WO2018103527A1

WO2018103527A1 - Authentication method and authentication device

Info

Publication number: WO2018103527A1
Application number: PCT/CN2017/112248
Authority: WO
Inventors: 郝志坚; 朱钰; 郝谨贤
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-12-06
Filing date: 2017-11-22
Publication date: 2018-06-14
Also published as: CN108616885A

Abstract

An authentication method and an authentication device, for solving security hazards in the related technology caused by divulgement of the fixed password of a router. The method comprises: receiving a connection request sent by a first device; determining whether the authentication password carried in the connection request is consistent with the login password; if the authentication password is determined to be inconsistent with the login password, determining whether there is a temporary password; if there is a temporary password, determining whether the authentication password is consistent with the temporary password; when the authentication password is consistent with the temporary password, determining that the first device passes the authentication and receives the connection request sent by the first device; and otherwise, refusing the connection request sent by the first device. This solution ensures the security of the login password of a router to a certain extent.

Description

Authentication method and authentication device

Technical field

The present disclosure relates to the field of communications, and in particular, to an authentication method and apparatus.

Background technique

At present, the router generally has a fixed login password, and the user can use the login password to connect to the router using the mobile terminal, so that the wifi network can be used by the mobile terminal. However, in some specific scenarios, it is inconvenient to inform the holder of some mobile terminals of the login password of the router, which may cause the holder of the mobile terminal to establish a connection with the router through the terminal, for example, when a guest comes to the home. In the case of a guest, if the guest's login password is notified to the guest, the owner will be worried that the login password of the router will be leaked, and often the login password involves other more important usage scenarios, such as bank password, Alipay password, etc. The password is leaked, and there is a big security risk.

Summary of the invention

The present disclosure provides an authentication method and apparatus for solving the security risk caused by a fixed password leak of a router in the related art.

According to an aspect of the present disclosure, an authentication method is provided, including: receiving a connection request sent by a first device; determining whether an authentication password carried in the connection request is consistent with a login password; and determining that the authentication password and the login password are inconsistent And determining whether there is a temporary password; if there is a temporary password, determining whether the authentication password is consistent with the temporary password, and if the authentication password is consistent with the temporary password, determining that the first device passes the authentication and receives the connection request of the first device; otherwise, The connection request of the first device is rejected.

In an embodiment, the method further includes: before receiving the connection request sent by the first device, and after the second device establishes a connection with the routing device by using the login password, receiving and storing the temporary password sent by the second device.

In an embodiment, the method further includes: before receiving the connection request sent by the first device, and after the second device establishes a connection with the router by using the login password, receiving and storing the effective duration of the temporary password sent by the second device. Information, and the number of connectable devices corresponding to the temporary password sent by the second device.

The determining whether the temporary password exists includes: determining whether a valid temporary password exists at the current time point according to the valid usage duration information of the pre-stored temporary password.

In an embodiment, the method further includes: if the authentication password is consistent with the temporary password, determining whether the number of devices connected to the routing device by using the temporary password exceeds the number of connectable devices corresponding to the temporary password; if And rejecting the connection request of the first device, if not, determining that the first device is authenticated and receiving the connection request of the first device.

According to a second aspect of the present disclosure, an authentication apparatus is provided, including: a first receiving module, configured to receive a connection request sent by a first device; and a first determining module configured to determine whether an authentication password carried in the connection request is Consistent with the login password; the second determination module is configured to determine whether to save if the authentication password and the login password are inconsistent In the temporary password, the first connection module is configured to determine whether the authentication password is consistent with the temporary password if the temporary password exists, and if the authentication password is consistent with the temporary password, determine that the first device passes the authentication and receives the connection of the first device. Request, otherwise, reject the connection request from the first device.

In an embodiment, the apparatus further includes: a second receiving module, configured to receive and store the second device after receiving the connection request sent by the first device, and after the second device establishes a connection with the routing device by using the login password The temporary password sent.

