WO2016026429A1

WO2016026429A1 - Method, device, and equipment for wireless network configuration, access, and visit

Info

Publication number: WO2016026429A1
Application number: PCT/CN2015/087363
Authority: WO
Inventors: 聂华闻
Original assignee: 北京贝虎机器人技术有限公司
Priority date: 2014-08-18
Filing date: 2015-08-18
Publication date: 2016-02-25
Also published as: CN106537962B; CN106537962A

Abstract

Provided in embodiments of the present invention are a method, a device, and equipment for wireless network configuration, connection, and access. The method for wireless network configuration comprises: generating a network security key for a wireless network; generating a wireless network name on the basis of the network security key, where the wireless network name comprises at least a network security key portion expressing the network security key; and, configuring the wireless network on the basis of the network security key and of the wireless network name. By such means, solved is the problem found in the prior art that a network security key needs to be entered manually, thus reducing the operational complexity for a terminal device to connect to a wireless network.

Description

Wireless network configuration, access and access method, device and device

The present application claims priority to Chinese Patent Application No. 201410404086.4, entitled "SSID Generation, Intelligent Device Access Method and Apparatus, Internet of Things System", filed on August 18, 2014, the entire contents of In this application.

Technical field

The present invention relates to the field of wireless network authentication technologies, and in particular, to a wireless network configuration, access and access method, device and device.

Background technique

With the widespread use of smart devices, wireless networks are becoming more and more inseparable from people's lives. For example, mobile phones, tablets, smart home devices, etc., more and more things in life need to rely on wireless networks to fully realize their value.

Currently, when a smart device needs to join a wireless network, the user is required to manually input the password corresponding to the wireless network, and then the smart device can be added to the wireless network that is desired to join. This is mainly due to the security of the network and information, so even the home wireless network will generally set a password.

This inevitably leads to the problem that when there are many devices that need to join the wireless network, the user needs to input the password one by one, which wastes a lot of time and effort.

Under the premise of ensuring the security of the network and data, the device can automatically access the wireless network, and no effective solution has been proposed yet.

Summary of the invention

In order to solve the above problem, the embodiment of the present invention provides a wireless network configuration, access and access method, device and device, so that the device can automatically access the wireless network under the premise of ensuring network and data security.

A first aspect of the embodiments of the present invention provides a wireless network configuration method, which may include: generating a network security key of a wireless network; generating a wireless network name based on the network security key, where the wireless network name is Include at least a network security key portion representing the network security key; and configuring the wireless network based on the network security key and the wireless network name.

For example, generating the wireless network name based on the network security key may include: encrypting the network security key to obtain a predetermined length of the encrypted network security key; and adding the encrypted network security key to the wireless network name The network security key portion obtains a wireless network name including at least the network security key portion.

For example, generating the wireless network name based on the network security key may further include at least one or any combination of: generating an information portion indicating that the wireless network name includes a network security key; generating for verifying the network security secret a verification information portion of the key; generating a type information portion representing the security type; and generating an encrypted information portion indicating an encryption rule for encrypting the network security key.

For example, configuring the wireless network based on the network security key and the wireless network name may include configuring the wireless network name as a primary wireless network of a wireless access device and a wireless network of a secondary wireless network. a name; configuring the network security key as a network security key of the one wireless network.

A second aspect of the embodiments of the present invention provides a wireless network access method, which may include: acquiring a wireless network name, where the wireless network name includes at least a network security key portion indicating a network security key; The network security key portion extracts a network security key corresponding to the wireless network name; and automatically connects to the wireless network corresponding to the wireless network name based on the wireless network name and the network security key.

For example, the method may further include: determining, based on the information portion of the wireless network name that the wireless network name includes a network security key, whether the wireless network name includes a network security key; from the network security key And partially extracting the network security key corresponding to the wireless network name, including: when the information part indicates that the wireless network name includes a network security key, extracting a network security key from the wireless network name.

A third aspect of the embodiments of the present invention provides a wireless network access method, which may include: receiving a data packet sent by a terminal device that performs wireless communication by using a wireless access device, where the wireless access device is configured with at least one a wireless network; determining whether the data packet is from a terminal device that performs wireless communication through a preset wireless network in the at least one wireless network; when the data packet is from a terminal device that performs wireless communication through the preset wireless network And forwarding the data packet to a network server associated with the terminal device.

