CN104935596B - A kind of communication security processing method and system - Google Patents
A kind of communication security processing method and system Download PDFInfo
- Publication number
- CN104935596B CN104935596B CN201510334456.6A CN201510334456A CN104935596B CN 104935596 B CN104935596 B CN 104935596B CN 201510334456 A CN201510334456 A CN 201510334456A CN 104935596 B CN104935596 B CN 104935596B
- Authority
- CN
- China
- Prior art keywords
- intelligent safety
- reception device
- safety terminal
- radio reception
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Power Engineering (AREA)
- Mobile Radio Communication Systems (AREA)
- Telephone Function (AREA)
Abstract
The present invention provides a kind of communication security processing methods and system, the above method to include the following steps：After intelligent safety terminal establishes connection with radio reception device, connection request is sent to the radio reception device；The radio reception device obtains the access times that foregoing description intelligent safety terminal accesses the radio reception device according to the address information of the intelligent safety terminal carried in the connection request；The radio reception device carries out control process according to the access times, the address information of the intelligent safety terminal, pair reserved information corresponding with the address information of the intelligent safety terminal；Said program is filled in by intelligent safety terminal opening browser using intelligent safety terminal user and checks reserved information, and to ensure not to be forged WIFI infringements, communications security greatly increases.
Description
Technical field
The invention belongs to communication security control field more particularly to a kind of communication security method and system.
Background technology
Prior art discloses a kind of mobile terminal one it is bonded enter public WIFI cut-in method, the method includes：
Installed on mobile terminal a preservation user mobile phone account one it is bonded enter using APP, the user mobile phone account includes user
Phone number and user access the dynamic authentication password that public WIFI needs；Mobile terminal accesses public WIFI and operation one is bonded
Enter APP；Mobile terminal detection one it is bonded enter APP whether be for the first time run；Detect one it is bonded enter APP be for the first time run
When, the access authentication page is jumped to, asks user's input handset number, and in user's input handset number and click access authentication
After acquisition identifying code button on the page, public WIFI certificate servers are sent and phone number input by user to mobile terminal
Corresponding dynamic authentication password, public WIFI certificate servers are according to dynamic authentication password input by user on the access authentication page
Carry out dynamic authentication password authentication, after being verified, one it is bonded enter APP be automatically performed activation, by cell-phone number input by user
Code and the dynamic authentication password that obtains as user mobile phone account be stored in one it is bonded enter APP in, and one it is bonded enter APP on it is aobvious
Show dynamic authentication password；Detect one it is bonded enter APP be not for the first time when running, one it is bonded enter APP be shown in one it is bonded enter APP
Dynamic authentication password in the user account of interior preservation；One it is bonded enter APP provide access button to the user, and receiving user
Dynamic authentication password is sent to carry out dynamic authentication mouth to public WIFI certificate servers after the input signal of click access button
Verification is enabled, after being verified, mobile terminal obtains networking permission.
Said program provides user and accesses a kind of easy communication mode of public WIFI, but is forged in public WIFI
In the case of, the account information of user can be revealed, such as phone number/username and password；Meanwhile user's communication information quilt completely
It monitors.
Invention content
In order to solve the above technical problem, the present invention provides a kind of communication security processing method and system, in solution
State technical problem.
In order to reach the object of the invention, the present invention provides a kind of communication security processing method and systems.Above method packet
Include following steps：
After intelligent safety terminal establishes connection with radio reception device, connection request is sent to the radio reception device；
The radio reception device is obtained according to the address information of the intelligent safety terminal carried in the connection request
Foregoing description intelligent safety terminal is taken to access the access times of the radio reception device；
The radio reception device according to the access times, the address information of the intelligent safety terminal, pair with it is described
The corresponding reserved information of address information of intelligent safety terminal carries out control process.
The present invention also provides a kind of communication security processing system, including intelligent safety terminal, radio reception device；Wherein,
The intelligent safety terminal is connected with the radio reception device；
The intelligent safety terminal after establishing connection with radio reception device, is sent to the radio reception device
Connection request；
The radio reception device, for being believed according to the address of the intelligent safety terminal carried in the connection request
Breath obtains the access times that foregoing description intelligent safety terminal accesses the radio reception device；
The radio reception device is additionally operable to the address information according to the access times, the intelligent safety terminal, right
Reserved information corresponding with the address information of the intelligent safety terminal carries out control process.
Pass through following scheme：After intelligent safety terminal establishes connection with radio reception device, to the radio reception device
Send connection request；The radio reception device is believed according to the address of the intelligent safety terminal carried in the connection request
Breath obtains the access times that foregoing description intelligent safety terminal accesses the radio reception device；The radio reception device root
It is pair corresponding with the address information of the intelligent safety terminal according to the access times, the address information of the intelligent safety terminal
Reserved information carry out control process；Said program opens browser using intelligent safety terminal user by intelligent safety terminal
It fills in and checks reserved information, to ensure not to be forged WIFI infringements, communications security greatly increases.
Pass through following scheme：If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then
The radio reception device obtains the corresponding reserved information of the intelligent safety terminal MAC Address and sends the reserved information
To the intelligent safety terminal；The intelligent safety terminal judges the reserved information received and is tied according to judgement
Fruit decides whether to disconnect the connection with the radio reception device；In said program, intelligent safety terminal is pre- by what is received
Information is stayed, it is not target communication device to judge the radio reception device, then disconnects the company between the radio reception device
It connects, the radio reception device for avoiding forging is to intelligent safety terminal security threat.
