WO2012048565A1

WO2012048565A1 - Method and apparatus for configuring wireless access control list

Info

Publication number: WO2012048565A1
Application number: PCT/CN2011/073899
Authority: WO
Inventors: 马涛; 侯书朋; 刘昕颖; 蒋岳龙
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-10-13
Filing date: 2011-05-10
Publication date: 2012-04-19
Also published as: CN102448065A

Abstract

A method and equipment for configuring a wireless access control list are disclosed in the present invention, and the method includes the following steps: after receiving a key-press message, a wireless local network access equipment detects that if the time length of the key-press is a predetermined time length, then it enters into a registration grant status; and under the registration grant status, if the correlation information of a wireless client equipment is received, it obtains a Media Access Control (MAC) address of the wireless client, and inserts the MAC address into the wireless access control list. The present invention enables subscribers to trigger the message only by the way of key-press, thereby the system completes the configuration of the wireless access control list automatically.

Description

Method and device for configuring wireless access control list

Technical field

The present invention relates to a wireless local area network communication security technology, and more particularly to a method and apparatus for implementing a wireless access control list on a wireless local area network access device.

Background technique

With the rapid development of wireless LAN technology, wireless home gateways have gradually entered the home and small office, becoming an indispensable network equipment for people's lives and work. In order to increase the security of the wireless local area network, most wireless home gateway devices have the function of setting a wireless access control list through a webpage to implement access control. This feature filters all wireless clients attempting to join the WLAN through the wireless home gateway device according to their MAC (Media Access Control) address, allowing or disabling them through the wireless home gateway according to the set rules. Devices join WLANs and even access the Internet.

This function filters the wireless client at the physical layer, which is safe and reliable, and is a good protection measure for the wireless local area network. However, for the majority of home users, to implement this function, you need to manually enter the wireless client's MAC address through the page; for users who are not sure what the MAC address is, how to obtain the MAC address, this function cannot be set or take effect. Therefore, too many professional setting methods and setting methods make this function of many wireless home gateway devices abandoned by users. Users are more likely to maintain the wireless local area network by setting more complicated encryption methods and keys to bring inconvenience to the normal use of users. Summary of the invention

The technical problem to be solved by the present invention is to provide a method and a device for configuring a wireless access control list, so that the user can automatically complete the configuration of the wireless access control list by simply triggering a message by pressing a button.

In order to solve the above technical problem, the present invention provides a party for configuring a wireless access control list. Law, including:

After receiving the button message, the WLAN access device enters the allowable registration state if it detects that the button duration is a predetermined duration;

In the permission registration state, if the association information of the wireless client device is received, the MAC address of the wireless client is acquired, and the MAC address is inserted into the wireless access control list.

Optionally, the foregoing method further has the following feature: the allowing the registration state to continue for a predetermined time. Optionally, the above method has the following features:

The predetermined time is a time set by the wireless home gateway device to receive a user.

Optionally, the foregoing method further has the following features: after the step of detecting that the duration of the button is a predetermined duration, the wireless local area network access device further includes:

If it is detected that the current radio frequency is off, the radio frequency is turned on.

Optionally, the above method has the following features:

The method further includes: the wireless local area network access device indicating the allowed registration status by a slow blinking state of the indicator light.

In order to solve the above problem, the present invention further provides an apparatus for configuring a wireless access control list, including:

The button detection module is configured to: after receiving the button message, trigger the configuration module if the button duration is detected as a predetermined length;

The configuration module is configured to: enter a permission registration state after being triggered, and if the association information of the wireless client is received, obtain the MAC address of the wireless client, and insert the MAC address into the wireless Access control list.

Optionally, the foregoing device further has the following features: further comprising a timer module,

The configuration module is further configured to: after being triggered, issue an open timing message to the timer module; and exit the allowed registration state after receiving the timing end message sent by the timer module;

The timer module is configured to: after receiving the opening timing message, perform timing according to a preset timing time, and send a timing end message to the configuration module after the timing is completed.

Optionally, the foregoing apparatus further has the following features: the timer module is further configured to: receive The time set by the user.

Optionally, the above device further has the following features: The device further includes a wireless status indicator module.

