WO2013167020A2

WO2013167020A2 - Wireless network access security verification method, system and terminal

Info

Publication number: WO2013167020A2
Application number: PCT/CN2013/078846
Authority: WO
Inventors: 蒋敏; 潘磊; 向锋
Original assignee: 中兴通讯股份有限公司
Priority date: 2012-12-26
Filing date: 2013-07-04
Publication date: 2013-11-14
Also published as: CN103052065B; WO2013167020A3; CN103052065A

Abstract

Disclosed is a wireless network access security verification method. The method comprises: when connecting to a wireless access point device, a terminal downloading a digital certificate and verifying whether the digital certificate is complete and valid, and if the verification result is that it is complete and valid, the terminal displaying the contents of the digital certificate and information that the verification is passed; otherwise the terminal displaying the information that the verification has failed. Also disclosed are a wireless network access security verification system and terminal. The technical solution of the embodiments of the present invention can be applied to ensure that a user uses a secure and reliable common wireless network, to avoid the loss of the private information about and the property of the user, and to improve the user experience.

Description

Security verification method, system and terminal for wireless network access

The present invention relates to a wireless network technology, and in particular, to a security verification method, system, and terminal for wireless network access. Background technique

In July 2004, Philadelphia, the United States, first proposed the construction of a wireless mesh (Mesh) network based on Wireless Fidelity (Wi-Fi) technology, also known as the "Wireless Philadelphia Plan," and this wave of wireless city construction began to sweep the world. As of December 2006, more than 400 cities have started or plan to build wireless broadband metropolitan area networks to meet the needs of public access, public safety and public services, and now this number has reached 600. Today, this wave has already reached mainland China, and similar projects are being built in cities such as Beijing, Tianjin, Shanghai and Guangzhou.

In the area covered by the wireless network, people can access the Internet through the wireless network access points around them through mobile phones, netbooks, etc., to achieve Internet, shopping, watching TV, news and other activities. However, when people search for available wireless network access points, they only know the name of the access point and whether they need access to the password. The user cannot determine whether the wireless network is secure or not. At present, in Shanghai, Guangzhou and other cities in China, criminals have been found to set up wireless network access points in public places, provide free wireless Internet access services, use network monitoring software in the background, analyze users' bank accounts, passwords, game accounts, passwords, etc. , engaging in criminal acts. At present, the security verification scheme for wireless networks has not been implemented. It can be seen that it is necessary to provide a security verification scheme for wireless networks. Summary of the invention

In view of this, the main purpose of the embodiments of the present invention is to provide an antenna for wireless network access. Fully validated methods, systems and terminals ensure that users can use a secure and reliable public wireless network to enhance the user experience.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

The embodiment of the invention provides a security verification method for wireless network access, the method includes: when the terminal connects to the wireless access point device, downloading the digital certificate, and verifying whether the digital certificate is complete and valid, if the verification result is complete and valid , the terminal displays the digital certificate content and the verification pass information; otherwise, the terminal displays the verification failure message.

In the above solution, the verification digital certificate is complete and valid. If the verification result is complete and valid, the method further includes:

The location of the terminal itself and the location of the device deployed in the digital certificate for deploying the wireless access point device are searched through the Global Positioning System (GPS) function supported by the terminal;

Calculating the distance between the location of the terminal itself and the location where the wireless access point device is deployed, and determining whether the distance is less than a maximum threshold. If the result of the determination is yes, the terminal displays the digital certificate content and the verification pass information; otherwise, the terminal displays the verification. Pass the information.

In the foregoing solution, the verifying whether the digital certificate is complete and valid comprises: determining whether the digital certificate includes a name of the wireless access point device, whether the purpose of providing the wireless access point device, and whether the wireless access point device is deployed position.

In the foregoing solution, before the terminal is connected to the wireless access point device, the method further includes: importing the digital certificate into the wireless access point device, and the digital certificate is included in the wireless signal sent by the wireless access point device.

