CN111653021B

CN111653021B - WiFi-Aware network-based user identity authentication method and device and storage medium

Info

Publication number: CN111653021B
Application number: CN202010489294.4A
Authority: CN
Inventors: 虞龙杰
Original assignee: TCL Communication Ningbo Ltd
Current assignee: TCL Communication Ningbo Ltd
Priority date: 2020-06-02
Filing date: 2020-06-02
Publication date: 2022-07-08
Anticipated expiration: 2040-06-02
Also published as: CN111653021A

Abstract

The application relates to a user identity authentication method, a device and a storage medium based on a WiFi-Aware network, wherein a network equipment end in the WiFi-Aware network comprises a control center device and at least one ticket checking channel device which are in communication connection, and the method is applied to a client and comprises the following steps: when a WiFi-Aware network is added and a user enters a ticket checking channel device, acquiring a first device address of the entering ticket checking channel device, and identity information and ticket business information of the user; generating an identity authentication request carrying identity information, ticket information and a first equipment address; and sending an identity authentication request to a network equipment terminal through a WiFi-Aware network, wherein the identity authentication request is used for indicating the control center equipment to authenticate the user according to the identity information and ticket service information, and controlling the entering ticket checking channel equipment to pass when the authentication is successful, so that the ticket checking link does not need manual operation of passengers and expensive ticket checking equipment, and the problems of low ticket checking efficiency, high equipment cost and inconvenient operation can be solved.

Description

User identity authentication method, device and storage medium based on WiFi-Aware network

Technical Field

The application relates to the technical field of ticket checking in traffic places, in particular to a user identity authentication method and device based on a WiFi-Aware network and a storage medium.

Background

With the continuous development of vehicles, people go out more and more quickly and conveniently in daily life. In the ticket checking link, the low-efficiency ticket checking mode of manual ticket checking is not used any more at bus stations, railway stations and airports in part of cities, but the mode of checking tickets by swiping identification cards by passengers or directly swiping faces to enter the stations by passengers is selected, so that the ticket checking efficiency is greatly improved.

However, for the ticket checking mode of directly brushing the identity card by the passenger, the passenger needs to vacate one hand to take the identity card, which is not convenient for the passenger with a plurality of pieces of luggage; for the ticket checking mode that passengers directly swipe faces to enter the station, relatively expensive face swiping equipment needs to be deployed at the station and the airport, and the problem of high deployment cost exists.

Therefore, the prior art is in need of further improvement.

Disclosure of Invention

The application aims to provide a user identity authentication method, a user identity authentication device and a user identity authentication storage medium based on a WiFi-Aware network, and aims to solve the problems of low ticket checking efficiency, high equipment cost and inconvenient operation in the existing ticket checking mode.

In order to solve the above problem, an embodiment of the present application provides a user identity authentication method based on a WiFi-Aware network, which is applied to a client, where a network device end in the WiFi-Aware network includes a control center device and at least one ticket checking channel device, and the user identity authentication method includes: when a WiFi-Aware network is added and a user enters a ticket checking channel device, acquiring a first device address of the entering ticket checking channel device, and identity information and ticket business information of the user; generating an identity authentication request carrying identity information, ticket information and a first equipment address; and sending an identity authentication request to the network equipment terminal through the WiFi-Aware network, wherein the identity authentication request is used for indicating the control center equipment to authenticate the identity of the user according to the identity information and the ticket information, and controlling the entering ticket checking channel equipment to pass when the authentication is successful.

Before joining the WiFi-Aware network, the method further comprises the following steps: when a connectable wireless network is detected, acquiring current geographic position information of the client and a second equipment address of the wireless network; determining a stored equipment address corresponding to the geographic position information; and when the second device address is matched with the stored device address, determining that the wireless network is a WiFi-Aware network.

Before acquiring a first device address of an entering ticket checking channel device, and identity information and ticket service information of a user, the method further comprises the following steps: detecting the network signal intensity value of each ticket checking channel device; when the network signal intensity value larger than the preset threshold value is detected to exist, the fact that the user enters the ticket checking channel device is monitored.

After joining the WiFi-Aware network, the method further comprises the following steps: sending help seeking information to control center equipment through a WiFi-Aware network; and receiving reply information returned by the control center equipment according to the help seeking information through the WiFi-Aware network.

In order to solve the above problem, an embodiment of the present application further provides a user identity authentication method based on a WiFi-Aware network, which is applied to a network device end, where the network device end includes a control center device and at least one ticket checking channel device that are in communication connection in the WiFi-Aware network, and the user identity authentication method includes: receiving an identity authentication request sent by a client, wherein the identity authentication request carries identity information and ticket information of a user and a first equipment address; according to the identity information and the ticket information, the identity of the user is verified through the control center equipment; and when the verification is successful, the ticket checking channel equipment corresponding to the first equipment address is controlled to pass through by the control center equipment.

Before receiving an authentication request sent by a client, the method further comprises the following steps: detecting a network signal intensity value of a client joining a WiFi-Aware network through at least one ticket checking channel device; when the network signal strength value larger than the preset threshold value is detected, the fact that the user enters ticket checking channel equipment is determined, and the operation that the client side sends an identity verification request to the network equipment side through the WiFi-Aware network is triggered.

The user identity authentication method further comprises the following steps: and sending the announcement information to the client joining the WiFi-Aware network.

In order to solve the above problem, an embodiment of the present application further provides a user identity authentication device based on a WiFi-Aware network, which is applied to a client, where a network device end in the WiFi-Aware network includes a control center device and at least one ticket checking channel device, and the user identity authentication device includes: the first acquisition module is used for acquiring a first equipment address of the entering ticket checking channel equipment, and identity information and ticket business information of the user when the WiFi-Aware network is added and the user is monitored to enter the ticket checking channel equipment; the generating module is used for generating an identity authentication request carrying identity information, ticket information and a first equipment address; and the sending module is used for sending an identity authentication request to the network equipment terminal through the WiFi-Aware network, wherein the identity authentication request is used for indicating the control center equipment to authenticate the identity of the user according to the identity information and the ticket information, and controlling the entering ticket checking channel equipment to pass when the authentication is successful.

Wherein, the user authentication device further comprises: the second acquisition module is used for acquiring the current geographic position information of the client and a second equipment address of the wireless network when the connectable wireless network is detected; the first determining module is used for determining a stored equipment address corresponding to the geographic position information; and the second determining module is used for determining that the wireless network is a WiFi-Aware network when the second equipment address is matched with the stored equipment address.

Wherein, the user authentication device further comprises: the detection module is used for detecting the network signal intensity value of each ticket checking channel device; and the monitoring module is used for monitoring that the user enters the ticket checking channel equipment when the network signal intensity value larger than the preset threshold value is detected.