Pass through following scheme：If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then
The radio reception device obtains the corresponding reserved information of the intelligent safety terminal MAC Address and according to residing for access times
Access times range, determine corresponding accessory information and the reserved information, the accessory information be sent to the intelligence
Security terminal；The intelligent safety terminal judges the reserved information, the additional information that receive and according to sentencing
Break as a result, deciding whether to disconnect the connection with the radio reception device；Said program is realized to be set in third party's wireless access
The situation of the standby reserved information of interception, in a manner that additional information is verified, avoids third party's radio reception device malice
Access, ensure that the communication security between intelligent safety terminal and purpose radio reception device.
Description of the drawings
Attached drawing is used for providing further understanding technical solution of the present invention, and a part for constitution instruction, with this
The embodiment of application technical solution for explaining the present invention together, does not form the limitation to technical solution of the present invention.
The hardware architecture diagram of Fig. 1 mobile terminals of each embodiment to realize the present invention；
Fig. 2 is the communication system figure that can be operated according to the mobile terminal of the present invention；
Fig. 3 show the communication security process flow figure of the embodiment of the present invention 3；
Fig. 4 show the communication security process flow figure of the embodiment of the present invention 4；
Fig. 5 show the communication security processing system structure chart of the embodiment of the present invention 5.
The embodiments will be further described with reference to the accompanying drawings for the realization, the function and the advantages of the object of the present invention.
Specific embodiment
Come that the present invention will be described in detail below with reference to attached drawing and in conjunction with the embodiments.It should be noted that do not conflicting
In the case of, the feature in embodiment and embodiment in the application can be combined with each other.
It should be appreciated that the specific embodiments described herein are merely illustrative of the present invention, it is not intended to limit the present invention.
Intelligent safety terminal in the present invention includes mobile terminal, fixed terminal；Wherein, mobile terminal can be with various shapes
Formula is implemented.For example, intelligent safety terminal described in the present invention can include such as mobile phone, PDA (personal digital assistant),
The mobile terminals such as PAD (tablet computer)；Fixed terminal includes desktop computer.
Come that the present invention will be described in detail below with reference to attached drawing and in conjunction with the embodiments.It should be noted that do not conflicting
In the case of, the feature in embodiment and embodiment in the application can be combined with each other.
The mobile terminal of each embodiment of the present invention is realized in description with reference to the drawings.In subsequent description, use
For representing the suffix of such as " module ", " component " or " unit " of element only for being conducive to the explanation of the present invention, itself
There is no specific meanings.Therefore, " module " can be used mixedly with " component ".
The hardware architecture diagram of Fig. 1 mobile terminals of each embodiment to realize the present invention.
Mobile terminal 100 can include wireless communication unit 110, A/V (audio/video) input unit 120, user's input
Unit 130, sensing unit 140, output unit 150, memory 160, interface unit 170, controller 180 and power supply unit 190
Etc..Fig. 1 shows the mobile terminal with various assemblies, it should be understood that being not required for implementing all groups shown
Part.More or fewer components can alternatively be implemented.The element of mobile terminal will be discussed in more detail below.
Wireless communication unit 110 generally includes one or more components, allows mobile terminal 100 and wireless communication system
Or the radio communication between network.For example, wireless communication unit can include broadcasting reception module 111, mobile communication module
112nd, at least one of wireless Internet module 113, short range communication module 114 and location information module 115.
Broadcasting reception module 111 receives broadcast singal and/or broadcast via broadcast channel from external broadcast management server
Relevant information.Broadcast channel can include satellite channel and/or terrestrial channel.Broadcast management server can be generated and sent
The broadcast singal and/or broadcast related information that the server or reception of broadcast singal and/or broadcast related information generate before
And send it to the server of terminal.Broadcast singal can include TV broadcast singals, radio signals, data broadcasting
Signal etc..Moreover, broadcast singal may further include the broadcast singal combined with TV or radio signals.Broadcast phase
Closing information can also provide, and in this case via mobile communications network, and broadcast related information can be by mobile communication mould
Block 112 receives.Broadcast singal can exist in a variety of manners, for example, it can be with the electronics of digital multimedia broadcasting (DMB)
Program guide (EPG), digital video broadcast-handheld (DVB-H) electronic service guidebooks (ESG) etc. form and exist.Broadcast
Receiving module 111 can receive signal broadcast by using various types of broadcast systems.Particularly, broadcasting reception module 111
It can be wide by using such as multimedia broadcasting-ground (DMB-T), digital multimedia broadcasting-satellite (DMB-S), digital video
It broadcasts-holds (DVB-H), the Radio Data System of forward link media (MediaFLO@), received terrestrial digital broadcasting integrated service
(ISDB-T) etc. digit broadcasting system receives digital broadcasting.Broadcasting reception module 111, which may be constructed such that, to be adapted to provide for extensively
Broadcast the various broadcast systems of signal and above-mentioned digit broadcasting system.Via broadcasting reception module 111 receive broadcast singal and/
Or broadcast related information can be stored in memory 160 (or other types of storage medium).
Mobile communication module 112 sends radio signals to base station (for example, access point, node B etc.), exterior terminal
And at least one of server and/or receive from it radio signal.Such radio signal can lead to including voice
Talk about signal, video calling signal or the various types of data for sending and/or receiving according to text and/or Multimedia Message.