The embodiment of the present invention further provides a security verification system for wireless network access, where the system includes: a terminal and a wireless access point device;

The terminal is configured to download a digital certificate when the wireless access point device is connected, verify whether the digital certificate is complete and valid, and display the digital certificate content when the verification result is complete and valid. And verifying the passing information; displaying the verification failing information in the result of the verification being incomplete; the wireless access point device configured to send the wireless signal including the digital certificate to the terminal. In the above solution, the terminal is further configured to: after verifying that the digital certificate is complete and valid, search for the location of the terminal itself and the location of the device for deploying the wireless access point recorded in the digital certificate by using the GPS function supported by the terminal; The distance between the location and the location where the wireless access point device is deployed is determined to determine whether the distance is less than a maximum threshold. When the determination result is yes, the digital certificate content and the verification pass information are displayed; otherwise, the verification fails the information.

In the above solution, the terminal includes: a connection verification module and a display module; wherein the connection verification module is configured to download a digital certificate when the wireless access point device is connected, and verify whether the digital certificate is complete and valid, and the verification result is Send to the display module;

The display module is configured to display digital certificate content and risk certificate passing information when the verification result is complete and valid; configured to display a risk certificate failing to pass the letter in the above solution when the risk certificate result is incomplete and valid, The method further includes: a search module and a calculation comparison module; wherein, the search module is configured to support the digital certificate after being validated by itself

The GPS function searches its location and the location of the wireless access point device recorded in the digital certificate;

The calculating and comparing module is configured to calculate a distance between the location of the wireless access point device and the location of the wireless access point device, and determine whether the distance is less than a maximum threshold, and send the determination result to the display module;

Correspondingly, the display module is further configured to: when the determination result is yes, display the digital certificate content and the verification pass information; when the determination result is no, the verification failure message is displayed.

The embodiment of the present invention further provides a terminal, where the terminal includes: a connection verification module and a display module;

The connection verification module is configured to download a digital certificate when connecting to the wireless access point device, And verifying whether the digital certificate is complete and valid, and sending the verification result to the display module; the display module is configured to display the digital certificate content and the risk certificate passing information when the verification result is complete and valid; configured to be incomplete in the risk certificate result When the validity of the certificate is not passed, the terminal further includes: a search module and a calculation comparison module; wherein the search module is configured to support the digital certificate after being validated by itself

The method, system and terminal for verifying the security of the wireless network access provided by the embodiment of the present invention verify whether the digital certificate provided by the wireless access point device provider is complete and valid, and after the digital certificate to be verified is complete and valid, the wireless access point is described. The device is safe and reliable. Further, the GPS function supported by the terminal searches for the location of the terminal itself and the location of the device that deploys the wireless access point recorded in the digital certificate, and calculates the location of the terminal itself and the location where the wireless access point device is deployed. If the distance is greater than the maximum threshold, if the result of the determination is yes, indicating that the location of the device for deploying the wireless access point recorded in the digital certificate is real information, the current wireless access point device is safe and reliable; otherwise, The location of the wireless access point device recorded in the digital certificate is false information, and the current wireless access point device is not secure. The technical solution provided by the embodiment of the invention can ensure that the user uses a safe and reliable public wireless network, avoids loss of the user's private information and property, and improves the user experience. DRAWINGS

1 is a schematic flowchart of a security verification method for wireless network access according to a first embodiment of the present invention; FIG. 2 is a schematic structural diagram of a security verification system for wireless network access according to a first embodiment of the present invention;

FIG. 3 is a schematic flowchart of a method for security verification of wireless network access according to a second embodiment of the present invention. detailed description

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. FIG. 1 is a schematic flowchart of a method for security verification of wireless network access according to a first embodiment of the present invention. As shown in FIG. 1, the method includes the following steps:

Step 101: The terminal connects to the wireless access point device, and downloads the digital certificate;

Here, the digital certificate is applied by the unit or individual providing the wireless access point device to the digital certificate issuing unit, and provides the information required for applying for the digital certificate, and the digital certificate issuing unit verifies that the provided information is correct. , produced and awarded for the unit or individual;

The information required for the application for the digital certificate specifically includes: a name of the application unit or individual, a name of the wireless access point device, a purpose of providing the wireless access point device, a location where the wireless access point device is deployed, and the like;

Here, the digital certificate is imported into the wireless access point device by the administrator of the wireless access point device, and is included in the wireless signal transmitted by the wireless access point device.

