CN104469762A

CN104469762A - User grading control system of 3G/WIFI wireless router

Info

Publication number: CN104469762A
Application number: CN201310411926.5A
Authority: CN
Inventors: 熊海桥
Original assignee: XI'AN LONGFEI NETWORK SCIENCE & TECHNOLOGY Co Ltd
Current assignee: XI'AN LONGFEI NETWORK SCIENCE & TECHNOLOGY Co Ltd
Priority date: 2013-09-12
Filing date: 2013-09-12
Publication date: 2015-03-25

Abstract

The invention relates to a user grading control system of a 3G/WIFI wireless router. The method comprises the following steps that: (1), different network access permissions are set in a 3G/WIFI router; (2), a user information list is established in the 3G/WIFI router; (3), a superuser is set in the 3G/WIFI router; (4), a control information list is established in the 3G/WIFI router; (5), the 3G/WIFI router is configured with a firewall rule and a network access permission is set; (6), the user is in a limited access state when a set router is connected by the WIFI network; (7), the router obtains the user permission from the user information list according to user information, binding is carried out based on the MAC address/IP address information of the user and the network permission, the information is written into the control information list, and the firewall rule is set; and (8), according to the obtained permission, the network access is carried out and the router also monitors the user state dynamically; when the user carries out connection with the router, a timer is set to carry out monitoring; and authentication needs to be carried out again when the user needs access again. The method has characteristics of enhanced system safety and usability.

Description

A kind of 3G/WIFI wireless router user hierarchical control method

Technical field

The invention belongs to 3G/WIFI wireless routing user's control technology field, controlled the method for customer access network authority by authenticating user identification, particularly relate to a kind of 3G/ WIFI wireless router user hierarchical control method.

Background technology

Along with the development of 3G technology, 3G wireless access rate is more and more higher, the application of 3G wireless router in enterprise and family is also more and more extensive, make multiple user share express network resource and become possibility, current 3G WIFI router provides access authentication, but do not control user and log in access control to Internet resources after router, especially the setting of whether some resource of limited accass when non-associate uses router, therefore there is the deficiency of fail safe aspect, method in this paper can control according to user authentication data the authority that user uses network, enhance security of system and use cheap property.

Summary of the invention

For the problem of 3G/WIFI wireless router access control fail safe deficiency, the present invention proposes a kind of 3G/ WIFI wireless router user hierarchical control method, use the access rights of 3G/WIFI router accessing Internet or local area network (LAN) to set to different user.

Make in this way:

1) preset the authority of intra-company personnel accesses network, when interior employee's access device, obtain the authority of accesses network according to the username and password of input.

2) set different bundle of permissions to foreign subscriber, often group uses same username and password, and company external staff uses some username and password access networks, gets this group network authority, convenient for users and ensure that network security.

3) use and support finger print identifying, the built-in fingerprint base of router, supporting that access user carries out fingerprint login, correspond to the access rights of user according to finger print information.

4) user is by after WIFI certification access, needs to connect the web server in 3G/WIFI router, obtains corresponding Web vector graphic authority after logging in, router timing inquiring user logging status.

According to above content, realize the control to customer access network authority by software logic in the router.

To achieve these goals, the technical solution used in the present invention is:

A kind of 3G/WIFI router user hierarchical control method, performing step is as follows:

1) in 3G/WIFI router, set different network access authoritys respectively, the difference according to application scenario can be divided into: without network access authority, only can access 3G/WIFI router, only can access Intranet, only can access outer net, can access Inside and outside network and can use all-network resource;

2) in 3G/WIFI router, user message table is set up, recording user title and corresponding authority in table, in 3G/WIFI router, set up fingerprint base, fingerprint base has fingerprint and user profile, can user profile be obtained by fingerprint base, can network legal power be got in user message table;

3) in 3G/WIFI router, set power user, this user has the ability upgrading user right table/fingerprint base information, must be changed as changed network access authority by power user;

4) in 3G/WIFI router, control information table is set up, the user right of recording user IP address in table, MAC Address and correspondence;

5) using IPTABLES tool configuration firewall rule at 3G/WIFI router, setting the authority of accesses network, for supporting the access of user to Internet resources of different rights;