For example, the predetermined wireless network is a wireless network dedicated to one or more of the terminal devices for wireless communication.

A fourth aspect of the embodiments of the present invention provides a wireless network configuration apparatus, which may include: a network security key generation unit configured to generate a network security key for a wireless network; a wireless network name generation unit configured Generating a wireless network name based on the network security key, wherein the wireless network name includes at least a network security key portion representing the network security key; and a configuration unit configured to base the network security key And configuring the wireless access device with the wireless network name.

For example, the wireless network configuration apparatus may further include: an encryption unit configured to perform encryption processing on the network security key to obtain an encrypted network security key; and wherein the wireless network name generation unit is further configured Generating a wireless network name based on the encrypted network security key, wherein the network security key is represented by the encrypted network security key.

For example, the configuration unit may include: a determining module configured to configure the wireless network name as a name of one of a primary wireless network and a secondary wireless network of the wireless access device; a configuration module configured to: The network security key is configured as a network security key for the one wireless network.

A fifth aspect of the embodiments of the present invention provides a wireless access device, which may include: a configuration port configured to configure a wireless network based on wireless network configuration information, where the wireless network configuration information includes a first wireless network name And a first network security key, wherein the first wireless network name includes at least a wireless network security key portion representing the first network security key; and/or the wireless network configuration information includes a second wireless a network name, wherein the second wireless network name includes at least an information portion indicating that the wireless network does not require a network security key; and an input port configured to receive one or more terminal devices for wireless communication over the wireless network A transmitted data packet; an output port configured to forward the data packet to a network server associated with the one or more terminal devices.

For example, the wireless access device may further include: a memory configured to store a device identification list of the terminal device that needs to forward the data packet to the network server; and a processor configured to determine whether the terminal device from which the received data packet is derived In the device identification list, if the determination is yes, the received data packet is forwarded to the network server through the output interface.

A sixth aspect of the embodiments of the present invention provides a terminal device, which may include: a wireless network search unit configured to acquire a wireless network name, and determine whether the wireless network name includes network security indicating a network security key. a key portion; the network security key extracting unit configured to extract network security corresponding to the wireless network name from the network security key portion in a case where the network security key portion is included in the determined wireless network name a key; the wireless network connection unit configured to automatically connect to the wireless network corresponding to the wireless network name based on the wireless network name and the extracted network security key.

For example, the terminal device may further include: a network security key determining unit configured to determine whether the wireless network name includes network security based on an information portion of the wireless network name indicating that the wireless network name includes a network security key And the network security key extraction unit is specifically configured to extract the network security key from the wireless network name when it is determined that the information portion indicates that the wireless network name includes a network security key.

According to the wireless network configuration, access and access method, device and device provided by the above application, the network security key of the wireless network is added to the wireless network name, so that the terminal device to be accessed that meets the requirements can be directly from the wireless The network security key is parsed in the network name, thereby realizing automatic access of the wireless network, solving the problem of requiring human input of the network security key in the prior art, and reducing the operation complexity of the terminal device accessing the wireless network.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention. Other drawings may also be obtained from those of ordinary skill in the art in light of the inventive work. In the drawing:

1 is a schematic diagram of a system architecture in accordance with an embodiment of the present invention;

2 is a schematic block diagram of a system architecture in accordance with one embodiment of the present invention;

3 is a schematic block diagram of a system architecture in accordance with another embodiment of the present invention;

4 is a schematic diagram of a home wireless network system in accordance with one embodiment of the present invention;

Figure 5 is a schematic block diagram of a system architecture in accordance with yet another embodiment of the present invention;

6 is a schematic flow chart of a method for configuring a wireless network name according to an embodiment of the present invention;

FIG. 7 is a schematic flowchart of a method for automatically accessing a terminal device according to an embodiment of the present invention; FIG.

8 is a flow chart of a method for configuring, accessing, and accessing a wireless network according to an embodiment of the present invention;

9 is a flow chart of a wireless network configuration, access, and access method in accordance with another embodiment of the present invention.

detailed description

In order to make the objects, technical solutions and advantages of the present invention more comprehensible, the present invention will be further described in detail with reference to the embodiments and drawings. The illustrative embodiments of the present invention and the description thereof are intended to explain the present invention, but are not intended to limit the invention.

