CN113301563A

CN113301563A - Network configuration method, device, equipment and storage medium

Info

Publication number: CN113301563A
Application number: CN202010080832.4A
Authority: CN
Inventors: 陈熙彩
Original assignee: Alibaba Group Holding Ltd
Current assignee: Alibaba Group Holding Ltd
Priority date: 2020-02-05
Filing date: 2020-02-05
Publication date: 2021-08-24

Abstract

The embodiment of the invention provides a network configuration method, a device, equipment and a storage medium, wherein the network configuration method comprises the following steps: for example, a network distribution device such as a mobile phone terminal responds to a wireless hotspot starting operation and establishes communication connection with a device to be accessed to the network; the network distribution equipment determines a secret key through a server program supporting a preset application layer protocol and a corresponding client program in the equipment to be accessed, so that the network configuration information of the AP is encrypted according to the secret key, and the encrypted network configuration information is sent to the client program, so that the equipment to be accessed is accessed to the AP according to the network configuration information. By the scheme, the network distribution of the equipment to be networked can be completed at low cost, and the realization is simple, convenient and efficient.

Description

Network configuration method, device, equipment and storage medium

Technical Field

The invention relates to the technical field of internet/internet of things, in particular to a network configuration method, a network configuration device, network configuration equipment and a storage medium.

Background

With the rapid development of communication technology, Wireless Local Area Networks (WLANs) technology following IEEE802.11 protocol standards is widely applied to various devices, some of which have screens (display screens), such as smart terminal devices such as mobile phones and computers; some devices have no screen, for example, internet of things devices such as intelligent air conditioners and intelligent electric cookers.

The terminal distribution network is always a pain point problem of the Wi-Fi Internet of things. After a user purchases a Wi-Fi Internet of things device, the device needs to be configured in a home Wi-Fi network, and then networking control can be performed on the intelligent devices.

Since devices such as an intelligent air conditioner and an intelligent electric cooker have no screen, and cannot autonomously search for an Access Point (AP) and manually input an Access password of the AP like a computer or a mobile phone, network configuration cannot be autonomously completed, and therefore, a problem of automatically performing network configuration for devices such as the intelligent air conditioner and the intelligent electric cooker waiting for network Access needs to be solved.

Disclosure of Invention

The embodiment of the invention provides a network configuration method, a network configuration device, equipment and a storage medium, which are used for realizing a network distribution of equipment to be networked.

In a first aspect, an embodiment of the present invention provides a network configuration method, applied to a network distribution device, including:

responding to the wireless hotspot starting operation, and establishing communication connection with the equipment to be accessed to the network;

determining a key through a server program supporting a preset application layer protocol in the distribution network equipment and a client program supporting the application layer protocol in the equipment to be accessed, and encrypting network configuration information of an access point according to the key;

and sending the encrypted network configuration information to the client program so that the equipment to be accessed to the network is accessed to the access point according to the network configuration information.

In a second aspect, an embodiment of the present invention provides a network configuration apparatus, which is applied to a distribution network device, and includes:

the connection module is used for responding to the wireless hotspot starting operation and establishing communication connection with the equipment to be accessed to the network;

the processing module is used for determining a key through a server program supporting a preset application layer protocol in the distribution network equipment and a client program supporting the application layer protocol in the equipment to be accessed, and encrypting network configuration information of an access point according to the key;

and the sending module is used for sending the encrypted network configuration information to the client program so as to enable the equipment to be accessed to the network to access the access point according to the network configuration information.

In a third aspect, an embodiment of the present invention provides a network configuration device, where the electronic device includes a processor and a memory, where the memory stores executable codes, and when the executable codes are executed by the processor, the processor is caused to execute the network configuration method in the first aspect.

An embodiment of the present invention provides a non-transitory machine-readable storage medium, on which an executable code is stored, and when the executable code is executed by a processor of a network distribution device, the processor is caused to execute the network configuration method in the first aspect.

In a fourth aspect, an embodiment of the present invention provides a network configuration method, which is applied to a device to be networked, and the method includes:

establishing communication connection with distribution network equipment;

determining a secret key through a client program supporting a preset application layer protocol in the equipment to be networked and a server program supporting the application layer protocol in the distribution network equipment;

receiving network configuration information encrypted by the server program according to the secret key;

and decrypting the network configuration information according to the secret key so as to enable the equipment to be accessed to the corresponding access point according to the network configuration information.

In a fifth aspect, an embodiment of the present invention provides a network configuration apparatus, applied to a device to be networked, including:

the first connection module is used for establishing communication connection with the distribution network equipment;

the key generation module is used for determining a key through a client program supporting a preset application layer protocol in the equipment to be networked and a server program supporting the application layer protocol in the distribution network equipment;

the receiving module is used for receiving the network configuration information encrypted by the server program according to the secret key;

and the second connection module is used for decrypting the network configuration information according to the secret key so as to enable the equipment to be accessed to the corresponding access point according to the network configuration information.

In a sixth aspect, an embodiment of the present invention provides a device to be networked, including a processor and a memory, where the memory stores executable codes, and when the executable codes are executed by the processor, the processor is caused to execute the network configuration method in the fourth aspect.

An embodiment of the present invention provides a non-transitory machine-readable storage medium, which stores executable code thereon, and when the executable code is executed by a processor of a device to be networked, the processor is caused to execute the network configuration method in the fourth aspect.

