CN115835204A

CN115835204A - Method, device, medium and program product for releasing hotspot connection

Info

Publication number: CN115835204A
Application number: CN202211464496.9A
Authority: CN
Inventors: 孙敏; 娄宏跃
Original assignee: Shanghai Lianshang Network Technology Co Ltd
Current assignee: Shanghai Lianshang Network Technology Co Ltd
Priority date: 2022-11-22
Filing date: 2022-11-22
Publication date: 2023-03-21

Abstract

An object of the present application is to provide a method, apparatus, medium, and program product for hotspot connection release, the method comprising: receiving a first release request sent by user equipment trying to connect a target hotspot corresponding to the routing equipment, and acquiring a first MAC address corresponding to the user equipment and a second MAC address corresponding to the target hotspot; generating a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sending the second release request to an authentication platform server; and receiving release indication information returned by the authentication platform server based on the second release request, and executing corresponding release operation aiming at the user equipment according to the release indication information.

Description

Method, device, medium and program product for releasing hotspot connection

Technical Field

The present application relates to the field of communications, and in particular, to a technique for releasing hotspot connections.

Background

At present, authentication and release of many public hotspots need to be uniformly controlled by an AC Controller (Wireless Access Point Controller) and a Wireless Controller, and the AC Controller and an AP (Wireless Access Point) need to use the same brand, so that there are many restrictions, and many mobile phone operating systems targeted to the authentication and release of hotspots use random MAC, which may cause a problem that the real MAC address of a mobile phone cannot be obtained when the hotspot authentication is released.

Disclosure of Invention

It is an object of the present application to provide a method, apparatus, medium, and program product for hotspot connection release.

According to an aspect of the present application, there is provided a method for hotspot connection release, the method comprising:

receiving a first release request sent by user equipment trying to connect a target hotspot corresponding to the routing equipment, and acquiring a first MAC address corresponding to the user equipment and a second MAC address corresponding to the target hotspot;

generating a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sending the second release request to an authentication platform server;

and receiving release indication information returned by the authentication platform server based on the second release request, and executing corresponding release operation aiming at the user equipment according to the release indication information.

According to an aspect of the present application, there is provided a routing device for hotspot connection release, the device comprising:

a module, configured to receive a first release request sent by a user equipment attempting to connect to a target hotspot corresponding to the routing device, and obtain a first MAC address corresponding to the user equipment and a second MAC address corresponding to the target hotspot;

a second module, configured to generate a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and send the second release request to an authentication platform server;

and a third module, configured to receive release indication information returned by the authentication platform server based on the second release request, and execute, according to the release indication information, a corresponding release operation for the user equipment.

According to an aspect of the present application, there is provided a computer device for hotspot connection release, comprising a memory, a processor and a computer program stored on the memory, wherein the processor executes the computer program to implement the operations of any of the methods described above.

According to an aspect of the application, there is provided a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, performs the operations of any of the methods described above.

According to an aspect of the application, a computer program product is provided, comprising a computer program which, when executed by a processor, carries out the steps of any of the methods as described above.

Compared with the prior art, the routing device receives a first release request sent by user equipment trying to connect with a target hotspot corresponding to the routing device, and acquires a first MAC address corresponding to the user equipment and a second MAC address corresponding to the target hotspot; generating a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sending the second release request to an authentication platform server; and receiving release indication information returned by the authentication platform server based on the second release request, and executing corresponding release operation aiming at the user equipment according to the release indication information, so that a sub-request forwarding function is added on the basis of a common router, the common router can uniformly manage authentication and release of the user, and the problem that a real MAC address cannot be obtained during authentication release because a plurality of mobile phone operating systems use random MAC at present can be solved.

Drawings

Other features, objects and advantages of the present application will become more apparent upon reading of the following detailed description of non-limiting embodiments thereof, made with reference to the accompanying drawings in which:

FIG. 1 illustrates a flow diagram of a method for hotspot connection release according to one embodiment of the present application;

FIG. 2 illustrates a flow diagram of a method for hotspot connection release according to one embodiment of the present application;

FIG. 3 illustrates a routing device architecture diagram for hotspot connection release according to one embodiment of the present application;

FIG. 4 illustrates an exemplary system that can be used to implement the various embodiments described in this application.

The same or similar reference numbers in the drawings identify the same or similar elements.

Detailed Description

The present application is described in further detail below with reference to the attached figures.

In a typical configuration of the present application, the terminal, the device serving the network, and the trusted party each include one or more processors (e.g., central Processing Units (CPUs)), input/output interfaces, network interfaces, and memory.

The Memory may include forms of volatile Memory, random Access Memory (RAM), and/or non-volatile Memory in a computer-readable medium, such as Read Only Memory (ROM) or Flash Memory. Memory is an example of a computer-readable medium.

Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase-Change Memory (PCM), programmable Random Access Memory (PRAM), static Random-Access Memory (SRAM), dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), read Only Memory (ROM), electrically Erasable Programmable Read Only Memory (EEPROM), flash Memory or other Memory technology, compact Disc Read Only Memory (CD-ROM), digital Versatile Disc (DVD) or other optical storage, magnetic tape storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device.

The device referred to in the present application includes, but is not limited to, a terminal, a network device, or a device formed by integrating a terminal and a network device through a network. The terminal includes, but is not limited to, any mobile electronic product, such as a smart phone, a tablet computer, etc., capable of performing human-computer interaction with a user (e.g., human-computer interaction through a touch panel), and the mobile electronic product may employ any operating system, such as an Android operating system, an iOS operating system, etc. The network Device includes an electronic Device capable of automatically performing numerical calculation and information processing according to a preset or stored instruction, and the hardware includes, but is not limited to, a microprocessor, an Application Specific Integrated Circuit (ASIC), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Digital Signal Processor (DSP), an embedded Device, and the like. The network device includes but is not limited to a computer, a network host, a single network server, a plurality of network server sets or a cloud of a plurality of servers; here, the Cloud is composed of a large number of computers or web servers based on Cloud Computing (Cloud Computing), which is a kind of distributed Computing, one virtual supercomputer consisting of a collection of loosely coupled computers. Including, but not limited to, the internet, a wide area network, a metropolitan area network, a local area network, a VPN network, a wireless Ad Hoc network (Ad Hoc network), etc. Preferably, the device may also be a program running on the terminal, the network device, or a device formed by integrating the terminal and the network device, the touch terminal, or the network device and the touch terminal through a network.

Of course, those skilled in the art will understand that the above-described apparatus is merely exemplary, and that other existing or future existing apparatus, as may be suitable for use in the present application, are intended to be encompassed within the scope of the present application and are hereby incorporated by reference.

In the description of the present application, "a plurality" means two or more unless specifically defined otherwise.

Fig. 1 shows a flowchart of a method for passing a hotspot connection according to one embodiment of the present application, which includes step S11, step S12 and step S13. In step S11, a routing device receives a first release request sent by a user device attempting to connect to a target hotspot corresponding to the routing device, and obtains a first MAC address corresponding to the user device and a second MAC address corresponding to the target hotspot; in step S12, the routing device generates a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sends the second release request to an authentication platform server; in step S13, the routing device receives release instruction information returned by the authentication platform server based on the second release request, and executes a corresponding release operation for the user equipment according to the release instruction information.

In step S11, the routing device receives a first release request sent by a user device attempting to connect to a target hotspot corresponding to the routing device, and obtains a first MAC address corresponding to the user device and a second MAC address corresponding to the target hotspot. In some embodiments, one routing device, i.e. a router, may correspond to one or more public or business hotspots, i.e. Wireless Access Points (APs), where the routing device may be a router with a Wireless AP function, or the routing device may also be a router connected to an independent Wireless AP device. In some embodiments, when the user equipment attempts to connect to a target hotspot of the one or more hotspots, unlike the past, the user equipment may directly request an IP address of the routing equipment, that is, directly send a first release request to the IP address of the routing equipment, that is, to a gateway IP, where the first release request is used to request the routing equipment to release a wireless connection between the user equipment and the target hotspot, and after receiving the first release request, the routing equipment may obtain a correct MAC address of the user equipment, that is, a first MAC address, and a BSSID (Basic Service Set Identifier) of the target hotspot to which the user equipment is connected, that is, a second MAC address.

In step S12, the routing device generates a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sends the second release request to the authentication platform server. In some embodiments, corresponding request data may be obtained by parsing the first release request, and a new second release request may be generated according to the request data, the first MAC address and the second MAC address, and sent to the corresponding authentication platform server, where the second release request includes the request data of the first release request, the first MAC address and the second MAC address. In some embodiments, the first MAC address and the second MAC address may be added to the first release request based on the first release request, and the first release request and the second release request are repackaged into a new second release request and sent to the corresponding authentication platform server.

