CN115038101A

CN115038101A - Network access method and system, access point, terminal and electronic equipment

Info

Publication number: CN115038101A
Application number: CN202210628806.XA
Authority: CN
Inventors: 潘毅明; 黄国瑾
Original assignee: China Telecom Corp Ltd
Current assignee: China Telecom Corp Ltd
Priority date: 2022-06-06
Filing date: 2022-06-06
Publication date: 2022-09-09

Abstract

The disclosure relates to a network access method and system, an access point, a terminal and an electronic device. The network access method comprises the following steps: the access point generates configuration information of a communication service set identifier SSID according to the type of the terminal; the access point transmits configuration information of the communication SSID to the terminal through the common SSID so that the terminal configures access parameters according to the configuration information of the communication SSID to access the allocated communication SSID. The present disclosure may assign different SSIDs to different types of terminals, and thus may provide different qualities of network services for different types of terminals.

Description

Network access method and system, access point, terminal and electronic equipment

Technical Field

The present disclosure relates to the field of wireless communications, and in particular, to a network access method and system, an access point, a terminal, and an electronic device.

Background

Related art WLAN (Wireless Local Area Network) networks have more and more IoT (Internet of Things) intelligent devices, and their demands on the networks are greatly different: somewhat like conventional devices, require high data traffic, such as: a network smart television; some require low latency, such as: a network telephone; some need only transmit some signaling, need low power consumption and low traffic, such as: intelligent lock.

Disclosure of Invention

The inventor finds out through research that: the related art provides a WLAN network with uniform quality, which causes resource waste.

In view of at least one of the above technical problems, the present disclosure provides a network access method and system, an access point, a terminal, and an electronic device, which may assign different SSIDs (Service Set identifiers) to different types of terminals, and thereby may provide different qualities of network services to the different types of terminals.

According to an aspect of the present disclosure, there is provided a network access method, including:

the access point generates configuration information of a communication Service Set Identifier (SSID) according to the type of the terminal;

the access point transmits configuration information of the communication SSID to the terminal through the common SSID so that the terminal configures access parameters according to the configuration information of the communication SSID to access the allocated communication SSID.

In some embodiments of the disclosure, the generating configuration information of the SSID according to the terminal type comprises:

and the access point correspondingly generates configuration information of the SSIDs for communication in different levels according to the terminal types.

In some embodiments of the present disclosure, the network access method further includes:

the method comprises the steps that an access point receives terminal information obtained by scanning of a terminal side scanning device, wherein the terminal information comprises a terminal type;

and the access point adds the terminal to a trusted terminal list, wherein the terminal in the trusted terminal list accesses the public SSID under the condition that the terminal is within the coverage range of the access point.

In some embodiments of the present disclosure, the trusted terminal list includes terminals corresponding to all SSIDs, where all SSIDs include a plurality of different levels of SSIDs for communication issued by the access point and a common SSID.

the access point issues a plurality of SSIDs for communication of different levels and one common SSID.

In some embodiments of the present disclosure, the terminal information includes a terminal identification, a public-private key pair, and a terminal type.

In some embodiments of the present disclosure, the access point transmitting the configuration information of the SSID for communication to the terminal through the common SSID comprises:

the access point encrypts the configuration information of the SSID for communication through the public key;

the access point transmits the encrypted configuration information of the communication SSID to the terminal through the public SSID so that the terminal decrypts the configuration information of the encrypted communication SSID using the corresponding private key, configures access parameters according to the configuration information of the communication SSID, and accesses the allocated communication SSID.

In some embodiments of the present disclosure, the network access method further comprises:

accessing an access point to change the SSID for communication, wherein the change comprises changing a new SSID or changing an original SSID password;

the access point judges whether a terminal accesses a public SSID, wherein the terminal is in a trusted terminal list, an original communication SSID corresponding to the terminal is changed, and the terminal cannot access the original communication SSID;

when the access point accesses the public SSID, the access point transmits the configuration information of the changed communication SSID to the terminal via the public SSID so that the terminal configures access parameters according to the configuration information of the changed communication SSID to access the allocated communication SSID.

According to another aspect of the present disclosure, there is provided a network access method, including:

the method comprises the steps that a terminal receives configuration information of a communication Service Set Identifier (SSID) sent by an access point through a common SSID, wherein the SSID is distributed by the access point according to the type of the terminal, and the configuration information of the SSID is generated according to the SSID;

the terminal configures the access parameter according to the configuration information of the communication SSID, and accesses the allocated communication SSID.

scanning by a terminal side scanning device to obtain terminal information, wherein the terminal information comprises a terminal type;

the terminal side scanning device sends the terminal information to an access point so that the access point adds the terminal to a trusted terminal list;

and the terminal accesses the public SSID under the condition that the terminal is in the coverage range of the access point.

In some embodiments of the disclosure, the receiving configuration information of the communication service set identification SSID sent by the access point via the common SSID comprises:

the terminal receives configuration information of the SSID for communication, which is sent by the access point through the public SSID and encrypted by adopting a public key;

and the terminal decrypts the encrypted configuration information of the SSID for communication by adopting the corresponding private key.

when the access point changes the communication SSID corresponding to the terminal, the terminal cannot access the original communication SSID and access the public SSID;

the terminal receives the configuration information of the changed communication SSID sent by the access point through the public SSID;

the terminal configures the access parameter according to the configuration information of the changed communication SSID, and accesses the allocated communication SSID.