Step 102: Determine whether the digital certificate is complete and valid, if the result of the determination is yes, go to step 103; otherwise, go to step 106;

Here, the digital certificate may be determined to be complete and valid according to the content of the digital certificate, specifically: determining whether the digital certificate includes the name of the wireless access point device, whether the purpose of providing the wireless access point device, and whether the wireless device is deployed The location of the access point device, etc., if it contains such information, it is complete and valid; The content of the digital certificate includes: a name of the wireless access point device, a purpose of providing the wireless access point device, and a location where the wireless access point device is deployed.

Steps 103 to 104: searching for the location of the terminal itself and the location of the device for deploying the wireless access point recorded in the digital certificate by using the GPS function supported by the terminal; and determining the location between the location of the wireless access point device and the location of the terminal itself. Whether the distance is less than the maximum threshold, if the result of the determination is yes, go to step 105; otherwise, go to step 106;

Here, determining whether the distance between the location of the wireless access point device and the location of the terminal is less than a maximum threshold specifically includes:

If the terminal supports the GPS function, the terminal searches for the specific location where it is located through the GPS function; the terminal determines the location of the device that deploys the wireless access point recorded in the digital certificate through the GPS function; calculates the specific location where the user is located and deploys the wireless access Determining the distance of the location of the device and determining whether the distance is less than the maximum threshold. If the result of the determination is yes, the location information of the device for deploying the wireless access point recorded in the digital certificate is true information, and the security verification is performed; otherwise, The location information of the device that is deployed in the digital certificate and deployed to the wireless access point device is false information, and the security verification is not passed.

Step 105: The terminal displays the content of the digital certificate, and the verification is passed;

Step 106: The terminal displays that the insurance certificate has not passed.

2 is a schematic structural diagram of a security verification system for a wireless network access according to a first embodiment of the present invention. As shown in FIG. 2, the system includes: a terminal 21 and a wireless access point device 22; wherein, the terminal 21, When the wireless access point device 22 is connected, the digital certificate is downloaded, the digital certificate is verified to be complete and valid, and when the verification result is complete and valid, the digital certificate content and the verification pass information are displayed; the verification result is incomplete and valid. The wireless access point device 22 is configured to send the wireless signal including the digital certificate to the terminal 21, and the terminal 21 is further configured to verify that the digital certificate is fully valid, and Under the premise that the terminal 21 supports the GPS function, the GPS function is used to search for the location of the wireless access point device recorded in the location and the digital certificate; and calculate the distance between the location of the terminal and the location where the wireless access point device is deployed. And determining whether the distance is less than the maximum threshold, and when the judgment result is yes, displaying the digital certificate content and the verification passing information; otherwise, displaying the verification failure information.

Further, the terminal 21 includes: a connection verification module 211 and a display module 212;

The connection verification module 211 is configured to download a digital certificate when the wireless access point device is connected, and verify whether the digital certificate is complete and valid, and send the verification result to the display module 212. The display module 212 is configured to verify the result. When it is complete and valid, the digital certificate content and the risk certificate passing information are displayed; configured to display the risk certificate failing information when the risk certificate result is incomplete and valid.

Further, the terminal 21 further includes: a search module 213 and a calculation comparison module 214;

The search module 213 is configured to search for a location of the wireless access point device and a location of the wireless access point device recorded in the digital certificate by using the GPS function;

The calculation comparison module 214 is configured to calculate the distance between the location of the wireless access point device and the location of the wireless access point device, and determine whether the distance is less than the maximum threshold, and send the determination result to the display module 212;

Correspondingly, the display module 212 is further configured to display the digital certificate content and the verification pass information when the determination result is yes; when the determination result is no, the verification failure message is displayed.