Wireless Internet module 113 supports the Wi-Fi (Wireless Internet Access) of mobile terminal.The module can be internally or externally
It is couple to terminal.Wi-Fi (Wireless Internet Access) technology involved by the module can include WLAN (Wireless LAN) (Wi-Fi), Wibro
(WiMAX), Wimax (worldwide interoperability for microwave accesses), HSDPA (high-speed downlink packet access) etc..
Short range communication module 114 is the module for supporting short range communication.Some examples of short-range communication technology include indigo plant
Tooth TM, radio frequency identification (RFID), Infrared Data Association (IrDA), ultra wide band (UWB), purple honeybee TM etc..
Location information module 115 is the module for checking or obtaining the location information of mobile terminal.Location information module
Typical case be GPS (global positioning system).According to current technology, GPS module 115 is calculated from three or more satellites
Range information and correct time information and for the Information application triangulation of calculating, so as to according to longitude, latitude
Highly accurately calculate three-dimensional current location information.Currently, it is defended for the method for calculation position and temporal information using three
Star and the error that the position calculated and temporal information are corrected by using an other satellite.In addition, GPS module 115
It can be by Continuous plus current location information in real time come calculating speed information.
A/V input units 120 are used to receive audio or video signal.A/V input units 120 can include 121 He of camera
Microphone 1220, camera 121 in video acquisition mode or image capture mode by image capture apparatus obtain static map
The image data of piece or video is handled.Treated, and picture frame may be displayed on display unit 151.At camera 121
Picture frame after reason can be stored in memory 160 (or other storage mediums) or be carried out via wireless communication unit 110
It sends, two or more cameras 1210 can be provided according to the construction of mobile terminal.Microphone 122 can be in telephone relation mould
Sound (audio data) is received via microphone in formula, logging mode, speech recognition mode etc. operational mode, and can be incited somebody to action
Such acoustic processing is audio data.Audio that treated (voice) data can be converted in the case of telephone calling model
Form for that can be sent to mobile communication base station via mobile communication module 112 exports.Microphone 122 can implement various types
Noise eliminate (or inhibit) algorithm with eliminate noise that (or inhibition) generate during audio signal is sended and received or
Person interferes.
User input unit 130 can generate key input data to control each of mobile terminal according to order input by user
Kind operation.User input unit 130 allows user to input various types of information, and can include keyboard, metal dome, touch
Plate (for example, sensitive component of detection variation of resistance, pressure, capacitance etc. caused by by contact), idler wheel, rocking bar etc.
Deng.Particularly, when touch tablet is superimposed upon in the form of layer on display unit 151, touch screen can be formed.
Sensing unit 140 detects the current state of mobile terminal 100, (for example, mobile terminal 100 opens or closes shape
State), the position of mobile terminal 100, user is for the presence or absence of contact (that is, touch input) of mobile terminal 100, mobile terminal
100 orientation, the acceleration or deceleration movement of mobile terminal 100 and direction etc., and generate to control mobile terminal 100
The order of operation or signal.For example, when mobile terminal 100 is embodied as sliding-type mobile phone, sensing unit 140 can sense
The sliding-type phone is to open or close.In addition, sensing unit 140 can detect power supply unit 190 whether provide electric power or
Whether person's interface unit 170 couples with external device (ED).Sensing unit 140, which can include proximity sensor 1410, to be combined below
Touch screen is described this.
Interface unit 170 be used as at least one external device (ED) connect with mobile terminal 100 can by interface.For example,
External device (ED) can include wired or wireless head-band earphone port, external power supply (or battery charger) port, wired or nothing
Line data port, memory card port, the port for device of the connection with identification module, audio input/output (I/O) end
Mouth, video i/o port, ear port etc..Identification module can store to verify that user uses each of mobile terminal 100
It plants information and subscriber identification module (UIM), client identification module (SIM), Universal Subscriber identification module (USIM) can be included
Etc..In addition, the device with identification module can (hereinafter referred to as " identification device ") take the form of smart card, therefore, know
Other device can be connect via port or other attachment devices with mobile terminal 100.Interface unit 170, which can be used for receiving, to be come from
The input (for example, data information, electric power etc.) of external device (ED) and the input received is transferred in mobile terminal 100
One or more elements can be used for transmitting data between mobile terminal and external device (ED).
In addition, when mobile terminal 100 is connect with external base, interface unit 170 may be used as allowing will be electric by it
Power provides to the path of mobile terminal 100 from pedestal or may be used as that the various command signals inputted from pedestal is allowed to pass through it
It is transferred to the path of mobile terminal.The various command signals or electric power inputted from pedestal may be used as identifying that mobile terminal is
The no signal being accurately fitted on pedestal.Output unit 150 is configured to provide with vision, audio and/or tactile manner defeated
Go out signal (for example, audio signal, vision signal, alarm signal, vibration signal etc.).Output unit 150 can include display
Unit 151, audio output module 152, alarm unit 153 etc..
Display unit 151 may be displayed on the information handled in mobile terminal 100.For example, when mobile terminal 100 is in electricity
When talking about call mode, display unit 151 can be shown with conversing or other communicating (for example, text messaging, multimedia file
Download etc.) relevant user interface (UI) or graphic user interface (GUI).When mobile terminal 100 is in video calling pattern
Or during image capture mode, display unit 151 can show the image of capture and/or the image of reception, show video or figure
UI or GUI of picture and correlation function etc..
