WO2018058976A1

WO2018058976A1 - Authorization management method and system of wireless router

Info

Publication number: WO2018058976A1
Application number: PCT/CN2017/085100
Authority: WO
Inventors: 何山
Original assignee: 上海斐讯数据通信技术有限公司
Priority date: 2016-09-30
Filing date: 2017-05-19
Publication date: 2018-04-05
Also published as: CN106412896A

Abstract

The present invention belongs to the field of router user control technologies and relates to an authorization management method and system of a wireless router. The authorization management method of the present invention comprises: a plurality of terminal devices and one management terminal are accessed on a router, the management terminal being self-set as a manager by means of the router, and a router system recording a media access control (MAC) address of the management terminal; each change configuration operation on the router is provided with a permission management, different change configuration operations corresponding to different permissions, and the permissions being named P1, P2, ..., PN; the manager summarizes all terminal devices accessing a routing network by means of the router and sets permissions of each terminal device on a manager tool; a user requests to execute a router configuration change operation; the router receives the operation request of the user and finds a permission-related allocation in a manager account according to the MAC address; and whether the terminal devices have corresponding permissions is determined. The technical solution of the authorization management of the wireless router provided by the present invention has the advantage of a flexible authorization management mode.

Description

Method and system for authorizing authorization of wireless router

Technical field

The invention belongs to the technical field of router user control, and in particular relates to a method and system for authorizing management of a wireless router.

Background technique

With the continuous development of informatization, the sharing of network resources is more and more extensive, and the sharing of network resources necessarily requires the protection and authorized access of resources. For example, the Chinese invention patent with application number 201210015256.0 involves a method of resource access authorization. The specific steps of the method are as follows: the user accesses or uses the specific application as follows: the user accesses the Widget application or other application in the terminal; the application obtains the user authentication “user authentication token” from the application container, and then authenticates, The authorization and accounting server initiates a "resource access token" request; the authentication, authorization, and accounting server checks the user, the application, the application container, and the resource information to be accessed by the application, and confirms that the access can be made to generate the final "resource access token". The authentication, authorization, and accounting server issues the final "resource access token" to the application; the application initiates a resource access request to the resource server; the resource server checks the application's "resource access token"; after the check is passed, the application request is returned Resources; applications present resources to end users. The invention can authorize and manage resource access, but the steps are cumbersome, and the intermediate process is prone to errors leading to problems in authorization management.

With the development of wireless WIFI, more and more home devices are connected through WIFI. The smart home device transmits data through the wireless WIFI router for control and data acquisition. As the hub of smart home, wireless routers are becoming more and more important, and the management of wireless is becoming more and more important. In smart home applications, wireless routers are connected to a wide variety of terminal devices, and their network resources require user assignment. In the current router application, one router can access multiple mobile APPs, and the user can operate the wireless router by using the APP, but the router does not have the operation management authority for the access user, and the management of the router function is unreasonable. .

For example, in a large family wireless network environment, the network connection between the router and the fixed smart home appliance (referred to as network 1) must be uninterrupted, and no user can change the network connection; for example, open to The child's network connection (referred to as network 2), which needs to be assigned to the parental control management, specifically may include limiting the network speed and part of the IP, etc.; for example, the network opened by the merchant to the customer (temporarily referred to as network 3), It needs to manage the speed and access mode of the customer network.

The existing solution that can solve the different network management requirements of the above networks 1, 2, 3, etc. is to establish a control in the router. The authority information table, the router will set the different privilege levels of the routing users according to the privilege information table, and different users will operate the functions of the router according to the privilege. For example, the Chinese invention patent application with the application number 201310411926.5 discloses a 3G/WIFI wireless router. The user hierarchical control method has the following steps: 1) setting different network access rights in the 3G/WIFI router; 2) establishing a user information table in the 3G/WIFI router; 3) setting a super user in the 3G/WIFI router; Establish a control information table in the 3G/WIFI router; 5) configure firewall rules in the 3G/WIFI router to set the access rights to the network; 6) the user accesses the set router through the WIFI network as a restricted access state; 7) The router obtains the user right in the user information table according to the user information, binds according to the user's MAC address/IP address information and network authority, and writes the information into the control information table, and sets the firewall rule; 8) Obtained access to the network while the router also dynamically monitors the user status, setting a timer for supervision during the user's connection to the router, and then the user Re-authentication is required for secondary access, which has the characteristics of enhanced system security and ease of use. The allocation of permissions to users in this scheme is in the router, and the authorization method is rigid and inflexible.