The sending module is also used for sending help seeking information to the control center equipment through the WiFi-Aware network; the user authentication apparatus further includes: and the receiving module is used for receiving reply information returned by the control center equipment according to the help seeking information through the WiFi-Aware network.

In order to solve the above problem, an embodiment of the present application further provides a user identity authentication apparatus based on a WiFi-Aware network, which is applied to a network device end, where the network device end includes a control center device and at least one ticket checking channel device that are in communication connection in the WiFi-Aware network, and the user identity authentication apparatus includes: the receiving module is used for receiving an identity authentication request sent by a client, wherein the identity authentication request carries identity information and ticket information of a user and a first equipment address; the verification module is used for verifying the identity of the user through the control center equipment according to the identity information and the ticket information; and the control module is used for controlling the ticket checking channel equipment corresponding to the first equipment address to pass through the control center equipment when the verification is successful.

Wherein, the user authentication device further comprises: the detection module is used for detecting the network signal intensity value of the client which joins the WiFi-Aware network through at least one ticket checking channel device; and the determining module is used for determining that the user enters the ticket checking channel device and triggering the client to send an authentication request to the network device end through the WiFi-Aware network when the network signal strength value larger than the preset threshold value is detected.

Wherein, the user authentication device further comprises: and the sending module is used for sending the announcement information to the client which joins the WiFi-Aware network.

In order to solve the above problem, an embodiment of the present application further provides a computer-readable storage medium, where a plurality of instructions are stored, where the instructions are adapted to be loaded by a processor to perform any one of the above user authentication methods.

In order to solve the above problem, an embodiment of the present application further provides a terminal, where the terminal includes a processor and a memory, the processor is electrically connected to the memory, the memory is used to store instructions and data, and the processor is used to execute any of the steps in the user identity authentication method.

The beneficial effect of this application is: different from the prior art, the user identity authentication method based on the WiFi-Aware network provided by the application comprises the steps that a network equipment end in the WiFi-Aware network comprises control center equipment and at least one ticket checking channel equipment which are in communication connection, the user identity authentication method is applied to a client, when the WiFi-Aware network is added and the user is monitored to enter the ticket checking channel equipment, a first equipment address of the entering ticket checking channel equipment, identity information and ticket information of the user are obtained, an identity authentication request carrying the identity information, the ticket information and the first equipment address is generated, then the identity authentication request is sent to the network equipment end through the WiFi-Aware network, the identity authentication request is used for indicating the control center equipment to authenticate the user according to the identity information and the ticket information, and the entering ticket checking channel equipment is controlled to be released when the authentication is successful, therefore, in the ticket checking link, manual operation of a passenger is not needed, ticket checking can be achieved by arranging hardware with a WIFI function, expensive ticket checking equipment does not need to be arranged, and the problems of low ticket checking efficiency, high equipment cost and inconvenient operation existing in the conventional ticket checking mode can be solved.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present application, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

Fig. 1 is a schematic flowchart of a user identity authentication method based on a WiFi-Aware network according to an embodiment of the present application;

fig. 2 is a scene schematic diagram of a user identity authentication method based on a WiFi-Aware network according to an embodiment of the present application;

fig. 3 is a table of correspondence between values and descriptions of information IDs in a service discovery frame provided in an embodiment of the present application;

fig. 4 is another schematic flowchart of a user identity authentication method based on a WiFi-Aware network according to an embodiment of the present application;

fig. 5 is another schematic flowchart of a user identity authentication method based on a WiFi-Aware network according to an embodiment of the present application;

fig. 6 is another schematic flowchart of a user identity authentication method based on a WiFi-Aware network according to an embodiment of the present application;

fig. 7 is a schematic structural diagram of a user authentication device based on a WiFi-Aware network according to an embodiment of the present application;

fig. 8 is another schematic structural diagram of a user authentication device based on a WiFi-Aware network according to an embodiment of the present application;

fig. 9 is a schematic structural diagram of a terminal provided in an embodiment of the present application;

fig. 10 is another schematic structural diagram of a terminal according to an embodiment of the present application.

Detailed Description

In order to make the purpose, technical solution and technical effect of the present application more clear and definite, the following further detailed description of the present application should understand that the specific embodiments described herein are only used for explaining the present application and are not used for limiting the present application.

Referring to fig. 1, fig. 1 is a schematic flowchart of a user authentication method based on a WiFi-Aware network according to an embodiment of the present application, where the user authentication method based on the WiFi-Aware network is applied to a client, and a specific process may be as follows:

s101: when the WiFi-Aware network is added and the user is monitored to enter the ticket checking channel device, the first device address of the entering ticket checking channel device, the identity information of the user and the ticket information are obtained.

The WiFi-Aware protocol is a WiFi protocol based on proximity, that is, devices in a WiFi-Aware network can discover other devices and their services without establishing a WiFi connection, and therefore, the WiFi-Aware protocol is also called WiFi NAN (Neighbor Awareness Networking) protocol.

In this embodiment, an application scenario of the WiFi-Aware network-based user authentication method provided in this application may be public transportation places such as bus stops, train stations, and airports, and as shown in fig. 2, a network device end supporting a WiFi protocol is deployed in the public transportation places, and the network device end is configured to form a corresponding WiFi-Aware network, where the network device end may include a control center device a and at least one ticket checking channel device B that are in communication connection, and each ticket checking channel device B includes a ticket checking channel B1 and a gate B2 located in the ticket checking channel B1. In specific implementation, the control center device a may serve as a master device and send a discovery beacon frame to discover a peripheral ticket checking channel device B, thereby forming a WiFi-Aware network, where the ticket checking channel device B randomly becomes the roles of a non-master synchronization device and a non-master non-synchronization device, and when a subsequent client joins the WiFi-Aware network, the client may also randomly become the roles of the non-master synchronization device and the non-master non-synchronization device. Specifically, in the WiFi-Aware network, the master device and the non-master synchronization device may send synchronization beacon frames to synchronize clocks of the entire network and reduce power consumption of the network, and the master device, the non-master synchronization device and the non-master synchronization device may receive and send service discovery frames to obtain specific information.

Each device in the WiFi-Aware network has a device address (e.g., a physical address) for distinguishing different devices. The ticket checking channel equipment can be divided into inbound ticket checking channel equipment and outbound ticket checking channel equipment according to the arrangement place. The client may be a mobile terminal such as a smart phone, a tablet computer, or a laptop computer that supports a WiFi protocol, and specifically, the client may be installed with a ticket-buying application program, the ticket-buying application program may be a government-issued government-type application program, and a user needs to fill in relevant identity information on the ticket-buying application program in advance, and after the user finishes booking a ticket, the ticket information of the user may be automatically synchronized to the ticket-buying application program, that is, the ticket-buying application program not only has the identity information of the user, but also has the ticket information of the user.