In a seventh aspect, an embodiment of the present invention provides a network configuration method, which is applied to a network distribution device, and the method includes:

establishing communication connection with a device to be accessed to a network;

determining a key through a client program supporting a preset application layer protocol in the distribution network equipment and a server program supporting the application layer protocol in the equipment to be accessed, and encrypting network configuration information of an access point according to the key;

and sending the encrypted network configuration information to the server program so that the equipment to be accessed to the network is accessed to the access point according to the network configuration information.

In an eighth aspect, an embodiment of the present invention provides a network configuration apparatus, which is applied to a distribution network device, and includes:

the connection module is used for establishing communication connection with the equipment to be accessed to the network;

the processing module is used for determining a key through a client program supporting a preset application layer protocol in the distribution network equipment and a server program supporting the application layer protocol in the equipment to be accessed, and encrypting network configuration information of an access point according to the key;

and the sending module is used for sending the encrypted network configuration information to the server program so that the equipment to be accessed to the network is accessed to the access point according to the network configuration information.

In a ninth aspect, an embodiment of the present invention provides a network distribution device, including: a memory, a processor; wherein the memory has stored thereon executable code which, when executed by the processor, causes the processor to perform the network configuration method of the seventh aspect.

An embodiment of the present invention provides a non-transitory machine-readable storage medium, having executable codes stored thereon, and when the executable codes are executed by a processor of a network distribution device, causing the processor to execute the network configuration method in the seventh aspect.

In a tenth aspect, an embodiment of the present invention provides a network configuration method, which is applied to a device to be networked, and the method includes:

responding to the wireless hotspot starting operation, and establishing communication connection with the distribution network equipment;

determining a secret key through a server program supporting a preset application layer protocol in the equipment to be networked and a client program supporting the application layer protocol in the distribution network equipment;

receiving network configuration information encrypted by the client program according to the secret key;

In an eleventh aspect, an embodiment of the present invention provides a network configuration apparatus, which is applied to a device to be networked, and includes:

the first connection module is used for responding to the wireless hotspot starting operation and establishing communication connection with the distribution network equipment;

the key generation module is used for determining a key through a server program supporting a preset application layer protocol in the equipment to be networked and a client program supporting the application layer protocol in the distribution network equipment;

the receiving module is used for receiving the network configuration information encrypted by the client program according to the secret key;

In a twelfth aspect, an embodiment of the present invention provides a device to be networked, including: a memory, a processor; wherein the memory has stored thereon executable code which, when executed by the processor, causes the processor to perform a network configuration method as described in the tenth aspect.

An embodiment of the present invention provides a non-transitory machine-readable storage medium, where an executable code is stored on the non-transitory machine-readable storage medium, and when the executable code is executed by a processor of a device to be networked, the processor is caused to execute the network configuration method in the tenth aspect.

In a thirteenth aspect, an embodiment of the present invention provides a network configuration method, which is applied to a mobile phone terminal, and the method includes:

starting a server program supporting a preset application layer protocol in the mobile phone terminal;

determining a key through the server program and a client program supporting the application layer protocol in the device to be accessed to the network, and encrypting network configuration information of an access point according to the key;

In a fourteenth aspect, an embodiment of the present invention provides a network configuration apparatus, which is applied to a mobile phone terminal, and includes:

the processing module is used for starting a server program supporting a preset application layer protocol in the mobile phone terminal; determining a key through the server program and a client program supporting the application layer protocol in the device to be accessed to the network, and encrypting network configuration information of an access point according to the key;

In a fifteenth aspect, an embodiment of the present invention provides a mobile phone terminal, including: a memory, a processor; wherein the memory has stored thereon executable code which, when executed by the processor, causes the processor to perform the network configuration method of the thirteenth aspect.

An embodiment of the present invention provides a non-transitory machine-readable storage medium, having stored thereon executable code, which, when executed by a processor of a mobile phone terminal, causes the processor to execute the network configuration method according to the thirteenth aspect.

In order to ensure the security of the distribution network device sending the network configuration information of the AP to the device to be networked, the network configuration information needs to be encrypted and sent, so that a key required for encrypting the network distribution network information needs to be generated. Therefore, in the network configuration scheme provided in the embodiment of the present invention, the network distribution device or the device to be networked may be enabled to start a wireless hotspot (Wi-Fi hotspot), where a name of the wireless hotspot, i.e., a Service Set Identifier (SSID) is a preset specific name, so that the network distribution device and the device to be networked identify an identity of an opposite party according to the specific name, and further establish a communication connection with the opposite party. And then, one of the distribution network equipment and the equipment to be accessed starts a server program supporting the preset application layer protocol, and the other starts a client program supporting the preset application layer protocol, so that a key is determined through the application layer interaction between the server program and the client program, and the distribution network equipment encrypts the network configuration information of the AP by using the key and sends the encrypted network configuration information to the equipment to be accessed so as to access the AP. In the scheme, extra codes for generating the key and storage resources for storing the codes are not required to be arranged in the distribution network equipment and the equipment to be networked, the distribution network of the equipment to be networked can be completed only by relying on the resources in the distribution network equipment and the equipment to be networked, and the realization is simple, convenient and efficient. In addition, in the scheme, even if the distribution network equipment is not connected to a public network, the distribution network of the equipment to be connected to the network can be completed.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on the drawings without creative efforts.