FIG. 3 is a schematic flowchart of a method for security verification of wireless network access according to a second embodiment of the present invention. The wireless access network is a Wi-Fi network, and the terminal supports the GPS function as an example, and further the second embodiment of the present invention is further provided. Detailed explanation. As shown in Figure 3, the following steps are included:

Steps 301 to 302: Search for a list of available Wi-Fi access point names, and select one of them. The Wi-Fi access point device is connected, and determines whether the Wi-Fi access point device supports digital certificate verification. If the result of the determination is yes, go to step 303, otherwise, go to step 308;

Here, the Wi-Fi access point name list may include a Wi-Fi access point device name, whether a password is required for connection, and whether digital certificate verification is supported, etc.; specifically, for Wi-Fi connection supporting digital certificate verification The entry device name can be prioritized and displayed with a highlighted icon;

Here, when selecting one of the Wi-Fi access point devices to connect, if the Wi-Fi access point device requires a password for verification, the corresponding password is input to complete the verification; otherwise, the process directly proceeds to the next process. .

Step 303: Determine whether the digital certificate is complete and valid. If the result of the determination is yes, go to step 304; otherwise, go to step 308;

Here, the determining whether the digital certificate is completely valid specifically includes: determining whether the digital certificate includes a Wi-Fi access point device name, whether the purpose of providing the Wi-Fi access point device is included, and whether the Wi-Fi connection is deployed The location of the entry device, etc.

The digital certificate content includes: a Wi-Fi access point device name, a purpose of providing the Wi-Fi access point device, and a location of the Wi-Fi access point device.

Steps 304 to 305: Search for the location of the terminal and the location of the Wi-Fi access point device recorded in the digital certificate by using the GPS function, and determine the location between the location of the Wi-Fi access point device and the location of the terminal. Whether the distance is less than the maximum threshold, if the result of the determination is yes, go to step 306; otherwise, go to step 308;

Here, the determining whether the distance between the location of the Wi-Fi access point device and the location of the terminal is less than a maximum threshold, and if the result of the determination is yes, indicating that the Wi-Fi access point device is recorded in the digital certificate The location information is the real information, and the security verification is performed; otherwise, the location information of the device for deploying the Wi-Fi access point recorded in the digital certificate is false information, and the security verification is not passed;

For example, a typical Wi-Fi signal has a receiving radius of about 95 meters, and in general, more than 95 meters. The terminal will not be able to receive the wireless signal from the Wi-Fi access point Wi-Fi; considering the location of the terminal itself and the location of the Wi-Fi access point device recorded in the digital certificate by the GPS function The distance deviation is set to a maximum threshold of 200 meters. If the distance between the location of the Wi-Fi access point device and the location of the terminal is less than 200 meters, the location of the Wi-Fi access point device recorded in the digital certificate is recorded. The information is the real information, and the security verification is performed; otherwise, the location information of the device deployed in the digital certificate and deployed by the Wi-Fi access point device is false information, and the security verification is not passed.

Step 306~ Step 307: The terminal displays the content of the digital certificate. After the verification is passed, the terminal can access the Wi-Fi network to perform the Internet access service.

Step 308: Determine whether to continue to connect to the Wi-Fi network, if the result of the determination is yes, go to step 306: Otherwise, go to step 309;

Here, the user can select whether to continue to connect to the Wi-Fi network. If the user chooses to connect to the Wi-Fi network, the step 307 is performed: the terminal can access the Wi-Fi network to perform the Internet access service; otherwise, step 309 is performed: End the current Wi-Fi network connection.