In specific implementation, when a user carrying a client enters a public transportation place with a WiFi-Aware network, the user can join the WiFi-Aware network of the public transportation place, and then if the fact that the user enters a ticket checking channel of ticket checking channel equipment is monitored, the client can obtain a physical address of the entering ticket checking channel equipment and obtain identity information and ticket business information of the user through the ticket buying application program logged in by the user. It should be noted that, when a plurality of WiFi-Aware networks are deployed in a public transportation location at the same time, the client may also automatically join the WiFi-Aware network with the strongest signal according to the detected signal strength of the WiFi-Aware network.

S102: and generating an identity authentication request carrying the identity information, the ticket information and the first equipment address.

The identity authentication request may correspond to a service discovery frame generated by the client, and in the WiFi-Aware network, the client may transmit the identity information, the ticket information, and the first device address to the network device end by sending the service discovery frame. Specifically, the format of the service discovery frame may be as shown in table 1 below:

TABLE 1

Wherein Category means that the type of the Frame is Public Action Frame (Public Action Frame); action Field refers to the frame of public Action associated with a given manufacturer; OUI refers to organization Unique number (organization Unique Identifier); OUI Type refers to the Type of OUI; attributes refers to Attributes, and as shown in Table 2 below, may include a service description Attribute and a manufacturer specific Attribute in which Attribute ID refers to the number of the manufacturer specific Attribute, Length refers to the sum of the byte lengths of OUI, which refers to the number of the manufacturer, and Body, which refers to the specific information of the manufacturer, used as information specified in the present application.

TABLE 2

TABLE 3

In a specific implementation, the client may generate a corresponding service discovery frame 1 based on the identity information, the ticket information, and the first device address, where the service discovery frame 1 may be simplified as shown in table 3 above, and Body of the manufacturer-specific attribute in the service discovery frame 1 may include the message ID, the identity information, the ticket information, and the first device address. Referring to fig. 3, when the value and the description of the message ID take a value of 0x02, it is described that the client sends the identity information and the ticket information of the user and the first device address of the ticket checking channel device to the control center device.

In some alternative embodiments, the client may further generate a corresponding service discovery frame 2 based on the identity information and the ticket information, where the service discovery frame 2 may be as shown in table 4 below, and send the service discovery frame 2 to the ticket checking channel device corresponding to the first device address.

TABLE 4

S103: and sending an identity authentication request to the network equipment terminal through the WiFi-Aware network, wherein the identity authentication request is used for indicating the control center equipment to authenticate the identity of the user according to the identity information and the ticket information, and controlling the entering ticket checking channel equipment to pass when the authentication is successful.

Specifically, in a WiFi-Aware network, the client may send a service discovery frame to implement sending an authentication request to the network device.

For example, when the client sends the service discovery frame 1 shown in table 3 to the network device, the control center device in the network device receives the service discovery frame 1, so as to obtain the identity information and the ticket information of the user and the first device address of the ticket checking channel device that the user enters, then the control center device performs identity verification on the user based on the identity information and the ticket information of the user, and sends the verification passing information shown in table 5 below to the ticket checking channel device corresponding to the first device address when the verification is successful, and then after receiving the verification passing information shown in table 5 below, the gate in the ticket checking channel of the ticket checking channel device is automatically opened to allow the passenger to pass.

TABLE 5

For another example, when the client sends the service discovery frame 2 shown in table 4 above to the network device, in the network device, the ticket checking channel device corresponding to the first device address receives the service discovery frame 2, and then forwards the service discovery frame 2 to the control center device, where the corresponding service discovery frame 3 may be shown in table 6 below, and then the control center device receives the service discovery frame 3, so as to obtain the identity information and the ticket service information of the user, and parses the first device address of the ticket checking channel device that the user enters, and then the control center device performs identity verification on the user based on the identity information and the ticket service information of the user, and sends the audit passing information shown in table 5 above to the ticket checking channel device corresponding to the first device address when the verification is successful, and then after the ticket checking channel device corresponding to the first device address receives the audit passing information shown in table 5 above, the gate in the ticket checking passage of the ticket checking passage device can be automatically opened to allow passengers to pass.

TABLE 6

In a specific embodiment, as shown in fig. 4, before the step S101, the method may further include:

s104: and when the connectable wireless network is detected, acquiring the current geographic position information of the client and the address of a second device of the wireless network.

In the embodiment, the secure WiFi-Aware network refers to a WiFi-Aware network established by a legal network device in a public transportation place. The second device address of the wireless network may be a physical address of a number of devices in the wireless network.

S105: and determining a stored equipment address corresponding to the geographic position information.

The device addresses of the control center device and the ticket checking channel device in different public transport places are stored in a server corresponding to a ticket purchasing application program installed in the client or the client. In specific implementation, the current public transportation place where the user is located, such as an XX railway station, can be identified based on the geographic position information, and then the device addresses of the control center device and the ticket checking channel device in the current public transportation place are obtained through query, so as to obtain the stored device addresses.

S106: and when the second device address is matched with the stored device address, determining that the wireless network is a WiFi-Aware network.

The second device addresses of one connection network are generally multiple, and when the multiple second device addresses include the stored device addresses, the second device addresses of the connection network can be considered to be matched with the stored device addresses, and the corresponding wireless network is a secure WiFi-Aware network. Therefore, the WiFi-Aware network added by the client can be ensured to be safe and legal, and leakage of user information is avoided.

In another embodiment, before S101, the method may further include:

s107: and detecting the network signal intensity value of each ticket checking channel device.

Specifically, the client can detect the WIFI signal strength value of each ticket checking channel device in the WiFi-Aware network in real time.

S108: when the network signal intensity value larger than the preset threshold value is detected to exist, the fact that the user enters the ticket checking channel device is monitored.

The preset threshold may correspond to a first distance (for example, 1 meter) between the client and the ticket checking channel device, and when the client detects that the network signal intensity value of one ticket checking channel device is stronger, it indicates that the client is closer to the ticket checking channel device.

Specifically, with continued reference to fig. 2, in order to reduce the number of unnecessary erroneous determinations, the distance between the ticket gate B1 and the waiting area C may be specified. For example, the ticket checking channels B1 of different ticket checking channel devices B are arranged in parallel at equal intervals, the different waiting areas C are arranged in parallel at equal intervals, the ticket checking channels B1 correspond to the waiting areas C one by one, the distance between the adjacent ticket checking channels B1 is d1 (for example, 5 meters), the distance between the adjacent waiting areas C is d2 (for example, 5 meters), and the distance between the ticket checking channels B1 and the waiting areas C is d3 (for example, 4 meters). In specific implementation, a user carrying a client continuously approaches from the waiting area C and enters the ticket checking channel B1 of the corresponding ticket checking channel device B, and when the client detects that the signal intensity value of the ticket checking channel device B is greater than a preset threshold value, the user is monitored to enter the ticket checking channel device B.