In an embodiment, the apparatus further includes: a third receiving module, configured to receive and store the second device after receiving the connection request sent by the first device, and after the second device establishes a connection with the router by using the login password. The effective duration information of the temporary password, and the number of connectable devices corresponding to the temporary password sent by the second device.

The second judging module is configured to: determine whether there is a valid temporary password at the current time point according to the valid usage duration information of the pre-stored temporary password.

In an embodiment, the apparatus further includes: a third determining module, configured to determine, if the authentication password is consistent with the temporary password, whether the number of devices connected to the routing device by using the temporary password exceeds a connectable corresponding to the temporary password The number of devices; the second connection module is configured to reject the connection request of the first device if it is exceeded, and if not, determine that the first device passes the authentication and receives the connection request of the first device.

According to a third aspect of the present disclosure, there is also provided a computer storage medium storing an execution instruction, the execution instruction being arranged to perform the method described above.

In the solution provided by the embodiment of the present disclosure, a temporary login password is set on the router side, so that the terminal device having the temporary login requirement can log in to the router through the temporary login password, and the security of the router login password is ensured to a certain extent.

DRAWINGS

1 is a flowchart of an authentication method provided in a first embodiment of the present disclosure;

2 is a flowchart of an authentication method provided in a second embodiment of the present disclosure;

3 is a block diagram showing the structure of an authentication apparatus provided in a third embodiment of the present disclosure.

detailed description

The technical solutions in the embodiments of the present disclosure are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present disclosure. It is obvious that the described embodiments are only a part of the embodiments of the present disclosure, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present disclosure without departing from the inventive scope are the scope of the disclosure.

First embodiment

This embodiment provides an authentication method, which can be performed by a routing device. FIG. 1 is a flowchart of the method. As shown in FIG. 1, the method includes the following processing.

At step 101, a connection request sent by the first device is received.

In this embodiment, the first device may be a terminal/mobile terminal that needs to establish a connection with the routing device, and the first device needs to send a connection request carrying the authentication password to the routing device before establishing a connection with the routing device. So that the routing device authenticates the first device according to the authentication password.

In step 102, it is determined whether the authentication password carried in the connection request is consistent with the login password.

After the routing device receives the connection request from the first device, it is first required to determine whether the current connection is a normal connection using the login password. Therefore, in step 102, the routing device determines the authentication carried in the connection request sent by the first device. The password is the same as the password stored on the router. If the password is the same, the current connection request from the first device is not a temporary request. In response to the connection request, the connection is established with the first device. Otherwise, go to step 103.

In step 103, if it is determined that the authentication password does not match the login password, it is determined whether a temporary password exists.

The method provided in this embodiment further includes a process of setting a temporary password, including: before receiving the connection request sent by the first device, and after the second device establishes a connection with the routing device by using the login password, receiving and storing the second device to send The temporary password, in this embodiment, the second device may be a terminal device/mobile terminal device that establishes a connection with the router by using the original login password, and the temporary password may be specified by the user through the second device, and the second device is specified by the second device. Send to the router for storage.

The router receives and stores the valid usage duration information of the temporary password sent by the second device, and receives and stores the number of connectable devices corresponding to the temporary password sent by the second device. Based on this, determining whether the temporary password exists currently may include: The effective use duration of the pre-stored temporary password determines whether there is a valid temporary password at the current time point.

In step 104, if there is a temporary password, it is determined whether the authentication password is consistent with the temporary password. If the authentication password is consistent with the temporary password, it is determined that the first device passes the authentication and receives the connection request of the first device. Otherwise, the first password is rejected. The connection request for the device.

In an embodiment, the method provided in this embodiment may further include: determining, when the routing device determines that the authentication password is consistent with the temporary password, whether the number of devices connected to the routing device by using the temporary password exceeds the temporary password. The number of connectable devices; if it is exceeded, the connection request of the first device is rejected, and if not, it is determined that the first device passes the authentication and receives the connection request of the first device.