Summary of the invention

In view of the above-mentioned deficiencies in the prior art, the present invention provides a method for authorizing and managing a wireless router. The assignment of user rights is directly assigned by the administrator account of the terminal, and the operation of the router is compared according to the setting of the administrator account. After the implementation, the authorization management method is more flexible and fast.

Another object of the present invention is to provide an authorization management system for a wireless router.

In order to achieve the above object, the present invention adopts the following technical solutions:

A method for authorizing and managing a wireless router includes the following steps:

S1, the router accesses multiple terminal devices and one management terminal, the management terminal sets itself as an administrator through a router, the router system records the MAC address of the management terminal, and the MAC address is an identifier of the router identification management terminal;

S2, each change configuration operation on the router sets a rights management, different change configuration operations correspond to different rights, and the rights are named P1, P2, ..., PN;

S3, the administrator summarizes all the terminal devices of the routing network through the router, and sets the permissions of each terminal device on the administrator tool;

S4, the user requests to perform an operation of changing the router configuration;

S5. The router receives the operation request of the user, and searches for an assignment of the authority in the administrator account according to the MAC address.

S6, determining whether the terminal device has the corresponding authority, if the authority allocation information of the administrator account includes the terminal setting With the corresponding authority, the router performs the operation requested by the terminal device; if there is no corresponding authority of the terminal device in the authority allocation information of the administrator account, the router rejects the operation request of the terminal device. The permission assignment is set on the management terminal. When the permission assignment is changed, the router itself is not changed, and the operation is more convenient.

Preferably, the configuration change operation of the router includes wireless channel change, network speed setting, flow control, and IP allocation, and the network configuration of each terminal device can be reasonably allocated.

Preferably, the terminal device allocates one or more rights, and can perform various configuration changes.

Preferably, the management terminal is a mobile phone or a computer, which makes the user's operation convenient and intuitive.

Preferably, the identifier of the router identification management terminal further includes a fingerprint, a username, and a password, and the security level of the management terminal is upgraded.

Preferably, the rights allocation is completed by the rights allocation interface, the rights allocation interface is provided by the management terminal, the rights allocation interface includes all the rights information, and one or more rights on the rights allocation interface are selected to give the terminal device corresponding rights. The choice of permissions is very convenient, which is beneficial for the terminal device to quickly change the permissions.

The invention also discloses another technical solution:

A wireless router authorization management system includes a wireless router, a plurality of terminal devices, and a management terminal. The wireless router is connected to a plurality of terminal devices and management terminals through a network signal, and the management terminal sets itself as an administrator through a wireless router, and manages An administrator account is provided on the terminal. The administrator account includes a permission module, a rights assignment module, and a permission judgment module. The permission module is used to store all the rights information, and the rights allocation module is used to allocate and store the rights information corresponding to each terminal device. The judging module is configured to determine whether the changed router configuration operation requested by the user has permission.

Preferably, the administrator account further includes a login verification module for verifying the login of the administrator account and improving the security level of the administrator account.

Preferably, the administrator account further includes a rights update module for reallocating the rights of the terminal device.

Preferably, the login verification module is provided with an input of a user name and a password, and is logged into the administrator account by using the username and password, which is safe and reliable.

Preferably, the terminal device comprises a plurality of kitchen and television, lighting control, security alarm, irrigation system, door and window control, indoor climate, and building intercom to realize smart home.

The authorization management method and system technical scheme of the wireless router of the present invention, the user authority assignment is directly allocated by the administrator account of the terminal, and the operation of the router is compared according to the setting of the administrator account, and the authorization management mode is more flexible. And fast.

DRAWINGS

1 is a flowchart of an authorization management method of a wireless router according to Embodiment 1 of the present invention.

2 is a structural diagram of an authorization management system of a wireless router according to Embodiment 1 of the present invention.

detailed description

The technical solutions of the present invention are further described below through specific embodiments.

Example 1

The authorization of the user in the prior art is in the router, and the authorization mode is inflexible. This embodiment provides a method for authorizing the management of the wireless router, including the following steps:

MAC address: All networked computers must be configured with a network card, and the network card we use has a serial address, which is the MAC address. The MAC address is located in the second layer of the data link layer in the OSI model and is used to define the location of the network device, so it is also called the hardware address. The MAC address uses a string of 48 bits of binary to identify each computer on the network. The MAC address is unique. It is fixed. That is, the MAC address of each network card is unchangeable. When the network card is produced, the manufacturer burns it into the ROM read-only memory. The user does not need to configure the MAC address. It is built into the physical device. Therefore, the MAC address of each terminal device of the present invention is different and unique.