In some alternative embodiments, S107 and S108 described above may be replaced with: when information sent by the ticket checking channel equipment is received and the information is used for reminding a client to upload identity information and ticket business information of a user, the fact that the user enters the ticket checking channel equipment is monitored.

In some embodiments, after the client joins the WiFi-Aware network, the method may further include:

s109: and sending help seeking information to the control center equipment through the WiFi-Aware network.

Specifically, the client may send help information to the control center device through the WiFi-Aware network in the form of a service discovery frame, for example, the help information may be as shown in table 7 below, where the help content includes content of consultation, rescue, emergency and the like.

TABLE 7

S110: and receiving reply information returned by the control center equipment according to the help seeking information through the WiFi-Aware network.

For example, after receiving the help information in table 7 as described above, control center device a in the WiFi-Aware network may return a reply message as shown in table 8 below to the client, where the feedback content may be obtained by the manual client online processing.

TABLE 8

In this way, users can consult in the Wi-Fi Aware network anytime and anywhere to obtain timely help.

Further, after the client joins the WiFi-Aware network, the method may further include: the announcement information sent by the control center equipment in the form of the service discovery frame is received through the WiFi-Aware network, wherein the announcement information can comprise important information such as tourism, epidemic situation, traffic and the like, so that after the client receives the announcement information, the client can accurately acquire the related announcement, and the information transmission efficiency is favorably improved.

Different from the prior art, the user identity authentication method based on the WiFi-Aware network of the embodiment is applied to a client, and when the WiFi-Aware network is added and it is monitored that a user enters a ticket checking channel device, a first device address of the entering ticket checking channel device, and identity information and ticket service information of the user are obtained, and an identity authentication request carrying the identity information, the ticket service information and the first device address is generated, and then the identity authentication request is sent to a network device terminal through the WiFi-Aware network, the identity authentication request is used for instructing a control center device to authenticate the user according to the identity information and the ticket service information, and the entering ticket checking channel device is controlled to be released when the authentication is successful, so that manual operation of a traveler is not required in a ticket checking link, ticket checking can be realized by deploying hardware with a WiFi function, and expensive ticket checking devices are not required, and then can solve the problem that the existing ticket checking mode has low ticket checking efficiency, high equipment cost and inconvenient operation.

According to the method described in the above embodiment, this embodiment will be further described from the perspective of a network device side, where the network device side includes a control center device and at least one ticket checking channel device that are communicatively connected.

As shown in fig. 5, fig. 5 is a schematic flowchart of a user identity authentication method based on a WiFi-Aware network according to an embodiment of the present application, where the user identity authentication method is applied to a network device side, the network device side includes a control center device and at least one ticket checking channel device that are in communication connection, and a specific flow of the user identity authentication method may be as follows:

s201: and receiving an identity authentication request sent by the client, wherein the identity authentication request carries the identity information and ticket information of the user and the first equipment address.

The authentication request may correspond to a service discovery frame generated for the client, and may be as shown in table 3 or table 4 above.

S202: and according to the identity information and the ticket information, the identity of the user is verified through the control center equipment.

S203: and when the verification is successful, the ticket checking channel equipment corresponding to the first equipment address is controlled to pass through by the control center equipment.

Specifically, when the authentication request corresponds to the service discovery frame shown in table 3 above, the control center device in the network device end receives the service discovery frame, so as to obtain the identity information and the ticket information of the user and the first device address of the ticket checking channel device that the user enters, then the control center device performs authentication on the user based on the identity information and the ticket information of the user, and sends the audit passing information shown in table 5 above to the ticket checking channel device corresponding to the first device address when the authentication is successful, and then after the ticket checking channel device corresponding to the first device address receives the audit passing information shown in table 5 above, the gate in the ticket checking channel of the ticket checking channel device is automatically opened to allow the passenger to pass.

Further, when the authentication request corresponds to the service discovery frame shown in table 4 above, in the network device, the ticket checking channel device corresponding to the first device address receives the service discovery frame, and then forwards the service discovery frame to the control center device, where the corresponding forwarded service discovery frame can be shown in table 6 above, and then the control center device receives the forwarded service discovery frame, so as to obtain the identity information and the ticket service information of the user, and parses the first device address of the ticket checking channel device that the user enters, and then the control center device performs authentication on the user based on the identity information and the ticket service information of the user, and sends the authentication passing information shown in table 5 above to the ticket checking channel device corresponding to the first device address when the authentication passes successfully, and then after receiving the authentication passing information shown in table 5 above, the gate in the ticket checking passage of the ticket checking passage device can be automatically opened to allow passengers to pass.

In an embodiment, as shown in fig. 6, before the foregoing S201, the method may further include:

s204: and detecting the network signal strength value of the client joining the WiFi-Aware network through at least one ticket checking channel device.

Specifically, each ticket checking channel device in the network device end detects the WiFi signal strength value of the client joining the WiFi-Aware network in real time.

S205: when the network signal strength value larger than the preset threshold value is detected, the fact that the user enters ticket checking channel equipment is determined, and the operation that the client side sends an identity verification request to the network equipment side through the WiFi-Aware network is triggered.

The preset threshold may correspond to a first distance (for example, 1 meter) between the client and the ticket checking channel device, and the stronger the network signal strength value detected by the ticket checking channel device at the client is, the closer the client is to the ticket checking channel device, and when the network signal strength value detected by one ticket checking channel device at the client is greater than the preset threshold, it may be considered that the user (client) enters the ticket checking channel of the ticket checking channel device.

Specifically, with continuing reference to fig. 2, in order to reduce the number of unnecessary erroneous decisions, the distances between the ticket gate B1 and the waiting areas C may be defined, wherein the ticket gate B1 of different ticket gate apparatuses B are arranged in parallel at equal intervals, the different waiting areas C are arranged in parallel at equal intervals, the ticket gate B1 and the waiting areas C are in one-to-one correspondence, and are on the same straight line, the distance between adjacent ticket gates B1 is d1 (e.g., 5 meters), the distance between adjacent waiting areas C is d2 (e.g., 5 meters), and the distance between the ticket gate B1 and the waiting areas C is d3 (e.g., 4 meters). In specific implementation, a user carries a client to continuously approach from the waiting area C and enter the ticket checking channel B1 of the corresponding ticket checking channel device B until the ticket checking channel device B detects that the signal intensity value of the client is greater than a preset threshold value, it may be determined that the user enters the ticket checking channel device B, and a message may be sent to the corresponding client to remind the client to upload the identity information and ticket service information of the user, the corresponding message may be as shown in table 9 below, and then the client receives the message as shown in table 9 below, to monitor that the user enters the ticket checking channel device B, and then triggered to send an authentication request to the network equipment terminal through the WiFi-Aware network, and then, a first device address of the ticket checking channel device B entered by the user is parsed from the message, and a service discovery frame as shown in table 3 or table 4 above is sent to the network device end through the WiFi-Aware network.

TABLE 9

In one embodiment, the user authentication method may further include:

s206: and sending the announcement information to the client joining the WiFi-Aware network.

Specifically, the network device side may send announcement information to all clients joining the WiFi-Aware network in a group through the control center device, where the announcement information may be in the form of a service discovery frame, as shown in table 10 below, where station and airport announcements may include important information such as tourism, epidemic situation, traffic, and the like.

Watch 10

Therefore, after the client receives the notice information, the client can accurately acquire the related notice, and the information transmission efficiency is favorably improved.

Further, the user identity authentication method may further include: receiving help seeking information sent by the client, and returning corresponding reply information to the client according to the help seeking information, wherein reference may be specifically made to the description of S109 and S110 in the previous method embodiment, and therefore details are not described here.

Different from the prior art, the user identity authentication method based on the WiFi-Aware network of this embodiment is applied to a network device end, where the network device end includes a control center device and at least one ticket checking channel device that are in communication connection, and by receiving an identity authentication request sent by a client, the identity authentication request carries identity information and ticket information of a user and a first device address, and according to the identity information and the ticket information, the user is authenticated by the control center device, and then when the authentication is successful, the control center device controls the ticket checking channel device corresponding to the first device address to release, so that, in a ticket checking link, manual operation by a traveler is not required, ticket checking can be achieved by deploying hardware with a WiFi function, expensive ticket checking devices are not required, and further, the problem of low ticket checking efficiency existing in the existing ticket checking mode can be solved, High equipment cost and inconvenient operation.

According to the method described in the foregoing embodiment, the present embodiment will be further described from the perspective of a user authentication device based on a WiFi-Aware network, where the user authentication device based on the WiFi-Aware network may be specifically implemented as an independent entity or may be integrated in a terminal.

Referring to fig. 7, fig. 7 specifically illustrates a user authentication apparatus based on a WiFi-Aware network according to an embodiment of the present application, where the user authentication apparatus 50 may be integrated in a client, and includes:

(1) first acquisition module 51

The first obtaining module 51 is configured to, when joining the WiFi-Aware network and monitoring that a user enters a ticket checking channel device, obtain a first device address of the entering ticket checking channel device, and identity information and ticket service information of the user.

(2) Generation module 52

The generating module 52 is configured to generate an authentication request carrying the identity information, the ticket information, and the first device address.

(3) Transmission module 53

And the sending module 53 is configured to send an authentication request to the network device end through the WiFi-Aware network, where the authentication request is used to instruct the control center device to authenticate the user according to the identity information and the ticket information, and control the entering ticket checking channel device to pass when the authentication is successful.

In an embodiment, the user authentication apparatus 50 may further include:

(4) second acquisition module

And the second acquisition module is used for acquiring the current geographic position information of the client and a second equipment address of the wireless network when the connectable wireless network is detected.

(5) First determining module

The first determining module is used for determining the stored equipment address corresponding to the geographic position information.

(6) Second determining module

And the second determining module is used for determining that the wireless network is a WiFi-Aware network when the second equipment address is matched with the stored equipment address.

In another embodiment, the user authentication apparatus 50 may further include:

(7) detection module

And the detection module is used for detecting the network signal intensity value of each ticket checking channel device.

(8) Monitoring module

And the monitoring module is used for monitoring that the user enters the ticket checking channel equipment when the network signal intensity value larger than the preset threshold value is detected.

In a specific embodiment, the sending module 53 may be further configured to: and sending help seeking information to the control center equipment through the WiFi-Aware network. Further, the user authentication apparatus 50 may further include:

(9) receiving module

And the receiving module is used for receiving reply information returned by the control center equipment according to the help seeking information through the WiFi-Aware network.

In specific implementation, the above modules may be implemented as independent entities, or may be combined arbitrarily to be implemented as the same or several entities, and specific implementation of the above modules may refer to the foregoing method embodiments, which are not described herein again.

Different from the prior art, the user identity authentication device based on the WiFi-Aware network of this embodiment is applied to the client, where a network device end in the WiFi-Aware network includes a control center device and at least one ticket checking channel device that are in communication connection, and the user identity authentication device includes: the first acquisition module is used for acquiring a first equipment address of the entering ticket checking channel equipment, and identity information and ticket business information of the user when the WiFi-Aware network is added and the user is monitored to enter the ticket checking channel equipment; the generating module is used for generating an identity authentication request carrying identity information, ticket information and a first equipment address; the system comprises a sending module and a network equipment end, wherein the sending module is used for sending an identity authentication request to the network equipment end through a WiFi-Aware network, the identity authentication request is used for indicating the control center equipment to authenticate a user according to identity information and ticket service information, and controlling the entering ticket checking channel equipment to release when the authentication is successful, so that in a ticket checking link, manual operation of a passenger is not needed, ticket checking can be realized by deploying hardware with a WIFI function, expensive ticket checking equipment is not needed, and the problems of low ticket checking efficiency, high equipment cost and inconvenient operation in the conventional ticket checking mode can be solved.

According to the apparatus described in the above embodiments, this embodiment will be further described from the perspective of a network device side, where the network device side includes a control center device and at least one ticket checking channel device that are communicatively connected.

Referring to fig. 8, fig. 8 specifically describes a user authentication apparatus based on a WiFi-Aware network according to an embodiment of the present application, where the user authentication apparatus 60 may be integrated in a network device side, where the network device side includes a control center device and at least one ticket checking channel device that are in communication connection in the WiFi-Aware network, and the user authentication apparatus 60 includes:

(1) receiving module 61

The receiving module 61 is configured to receive an authentication request sent by a client, where the authentication request carries identity information and ticket information of a user and an address of the first device.

(2) Authentication module 62

And the verification module 62 is configured to perform identity verification on the user through the control center device according to the identity information and the ticket information.

(3) Control module 63

And the control module 63 is configured to control the ticket checking channel device corresponding to the first device address to pass through the control center device when the verification is successful.

In one implementation, the user authentication apparatus 60 may further include:

(4) detection module

And the detection module is used for detecting the network signal intensity value of the client which joins the WiFi-Aware network through at least one ticket checking channel device.

(5) Determining module

And the determining module is used for determining that the user enters the ticket checking channel device and triggering the client to send an authentication request to the network device end through the WiFi-Aware network when the network signal strength value larger than the preset threshold value is detected.

In another embodiment, the user authentication apparatus 60 may further include:

(6) transmission module

And the sending module is used for sending the announcement information to the client which joins the WiFi-Aware network.

Different from the prior art, the user identity authentication device based on the WiFi-Aware network of this embodiment is applied to a network device end, where the network device end includes a control center device and at least one ticket checking channel device that are in communication connection in the WiFi-Aware network, and the user identity authentication device includes: the receiving module is used for receiving an identity authentication request sent by a client, wherein the identity authentication request carries identity information and ticket information of a user and a first equipment address; the verification module is used for verifying the identity of the user through the control center equipment according to the identity information and the ticket information; and the control module is used for controlling the ticket checking channel equipment corresponding to the first equipment address to pass through the control center equipment when the verification is successful, so that the ticket checking link is free from manual operation of passengers, the ticket checking can be realized by deploying hardware with a WIFI function, expensive ticket checking equipment is not required to be deployed, and the problems of low ticket checking efficiency, high equipment cost and inconvenient operation existing in the conventional ticket checking mode can be solved.

Correspondingly, the embodiment of the application further provides a terminal, and the terminal can be a smart phone, a tablet computer and other devices. As shown in fig. 9, terminal 800 includes a processor 801, a memory 802. The processor 801 is electrically connected to the memory 802.

The processor 801 is a control center of the terminal 800, connects various parts of the entire terminal using various interfaces and lines, and performs various functions of the terminal and processes data by running or loading an application stored in the memory 802 and calling data stored in the memory 802, thereby performing overall monitoring of the terminal.

In this embodiment, the processor 801 in the terminal 800 loads instructions corresponding to one or more processes of an application program into the memory 802, and the processor 801 executes the application program stored in the memory 802 according to the following steps, so as to implement various functions:

when a WiFi-Aware network is added and a user enters a ticket checking channel device, acquiring a first device address of the entering ticket checking channel device, and identity information and ticket business information of the user;

generating an identity authentication request carrying identity information, ticket information and a first equipment address;

an identity authentication request is sent to a network equipment terminal through a WiFi-Aware network, the identity authentication request is used for indicating control center equipment to authenticate a user according to identity information and ticket information, and entering ticket checking channel equipment is controlled to pass when authentication is successful;

or;

receiving an identity authentication request sent by a client, wherein the identity authentication request carries identity information and ticket information of a user and a first equipment address;

according to the identity information and the ticket information, the identity of the user is verified through the control center equipment;

and when the verification is successful, the ticket checking channel equipment corresponding to the first equipment address is controlled to pass through by the control center equipment.

The terminal may implement the steps in any embodiment of the WiFi-Aware network based user identity authentication method provided in the embodiment of the present application, and therefore, beneficial effects that any WiFi-Aware network based user identity authentication method provided in the embodiment of the present invention can implement may be achieved, which are detailed in the foregoing embodiments and are not described herein again.

Fig. 10 shows a specific structural block diagram of a terminal provided in an embodiment of the present invention, where the terminal may be used to implement the user authentication method based on a WiFi-Aware network provided in the foregoing embodiment. This terminal 900 can be equipment such as AR glasses, AR helmet, AR head-up display (HUD), smart mobile phone or notebook computer.

The RF circuit 910 is used for receiving and transmitting electromagnetic waves, so as to achieve the interconversion between the electromagnetic waves and the electrical signals, and thus, communicate with a communication network or other devices. RF circuit 910 may include various existing circuit elements for performing these functions, such as an antenna, a radio frequency transceiver, a digital signal processor, an encryption/decryption chip, a Subscriber Identity Module (SIM) card, memory, and so forth. The RF circuit 910 may communicate with various networks such as the internet, an intranet, a wireless network, or with other devices over a wireless network. The wireless network may comprise a cellular telephone network, a wireless local area network, or a metropolitan area network. The Wireless network may use various Communication standards, protocols, and technologies, including, but not limited to, Global System for Mobile Communication (GSM), Enhanced Data GSM Environment (EDGE), Wideband Code Division Multiple Access (WCDMA), Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Wireless Fidelity (Wi-Fi) (e.g., Institute of Electrical and Electronics Engineers (IEEE) standard IEEE802.11 a, IEEE802.11 b, IEEE802.11g, and/or IEEE802.11 n), Voice over Internet Protocol (VoIP), world wide mail Access (Microwave Access for micro), wimax-1, other suitable short message protocols, and any other suitable Protocol for instant messaging, and may even include those protocols that have not yet been developed.

The memory 920 may be configured to store software programs and modules, such as program instructions/modules corresponding to the user authentication method based on the WiFi-Aware network in the foregoing embodiment, and the processor 980 executes various functional applications and data processing by running the software programs and modules stored in the memory 920, that is, functions of charging a backup battery, charging a battery, and the like. The memory 920 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 920 may further include memory located remotely from the processor 980, which may be connected to the terminal 900 over a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The input unit 930 may be used to receive input numeric or character information and generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function control. In particular, the input unit 930 may include a touch-sensitive surface 931 as well as other input devices 932. The touch-sensitive surface 931, also referred to as a touch screen or a touch pad, may collect touch operations by a user on or near the touch-sensitive surface 931 (e.g., operations by a user on or near the touch-sensitive surface 931 using a finger, a stylus, or any other suitable object or attachment) and drive the corresponding connecting device according to a predetermined program. Alternatively, the touch sensitive surface 931 may include both a touch detection device and a touch controller. The touch detection device detects the touch direction of a user, detects a signal brought by touch operation and transmits the signal to the touch controller; the touch controller receives touch information from the touch sensing device, converts the touch information into touch point coordinates, sends the touch point coordinates to the processor 980, and can receive and execute commands sent by the processor 980. In addition, the touch sensitive surface 931 may be implemented in various types, such as resistive, capacitive, infrared, and surface acoustic wave. The input unit 930 may also include other input devices 932 in addition to the touch-sensitive surface 931. In particular, other input devices 932 may include, but are not limited to, one or more of a physical keyboard, function keys (e.g., volume control keys, switch keys, etc.), a trackball, a mouse, a joystick, and the like.

The display unit 940 may be used to display information input by or provided to the user and various graphical user interfaces of the terminal 900, which may be made up of graphics, text, icons, video, and any combination thereof. The Display unit 940 may include a Display panel 941, and optionally, the Display panel 941 may be configured in the form of an LCD (Liquid Crystal Display), an OLED (Organic Light-Emitting Diode), or the like. Further, touch-sensitive surface 931 can overlay display panel 941, and when touch operation is detected on or near touch-sensitive surface 931, processor 680 can determine the type of touch event, and processor 980 can then provide a corresponding visual output on display panel 941 according to the type of touch event. Although the touch-sensitive surface 931 and the display panel 941 are shown as two separate components to implement input and output functions, in some embodiments, the touch-sensitive surface 931 and the display panel 941 may be integrated to implement input and output functions.

The terminal 900 can also include at least one sensor 950, such as a light sensor, motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor that may adjust the brightness of the display panel 941 according to the brightness of ambient light, and a proximity sensor that may generate an interrupt when the folder is closed or closed. As one of the motion sensors, the gravity acceleration sensor can detect the magnitude of acceleration in each direction (generally, three axes), can detect the magnitude and direction of gravity when the mobile phone is stationary, and can be used for applications of recognizing the posture of the mobile phone (such as horizontal and vertical screen switching, related games, magnetometer posture calibration), vibration recognition related functions (such as pedometer and tapping), and the like; as for other sensors such as a gyroscope, a barometer, a hygrometer, a thermometer, and an infrared sensor, which can be configured in the terminal 900, detailed descriptions thereof are omitted.

Audio circuitry 960, speaker 961, and microphone 962 may provide an audio interface between a user and terminal 900. The audio circuit 960 may transmit the electrical signal converted from the received audio data to the speaker 961, and convert the electrical signal into a sound signal for output by the speaker 961; on the other hand, the microphone 962 converts the collected sound signal into an electric signal, converts the electric signal into audio data after being received by the audio circuit 960, and outputs the audio data to the processor 980 for processing, and then transmits the audio data to another terminal via the RF circuit 910, or outputs the audio data to the memory 920 for further processing. The audio circuit 960 may also include an earbud jack to provide communication of peripheral headphones with the terminal 900.

The terminal 900, which can assist a user in receiving requests, sending messages, etc., through a transmission module 970 (e.g., a Wi-Fi module), provides the user with wireless broadband internet access. Although the transmission module 970 is shown in the drawing, it is understood that it does not belong to the essential constitution of the terminal 900 and can be omitted entirely as needed within the scope not changing the essence of the invention.

The processor 980 is a control center of the terminal 900, connects various parts of the entire handset using various interfaces and lines, and performs various functions of the terminal 900 and processes data by operating or executing software programs and/or modules stored in the memory 920 and calling data stored in the memory 920, thereby integrally monitoring the terminal. Optionally, processor 980 may include one or more processing cores; in some embodiments, the processor 980 may integrate an application processor, which primarily handles operating systems, user interfaces, applications, etc., and a modem processor, which primarily handles wireless communications. It will be appreciated that the modem processor described above may not be integrated into the processor 980.

Terminal 900 can also include a power supply 990 (e.g., a battery backup and battery) that can be logically coupled to processor 980 via a power management system in some embodiments, such that functions to manage charging, discharging, and power consumption management are performed via the power management system. Power supply 990 may also include any component of one or more dc or ac power sources, recharging systems, power failure detection circuits, power converters or inverters, power status indicators, and the like.

Although not shown, the terminal 900 further includes a camera (e.g., a front camera, a rear camera), a bluetooth module, etc., which are not described in detail herein. Specifically, in this embodiment, the display unit of the terminal is a touch screen display, the terminal further includes a memory, and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for:

or;

It will be understood by those skilled in the art that all or part of the steps of the methods of the above embodiments may be performed by instructions or by associated hardware controlled by the instructions, which may be stored in a computer readable storage medium and loaded and executed by a processor. To this end, an embodiment of the present invention provides a storage medium, where a plurality of instructions are stored, where the instructions can be loaded by a processor to execute the steps of any embodiment of the WiFi-Aware network based user authentication method provided in the embodiment of the present invention.

Wherein the storage medium may include: read Only Memory (ROM), Random Access Memory (RAM), magnetic or optical disks, and the like.

Since the instructions stored in the storage medium may execute the steps in any embodiment of the WiFi-Aware network based user authentication method provided in the embodiment of the present application, beneficial effects that any WiFi-Aware network based user authentication method provided in the embodiment of the present application can achieve may be achieved, for details, see the foregoing embodiment, and are not described herein again.

The method, the device, the storage medium and the terminal for user identity authentication based on the WiFi-Aware network provided by the embodiment of the present application are introduced in detail, a specific example is applied in the present application to explain the principle and the implementation of the present application, and the description of the above embodiment is only used to help understanding the method and the core idea of the present application; meanwhile, for those skilled in the art, according to the idea of the present application, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present application.

Claims

1. A user identity authentication method based on a WiFi-Aware network is characterized by being applied to a client, wherein the WiFi-Aware network is deployed in a public transportation place, a network device end in the WiFi-Aware network comprises a control center device and at least one ticket checking channel device which are in communication connection, the control center device is a main device in the WiFi-Aware network, the ticket checking channel device is a non-main synchronous device or a non-main asynchronous device in the WiFi-Aware network, when the client is added into the WiFi-Aware network, the client is the non-main synchronous device or the non-main asynchronous device in the WiFi-Aware network, and in the WiFi-Aware network, the main device, the non-main synchronous device and the non-main asynchronous device can transmit and receive service discovery frames, the user identity authentication method comprises the following steps:

when the WiFi-Aware network is added and a user is monitored to enter the ticket checking channel equipment, acquiring a first equipment address of the entering ticket checking channel equipment, and identity information and ticket business information of the user;

generating an identity authentication request carrying the identity information, the ticket information and the first equipment address, wherein the identity authentication request is a service discovery frame generated by the client;

the identity authentication request is sent to the network equipment terminal through the WiFi-Aware network, and is used for indicating the control center equipment to authenticate the identity of the user according to the identity information and the ticket information and controlling the entering ticket checking channel equipment to pass when the authentication is successful;

before joining the WiFi-Aware network, the method further comprises the following steps:

when a connectable wireless network is detected, acquiring current geographic position information of the client and a second device address of the wireless network, wherein the wireless network is a WiFi-Aware network with security to be evaluated, and the second device address of the wireless network comprises physical addresses of a plurality of devices in the wireless network;

identifying a public transportation place where the user is currently located based on the geographical position information;

inquiring to obtain the equipment addresses of the control center equipment and the ticket checking channel equipment in the current public transportation place so as to obtain the stored equipment addresses;

determining that the wireless network is the WiFi-Aware network when the second device address comprises the stored device address.

2. The method for authenticating the user according to claim 1, further comprising, before the acquiring the first device address of the entering ticket checking channel device, and the identity information and ticket service information of the user:

detecting the network signal intensity value of each ticket checking channel device;

when the network signal intensity value larger than the preset threshold value is detected to exist, the user is monitored to enter the ticket checking channel device.

3. The method for user authentication according to claim 1, further comprising, after joining the WiFi-Aware network:

sending help seeking information to the control center equipment through the WiFi-Aware network;

and receiving reply information returned by the control center equipment according to the help seeking information through the WiFi-Aware network.

4. A user identity authentication method based on a WiFi-Aware network is characterized by being applied to a network equipment end, wherein the WiFi-Aware network is deployed in public transportation places, the network equipment end comprises a control center device and at least one ticket checking channel device, the control center device is a main device in the WiFi-Aware network, the ticket checking channel device is a non-main synchronous device or a non-main asynchronous device in the WiFi-Aware network, when a client is added into the WiFi-Aware network, the client is the non-main synchronous device or the non-main asynchronous device in the WiFi-Aware network, and in the WiFi-Aware network, the main device, the non-main synchronous device and the non-main asynchronous device can transmit and receive service discovery frames, the user identity authentication method comprises the following steps:

receiving an identity authentication request sent by the client, wherein the identity authentication request carries user identity information, ticket information and a first equipment address, the identity authentication request is that when the client detects a connectable wireless network, the current geographic position information of the client and a second equipment address of the wireless network are obtained, the wireless network is a WiFi-Aware network of which the security is to be evaluated, the second equipment address of the wireless network comprises physical addresses of a plurality of equipment in the wireless network, the current public transportation place of the user is identified based on the geographic position information, then the equipment addresses of control center equipment and ticket checking channel equipment in the current public transportation place are inquired and obtained to obtain a stored equipment address, and when the second equipment address comprises the stored equipment address, determining that the wireless network is the WiFi-Aware network, and then when the client is added into the WiFi-Aware network and a user is monitored to enter the ticket checking channel equipment, generating a service discovery frame by the client and sending the service discovery frame to the network equipment end through the WiFi-Aware network;

according to the identity information and the ticket information, identity authentication is carried out on the user through the control center equipment;

and when the verification is successful, controlling the ticket checking channel equipment corresponding to the first equipment address to pass through by the control center equipment.

5. The method according to claim 4, further comprising, before the receiving the authentication request sent by the client, the steps of:

detecting a network signal strength value of the client joining the WiFi-Aware network through the at least one ticket checking channel device;

when the network signal strength value larger than the preset threshold value is detected to exist, the fact that a user enters the ticket checking channel device is determined, and the operation that the client side sends an identity verification request to the network device side through the WiFi-Aware network is triggered.

6. The user authentication method according to claim 4, further comprising:

and sending announcement information to the client joining the WiFi-Aware network.

7. A user identity authentication device based on a WiFi-Aware network is applied to a client, the WiFi-Aware network is deployed in a public transportation place, a network device end in the WiFi-Aware network comprises a control center device and at least one ticket checking channel device which are in communication connection, wherein the control center device is a main device in the WiFi-Aware network, the ticket checking channel device is a non-main synchronous device or a non-main asynchronous device in the WiFi-Aware network, when the client is added into the WiFi-Aware network, the client is the non-main synchronous device or the non-main asynchronous device in the WiFi-Aware network, and in the WiFi-Aware network, the main device, the non-main synchronous device and the non-main asynchronous device can transmit and receive a service discovery frame, the user authentication apparatus includes:

the first acquisition module is used for acquiring a first device address of the entering ticket checking channel device, and identity information and ticket business information of the user when the WiFi-Aware network is added and the user is monitored to enter the ticket checking channel device;

a generating module, configured to generate an authentication request carrying the identity information, the ticket information, and the first device address, where the authentication request is a service discovery frame generated by the client;

the sending module is used for sending the identity authentication request to the network equipment terminal through the WiFi-Aware network, wherein the identity authentication request is used for instructing the control center equipment to authenticate the identity of the user according to the identity information and the ticket service information, and controlling the entering ticket checking channel equipment to pass when the authentication is successful;

wherein, the user authentication device further comprises:

the second acquisition module is used for acquiring the current geographic position information of the client and a second equipment address of a wireless network when the connectable wireless network is detected, wherein the wireless network is a WiFi-Aware network with the security to be evaluated, and the second equipment address of the wireless network comprises the physical addresses of a plurality of equipment in the wireless network;

the first determining module is used for identifying the current public transportation place of the user based on the geographic position information, and inquiring to obtain the equipment addresses of the control center equipment and the ticket checking channel equipment in the current public transportation place so as to obtain the stored equipment address;

a second determining module, configured to determine that the wireless network is the WiFi-Aware network when the second device address includes the stored device address.

8. A user identity authentication device based on a WiFi-Aware network is characterized by being applied to a network device end, wherein the WiFi-Aware network is deployed in public transportation places, the network device end comprises a control center device and at least one ticket checking channel device which are in communication connection in the WiFi-Aware network, the control center device is a main device in the WiFi-Aware network, the ticket checking channel device is a non-main synchronous device or a non-main asynchronous device in the WiFi-Aware network, when a client is added into the WiFi-Aware network, the client is the non-main synchronous device or the non-main asynchronous device in the WiFi-Aware network, and in the WiFi-Aware network, the main device, the non-main synchronous device and the non-main asynchronous device can transmit and receive service discovery frames, the user authentication apparatus includes:

a receiving module, configured to receive an authentication request sent by the client, where the authentication request carries user identity information and ticket information, and a first device address, where the authentication request is to obtain current geographic location information of the client and a second device address of a wireless network when the client detects a connectable wireless network, where the wireless network is a WiFi-Awa network whose security is to be evaluated, where the second device address of the wireless network includes physical addresses of a plurality of devices in the wireless network, identify a public transportation location where the user is currently located based on the geographic location information, query and obtain device addresses of a control center device and a ticket checking channel device in the current public transportation location to obtain a stored device address, and when the second device address includes the stored device address, determining that the wireless network is the WiFi-Aware network, and then when the client is added into the WiFi-Aware network and a user is monitored to enter the ticket checking channel equipment, generating a service discovery frame by the client and sending the service discovery frame to the network equipment end through the WiFi-Aware network;

the verification module is used for verifying the identity of the user through the control center equipment according to the identity information and the ticket information;

and the control module is used for controlling the ticket checking channel equipment corresponding to the first equipment address to pass through the control center equipment when the verification is successful.

9. A computer-readable storage medium having stored therein a plurality of instructions adapted to be loaded by a processor to perform the user authentication method of any one of claims 1 to 3, or the user authentication method of any one of claims 4 to 6.