The above is only a preferred embodiment of the embodiments of the present invention, and is not intended to limit the scope of protection of the embodiments of the present invention. All the modifications, equivalent substitutions and improvements made within the spirit and scope of the embodiments of the present invention are included in the scope of the present invention. Industrial applicability

The embodiment of the invention verifies whether the digital certificate of the wireless access point device is complete and valid, and further determines whether the wireless access point device is safe and reliable, and ensures that the user uses a safe and reliable public wireless network to avoid loss of the user's private information and property. , enhance the user experience.

Claims

claims

1. A security verification method for wireless network access. The method includes:

When the terminal connects to the wireless access point device, it downloads the digital certificate and verifies whether the digital certificate is complete and valid. If the verification result is complete and valid, the terminal displays the content of the digital certificate and the verification passing information; otherwise, the terminal displays the verification failure information.

2. The method according to claim 1, wherein the verification of whether the digital certificate is complete and valid, and if the verification result is complete and valid, the method further includes:

Search the location of the terminal itself and the location of the wireless access point device recorded in the digital certificate through the global positioning system GPS function supported by the terminal;

Calculate the distance between the terminal's own location and the location where the wireless access point device is deployed and determine whether the distance is less than the maximum threshold. If the result of the determination is yes, the terminal displays the digital certificate content and verification pass information; otherwise, the terminal displays verification failed. through information.

3. The method according to claim 1, wherein the verifying whether the digital certificate is complete and valid includes: determining whether the digital certificate includes the name of the wireless access point device, whether it includes the purpose of providing the wireless access point device, and whether Includes the location where the wireless access point device is deployed.

4. The method according to claim 1, wherein before the terminal connects to the wireless access point device, the method further includes: importing a digital certificate into the wireless access point device, and the digital certificate is included in the wireless access point device. in the wireless signal being sent.

5. A security certificate system for wireless network access. The system includes: a terminal and a wireless access point device; among which,

The terminal is configured to download the digital certificate when connecting to the wireless access point device, verify whether the digital certificate is complete and valid, and when the verification result is complete and valid, display the digital certificate content and verification pass information; when the verification result is Incomplete and valid, verification failure information is displayed; the wireless access point device is configured to send a wireless signal containing a digital certificate to the terminal.

6. The system according to claim 5, wherein the terminal is further configured to verify the data After the digital certificate is complete and valid, use the GPS function supported by the terminal to search for its own location and the location where the wireless access point device is deployed recorded in the digital certificate; calculate the distance between its own location and the location where the wireless access point device is deployed. And judge whether the distance is less than the maximum threshold. When the judgment result is yes, display the digital certificate content and verification passing information; otherwise, display the verification failing information.

7. The system according to claim 5 or 6, wherein the terminal includes: a connection verification module and a display module;

The connection verification module is configured to download the digital certificate when connecting to the wireless access point device, verify whether the digital certificate is complete and valid, and send the verification result to the display module;

The display module is configured to display the digital certificate content and insurance certificate passing information when the verification result is complete and valid; configured to display the insurance certificate failure information when the insurance certificate result is incomplete and valid.

8. The system according to claim 7, wherein the terminal further includes: a search module and a calculation comparison module;

The search module is configured to, after verifying that the digital certificate is complete and valid, search for its own location and the location where the wireless access point device is deployed recorded in the digital certificate through the GPS function it supports;

The calculation and comparison module is configured to calculate the distance between its own location and the location where the wireless access point device is deployed, determine whether the distance is less than the maximum threshold, and send the determination result to the display module;

Correspondingly, the display module is also configured to display the content of the digital certificate and the verification passing information when the judgment result is yes; and to display the verification failure information when the judgment result is no.

9. A terminal, the terminal includes: a connection verification module and a display module; wherein the connection verification module is configured to download a digital certificate when connecting to a wireless access point device, and verify whether the digital certificate is complete and valid, and will verify The results are sent to the display module; The display module is configured to display the content of the digital certificate and the insurance certificate passing information when the verification result is complete and valid; and is configured to display the insurance certificate failure information when the insurance certificate result is incomplete and valid.

10. The terminal according to claim 9, wherein the terminal further includes: a search module and a calculation and comparison module; wherein,