WO2016180223A1

WO2016180223A1 - Wireless communication device management method and wireless communication device

Info

Publication number: WO2016180223A1
Application number: PCT/CN2016/080165
Authority: WO
Inventors: 陈春雷
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-08-31
Filing date: 2016-04-25
Publication date: 2016-11-17
Also published as: CN106488449A

Abstract

A wireless communication device management method and wireless communication device. The method comprises: determining that a user accesses a wireless communication device management interface, and acquiring user access information; and if determining, according to the user access information, that the user does not have a permission to manage the wireless communication device, transmitting a request message to determine whether to allow the user to access the wireless communication device management interface. An embodiment of the present invention manages a permission according to user information, and improves a security of use of a wireless communication device.

Description

Management method of wireless communication device and wireless communication device

Technical field

This document relates to, but is not limited to, communication device management technology, and in particular, to a wireless communication device management method and a wireless communication device.

Background technique

In the process of using the Customer Premises Equipment (CPE) or the Mobile Hotspot Device (UFI) to access the Internet, the user's equipment (CPE or UFI) is likely to be “smashed”; as more and more The widespread use of Wireless Fidelity (WiFi) access software has become more common for users' devices. The direct consequence of the user's device "being hacked" is that the personal network speed is degraded. The more serious consequence is that the "蹭网" person accesses the Web User Interface (Web UI) through the gateway address to obtain the login password of the router. Then enter the configuration page of the router, configure the parameters of the router, tamper with the passwords and gateways configured by the original router users, and thus other users cannot access the Internet; and, because this parameter configuration operation is completely unknown to other users of the router In the case of the situation; therefore, the configured parameters are unknown to other users. When other users want to access the router again, they must ask the parameter modifier or restore the factory settings, reconnect according to the router product manual, and then For routers to configure parameters according to their own usage habits, for non-professionals, not only is the operation complicated and difficult, but also brings economic losses.

In the current technology, in order to prevent the network users from entering the router management page and tampering with the parameter configuration of the router, the commonly used method is to improve the network product server (webserver) prevention function, such as: increase cross-site request forgery (Cross-site request forgery, CSRF) Cascading Style Sheet (CSS) attack prevention, increase the complexity of login passwords, etc. On the one hand, since CPE and UFI are small systems, the above-mentioned webserver prevention functions are based on rules and security. On the other hand, for the current CPE, UFI and other devices, if another user logs in to the device management page, the previous user will be notified that the previous user has access to the router management page only when other users are managing the page operation; The network administrator can easily obtain the configuration information of the device, including passwords and traffic information, without the knowledge of the device administrator, which reduces the security of the device.

Therefore, how to avoid the network user entering the wireless communication device management page tampering with the parameter configuration of the wireless communication device, and effectively improving the security of the wireless communication device is an urgent problem to be solved.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

Embodiments of the present invention provide a method for managing a wireless communication device and a wireless communication device, which can improve the security of the wireless communication device.

An embodiment of the present invention provides a method for managing a wireless communication device, including: determining that a user accesses a wireless communication device management interface, acquiring access information of the user; and determining, according to the obtained access information of the user, that the user does not have the When the wireless communication device manages the authority, a request message is sent to request whether the user is allowed to access the wireless communication device management interface.

Optionally, in the foregoing solution, the method further includes: receiving a response message of the request message, and managing the wireless communication device according to the response message.

Optionally, in the above solution, the managing, by the response message, the wireless communication device includes:

When the response message is to allow the user to access the wireless communication device management interface, the current page of the wireless communication device jumps to the wireless communication device management interface;

When the response message is that the user is not allowed to access the wireless communication device management interface, the user is denied access to the wireless communication device management interface.

Optionally, in the foregoing solution, the determining that the user accesses the wireless communication device management interface includes: detecting that the web server has received the user accessing the wireless communication device management interface, and determining that the user accesses the wireless communication device Management interface.