Meanwhile when display unit 151 and touch tablet in the form of layer it is superposed on one another to form touch screen when, display unit
151 may be used as input unit and output device.Display unit 151 can include liquid crystal display (LCD), thin film transistor (TFT)
In LCD (TFT-LCD), Organic Light Emitting Diode (OLED) display, flexible display, three-dimensional (3D) display etc. at least
It is a kind of.Some in these displays may be constructed such that transparence so that user to be allowed to be watched from outside, this is properly termed as transparent
Display, typical transparent display can be, for example, TOLED (transparent organic light emitting diode) display etc..According to specific
Desired embodiment, mobile terminal 100 can include two or more display units (or other display devices), for example, moving
Dynamic terminal can include outernal display unit (not shown) and inner display unit (not shown).Touch screen can be used for detection to touch
Input pressure and touch input position and touch input area.
Audio output module 152 can mobile terminal be in call signal reception pattern, call mode, logging mode,
Speech recognition mode, broadcast reception mode are that wireless communication unit 110 is received or in memory 160 when under isotypes
The audio data transducing audio signal of middle storage and output are sound.Moreover, audio output module 152 can provide and movement
The relevant audio output of specific function (for example, call signal receives sound, message sink sound etc.) that terminal 100 performs.
Audio output module 152 can include loud speaker, buzzer etc..
Alarm unit 153 can provide output notifying event to mobile terminal 100.Typical event can be with
Including calling reception, message sink, key signals input, touch input etc..Other than audio or video exports, alarm unit
153 can provide output with the generation of notification event in different ways.For example, alarm unit 153 can be in the form of vibration
Output is provided, when receiving calling, message or some other entrance communications (incomingcommunicat ion), alarm list
Member 153 can provide tactile output (that is, vibration) to notify to user.It is exported by tactile as offer, even if
When the mobile phone of user is in the pocket of user, user also can recognize that the generation of various events.Alarm unit 153
The output of the generation of notification event can be provided via display unit 151 or audio output module 152.
Memory 160 can store software program that the processing performed by controller 180 and control operate etc., Huo Zheke
Temporarily to store oneself data (for example, telephone directory, message, still image, video etc.) through exporting or will export.And
And memory 160 can be stored about the vibrations of various modes and audio signal exported when touching and be applied to touch screen
Data.
Memory 160 can include the storage medium of at least one type, and the storage medium includes flash memory, hard disk, more
Media card, card-type memory (for example, SD or DX memories etc.), random access storage device (RAM), static random-access storage
Device (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read only memory
(PROM), magnetic storage, disk, CD etc..Moreover, mobile terminal 100 can be with performing memory by network connection
The network storage device cooperation of 160 store function.
The overall operation of the usually control mobile terminal of controller 180.For example, controller 180 performs and voice communication, data
Communication, video calling etc. relevant control and processing.In addition, controller 180 can include reproducing (or playback) more matchmakers
The multi-media module 1810 of volume data, multi-media module 1810 can be constructed in controller 180 or be can be structured as and control
Device 180 processed detaches.Controller 180 can be with execution pattern identifying processing, by the handwriting input performed on the touchscreen or figure
Piece draws input and is identified as character or image.
Power supply unit 190 receives external power or internal power under the control of controller 180 and provides operation each member
Appropriate electric power needed for part and component.
Various embodiments described herein can with use such as computer software, hardware or any combination thereof calculating
Machine readable medium is implemented.Hardware is implemented, embodiment described herein can be by using application-specific IC
(ASIC), digital signal processor (DSP), digital signal processing device (DSPD), programmable logic device (PLD), scene can
Programming gate array (FPGA), controller, microcontroller, microprocessor, is designed to perform function described herein processor
At least one of electronic unit is implemented, and in some cases, such embodiment can be implemented in controller 180.
For software implementation, the embodiment of such as process or function can be with allowing to perform the individual of at least one functions or operations
Software module is implemented.Software code can by the software application (or program) write with any appropriate programming language Lai
Implement, software code can be stored in memory 160 and be performed by controller 180.
So far, oneself according to its function through describing mobile terminal.In the following, for the sake of brevity, will description such as folded form,
Slide type mobile terminal in various types of mobile terminals of board-type, oscillating-type, slide type mobile terminal etc., which is used as, to be shown
Example.Therefore, the present invention can be applied to any kind of mobile terminal, and be not limited to slide type mobile terminal.
Mobile terminal 100 as shown in Figure 1 may be constructed such that using via frame or grouping transmission data it is all if any
Line and wireless communication system and satellite-based communication system operate.
The communication system that can be operated referring now to Fig. 2 descriptions mobile terminal wherein according to the present invention.
Such communication system can use different air interface and/or physical layer.For example, used by communication system
Air interface includes such as frequency division multiple access (FDMA), time division multiple acess (TDMA), CDMA (CDMA) and universal mobile communications system
System (UMTS) (particularly, long term evolution (LTE)), global system for mobile communications (GSM) etc..As non-limiting example, under
The description in face is related to cdma communication system, but such introduction is equally applicable to other types of system.