In step S13, the routing device receives release indication information returned by the authentication platform server based on the second release request, and executes a corresponding release operation for the user equipment according to the release indication information. In some embodiments, the authentication platform server corresponding to the target hotspot authenticates the user equipment based on the first MAC address and the second MAC address, and authenticates whether to allow the wireless connection between the user equipment and the target hotspot, for example, according to the first MAC address, obtains relevant information of a user corresponding to the user equipment, and authenticates whether the user has an authority to use the target hotspot corresponding to the second MAC address according to the relevant information, and if so, allows the wireless connection between the user equipment and the target hotspot to be released. In some embodiments, the authentication platform server returns an authentication result, that is, release indication information indicating whether to allow release of the wireless connection between the user equipment and the target hotspot after the authentication is completed, to the routing equipment, and then the routing equipment performs a corresponding release operation for the user equipment according to the release indication information, that is, the user equipment can send data to the internet via the routing equipment or receive data sent to the internet via the routing equipment based on the wireless connection between the user equipment and the target hotspot. In some embodiments, the routing device also returns the clear indication information to the user device for presentation to the using user. The method and the device add the sub-request forwarding function on the basis of the common router, so that the common router can uniformly manage the authentication and the release of the user, and the problem that the real MAC address cannot be obtained when the authentication is released because many mobile phone operating systems use random MAC at present can be solved.

In some embodiments, the method further comprises: the routing equipment synchronously releases the white list information from the authentication platform server; wherein the step S12 includes: determining whether to release the user equipment according to the release white list information; if yes, executing corresponding releasing operation aiming at the user equipment; otherwise, generating a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sending the second release request to an authentication platform server. In some embodiments, the routing device may periodically obtain the latest released white list information from the corresponding authentication platform server, or the authentication platform server may periodically push the latest released white list information to the routing device. In some embodiments, the release white list information includes a MAC address set formed by one or more MAC addresses, and after receiving the first release request, the routing device first determines whether the release white list information includes the first MAC address, if so, directly performs a corresponding release operation for the user equipment, that is, directly releases the wireless connection between the user equipment and the target hotspot, otherwise, generates a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sends the second release request to the corresponding authentication platform server. In some embodiments, the release white list information includes a mapping relationship between a user equipment MAC address and a routing equipment MAC address, and after receiving a first release request, the routing equipment determines whether a second MAC address exists in the release white list information, and if so, determines whether one or more user equipment MAC addresses mapped by the second MAC address include a first MAC address according to the mapping relationship in the release white list information, and if not, directly executes a corresponding release operation for the user equipment, that is, directly releases a wireless connection between the user equipment and a target hotspot, otherwise, generates a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sends the second release request to a corresponding authentication platform server.

In some embodiments, said determining whether to pass said user equipment according to said passing white list information comprises: and determining whether to release the user equipment according to the release white list information based on the first MAC address. In some embodiments, the release white list information includes a MAC address set formed by one or more MAC addresses, and after receiving the first release request, the routing device first determines whether the release white list information includes the first MAC address, if so, directly performs a corresponding release operation for the user equipment, that is, directly releases the wireless connection between the user equipment and the target hotspot, otherwise, generates a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sends the second release request to the corresponding authentication platform server.

In some embodiments, said determining whether to pass the user equipment according to the passing white list information based on the first MAC address comprises: and determining whether to release the user equipment according to the release white list information based on the first MAC address and the second MAC address information. In some embodiments, the release white list information includes a mapping relationship between a user equipment MAC address and a routing equipment MAC address, and after receiving a first release request, the routing equipment determines whether a second MAC address exists in the release white list information, and if so, determines whether one or more user equipment MAC addresses mapped by the second MAC address include a first MAC address according to the mapping relationship in the release white list information, and if not, directly executes a corresponding release operation for the user equipment, that is, directly releases a wireless connection between the user equipment and a target hotspot, otherwise, generates a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sends the second release request to a corresponding authentication platform server.

In some embodiments, the first clear request includes clear token information; wherein the determining whether to release the user equipment according to the released white list information includes: and determining whether to release the user equipment according to the release white list information based on the release token information. In some embodiments, the release white list information includes a release token set including one or more pieces of release token information (token) and a validity period corresponding to each piece of release token information, after receiving a first release request, the routing device first determines whether the first release request includes release token information and whether the release white list information includes the release token information, if so, then continuously determines whether the current time is within the validity period corresponding to the release token information, that is, determines whether the release token information is expired, if not, then directly executes a corresponding release operation for the user device, that is, directly releases the wireless connection between the user device and the target hotspot, if so, a second release request corresponding to the first release request needs to be generated according to the first MAC address and the second MAC address, and sends the second release request to a corresponding platform authentication server. In some embodiments, when the user equipment is connected to another public hotspot or business hotspot having a cooperative relationship with the authentication platform server before, the authentication platform server may provide the token corresponding to the user equipment and store the token in the local of the user equipment after the user equipment is authenticated, or when the user logs in the hotspot connection application on the user equipment, the authentication platform server may provide the token corresponding to the user equipment and store the token in the local of the user equipment, so that the user equipment may bring the token corresponding to the user equipment in a first release request when the user equipment subsequently sends the first release request to the routing device.