Features described and/or exemplified for one embodiment may be used in the same manner or in a similar manner in one or more other embodiments, and/or in combination with or in place of features of other embodiments.

It should be emphasized that the term "comprising", when used in the specification, is used to refer to the <RTI ID=0.0> </ RTI> </ RTI> </ RTI> <RTIgt; The existence or increase of their combination.

FIG. 1 is a schematic diagram of a system architecture 100 in accordance with an embodiment of the present invention. As shown in FIG. 1, the system architecture 100 can include one or more wireless access devices 101, one or more terminal devices 102, and a wireless network configuration device 103. Optionally, the system architecture 100 may further include: a server 104.

The wireless access device 101 may be a device capable of providing a wireless network, such as a router, a wireless portable WIFI, a wireless network card, a Bluetooth device, and the like.

The terminal device 102 may be a device having wireless access capability to access the wireless network provided by the wireless access device 101, such as a mobile phone, a computer, a tablet computer, or the like, or a smart home device, such as a television, an air conditioner, a sweeping robot, Refrigerator, etc.

The wireless network configuration device 103 can be configured to configure the wireless access device 101 based on a prescribed authentication policy such that the terminal device 102 having the automatic authentication mechanism corresponding to the authentication policy can automatically access the wireless access device 101. In the wireless network. The authentication policy can include but is not limited to the following three types:

(1) The wireless network of the wireless access device 101 is configured to be carried in the wireless network name, so that the terminal device 102 can automatically access the wireless access device 101 by using the network security key carried in the wireless network name. Wireless network;

(2) Configuring the wireless network of the wireless access device 101 to be in a no-password mode, so that the terminal device 102 can directly access the wireless network of the wireless access device 101 without a password, but access the terminal device 102 of the wireless network. All packets sent will be forwarded to the server 104 for security detection and forwarding;

(3) Configuring the wireless network of the wireless access device 101 as the network security key is carried in the wireless network name, so that the terminal device 102 can automatically access the wireless access device by using the network security key carried in the wireless network name. The wireless network of 101, but all packets sent by the terminal device 102 accessing the wireless network are forwarded to the server 104 for security detection and forwarding.

The following three types of authentication strategies are described in terms of system architecture and specific working modes, respectively, in combination with specific embodiments. However, it is to be understood that the specific embodiments are merely illustrative of the invention and are not intended to limit the invention.

2 is a schematic block diagram of an example system architecture implementing an authentication policy (1).

As shown, the system architecture includes a wireless access device 101, one or more terminal devices 102, and a wireless network configuration device 103.

The wireless network configuration device 103 may include a network security key generation unit 1031, a wireless network name generation unit 1032, and a configuration unit 1033.

The network security key generation unit 1031 may be configured to generate a network security key KEY for the wireless network. The wireless network name generation unit 1032 may be configured to generate a wireless network name WIRELESS_NAME based on the network security key KEY, wherein the wireless network name WIRELESS_NAME includes a network security key portion KEY_PORTION indicating a network security key KEY. The configuration unit 1033 may be configured to transmit the wireless network configuration information carrying the network security key KEY and the wireless network name WIRELESS_NAME to the wireless access device 101 to perform wireless network configuration on the wireless access device 101.

The wireless access device 101 can include a configuration port 1011 and an input port 1012. The configuration port 1011 can be configured to configure the wireless network WIRELESS based on the wireless network configuration information. The input port 1012 can be configured to receive data packets transmitted by one or more terminal devices 102 that are in wireless communication over the wireless network WIRELESS.

The terminal device 102 may include a wireless network search unit 1021, a network security key extraction unit 1022, and a wireless network connection unit 1023. The wireless network search unit 1021 may be configured to acquire the wireless network name WIRELESS_NAME. The network security key extracting unit 1022 may be configured to extract the network security key KEY corresponding to the wireless network name WIRELESS_NAME from the network security key portion KEY_PORTION of the acquired wireless network name WIRELESS_NAME. The wireless network connection unit 1023 may be configured to automatically connect to the wireless network WIRELESS corresponding to the wireless network name WIRELESS_NAME based on the wireless network name WIRELESS_NAME and the network security key KEY.