With reference to figure 2, cdma wireless communication system can include multiple mobile terminals 100, multiple base stations (BS) 270, base station
Controller (BSC) 275 and mobile switching centre (MSC) 280.MSC280 is configured to and Public Switched Telephony Network (PSTN)
290 form interface.MSC280 is also structured to form interface with the BSC275 that can be couple to base station 270 via back haul link.
Back haul link can be constructed according to any one of several known interfaces, the interface include such as E1/T1, ATM, IP,
PPP, frame relay, HDSL, ADSL or xDSL.It will be appreciated that system as shown in Figure 2 can include multiple BSC2750.
Each BS270 can service one or more subregions (or region), by multidirectional antenna or the day of direction specific direction
Each subregion of line covering is radially far from BS270.Alternatively, each subregion can by be used for diversity reception two or more
Antenna covers.Each BS270, which may be constructed such that, supports multiple frequency distribution, and each frequency distribution has specific frequency spectrum
(for example, 1.25MHz, 5MHz etc.).
What subregion and frequency were distributed, which intersects, can be referred to as CDMA Channel.BS270 can also be referred to as base station transceiver
System (BTS) or other equivalent terms.In this case, term " base station " can be used for broadly representing single
BSC275 and at least one BS270.Base station can also be referred to as " cellular station ".Alternatively, each subregion of specific BS270 can be claimed
For multiple cellular stations.
As shown in Figure 2, broadcast singal is sent to the mobile terminal operated in system by broadcsting transmitter (BT) 295
100.Broadcasting reception module 111 as shown in Figure 1 is arranged at mobile terminal 100 to receive the broadcast sent by BT295
Signal.In fig. 2 it is shown that several global positioning system (GPS) satellites 300.The help of satellite 300 positions multiple mobile terminals
At least one of 100.
In fig. 2, multiple satellites 300 are depicted, it is understood that, any number of satellite can be utilized to obtain useful
Location information.GPS module 115 as shown in Figure 1 is generally configured to coordinate with satellite 300 to be believed with obtaining desired positioning
Breath.It substitutes GPS tracking techniques or except GPS tracking techniques, the other of the position that can track mobile terminal can be used
Technology.In addition, at least one GPS satellite 300 can optionally or additionally handle satellite dmb transmission.
As a typical operation of wireless communication system, BS270 receives the reverse link from various mobile terminals 100
Signal.Mobile terminal 100 usually participates in call, information receiving and transmitting and other types of communication.Certain base station 270 receives each anti-
It is handled in specific BS270 to link signal.The data of acquisition are forwarded to relevant BSC275.BSC provides call
Resource allocation and the mobile management function of coordination including the soft switching process between BS270.The number that BSC275 will also be received
According to MSC280 is routed to, the additional route service for forming interface with PSTN290 is provided.Similarly, PSTN290 with
MSC280 forms interface, and MSC and BSC275 form interface, and BSC275 correspondingly controls BS270 with by forward link signals
It is sent to mobile terminal 100.
Based on above-mentioned mobile terminal hardware configuration and communication system, each embodiment of the method for the present invention is proposed.
It should be appreciated that the specific embodiments described herein are merely illustrative of the present invention, it is not intended to limit the present invention.
Intelligent unlocking processing terminal in the present invention includes mobile terminal, fixed terminal；Wherein, mobile terminal can be with each
Kind of form is implemented.For example, intelligent unlocking processing terminal described in the present invention can include such as mobile phone, PDA (individual digitals
Assistant), the mobile terminal of PAD (tablet computer) etc.；Fixed terminal can be the fixed terminal of digital TV, desktop computer etc..
Fig. 3 show the communication security process flow figure of the embodiment of the present invention 3, includes the following steps：
Step 301a：After intelligent safety terminal establishes connection with radio reception device, sent to the radio reception device
Connection request；
Further, the intelligent safety terminal is inputted user name, password and wireless access and is set by the debarkation authentication page
It is standby to establish connection.
Further, after the intelligent safety terminal obtains the website information in browser, to the radio reception device
Send connection request.
Further, intelligent safety terminal MAC (the medium access are carried in the connection request
Control, medium access control) address information.
Step 302b：The radio reception device is according to the intelligent safety terminal carried in the connection request
Mac address information obtains the access times that foregoing description intelligent safety terminal accesses the radio reception device；
Further, if access times are 0, judge the intelligent safety terminal to access for the first time；If access times are big
In 0, then judge that the intelligent safety terminal accesses for the first time to be non-.
Further,
If access times are 0, the intelligent safety terminal is judged to access for the first time, then the radio reception device is to institute
It states intelligent safety terminal and issues user information User Interface；
The intelligent safety terminal shows the user information User Interface, and obtains the reserved information of input；
The reserved information is sent to the radio reception device and by the wireless access by the intelligent safety terminal
Equipment stores；
The radio reception device preserves the intelligent safety terminal MAC Address and the correspondence of the reserved information.
Further, after the intelligent safety terminal accesses the radio reception device, the radio reception device record
The mac address information of the intelligent safety terminal.
Step 303c：The radio reception device is believed according to the MAC Address of the access times, the intelligent safety terminal
Breath, pair reserved information corresponding with the mac address information of the intelligent safety terminal carry out control process.
Further, the radio reception device is believed according to the MAC Address of the access times, the intelligent safety terminal
Breath, the process that pair reserved information corresponding with the mac address information of the intelligent safety terminal carries out control process are：
If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then the wireless access is set
It is standby to obtain the corresponding reserved information of the intelligent safety terminal MAC Address and the reserved information is sent to the intelligent and safe
Terminal；
The intelligent safety terminal judges the reserved information received and according to judging result, is decided whether
Disconnect the connection with the radio reception device.