According to the method provided by the embodiment of the present disclosure, when a guest requests a wifi password, the client may be notified of the temporary password according to the solution provided by the invention, so that the client can use the temporary password to log in to the routing device, thereby ensuring the security of the routing device login password.

Second embodiment

The above-mentioned first embodiment describes the authentication method provided by the present disclosure by using several preferred embodiments. In this embodiment, the flow of information exchanged with the routing device by the first device and the second device during the entire authentication process is performed. The following describes the authentication method provided by the present disclosure: Before describing the entire information interaction process, firstly, the three concepts of the first device, the second device, and the temporary password involved in this embodiment are briefly described.

The router is bound to a device, and the binding device is connected to the router by using the original password (that is, the login password), and the binding device is the second device, and the second device can control the router to pass the temporary password and other The device is connected. The device connected to the routing device through the temporary password is the first device, and the temporary password has time and The limit on the number of uses.

2 is a flow chart of an authentication method of an embodiment. As shown in FIG. 2, the method includes the following steps.

In step 201, the second device is connected to the router through the original password of the router.

At step 202, the second device sets the temporary password, the effective time of the temporary password, and the information of the number N of devices that are allowed to connect to the router using the temporary password, and transmits the information to the router.

In step 203, the router receives the connection request sent by the first device.

In step 204, the router determines whether the authentication password in the connection request is consistent with the original password. If yes, step 205 is performed, and if no, step 206 is performed.

At step 205, the router accepts a connection request from the first device.

In step 206, the router determines whether there is a temporary password at the current time according to the valid duration of the pre-stored temporary password. If not, step 207 is performed, and if yes, step 208 is performed.

At step 207, the router rejects the connection request of the first device.

At step 208, the router determines whether the authentication password in the request is consistent with the temporary password.

In step 209, the router determines whether the number of devices connected using the temporary password exceeds the threshold N. If not, step 210 is performed.

At step 210, the connection request of the first device is accepted, and the number of devices connected using the temporary password is incremented by one.

In the solution provided by this embodiment, a temporary login password is set on the router end, so that the terminal device having the temporary login requirement can log in to the router through the temporary login password, and the security of the router login password is ensured to a certain extent.

Third embodiment

The embodiment provides an authentication device, and FIG. 3 is a structural block diagram of the device. As shown in FIG. 3, the device 30 includes the following components.

The device 30 includes a first receiving module 31 configured to receive a connection request sent by the first device.

The device 30 further includes a first determining module 32 configured to determine whether the authentication password carried in the connection request is consistent with the login password.

After the routing device receives the connection request from the first device, it is first determined whether the current connection is a normal connection. Therefore, the routing device determines whether the authentication password and the login password carried in the connection request sent by the first device are consistent. In the case that the connection request sent by the first device is not a temporary requirement, the connection with the first device is established in response to the connection request.

The device 30 further includes a second determining module 33 configured to determine whether a temporary password exists if the authentication password is inconsistent with the login password.

The device 30 further includes a first connection module 34, configured to determine whether the authentication password is consistent with the temporary password if the temporary password exists, and determine that the first device passes the authentication and receives the first device if the authentication password is consistent with the temporary password. The connection request, otherwise, rejects the connection request of the first device.

In an embodiment, the apparatus 30 may further include a second receiving module, configured to receive and store the second connection after receiving the connection request sent by the first device, and after the second device establishes the connection with the routing device by using the login password. The temporary password sent by the device.

In an embodiment, the apparatus 30 may further include: a third receiving module, configured to receive and store the second connection after receiving the connection request sent by the first device, and after the second device establishes a connection with the router by using the login password The effective usage duration information of the temporary password sent by the device, and the number of connectable devices corresponding to the temporary password sent by the second device.

The second judging module is configured to: determine whether there is a valid temporary password at the current time point according to the effective use duration of the pre-stored temporary password.