Thus, for example, the wireless access device 101 (eg, router A) may be configured by the wireless network configuration device 103 in accordance with the above authentication policy (1) at the time of shipment or during use. The terminal device 102 (for example, a smart sweeping robot) having an automatic authentication mechanism corresponding to the authentication policy (1) can automatically connect to the wireless network after searching for the wireless network generated by the wireless access device 101 without artificially Enter the wireless network password information.

3 is a schematic diagram of an example system architecture implementing an authentication policy (2).

As shown, the system architecture includes a wireless access device 101, one or more terminal devices 102, a wireless network configuration device 103, and a server 104.

The wireless network configuration device 103 may include a wireless network name generation unit 1032 and a configuration unit 1033. The wireless network name generation unit 1032 can be configured to generate a wireless network name WIRELESS_NAME. Preferably, the wireless network name WIRELESS_NAME may include an indication that the wireless network is in a no-password mode information. The configuration unit 1033 may be configured to send the wireless network configuration information carrying the wireless network name WIRELESS_NAME and the corresponding forwarding address information to the wireless access device 101 to perform wireless network configuration on the wireless access device 101 (wireless network name WIRELESS_NAME; none The cryptographic mode), and the wireless access device 101 is configured such that packets sent to the wireless access device 101 over the wireless network WIRELESS_NAME need to be forwarded to the server 104.

The wireless access device 101 can include a configuration port 1011, an input port 1012, and a forwarding port 1013. The configuration port 1011 can be configured to configure the wireless network WIRELESS_NAME and the forwarding address (server 104) based on the wireless network configuration information. The input port 1012 can be configured to receive data packets transmitted by one or more terminal devices 102 that are in wireless communication over the wireless network WIRELESS_NAME. The forwarding port 1013 can be configured to forward the data packets received over the wireless network WIRELESS_NAME to the server 104.

The terminal device 102 may include a wireless network search unit 1021 and a wireless network connection unit 1023. The wireless network search unit 1021 can be configured to search for a wireless network WIRELESS_NAME without a password. The wireless network connection unit 1023 can be configured to directly connect to the passwordless wireless network WIRELESS_NAME.

The server 104 performs security detection on the data packet forwarded by the wireless access device 101, and determines whether the device that sends the data packet is a designated security device. If the security check is passed (ie, the determination result is “Yes”), The packet is forwarded to the corresponding destination device.

The server 104 may be, for example, a cloud server located on the Internet, or may be a dedicated server dedicated to the smart home device in the home.

For example, FIG. 4 is a schematic diagram of a home wireless network system based on the above embodiment (authentication policy (2)).

In the home wireless network system, the router 401 can be configured by the wireless network configuration device 103 at the time of shipment or during use. In this way, the smart home device in the home (for example, the washing machine 406 located on the ground floor, the first floor TV 402, the refrigerator 403, the second floor mobile phone 404, the computer 405) can be provided by the router 401 in a passwordless manner. Wireless network. After receiving the data packet from the smart home device, the router 401 uniformly forwards the data packet to the server 407, and the server 407 performs security detection on the data packet to determine whether the device that sends the data packet is the set security device. If the security check is passed (ie, the judgment result is "Yes"), the data packet is forwarded to the corresponding destination device.

Figure 5 is a schematic block diagram of an example system architecture implementing an authentication policy (3).

As shown, the example system architecture includes a wireless access device 101, one or more terminal devices 102, a wireless network configuration device 103, and a server 104.

The wireless network configuration device 103 may include a network security key generation unit 1031, a wireless network name generation unit 1032, and a configuration unit 1033. The network security key generation unit 1031 may be configured to generate a network security key KEY for the wireless network. The wireless network name generation unit 1032 may be configured to generate a wireless network name WIRELESS_NAME based on the network security key KEY, wherein the wireless network name WIRELESS_NAME includes a network security key portion KEY_PORTION indicating a network security key KEY. The configuration unit 1033 may be configured to send the wireless network configuration information carrying the network security key KEY and the wireless network name WIRELESS_NAME and the corresponding forwarding address information to the wireless access device 101 to perform wireless network configuration on the wireless access device 101 ( The wireless network name WIRELESS_NAME, network key KEY), and the wireless access device 101 is configured such that data packets sent to the wireless access device 101 over the wireless network WIRELESS_NAME are forwarded to the server 104.

The wireless access device 101 can include a configuration port 1011, an input port 1012, and a forwarding port 1013. The configuration port 1011 can be configured to configure the wireless network and forwarding address (server 104) based on the wireless network configuration information. The input port 1012 can be configured to receive data packets transmitted by one or more terminal devices 102 that are in wireless communication over the wireless network WIRELESS_NAME. The forwarding port 1013 can be configured to forward the data packets received over the wireless network WIRELESS_NAME to the server 104.

The terminal device 102 may include a wireless network search unit 1021, a network security key extraction unit 1022, and a wireless network connection unit 1023. The wireless network search unit 1021 may be configured to acquire the wireless network name WIRELESS_NAME. The network security key extracting unit 1022 may be configured to extract the network security key KEY corresponding to the wireless network name WIRELESS_NAME from the network security key portion KEY_PORTION in the wireless network name WIRELESS_NAME. The wireless network connection unit 1023 may be configured to automatically connect to the wireless network corresponding to the wireless network name WIRELESS_NAME based on the wireless network name WIRELESS_NAME and the network security key KEY.

Compared with the embodiment shown in FIG. 2, the embodiment shown in FIG. 5 increases the security detection of the data packets from the terminal device 102, thereby further improving the terminal device 102 automatically accessing the wireless network. safety.

The wireless network configuration device 103 shown in FIGS. 1 to 3 and FIG. 5 is merely an exemplary description, and does not specifically define the manner in which the wireless network configuration device 103 exists. For example, the wireless network configuration device 103 can be a separate server or processor, or can be built into the wireless access device, or can be an application in a user terminal device (such as a mobile phone, a tablet, a notebook, etc.). The specific form of existence is diverse as long as the configuration of the wireless access device can be implemented.

For example, the wireless access device 101 can be configured by connecting or communicating with the wireless network configuration device 103 at the time of shipment or during use.

The above is a description of the system architecture and composition of different authentication strategies.

The implementation of each authentication policy will be described below in conjunction with specific embodiments.

The process of generating the wireless network name WIRELESS_NAME based on the wireless network password (Network Security Key KEY) (authentication policy (1)) is mainly implemented in the above-described wireless network configuration device 103. Considering the security of the network security key KEY (for example, a wireless network password), the wireless network configuration device 103 can encrypt the network security key KEY to obtain a predetermined length of the encrypted network security key, and then encrypt the network security key. Add to the network security key part KEY_PORTION of the wireless network name WIRELESS_NAME, thereby obtaining the wireless network name including at least the network security key part.

For example, the wireless network name of the router, that is, the SSID (Service Set Identifier) is taken as an example. SSID technology can divide a wireless LAN into several sub-networks that require different authentication. Each sub-network needs independent authentication. Only authenticated users can enter the corresponding sub-network, thus preventing unauthorized access. The user enters the network. Generally, the SSID consists of case-insensitive characters of up to 32 characters. In order to minimize the changes to the original system and device, the SSID can still be used according to the above-mentioned original characters and characters. Name it. For example, the entire SSID can consist of the following four string regions:

[prefix][base64(authentication password)][check value]

Wherein, the prefix area may be composed of a specific string, such as bp_;

Authentication password area: that is, the above network security key part, the area can be set to store the encrypted network security key (in this example, the wireless network password of the wireless network provided by the router), the network security key can be It is a base64 encoded string formed by public key encryption and then compression-encoded. For example, the LZ77 compression algorithm may be used for compression coding, and other compression algorithms may be used. This example is only a schematic description and does not constitute a specific limitation;

Check value area: used for data verification, which can be only one character. For example, it can be 26 letters (case sensitive) and one of 0-9 Arabic numerals. This value can be the router's MAC (Media Access Control). , wireless access control) address modulo 62 value, the reason for modulo 62 is to consider 26 uppercase letters, 26 lowercase letters and 0 to 9 of these 10 numbers, add up to a total of 62 characters.