Further, if the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then it is described
Radio reception device obtains the corresponding reserved information of the intelligent safety terminal MAC Address and generates one containing reserved information
Page downloading is to the intelligent safety terminal；
After the intelligent safety terminal receives the page containing reserved information, shown on a web browser, and then
Judge whether the radio reception device is Target Wireless access device；
If the radio reception device is not Target Wireless access device, the intelligent safety terminal disconnects and the nothing
The connection of line access device.
Further, the radio reception device is believed according to the MAC Address of the access times, the intelligent safety terminal
Breath, the process that pair reserved information corresponding with the mac address information of the intelligent safety terminal carries out control process are：
If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then the wireless access is set
It is standby to obtain the corresponding reserved information of the intelligent safety terminal MAC Address and the access times range according to residing for access times,
It determines corresponding accessory information and the reserved information, the accessory information is sent to the intelligent safety terminal；
The intelligent safety terminal judges and according to judgement the reserved information, the additional information that receive
As a result, decide whether to disconnect the connection with the radio reception device.
Further, the intelligent safety terminal, the radio reception device store access times range and attachment respectively
Information contrast table, as shown in table 1：
Access times range and the accessory information table of comparisons
| Access times range (X) | Accessory information |
| 1≤X ＜ 3 | CompanyAddress's information |
| 3≤X ＜ 6 | Telephone number information in person |
| X≥6 | Mailbox message |
Table 1
Said program realizes the situation that reserved information is intercepted in third party's radio reception device, is carried out using additional information
The mode of verification avoids the access of third party's radio reception device malice, ensure that intelligent safety terminal wirelessly connects with purpose
Enter the communication security between equipment.
Fig. 4 show the communication security process flow figure of the embodiment of the present invention 4, includes the following steps：
Step 401：Intelligent safety terminal is inputted user name, password and radio reception device and is built by the debarkation authentication page
Vertical connection；
Step 402：For intelligent safety terminal by the network address inputted in browser, being initiated the connection to radio reception device please
It asks；
Step 403：The radio reception device obtains the mac address information of intelligent safety terminal, judges whether it is first
It is secondary to be connected to the radio reception device；
If not connecting for the first time, then reserved information page is issued, perform step 404：
It if connecting for the first time, then issues and fills in reserved information page, perform step 405：
Step 404：Show that reserved information supplies whether intelligent safety terminal user's checking is to forge nothing in intelligent safety terminal
Line access device；
Step 405：Intelligent safety terminal user fills in user and reserves information and preserve, while the reserved information is sent
It is preserved to the radio reception device；
Step 406：The radio reception device preserves intelligent safety terminal user and reserves information and intelligent safety terminal use
The information such as family MAC Address.
Fig. 5 show the communication security processing system structure chart of the embodiment of the present invention 5, including intelligent safety terminal 501, nothing
Line access device 502；Wherein, the intelligent safety terminal 501 is connected with the radio reception device 502；
The intelligent safety terminal 501 after establishing connection with radio reception device 502, is set to the wireless access
Standby 502 send connection request；
The radio reception device 502, for according to the intelligent safety terminal 501 carried in the connection request
Address information obtains the access times that foregoing description intelligent safety terminal 501 accesses the radio reception device 502；
The radio reception device 502 is additionally operable to be believed according to the address of the access times, the intelligent safety terminal
Breath, pair reserved information corresponding with the address information of the intelligent safety terminal 501 carry out control process.
Pass through following scheme：After intelligent safety terminal establishes connection with radio reception device, to the radio reception device
Send connection request；The radio reception device is believed according to the address of the intelligent safety terminal carried in the connection request
Breath obtains the access times that foregoing description intelligent safety terminal accesses the radio reception device；The radio reception device root
It is pair corresponding with the address information of the intelligent safety terminal according to the access times, the address information of the intelligent safety terminal
Reserved information carry out control process；Said program opens browser using intelligent safety terminal user by intelligent safety terminal
It fills in and checks reserved information, to ensure not to be forged WIFI infringements, communications security greatly increases.
Pass through following scheme：If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then
The radio reception device obtains the corresponding reserved information of the intelligent safety terminal MAC Address and sends the reserved information
To the intelligent safety terminal；The intelligent safety terminal judges the reserved information received and is tied according to judgement
Fruit decides whether to disconnect the connection with the radio reception device；In said program, intelligent safety terminal is pre- by what is received
Information is stayed, it is not target communication device to judge the radio reception device, then disconnects the company between the radio reception device
It connects, the radio reception device for avoiding forging is to intelligent safety terminal security threat.
Pass through following scheme：If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then
The radio reception device obtains the corresponding reserved information of the intelligent safety terminal MAC Address and according to residing for access times
Access times range, determine corresponding accessory information and the reserved information, the accessory information be sent to the intelligence
Security terminal；The intelligent safety terminal judges the reserved information, the additional information that receive and according to sentencing
Break as a result, deciding whether to disconnect the connection with the radio reception device；Said program is realized to be set in third party's wireless access
The situation of the standby reserved information of interception, in a manner that additional information is verified, avoids third party's radio reception device malice
Access, ensure that the communication security between intelligent safety terminal and purpose radio reception device.