Optionally, in the foregoing solution, the determining, according to the access information of the user, that the user does not have the management right of the wireless communication device, includes: the access information of the user does not exist in the pre-stored wireless communication device management white At the time of the list, it is determined that the user does not have the management authority of the wireless communication device.

Optionally, in the above solution, the method further includes: in the response message, allowing the use When the user accesses the wireless communication device management interface, the configuration information of the wireless communication device is broadcasted.

The embodiment of the invention further discloses a wireless communication device, comprising: an obtaining module, a determining module and a sending module; wherein

The acquiring module is configured to acquire access information of the user after a user accesses the management interface of the wireless communication device;

The determining module is configured to determine, according to the obtained access information of the user, whether the user has the management right of the wireless communication device;

The sending module is configured to: when the determining module determines, according to the access information of the user, that the user does not have the management right of the wireless communication device, send a request message to request whether to allow the user to access the wireless communication Device management interface.

Optionally, in the foregoing solution, the wireless communications device further includes: a management module, configured to receive a response message of the request message, and manage the device according to the response message.

Optionally, in the above solution, the management module is configured to: when the response message is to allow the user to access the wireless communication device management interface, the current interface of the wireless communication device jumps to the Wireless communication device management interface;

Optionally, in the above solution, the wireless communication device further includes: a monitoring module, configured to: when the web server Web Server has received a message that the user accesses the management interface of the wireless communication device, determine that the user accesses the wireless communication Device management interface.

Optionally, in the above solution, the determining module is configured to: when the access information of the user does not exist in the pre-stored whitelist of the device, determine that the user does not have the management right of the wireless communication device. .

Optionally, in the foregoing solution, the wireless communications device further includes: a broadcast module, configured to broadcast the configuration information of the self.

Compared with the related art, the method for managing a wireless communication device and the wireless communication device provided by the embodiments of the present invention determine that a user accesses a wireless communication device management interface, and obtains access information of the user; and determines that the user does not have the user according to the access information of the user. Send when the communication authority of the wireless communication device is Requesting a message to request whether the user is allowed to access the wireless communication device management interface; optionally, determining whether to allow the user to access the wireless communication device management interface according to the response message of the received request message. In this way, by verifying whether the user has the management authority to determine whether the user can access the wireless communication device management interface, modify the configuration parameters of the wireless communication device and the like; realize the management of the router, and effectively improve the security of the wireless communication device.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

1 is a schematic flowchart of a method for managing a wireless communication device according to an embodiment of the present invention;

2 is a schematic flowchart of a method for managing a wireless communication device according to Embodiment 2 of the present invention;

3 is a schematic structural diagram of a wireless communication device according to an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a structure of a wireless communication device according to Embodiment 2 of the present invention.

Embodiments of the invention

Embodiments of the present application will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

In the embodiment of the present invention, after determining that the user accesses the wireless communication device management interface, the user obtains the access information of the user; and when determining that the user does not have the wireless communication device management authority according to the access information of the user, sending a request message to request whether to allow the user to access the wireless device. Communication device management interface.

In various embodiments of the present invention, the wireless communication device management white list needs to be stored in the wireless communication device in advance, and the user in the white list has the right to access the wireless communication device management interface and modify the configuration information of the wireless communication device.

The processing flow of the management method of the wireless communication device provided by the embodiment of the present invention, as shown in FIG. 1 , includes:

Step 101: After obtaining a user accessing the wireless communication device management interface, obtaining access information of the user;

Optionally, determining that the user accesses the wireless communication device management interface includes: after detecting that the Web server has received the user accessing the router management interface, determining that the user accesses the router management interface; here, the router may perform monitoring; Acquisition module in the management device of the router Obtain the user's access information;

It should be noted that the wireless communication device in the embodiment of the present invention includes a router;

In the embodiment of the present invention, the access information of the user may include one or more pieces of information such as a user's access time, an access mode, a user's phone number, and a media access control (MAC) address;

Here, how to obtain the access information of the user accessing the management interface of the wireless communication device belongs to the prior art, and details are not described herein.

Step 102: Determine, according to the access information of the user, that the user does not have the management right of the wireless communication device, and send a request message;

Optionally, when the access information of the user's telephone number, MAC address, and the like does not exist in the pre-stored router management white list, the wireless communication device (eg, the router) determines that the user does not have the router management authority; at this time, the router sends the request message. The request message may be a short message, a voice message, or an email to request whether the user is allowed to access the wireless communication device management interface; for example, the content of the message may be “XXX access wireless communication device management interface, please authorize”;

Here, it is necessary to pre-add a wireless communication device management whitelist information interface in a wireless communication device (eg, a router), the interface can provide a database (DBI) for storing wireless communication device management whitelist information; wireless communication device management The whitelist information includes the user's phone number, email address, MAC address, and the like;

Optionally, the user in the wireless communication device management whitelist has the right to manage the wireless communication device, and the user in the wireless communication device management whitelist may include the administrator of the wireless communication device, and may be flexibly changed according to actual conditions, and the wireless communication device may The device used by the administrator of the wireless communication device transmits a request message.

Optionally, the method of the embodiment of the present invention further includes: receiving a response message of the request message, and managing the wireless communication device according to the response message.

Optionally, the wireless communication device is managed according to the response message, including:

Deny user access when the response message does not allow the user to access the wireless communication device management interface The wireless communication device management interface.

Optionally, the method of the embodiment of the present invention further includes: when the response message is to allow the user to access the wireless communication device management interface,

Broadcasting configuration information of the wireless communication device.

In the following, the wireless communication device is used as a router. Another processing flow of the wireless communication device management method provided by the embodiment of the present invention, as shown in FIG. 2, includes the following steps:

Step 201: After determining that a user accesses the router management interface, obtain the access information of the user.

Optionally, the first determining module in the router detects that the web server has received the user accessing the router management interface, and determines that the user accesses the router management interface; at this time, the acquiring module in the router acquires the access information of the user;

Optionally, the access information of the user includes: information about the access time, the access mode, the user's phone number, and the MAC address of the user;

Here, how to obtain the access information of the user accessing the router management interface belongs to the prior art and will not be described again.

Step 202: When it is determined that the user does not have the router management authority according to the access information of the user, send a request message;

Optionally, the determining module in the router determines that the user does not have the router management authority when the access information of the user's phone number, MAC address, or the like does not exist in the pre-stored router management whitelist; at this time, the sending module in the router sends the request. The message may be a short message, a voice message, or an email to request whether the user is allowed to access the router management interface; the content of the message may be “XXX access router management interface, please authorize”;

Here, the router management whitelist information interface is pre-added in the router, and the interface can provide a database DBI for storing router management whitelist information; the router management whitelist information includes the user's mobile phone number, mailbox, MAC address, and the like. ;

The user in the whitelist of the router management has the authority to manage the router, and the user in the whitelist of the router management is the administrator of the router, and can be flexibly changed according to the actual situation, and the router sends a request message to the device used by the administrator of the router.

Step 203: Receive a response message of the request message, and determine whether the response message allows the user to access the message. The router management interface performs step 204 when the response message is to allow the user to access the router management interface, and performs step 205 when the response message is that the user is not allowed to access the router management interface.

Step 204: The router jumps from the current interface to the router management interface, and modifies, stores, and broadcasts the configuration information of the router.

Optionally, the modifying module in the router modifies the configuration information of the router, the storage module in the router stores the configuration information of the modified router, and the sending module in the router sends the modified router configuration information to the router management white list. user;

The configuration information of the router includes: Service Set Identifier (SID), password, and gateway address.

In step 205, the user is denied access to the router management interface.

The embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the management method of the wireless communication device.

Device embodiment 1

In order to implement the foregoing method for managing a wireless communication device, an embodiment of the present invention provides a wireless communication device, which is composed of an acquisition module 11, a determination module 12, and a transmission module 13;

The obtaining module 11 is configured to acquire the access information of the user after the user accesses the management interface of the wireless communication device;

The determining module 12 is configured to determine, according to the obtained access information of the user, whether the user has the management right of the device;

The sending module 13 is configured to, when the determining module determines that the user does not have the device management authority according to the access information of the user, send a request message to request whether the user is allowed to access the device management interface.

In the embodiment of the present invention, the determining module 12 is configured to determine that the user does not have the management right of the wireless communication device when the user's access information does not exist in the pre-stored device white list.

In the embodiment of the present invention, the access information of the user includes: information about the access time of the user, the access mode, the phone number of the user, and the MAC address.

In the embodiment of the present invention, the sending module 13 is configured to send a short message, a voice message, or an electric a request message of the sub-mail to request whether the user is allowed to access the wireless communication device management interface; the content of the request message may be “XXX access wireless communication device management interface, please authorize”;

In the embodiment of the present invention, an information interface for managing a whitelist of a wireless communication device is added in advance in the wireless communication device, and the interface can provide a database DBI for storing wireless communication device management whitelist information; the wireless communication device manages whitelist information. Including the user's phone number, email address, MAC address and other information;

The wireless communication device manages the user in the whitelist to have the authority to manage the device, and the wireless communication device manages the user in the whitelist as the administrator of the wireless communication device, and can flexibly change according to the actual situation, and the wireless communication device sends the wireless communication device to the wireless communication device. The device used by the administrator sends a request message.

Device embodiment 2

The embodiment of the present invention provides a wireless communication device. The composition of the wireless communication device is as shown in FIG. 4, and includes: an obtaining module 11, a determining module 12, a sending module 13, and a management module 14. And a broadcast module 15; wherein

The obtaining module 11 is configured to acquire access information of the user after a user accesses the wireless communication device management interface;

The sending module 13 is configured to: when the determining module determines, according to the access information of the user, that the user does not have the wireless communication device management right, send a request message to request whether the user is allowed to access the wireless communication device management interface;

The management module 14 is configured to receive a response message of the request message, and manage the device according to the response message;

The broadcast module 15 is configured to broadcast configuration information of the wireless communication device itself;

Optionally, the broadcast module 15 modifies and stores the configuration information of the wireless communication device, and broadcasts the configuration information of the modified wireless communication device to the user in the device management white list;

The configuration information of the wireless communication device includes: a security identifier (SID), a password, and a gateway. Address and other information.

In the embodiment of the present invention, the management module 14 is configured to: when the response message is to allow the user to access the wireless communication device management interface, the current page of the wireless communication device jumps to the wireless communication device management interface; the response message is not allowed to the user. When accessing the wireless communication device management interface, the user is denied access to the wireless communication device management interface.

In the embodiment of the present invention, the determining module 12 is configured to determine that the user does not have the management right of the wireless communication device when the access information of the user does not exist in the pre-stored wireless communication device management white list.

In the embodiment of the present invention, the sending module 13 sends a request message such as a short message, a voice message, or an email to request whether the user is allowed to access the wireless communication device management interface; the content of the request message may be “XXX access router management interface, please authorize ";

The wireless communication device manages the user in the whitelist to have the management authority of the wireless communication device, and the administrator of the wireless communication device manages the user in the whitelist for the wireless communication device, and can be flexibly changed according to actual conditions.

In the foregoing embodiment of the present invention, the wireless communication device of the foregoing embodiment of the present invention may be a router, or may be another terminal device or a hotspot device.

It should be noted that the management module 14 and the broadcast module 15 are optional modules. It can be combined according to the actual situation.

It should be noted that, in practical applications, the functions of the obtaining module 11, the determining module 12, the sending module 13, the management module 14, and the broadcasting module 15 may be implemented by a central processing unit (CPU) or a microprocessor located on the wireless communication device ( MPU), or digital signal processor (DSP), or programmable gate array (FPGA) implementation.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be performed by a program to instruct related hardware, such as a processor, which may be stored in a computer readable storage medium, such as a read only memory, disk or optical disk. Wait. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the foregoing embodiment may be implemented in the form of hardware, for example, by implementing an integrated circuit to implement its corresponding function, or may be implemented in the form of a software function module, for example, being executed by a processor and stored in a memory. Programs/instructions to implement their respective functions. The invention is not limited to any specific form of combination of hardware and software. ”

The embodiments disclosed in the present application are as described above, but the descriptions are only for the purpose of understanding the present application, and are not intended to limit the present application, such as the specific implementation method in the embodiments of the present invention. Any modifications and changes in the form and details of the embodiments may be made by those skilled in the art without departing from the spirit and scope of the disclosure. The scope defined by the appended claims shall prevail.

Industrial applicability

The above technical solution improves the security of the wireless communication device.

Claims

A method for managing a wireless communication device, the method comprising:

After obtaining the user accessing the wireless communication device management interface, obtaining the access information of the user;

And determining, when the user does not have the management right of the wireless communication device, according to the obtained access information of the user, sending a request message to request whether the user is allowed to access the wireless communication device management interface.
The method of claim 1, further comprising receiving a response message of the request message, and managing the wireless communication device in accordance with the response message.
The method of claim 2, wherein the managing the wireless communication device according to the response message comprises:

When the response message is to allow the user to access the wireless communication device management interface, the current page of the wireless communication device jumps to the wireless communication device management interface;

When the response message is that the user is not allowed to access the wireless communication device management interface, the user is denied access to the wireless communication device management interface.
The method according to claim 1 or 2, wherein the determining that a user accesses the wireless communication device management interface comprises:

When it is detected that the web server Web Server has received the message that the user accesses the wireless communication device management interface, it is determined that the user accesses the wireless communication device management interface.
The method according to claim 1 or 2, wherein the determining, according to the access information of the user, that the user does not have the management right of the wireless communication device comprises:

When the access information of the user does not exist in the pre-stored wireless communication device management white list, it is determined that the user does not have the management authority of the wireless communication device.
The method of claim 3, further comprising: when the response message is to allow the user to access a wireless communication device management interface,

Broadcasting configuration information of the wireless communication device.
A wireless communication device, the wireless communication device includes: an acquisition module, a determination module, and a transmission module;

The acquiring module is configured to acquire access information of the user after a user accesses the management interface of the wireless communication device;

The determining module is configured to determine, according to the obtained access information of the user, whether the user has the management right of the wireless communication device;

The sending module is configured to: when the determining module determines, according to the access information of the user, that the user does not have the management right of the wireless communication device, send a request message to request whether to allow the user to access the wireless communication Device management interface.
The wireless communication device of claim 7, further comprising: a management module configured to receive a response message of the request message, and to manage the device according to the response message.
The wireless communication device of claim 8, wherein the management module is configured to be by a current interface of the wireless communication device when the response message is to allow the user to access the wireless communication device management interface Jumping to the wireless communication device management interface;

When the response message is that the user is not allowed to access the wireless communication device management interface, the user is denied access to the wireless communication device management interface.
The wireless communication device according to claim 7 or 8, wherein the wireless communication device further comprises: a monitoring module configured to: when the web server Web Server has received a message that the user accesses the wireless communication device management interface, determine that the user is Accessing the wireless communication device management interface.
The wireless communication device according to claim 7 or 8, wherein the determining module is configured to determine that the user does not have the access information when the access information of the user does not exist in the pre-stored device whitelist The management authority of the wireless communication device.
The wireless communication device of claim 9, the wireless communication device further comprising: a broadcast module configured to broadcast the configuration information of the self.