Fig. 1 is a schematic flow chart of a network configuration method according to an embodiment of the present invention;

fig. 2 is a flowchart illustrating a network configuration method according to another embodiment of the present invention;

fig. 3 is a schematic diagram of a network configuration scenario according to an embodiment of the present invention;

fig. 4 is a schematic structural diagram of a network configuration apparatus according to an embodiment of the present invention;

fig. 5 is a schematic structural diagram of a distribution network device corresponding to the network configuration apparatus provided in the embodiment shown in fig. 4;

fig. 6 is a schematic structural diagram of another network configuration apparatus according to an embodiment of the present invention;

fig. 7 is a schematic structural diagram of a device to be networked corresponding to the network configuration apparatus provided in the embodiment shown in fig. 6;

fig. 8 is a schematic structural diagram of another network configuration device according to an embodiment of the present invention;

fig. 9 is a schematic structural diagram of a distribution network device corresponding to the network configuration apparatus provided in the embodiment shown in fig. 8;

fig. 10 is a schematic structural diagram of another network configuration device according to an embodiment of the present invention;

fig. 11 is a schematic structural diagram of a device to be networked corresponding to the network configuration apparatus provided in the embodiment shown in fig. 10.

Detailed Description

In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

The terminology used in the embodiments of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in the examples of the present invention and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise, and "a plurality" typically includes at least two.

The words "if", as used herein, may be interpreted as "at … …" or "at … …" or "in response to a determination" or "in response to a detection", depending on the context. Similarly, the phrases "if determined" or "if detected (a stated condition or event)" may be interpreted as "when determined" or "in response to a determination" or "when detected (a stated condition or event)" or "in response to a detection (a stated condition or event)", depending on the context.

In addition, the sequence of steps in each method embodiment described below is only an example and is not strictly limited.

Before specifically describing the network configuration scheme provided by the embodiments of the present invention, several concepts involved in this document will be described.

The servers herein may be independent physical hosts or clusters of hosts located in the cloud.

The device to be networked in the text can be terminal devices such as an intelligent refrigerator, a robot, an intelligent wearable device and the like, and can also be an internet of things device such as a sensor and a detector. The device to be networked is not yet connected to a wireless network, i.e. an AP, to which it is expected to access, and is therefore referred to as a device to be networked.

The distribution network device herein may be a terminal device such as a mobile phone, a tablet computer, a smart speaker, a vehicle-mounted terminal, and generally has a screen, and the network configuration information of the AP may be automatically input or input by a user through the screen, where the network configuration information includes an SSID, an access password, and the like of the AP. The distribution network equipment is used for carrying out network configuration on the equipment to be connected to the network so as to enable the equipment to be connected to the AP. In addition, a distribution network application program can run in the distribution network equipment, and network configuration of the equipment to be networked is realized through the distribution network application program.

The network configuration of the network distribution equipment to-be-accessed equipment is mainly carried out by the following steps: and the distribution network equipment sends the network configuration information of the AP to the equipment to be accessed, and the equipment to be accessed is accessed to the AP according to the network configuration information. Since the network configuration information includes sensitive information such as an access password of the AP, which is not suitable for being leaked, the network configuration information needs to be encrypted and transmitted by the network distribution device, which requires generating a key for encryption.

One way to obtain the key is: the network access equipment is provided with a two-dimensional code containing an identifier of the network access equipment, the network access equipment scans the two-dimensional code to obtain the identifier of the network access equipment, the network access equipment queries a server at the cloud end with the obtained identifier of the network access equipment, a secret key of the network access equipment is obtained by querying the server which stores the identifier of the network access equipment and the secret key corresponding to the network access equipment, the secret key is used for encrypting the network configuration information of the AP, and the encrypted network configuration information is sent to the network access equipment. And the equipment to be accessed to the network decrypts the network configuration information according to the own secret key so as to access the AP.

In the above manner, on one hand, the distribution network equipment is required to be currently accessible to the public network to ensure that the distribution network equipment can access the server; on the other hand, program codes required for executing the key obtaining process need to be placed in both the device to be networked and the distribution network device, which brings extra consumption of computing resources and storage resources to the device to be networked and the distribution network device.

In order to simplify the above requirements for the distribution network device and the device to be networked in the distribution network process, embodiments of the present invention provide solutions introduced in the following embodiments.

Fig. 1 is a flowchart illustrating a network configuration method according to an embodiment of the present invention, and as shown in fig. 1, the network configuration process may include the following steps:

101. and responding to the wireless hotspot starting operation, and establishing communication connection between the distribution network equipment and the equipment to be networked.

102. The distribution network equipment determines the key through a server program supporting a preset application layer protocol and a client program supporting the application layer protocol in the equipment to be networked.

103. And the server program in the distribution network equipment encrypts the network configuration information of the AP according to the key.

104. And the distribution network equipment sends the encrypted network configuration information to a client program in the equipment to be networked through a server program.

105. And the equipment to be accessed to the network decrypts the network configuration information by using the secret key so as to access the AP.

In summary, in the network configuration scheme provided in this embodiment, the network distribution device starts a wireless hotspot, so that the device to be networked accesses the wireless hotspot, that is, the network distribution device, and after a communication connection is established between the wireless hotspot and the network distribution device, a secret key for encrypting the network configuration information of the AP is generated through a communication interaction process of an application layer. And then, the network distribution equipment encrypts the network configuration information of the AP by adopting the key and sends the network configuration information to the equipment to be networked.