S5. The router receives the operation request of the user, and searches for the assignment of the authority in the administrator account according to the MAC address.

S6: determining whether the terminal device has the corresponding authority. If the authority allocation information of the administrator account includes the corresponding authority of the terminal device, the router performs the operation requested by the terminal device; if the authority allocation information of the administrator account does not have the corresponding permission of the terminal device The router rejects the operation request of the terminal device.

In this embodiment, the authority allocation is set on the management terminal, and the router itself is not changed when the authority allocation is changed, and the operation is more Convenient.

Example 2

The embodiment provides a wireless router authorization management system, including a wireless router, a plurality of terminal devices, and a management terminal. The wireless router is connected to multiple terminal devices and management terminals through network signals, and the management terminal sets itself through the wireless router. As an administrator, an administrator account is provided on the management terminal. The administrator account includes a permission module, a rights assignment module, and a permission judgment module. The permission module is used to store all the rights information, and the rights allocation module is used to allocate and store each terminal device. The permission information module is used to determine whether the user-requested change router configuration operation has permission.

With the technical solution of the embodiment, the allocation of user rights is directly allocated by the administrator account of the smart phone, the allocation of rights is more flexible, and the allocation of rights can be adjusted according to needs.

Example 3:

As shown in FIG. 1, the authorization management method of the wireless router in this embodiment specifically includes the following steps:

S1, the wireless router accesses three terminal devices and one management terminal, the three terminal devices are security alarm devices, lighting control devices and televisions, and the management terminals are smart phones, smart phones, security alarm devices, lighting control devices and televisions. The machine is connected to the router network, the smart phone sets itself as an administrator through the router, and the administrator account APP is installed on the smart phone. The router system records the MAC address of the smart phone, and the MAC address is the identifier of the smart phone identified by the router;

S2, the wireless channel change on the router, the network speed setting, the flow control, and the IP allocation change configuration operation each set a rights management, different change configuration operations correspond to different rights, and the rights are named P1, P2, P3 and P4, that is, P1 corresponds to the authority of the wireless channel change, P2 corresponds to the authority of the network speed setting, P3 corresponds to the authority of the flow control, and P4 corresponds to the authority of the IP allocation;

S3, the administrator summarizes all the terminal devices of the routing network through the wireless router, and sets the permissions of each terminal device on the administrator tool, and each terminal device can assign one of the rights P1, P2, P3, and P4 or Multiple

S4, the user requests to perform the operation of changing the configuration of the router according to the requirement, and the change of the configuration of the router can control the operation of the terminal device, such as changing the permission P1 of the wireless channel;

S5, the router receives the operation request of the user, and searches for the allocation information about the authority in the administrator account APP in the smart phone according to the MAC address, and the security alarm device, the lighting control device, and the television are recorded in the authority allocation information. The corresponding permissions are as shown in the following table:

终端设备Terminal Equipment	安防报警设备Security alarm equipment	照明控制设备Lighting control equipment	电视机TV set
权限Permission	P1、P4P1, P4	P2、P3P2, P3	P1、P2、P3P1, P2, P3

S6: determining whether the terminal device has the corresponding authority. If the user requests to modify the wireless channel of the router through the security alarm device or the television, the security alarm device and the television have the permission to change the wireless channel in the authority allocation information of the administrator account APP. P1, the router performs an operation of changing the wireless channel request; if the user requests to modify the wireless channel of the router through the lighting control device, the lighting control device in the authority allocation information of the administrator account APP does not change the permission P1 of the wireless channel, and the router refuses to change the wireless channel request. Operation.

If the user requests the router to perform IP assignment through the security alarm device, the authority allocation information of the administrator account APP stores the security alarm device having the IP allocation authority P4, and the router performs the IP reallocation operation; if the user passes the lighting control device or the television The router is requested to perform IP allocation, and the lighting control device and the television in the authority allocation information of the administrator account APP have no authority P4 for IP allocation, and the router refuses to re-allocate the IP request.

If the user requests the router to change the network speed setting through the security alarm device, the security alarm device in the authority allocation information of the administrator account APP does not change the permission P2 of the network speed setting, and the router rejects the request for the network speed setting; if the user controls through the lighting The device or the television requests the router to change the network speed setting, and the authority allocation information of the administrator account APP stores the permission P2 of the lighting control device and the television having the network speed setting, and the router performs the network speed setting operation.

If the user requests the router to perform flow control through the security alarm device, the security alarm device in the authority allocation information of the administrator account does not have the permission P2 for flow control, and the router rejects the request for flow control; if the user requests the router through the lighting control device or the television For flow control, the authority allocation information of the administrator account APP stores the permission control P2 of the lighting control device and the television having the flow control, and the router performs the flow control operation.

The authorization management method of the wireless router in this embodiment sets the authority assignment on the management terminal, and does not change the router itself when changing the rights assignment, and the operation is convenient.

As shown in FIG. 2, this embodiment proposes a wireless router authorization management system based on a wireless router authorization management method, and the wireless router authorization management system includes a wireless router, a security alarm device, a lighting control device, a television, and a smart phone. The wireless router and the security alarm device, the lighting control device, the television, and the smart phone are all connected through the network provided by the wireless router, the smart phone sets itself as the administrator through the wireless router, and the administrator account APP is provided on the smart phone operation interface. The administrator account APP includes a permission module, a rights assignment module, and a permission judgment module. The permission module is used to store all rights information, including a wireless channel change permission P1, and a network speed setting. Permission P2, flow control authority P3 and IP assignment authority P4, the authority assignment module is used to allocate and store the authority information corresponding to each terminal device. As shown in the above table, the security alarm device is assigned with the wireless channel change permission P1 and the IP assignment authority P4. The lighting control device is assigned with a network speed setting authority P2 and a flow control authority P3, and the television is assigned with a wireless channel changing authority P1, a network speed setting authority P2, and a flow control authority P3.

The authority judging module is configured to determine whether the user-requested change router configuration operation has authority, that is, whether the security alarm device, the lighting control device, and the television have wireless channel change permission P1, network speed setting authority P2, flow control authority P3, and IP. Assigning the right P4, the wireless router decides to allow or deny the user request according to the judgment result.

The authorization management method and system of the wireless router in this embodiment adopts a management terminal authorization mode, and the allocation of user rights is directly allocated by the administrator account APP of the smart phone, and the change configuration operation of the router is compared according to the setting of the administrator account APP. After the execution, the authorization management mode is flexible and fast; the rights allocation is set on the smart phone, and changing the permission allocation does not affect the normal operation of the router.

Example 4:

The difference between the embodiment and the embodiment 3 is that the identifier of the router identification management terminal further includes a fingerprint, a user name and a password, and the security level of the management terminal is upgraded. With the continuous development of the network information, the information security cannot be ignored. The MAC address is based on the identification of the smart phone by the router, and the authentication of the fingerprint, the user name and the password is added, and the security of the wireless router authorization management is increased. Refer to Embodiment 5 for other methods and systems for authorization management.

Example 5:

The difference between this embodiment and the embodiment 5 is that the rights allocation is completed by the authority allocation interface of the smart phone, and the rights allocation interface can be opened by the administrator account APP, and the rights allocation interface includes all the rights information, and is arranged in a list. On the rights assignment interface, check the permissions on the rights assignment interface, and select one or more permissions to give the terminal devices the corresponding permissions. The permission selection is very convenient, which is beneficial to the terminal device to quickly change the permissions. Refer to Embodiment 3 for other methods and systems for authorization management.

Example 6

The difference between the embodiment and the embodiment 3 is that the administrator account further includes a login verification module, which is used for verifying the login of the administrator account, improving the security level of the administrator account, and the login verification module is provided with the input of the user name and password. Item, the user enters the correct username and password, and successfully logs in to the administrator account after verification, which is safe and reliable. For security of wireless router authorization management, refer to Embodiment 3 for other methods and systems for authorization management.

Example 7

The difference between the embodiment and the embodiment 3 is that the administrator account further includes a rights update module, which is used for reallocating the rights of the terminal device, and the user can update the rights of the terminal device according to the required change, so that the terminal device can be used at different times. Have different permissions and adaptability. Refer to Embodiment 3 for other methods and systems for authorization management.

Example 8

The difference between the embodiment and the embodiment 3 is that the terminal device further includes an irrigation system, a door and window control device, an indoor climate device and a building intercom device, and the management terminal is replaced with an onboard computer, and the onboard computer is connected to the wireless router through mobile communication. All terminal devices are connected to the wireless router through the network provided by the wireless router. The operation rights of the router configuration change include the network switch timing setting permissions P5, ..., PN, and the rights information assigned by each terminal device is as follows:

终端设备Terminal Equipment	安防报警设备Security alarm equipment	照明控制设备Lighting control equipment	电视机TV set	灌溉系统Irrigation system
权限Permission	P1P1	P1、P3P1, P3	P2、P4P2, P4	P5P5
终端设备Terminal Equipment	门窗控制设备Door and window control equipment	室内气候设备Indoor climate equipment	楼宇对讲设备Building intercom equipment	车载电脑Car computer
权限Permission	P2、P5P2, P5	P1、P2、P4、P5P1, P2, P4, P5	P1、P2、P4P1, P2, P4	P1、P2、…、PNP1, P2, ..., PN

From the actual operation situation, the on-board computer as the management terminal has all the permissions P1, P2, ..., PN of the router configuration change. The following is only a brief introduction to the irrigation system: if the user requests the router to perform network switch timing setting through the irrigation system The authority allocation information of the administrator account stores the authority P2 of the irrigation system having the network switch timing setting, and the router performs the operation of setting the network switch timing. Refer to Embodiment 3 for other methods and systems for authorization management.

Example 9

The difference between the embodiment and the embodiment 3 is that the wireless router is provided with an indication module, the indication module is connected with the authority judgment module signal, and the indication module is configured to indicate whether the requested user has the corresponding authority, and the indicator module is indicated by the system indicator. display. If the requested user has permission, the system indicator is green; if the requested user has permission, the system indicator is red. The system indicator determines whether the requested user has the right to change the router configuration. The judgment process and the result are clear and clear, giving the operator an intuitive feeling. Refer to Embodiment 3 for other methods and systems for authorization management.

Compared with the prior art, the invention has the following beneficial effects:

The authorization management method and system of the wireless router of the present invention adopts a management terminal authorization mode, and the allocation of user rights is directly allocated by the administrator account of the management terminal, and the change configuration operation of the router is compared according to the setting of the administrator account. Execution, the authorization management mode is flexible and fast; the authority assignment is set on the management terminal, and the router itself is not changed when the authority assignment is changed.

The preferred embodiments and principles of the present invention have been described in detail above, and those skilled in the art will be able to change the embodiments in accordance with the embodiments of the present invention. The scope of protection.

Claims

A method for authorizing management of a wireless router, comprising the steps of:

S1, the router accesses multiple terminal devices and management terminals, and the management terminal sets itself as an administrator through a router, and the router system records the MAC address of the management terminal, and the MAC address is an identifier of the router identification management terminal;

S2, each change configuration operation of the router sets a rights management, different change configuration operations correspond to different rights, and the rights are named P1, P2, ..., PN;

S3, the administrator summarizes all the terminal devices of the routing network through the router, and sets the permissions of each terminal device on the administrator tool;

S4, requesting to perform an operation of changing a router configuration;

S5. The router receives the operation request of step S4, and searches for an assignment of the authority in the administrator account according to the MAC address.

S6: determining whether the terminal device has the corresponding authority. If the authority allocation information of the administrator account includes the corresponding authority of the terminal device, the router performs the operation requested by the terminal device; if the authority allocation information of the administrator account does not have the corresponding permission of the terminal device The router rejects the operation request of the terminal device.
The authorization management method for a router according to claim 1, wherein the change configuration operation of the router comprises wireless channel change, network speed setting, flow control, and IP allocation.
The authorization management method for a router according to claim 1, wherein the terminal device allocates one or more rights.
The authorization management method for a router according to claim 1 or 3, wherein the authority assignment is completed through a rights assignment interface, the rights assignment interface is provided by the management terminal, and the rights assignment interface includes all rights information, and the permission is selected. One or more permissions on the assignment interface give the terminal device the appropriate permissions.
The authorization management method for a router according to claim 1, wherein the management terminal is a mobile phone or a computer.
The authorization management method of the router according to claim 1 or 5, wherein the identifier of the router identification management terminal further includes a fingerprint, a username, and a password.
An authorization management system for a wireless router includes a wireless router, a plurality of terminal devices, and a management terminal, wherein the wireless router is connected to a plurality of terminal devices and management terminals through a network, and the management terminal sets itself as an administrator through the wireless router. The management terminal has an administrator account, and the administrator account includes a permission module, a rights assignment module, and a permission judgment module. The permission module is configured to store all the permission information, and the authority allocation module is configured to allocate and store the permission information corresponding to each terminal device. The permission judging module is configured to judge whether the requested change router configuration operation has Permissions.
The authorization management system for a router according to claim 7, wherein the terminal device comprises one or more of a kitchen television, a lighting control, a security alarm, an irrigation system, a door and window control, an indoor climate, and a building intercom. Kind.
The authorization management system for a router according to claim 7, wherein the administrator account further comprises a login verification module for logging in the verification of the administrator account.
The authorization management system for a router according to claim 9, wherein the login verification module is provided with an input of a username and a password.