It should be noted that herein, term " comprising ", "comprising" or its any other variant are intended to non-row
His property includes, so that process, method, article or device including a series of elements not only include those elements, and
And it further includes other elements that are not explicitly listed or further includes intrinsic for this process, method, article or device institute
Element.In the absence of more restrictions, the element limited by sentence "including a ...", it is not excluded that including this
Also there are other identical elements in the process of element, method, article or device.
The embodiments of the present invention are for illustration only, do not represent the quality of embodiment.
Through the above description of the embodiments, those skilled in the art can be understood that above-described embodiment side
Method can add the mode of required general hardware platform to realize by software, naturally it is also possible to by hardware, but in many cases
The former is more preferably embodiment.Based on such understanding, technical scheme of the present invention substantially in other words does the prior art
Going out the part of contribution can be embodied in the form of software product, which is stored in a storage medium
In (such as ROM/RAM, magnetic disc, CD), used including some instructions so that a station terminal equipment (can be mobile phone, computer takes
Be engaged in device, air conditioner or the network equipment etc.) perform method described in each embodiment of the present invention.
It these are only the preferred embodiment of the present invention, be not intended to limit the scope of the invention, it is every to utilize this hair
The equivalent structure or equivalent flow shift that bright specification and accompanying drawing content are made directly or indirectly is used in other relevant skills
Art field, is included within the scope of the present invention.
The foregoing is only a preferred embodiment of the present invention, is not intended to restrict the invention, for the skill of this field
For art personnel, the invention may be variously modified and varied.All within the spirits and principles of the present invention, that is made any repaiies
Change, equivalent replacement, improvement etc., should all be included in the protection scope of the present invention.
Claims (9)
1. a kind of communication security processing method, which is characterized in that include the following steps：
After intelligent safety terminal establishes connection with radio reception device, connection request is sent to the radio reception device；
The radio reception device obtains it according to the address information of the intelligent safety terminal carried in the connection request
The preceding intelligent safety terminal accesses the access times of the radio reception device；
The radio reception device according to the access times, the address information of the intelligent safety terminal, pair with the intelligence
The corresponding reserved information of address information of security terminal carries out control process；
The radio reception device according to the access times, the address information of the intelligent safety terminal, pair with the intelligence
The process that the corresponding reserved information of the address information of security terminal carries out control process is：
If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then the radio reception device obtains
The corresponding reserved information of the intelligent safety terminal MAC Address and the access times range according to residing for access times are taken, is determined
The reserved information, the accessory information are simultaneously sent to the intelligent safety terminal by corresponding accessory information；
The intelligent safety terminal judges the reserved information that receives, the accessory information and according to judging to tie
Fruit decides whether to disconnect the connection with the radio reception device.
2. according to the method described in claim 1, it is characterized in that, the radio reception device is according to the access times, institute
The address information of intelligent safety terminal is stated, pair reserved information corresponding with the address information of the intelligent safety terminal controls
The process of processing is：
If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then the radio reception device obtains
It takes the corresponding reserved information of the intelligent safety terminal MAC Address and the reserved information is sent to the intelligent and safe end
End；
The intelligent safety terminal judges the reserved information received and according to judging result, decides whether to disconnect
With the connection of the radio reception device.
3. if according to the method described in claim 2, it is characterized in that, the access times judge the intelligent and safe more than 0
Terminal accesses for the first time to be non-, then the radio reception device obtains the corresponding reserved information of the intelligent safety terminal MAC Address
And a page downloading containing reserved information is generated to the intelligent safety terminal；
After the intelligent safety terminal receives the page containing reserved information, shown on a web browser, and then judge
Whether the radio reception device is Target Wireless access device；
If the radio reception device is not Target Wireless access device, the intelligent safety terminal disconnection wirelessly connects with described
Enter the connection of equipment.
4. according to the method described in claim 1, it is characterized in that, the intelligent safety terminal, the radio reception device point
It Cun Chu not access times range and the accessory information table of comparisons.
If 5. according to the method described in claim 1, it is characterized in that, access times be 0, judge the intelligent safety terminal
To access for the first time；If access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-.
If 6. according to the method described in claim 5, it is characterized in that, access times be 0, judge the intelligent safety terminal
To access for the first time, then the radio reception device issues user information User Interface to the intelligent safety terminal；
The intelligent safety terminal shows the user information User Interface, and obtains the reserved information of input；
The reserved information is sent to the radio reception device and by the radio reception device by the intelligent safety terminal
Storage.
7. according to the method described in claim 6, which is characterized in that the radio reception device preserves the intelligent safety terminal
MAC Address and the correspondence of the reserved information.
8. the method according to the description of claim 7 is characterized in that the intelligent safety terminal accesses the radio reception device
Afterwards, the radio reception device records the mac address information of the intelligent safety terminal.