The configuration module is further configured to: send a first control message to the wireless status indicator module after being triggered; and send a second control to the wireless status indicator module after receiving a timing end message sent by the timer module Message

The wireless status indicator module is configured to: after receiving the first control message, control the wireless status indicator to perform slow flashing; after receiving the second control message, control the wireless status indicator to end slow flashing.

Optionally, the above device also has the following features:

The configuration module is further configured to: if the current radio frequency is detected to be off after being triggered, turn on the radio frequency.

In summary, the present invention provides a method and apparatus for configuring a wireless access control list. Compared with the prior art, the present invention adds a more intelligent configuration wireless based on retaining the original web page configuration wireless access control list. By accessing the control list, the user only needs to trigger the message by pressing the button, and then the system can automatically complete a series of actions such as configuration, saving and loading of the wireless access control list, and easily realize wireless access control. In addition, the present invention also reserves a fixed time setting interface, which is convenient for the user to customize the setting countdown time according to the use environment and the use object of the home gateway device, so that the function is more widely used. BRIEF abstract

1 is a schematic diagram of an apparatus for configuring a wireless access control list of the present invention;

2 is a schematic diagram of an apparatus for configuring a radio access control list according to an embodiment of the present invention; FIG. 3 is a flowchart of a method for configuring a radio access control list according to the present invention;

4 is a flow chart of an application example of a method of configuring a wireless access control list of the present invention. Preferred embodiment of the invention For a better understanding of the present invention, the invention will be further described in conjunction with the drawings and specific embodiments. The device for configuring a wireless access control list is applicable to all wireless local area network access devices (APs), as shown in FIG. 1 , and mainly includes: a button detecting module 10 and a configuration module 11 , wherein

The button detecting module 10 is configured to: after receiving the button message, if the button duration is detected to be a predetermined duration, triggering the configuration module;

The configuration module 11 is configured to enter a permission registration state after being triggered. In the permission registration state, if the association information of the wireless client is received, the MAC address of the wireless client is acquired, and the MAC address is inserted into the wireless access. In the control list.

After the MAC address is inserted into the wireless access control list, the system automatically updates the configuration to make the access list take effect, and the automatic configuration is completed.

2 is a schematic diagram of an apparatus for configuring a radio access control list according to an embodiment of the present invention. The apparatus in this embodiment is a radio module in an AP. As shown in FIG. 2, the apparatus in this embodiment may include: a button detection module 10, The timer module 12, the wireless status indicator module 13, the database module 110, the wireless management module 111, and the wireless driver module 112. In this embodiment, the configuration module 11 is subdivided into a database module 110, a wireless management module 111, and The wireless drive module 112, of course, those skilled in the art can also divide the modules involved in the present invention into other forms according to design requirements. The functions of the modules in this embodiment are as follows:

The wireless management module 111 is used to distribute and process related messages and is a core module in the entire system.

In this embodiment, the wireless management module 111 is configured to perform corresponding processing according to the message output by the button detecting module 10. For example, after receiving the registration message output by the button detection module 10, if it is determined that the current radio frequency is the on state, the startup timer message is output to the timer module 12, and the first indicator light control is sent to the wireless status indicator module 13. Information, and outputting an associated message to the wireless drive module 112; if the wireless radio is off, exit or turn on the radio. The wireless management module 111 is configured to receive the timed arrival message sent by the timer module, and then go to the wireless state. The indicator module 13 issues second indicator control information and issues an association end message to the wireless driver module 112.

The button detecting module 10 is configured to detect the duration of the button, to distinguish the purpose of the button of the user, and implement the button multiplexing function. The input of the button detecting module is the button information of the user, and after processing, output a corresponding event message to the wireless management module. In the present embodiment, the button detecting module 10 outputs a registration message to the wireless management module 111 if a button message of a predetermined length (e.g., 2-10 seconds) is detected.

The wireless status indicator module 112 is configured to feed back the status of the current wireless module to the user, where the input is the indicator control information sent by the wireless management module 111, and the status of the indicator light is controlled according to the control information. There are three states under normal conditions. If it is always on, flashing and off. If the indicator is steady on, the wireless module of the wireless module is enabled, and no data is exchanged. The blinking indicates that the wireless module of the wireless module is turned on and in communication. If the indicator is off, the wireless module of the wireless module is turned off. In this embodiment, the status of the indicator light also includes slow flashing. Status, the indicator flashes slowly to indicate that the registration is allowed.

The timer module 12 is configured to receive a timer start message sent by the wireless management module 111, count down according to the set fixed time, and send a message to the wireless management module 111 after the time is up. In this embodiment, during the timing period, the wireless client may be associated with the AP, and the system may add the MAC address of the associated wireless client to the wireless access list during the timing period; in addition, the length of the timing time may be set by the user. According to the use occasion, choose different time, such as wireless home gateway equipment, because the number of clients is small, the time can be set shorter; if in the office area, the time can be set longer.

The wireless driving module 112 is configured to receive the associated information sent by the wireless management module, receive the associated information of the wireless client, obtain the MAC address of the associated wireless client device, and provide the wireless management module 111 to the wireless management module 111. After the wireless access control list sent by the module, MAC address filtering is performed according to the wireless access control list.

The database module 110 is configured to: after receiving the MAC address sent by the wireless management module 111, traverse the wireless access control list in the database, insert a new MAC address in the wireless access control list, generate a new wireless access control list; The wireless access control list is sent to the wireless management module 111. The method for configuring a wireless access control list provided by the present invention, as shown in FIG. 3, includes the following steps:

S30. After receiving the button message, the WLAN access device enters the permission registration state if the button duration is detected as a predetermined duration;

S31. In the permission registration state, if the association information of the wireless client device is received, the MAC address of the wireless client device is obtained, and the MAC address is inserted into the wireless access control list.

An application example of the method for configuring a wireless access control list provided by the present invention, as shown in FIG. 4, includes the following steps:

Step 401: The wireless home gateway device detects a button message of the user.

Step 402: processing the button message, if the analysis button duration is a predetermined duration (2-10 seconds), then proceed to step 103; if the button duration is not a predetermined duration, the processing is performed according to an existing process, for example, the button duration is less than 2 seconds. , enter the WPS (Wi-Fi Protected Setup) application processing flow, and the button duration is greater than 10 seconds, then enter the wireless module switch processing flow;

Step 403: The wireless status indicator enters a flash state.

Step 404: Start a timer module, and start counting down;

Step 405: Unblock the access control. At this time, any wireless client device can associate with the AP in the correct manner and will not be filtered out.

Steps 403 to 405 have no prior order restrictions.

Step 406: The user uses the wireless client that needs to be set to be associated with the wireless home gateway device.

The wireless driver module can receive associated information of the wireless client.

Step 407: The wireless driver module obtains a MAC address of the wireless client that is associated with the connection, and performs recording.

Step 408: After the fixed time is over, the timer module sends a timing message.

Step 409: The wireless management module processes the timing message sent by the timer module. For example, after receiving the timing message of the timer module, the wireless management module notifies the wireless status indicator module, the wireless driver module, and the database module.

Step 410: The wireless status indicator module controls the indicator to return to a normal state.

Step 411: The database module saves the MAC address of all the associated wireless clients obtained by the wireless driver module, inserts the MAC address into the wireless access control list, generates a new wireless access control list, and outputs the wireless access control list to the wireless management module.

Step 412: The wireless management module sends the wireless access control list information table saved by the database module to the wireless driving module.

Step 413: The wireless driving module uses the wireless access control list information to perform MAC address filtering to implement an access control function.

In the present invention, the user enters the wireless registration (REGISTER) mode by pressing a button on the wireless home gateway device; at this time, the indicator light of the device enters a slow flash state, and notifies the user that the device has entered the permission registration state; This state lasts for a fixed period of time, which can be set according to the environment in which the device is used. During this fixed time, the wireless client operated by the user can be associated with the wireless home gateway device (for example, by inputting the correct key or by using a WPS or the like to associate with the wireless home gateway device); after the fixed time is over, the state The indicator is switched to the normal state, and the user is notified that the device has left the permission registration state. At the same time, the wireless home gateway device records and configures the MAC address of all the associated wireless clients in a fixed period of time, inserts the obtained MAC address into the wireless access control list, and the wireless home gateway device enters the wireless access control list to enter the state, thereby implementing wireless. Access control features.

The invention greatly facilitates the use of the majority of home network users, and the wireless access control function can be easily implemented with a single push.

The process of the wireless management module receiving and processing the button message in the embodiment of the present invention includes the following steps;

Step 501: The home network user performs a button, and the button detection module counts the time that the user presses, and after the user releases the button, sends a different message to the wireless management module according to the different length of the timer. Control message

In this embodiment, if the button detecting module detects that the button duration is 2-10 seconds, the button is sent to the wireless management module.

