WiFi Internet surfing connecting authentication method and system based on asymmetric full-process encryption

Abstract

The invention relates to a WiFi Internet surfing connecting authentication method based on asymmetric full-process encryption. The WiFi Internet surfing connecting authentication method includes the steps that a cloud authentication server defines an encryption access strategy for an access controller; the cloud authentication server issues the encryption access strategy to the assigned access controller based on the M-WAPI protocol; the access controller issues the encryption access strategy based on the M-WAPI protocol to a mobile terminal accessing the WiFi for the first time; the mobile terminal sends an encrypted authentication request to the cloud authentication server for authentication through the encryption access strategy, and if authentication is successful, the mobile terminal can access the Internet. The invention further discloses a WiFi Internet surfing connecting authentication system based on the asymmetric full-process encryption. By means of the asymmetric full-process encryption method and system, the mobile terminal can be rapidly connected to legal WiFi hot points, phishing, AP cheating, network hijacking, brute force attacking and the like can be effectively avoided, and it is guaranteed that users can safely use WiFi network resources without worries to protect sensitive information of the users from leakage and stealing.

Description

technical field [0001] The invention relates to the technical field of WiFi Internet security access, in particular to a method and system for authenticating a WiFi Internet access connection based on asymmetric whole-process encryption. Background technique [0002] With the popularization and use of smart mobile terminals, mobile Internet access has become an indispensable part of daily life, especially its convenience, which has also brought many security problems, such as phishing websites, AP deception, domain name hijacking, and brute force cracking Wait. [0003] In the existing Internet system, users usually find wireless access hotspots through mobile terminals. These wireless hotspots are usually free, or a basic encrypted access or default encrypted access is done in the wireless router, which gives websites phishing and AP deception. , Network hijacking, and brute force cracking provide a lot of opportunities, bringing great troubles and even huge losses to merc...

AI Technical Summary

Problems solved by technology

[0003] In the existing Internet system, users usually find wireless access hotspots through mobile terminals. These wireless hotspots are usually free, or a basic encrypted access or default encrypted access is done in the wireless router, which gives websites phishing and AP deception. , network hijacking, and brute force cracking provide a lot of opportunities, bringing great troubles and even huge losses to merchants and mobile users, such as using WiFi for online payment

In response to these security risks, although some large operators and equipment manufacturers have taken some measures to control Internet access, such as Radius authentication, WiFidog authentication, Chilipot, etc., they still cannot achieve terminal security and full encryption authentication , so the use of network security, especially the security risks at the end of the wireless WiFi network is very serious, and it has always been an area actively explored by network security and information security personnel.

Images