolerance range, the signal strength is adjusted through the distance between the new equipment and the wireless router, and the authorized strength value > the equipment error tolerance value > the authorized strength value-X;
B. a new equipment adding stage:
when a new device needs to be added into the wireless router, the SSID of the wireless router needs to be connected first, then the new device is close to the wireless router, and meanwhile, the manager device is required to be close to the wireless router at the same time;
the distance between the manager device and the wireless router is required to be the same as or closer to the distance between the manager device and the wireless router when the intensity value is authorized to be recorded;
the wireless router searches the signal intensity of the new equipment, the intensity of the new equipment is within the calculated error tolerance value, the MAC address of the new equipment is added into a white list, the white list setting is completed, the new equipment is allowed to surf the internet, and otherwise, the new equipment is refused to surf the internet.
2. The method of claim 1, wherein the authorization strength value record is when an administrator device is placed on or near a wireless router.
3. The method of claim 1, wherein the authorization strength value is recorded within 0.0-0.2 meters of the administrator device from the wireless router.
4. The method of claim 1, wherein the distance between the new device and the wireless router is such that the signal strength of the new device is within the device error tolerance value when the new device is to join the wireless router.
5. The method of claim 1, wherein the administrator device and the new device are networking devices with wireless network cards.
6. The method of claim 5, wherein the networking device with the wireless network card comprises but is not limited to a laptop, a smart speaker, a set-top box, a smart phone, and a tablet.
CN201810357878.9A 2018-04-20 2018-04-20 Method for setting white list on router Active CN108551682B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810357878.9A CN108551682B (en) 2018-04-20 2018-04-20 Method for setting white list on router

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810357878.9A CN108551682B (en) 2018-04-20 2018-04-20 Method for setting white list on router

Publications (2)

Publication Number Publication Date
CN108551682A CN108551682A (en) 2018-09-18
CN108551682B true CN108551682B (en) 2020-12-22

Family

ID=63511831

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810357878.9A Active CN108551682B (en) 2018-04-20 2018-04-20 Method for setting white list on router

Country Status (1)

Country Link
CN (1) CN108551682B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109168160A (en) * 2018-09-21 2019-01-08 徐英杰 A kind of anti-loiter network method under wireless routing network environment

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104049589A (en) * 2013-03-15 2014-09-17 费希尔-罗斯蒙特系统公司 Method and apparatus for seamless state transfer between user interface devices in a mobile control room

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9936385B2 (en) * 2015-12-04 2018-04-03 Lenovo (Singapore) Pte. Ltd. Initial access to network that is permitted from within a threshold distance

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104049589A (en) * 2013-03-15 2014-09-17 费希尔-罗斯蒙特系统公司 Method and apparatus for seamless state transfer between user interface devices in a mobile control room

Also Published As

Publication number Publication date
CN108551682A (en) 2018-09-18

Similar Documents

Publication Publication Date Title
KR101686760B1 (en) Unlocking method of managing permissions and authentication devices, program and recording medium
JP6386069B2 (en) Connection management method, apparatus, electronic equipment, program, and recording medium
US8375430B2 (en) Roaming secure authenticated network access method and apparatus
CN108964885B (en) Authentication method, device, system and storage medium
KR20160114620A (en) Methods, devices and systems for dynamic network access administration
US11409861B2 (en) Passwordless authentication
CN103442097A (en) System and method for controlling WiFi terminal access authority by home gateway
US10613994B2 (en) Methods and apparatus to establish a connection between a supplicant and a secured network
CN106488453A (en) A kind of method and system of portal certification
CN104270250A (en) WiFi Internet surfing connecting authentication method and system based on asymmetric full-process encryption
US11683312B2 (en) Client device authentication to a secure network
CN102571874B (en) On-line audit method and device in distributed system
CN109872424A (en) A kind of unlocking method, device, electronic equipment and storage medium
CN108551682B (en) Method for setting white list on router
WO2018036221A1 (en) Wireless network security verification device, method thereof, and router
WO2015196679A1 (en) Authentication method and apparatus for wireless access
US9961074B2 (en) System and method for providing an authentication certificate for a wireless handheld device a data center environment
Kim et al. Puf-based iot device authentication scheme on iot open platform
WO2021143028A1 (en) Internet of things equipment authentication method, electronic device and storage medium
CN105790935A (en) Independent-software-and-hardware-technology-based trusted authentication server
CN105848148A (en) WIFI connection method, terminal and router
CN109639695A (en) Dynamic identity authentication method, electronic equipment and storage medium based on mutual trust framework
CN105071993A (en) Encryption state detection method and system
CN110933018A (en) Network authentication method, device and computer storage medium
KR20210065923A (en) Device authentication method by login session passing

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant