KR101881255B1 - Apparatus and method for connecting process to access point of wireless local area network - Google Patents

Abstract

Provided is an apparatus for performing a router access process to access a network such as a WLAN or the like. In one embodiment, a router access processing apparatus includes a router information receiving part for receiving information on one or more connectable routers, a security index determining part for determining a security index for each of the one or more routers based on a security method of the routers, and a router rating determining part for determining a router rating based on the security index and connection strength for each of the one or more routers.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an apparatus and a method for processing an AP connection of a wireless local area network

The present invention relates to an apparatus and method for performing an access process to an access point (AP) of a wireless local area network (WLAN), and more particularly to a router access processing apparatus and method for evaluating and avoiding a malicious router in advance ≪ / RTI >

As a method for connecting to a network when using a portable communication terminal, a method of connecting to a communication network provided by a communication company and a method of connecting to a WLAN through a wireless AP provided in the vicinity of the communication terminal are widely used.

The security of the router tends not to attract much attention compared to the security of the portable communication terminal. However, the number of victims related to the security of the router due to the malicious code infection of the router is continuously increasing, so the security of the router is also becoming more important.

Particularly, when accessing a publicly accessible AP using a portable communication terminal, it is difficult to confirm whether the manager of the corresponding router is faithfully performing firmware update or the like, so that it can be exposed to threats such as malicious code without any protection.

According to one aspect of the present invention, a router access processing apparatus includes a router information receiver for receiving information on one or more routers to which the router is connectable, a security exponent determiner for determining a security exponent based on a security scheme of the router for each of the one or more routers, And a router rating determination unit for determining a router rating based on the security index and connection strength for each of the one or more routers.

In one embodiment, the router connection processing apparatus further includes an authentication requesting unit for requesting authentication for connection to the router having the highest router rating among the one or more routers.

In one embodiment, the router access processing apparatus further comprises an indicator for the one or more routers to provide the user with an enumerated list arranged in router shorthand order.

In one embodiment, the display unit provides for each of the one or more routers on the list a color corresponding to a security index or security scheme of the router.

In one embodiment, the information about the one or more routers includes the MAC address, SSID, signal strength, connection authentication scheme, data encryption scheme, and communication frequency of the router.

In one embodiment, the security index determination unit determines the security index of each router based on at least one of a connection authentication method and a data encryption method of the router.

In one embodiment, the connection strength is calculated based on at least one of the signal strength of the router and the processing capacity of the router.

In one embodiment, the router rating determiner uses the first weight for the security index and the second weight for the link strength to determine the router rating.

In one embodiment, the router rating determiner provides an initial value of each of the first weight and the second weight, and provides an interface by which the first weight and the second weight can be modified according to the setting of the user.

According to another aspect of the present invention, a router access processing apparatus includes a router information receiver for receiving information on one or more routers connectable to the router, a security exponent determiner for determining a security exponent based on a security scheme of the router, A router score determining unit for determining a router rating based on the security index and connection strength for each of the at least one router, and a database storing the security index of each router and the connection history of the user terminal to each router.

In one embodiment, the database further stores a list of security routers including only those routers whose security index of the one of the one or more routers is equal to or higher than a reference value.

In one embodiment, the router connection processing apparatus further includes an authentication requesting unit for requesting authentication for connection to the router having the highest router rating among the routers included in the security router list.

In one embodiment, the router access processing apparatus further includes an indicator for allowing the routers included in the list of security routers to provide the user with an enumerated list arranged in router shorthand order.

In one embodiment, the security index determination unit determines the security index of each router based on at least one of a connection authentication method and a data encryption method of the router.

In one embodiment, the connection strength is calculated based on at least one of the signal strength of the router and the processing capacity of the router.

In one embodiment, the router rating determiner uses the first weight for the security index and the second weight for the link strength to determine the router rating.

According to another aspect, a router access method comprises receiving information about one or more routers to which it is connectable, determining a security index based on the security method of the router for each of the one or more routers, And determining the router rating based on the security index and connection strength for the router.

According to another aspect, a router access processing method includes receiving information on one or more routers to which access is possible, determining a security index based on a security method of the router for each of the one or more routers, Determining a router rating based on the security index and connection strength, and storing the security index of each router and the connection history of the user terminal to each router in a database.

1 is a block diagram for explaining a router access processing apparatus according to an embodiment.
2 is a block diagram for explaining a router access processing apparatus according to an embodiment.
3 is a flowchart for explaining a router access processing method according to an embodiment.
4 is a flowchart for explaining a router access processing method according to an embodiment.
5 is a flowchart for explaining a router access processing method according to an embodiment.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. However, the scope of the rights is not limited or limited by these embodiments. Like reference symbols in the drawings denote like elements.

The terms used in the following description are chosen to be generic and universal in the art to which they are related, but other terms may exist depending on the development and / or change in technology, customs, preferences of the technician, and the like. Accordingly, the terminology used in the following description should not be construed as limiting the technical thought, but should be understood in the exemplary language used to describe the embodiments.

Also, in certain cases, there may be a term chosen arbitrarily by the applicant, in which case the meaning of the detailed description in the corresponding description section. Therefore, the term used in the following description should be understood based on the meaning of the term, not the name of a simple term, and the contents throughout the specification.

1 is a block diagram for explaining a router access processing apparatus according to an embodiment. In one embodiment, the router access processing apparatus 100 may be a device that processes a process for accessing a router of an AP supporting WLAN. The security of the router can be evaluated and determined in advance through the router access processing device 100 and the malicious router or access to the router having the weak security can be prevented so that the threat due to the router security vulnerability can be prevented in advance.

In one embodiment, the router access processing apparatus 100 may include a router information receiver 110, a security exponent determiner 120, and a router rating determiner 130. The router access processing apparatus 100 may be implemented as a hardware component, a software component, and / or a combination of a hardware component and a software component as a module embedded in a server or a user terminal.

In one embodiment, the router information receiving unit 110 may receive information on routers that can be connected. For example, the router information receiving unit 110 may receive a MAC address, SSID, signal strength, a connection authentication method, a data encryption method, and a frequency of a routable router from a beacon frame broadcasted around the user terminal.

In one embodiment, the security exponent determiner 120 may determine a security index based on the security method of the router for each connectable router identified by the router information receiver 110. [ For example, the security index determination unit 120 may evaluate the security of the router by using the access authentication method and / or the data encryption method, and may express the score or grade related to security as a security index. In addition, the security index determination unit 120 may parameterize the number of times a security-related problem occurs in the router, and reflect the parameter in the security index.

In a non-limiting example, when the authentication method of the router is WPA2, the authentication method of the router is WPA, the authentication method of the router is WEP, and the router does not use the authentication procedure A different security index can be given to each of them. The security index may have any suitable form, such as a number between 0 and 10, or a rating expressed in alphabets.

For example, if the router uses WPA2, where security is the best of the above authentication schemes, the highest security index can be given relatively, and when the router does not use the authentication procedure, A security index can be given.

In one embodiment, the router evaluation unit 130 may determine the router rating based on the security index of the router determined by the security index determination unit 120 and the connection strength of the router. The router rating is a parameter for determining a secure and fast router, and may have any suitable form, such as a value between 0 and 100, for example.

In one embodiment, the connection strength of the router may be determined based on the signal strength of the router. In addition, the link strength of the router may be determined by additionally or alternatively considering the processing capacity of the router. Even if the strength of the signal received from the router is high, the communication speed actually applied may not be proportional to the signal strength when a plurality of terminals are connected unless the processing capacity of the router is large. Therefore, the processing capacity of the router and / or the number of terminals connected to the router may be additionally considered in determining the connection strength so as to reflect the actual communication speed when connecting to the router.

In one embodiment, the router evaluation unit 130 can calculate the router rating using the weight according to the relative importance between security and communication speed. For example, it is possible to calculate a router rating that reflects the relative importance by multiplying the security index reflecting the security of the router by the first weight, multiplying the connection strength reflecting the communication speed of the router by the second weight, and summing. The router evaluation point determining unit 130 basically provides initial values of the first weight and the second weight, respectively, and may provide an interface for modifying the first weight and the second weight according to the setting of the user. If an item reflected in the router rating is increased or changed, the weight can also be changed to match it.

In addition, the relative importance of security and communication speed may vary depending on the operation to be performed by the terminal connected to the network. Accordingly, in such a case, the router evaluation unit 130 may be configured to temporarily modify the first weight and the second weight according to commands of the server or the terminal.

The router rating thus determined can be used as a measure to determine a secure and fast router. Specifically, the access priority can be determined using the router rating to recommend a router having a high priority to the user, or to automatically attempt to access the router having the highest priority among the routers that have been used before.

In one embodiment, the router access processing apparatus 100 may further include an indicator (not shown) for providing the user with an ordered list of routers sorted in the order of the router ratings determined by the router rating determiner 130. A router that can be connected and a priority order are provided through a list arranged in the order of router ratings, so that a user can easily select a router to be connected. In addition, a color corresponding to the security index or the security method of the router may be provided for each of the router on the list, thereby enhancing the recognition convenience of the user.

As a concrete example, routers with a high security index or a high priority recommendation are indicated in blue, and routers with a low security index or a low priority of recommendation can be indicated in black. Routers that have a serious security problem or that do not recommend access can be marked in red or completely removed from the list.

In this way, it is possible to anticipate the security of the router in advance, and prevent the malicious router or access to the weak router, thereby preventing the threat caused by the security vulnerability of the router in advance.

2 is a block diagram for explaining a router access processing apparatus according to an embodiment. In one embodiment, the router access processing apparatus 200 may be a device that processes a process for connecting to a router of an AP supporting WLAN. The security of the router can be evaluated and determined in advance through the router access processing device 200 and the malicious router or access to the router having low security can be prevented so that the threat due to the router security vulnerability can be prevented in advance.

In one embodiment, the router access processing apparatus 200 includes a router information receiving unit 210, a security index determining unit 220, a router evaluation unit 230, a router database 240, and an authentication request unit 250 . The router access processing device 200 may be implemented as a hardware component, a software component, and / or a combination of a hardware component and a software component as a module embedded in a server or a user terminal.

The router access processing apparatus 200 further includes a router database 240 and an authentication requesting unit 250 in comparison with the router access processing apparatus 100 described with reference to FIG. With this configuration, it is possible not to repeatedly determine the evaluation value of the router for evaluation of security and the like, and if necessary, the router information that has been evaluated or confirmed beforehand from the external server can be provided. In addition, the access history recorded in the database 240 can be used to automatically request authentication to the router having the highest priority among the routers that have been used previously to attempt connection

In one embodiment, the router database 240 may store the security index of the router and the connection history of the user terminal to the router. When the router database 240 holds a list in which the security index of the router is stored, it is possible not to repeatedly determine the security index if there is no reason to change the security.

In the case of the connection strength reflected in the router rating, since the real-time variation is a very large parameter, it is not necessary to store the connection strength in the router database 240. However, since the security index is not relatively volatile, it can be managed as a list.

In one embodiment, the router database 240 may store only the information about the router itself that has been evaluated, but may additionally receive router information from an external server. As a specific example, the router database 240 may be provided with a list of routers whose security has been evaluated by an external device. The list provided may include a MAC address, an SSID, and a security index, and may be provided in a black list including a whitelist excluding a router having a security problem or a router having a security problem.

In one embodiment, the router database 240 may be configured to periodically update the security assessment. The security index determining unit 220 and the router evaluation unit 230 may determine the security index according to the appropriate period, even if the MAC address and the SSID of the router are the same, It is necessary to update the router information of the router database 240 by re-executing the security evaluation.

In addition, the router database 240 is preferably configured so that the security evaluation of all or a part of the routers stored in the router database 240 can be updated according to a request of the user or application separately from the update period.

In one embodiment, the authentication request unit 250 refers to the router database 240 and requests authentication for connection to the router having the highest router rating determined by the router evaluation unit 230 to automatically attempt connection have. In the preferred embodiment, the authentication requesting unit 250 can be set to automatically attempt connection only to a router that the user terminal has previously connected to.

In one embodiment, the router access processing apparatus 200 includes a display unit (not shown) for providing a user with an ordered list of routers sorted by the router rating determined by the router evaluation unit 230 with reference to the router database 240 ). A router that can be connected and a priority order are provided through a list arranged in the order of router ratings, so that a user can easily select a router to be connected. In addition, a color corresponding to the security index or the security method of the router may be provided for each of the router on the list, thereby enhancing the recognition convenience of the user.

3 is a flowchart for explaining a router access processing method according to an embodiment. The router access processing method of FIG. 3 can be performed, for example, by the router access processing apparatus described with reference to FIG. 1 or FIG.

At step 310, information about the routable routers may be received. For example, it can receive the MAC address, SSID, signal strength, connection authentication method, data encryption method, frequency, and the like of the connectable router, from the beacon frame broadcasted around the user terminal.

In step 320, a security index for each router may be determined based on the access authentication method and the data encryption method. For example, the security of the router can be evaluated using the connection authentication method and / or the data encryption method to express the score or grade related to security as a security index, and parameters such as the number of times security related problems occur in the router are parameterized This can be reflected in the security index.

At step 330, a router rating for each router may be determined based on security measures and connection strength. The router rating can be determined using a security index reflecting the security of the router, a connection strength reflecting the communication speed of the router, and a weight given to the relative importance between security and communication speed.

At step 340, the router with the highest router rating can be recommended to the user. Since the rating of the router shows an evaluation of the priority of the router to be connected, it is recommended to recommend the router with the highest router rating to the user in a pop-up manner, or provide a list sorted in descending order of the router rating, . ≪ / RTI >

4 is a flowchart for explaining a router access processing method according to an embodiment. The router access processing method of FIG. 4 can be performed by, for example, the router access processing apparatus described with reference to FIG. 1 or FIG.

At step 410, information about routable routers may be received. For example, it can receive the MAC address, SSID, signal strength, connection authentication method, data encryption method, frequency, and the like of the connectable router, from the beacon frame broadcasted around the user terminal.

In step 420, based on the router's MAC address and SSID, routers that are not present on the whitelist may be excluded from the list of routable routers. For example, the whitelist may be a list stored in a database held by a server or a terminal, and may be a list including only a security router whose connection is recommended.

In step 430, the security rating indicated in the whitelist may be checked to exclude a router below the reference security level from the routers list that can be accessed. For example, by checking the security index of the router included in the whitelist, the security method, or the history related to the security, the security is checked. If the security level of the router is lower than the reference security level, .

In step 440, a security index for each router may be determined based on the access authentication method and the data encryption method. For example, the security of the router can be evaluated using the connection authentication method and / or the data encryption method to express the score or grade related to security as a security index, and parameters such as the number of times security related problems occur in the router are parameterized This can be reflected in the security index.

At step 450, a router rating for each router may be determined based on security measures and connection strength. The router rating can be determined using a security index reflecting the security of the router, a connection strength reflecting the communication speed of the router, and a weight given to the relative importance between security and communication speed.

At step 460, the router with the highest router rating can be recommended to the user. Since the rating of the router shows an evaluation of the priority of the router to be connected, it is recommended to recommend the router with the highest router rating to the user in a pop-up manner, or provide a list sorted in descending order of the router rating, . ≪ / RTI >

5 is a flowchart for explaining a router access processing method according to an embodiment. The router access processing method of Fig. 5 can be performed by the router access processing apparatus described with reference to Fig. 1 or Fig. 2, for example.

At step 510, information about routable routers may be received. For example, it can receive the MAC address, SSID, signal strength, connection authentication method, data encryption method, frequency, and the like of the connectable router, from the beacon frame broadcasted around the user terminal.

In step 520, a security index for each router may be determined based on the access authentication method and the data encryption method. For example, the security of the router can be evaluated using the connection authentication method and / or the data encryption method to express the score or grade related to security as a security index, and parameters such as the number of times security related problems occur in the router are parameterized This can be reflected in the security index.

At step 530, the router rating for each router may be determined based on security measures and connection strength. The router rating can be determined using a security index reflecting the security of the router, a connection strength reflecting the communication speed of the router, and a weight given to the relative importance between security and communication speed.

At step 540, the user terminal can verify that there is a router that it has connected to. The router access history of the user terminal can be confirmed using the history recorded in the server or the terminal. If there is a router to which the user terminal has connected in the access router list, the flow may proceed to step 550. If there is no router to which the user terminal has connected in the access router list, step 560 may be performed.

In step 550, the user terminal may attempt to automatically connect to the router with the highest router rating among the routers to which the user terminal has connected. That is, for a router having a history that has been connected to the router more than once, it may be configured to automatically request the router to authenticate without attempting to pass the connection manually.

At step 560, the router with the highest router rating can be recommended to the user. Since the rating of the router shows an evaluation of the priority of the router to be connected, it is recommended to recommend the router with the highest router rating to the user in a pop-up manner, or provide a list sorted in descending order of the router rating, . ≪ / RTI >

The apparatus described above may be implemented as a hardware component, a software component, and / or a combination of hardware components and software components. For example, the apparatus and components described in the embodiments may be implemented within a computer system, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable array (FPA) A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For ease of understanding, the processing apparatus may be described as being used singly, but those skilled in the art will recognize that the processing apparatus may have a plurality of processing elements and / As shown in FIG. For example, the processing unit may comprise a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of the foregoing, and may be configured to configure the processing device to operate as desired or to process it collectively or collectively Device can be commanded. The software and / or data may be in the form of any type of machine, component, physical device, virtual equipment, computer storage media, or device , Or may be permanently or temporarily embodied in a transmitted signal wave. The software may be distributed over a networked computer system and stored or executed in a distributed manner. The software and data may be stored on one or more computer readable recording media.

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

Although the embodiments have been described with reference to the drawings, various modifications and variations may be made by those skilled in the art. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (19)

A router information receiver for receiving information on one or more routers connectable;
A security exponent determiner for determining a security exponent based on a security scheme of the router for each of the one or more routers; And
A value obtained by multiplying the security index by the first weight and a connection strength for each of the one or more routers, the connection strength being calculated based on the signal strength of the router and the processing capacity of the router, and multiplying the value by the second weight A router evaluation point determining unit for determining a router evaluation point
And a router connected to the router. The method according to claim 1,
An authentication request unit for requesting authentication for connection to a router having the highest router rating of the one or more routers,
Further comprising: The method according to claim 1,
Wherein the one or more routers are arranged in the order of the router ratings to provide the user with an enumerated list
Further comprising: The method of claim 3,
Wherein the display unit provides, for each of the one or more routers on the list, a color corresponding to a security index or security scheme of the router,
Router connection processing device. The method according to claim 1,
Wherein the information on the one or more routers includes the MAC address, SSID, signal strength, connection authentication scheme, data encryption scheme, and communication frequency of the router.
Router connection processing device. The method according to claim 1,
Wherein the security-
Determining a security index of each of the routers based on at least one of a connection authentication method and a data encryption method of the router,
Router connection processing device. delete delete The method according to claim 1,
The router-
Providing an initial value of each of the first weight and the second weight and providing an interface capable of modifying a first weight and a second weight according to a user's setting,
Router connection processing device. A router information receiver for receiving information on one or more routers connectable;
A security exponent determiner for determining a security exponent based on a security scheme of the router for each of the one or more routers;
A value obtained by multiplying the security index by the first weight and a connection strength for each of the one or more routers, the connection strength being calculated based on the signal strength of the router and the processing capacity of the router, and multiplying the value by the second weight A router evaluation unit determining a router evaluation score; And
A security index of each router, and a database in which the access history of the user terminal for each router is stored
And a router connected to the router. 11. The method of claim 10,
Wherein a list of security routers including only a router whose security index of the router of the at least one router is equal to or higher than a reference value is additionally stored in the database,
Router connection processing device. 12. The method of claim 11,
Further comprising an authentication request unit for requesting authentication for connection to a router having the highest router rating of the router included in the security router list,
Router connection processing device. 12. The method of claim 11,
A list of routers included in the list of security routers is arranged in the order of the router ratings,
Further comprising: 12. The method of claim 11,
Wherein the security-
Determining a security index of each of the routers based on at least one of a connection authentication method and a data encryption method of the router,
Router connection processing device. delete delete A router connection processing method comprising:
Receiving information about one or more routers connectable;
Determining a security index based on a security scheme of the router for each of the one or more routers; And
A value obtained by multiplying the security index by the first weight and a connection strength for each of the one or more routers, the connection strength being calculated based on the signal strength of the router and the processing capacity of the router, and multiplying the value by the second weight Steps to determine router rating
And a router access processing unit. A router connection processing method comprising:
Receiving information about one or more routers connectable;
Determining a security index based on a security scheme of the router for each of the one or more routers;
A value obtained by multiplying the security index by the first weight and a connection strength for each of the one or more routers, the connection strength being calculated based on the signal strength of the router and the processing capacity of the router, and multiplying the value by the second weight Determining a router rating; And
Storing the security index of each router and the access history of the user terminal to each router in the database
And a router access processing unit. A computer-readable recording medium storing a program for performing the router access processing method according to any one of claims 17 and 18.

Images