In an embodiment, the device 30 may further include: a third determining module, configured to determine whether the number of devices connected to the routing device using the temporary password exceeds the temporary password if the authentication password is consistent with the temporary password The number of connectable devices; and the second connection module, configured to reject the connection request of the first device if the number of devices connected to the routing device using the temporary password exceeds a preset value, and if not, the first connection is determined The device is authenticated and receives a connection request from the first device.

While the preferred embodiment of the present disclosure has been disclosed for purposes of illustration, those skilled in the art will recognize that various modifications, additions and substitutions are possible, and the scope of the present disclosure should not be limited to the embodiments described above.

Industrial applicability

The present disclosure is applicable to the field of communications to enhance the security of router login passwords.

Claims

An authentication method, including:

Receiving a connection request sent by the first device;

Determining whether the authentication password carried in the connection request is consistent with the login password;

When it is determined that the authentication password is inconsistent with the login password, it is determined whether a temporary password exists;

If the temporary password is present, it is determined whether the authentication password is consistent with the temporary password, and if the authentication password is consistent with the temporary password, determining that the first device is authenticated and receiving the first device The connection request, otherwise, rejects the connection request of the first device.
The method of claim 1 wherein the method further comprises:

Before receiving the connection request sent by the first device, and after the second device establishes a connection with the routing device by using the login password, receiving and storing the temporary password sent by the second device.
The method of claim 1 wherein the method further comprises:

Before receiving the connection request sent by the first device, and after the second device establishes a connection with the router through the login password, receiving and storing the valid usage duration information of the temporary password sent by the second device, and receiving and And storing the number of connectable devices corresponding to the temporary password sent by the second device.
The method of claim 3, wherein the determining whether there is a temporary password comprises:

Judging whether there is a valid temporary password at the current time point according to the valid usage duration information of the pre-stored temporary password.
The method of claim 3, wherein the method further comprises:

And determining, in the case that the authentication password is consistent with the temporary password, whether the number of devices connected to the routing device by using the temporary password exceeds the number of connectable devices corresponding to the temporary password;

If yes, the connection request of the first device is rejected, and if not, it is determined that the first device is authenticated to pass, and the connection request of the first device is received.
An authentication device, comprising:

a first receiving module, configured to receive a connection request sent by the first device;

The first determining module is configured to determine whether the authentication password carried in the connection request is consistent with the login password;

The second determining module is configured to determine whether a temporary password exists if the authentication password is inconsistent with the login password;

The first connection module is configured to determine, if the temporary password exists, whether the authentication password is consistent with the temporary password, and if the authentication password is consistent with the temporary password, determining that the first device is authenticated, Receiving a connection request of the first device, otherwise rejecting a connection request of the first device.
The apparatus of claim 6 wherein said apparatus further comprises:

The second receiving module is configured to receive and store the temporary password sent by the second device after receiving the connection request sent by the first device, and after the second device establishes a connection with the routing device by using the login password.
The apparatus of claim 6 wherein said apparatus further comprises:

The third receiving module is configured to receive and store the validity of the temporary password sent by the second device after receiving the connection request sent by the first device, and after the second device establishes a connection with the router by using the login password Using the duration information, and receiving and storing the number of connectable devices corresponding to the temporary password sent by the second device.
The apparatus of claim 8 wherein said second determining module is configured to:

Judging whether there is a valid temporary password at the current time point according to the valid usage duration information of the pre-stored temporary password.
The apparatus of claim 8 wherein said apparatus further comprises:

The third determining module is configured to determine, if the authentication password is consistent with the temporary password, whether the number of devices connected to the routing device by using the temporary password exceeds the number of connectable devices corresponding to the temporary password number;

The second connection module is configured to reject the connection request of the first device if it is exceeded, and if not, determine that the first device passes the authentication and receives the connection request of the first device.
A computer storage medium storing execution instructions, the execution instructions being arranged to perform the method of any one of claims 1 to 5.