The prefix area and the check value area may be configured to identify that the wireless network name includes a network security key, so that the terminal device to be accessed can quickly determine the wireless network after searching for the wireless network name of the wireless network. Whether to support automatic access of the device.

Based on the composition of the wireless network name described above, the generation process may be as shown in FIG. 6, and includes the following steps:

S61: generating a random password;

S62: Invoking a corresponding public key according to its own MAC address for encryption;

S63: compress the encrypted result;

S64: Recoding the compression result using base64;

S65: Check whether the number of characters after re-encoding exceeds a predetermined number of characters (for example, 28 characters);

S66: If it is exceeded, it is regenerated;

S67: If it is not exceeded, it is used as a component of the network name, and the wireless network name is synthesized according to a predetermined synthesis rule.

After the wireless network name is generated, in order to enable the device to search for the wireless network, the network name of the wireless network may be broadcast, or may not be broadcasted, but the terminal device itself may calculate the network name of the estimated wireless network.

If the terminal device 102 (for example, a smart home device or the like) wants to access the wireless network in this way, a corresponding automatic authentication mechanism needs to be built in. The mechanism may exist in the form of a piece of code or may be a hardware component ( For example, the encryption chip), the specific implementation manner can be selected as needed, and the application is not limited.

Taking the encryption chip as an example, a decryption private key set may be built in, so that the private key can be used to decrypt the wireless network name, thereby obtaining the network security key therein, and ensuring that the decrypted private keys are not randomly copied.

As shown in FIG. 7, a flowchart for automatically accessing the terminal device 102 includes:

S71: The terminal device 102 scans the surrounding wireless network;

S72: Determine, from the scanned wireless network, a wireless network that can automatically authenticate the access;

S73: Read a character string of the password area from the wireless network name of the wireless network;

S74: Decompress the string;

S75: Matching the corresponding decryption private key according to the MAC modulo;

S76: decrypt the password of the wireless network;

S77: Automatic authentication connection.

Based on the passwordless wireless network access method (authentication policy (2)), the wireless network configuration device 103 is also required to perform configuration. That is, the wireless network configuration device 103 generates a wireless network password without password protection. The difference from the existing wireless network connection method is that the data packets transmitted by the terminal device 102 connected to the wireless network are forwarded to a specific server 104, thereby ensuring the security of wireless network data transmission.

For example, the router's wireless network name, SSID, is used as an example. Generally, the SSID consists of case-insensitive characters of up to 32 characters. In order to minimize the changes to the original system and device, when generating the SSID, Still follow the original naming rules. For example, the entire SSID can consist of the following four string regions:

[prefix][mac address][check value]

Wherein, the prefix area may be composed of a specific string, such as bp_;

Mac address area: This area can be the MAC address of the wireless access device but it is lost: the combination of numbers and letters;

Check value area: used for data verification, which can be only one character. For example, it can be one of 26 letters (case sensitive) and 0-9 Arabic numerals. The value can be the MAC address of the router. After the value;

The foregoing prefix, mac address area, and check value area may be configured to identify that the wireless network is passwordless, so that the terminal device 102 to be accessed may directly access the wireless network name after searching for the wireless network. In a wireless network.

Based on the foregoing identification rules of the wireless network name, the overall execution process may be as shown in FIG. 8, including:

S81: Read a MAC address of the wireless access device;

S82: Generate a wireless network name that can identify passwordless access;

S83: Receive a data packet sent by the terminal device connected to the wireless network;

S84: Forward the received data packet to a specific server.

Optionally, the authentication policy (2) can be considered as a special way of the authentication policy (1), that is, equivalent to setting the network security key of the wireless network to none. Therefore, the authentication policy (2) can also be implemented by means of the authentication policy 1, that is, the wireless network name is also set by using [prefix] [base64 (authentication password)] [check value].

Optionally, the wireless access device 101 can match with a constraint device, where the IP address of all the terminal devices connected to the wireless network provided by the wireless access device is recorded, and after receiving the data packet, The binding device can determine whether the source IP address of the data packet is in the recorded IP address set, and if so, directly forward the data packet to a preset specific server, thereby further ensuring security.

Assuming that the wireless access device is a router, the wireless network name is the SSID of the router. Because the router has a primary SSID and a secondary SSID, one SSID corresponds to one wireless network. Therefore, optionally, the secondary SSID may be set according to one of the foregoing authentication policies, and the primary SSID is set according to the existing normal wireless network mode; the primary SSID may also be set according to one of the foregoing authentication policies, and the secondary SSID is Some of the normal wireless network mode settings; of course, the primary SSID and the secondary SSID can be set according to one of the above-mentioned authentication policies. The specific settings and selection methods can be selected according to actual needs, which is not limited in this application.

FIG. 9 is a flowchart of a method for configuring, accessing, and accessing a wireless network according to an embodiment of the present invention. Description will be made below with reference to FIG.

Step 901: The wireless network configuration device (the wireless network configuration device 103 shown in FIG. 1) generates a network security key of the wireless network.

Step 902: Generate a wireless network name based on the network security key, where the wireless network name includes at least a network security key portion indicating a network security key.

Optionally, the network security key may be encrypted to obtain a predetermined length of the encrypted network security key, and then the encrypted network security key is added to the network security key part of the wireless network name to obtain at least the network security key part. The name of the wireless network. In actual implementation, optionally, the wireless network name also includes one or more of the following components:

1) indicating that the wireless network name contains the information part of the network security key;

2) a verification information portion for verifying the network security key;

3) indicating the type information part of the security type;

4) An encrypted information portion of an encryption rule indicating encryption of the network security key.

Step 903: The wireless network configuration device configures the wireless network of the wireless access device based on the network security key and the wireless network name.

Step 904: The terminal device (ie, the terminal device 102 in FIG. 1) acquires a wireless network name.

Step 905: The terminal device extracts a network security key corresponding to the wireless network name from the network security key portion.

Step 906: The terminal device automatically connects to the wireless network corresponding to the wireless network name based on the wireless network name and the network security key.

Step 907: The wireless access device receives the data packet sent by the terminal device, where the wireless access device is configured with at least one wireless network.

Step 908: Determine whether the data packet is from a terminal device that performs wireless communication through a preset wireless network in the at least one wireless network.

For example, taking a router as an example, two wireless networks can be provided at the same time, that is, a wireless network corresponding to the primary SSID and a wireless network corresponding to the secondary SSID. The wireless network corresponding to the secondary SSID may be set as a preset wireless network, and then the terminal device accessing the wireless network considers that the data packet needs to be forwarded to the network server associated with the terminal devices. For example, when these terminal devices are devices of a smart home device, the network server may be a server dedicated to a smart home device, and may be a cloud server.

Step 909: When the data packet is from a terminal device that performs wireless communication through the preset wireless network, forward the data packet to a network server associated with the terminal device.

It should be noted that although the operational steps of the method of the present invention are described in a particular order in the drawings, this is not required or implied that such operations must be performed in that particular order, or that all illustrated operations must be performed to achieve the desired. result. Additionally or alternatively, certain steps may be omitted, multiple steps being combined into one step, and/or one step being broken down into multiple steps.

For example, steps 907 through 909 are merely optional steps of the wireless network configuration, access, and access methods provided by the present application, and lack of implementations in which some or all of them do not affect the basic purpose of the application.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory include instructions. An article of manufacture of a device that implements the functions specified in a block or blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

Obviously, those skilled in the art should understand that the above modules or steps of the embodiments of the present invention can be implemented by a general computing device, which can be concentrated on a single computing device or distributed in multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from The steps shown or described are performed sequentially, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated into a single integrated circuit module. Thus, embodiments of the invention are not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various changes and modifications may be made to the embodiments of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

A wireless network configuration method includes:

Generating a network security key for the wireless network;

Generating a wireless network name based on the network security key, wherein the wireless network name includes at least a network security key portion representing the network security key;

The wireless network is configured based on the network security key and the wireless network name.
The method of claim 1 wherein generating a wireless network name based on the network security key comprises:

Encrypting the network security key to obtain a predetermined length of an encrypted network security key;

Adding the encrypted network security key to the network security key portion of the wireless network name results in a wireless network name including at least the network security key portion.
The method of claim 2, wherein generating the wireless network name based on the network security key further comprises at least one or any combination of the following:

Generating an information portion indicating that the wireless network name includes a network security key;

Generating a verification information portion for verifying the network security key;

Generating a type information portion indicating a security type;

An encrypted information portion representing an encryption rule that encrypts the network security key is generated.
The method of any one of claims 1 to 3, wherein configuring the wireless network based on the network security key and the wireless network name comprises:

Configuring the wireless network name as a name of a wireless network in a primary wireless network and a secondary wireless network of the wireless access device;

The network security key is configured as a network security key of the one wireless network.
A wireless network access method includes:

Obtaining a wireless network name, wherein the wireless network name includes at least a network security key portion indicating a network security key;

Extracting, from the network security key portion, a network security key corresponding to the wireless network name;

Automatically connecting to the wireless network corresponding to the wireless network name based on the wireless network name and the network security key.
The method of claim 5 further comprising:

Determining, according to the information part of the wireless network name that the wireless network name includes a network security key, whether the wireless network name includes a network security key;

And wherein the extracting the network security key corresponding to the wireless network name from the network security key portion comprises: when the information portion indicates that the wireless network name includes a network security key, from the wireless network name Extract the network security key.
A wireless network access method includes:

Receiving a data packet sent by a terminal device that performs wireless communication by using a wireless access device, where the wireless access device is configured with at least one wireless network;

Determining whether the data packet is from a terminal device that performs wireless communication through a preset wireless network in the at least one wireless network;

When the data packet is from a terminal device that performs wireless communication through the preset wireless network, the data packet is forwarded to a network server associated with the terminal device.
The method of claim 7, wherein the predetermined wireless network is a wireless network dedicated to one or more of the terminal devices for wireless communication.
A wireless network configuration device includes:

a network security key generation unit configured to generate a network security key for the wireless network;

a wireless network name generating unit configured to generate a wireless network name based on the network security key, wherein the wireless network name includes at least a network security key portion representing the network security key;

And a configuration unit configured to configure the wireless access device based on the network security key and the wireless network name.
The wireless network configuration device of claim 9, further comprising:

An encryption unit configured to perform encryption processing on the network security key to obtain an encrypted network security key;

And wherein the wireless network name generating unit is further configured to generate a wireless network name based on the encrypted network security key, wherein the network security key is represented by the encrypted network security key.
The wireless network configuration device according to claim 9 or 10, wherein the configuration unit comprises:

a determining module configured to configure the wireless network name as a name of a wireless network in a primary wireless network and a secondary wireless network of the wireless access device;

And a configuration module configured to configure the network security key as a network security key of the one wireless network.
A wireless access device comprising:

a configuration port configured to configure the wireless network based on the wireless network configuration information, wherein the wireless network configuration information includes a first wireless network name and a first network security key, wherein the first wireless network name includes at least a representation Determining a wireless network security key portion of the first network security key; and/or, the wireless network configuration information includes a second wireless network name, wherein the second wireless network name includes at least indicating that the wireless network does not require a network The information part of the security key;

An input port configured to receive a data packet transmitted by one or more terminal devices that perform wireless communication over the wireless network;

An output port configured to forward the data packet to a network server associated with the one or more terminal devices.
The wireless access device of claim 12, further comprising:

a memory configured to store a device identification list of a terminal device that needs to forward the data packet to the network server;

The processor is configured to determine whether the terminal device from which the received data packet is from is in the device identification list, and if the determination is yes, forward the received data packet to the network server through the output interface.
A terminal device comprising:

a wireless network search unit configured to acquire a wireless network name, and determine whether the network security key portion indicating the network security key is included in the wireless network name;

a network security key extraction unit configured to extract a network security key corresponding to the wireless network name from the network security key portion if the network security key portion is included in the wireless network name;

The wireless network connection unit is configured to automatically connect to the wireless network corresponding to the wireless network name based on the wireless network name and the extracted network security key.
The terminal device according to claim 14, further comprising:

The network security key determining unit is configured to determine, according to the information part of the wireless network name that the wireless network name includes a network security key, whether the wireless network name includes a network security key;

And wherein the network security key extraction unit is further configured to extract a network security key from the wireless network name when it is determined that the information portion indicates that the wireless network name includes a network security key.