In the process of network distribution, if the distribution network device is configured to need to work in a wireless hotspot mode, in practical application, when a certain device to be networked needs to be distributed through the distribution network device, a user (usually, the owner of the distribution network device and the device to be networked) triggers a wireless hotspot starting operation on the distribution network device, and at this time, the distribution network device may broadcast an SSID corresponding to the wireless hotspot. Specifically, the distribution network device may periodically broadcast a management frame including the SSID.

Generally, the communication protocols adopted by the network distribution device and the device to be networked are both in compliance with the 802.11 standard, and in the 802.11 standard, many management frames are defined, so the management frames can be selected from any one of a plurality of management frames defined by the 802.11 standard. Common management frames include: beacon (beacon) frame, probe request (probe request) frame.

In practical applications, for a device to be networked, at a certain time, it may receive not only the management frame sent by the above-mentioned network distribution device, but also the management frames sent by other devices, such as the management frames sent by the AP, where the management frames may all include the SSIDs of the corresponding devices. At this time, the device to be networked needs to distinguish which management frame corresponds to the network distribution device that needs to be connected, that is, the device to be networked needs to be able to identify which network distribution device needs to be connected according to the SSID carried in the received management frame.

Based on this, optionally, in the case that the distribution network device performs distribution network on the device to be networked, the SSID adopted when the distribution network device starts the wireless hotspot may be preset, that is, the name of the wireless hotspot is preset, for example, a specific identification content is used as the name of the wireless hotspot. Due to the fact that the range of the radio frequency signals which can be received by the equipment to be accessed to the network is limited, the number of the SSIDs which can be searched in the signal receiving range of the equipment to be accessed to the network is often limited, repeatability of the specific SSID is not easy to exist, and the identification degree is high. Moreover, the SSID can also be pre-set in the device to be networked, so that when the management frame received by the device to be networked includes the SSID, the device to be networked determines that the device sending the management frame is the network-distribution device to be connected.

When the device to be networked determines that connection with the distribution network device is required according to the SSID sent by the distribution network device, the device to be networked can access the wireless hotspot according to an access password (the access password can be a default) which is preset in the device to be networked and corresponds to the SSID, so that communication connection with the distribution network device is established, and the communication connection can be TCP connection or UDP connection. It will be appreciated that the communication connection is a transport layer connection.

Certainly, the establishment of the communication connection between the distribution network device and the device to be networked is not limited to the above implementation manner, and for example, the communication connection may also be established through a communication manner such as bluetooth.

After the connection with the device to be networked is established, the distribution network device is configured to locally start a server program supporting a preset application layer protocol in the distribution network device, and similarly, a client program corresponding to the server program is also started in the device to be networked.

For example, when a TCP connection is established between the distribution network device and the device to be networked, the application Layer Protocol may be a hypertext Transfer Protocol over Secure Socket Layer (HTTPS), or may be a Secure Shell Protocol (SSH). When UDP connection is established between the distribution network device and the device to be networked, the Application layer Protocol may be a restricted Application Protocol (CoAP for short).

Assuming that the selected application layer protocol is HTTPS, the server program can be expressed as: HTTPS Server, the client program may be represented as: HTTPS Client. In fact, most current terminal devices (including devices to be networked) often have the capability of accessing a remote server as an HTTPS Client through an HTTPS protocol by default.

The purpose of starting the application layer program of the distribution network equipment and the equipment to be networked is to generate a key for encrypting and decrypting the network configuration information of the AP through application layer interaction.

Alternatively, the process of determining the key by the server program and the client program may be implemented as the following steps:

the client program sends a first random number to the server program;

the server program sends the second random number to the client program;

the server program sends the public key to the client program;

the client program sends the third random number encrypted by the public key to the server program;

the server program decrypts the third random number by using the private key;

the server program generates a key according to the first random number, the second random number and the third random number;

the client program generates the key from the first random number, the second random number, and the third random number.

The first random number and the third random number are generated randomly by the client program or by a certain set algorithm, and the second random number is generated randomly by the server program or by a certain set algorithm. The first random number and the second random number are sent in clear text, and the third random number is transmitted to the server program by the client program through encryption by using a public key provided by the server program.

The server program finally obtains the three random numbers, similarly, the client program finally obtains the three random numbers, and finally, the server program and the client program calculate the three random numbers obtained respectively by adopting the same algorithm to obtain the same key.

Although the first random number and the second random number are sent in plaintext, the third random number is sent by using a public key provided by a server program in an encryption manner, and if no corresponding private key exists, the third random number cannot be obtained, so that a key obtained based on the three random numbers is not easy to crack.

Of course, the implementation manner of determining the key by the server program and the client program may be various, and is not limited to the above example.

In summary, when a TCP connection is established between the distribution network device and the device to be networked, the server program and the client program may determine the key through a Transport Layer Security (TLS). When a UDP connection is established between the distribution network equipment and the equipment to be connected, the server program and the client program determine a secret key through a data packet Transport Layer Security protocol (DTLS).

TLS is used to provide confidentiality and data integrity between two applications, thereby securing communications between the server program and the client program. Since TLS is designed to support TCP, DTLS is required to ensure the security of data transmission over UDP connections. The process of the server program and the client program executing TLS or DTLS to determine the key may be implemented by referring to the related art, which is not described herein.

After the key is determined, a server program in the distribution network equipment encrypts the network configuration information of the AP by using the key, and sends the encrypted network configuration information to a client program. The client program decrypts the network configuration information by using the key, and then accesses the AP by using the decrypted network configuration information.

It should be noted that after obtaining the key, the distribution network device may also use the key to encrypt the network configuration information of the AP through another program or process, which is not necessarily through the server program. Accordingly, the encrypted network configuration information only needs to be sent to the device to be networked, and does not need to be sent to the client program.

In summary, in the distribution network scheme provided in the embodiment of the present invention, it is not necessary to set additional codes for generating the key and storage resources for storing the codes in the distribution network device and the device to be networked, and the distribution network of the device to be networked can be completed only depending on the resources of the distribution network device and the device to be networked. Specifically, in the distribution network scheme, as the distribution network equipment and the equipment to be networked naturally have a start-up function such as HTTPS Server, HTTPS Client; the capabilities of the application layer programs such as the SSH Server, the SSH Client and the like can negotiate the key through the application layer programs, no extra resource is needed to generate the key, no excessive storage resource is needed to be occupied, and the method is simple, convenient and efficient to implement. In addition, in the scheme, even if the distribution network equipment is not connected to a public network, the distribution network of the equipment to be connected to the network can be completed.

Fig. 2 is a schematic flow chart of a network configuration method according to another embodiment of the present invention, and as shown in fig. 2, the network configuration method may include the following steps:

201. and responding to the wireless hotspot starting operation, and establishing communication connection between the equipment to be networked and the distribution network equipment.

202. The distribution network equipment determines the key through a client program supporting a preset application layer protocol and a server program supporting the application layer protocol in the equipment to be networked.

203. And the client program in the distribution network equipment encrypts the network configuration information of the AP according to the key.

204. And the distribution network equipment sends the encrypted network configuration information to a server program in the equipment to be networked through the client program.

205. And the equipment to be accessed to the network decrypts the network configuration information by using the secret key so as to access the AP.

The network configuration scheme provided by the embodiment is different from the embodiment shown in fig. 1 in that: in this embodiment, the device that opens the wireless hotspot is a device to be networked, and after the device to be networked establishes a communication connection with the distribution network device, a server program corresponding to an application layer protocol is opened in the device to be networked, and a corresponding client program is opened in the distribution network device.

Specifically, the device to be networked sends a management frame including a preset SSID, so that the network distribution device establishes communication connection with the device to be networked according to an access password corresponding to the SSID after monitoring the management frame.

Taking a home scene as an example, a plurality of devices to be networked in a home are often required to be configured by a network, such as an intelligent air conditioner, an intelligent refrigerator, and the like, and a network distribution device for configuring the devices to be networked by the network may be one, such as a mobile phone of a certain user in the home. In such a scenario, when the device to be networked is used as a wireless hotspot, in order to distinguish different devices to be networked, an SSID of the wireless hotspot corresponding to the device to be networked may be set to include at least one of the following information:

the identifier is set, the product type identifier corresponding to the equipment to be networked, and the equipment identifier corresponding to the equipment to be networked.

The set identifier may be used to distinguish the device to be networked from the device not to be networked, for example, the set identifier may be a combination of letters, numbers, and symbols set for adh and the like.

The product type identifier corresponding to the device to be networked can be used to distinguish different product types of devices to be networked, for example, the product type identifier corresponding to a certain brand of refrigerator is XYZ, and the product type identifier corresponding to a certain brand of air conditioner is DCE.

The device identifier corresponding to the device to be networked can be used for distinguishing different devices of the same product type, for example, two intelligent air conditioners with the same brand and the same model are arranged in a house, and then the two intelligent air conditioners can be distinguished by the device identifier. The device identification may be a MAC address.

The detailed implementation process of the network configuration scheme provided in this embodiment is similar to that provided in the embodiment shown in fig. 1, and is not described again.

For ease of understanding, the following describes, with reference to fig. 3, an implementation process of the network configuration scheme provided by the embodiment of the present invention in a practical application scenario.

Fig. 3 is a schematic view of a network configuration scenario according to an embodiment of the present invention, and in fig. 3, it is assumed that the distribution network device is a mobile phone terminal 301 and the device to be networked is a sweeping robot 302. The purpose of the network configuration of the sweeping robot by the mobile phone terminal is to access the sweeping robot to the router 303 illustrated in fig. 3, and it is assumed that the SSID of the router 303 is: XYZ, assume that the access password of router 303 is: PW 123.

In order to implement network configuration of the sweeping robot 302 by the mobile phone terminal 301, first, the wireless hotspot function of the mobile phone terminal 301 is started to be in a wireless hotspot mode. The sweeping robot 302 accesses the wireless hotspot to establish communication connection with the mobile phone terminal 301. After the sweeping robot 302 establishes a communication connection with the mobile phone terminal 301, the mobile phone terminal 301 may locally start a Server program supporting a preset application layer protocol, which is assumed to be an HTTPS Server. In addition, the sweeping robot 302 has a default Client program supporting the application layer protocol, which is assumed to be an HTTPS Client. Therefore, the mobile phone terminal 301 negotiates a KEY with the HTTPS Client in the sweeping robot 302 through the HTTPS Server to encrypt the network configuration information of the router 303 according to the KEY, and the assumption of the encryption process may be as follows: KEY (XYZ, PW123), i.e., the SSID of the router 303 and the access password are encrypted using the KEY. Further, the mobile phone terminal 301 sends the encrypted network configuration information KEY (XYZ, PW123) to the sweeping robot 302, and the sweeping robot 302 decrypts the encrypted network configuration information KEY to obtain the SSID and the access password of the router 303, so as to access the router 303.

A network configuration apparatus of one or more embodiments of the present invention will be described in detail below. Those skilled in the art will appreciate that these network configuration means may be constructed by configuring the steps taught in the present solution using commercially available hardware components.

Fig. 4 is a schematic structural diagram of a network configuration device according to an embodiment of the present invention, where the network configuration device is disposed in the distribution network device in the embodiment shown in fig. 1. As shown in fig. 4, the apparatus includes: a connection module 11, a processing module 12 and a sending module 13.

And the connection module 11 is configured to respond to a wireless hotspot starting operation and establish a communication connection with the device to be networked.

The processing module 12 is configured to determine a key through a server program supporting a preset application layer protocol in the distribution network device and a client program supporting the application layer protocol in the to-be-accessed network device, and encrypt network configuration information of an access point according to the key.

A sending module 13, configured to send the encrypted network configuration information to the client program, so that the device to be networked accesses the access point according to the network configuration information.

Optionally, the processing module 12 may be specifically configured to: receiving a first random number sent by the client program through the server program; sending a second random number and a public key to the client program through the server program, so that the client program sends a third random number encrypted by using the public key to the server program; decrypting the third random number by the server program by using a private key; generating, by the server-side program, the key according to the first random number, the second random number, and the third random number; wherein the client program generates the key from the first random number, the second random number, and the third random number.

Optionally, the connection module 11 is specifically configured to: responding to a wireless hotspot starting operation, sending a management frame containing a preset service set identifier, so that the equipment to be accessed to the network, which receives the management frame, establishes communication connection with the distribution network equipment according to an access password corresponding to the service set identifier.

Optionally, a TCP connection is established between the network distribution device and the device to be networked, and the processing module 12 may be specifically configured to: and enabling the server program and the client program to determine a secret key through a secure transport layer protocol. Wherein, optionally, the application layer protocol includes: HTTPS or SSH.

Optionally, a UDP connection is established between the distribution network device and the device to be networked, and the processing module 12 may be specifically configured to: and enabling the server program and the client program to determine a secret key through a data packet transmission layer security protocol. Wherein, optionally, the application layer protocol includes: the CoAP.

Optionally, the distribution network device locally starts the server program.

The apparatus shown in fig. 4 may perform the steps performed by the network distribution device in the embodiment shown in fig. 1, and parts not described in detail in this embodiment may refer to the related description of the foregoing embodiment, which is not described again here.

In one possible design, the structure of the network configuration apparatus shown in fig. 4 may be implemented as a distribution network device, for example, a terminal device such as a mobile phone, a notebook computer, a vehicle-mounted terminal, and the like. As shown in fig. 5, the distribution network device may include: a first processor 21, a first memory 22. The first memory 22 stores executable codes, and when the executable codes are executed by the first processor 21, at least the first processor 21 is caused to implement the steps executed by the network distribution device in the embodiment shown in fig. 1.

The structure of the distribution network device may further include a first communication interface 23, which is used for communicating with other devices or a communication network.

In addition, an embodiment of the present invention provides a non-transitory machine-readable storage medium, which stores executable code thereon, and when the executable code is executed by a processor of a distribution network device, the processor executes the steps executed by the distribution network device in the foregoing embodiment shown in fig. 1.

Fig. 6 is a schematic structural diagram of another network configuration device according to an embodiment of the present invention, where the network configuration device is disposed in the device to be networked in the embodiment shown in fig. 1. As shown in fig. 6, the apparatus includes: a first connection module 31, a key generation module 32, a receiving module 33, and a second connection module 34.

The first connection module 31 is configured to establish a communication connection with a distribution network device.

And the key generation module 32 is configured to determine a key through a client program supporting a preset application layer protocol in the device to be networked and a server program supporting the application layer protocol in the distribution network device.

A receiving module 33, configured to receive the network configuration information encrypted by the server program according to the key.

And the second connection module 34 is configured to decrypt the network configuration information according to the secret key, so that the device to be networked accesses the corresponding access point according to the network configuration information.

Optionally, the first connection module 31 is specifically configured to: receiving a management frame sent by the distribution network equipment, wherein the management frame comprises a service set identifier of a wireless hotspot corresponding to the distribution network equipment; and establishing communication connection with the distribution network equipment according to the access password corresponding to the service set identifier.

The apparatus shown in fig. 6 may perform the steps performed by the device to be networked in the embodiment shown in fig. 1, and details of the embodiment may refer to relevant descriptions of the foregoing embodiments, which are not described herein again.

In one possible design, the structure of the network configuration apparatus shown in fig. 6 may be implemented as a device to be networked, where the device to be networked may be, for example, a smart home device, a smart wearable device, or the like. As shown in fig. 7, the device to be networked may include: a second processor 41, a second memory 42. The second memory 42 stores executable codes, and when the executable codes are executed by the second processor 41, at least the second processor 41 is enabled to implement the steps executed by the device to be networked in the embodiment shown in fig. 1.

The structure of the device to be networked may further include a second communication interface 43, which is used for communicating with other devices or a communication network.

In addition, an embodiment of the present invention provides a non-transitory machine-readable storage medium, where an executable code is stored on the non-transitory machine-readable storage medium, and when being executed by a processor of a device to be networked, the executable code causes the processor to perform the steps performed by the device to be networked in the embodiment shown in fig. 1.

Fig. 8 is a schematic structural diagram of another network configuration device according to an embodiment of the present invention, where the network configuration device is disposed in the distribution network device in the embodiment shown in fig. 2. As shown in fig. 8, the apparatus includes: a connection module 51, a processing module 52, and a transmission module 53.

And the connection module 51 is configured to establish a communication connection with the device to be networked.

The processing module 52 is configured to determine a key through a client program supporting a preset application layer protocol in the distribution network device and a server program supporting the application layer protocol in the device to be networked, and encrypt network configuration information of an access point according to the key.

A sending module 53, configured to send the encrypted network configuration information to the server program, so that the device to be networked accesses the access point according to the network configuration information.

Optionally, the connection module 51 is specifically configured to: receiving a management frame sent by the equipment to be networked, wherein the management frame comprises a service set identifier of a wireless hotspot corresponding to the equipment to be networked; and establishing communication connection with the equipment to be accessed according to the access password corresponding to the service set identifier.

Optionally, the service set identifier includes at least one of the following information:

The apparatus shown in fig. 8 may perform the steps performed by the network distribution device in the embodiment shown in fig. 2, and parts not described in detail in this embodiment may refer to the related description of the foregoing embodiment, which is not described again here.

In one possible design, the structure of the network configuration apparatus shown in fig. 8 can be implemented as a distribution network device. As shown in fig. 9, the distribution network device may include: a third processor 61, a third memory 62. The third memory 62 stores executable codes, and when the executable codes are executed by the third processor 61, the third processor 61 at least realizes the steps executed by the network distribution equipment in the embodiment shown in fig. 2.

The structure of the distribution network device may further include a third communication interface 63, which is used for the distribution network device to communicate with other devices or a communication network.

In addition, an embodiment of the present invention provides a non-transitory machine-readable storage medium, which stores executable code thereon, and when the executable code is executed by a processor of a distribution network device, the processor executes the steps executed by the distribution network device in the foregoing embodiment shown in fig. 2.

Fig. 10 is a schematic structural diagram of another network configuration apparatus according to an embodiment of the present invention, where the network configuration apparatus is disposed in the device to be networked in the embodiment shown in fig. 2. As shown in fig. 10, the apparatus includes: a first connection module 71, a key generation module 72, a receiving module 73, and a second connection module 74.

And the first connection module 71 is configured to establish a communication connection with the distribution network device in response to the wireless hotspot starting operation.

The key generation module 72 is configured to determine a key through a server program that supports a preset application layer protocol in the device to be networked and a client program that supports the application layer protocol in the distribution network device.

And a receiving module 73, configured to receive the network configuration information encrypted by the client according to the key.

And a second connection module 74, configured to decrypt the network configuration information according to the secret key, so that the device to be networked accesses the corresponding access point according to the network configuration information.

Optionally, the first connection module 71 is specifically configured to: responding to a wireless hotspot starting operation, sending a management frame containing a preset service set identifier, so that the distribution network equipment receiving the management frame establishes communication connection with the equipment to be networked according to an access password corresponding to the service set identifier.

The apparatus shown in fig. 10 may perform the steps performed by the device to be networked in the embodiment shown in fig. 2, and details of the embodiment may refer to relevant descriptions of the foregoing embodiments, which are not described herein again.

In one possible design, the structure of the network configuration apparatus shown in fig. 10 may be implemented as a device to be networked. As shown in fig. 11, the device to be networked may include: a fourth processor 81, and a fourth memory 82. The fourth memory 82 stores executable codes, and when the executable codes are executed by the fourth processor 81, the fourth processor 81 at least implements the steps executed by the device to be networked in the embodiment shown in fig. 2.

The structure of the device to be networked may further include a fourth communication interface 83, which is used for the device to be networked to communicate with other devices or a communication network.

In addition, an embodiment of the present invention provides a non-transitory machine-readable storage medium, where an executable code is stored on the non-transitory machine-readable storage medium, and when being executed by a processor of a device to be networked, the executable code causes the processor to perform the steps performed by the device to be networked in the embodiment shown in fig. 2.

In addition, a network configuration device provided in the embodiment of the present invention is disposed in the mobile phone terminal described in the embodiment shown in fig. 3. The network configuration device comprises: the device comprises a connecting module, a processing module and a sending module. Wherein:

and the connection module is used for responding to the wireless hotspot starting operation and establishing communication connection with the equipment to be accessed to the network.

The processing module is used for starting a server program supporting a preset application layer protocol in the mobile phone terminal; and determining a key through the server program and a client program supporting the application layer protocol in the device to be accessed to the network, and encrypting network configuration information of an access point according to the key.

The network configuration apparatus may perform the steps performed by the mobile phone terminal in the embodiment shown in fig. 3, and details of the parts not described in detail in this embodiment may refer to the relevant descriptions of the foregoing embodiments, which are not described herein again. In addition, the structure of the network configuration device can be realized as a mobile phone terminal. The mobile phone terminal can comprise: a processor, a memory. Wherein the memory stores executable code, and when the executable code is executed by the processor, the processor at least realizes the steps executed by the mobile phone terminal in the embodiment shown in fig. 3.

The structure of the mobile phone terminal may further include a communication interface for communicating with other devices or a communication network. The structure of the mobile phone terminal can also comprise components such as a display screen and the like.

The above-described apparatus embodiments are merely illustrative, wherein the units described as separate components may or may not be physically separate. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.

Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by adding a necessary general hardware platform, and of course, can also be implemented by a combination of hardware and software. With this understanding in mind, the above-described aspects and portions of the present technology which contribute substantially or in part to the prior art may be embodied in the form of a computer program product, which may be embodied on one or more computer-usable storage media having computer-usable program code embodied therein, including without limitation disk storage, CD-ROM, optical storage, and the like.

The network configuration method provided in the embodiment of the present invention may be executed by one or more programs/software, where the programs/software may be provided by a network side, and the distribution network device and the device to be networked mentioned in the foregoing embodiments may download corresponding programs/software to a local nonvolatile storage medium, and when it is necessary to execute the network configuration method, the CPU reads the programs/software into a memory, and then the CPU executes the programs/software to implement the network configuration method provided in the foregoing embodiments, and an execution process may refer to the schematic diagrams in fig. 1 to 3.

Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims

1. A network configuration method is applied to a mobile phone terminal, and comprises the following steps:

2. The method of claim 1, wherein the step of determining the key comprises:

the server program receives a first random number sent by the client program;

the server program sends the second random number and the public key to the client program, so that the client program sends a third random number encrypted by using the public key to the server program;

the server program decrypts the third random number by using a private key;

the server program generates the key according to the first random number, the second random number and the third random number;

wherein the client program generates the key from the first random number, the second random number, and the third random number.

3. The method of claim 1, wherein the establishing a communication connection with a device to be networked in response to a wireless hotspot opening operation comprises:

responding to a wireless hotspot starting operation, sending a management frame containing a preset service set identifier, so that the equipment to be accessed to the network, which receives the management frame, establishes communication connection with the distribution network equipment according to an access password corresponding to the service set identifier.

4. The method according to claim 1, wherein a TCP connection is established between the mobile phone terminal and the device to be networked, and the server program and the client program determine the secret key through a secure transport layer protocol.

5. The method of claim 4, wherein the application layer protocol comprises: HTTPS or SSH.

6. The method according to claim 1, wherein a UDP connection is established between the mobile phone terminal and the device to be networked, and the server program and the client program determine the key through a packet transport layer security protocol.

7. The method of claim 6, wherein the application layer protocol comprises: the CoAP.

8. A network configuration device is applied to a mobile phone terminal and comprises:

9. A mobile phone terminal, comprising: a memory, a processor; wherein the memory has stored thereon executable code which, when executed by the processor, causes the processor to perform the network configuration method of any one of claims 1 to 7.

10. A non-transitory machine-readable storage medium having stored thereon executable code, which when executed by a processor of a handset terminal, causes the processor to perform the network configuration method of any one of claims 1 to 7.

11. A network configuration method is applied to a network distribution device, and comprises the following steps:

12. The method of claim 11, wherein the distribution network device locally initiates the server-side program.

13. A network configuration method is applied to a device to be networked, and comprises the following steps:

establishing communication connection with distribution network equipment;

14. The method of claim 13, wherein establishing the communication connection with the distribution network device comprises:

receiving a management frame sent by the distribution network equipment, wherein the management frame comprises a service set identifier of a wireless hotspot corresponding to the distribution network equipment;

and establishing communication connection with the distribution network equipment according to the access password corresponding to the service set identifier.

15. A network configuration method is applied to a network distribution device, and comprises the following steps:

16. The method according to claim 15, wherein the establishing a communication connection with the device to be networked comprises:

receiving a management frame sent by the equipment to be networked, wherein the management frame comprises a service set identifier of a wireless hotspot corresponding to the equipment to be networked;

and establishing communication connection with the equipment to be accessed according to the access password corresponding to the service set identifier.

17. The method of claim 16, wherein the service set identifier comprises at least one of the following information:

18. A network configuration method is applied to a device to be networked, and comprises the following steps:

19. The method of claim 18, wherein establishing a communication connection with a distribution network device in response to a wireless hotspot opening operation comprises:

responding to a wireless hotspot starting operation, sending a management frame containing a preset service set identifier, so that the distribution network equipment receiving the management frame establishes communication connection with the equipment to be networked according to an access password corresponding to the service set identifier.

20. A network configuration device is applied to a distribution network device and comprises the following components:

21. A network distribution device, comprising: a memory, a processor; wherein the memory has stored thereon executable code which, when executed by the processor, causes the processor to perform the network configuration method of claim 11 or 12.

22. A non-transitory machine-readable storage medium having executable code stored thereon, which when executed by a processor of a distribution network device, causes the processor to perform the network configuration method of claim 11 or 12.

23. A network configuration device is applied to a device to be networked, and comprises:

24. An apparatus to be networked, comprising: a memory, a processor; wherein the memory has stored thereon executable code which, when executed by the processor, causes the processor to perform the network configuration method of claim 13 or 14.

25. A non-transitory machine-readable storage medium having stored thereon executable code, which when executed by a processor of a device to be networked, causes the processor to perform the network configuration method of claim 13 or 14.

26. A network configuration device is applied to a distribution network device and comprises the following components:

27. A network distribution device, comprising: a memory, a processor; wherein the memory has stored thereon executable code which, when executed by the processor, causes the processor to perform the network configuration method of any of claims 15 to 17.

28. A non-transitory machine-readable storage medium having executable code stored thereon, which when executed by a processor of a distribution network device, causes the processor to perform the network configuration method of any of claims 15 to 17.

29. A network configuration device is applied to a device to be networked, and comprises:

30. An apparatus to be networked, comprising: a memory, a processor; wherein the memory has stored thereon executable code which, when executed by the processor, causes the processor to perform the network configuration method of claim 18 or 19.

31. A non-transitory machine-readable storage medium having stored thereon executable code, which when executed by a processor of a device to be networked, causes the processor to perform the network configuration method of claim 18 or 19.