According to another aspect of the present disclosure, there is provided an access point, including:

the configuration information generation module is configured to generate configuration information of a communication Service Set Identifier (SSID) according to the type of the terminal;

and a configuration information transmitting module configured to transmit configuration information of the communication SSID to the terminal through the common SSID so that the terminal configures access parameters according to the configuration information of the communication SSID to access the allocated communication SSID.

In some embodiments of the present disclosure, the configuration information generating module is configured to generate the configuration information of SSIDs for communication of different levels according to the terminal type.

In some embodiments of the disclosure, the access point further comprises:

the terminal information receiving module is configured to receive terminal information obtained by scanning of a terminal side scanning device, wherein the terminal information comprises a terminal type;

and the terminal management module is configured to add the terminal to a trusted terminal list, wherein the terminal in the trusted terminal list accesses the public SSID under the condition that the terminal is within the coverage range of the access point.

In some embodiments of the disclosure, the access point further comprises:

an SSID publishing module configured to publish a plurality of different levels of SSIDs for communication and one common SSID.

In some embodiments of the disclosure, the access point further comprises:

an encryption module configured to encrypt configuration information of the SSID for communication by a public key;

and a configuration information transmitting module configured to transmit the configuration information of the encrypted communication SSID to the terminal through the common SSID so that the terminal decrypts the configuration information of the encrypted communication SSID with the corresponding private key, configures an access parameter according to the configuration information of the communication SSID, and accesses the allocated communication SSID.

In some embodiments of the disclosure, the access point further comprises:

an SSID change module configured to change a communication SSID, wherein the change includes changing a new SSID or changing an original SSID password;

the system comprises a judging module and a judging module, wherein the judging module is configured to judge whether a terminal accesses a public SSID (service set identifier), wherein the terminal is in a trusted terminal list and cannot access the original SSID for communication;

and a configuration information transmitting module configured to transmit the configuration information of the changed communication SSID to the terminal through the common SSID so that the terminal configures the access parameter according to the configuration information of the changed communication SSID to access the allocated communication SSID, when the terminal accesses the common SSID.

According to another aspect of the present disclosure, there is provided a terminal including:

a configuration information receiving unit configured to receive configuration information of a communication service set identification SSID transmitted by an access point through a common SSID, the communication SSID being assigned by the access point according to a terminal type, the configuration information of the communication SSID being generated from the communication SSID;

and a network access unit configured to configure access parameters according to the configuration information of the communication SSID, and access the allocated communication SSID.

According to another aspect of the present disclosure, there is provided an electronic device including:

a memory to store instructions;

a processor configured to execute the instructions to cause the electronic device to perform operations to implement the network access method according to any of the embodiments.

According to another aspect of the present disclosure, there is provided a network access system comprising an access point according to any of the above embodiments and a terminal according to any of the above embodiments.

In some embodiments of the present disclosure, the network access system further comprises:

and the terminal information generating device is configured to generate terminal information and generate the two-dimensional code according to the terminal information.

the terminal side scanning device is configured to scan terminal information, wherein the terminal information comprises a terminal type; sending the terminal information to an access point so that the access point adds the terminal to a trusted terminal list;

a terminal configured to access the common SSID in case of being within a coverage of the access point.

In some embodiments of the present disclosure, the terminal further includes:

a configuration information receiving unit configured to receive configuration information of the SSID for communication encrypted with the public key, which is transmitted by the access point through the public SSID;

a decryption unit configured to decrypt the configuration information of the encrypted communication SSID with a corresponding private key.

In some embodiments of the present disclosure, the terminal is further configured to, in a case where the access point changes the communication SSID corresponding to the terminal, disable access to the original communication SSID and access to the common SSID; receiving configuration information of the changed communication SSID sent by the access point through the public SSID; and configuring the access parameter according to the configuration information of the changed communication SSID, and accessing the allocated communication SSID.

According to another aspect of the present disclosure, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, which when executed by a processor, implement the network access method according to any one of the above embodiments.

The present disclosure may assign different SSIDs to different types of terminals, and thus may provide different qualities of network services for different types of terminals.

Drawings

In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings used in the embodiments or the prior art descriptions will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present disclosure, and other drawings can be obtained by those skilled in the art without creative efforts.

Fig. 1 is a schematic diagram of some embodiments of a network access method of the present disclosure.

Fig. 2 is a schematic diagram of another embodiment of a network access method according to the present disclosure.

Fig. 3 is a schematic diagram of some further embodiments of the network access method of the present disclosure.

Fig. 4 is a schematic diagram of further embodiments of the network access method of the present disclosure.

Fig. 5 is a schematic diagram of another embodiment of a network access method according to the present disclosure.

Fig. 6 is a schematic diagram of some embodiments of an access point of the present disclosure.

Fig. 7 is a schematic diagram of some embodiments of the terminal of the present disclosure.

Fig. 8 is a schematic structural diagram of some embodiments of an electronic device of the present disclosure.

Fig. 9 is a schematic diagram of some embodiments of the network access system of the present disclosure.

Detailed Description

The technical solutions in the embodiments of the present disclosure will be described clearly and completely with reference to the drawings in the embodiments of the present disclosure, and it is obvious that the embodiments described are only some embodiments of the present disclosure, rather than all embodiments. The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the disclosure, its application, or uses. All other embodiments, which can be derived by a person skilled in the art from the embodiments disclosed herein without making any creative effort, shall fall within the protection scope of the present disclosure.

The relative arrangement of parts and steps, numerical expressions and numerical values set forth in these embodiments do not limit the scope of the present disclosure unless specifically stated otherwise.

Meanwhile, it should be understood that the sizes of the respective portions shown in the drawings are not drawn in an actual proportional relationship for the convenience of description.

Techniques, network access methods, and apparatus known to those of ordinary skill in the relevant art may not be discussed in detail, but are intended to be part of the authorization specification where appropriate.

In all examples shown and discussed herein, any particular value should be construed as merely illustrative, and not limiting. Thus, other examples of the exemplary embodiments may have different values.

It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, further discussion thereof is not required in subsequent figures.

The inventor finds out through research that: the related art provides a WLAN network with uniform quality, which causes resource waste. Particularly, when the number of terminals is large, the network efficiency is reduced, and the network quality of the terminal with high requirement cannot be ensured.

In view of at least one of the above technical problems, the present disclosure provides a network access method and system, an access point, a terminal and an electronic device, and the present disclosure is described below by specific embodiments.

Fig. 1 is a schematic diagram of some embodiments of a network access method of the present disclosure. Preferably, this embodiment may be executed by an Access Point (AP) or a network Access system of the present disclosure. The network access method may include at least one of steps 11 to 12, wherein:

and step 11, the access point generates configuration information of the communication service set identifier SSID according to the terminal type.

In some embodiments of the present disclosure, step 11 may comprise: and the access point correspondingly generates configuration information of the SSIDs for communication in different levels according to the terminal types.

In some embodiments of the present disclosure, step 11 may comprise: the access point assigns a communication SSID to the terminal according to the terminal type assignment, and generates configuration information of the communication SSID according to the communication SSID.

In some embodiments of the present disclosure, the terminal may be a WTP (Wireless Termination Points).

In some embodiments of the present disclosure, step 11 may comprise: SSID of 5GHz frequency band is distributed for WTP with high speed requirement; and allocating SSID of 2.4GHz band for WTP with low speed requirement.

And step 12, the access point transmits the configuration information of the communication SSID to the terminal through the public SSID, so that the terminal configures the access parameters according to the configuration information of the communication SSID and accesses the allocated communication SSID.

In some embodiments of the present disclosure, the network access method may further include: the method comprises the steps that an access point receives terminal information obtained by scanning of a terminal side scanning device, wherein the terminal information comprises a terminal type; and the access point adds the terminal to a trusted terminal list, wherein the terminal in the trusted terminal list accesses the public SSID under the condition that the terminal is within the coverage range of the access point.

In some embodiments of the present disclosure, the list of trusted terminals is a white list.

In some embodiments of the present disclosure, the access point adds the terminal to a trusted terminal list, where only terminals in the trusted terminal list may access all SSIDs issued by the access point if they are within the coverage of the access point. Wherein, all the SSIDs comprise a plurality of different levels of SSIDs for communication issued by the access point and a common SSID.

In some embodiments of the present disclosure, in a case where a terminal in the trusted terminal list is within the coverage of the access point, if the terminal has configuration information of a certain communication SSID, the access point is accessed using the communication SSID.

In other embodiments of the present disclosure, in a case where the terminal in the trusted terminal list is in the coverage area of the access point, if the terminal does not have the configuration information of the communication SSID, the access point is accessed by using the common SSID, and then steps 11 and 12 are performed, that is, the access point is executed to generate configuration information of different levels of communication SSIDs according to the type of the terminal; the access point transmits configuration information of the communication SSID to the terminal through the common SSID so that the terminal configures access parameters according to the configuration information of the communication SSID and accesses the allocated communication SSID

In some embodiments of the present disclosure, the terminal side scanning device may be an APP with an AP band scanning function.

In some embodiments of the present disclosure, the network access method may further include: the access point issues a plurality of SSIDs for communication of different levels and one common SSID.

In some embodiments of the present disclosure, the access point transmitting the configuration information of the SSID for communication to the terminal through the common SSID comprises: the access point encrypts the configuration information of the SSID for communication through the public key; the access point transmits the encrypted configuration information of the communication SSID to the terminal via the common SSID so that the terminal decrypts the encrypted configuration information of the communication SSID using the corresponding private key, configures access parameters according to the configuration information of the communication SSID, and accesses the allocated communication SSID.

In some embodiments of the present disclosure, the network access method may further include: accessing an access point to change the SSID for communication, wherein the change comprises changing a new SSID or changing an original SSID password; the access point judges whether a terminal accesses a public SSID (service set identifier), wherein the terminal is in a trusted terminal list and cannot access the SSID for original communication; when the access point accesses the public SSID, the access point transmits the configuration information of the changed communication SSID to the terminal via the public SSID so that the terminal configures access parameters according to the configuration information of the changed communication SSID to access the allocated communication SSID.

Fig. 2 is a schematic diagram of another embodiment of a network access method according to the present disclosure. Preferably, this embodiment may be performed by the network access system of the present disclosure. The network access method may include at least one of steps 21 to 25, wherein:

in step 21, the AP needs to issue a common SSID in addition to SSIDs for communication at different levels.

In some embodiments of the present disclosure, the public SSID may be a clear text public SSID.

In some embodiments of the present disclosure, the common SSID may be a GUEST (GUEST), facilitating WTP configuration.

Step 22, scanning the information code of the WTP by using the APP with the AP scanning function to acquire the information of the MAC address, the encryption public key, the terminal type and the like of the WTP; and the information of the WTP is sent to the AP and added into the trusted terminal list.

In some embodiments of the disclosure, the information code of the WTP suggests a two-dimensional code, which can carry more information.

In some embodiments of the present disclosure, the APP with the AP scanning function may be implemented as a terminal-side scanning device.

Step 23, the WTP tries to connect the plaintext public SSID in the AP coverage: and (6) GUEST.

In some embodiments of the present disclosure, prior to APP scan, WTP is not in the trusted terminal list, and cannot join; after the APP scans and the AP adds the information thereof into the trusted terminal list, the WTP can access the clear SSID of the AP: in GUEST.

And step 24, the AP sends SSID configuration information allocated to the WTP through the GUEST. The assigned SSID is associated with a WTP terminal type.

In some embodiments of the present disclosure, an SSID in the 5GHz band is allocated for WTPs with high rate requirements; and allocating SSID of 2.4GHz band for WTP with low speed requirement.

In some embodiments of the present disclosure, to ensure security, the SSID configuration information needs to be encrypted with a public key provided by the STA.

And step 25, after receiving the encrypted SSID configuration information through the GUEST, the WTP decrypts the information by using the corresponding private key, configures relevant access parameters and accesses the SSID allocated to the WTP.

The embodiment of fig. 2 is applicable to a scenario where a WTP accesses a WLAN network.

Fig. 3 is a schematic diagram of some further embodiments of the network access method of the present disclosure. Preferably, this embodiment may be performed by the network access system of the present disclosure. The network access method may include at least one of steps 31 to 34, wherein:

step 31, the AP changes the new SSID or changes the original SSID password.

Step 32, if the WTP cannot access the original SSID, accessing the plaintext public SSID: and (6) GUEST. The information for WTP is already in the trusted terminal list.

Step 33, the AP finds that there is a WTP access GUEST, and sends SSID configuration information allocated to it to the WTP; the configuration information at this time is already new SSID information; encryption still uses the public key corresponding to WTP.

And step 34, after receiving the configuration information (new) of the encrypted SSID through the GUEST, the WTP decrypts the configuration information by using the corresponding private key, configures the relevant access parameters and accesses the new SSID allocated to the WTP.

The above-described embodiments of the present disclosure are applicable to a scenario in which an SSID is changed (either using a new SSID or a password for changing an SSID). The flow of the above-described embodiment of the present disclosure affects only the WTPs assigned to the changed SSIDs.

Fig. 4 is a schematic diagram of further embodiments of the network access method of the present disclosure. Preferably, the present embodiment may be performed by the network access system of the present disclosure. The network access method may include at least one of steps 401 to 412, wherein:

step 401, the AP is on-line. In addition to issuing SSIDs for communication at different levels, a clear text public SSID is also issued: GuEST.

Step 402, when the WTP device is manufactured, a MAC address thereof needs to be generated; generating a unique public and private key pair for the key; and forming the information such as the MAC address, the encrypted public key, the terminal type and the like into a WTP two-dimensional code.

In some embodiments of the present disclosure, the WTP two-dimensional code is printed on a device specification of the WTP.

And step 403, scanning the two-dimensional code of the WTP by using the APP of the AP, acquiring the MAC address, the encrypted public key and the terminal type of the WTP, and then sending the MAC address, the encrypted public key and the terminal type to the AP.

In step 404, the AP stores the information, adds the MAC address of the WTP to the trusted terminal list, and assigns a suitable SSID to the WTP according to the terminal type.

And step 405, installing the WTP in the coverage area of the AP and powering on.

Step 406, the WTP has no configuration information of the SSID for communication, and accesses the plaintext public SSID: GuEST.

Step 407, after discovering that there is a WTP trying to access the GUEST, the AP allows access after verifying that its MAC is in the trusted terminal list; and after the access is successful, the SSID configuration information distributed to the WTP is sent to the WTP, and the information is encrypted by a public key corresponding to the MAC of the WTP.

Step 408, the WTP decrypts the configuration information by using the private key of the WTP, and accesses the SSID allocated to the WTP after configuring the relevant information.

In step 409, the AP changes the SSID (changes the SSID or changes the password to the SSID).

Step 410, WTP cannot access the original SSID, access the plaintext public SSID: GuEST.

In step 411, the AP finds that there is a WTP attempting to access the GUEST, and after verifying that its MAC is in the trusted terminal list, it is allowed to access. And after the WTP is successfully accessed, the SSID configuration information distributed to the WTP is sent to the WTP, and the information is encrypted by a public key corresponding to the MAC of the WTP.

In some embodiments of the present disclosure, the operation of step 411 is the same as step 407, but the SSID configuration information sent at this time is updated information, unlike step 407.

In step 412, the WTP receives the configuration information, decrypts the configuration information with its private key, and accesses the SSID (new) assigned to it after configuring the relevant information.

The method proposed by the above embodiment of the present disclosure is more suitable for WLAN networks. And safety and convenience can be considered (automatic access, and the access can be automatically adjusted after the SSID is changed).

After the AP of the embodiment of the disclosure acquires the type of the WLAN terminal, wireless network resources can be better coordinated, and the utilization rate of the WLAN network resources is improved.

The embodiment of the disclosure can also automatically access the WLAN, thereby facilitating the access of IoT equipment and the access of terminals of old people and children under a household WLAN scene.

After the SSID is changed (by using a new SSID or changing the password of the SSID), the WTP can still be automatically accessed, so that the influence of WLAN network configuration change on WTP access is reduced, the frequency of password change of the WLAN network can be increased, and the security of the WLAN network is improved.

Fig. 5 is a schematic diagram of another embodiment of a network access method according to the present disclosure. Preferably, the embodiment may be performed by the terminal or the network access system of the present disclosure. The network access method may comprise at least one of steps 51-52, wherein:

in step 51, the terminal receives configuration information of a communication service set identifier SSID transmitted by the access point via a common SSID, the communication SSID assigned by the access point according to the terminal type, the configuration information of the communication SSID being generated based on the communication SSID.

In step 52, the terminal configures the access parameters according to the configuration information of the communication SSID, and accesses the allocated communication SSID.

In some embodiments of the present disclosure, the network access method may further include: scanning by a terminal side scanning device to obtain terminal information, wherein the terminal information comprises a terminal type; the terminal side scanning device sends the terminal information to an access point so that the access point adds the terminal to a trusted terminal list; and the terminal accesses the public SSID under the condition that the terminal is in the coverage range of the access point.

In some embodiments of the present disclosure, the terminal information may include a terminal identification, a public-private key pair, and a terminal type.

In some embodiments of the disclosure, the step of receiving configuration information of a communication service set identification SSID sent by an access point through a common SSID may include: the terminal receives configuration information of the SSID for communication, which is sent by the access point through the public SSID and encrypted by adopting a public key; and the terminal decrypts the encrypted configuration information of the communication SSID by using the corresponding private key.

In some embodiments of the present disclosure, the network access method may further include: when the access point changes the communication SSID corresponding to the terminal, the terminal cannot access the original communication SSID and access the public SSID; the terminal receives the configuration information of the changed communication SSID sent by the access point through the public SSID; the terminal configures the access parameter according to the configuration information of the changed communication SSID, and accesses the allocated communication SSID.

The network access method of the embodiment of the present disclosure includes a method for acquiring the type of the WLAN terminal, which can acquire the type of the WLAN terminal while enabling the WLAN terminal to safely and conveniently access the WLAN network, thereby facilitating the WLAN network to allocate resources and maintain the level for the WLAN terminal.

The above embodiments of the present disclosure are applicable to IoT scenarios, as well as to ordinary home scenarios.

The above-described embodiments of the present disclosure may also be applied to a scenario in which an SSID is changed (either using a new SSID or changing a password for an SSID).

Fig. 6 is a schematic diagram of some embodiments of an access point of the present disclosure. As shown in fig. 6, the access point of the present disclosure may include a configuration information generating module 61 and a configuration information transmitting module 62, where:

a configuration information generating module 61 configured to generate configuration information of the communication service set identification SSID according to the terminal type.

In some embodiments of the present disclosure, the configuration information generating module may be configured to generate the configuration information of SSIDs for communication of different levels according to the type of the terminal.

A configuration information transmitting module 62 configured to transmit configuration information of the communication SSID to the terminal through the common SSID so that the terminal configures access parameters according to the configuration information of the communication SSID to access the allocated communication SSID.

In some embodiments of the present disclosure, the access point may further include a configuration reading module, wherein:

and the configuration reading module is used for reading the configuration information of the SSID and arranging the configuration information into a message with a certain format.

In some embodiments of the present disclosure, as shown in fig. 6, the access point may further include a terminal information receiving module 63 and a terminal management module 64, where:

and a terminal information receiving module 63 configured to receive terminal information scanned by the terminal-side scanning device, wherein the terminal information includes a terminal type.

A terminal management module 64 configured to add the terminal to a trusted terminal list, wherein the terminals in the trusted terminal list access the common SSID if they are within the coverage of the access point.

In some embodiments of the present disclosure, the terminal management module 64 may be configured to maintain a trusted terminal list (white list) to reduce the risk of AP attacks; and distributing the corresponding SSID for communication according to the type of the terminal.

In some embodiments of the present disclosure, as shown in fig. 6, the access point may further include an SSID issuing module 65, where:

an SSID issue module 65 configured to issue a plurality of different levels of SSIDs for communication and one common SSID.

In some embodiments of the present disclosure, SSID issuance module 65 may be implemented as a WLAN driver module.

In some embodiments of the present disclosure, SSID issuance module 65 may be configured to issue a plurality of different levels of SSIDs for communication and one unified clear text public SSID: GuEST.

In some embodiments of the present disclosure, as shown in fig. 6, the access point may further include an encryption module 66, where:

an encryption module 66 configured to encrypt the configuration information of the SSID for communication by a public key.

In some embodiments of the present disclosure, the encryption module 66 may be an encryption/decryption module, mainly using the function of encrypting a message by a public key.

A configuration information transmitting module 62 configured to transmit the configuration information of the encrypted SSID for communication to the terminal via the public SSID so that the terminal decrypts the configuration information of the encrypted SSID for communication using the corresponding secret key, configures an access parameter according to the configuration information of the SSID for communication, and accesses the allocated SSID for communication.

In some embodiments of the present disclosure, as shown in fig. 6, the access point may further include an SSID changing module 67 and a determining module 68, where:

an SSID changing module 67 configured to perform a change of the communication SSID, wherein the change includes changing a new SSID or changing an original SSID password.

A determining module 68 configured to determine whether a terminal accesses the common SSID, wherein the terminal is in the trusted terminal list and cannot access the original communication SSID.

And a configuration information transmitting module 62 configured to transmit the configuration information of the changed communication SSID to the terminal through the common SSID so that the terminal configures the access parameter according to the configuration information of the changed communication SSID to access the allocated communication SSID, when the terminal accesses the common SSID.

The access point of the above embodiment of the present disclosure can implement issuing a plurality of SSIDs; acquiring WLAN terminal information; updating a trusted terminal list in real time, and distributing SSID for the terminal; encrypting messages with a public key, etc.

Fig. 7 is a schematic diagram of some embodiments of the terminal of the present disclosure. As shown in fig. 7, the terminal of the present disclosure may include a configuration information receiving unit 71 and a network access unit 72, where:

a configuration information receiving unit 71 configured to receive configuration information of a communication service set identification SSID transmitted by the access point through a common SSID, the configuration information of the SSID being generated according to a terminal type.

A network access unit 72 configured to configure access parameters according to the configuration information of the communication SSID, and access the allocated communication SSID.

In some embodiments of the present disclosure, the terminal may further include a configuration storage unit, wherein: and the configuration storage unit is configured to acquire and store the configuration information of the SSID, and access the SSID according to the stored configuration when accessing next time.

Fig. 9 is a schematic structural diagram of some embodiments of the network access system of the present disclosure. As shown in fig. 9, the network access system may include a terminal 92 and a terminal-side scanning device 94, wherein:

a terminal side scanning device 94 configured to scan terminal information, wherein the terminal information includes a terminal type; and sending the terminal information to an access point so that the access point adds the terminal to a trusted terminal list.

In some embodiments of the present disclosure, the terminal information may include at least a Media Access Control (MAC) Address, an encryption public key, a terminal type, and the like of the WLAN terminal.

In some embodiments of the present disclosure, the terminal-side scanning device 94 may set up a re-terminal-side APP (application) for the AP.

In some embodiments of the present disclosure, the terminal-side scanning device 94 may be disposed at the terminal, or may be implemented as a separate device at the terminal side; the terminal-side scanning device 94 may be disposed in other intelligent devices.

In some embodiments of the present disclosure, the terminal-side scanning device 94 has a scanning function, and can scan and acquire information of the WLAN terminal and send the terminal information to the AP.

In some embodiments of the disclosure, the information code of the WLAN terminal suggests a two-dimensional code, which can carry more information.

In some embodiments of the present disclosure, the information code of the WLAN terminal is suggested to be printed on the WLAN terminal (or on the specification).

A network access unit 72 configured to access the common SSID if within the access point coverage.

In some embodiments of the present disclosure, the network access unit 72 may be implemented as a WLAN driver unit.

In some embodiments of the present disclosure, the network access unit 72 may be configured to access the clear text public SSID at the initial time or when the configured SSID is not accessible: GUEST; and after the SSID configuration information is acquired, the SSID allocated to the WTP is accessed.

In some embodiments of the present disclosure, as shown in fig. 7, the terminal may further include a decryption unit 73, wherein:

a configuration information receiving unit 71 configured to receive configuration information of the SSID for communication encrypted with the public key, which is transmitted by the access point through the public SSID.

A decryption unit 73 configured to decrypt the configuration information of the encrypted communication SSID with the corresponding private key.

In some embodiments of the present disclosure, the decryption unit 73 may be implemented as an encryption/decryption unit, wherein the function of decrypting the message by the private key is mainly used.

In some embodiments of the present disclosure, the network access unit 72 is configured to, in a case where the access point changes the SSID for communication corresponding to the terminal, not access the SSID for communication and access the public SSID; a configuration information receiving unit 71 further configured to receive configuration information of the changed communication SSID transmitted by the access point through the common SSID; the network access unit 72 is further configured to configure access parameters according to the configuration information of the changed communication SSID, and access the allocated communication SSID.

In some embodiments of the present disclosure, the terminal of the present disclosure may be implemented as a WTP or WLAN terminal.

The terminal of the embodiment of the present disclosure can decrypt the configuration message to obtain the configuration information; associating newly configured access points, and the like.

The terminal type information of the embodiment of the disclosure is carried by the terminal entity, is not easy to tamper, and is more suitable for a WLAN scene.

Fig. 8 is a schematic structural diagram of some embodiments of an electronic device of the present disclosure. As shown in fig. 8, the electronic device includes a memory 81 and a processor 82.

The memory 81 is used for storing instructions, the processor 82 is coupled to the memory 81, and the processor 82 is configured to execute a network access method related to implementing any of the above-mentioned embodiments (for example, any of the embodiments of fig. 1 to 5) based on the instructions stored in the memory.

In some embodiments of the present disclosure, in the case where processor 82 executes the network access method of the fig. 1 embodiment, step 21, step 23, and step 25 of the fig. 2 embodiment, step 31 and step 33 of the fig. 3 embodiment, step 401, step 404, step 407, step 409, and step 411 of the fig. 4 embodiment, the electronic device of the present disclosure may be implemented as an access point of the present disclosure.

In some embodiments of the present disclosure, in the case that processor 82 executes the network access method of the fig. 5 embodiment, steps 22 and 24 of the fig. 2 embodiment, steps 32 and 34 of the fig. 3 embodiment, step 403 of the fig. 4 embodiment, step 405-step 406, step 408, step 410 and step 412, the electronic device of the present disclosure may be implemented as a terminal of the present disclosure.

As shown in fig. 8, the electronic device further comprises a communication interface 83 for information interaction with other devices. Meanwhile, the electronic device further comprises a bus 84, and the processor 82, the communication interface 83 and the memory 81 are communicated with each other through the bus 84.

The memory 81 may comprise high-speed RAM memory, and may also include non-volatile memory, such as at least one disk memory. The memory 81 may also be a memory array. The storage 81 may also be partitioned and the blocks may be combined into virtual volumes according to certain rules.

Further, the processor 82 may be a central processing unit CPU, or may be an application specific integrated circuit ASIC, or one or more integrated circuits configured to implement embodiments of the present disclosure.

Fig. 9 is a block diagram of some embodiments of the network access system of the present disclosure. As shown in fig. 8, the electronic device includes an access point 91 and a terminal 92, wherein:

an Access Point (AP)91 configured to issue SSIDs for communication of different levels, and also to issue a clear-text common SSID: GUEST; generating its own information for each WTP, including: MAC address, public and private key pair for encryption and decryption and terminal type. The MAC address and the private key are written into the WTP equipment; the MAC address, the public key, and the terminal type form a public device information code (two-dimensional code).

In some embodiments of the present disclosure, the APP band scanning function of the AP on the terminal side may scan the device information code identifying the WTP and send it to the AP.

In some embodiments of the present disclosure, the access point 91 may be configured to manage a terminal list, record the MAC address of the trusted terminal, its corresponding encrypted public key, the terminal type, and the SSID for communication assigned thereto.

In some embodiments of the present disclosure, the access point 91 may be implemented as an access point as described in any of the embodiments above (e.g., the fig. 6 embodiment).

A terminal (WTP)92 configured to access the clear text common SSID when there is no communication SSID information or the communication SSID cannot be accessed: and (6) GUEST.

In some embodiments of the present disclosure, the access point 91 may be configured to check if its MAC address is within the trusted terminal list when it is discovered that WTP attempts to access the GUEST; after allowing the trusted WTP access to the GUEST, SSID configuration information assigned to the WTP is sent to the WTP, encrypted (identified by the MAC) with the encrypted public key of the trusted WTP.

In some embodiments of the present disclosure, the terminal 92 may be configured to decrypt the received information with its own private key after the GUEST receives the information, obtain the configuration information of the SSID for communication, and use the configuration information to access the SSID assigned to it.

In some embodiments of the present disclosure, the terminal 92 may be implemented as a terminal as described in any of the above embodiments (e.g., the embodiment of fig. 7).

In some embodiments of the present disclosure, as shown in fig. 9, the network access system may further include a terminal information generating device 93, where:

and a terminal information generating device 93 configured to generate terminal information and generate a two-dimensional code from the terminal information.

In some embodiments of the present disclosure, the terminal-information generating device 93 may be implemented as a WTP-side assist module.

In some embodiments of the present disclosure, the terminal information generating device 93 may include at least one of the following modules: the device comprises an MAC address module, an encryption and decryption module and a two-dimensional code generation module. The functions of generating MAC addresses, generating public and private key pairs, generating two-dimensional codes and the like are realized.

In some embodiments of the present disclosure, the MAC address module is configured to generate a MAC address to be written to the WLAN terminal.

In some embodiments of the present disclosure, the encryption and decryption module is configured to generate a public and private key pair, and write a private key into the WLAN terminal.

In some embodiments of the present disclosure, the two-dimensional code generation module is configured to form a two-dimensional code from the MAC address, the terminal encryption public key, the terminal type, and other information.

In some embodiments of the present disclosure, as shown in fig. 9, the terminal may further include a terminal side scanning device 94, wherein:

In some embodiments of the present disclosure, the terminal-side scanning apparatus 94 may set up an APP (application) of the terminal side for the AP.

In some embodiments of the present disclosure, the information code of the WLAN terminal suggests a two-dimensional code, which can carry more information.

The embodiments of the present disclosure provide a system and a method for assisting a terminal WLAN to automatically access a WLAN network, which implement functions cooperatively through modules on both sides of an AP and a WTP.

The embodiment of the present disclosure provides a system for uploading WLAN terminal information to a network side by an entity, and has higher security.

The above embodiments of the present disclosure also consider the convenience of accessing the WLAN network, and not only can allocate different SSIDs to different types of terminals, but also can be applied to a scenario where the SSID is changed (a new SSID is used or a password of the SSID is changed).

The above embodiments of the present disclosure are applicable to IoT scenarios using WLAN networking; the above embodiments of the present disclosure are also applicable to a home WLAN scenario.

According to another aspect of the present disclosure, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, which when executed by a processor, implement the network access method according to any of the embodiments described above (e.g., any of the embodiments of fig. 1-5).

The AP of the above embodiment of the present disclosure issues a common SSID and SSIDs for communication of different levels; the embodiment of the present disclosure scans the information code generated by the WTP side, obtains the MAC address, the encryption public key and the terminal type of the WTP, and writes the WTP information into the trusted terminal list; in the above embodiment of the present disclosure, when the WTP written in the trusted terminal list enters the coverage area of the AP, the common SSID is connected: GUEST; the AP of the embodiment of the disclosure can generate SSID configuration information according to the type of the terminal, encrypt the SSID configuration information through a public key and send the SSID configuration information to the WTP through a GUEST; the WTP according to the above embodiment of the present disclosure may decrypt through the corresponding private key, configure the access parameter according to the SSID configuration information, and access the allocated SSID.

It will be appreciated by those skilled in the art that embodiments of the present disclosure may be provided as a network access method, apparatus, or computer program product. Accordingly, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present disclosure may take the form of a computer program product embodied on one or more computer-usable non-transitory storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

The present disclosure is described with reference to flowchart illustrations and/or block diagrams of network access methods, apparatus (systems) and computer program products according to embodiments of the disclosure. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

The electronic device, access point, configuration information generation module 61, configuration information transmission module 62, terminal information reception module 63, terminal management module 64, SSID issuing module 65, encryption module 66, SSID changing module 67, determination module 68, terminal, configuration information reception unit 71 described above, the network access unit 72, the terminal-side scanning device 94, the decryption unit 73, the terminal information generation device 93, the MAC address module, the encryption/decryption module, and the two-dimensional code generation module may be implemented as a general-purpose processor, a Programmable Logic Controller (PLC), a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, or any suitable combination thereof, for performing the functions described herein.

Thus far, the present disclosure has been described in detail. Some details that are well known in the art have not been described in order to avoid obscuring the concepts of the present disclosure. It will be fully apparent to those skilled in the art from the foregoing description how to practice the presently disclosed embodiments.

It will be understood by those skilled in the art that all or part of the steps for implementing the above embodiments may be implemented by hardware, or may be implemented by a program instructing relevant hardware to implement the above embodiments, where the program may be stored in a non-transitory computer readable storage medium, and the above-mentioned storage medium may be a read-only memory, a magnetic or optical disk, and the like.

The description of the present disclosure has been presented for purposes of illustration and description, and is not intended to be exhaustive or limited to the disclosure in the form disclosed. Many modifications and variations will be apparent to practitioners skilled in this art. The embodiment was chosen and described in order to best explain the principles of the disclosure and the practical application, and to enable others of ordinary skill in the art to understand the disclosure for various embodiments with various modifications as are suited to the particular use contemplated.

Claims

1. A network access method, comprising:

2. The network access method of claim 1, wherein the generating configuration information of the communication Service Set Identification (SSID) according to the terminal type comprises:

and the access point correspondingly generates configuration information of SSIDs for communication in different levels according to the terminal type.

3. The network access method of claim 1 or 2, further comprising:

and the access point adds the terminal to a trusted terminal list, wherein the terminal in the trusted terminal list accesses the public SSID under the condition that the terminal is in the coverage range of the access point.

4. The network access method of claim 3, further comprising:

5. The network access method of claim 3, wherein:

the terminal information comprises a terminal identification, a public and private key pair and a terminal type;

the access point transmitting configuration information of the SSID for communication to the terminal through the common SSID includes:

6. The network access method of claim 1 or 2, further comprising:

the access point judges whether a terminal accesses a public SSID (service set identifier), wherein the terminal is in a trusted terminal list and cannot access the SSID for original communication;

when the terminal accesses the common SSID, the access point transmits the configuration information of the changed communication SSID to the terminal via the common SSID, so that the terminal configures the access parameter according to the configuration information of the changed communication SSID and accesses the allocated communication SSID.

7. A network access method, comprising:

8. The network access method of claim 7, further comprising:

the terminal side scanning device sends the terminal information to an access point so that the access point can add the terminal to a trusted terminal list;

9. The network access method of claim 8, wherein:

the terminal information comprises a terminal identifier, a public and private key pair and a terminal type;

the receiving configuration information of the communication service set identifier SSID sent by the access point through the public SSID comprises the following steps:

and the terminal decrypts the encrypted configuration information of the communication SSID by using the corresponding private key.

10. The network access method of any of claims 7-9, further comprising:

when the access point changes the SSID for communication corresponding to the terminal, the terminal can not access the original SSID for communication and access the public SSID;

11. An access point, comprising:

12. The access point of claim 11, wherein:

and the configuration information generation module is configured to correspondingly generate the configuration information of the SSIDs for communication in different levels according to the terminal types.

13. The access point of claim 11 or 12, further comprising:

14. The access point of claim 13, further comprising:

and the SSID issuing module is configured to issue a plurality of communication SSIDs of different levels and one common SSID.

15. The access point of claim 13, wherein:

the access point further comprises:

16. The access point of claim 11 or 12, further comprising:

and a configuration information transmitting module configured to transmit the configuration information of the changed communication SSID to the terminal through the common SSID so that the terminal configures an access parameter according to the configuration information of the changed communication SSID to access the allocated communication SSID, if the terminal accesses the common SSID.

17. A terminal, comprising:

18. An electronic device, comprising:

a memory to store instructions;

a processor configured to execute the instructions to cause the electronic device to perform operations to implement the network access method of any of claims 1-10.

19. A network access system comprising an access point according to any of claims 11-16 and a terminal according to claim 17.

20. The network access system of claim 19, further comprising:

21. The network access system of claim 19 or 20, further comprising:

22. The network access system of claim 21, wherein:

the terminal further comprises:

23. The network access system of claim 19 or 20, wherein:

a terminal configured to be unable to access the original communication SSID and access the common SSID when the access point changes the communication SSID corresponding to the terminal; receiving configuration information of the changed communication SSID sent by the access point through the public SSID; and configuring the access parameter according to the configuration information of the changed communication SSID, and accessing the allocated communication SSID.

24. A computer readable storage medium, wherein the computer readable storage medium stores computer instructions which, when executed by a processor, implement the network access method of any one of claims 1-10.