In some embodiments, the generating a second release request corresponding to the first release request includes: obtaining corresponding first request data from the first release request; adding the first MAC address and the second MAC address into the first request data to obtain second request data; and generating a second release request corresponding to the first release request according to the second request data. In some embodiments, the first release request is first analyzed to obtain corresponding first request data, then the first MAC address and the second MAC address are added to the first request data to obtain second request data, and the second request data is encapsulated into a new second release request.

In some embodiments, said obtaining corresponding first request data from said first clear request comprises: decrypting the first release request through first key information to obtain first request data; the generating a second release request corresponding to the first release request according to the second request data includes: and encrypting the second request data through second key information to generate a second release request corresponding to the first release request. In some embodiments, it is necessary to analyze the first release request by using the first key information (for example, an AES symmetric key) negotiated in advance to obtain the corresponding first request data, and then encrypt the second request data by using the second key information negotiated in advance to encapsulate the second request data into a new second release request. In some embodiments, the first key information is the same as the second key information, i.e., the first key information and the second key information are symmetric keys, or the first key information is different from the second key information, i.e., the first key information and the second key information are asymmetric keys. In some embodiments, the second key information is pre-stored in the authentication platform server, and after receiving the second release request, the authentication platform server decrypts the second release request by using the second key information to obtain the first MAC address and the second MAC address.

In some embodiments, the method further comprises: the routing equipment receives a third release request sent by the user equipment trying to connect a second target hotspot corresponding to the routing equipment; and directly executing corresponding releasing operation aiming at the user equipment. In some embodiments, after the user equipment is disconnected from the target hotspot by wireless connection, if the user equipment attempts to connect another hotspot other than the target hotspot, namely a second target hotspot, in the one or more hotspots corresponding to the routing equipment, at this time, when receiving a third release request sent by the user equipment, the routing equipment directly performs a corresponding release operation for the user equipment, that is, directly releases the wireless connection between the user equipment and the second target hotspot, without forwarding the third release request to the corresponding authentication platform server.

In some embodiments, said performing a corresponding clear operation directly for said user equipment comprises: and if the time interval between the time when the routing equipment is disconnected from the target hotspot and the current time is less than or equal to a preset time threshold, directly executing corresponding releasing operation aiming at the user equipment. In some embodiments, when the routing device receives a third release request sent by the user device, the wireless connection between the user device and the second target hotspot is directly released only when a time interval between the time when the routing device is disconnected from the target hotspot and the current time is less than or equal to a predetermined time threshold. In some embodiments, it needs to be satisfied that the target hotspot is a hotspot to which the user device has connected last time, and a time interval between the time when the routing device is disconnected from the target hotspot and the current time is less than or equal to a predetermined duration threshold.

In some embodiments, said performing a corresponding pass operation directly for said user equipment comprises: and if the time interval between the time of the last network data transmission event based on the target hotspot and the current time is less than or equal to a preset time length threshold, the routing equipment directly executes corresponding release operation aiming at the user equipment. In some embodiments, when receiving the third release request sent by the user equipment, the routing device needs to satisfy that a time interval between an event occurrence time of a last network data transmission event (data transmission event or data reception event) occurring at the target hotspot and a current time is less than or equal to a predetermined time threshold, before the routing device directly releases the wireless connection between the user equipment and the second target hotspot. In some embodiments, it is also desirable to satisfy that the target hotspot is the hotspot to which the user device was most recently connected.

In some embodiments, the method further comprises: after the routing device executes the releasing operation, synchronizing the first MAC address to other routing devices, so that the other routing devices directly execute corresponding releasing operation for the user device after receiving a fourth releasing request sent by the user device trying to connect other hotspots corresponding to the other routing devices. In some embodiments, after performing the corresponding release operation for the user equipment, the routing device synchronizes the first MAC address of the user equipment to at least one other routing device, where the at least one other routing device needs to be located within a predetermined range near the routing device, or needs to configure an IP address of the at least one other routing device on the routing device in advance, or needs to send the IP address of the at least one other routing device to the routing device and store the IP address on the routing device by another device (e.g., an authentication platform server or some user equipment), or needs to configure an association relationship between the routing device and the at least one other routing device in advance in the authentication platform server. In some embodiments, after receiving a fourth release request sent by a second user equipment attempting to connect to another hotspot corresponding to the other routing equipment, the other routing equipment obtains a MAC address corresponding to the second user equipment, and if the MAC address is the same as the first MAC address, that is, if the second user equipment and the user equipment are the same user equipment, the other routing equipment directly releases the wireless connection between the second user equipment and the other hotspot.

In some embodiments, the synchronizing the first MAC address to other routing devices includes: and synchronizing the first MAC address to other routing equipment according to the IP address information of other routing equipment. In some embodiments, the IP address of the at least one other routing device needs to be configured on the routing device in advance, or the IP address of the at least one other routing device needs to be sent to the routing device by another device (e.g., an authentication platform server or some user device) and stored on the routing device, so that the routing device can synchronize the first MAC address to the at least one other routing device by directly requesting the IP address.

In some embodiments, the synchronizing the first MAC address to other routing devices includes: and synchronizing the first MAC address to other routing equipment in a near field communication mode, wherein the other routing equipment is positioned in a preset range near the routing equipment. In some embodiments, it is desirable that the at least one other routing device be within a predetermined range of the proximity of the routing device such that the routing device can synchronize the first MAC address to the at least one other routing device via close range communications including, but not limited to, bluetooth, zigBee, NFC, UWB ultra wide band, and the like.

In some embodiments, the synchronizing the first MAC address to other routing devices includes: synchronizing, via the authentication platform server, the first MAC address to other routing devices, wherein an association between the routing device and the other routing devices has been configured in the authentication platform server. In some embodiments, the routing device may synchronize the first MAC address to the authentication platform server, and then, since the association relationship between the routing device and the other routing devices has been configured in advance in the authentication platform server, the authentication platform server determines at least one other routing device with which the routing device is associated, and then synchronizes the first MAC address to the at least one other routing device by the authentication platform server.

FIG. 2 illustrates a flow diagram of a method for hotspot connection release according to one embodiment of the present application.

As shown in fig. 2, a hotspot connection application (e.g., "key") on a user device sends a formal release request to a router based on a gateway IP, and then the router initiates a sub-request, the router re-encapsulates the received formal release request, together with a MAC address of the user device and a BSSID of a hotspot to which the user device is connected, and sends the encapsulated formal release request to a collaboration platform server, and the collaboration platform server authenticates the user device according to related information of the user, and if the authentication is passed, returns a token and a release white list corresponding to the user device to the router, and the router performs a corresponding release operation for the user device, and returns a release result (success/failure) to the hotspot connection application for presentation to the user, wherein the router synchronizes a latest release white list from the collaboration platform server at a timing of 2 minutes.

Fig. 3 shows a structure diagram of a routing device for hot spot connection release according to an embodiment of the present application, where the device includes a one-module 11, a two-module 12, and a three-module 13. A module 11, configured to receive a first release request sent by a user equipment attempting to connect to a target hotspot corresponding to the routing device, and obtain a first MAC address corresponding to the user equipment and a second MAC address corresponding to the target hotspot; a second module 12, configured to generate a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and send the second release request to an authentication platform server; a third module 13, configured to receive release indication information returned by the authentication platform server based on the second release request, and execute, according to the release indication information, a corresponding release operation for the user equipment.

A module 11, configured to receive a first release request sent by a user equipment attempting to connect to a target hotspot corresponding to the routing device, and obtain a first MAC address corresponding to the user equipment and a second MAC address corresponding to the target hotspot. In some embodiments, one routing device, i.e. a router, may correspond to one or more public or business hotspots, i.e. Wireless Access Points (APs), where the routing device may be a router with a Wireless AP function, or the routing device may also be a router connected to an independent Wireless AP device. In some embodiments, when the user equipment attempts to connect to a target hotspot of the one or more hotspots, unlike the past, the user equipment may directly request an IP address of the routing equipment, that is, directly send a first release request to the IP address of the routing equipment, that is, to a gateway IP, where the first release request is used to request the routing equipment to release a wireless connection between the user equipment and the target hotspot, and after receiving the first release request, the routing equipment may obtain a correct MAC address of the user equipment, that is, a first MAC address, and a BSSID (Basic Service Set Identifier) of the target hotspot to which the user equipment is connected, that is, a second MAC address.

A second module 12, configured to generate a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and send the second release request to an authentication platform server. In some embodiments, corresponding request data may be obtained by parsing the first release request, and a new second release request may be generated according to the request data, the first MAC address and the second MAC address, and sent to the corresponding authentication platform server, where the second release request includes the request data of the first release request, the first MAC address and the second MAC address. In some embodiments, the first MAC address and the second MAC address may be added to the first release request based on the first release request, and the first release request and the second release request are repackaged into a new second release request and sent to the corresponding authentication platform server.

A third module 13, configured to receive release indication information returned by the authentication platform server based on the second release request, and execute, according to the release indication information, a corresponding release operation for the user equipment. In some embodiments, the authentication platform server corresponding to the target hotspot authenticates the user equipment based on the first MAC address and the second MAC address, and authenticates whether to allow the wireless connection between the user equipment and the target hotspot, for example, according to the first MAC address, obtains relevant information of a user corresponding to the user equipment, and authenticates whether the user has an authority to use the target hotspot corresponding to the second MAC address according to the relevant information, and if so, allows the wireless connection between the user equipment and the target hotspot to be released. In some embodiments, the authentication platform server returns release indication information indicating whether to allow release of the wireless connection between the user equipment and the target hotspot after the authentication is completed to the routing equipment, and then the routing equipment performs a corresponding release operation for the user equipment according to the release indication information, that is, the user equipment can send data to the internet via the routing equipment or receive data sent to the internet via the routing equipment based on the wireless connection between the user equipment and the target hotspot. In some embodiments, the routing device also returns the clear indication information to the user device for presentation to the using user. The method and the device add the sub-request forwarding function on the basis of the common router, so that the common router can uniformly manage the authentication and the release of the user, and the problem that the real MAC address cannot be obtained when the authentication is released because many mobile phone operating systems use random MAC at present can be solved.

In some embodiments, the apparatus is further to: synchronously releasing white list information from the authentication platform server; wherein the second module 12 is configured to: determining whether to release the user equipment according to the release white list information; if yes, executing corresponding releasing operation aiming at the user equipment; otherwise, generating a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sending the second release request to an authentication platform server. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, said determining whether to pass said user equipment according to said passing white list information comprises: and determining whether to release the user equipment according to the release white list information based on the first MAC address. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, said determining whether to pass the user equipment according to the passing white list information based on the first MAC address comprises: and determining whether to release the user equipment according to the release white list information based on the first MAC address and the second MAC address information. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, the first clear request includes clear token information; wherein the determining whether to release the user equipment according to the released white list information includes: and determining whether to release the user equipment according to the release white list information based on the release token information. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, the generating a second release request corresponding to the first release request includes: obtaining corresponding first request data from the first release request; adding the first MAC address and the second MAC address into the first request data to obtain second request data; and generating a second release request corresponding to the first release request according to the second request data. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, said obtaining corresponding first request data from said first clear request comprises: decrypting the first release request through first key information to obtain first request data; the generating a second release request corresponding to the first release request according to the second request data includes: and encrypting the second request data through second key information to generate a second release request corresponding to the first release request. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, the apparatus is further configured to: receiving a third release request sent by the user equipment trying to connect a second target hotspot corresponding to the routing equipment; and directly executing corresponding releasing operation aiming at the user equipment. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, said performing a corresponding pass operation directly for said user equipment comprises: and if the time interval between the time when the routing equipment is disconnected from the target hotspot and the current time is less than or equal to a preset time threshold, directly executing corresponding releasing operation aiming at the user equipment. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and thus are not described again, and are included herein by reference.

In some embodiments, said performing a corresponding pass operation directly for said user equipment comprises: and if the time interval between the time of the last network data transmission event occurring on the basis of the target hotspot and the current time is less than or equal to a preset time threshold, the routing equipment directly executes corresponding releasing operation aiming at the user equipment. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, the apparatus is further configured to: after the release operation is executed, synchronizing the first MAC address to other routing devices, so that the other routing devices directly execute a corresponding release operation for the user device after receiving a fourth release request sent by the user device attempting to connect to other hotspots corresponding to the other routing devices. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, the synchronizing the first MAC address to other routing devices includes: and synchronizing the first MAC address to other routing equipment according to the IP address information of other routing equipment. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and thus are not described again, and are included herein by reference.

In some embodiments, the synchronizing the first MAC address to other routing devices includes: and synchronizing the first MAC address to other routing equipment in a near field communication mode, wherein the other routing equipment is positioned in a preset range near the routing equipment. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In some embodiments, the synchronizing the first MAC address to other routing devices includes: synchronizing, via the authentication platform server, the first MAC address to other routing devices, wherein an association between the routing device and the other routing devices has been configured in the authentication platform server. Here, the related operations are the same as or similar to those of the embodiment shown in fig. 1, and therefore are not described again, and are included herein by reference.

In addition to the methods and apparatus described in the embodiments above, the present application also provides a computer readable storage medium storing computer code that, when executed, performs the method as described in any of the preceding claims.

The present application also provides a computer program product, which when executed by a computer device, performs the method of any of the preceding claims.

The present application further provides a computer device, comprising:

one or more processors;

a memory for storing one or more computer programs;

the one or more computer programs, when executed by the one or more processors, cause the one or more processors to implement the method of any preceding claim.

FIG. 4 illustrates an exemplary system that can be used to implement the various embodiments described herein;

in some embodiments, as shown in FIG. 4, the system 300 can be implemented as any of the devices in the various embodiments described. In some embodiments, system 300 may include one or more computer-readable media (e.g., system memory or NVM/storage 320) having instructions and one or more processors (e.g., processor(s) 305) coupled with the one or more computer-readable media and configured to execute the instructions to implement modules to perform the actions described herein.

For one embodiment, system control module 310 may include any suitable interface controllers to provide any suitable interface to at least one of processor(s) 305 and/or to any suitable device or component in communication with system control module 310.

The system control module 310 may include a memory controller module 330 to provide an interface to the system memory 315. Memory controller module 330 may be a hardware module, a software module, and/or a firmware module.

System memory 315 may be used, for example, to load and store data and/or instructions for system 300. For one embodiment, system memory 315 may include any suitable volatile memory, such as suitable DRAM. In some embodiments, the system memory 315 may include a double data rate type four synchronous dynamic random access memory (DDR 4 SDRAM).

For one embodiment, system control module 310 may include one or more input/output (I/O) controllers to provide an interface to NVM/storage 320 and communication interface(s) 325.

For example, NVM/storage 320 may be used to store data and/or instructions. NVM/storage 320 may include any suitable non-volatile memory (e.g., flash memory) and/or may include any suitable non-volatile storage device(s) (e.g., one or more Hard Disk Drives (HDDs), one or more Compact Disc (CD) drives, and/or one or more Digital Versatile Disc (DVD) drives).

NVM/storage 320 may include storage resources that are physically part of the device on which system 300 is installed or may be accessed by the device and not necessarily part of the device. For example, NVM/storage 320 may be accessible over a network via communication interface(s) 325.

Communication interface(s) 325 may provide an interface for system 300 to communicate over one or more networks and/or with any other suitable device. System 300 may wirelessly communicate with one or more components of a wireless network according to any of one or more wireless network standards and/or protocols.

For one embodiment, at least one of the processor(s) 305 may be packaged together with logic for one or more controller(s) of the system control module 310, such as memory controller module 330. For one embodiment, at least one of the processor(s) 305 may be packaged together with logic for one or more controller(s) of the system control module 310 to form a System In Package (SiP). For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with logic for one or more controller(s) of the system control module 310. For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with logic for one or more controller(s) of the system control module 310 to form a system on chip (SoC).

In various embodiments, system 300 may be, but is not limited to being: a server, a workstation, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet, a netbook, etc.). In various embodiments, system 300 may have more or fewer components and/or different architectures. For example, in some embodiments, system 300 includes one or more cameras, a keyboard, a Liquid Crystal Display (LCD) screen (including a touch screen display), a non-volatile memory port, multiple antennas, a graphics chip, an Application Specific Integrated Circuit (ASIC), and speakers.

It should be noted that the present application may be implemented in software and/or a combination of software and hardware, for example, implemented using Application Specific Integrated Circuits (ASICs), general purpose computers or any other similar hardware devices. In one embodiment, the software programs of the present application may be executed by a processor to implement the steps or functions described above. As such, the software programs (including associated data structures) of the present application can be stored in a computer readable recording medium, such as RAM memory, magnetic or optical drive or diskette and the like. Further, some of the steps or functions of the present application may be implemented in hardware, for example, as circuitry that cooperates with the processor to perform various steps or functions.

In addition, some of the present application may be implemented as a computer program product, such as computer program instructions, which when executed by a computer, may invoke or provide methods and/or techniques in accordance with the present application through the operation of the computer. Those skilled in the art will appreciate that the form in which the computer program instructions reside on a computer-readable medium includes, but is not limited to, source files, executable files, installation package files, and the like, and that the manner in which the computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Computer-readable media herein can be any available computer-readable storage media or communication media that can be accessed by a computer.

Communication media includes media by which communication signals, including, for example, computer readable instructions, data structures, program modules, or other data, are transmitted from one system to another. Communication media may include conductive transmission media such as cables and wires (e.g., fiber optics, coaxial, etc.) and wireless (non-conductive transmission) media capable of propagating energy waves such as acoustic, electromagnetic, RF, microwave, and infrared. Computer readable instructions, data structures, program modules, or other data may be embodied in a modulated data signal, for example, in a wireless medium such as a carrier wave or similar mechanism such as is embodied as part of spread spectrum techniques. The term "modulated data signal" means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. The modulation may be analog, digital or hybrid modulation techniques.

By way of example, and not limitation, computer-readable storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. For example, computer-readable storage media include, but are not limited to, volatile memory such as random access memory (RAM, DRAM, SRAM); and non-volatile memory such as flash memory, various read-only memories (ROM, PROM, EPROM, EEPROM), magnetic and ferromagnetic/ferroelectric memories (MRAM, feRAM); and magnetic and optical storage devices (hard disk, tape, CD, DVD); or other now known media or later developed that can store computer-readable information/data for use by a computer system.

An embodiment according to the present application comprises an apparatus comprising a memory for storing computer program instructions and a processor for executing the program instructions, wherein the computer program instructions, when executed by the processor, trigger the apparatus to perform a method and/or a solution according to the aforementioned embodiments of the present application.

It will be evident to those skilled in the art that the present application is not limited to the details of the foregoing illustrative embodiments, and that the present application may be embodied in other specific forms without departing from the spirit or essential attributes thereof. The present embodiments are therefore to be considered in all respects as illustrative and not restrictive, the scope of the application being indicated by the appended claims rather than by the foregoing description, and all changes which come within the meaning and range of equivalency of the claims are therefore intended to be embraced therein. Any reference sign in a claim should not be construed as limiting the claim concerned. Furthermore, it is obvious that the word "comprising" does not exclude other elements or steps, and the singular does not exclude the plural. A plurality of units or means recited in the apparatus claims may also be implemented by one unit or means in software or hardware. The terms first, second, etc. are used to denote names, but not to denote any particular order.

Claims

1. A method for releasing hotspot connection is applied to a routing device, wherein the method comprises the following steps:

2. The method of claim 1, wherein the method further comprises:

synchronously releasing white list information from the authentication platform server;

wherein, the generating a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sending the second release request to an authentication platform server includes:

determining whether to release the user equipment according to the release white list information;

if yes, executing corresponding releasing operation aiming at the user equipment;

otherwise, generating a second release request corresponding to the first release request according to the first MAC address and the second MAC address, and sending the second release request to an authentication platform server.

3. The method of claim 2, wherein the determining whether to pass the user device according to the passing white list information comprises:

and determining whether to release the user equipment according to the release white list information based on the first MAC address.

4. The method of claim 3, wherein the determining whether to pass the user equipment according to the passing white list information based on the first MAC address comprises:

and determining whether to release the user equipment according to the release white list information based on the first MAC address and the second MAC address information.

5. The method of claim 2, wherein the first clear request includes clear token information;

wherein the determining whether to release the user equipment according to the released white list information includes:

and determining whether to release the user equipment according to the release white list information based on the release token information.

6. The method of claim 1, wherein the generating a second clear request corresponding to the first clear request comprises:

obtaining corresponding first request data from the first release request;

adding the first MAC address and the second MAC address into the first request data to obtain second request data;

and generating a second release request corresponding to the first release request according to the second request data.

7. The method of claim 6, wherein said obtaining corresponding first request data from said first clear request comprises:

decrypting the first release request through first key information to obtain first request data;

the generating a second release request corresponding to the first release request according to the second request data includes:

and encrypting the second request data through second key information to generate a second release request corresponding to the first release request.

8. The method of claim 1, wherein the method further comprises:

receiving a third release request sent by the user equipment attempting to connect with a second target hotspot corresponding to the routing equipment;

and directly executing corresponding releasing operation aiming at the user equipment.

9. The method of claim 8, wherein the performing a corresponding pass operation directly for the user device comprises:

and if the time interval between the time when the routing equipment is disconnected from the target hotspot and the current time is less than or equal to a preset time threshold, directly executing corresponding releasing operation aiming at the user equipment.

10. The method of claim 8, wherein the performing a corresponding pass operation directly for the user device comprises:

and if the time interval between the time of the last network data transmission event occurring on the basis of the target hotspot and the current time is less than or equal to a preset time threshold, the routing equipment directly executes corresponding releasing operation aiming at the user equipment.

11. The method of claim 1, wherein the method further comprises:

after the releasing operation is executed, synchronizing the first MAC address to other routing devices, so that the other routing devices directly execute a corresponding releasing operation for the user device after receiving a fourth releasing request sent by the user device attempting to connect to other hotspots corresponding to the other routing devices.

12. The method of claim 11, wherein the synchronizing the first MAC address to other routing devices comprises:

and synchronizing the first MAC address to other routing equipment according to the IP address information of other routing equipment.

13. The method of claim 11, wherein the synchronizing the first MAC address to other routing devices comprises:

and synchronizing the first MAC address to other routing equipment in a close range communication mode, wherein the other routing equipment is positioned in a preset range near the routing equipment.

14. The method of claim 11, wherein the synchronizing the first MAC address to other routing devices comprises:

synchronizing, via the authentication platform server, the first MAC address to other routing devices, wherein an association between the routing device and the other routing devices has been configured in the authentication platform server.

15. A computer device for hotspot connection release, comprising a memory, a processor and a computer program stored on the memory, characterized in that the processor executes the computer program to implement the steps of the method according to any one of claims 1 to 14.

16. A computer-readable storage medium, on which a computer program/instructions are stored, which, when being executed by a processor, carry out the steps of the method according to any one of claims 1 to 14.

17. A computer program product comprising a computer program, characterized in that the computer program realizes the steps of the method according to any one of claims 1 to 14 when executed by a processor.