6) be without network access authority state when user accesses by WIFI network the router set, user needs user's login interface in access router, input user name cipher inquiry user profile or import finger print information into router by far-end finger print input device, by fingerprint base searching user's information in user message table;

7) 3G/WIFI router obtains user right according to user profile in user message table, and bind according to the information of the MAC Address/IP address of user and network legal power, then by these information write control information tables, simultaneously by IPTABLES tool settings firewall rule;

8) user is according to the authority accesses network got 3G/WIFI router also dynamic monitoring User Status simultaneously, during user connects 3G/WIFI router, set timer supervise, timer expiry then starts inquiring user state, when inquire user exit after renewal control information table and upgrade firewall rule, need certification again when user accesses again.

By the enforcement of above step, establish the grading control of network access authority.

Beneficial effect and the advantage of this method are:

1) in 3G/WIFI router, add user's grading control mechanism, change original 3G router log in after the mode of not restricting user access network legal power, Web vector graphic authority is divided into different ranks, employee of different nature is made to have different Web vector graphic authorities, can be set by power user as authority need be changed, control flexible.

2) improve the fail safe of access to netwoks, pass through grading control, make the resource that can access between the external employee of company and inner different employee different, user accesses the MAC/IP address of rear direct user bound, carry out dynamic supervision between active stage, ensure that the fail safe of important information in network.

3) enhance the ease for use by 3G/WIFI router access network, after network legal power classification, the username and password unified to a certain grade setting, facilitates access and the management of this class subscribers group.

4) have employed multiple user mode access, comprise the mode of manually input usemame/password and finger print identifying, be user-friendly to.

Accompanying drawing explanation

Fig. 1 is the setting process figure of 3G/WIFI router grading control of the present invention.

Fig. 2 is user's access process figure of the present invention.

Embodiment

Below in conjunction with specific embodiments and the drawings, the present invention is described in further detail.

embodiment 1

With reference to Fig. 1,2, the present embodiment is the process of external staff's accesses network resource, only typing user profile in user message table:

2) in 3G/WIFI router, in user message table, username and password and network access authority is added for external staff: only can access outer net;

4) external staff is linked into 3G/WIFI router by WIFI, and now user is in without network access authority state, and external staff connects user's login interface in 3G/WIFI router, input usemame/password;

5) 3G/WIFI router is searched user message table according to usemame/password and is obtained user right, and binds, then by these information write control information tables according to the information of the MAC Address/IP address of user and network legal power;

6) 3G/WIFI router obtains user right according to user profile in user message table, and bind according to the information of the MAC Address/IP address of user and network legal power, then by these information write control information tables, by IPTABLES tool settings firewall rule: can only outer net be accessed;

7) user is according to the authority accesses network got 3G/WIFI router also dynamic monitoring User Status simultaneously, during user connects 3G/WIFI router, set timer supervise, timer expiry then starts inquiring user state, when inquire user exit after renewal control information table and upgrade firewall rule, need certification again when user accesses again.

embodiment 2

The present embodiment is the process that intra-company personnel can access overall network resource, also can be logged in by fingerprint base mode by user message table:

2) in 3G/WIFI router, set up user message table, in table, recording user title and corresponding authority, set up fingerprint base in 3G/WIFI router.For internal staff carries out fingerprint typing in 3G/WIFI router, setting user profile and network legal power;

4) external staff is linked into 3G/WIFI router by WIFI, and now user is in without network access authority state, and external staff connects user's login interface in 3G/WIFI router, input usemame/password or directly typing fingerprint;

5) 3G/WIFI router is searched user message table according to finger print data acquisition user profile or usemame/password and is obtained user right, and bind, then by these information write control information tables according to the information of the MAC Address/IP address of user and network legal power;

6) 3G/WIFI router obtains user right according to user profile in user message table, and bind according to the information of the MAC Address/IP address of user and network legal power, then by these information write control information tables, by IPTABLES tool settings firewall rule: overall network resource can be accessed;

Claims

1. a 3G/WIFI router user hierarchical control method, is characterized in that, comprises the following steps:

6) be without network access authority state when user accesses by WIFI network the 3G/WIFI router set, user needs user's login interface in access 3G/WIFI router, input user name cipher inquiry user profile or import finger print information into router by far-end finger print input device, by fingerprint base searching user's information in user message table;