Step 502: After receiving the wireless access control message in step 501, the wireless management module enters a corresponding processing flow.

In this embodiment, if the wireless management module receives the registration message, first determines the current radio frequency status, and if it is enabled, sends a start timer message, then proceeds to step 503; if the radio frequency is turned off, the radio frequency is turned on, and the radio is turned on. Status Indicator.

Step 503: The wireless management module sends an indication to the wireless status indicator module to exit the normal control state, and the wireless status indicator module controls the wireless status indicator to enter a slow flash state according to the indication, thereby shielding the other module from the wireless status indicator. Control, give users feedback on the corresponding information.

The process of the wireless management module receiving and processing the timer message in the embodiment of the present invention includes the following steps;

Step 601: After the timer module expires, it is reported to the wireless management module. After receiving the message, the wireless management module turns off the timer module.

Step 602: The wireless management module sends a message to the wireless status indicator module, and controls the wireless status indicator to exit the blinking state of the man speed, and returns to the state normally controlled by the wireless driving module;

Step 603: The wireless management module sends an association end message to the wireless driver module, and the wireless driver module stops acquiring the MAC addresses of all currently associated wireless clients.

Step 604: The wireless management module saves all the successfully associated wireless client MAC addresses obtained by the wireless driver module into the database module.

Step 605: The database module traverses the wireless client's MAC address and the wireless access control list in the database, inserts the newly added MAC address, and generates a new wireless access control list. Step 606: The wireless management module reads the newly generated wireless access. The control list is sent to the wireless driver module, and the wireless access control function is activated. One of ordinary skill in the art will appreciate that all or a portion of the above steps may be performed by a program to instruct the associated hardware, such as a read only memory, a magnetic disk, or an optical disk. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module in the foregoing embodiment may be implemented in the form of hardware, or may be implemented in the form of a software function module. The invention is not limited to any specific form of combination of hardware and software.

The above is only a preferred embodiment of the present invention, and of course, the present invention may be embodied in various other embodiments without departing from the spirit and scope of the invention. Corresponding changes and modifications are intended to be included within the scope of the appended claims.

Industrial Applicability Compared with the prior art, the present invention adds a more intelligent way of configuring a wireless access control list on the basis of retaining the original web page configuration wireless access control list, and the user only needs to trigger a message by pressing a button. After that, the system can automatically complete a series of actions such as configuration, saving and loading of the wireless access control list, and easily implement wireless access control. In addition, the present invention also reserves a fixed time setting interface, which is convenient for the user to customize the set countdown time according to the use environment and the use object of the home gateway device, so that the function is more widely used.

Claims

Claim

1. A method for configuring a wireless access control list, comprising:

In the permission registration state, if the association information of the wireless client device is received, the media access control (MAC) address of the wireless client is obtained, and the MAC address is inserted into the wireless access control list.

2. The method of claim 1 wherein

The permission registration state lasts for a predetermined time.

3. The method of claim 1, wherein

The method of claim 1, wherein, after the step of detecting that the duration of the button is a predetermined duration, the method further comprises:

5. The method of any of claims 1-4, the method further comprising:

The wireless local area network access device indicates the allowed registration status by a slow blinking state of the indicator light.

6. A device for configuring a wireless access control list, comprising:

The configuration module is configured to: enter a permission registration state after being triggered, and obtain the media access control (MAC) address of the wireless client if the association information of the wireless client is received in the permission registration state, The MAC address is inserted into the wireless access control list.

7. The apparatus of claim 6, the apparatus further comprising a timer module,

The configuration module is further configured to: after being triggered, issue an open timing message to the timer module; and exit the allowed registration state after receiving the timing end message sent by the timer module; The timer module is configured to: after receiving the opening timing message, perform timing according to a preset timing time, and send a timing end message to the configuration module after timing is completed.

8. The apparatus according to claim 7, wherein

The timer module is further configured to: receive a timing set by a user.

9. The device of claim 7 or 8, the device further comprising a wireless status indicator module, the configuration module further configured to: after being triggered, further to issue a first control to the wireless status indicator module Receiving a second control message to the wireless status indicator module after receiving the timing end message sent by the timer module;

10. The apparatus according to claim 6, wherein