9. a kind of communication security processing system, which is characterized in that including intelligent safety terminal, radio reception device；Wherein, it is described
Intelligent safety terminal is connected with the radio reception device；
The intelligent safety terminal after establishing connection with radio reception device, sends to the radio reception device and connects
Request；
The radio reception device, for according to the address information of the intelligent safety terminal carried in the connection request,
Obtain the access times that foregoing description intelligent safety terminal accesses the radio reception device；
The radio reception device is additionally operable to the address information according to the access times, the intelligent safety terminal, pair and institute
The corresponding reserved information of address information for stating intelligent safety terminal carries out control process；
The radio reception device according to the access times, the address information of the intelligent safety terminal, pair with the intelligence
The process that the corresponding reserved information of the address information of security terminal carries out control process is：
If the access times are more than 0, judge that the intelligent safety terminal accesses for the first time to be non-, then the radio reception device obtains
The corresponding reserved information of the intelligent safety terminal MAC Address and the access times range according to residing for access times are taken, is determined
The reserved information, the accessory information are simultaneously sent to the intelligent safety terminal by corresponding accessory information；
The intelligent safety terminal judges the reserved information that receives, the accessory information and according to judging to tie
Fruit decides whether to disconnect the connection with the radio reception device.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510334456.6A CN104935596B (en) | 2015-06-16 | 2015-06-16 | A kind of communication security processing method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510334456.6A CN104935596B (en) | 2015-06-16 | 2015-06-16 | A kind of communication security processing method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104935596A CN104935596A (en) | 2015-09-23 |
| CN104935596B true CN104935596B (en) | 2018-06-26 |
Family
ID=54122568
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510334456.6A Active CN104935596B (en) | 2015-06-16 | 2015-06-16 | A kind of communication security processing method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104935596B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106016591B (en) * | 2016-05-20 | 2019-04-02 | 深圳创维空调科技有限公司 | Information display method and device |
| CN106485491A (en) * | 2016-09-30 | 2017-03-08 | 努比亚技术有限公司 | A kind of payment terminal and method |
| CN112398851B (en) * | 2020-11-13 | 2023-01-10 | Oppo广东移动通信有限公司 | Data processing method, data processing device, storage medium and electronic equipment |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101217805A (en) * | 2008-01-21 | 2008-07-09 | 中兴通讯股份有限公司 | A wireless LAN access control method |
| CN101221679A (en) * | 2008-01-24 | 2008-07-16 | 中国工商银行股份有限公司 | Self-help collection vehicle, collection system and collection method |
| CN102204307A (en) * | 2011-06-15 | 2011-09-28 | 华为技术有限公司 | Wlan authentication method based on MAC address and device thereof |
| CN102394888A (en) * | 2011-11-11 | 2012-03-28 | 汉口银行股份有限公司 | Safety login method of online banking reservation information |
| CN103812836A (en) * | 2012-11-12 | 2014-05-21 | 孙银海 | System and method for website to send user reserved information |
| CN104144146A (en) * | 2013-05-10 | 2014-11-12 | 中国电信股份有限公司 | Method and system for visiting website |
-
2015
- 2015-06-16 CN CN201510334456.6A patent/CN104935596B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101217805A (en) * | 2008-01-21 | 2008-07-09 | 中兴通讯股份有限公司 | A wireless LAN access control method |
| CN101221679A (en) * | 2008-01-24 | 2008-07-16 | 中国工商银行股份有限公司 | Self-help collection vehicle, collection system and collection method |
| CN102204307A (en) * | 2011-06-15 | 2011-09-28 | 华为技术有限公司 | Wlan authentication method based on MAC address and device thereof |
| CN102394888A (en) * | 2011-11-11 | 2012-03-28 | 汉口银行股份有限公司 | Safety login method of online banking reservation information |
| CN103812836A (en) * | 2012-11-12 | 2014-05-21 | 孙银海 | System and method for website to send user reserved information |
| CN104144146A (en) * | 2013-05-10 | 2014-11-12 | 中国电信股份有限公司 | Method and system for visiting website |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104935596A (en) | 2015-09-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104735255B (en) | Multi-screen display method and system | |
| CN105208011B (en) | A kind of verifying system and method | |
| CN105100415B (en) | Login method, mobile terminal | |
| CN105263049B (en) | A kind of video Scissoring device, method and mobile terminal based on frame coordinate | |
| CN104850799B (en) | The method and mobile terminal of a kind of data in hiding mobile terminal | |
| CN104731512B (en) | The method, apparatus and terminal that picture is shared | |
| CN104915119B (en) | Terminal desktop icon method of adjustment and device | |
| CN104850443B (en) | A kind of method and mobile terminal for closing error starting application program | |
| CN105138400B (en) | Application program self-starting management method and device | |
| CN104702785A (en) | Method for enhancing individual account security of mobile terminal and mobile terminal therefor | |
| CN106817377A (en) | A kind of data encryption device, decryption device and method | |
| CN104836884A (en) | Standby unlocking method of mobile terminal, and mobile terminal | |
| CN104837113A (en) | Privacy information display method and terminal | |
| CN106131280A (en) | Mobile terminal and associated person information acquisition methods | |
| CN104968027A (en) | Wi-Fi control method and apparatus | |
| CN104820797B (en) | Using the management method and device of account | |
| CN105095705B (en) | A kind of information processing method and device | |
| CN104618382B (en) | A kind of method and device realizing the seamless access of information | |
| CN104735254B (en) | terminal screen locking method and system | |
| CN104735245A (en) | Mobile terminal information protection method and mobile terminal | |
| CN104601783A (en) | Communication processing method based on subjective judgment, mobile terminal and system | |
| CN104935596B (en) | A kind of communication security processing method and system | |
| CN105101187A (en) | Method and system for processing encrypted information | |
| CN104883454B (en) | A kind of display control method and display control terminal | |
| CN107135298A (en) | Call blocking method and apparatus |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |