Method, device and system for accessing device to network

Abstract

The invention discloses a method, equipment and a system for accessing equipment to a network, and relates to the technical field of wireless communication. A first data acquisition device in a wireless network acquires the signal strength and the message delay of a message signal by receiving the message signal carrying a connection request sent by a first terminal device, further determines the position information of the first terminal device, and determines the first preset area according to the relationship between the position information and the first preset area. And judging whether the first terminal equipment can access the wireless network or not, so that the external terminal equipment can be prevented from accessing the wireless network, the transmission performance of the wireless network is ensured, and the safety of the wireless network access equipment is improved.

Description

Technical Field

[0001] The present application relates to the field of wireless communication technologies, and in particular to a method, device, and system for a device to access a network. Background Art

[0002] In recent years, with the rapid development of wireless networks, wireless local area network (WiFi) access points (APs) have been used in increasingly diverse scenarios. For example, WiFi access points can be found in homes, hotels, cafes, schools, shopping malls, hospitals, libraries, and other areas. Taking the home Internet of Things (IoT) as an example, multiple network-enabled smart home devices can access the home's WiFi network to implement corresponding smart home functions. In this scenario, WiFi is typically only used for access by terminal devices within the home. However, if a terminal device outside the home accesses the WiFi network, it will impact the security of the home's WiFi network and other terminal devices connected to the WiFi network. More importantly, there is a risk of user privacy leakage. Summary of the Invention

[0003] The present application provides a method, device and system for device access to a network, which obtains the location information of a terminal device requesting access to a wireless network and determines whether the terminal device is allowed to access, thereby ensuring the transmission performance of the wireless network and improving the security of the wireless network access device.

[0004] To achieve the above objectives, this application adopts the following technical solutions:

[0005] In a first aspect, the present application provides a method for a device to access a network, which is applied to a first data acquisition device. The method may include: the first data acquisition device receives a first connection request sent by a first terminal device, the first connection request is used to request access to a wireless network to which the first data acquisition device belongs as an access point; obtains a first signal strength and / or a first message delay corresponding to the first connection request; determines the location information of the first terminal device based on the collected information, the collected information includes the first network strength and / or the first message delay; and decides whether to allow the first terminal device to access based on the relationship between the location information and the first preset area.

[0006] In some examples, the first data collection device may include an access point device, or a terminal device that supports a hotspot function, and the location information of the first terminal device may be location coordinates, or other information that can represent the location, which is not limited here.

[0007] In the solution provided by the first aspect above, the first data acquisition device obtains the first signal strength and / or the first message delay based on the first connection request from the first terminal device, and determines the location information of the first terminal device through the first signal strength and / or the first message delay, and then decides whether to allow the first terminal device to access the wireless network based on whether the determined location information is within the range of allowed access. Based on this, other terminal devices that are not within the range of allowed access can be prevented from accessing the wireless network, thereby ensuring the security of devices and data in the wireless network and ensuring the high performance of the wireless network.

[0008] As a possible implementation method, obtaining the first signal strength and / or first message delay corresponding to the first connection request includes: the first data acquisition device obtains the first signal strength and / or first message delay of the first terminal device based on the message signal of the first connection request. Based on this, when the first data acquisition device receives the connection request from the first terminal device, it obtains the first signal strength and / or first message delay corresponding to the first terminal device based on the message signal carrying the connection request. In some examples, the first data acquisition device can determine the first signal strength and / or first message delay of the first terminal device based on other message signals from the first terminal device, and no limitation is made here. In this way, the first data acquisition device can obtain the first signal strength and / or first message delay based on the received message signal, thereby determining the location information of the first terminal device, and judging the legitimacy of the first terminal device, to prevent terminal devices in other locations from accessing the wireless network.

[0009] As a possible implementation method, the method may also include: the first data acquisition device sends a collaborative request to at least one second data acquisition device, the collaborative request is used to request at least one second data acquisition device to obtain the second network strength and / or second message delay of the first terminal device; and receives the second network strength and / or second message delay sent by at least one second data acquisition device. Based on this, the first data acquisition device can send a collaborative request to one or more second data acquisition devices, instruct the second data acquisition device to collect the second network strength and / or second message delay of the first terminal device through the collaborative request, and send the second network strength and / or second message delay to the first data acquisition device for the first data acquisition device to determine the location information of the first terminal device. The second network strength and / or second message delay collected by the second data acquisition device can improve the accuracy of the location information of the first terminal device determined by the first data acquisition device, and the accuracy of the location information is proportional to the number of second data collectors. The second data acquisition device may include an access point device, or a terminal device that supports hotspot function, which is not limited here. In this way, the first network strength and / or first message delay corresponding to the first terminal device, as well as the second network strength and / or second message delay, are collected in the first data acquisition device, so that the first device can determine the location information of the first terminal device and judge the legitimacy of the first terminal device to prevent terminal devices at other locations from accessing the wireless network.

[0010] As a possible implementation method, the second network strength and / or the second message delay are determined by the second data acquisition device based on the second connection request received from the first terminal device. Based on this, the second data acquisition device may include one or more. When the second data acquisition device that receives the collaborative request includes multiple second data acquisition devices, the multiple second data acquisition devices each obtain the second network strength and / or the second message delay of the first terminal device and send them to the first data acquisition device, so that the second network strength and / or the second message delay obtained by the multiple second data acquisition devices arrive at the first data acquisition device, which is used to assist the first data acquisition device in obtaining the location information of the first terminal device and judging the legitimacy of the first terminal device, so as to prevent terminal devices in other locations from accessing the wireless network.

[0011] As a possible implementation method, the collected information also includes a second network strength and / or a second message delay. The above-mentioned determination of the location information of the first terminal device based on the collected information may include: the first data collection device determines the location information of the first terminal device based on the first signal strength and / or the first message delay, and the second signal strength and / or the second message delay. Based on this, the first data collection device receives the second signal strength and / or the second message delay sent from one or more second data collection devices, and combines the first signal strength and / or the first message delay obtained by the first data collection device to jointly determine the location information of the first terminal device. The second network strength and / or the second message delay provided by the second data collection device can improve the accuracy of the location information of the first terminal device determined by the first data collection device, and the accuracy of the location information is proportional to the number of second data collectors. In some examples, the first data collection device can determine the location information of the first terminal device based on any one or more of the first signal strength, the first message delay, the second signal strength, and the second message delay, and judge the legitimacy of the first terminal device to prevent terminal devices in other locations from accessing the wireless network.

[0012] As a possible implementation method, the method also includes: the first data acquisition device sends the location information of the first terminal device to the access control module; and the access control module decides whether to allow the first terminal device to access based on the relationship between the location information and the first preset area. Based on this, when the first data acquisition device does not include an access control module, the first data acquisition device sends the location information of the first terminal device to a gateway node provided with an access control module, and the access control module can decide whether to allow the first terminal device to access based on the relationship between the location information and the first preset area, wherein the access control module can be provided in the first data acquisition device, or in other gateway nodes in the wireless network, without any limitation here. In this way, the access control module can determine whether the first terminal device can access the wireless network based on the location information, thereby preventing terminal devices in other locations from accessing the wireless network and affecting the security of the devices and data in the wireless network.

[0013] As a possible implementation method, whether to allow the first terminal device to access is determined based on the relationship between the location information and the first preset area, including: if the location information is in the first preset area, allowing the first terminal device to access the wireless network; or if the location information is not in the first preset area, denying the first terminal device access to the wireless network. Based on this, when the first data acquisition device includes an access control module, the access control module in the first data acquisition device can determine the access policy for the first terminal device based on the relative relationship between the location information of the first terminal device and the first preset area. When the location information is in the first preset area, the access control module allows the first terminal device to access the wireless network; when the location information is not in the first preset area, the access control module denies the first terminal device access to the wireless network. In this way, terminal devices in other locations are prevented from accessing the wireless network, which may affect the security of the devices and data in the wireless network.

[0014] As a possible implementation, the method may further include: if the location information is within a first preset area, the first data collection device transmitting first access decision information to the first terminal device, the first access decision information being used to allow the first terminal device to access the wireless network. Based on this, the first data collection device transmits the decision to allow the first terminal device access via the first access decision information to the first terminal device, thereby enabling the first terminal device to successfully access the wireless network or successfully proceed to the next stage of the authentication process. This allows terminal devices with legitimate location information to access the wireless network, thereby improving the security of devices and data within the wireless network.

[0015] As a possible implementation, the method may further include: if the location information is not within the first preset area, the first data collection device transmitting second access decision information to the first terminal device, where the second access decision information is used to deny the first terminal device access to the wireless network. Based on this, the first data collection device transmits the decision to deny access to the first terminal device via the second access decision information to the first terminal device, thereby preventing the first terminal device from accessing the wireless network. This allows terminal devices with valid location information to access the wireless network, thereby improving the security of devices and data in the wireless network.

[0016] As one possible implementation, when a first terminal device requests wireless network access, the signal strength of the first data acquisition device is greater than or equal to the signal strength of at least one second data acquisition device. Based on this, the first data acquisition device sends a second access decision message to the first terminal device, denying access to the first terminal device. This prevents the first terminal device from accessing the wireless network due to invalid location information, thereby improving the security of devices and data within the wireless network.

[0017] As a possible implementation, the first data collection device is in a detection mode, and the method further includes: the first data collection device establishing a connection relationship with the second terminal device based on a connection request from the second terminal device; collecting a set of location information corresponding to the second terminal device; and determining a first preset area based on the set of location information, wherein the first preset area indicates a legal access range corresponding to the wireless network. Based on this, when the first data collection device is in the detection mode and the first data collection device and the second terminal device remain connected, the first data collection device can further determine the legal access range of the wireless network by collecting the set of location information of the second terminal device. In some examples, the second terminal device can move within the boundary of the legal access range of the wireless network so that the first terminal device can more efficiently collect the set of location information used to determine the first preset range, and after determining the first preset range, the detection mode of the first data collection device is turned off. In this way, before the first terminal device applies to access the wireless network, the area included in the first preset range can be determined, so that the first terminal device can access the wireless network when its location information is within the first preset range, and terminal devices whose location information is not within the first preset range are prevented from accessing the wireless network, thereby improving the security of devices and data in the wireless network.

[0018] As a possible implementation, the method may also include: the first data acquisition device obtains the coverage range of the wireless network and a second preset area; the overlapping area of ​​the coverage range of the wireless network and the second preset area is used as the first preset area, and the second preset area is the target physical area corresponding to the wireless network. Based on this, the first data acquisition device can obtain the coverage range of the wireless network and the second preset area, and use the overlapping area of ​​the two as the first preset area, wherein the coverage range of the wireless network may include the collection of areas covered by the signals of all access points in the wireless network, and the second preset area is the target physical area defined for the wireless network. In some examples, the target physical area may be a floor plan, floor map, etc. of a building, which is not limited here. In this way, before the first terminal device applies to access the wireless network, the area included in the first preset range can be determined first, so that the first terminal device can access the wireless network when its location information is within the first preset range, and avoid access by terminal devices whose location information is not within the first preset range, so as to improve the security of devices and data in the wireless network.

[0019] In a second aspect, the present application provides a method for a device to access a network, which is applied to a second data acquisition device. The method may include: receiving a collaboration request sent by a first data acquisition device, the collaboration request being used to instruct the second data acquisition device to obtain a second signal strength and / or a second message delay of a first terminal device; based on the collaboration request, sending the second signal strength and / or the second message delay of the first terminal device to the first data acquisition device, the second signal strength and / or the second message delay being used by the first data acquisition device to decide whether to allow the first terminal device to access the wireless network to which the first data acquisition device and the second data acquisition device belong as access points. Based on this, the second data acquisition device can obtain the second signal strength and / or the second message delay from the first terminal device upon receiving the collaboration request sent by the first data acquisition device, and send the second signal strength and / or the second message delay to the first data acquisition device based on the relevant information of the first data acquisition device carried in the collaboration request, so that the first data acquisition device can determine the location information of the first terminal device and judge the legitimacy of the first terminal device, thereby preventing terminal devices at other locations from accessing the wireless network. In some examples, the second data acquisition device may include an access point device or a terminal device that supports hotspot function, which is not limited here.

[0020] In the solution provided by the second aspect above, the second data acquisition device sends the second signal strength and / or second message delay of the first terminal device to the first data acquisition device, so as to assist the first data acquisition device in determining whether the location information of the first terminal device is within the range of allowed access, thereby determining whether the first terminal device can access the wireless network, preventing other terminal devices that are not within the range of allowed access from accessing the wireless network, and ensuring that the communication performance of the wireless network is relatively stable, so as to improve the security of devices and data in the wireless network.

[0021] As a possible implementation, the method may also include: receiving a second connection request from the first terminal device; obtaining the second signal strength and / or second message delay of the first terminal device according to the message signal of the second connection request. Based on this, the second data acquisition device can obtain the second signal strength and / or second message delay of the first terminal device by receiving the message signal of the second connection request sent by the first terminal device, or can determine the second signal strength and / or second message delay of the first terminal device through other message signals from the first terminal device, without any limitation here. The first connection request and the second connection request may be sent simultaneously or not simultaneously, so that the second data acquisition device can obtain the second signal strength and / or second message delay of the first terminal device, and send the second signal strength and / or second message delay to the first data acquisition device, so that the first data acquisition device can determine the location information of the first terminal device.

[0022] In a third aspect, the present application provides a data acquisition device, which may include: a transceiver for sending and receiving signals; a memory for storing computer program instructions; and a processor for executing the computer program instructions to support the implementation of the method described in any one of the first aspect or the second aspect.

[0023] In a fourth aspect, the present application provides a network system, which includes a first data acquisition device and a second data acquisition device, wherein the first data acquisition device is used to implement any possible implementation method as in the first aspect, and the second data acquisition device is used to implement any possible implementation method as in the second aspect.

[0024] In a fifth aspect, the present application provides a computer-readable storage medium having computer program instructions stored thereon, which, when executed by a processing circuit, supports the implementation of the method as described in any one of the first aspect or the second aspect.

[0025] In a sixth aspect, the present application provides a computer program product comprising instructions, which, when executed on a computer, enables the method as described in any one of the first aspect or the second aspect to be implemented.

[0026] In the seventh aspect, the present application provides a chip system, which includes a processing circuit and a storage medium, wherein the storage medium stores computer program instructions; when the computer program instructions are executed by the processing circuit, they support the implementation of the method described in any one of the first aspect or the second aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 A schematic diagram of a scenario of accessing a wireless network through a preset QR code;

[0028] Figure 2 A schematic diagram of a wireless network legal area provided in an embodiment of the present application;

[0029] Figure 3 A schematic diagram of a system architecture for accessing a network provided by an embodiment of the present application;

[0030] Figure 4 A flowchart of a method for a device to access a network provided in an embodiment of the present application;

[0031] Figure 5 A flowchart of another method for a device to access a network provided in an embodiment of the present application;

[0032] Figure 6 A flowchart of another method for a device to access a network provided in an embodiment of the present application;

[0033] Figure 7 A schematic diagram of a scenario for determining a legal area provided in an embodiment of the present application;

[0034] Figure 8 A schematic diagram of another scenario for determining a legal area provided in an embodiment of the present application;

[0035] Figure 9 A schematic diagram of the structure of a data acquisition device provided in an embodiment of the present application;

[0036] Figure 10 A schematic diagram of the hardware structure of a data acquisition device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0037] The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings in the embodiments of the present application. In the description of the embodiments of the present application, unless otherwise specified, " / " means or, for example, A / B can mean A or B; "and / or" in this article is merely a description of the association relationship of associated objects, indicating that three relationships can exist, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, "multiple" means two or more than two.

[0038] Hereinafter, the terms "first," "second," and so on are used solely to distinguish different descriptive objects and have no limiting effect on the position, order, priority, quantity, or content of the described objects. For example, if the described object is a "field," the ordinal number preceding the "field" in "first field" and "second field" does not define the position or order of the "fields." "First" and "second" do not define whether the modified "fields" are in the same message, nor do they restrict the order of the "first field" and "second field." For another example, if the described object is a "level," the ordinal number preceding the "level" in "first level" and "second level" does not define the priority of the "levels." For another example, the number of described objects is not limited by the ordinal number and can be one or more. For example, in the case of "first device," the number of "devices" can be one or more. Furthermore, the objects modified by different prefixes can be the same or different. For example, if the described object is a "device," the "first device" and "second device" can be the same type of device or different types of devices. For another example, if the described object is "information," the "first information" and "second information" can be information of the same content or different contents. In short, the use of prefixes such as ordinal numbers to distinguish the described objects in the embodiments of the present application does not constitute a restriction on the described objects. For the statement of the described objects, please refer to the description in the context of the embodiments, and the use of such prefixes should not constitute unnecessary restrictions.

[0039] Furthermore, in the embodiments of the present application, "connection" may be a direct connection or an indirect connection; in addition, it may refer to an electrical connection or a communication connection; for example, the connection between two electrical components A and B may refer to a direct connection between A and B, or may refer to an indirect connection between A and B through other electrical components or connection media, or may refer to an indirect connection between A and B through other communication devices or communication media, as long as communication between A and B can be achieved.

[0040] With the rapid development of wireless networks, wireless local area network (WiFi) access points (APs) are being used in increasingly diverse scenarios. For example, WiFi access points are found in homes, hotels, cafes, schools, shopping malls, hospitals, libraries, and other areas. Taking the home Internet of Things (IoT) as an example, multiple network-enabled smart home devices can access the home's WiFi network to implement corresponding smart home functions. In this scenario, WiFi is typically only used for access by terminal devices within the home. However, if a terminal device outside the home accesses the WiFi network, it can impact the security of the home's WiFi network and other terminal devices connected to the WiFi network. More importantly, it can also pose a risk of user privacy leakage.

[0041] In the era of the Internet of Things (IoT), more and more families are opting for connected smart homes. Smart IoT products typically connect to routers or optical modems via WiFi. With the surge in the number of connected devices, quickly and automatically connecting smart devices to wireless WiFi networks through secure and convenient WiFi authentication has become a crucial issue for improving user experience. Regarding threats to home networks, free WiFi sharing software can secretly leak users' WiFi service set identifiers (SSIDs) and passwords, leading to freeloading. Since home networks often include devices such as cameras and network attached storage (NAS), freeloaders could potentially access these devices, seriously infringing on the privacy of home network users.

[0042] In some embodiments, first, see Figure 1 (a), (b) and (c) in FIG. 3 show a schematic diagram of a scenario of accessing a wireless network through a preset QR code. The scenario may include a configurator, a registration access point and a client device, such as Figure 1 As shown in (a) in the figure, the configurator can establish a network connection by scanning the QR code of the registered access point; then, Figure 1As shown in (b) in FIG, when other client devices need to access the wireless network, the configurator can be used to scan the QR codes of multiple client devices to configure and register the multiple client devices. Figure 1 As shown in (c) of the figure, multiple client devices access the wireless network to which the configurator belongs. Common WiFi authentication methods require user interaction (e.g., entering a password, receiving a text message verification code, etc.) to connect to the wireless network. WiFi EasyConnect technology allows users to access the network by scanning a pre-set QR code on the device to be connected.

[0043] However, the WiFi authentication method requires user interaction (entering a password, SMS verification code, etc.) to connect to the network. Once the WiFi password is leaked, external devices may also be able to access the network; and once the WiFi password is changed, the network configuration of all connected devices needs to be manually modified synchronously, resulting in a poor user experience. WiFi easy-connect technology allows devices to authenticate without a password by scanning a code or NFC tag, but due to hardware requirements, some low-cost smart homes cannot achieve fast connection through this technology. In some embodiments, the router device supports prohibiting access to illegal source devices through a black / white list method of an access control list (ACL) based on a physical access control (MAC) address. This is one of the mainstream anti-freeloading solutions in the industry, but it requires manual management, and the emergence of dynamic MAC address technology can render the ACL mechanism ineffective.

[0044] Based on this, the present application discloses a method, device, and system for device access to a network, relating to the field of communication technology. A first data acquisition device in a wireless network receives a message signal carrying a connection request from a first terminal device, obtains the signal strength and message delay of the message signal, and then determines the location information of the first terminal device. Based on the relationship between the location information and a first preset area, the device determines whether the first terminal device can access the wireless network. This prevents external terminal devices from accessing the wireless network, thereby ensuring the transmission performance of the wireless network and improving the security of devices and data in the wireless network.

[0045] In some embodiments, the present application may introduce the "location coordinates" information of the wireless terminal device as the primary authentication factor or auxiliary authentication factor for WiFi access, and confirm the location of the wireless terminal device requesting to access the WiFi network through the signal strength received by multiple WiFi access points. The WiFi access controller can determine whether the access device is in the "legal area" based on this information to decide whether to allow the terminal device to access the network.

[0046] As an example, the boundary of the "legal area" may coincide with the physical boundary. For example, the "legal area" may be automatically identified by an AP using WiFi sensing technology, or the "legal area" may be manually configured by a user.

[0047] For some examples, see Figure 2 , which shows a scenario diagram of a wireless network legal area provided by an embodiment of the present application, such as Figure 2 As shown in the figure, the target wireless network coverage area includes 1 router / optical modem and 3 AP devices (including AP1, AP2, and AP3). Based on the three-point positioning principle, 3 or more APs can determine the exact "location coordinates" of the wireless terminal device requesting access. Since APs are usually deployed in users' homes, attackers cannot touch them, and the location information of the access device is sensed and obtained by the AP, the "location coordinates" cannot be forged. Only devices within the "legal area" can access the WiFi network, which can effectively prevent external devices from accessing the network.

[0048] In some embodiments, see Figure 3 , which shows a schematic diagram of a system architecture for a device accessing a network provided by an embodiment of the present application, such as Figure 3 As shown, taking the access point device as a data acquisition device as an example, the method provided in the present application is applicable to a network system architecture including a first data acquisition device, a second data acquisition device, a third data acquisition device and a terminal device, wherein the terminal device is used to initiate a network connection request, and the first data acquisition device also serves as an access controller. The first data acquisition device, the second data acquisition device and the third data acquisition device are used to collect relevant information of the terminal device requesting access to the WiFi network (such as authentication information, environmental information, signal strength, etc.) and send the relevant information of the terminal device to the access controller, which is responsible for verifying whether the access request of the terminal device is legal based on the relevant information of the terminal device, that is, deciding whether to allow the terminal device to access the WiFi network based on preset rules; and sending the judgment result to the second data acquisition device and the third data acquisition device, which are devices that access the WiFi network after the terminal device passes the access authentication.

[0049] In some examples, terminal devices can serve as data collection devices. Data collection devices are devices that provide Wi-Fi access, including Wi-Fi routers, ONTs, and APs, or network devices with Wi-Fi hotspot functionality, such as laptops and mobile phones. Terminal devices are users' Wi-Fi wireless devices, including mobile phones, tablets, laptops, or Wi-Fi-enabled smart home or office devices.

[0050] In some embodiments, the embodiments of the present application can be applied to a wireless network composed of one or more access point devices, where terminal devices access the wireless network and use network services. This network can be used in both home and enterprise scenarios. Networking devices with WiFi capabilities include, but are not limited to, WiFi routers and WiFi optical modems. The inventive concepts disclosed in the technical solutions of the embodiments of the present application can be applied to access authentication for other multi-device wireless networks, such as 5G, Bluetooth, and Zigbee networks, without limitation. In some examples, the access point device can include an AP. The AP can serve as the central point of a wireless local area network (WLAN), allowing other computers equipped with wireless network cards to access the WLAN. It can also extend the network range by providing long-range wireless connections to wired LANs or long-range wired connections to small WLANs. Wireless APs can also be used to connect small WLANs for expansion purposes. When a wireless network has a sufficient number of users, a wireless AP should be added to the wired network to connect the wireless network to the wired network backbone. The AP acts as a bridge between wireless workstations and the wired backbone, achieving seamless integration of wireless and wired networks. AP allows wireless workstations to access network resources while increasing available resources for wired networks. AP is mainly used as an access point for mobile terminals (such as mobile phones) and other devices to access wired networks. It can be used for broadband homes, inside buildings, inside campuses, etc. AP can cover tens to hundreds of meters. Access point (AP) or access controller (AC), or other network devices that have the ability to communicate with terminal devices and core networks. For example, relay devices, vehicle-mounted devices, smart wearable devices, etc. The wireless AP also has an access point client mode (AP client), which can be wirelessly connected to other APs to extend the coverage of the network. In some examples, a terminal device with a hotspot function can be used as an access point device. This application does not limit the type of access point device.

[0051] In some examples, the terminal device is a device with wireless transceiver capabilities. The terminal device can be deployed on land, including indoors, outdoors, handheld, or vehicle-mounted; it can also be deployed on the water (such as a ship); it can also be deployed in the air (such as an airplane, balloon, and satellite). The terminal device may include, but is not limited to, a user terminal (UE), a mobile station (MS), a mobile terminal (MT), etc., or a device used to provide voice or data connectivity to a user. For example, the UE includes a handheld device with wireless communication capabilities, a vehicle-mounted device (such as a car, bicycle, electric vehicle, airplane, ship, train, high-speed rail, etc.), a wearable device (such as a smart watch, smart bracelet, pedometer, etc.), or a computing device. Exemplarily, the UE can be a mobile phone, a tablet computer, a laptop computer, a PDA, a mobile internet device (MID), a satellite terminal, or a computer with wireless transceiver capabilities. The UE may also be a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless modem, a smart point of sale (POS) machine, customer-premises equipment (CPE), an intelligent robot, a robotic arm, workshop equipment, smart home equipment (e.g., refrigerators, televisions, air conditioners, electricity meters, etc.), a wireless terminal in industrial control, a wireless terminal in unmanned driving, a wireless terminal in telemedicine, a wireless terminal in smart grids, a wireless terminal in transportation safety, a wireless terminal in smart cities, a wireless terminal in smart homes, an in-vehicle terminal, a roadside unit (RSU) with terminal functions, or an aerial device (e.g., an intelligent robot, a hot air balloon, a drone, an airplane), etc. The UE may also be other devices with terminal functions, for example, the UE may also be a device that functions as a terminal in device-to-device (D2D) communication.

[0052] In the present application, the terminal device may be a terminal in an Internet of Things (IoT) system. IoT is an important component of the future development of information technology. Its main technical feature is to connect objects to the network through communication technology, thereby realizing an intelligent network of human-machine interconnection and object-to-object interconnection. The terminal device in the present application may be a terminal in machine type communication (MTC). The terminal device of the present application may be an on-board module, on-board module, on-board component, on-board chip or on-board unit built into a vehicle as one or more components or units. The vehicle may implement the method of the present application through the built-in on-board module, on-board module, on-board component, on-board chip or on-board unit. The terminal device of the present application may be a vehicle, such as a car. Therefore, the present application can be applied to vehicle networking, such as vehicle to everything (V2X), long term evolution vehicle (LTE-V), vehicle to vehicle (V2V), etc. The embodiments of the present application do not specifically limit the specific structure, type, and function of the terminal device. The communication method provided by the embodiments of the present application will be specifically introduced below in conjunction with the accompanying drawings.

[0053] In some embodiments, see Figure 4 , which shows a flow chart of a method for a device to access a network provided by an embodiment of the present application, such as Figure 4 As shown, the method may include:

[0054] S401: The first terminal device sends a first connection request to the first data acquisition device.

[0055] Correspondingly, the first data collection device receives the first connection request sent by the first terminal device, wherein the first connection request is used to request access to the wireless network to which the first data collection device serves as an access point.

[0056] S402: The first data acquisition device obtains a first signal strength and / or a first message delay corresponding to a message signal of a first connection request.

[0057] In some embodiments, obtaining the first signal strength and / or first message delay corresponding to the first connection request includes: the first data acquisition device obtains the first signal strength and / or first message delay of the first terminal device based on the message signal of the first connection request.

[0058] It should be noted that, when the first data acquisition device receives the connection request from the first terminal device, it obtains the first signal strength and / or first message delay corresponding to the first terminal device based on the message signal carrying the connection request.

[0059] In some examples, the first data acquisition device can determine the first signal strength and / or first message delay of the first terminal device based on other message signals from the first terminal device, without any limitation herein. In this way, the first data acquisition device can obtain the first signal strength and / or first message delay based on the received message signals, thereby determining the location information of the first terminal device and judging the legitimacy of the first terminal device, thereby preventing terminal devices in other locations from accessing the wireless network.

[0060] In some embodiments, see Figure 5 , which shows a flow chart of a method for a device to access a network provided by an embodiment of the present application, applied to a first data acquisition device, such as Figure 5 As shown, the method may include S501-S508, wherein S501-S502 are the same as those in the above embodiment. Figure 4 The description of S401-S402 is similar and will not be repeated here. S503-S508 are as follows:

[0061] S503: The first data acquisition device sends a collaboration request to the second data acquisition device.

[0062] In some embodiments, the first data acquisition device sends a collaboration request to at least one second data acquisition device, and the collaboration request is used to request at least one second data acquisition device to obtain the second network strength and / or second message delay of the first terminal device to assist the first data acquisition device in determining the location information of the first terminal device.

[0063] It should be noted that the first data acquisition device can send a collaborative request to one or more second data acquisition devices, and instruct the second data acquisition device through the collaborative request to collect the second network strength and / or second message delay of the first terminal device, so as to assist the first data acquisition device in determining the location information of the first terminal device. The second data acquisition device may include but is not limited to an access point device, or a terminal device that supports a hotspot function, which is not limited here. In this way, the first network strength and / or first message delay corresponding to the first terminal device, as well as the second network strength and / or second message delay, are collected in the first data acquisition device, so that the first device can determine the location information of the first terminal device and judge the legitimacy of the first terminal device, thereby preventing terminal devices in other locations from accessing the wireless network.

[0064] S504: The second data acquisition device obtains the second signal strength and / or second message delay of the first terminal device.

[0065] In some embodiments, a second connection request is received from a first terminal device; a second signal strength and / or a second message delay of the first terminal device is obtained based on the message signal of the second connection request, and the second signal strength and / or the second message delay are used by the first data acquisition device to decide whether to allow the first terminal device to access the wireless network to which the first data acquisition device and the second data acquisition device belong as access points.

[0066] It should be noted that the second data acquisition device can obtain the second signal strength and / or second message delay of the first terminal device by receiving the second link request message signal sent by the first terminal device, or can determine the second signal strength and / or second message delay of the first terminal device through other message signals from the first terminal device, without any limitation herein. The first link request and the second link request can be sent simultaneously or at different times. In this way, the second data acquisition device can obtain the second signal strength and / or second message delay of the first terminal device and send the second signal strength and / or second message delay to the first data acquisition device so that the first data acquisition device can determine the location information of the first terminal device.

[0067] In some embodiments, the second network strength and / or the second message delay are determined by the second data collection device according to the second connection request received from the first terminal device.

[0068] It should be noted that the second data acquisition device may include one or more. When the second data acquisition device that receives the collaborative request includes multiple, the multiple second data acquisition devices each obtain the second network strength and / or second message delay of the first terminal device, and send it to the first data acquisition device, so that the second network strength and / or second message delay obtained by the multiple second data acquisition devices arrive at the first data acquisition device, which is used to assist the first data acquisition device in obtaining the location information of the first terminal device and judging the legitimacy of the first terminal device, so as to prevent terminal devices at other locations from accessing the wireless network.

[0069] S505: The second data acquisition device sends the second signal strength and / or the second message delay to the first data acquisition device.

[0070] It should be noted that, upon receiving a collaboration request from the first data acquisition device, the second data acquisition device can obtain the second signal strength and / or second message delay from the first terminal device, and send the second signal strength and / or second message delay to the first data acquisition device based on the relevant information of the first data acquisition device carried in the collaboration request, so that the first data acquisition device can determine the location information of the first terminal device and judge the legitimacy of the first terminal device to prevent terminal devices at other locations from accessing the wireless network. In some examples, the second data acquisition device may include an access point device, or a terminal device that supports hotspot functionality, which is not limited here.

[0071] S403: The first data collection device determines the location information of the first terminal device based on the collected information.

[0072] It should be noted that the collected information may include: the first signal strength and / or the first message delay, and the second signal strength and / or the second message delay. The location information of the first terminal device may be the location coordinates, or other information that can represent the location, without limitation.

[0073] In some embodiments, determining the location information of the first terminal device based on the collected information may include: the first data collection device determining the location information of the first terminal device based on the first signal strength and / or the first message delay.

[0074] In some examples, the first data acquisition device determines the angle and distance of the first terminal device relative to the first data acquisition device based on a connection request message signal sent by the first terminal device. The access controller determines the location information of the first terminal device based on the location information of the first data acquisition device (such as location coordinates or other information representing the location) and the angle and distance of the first terminal device relative to the first data acquisition device.

[0075] In some embodiments, the collected information also includes a second network strength and / or a second message delay. Determining the location information of the first terminal device based on the collected information may include: the first data collection device determining the location information of the first terminal device based on the first signal strength and / or the first message delay, and the second signal strength and / or the second message delay.

[0076] In some examples, at least one second data acquisition device determines the angle and distance of the terminal device relative to the at least one second acquisition device based on a connection request message signal sent by the first terminal device. The access controller determines the location information of the first terminal device based on the location information (such as location coordinates or other information representing the location) of the at least one second data acquisition device and the angle and distance of the first terminal device relative to the at least one second acquisition device.

[0077] In some examples, the second data acquisition device may include one or more. In the scenario of multiple second data acquisition devices, different second data acquisition devices can provide multiple sets of data collected at different locations for the access controller to determine the location information of the first terminal device. The greater the number of second data acquisition devices, the more accurate the location of the first terminal device determined by the access controller will be.

[0078] S404: The first data collection device decides whether to allow the first terminal device to access based on the relationship between the location information and the first preset area.

[0079] In some embodiments, whether to allow the first terminal device to access is decided based on the relationship between the location information and the first preset area, including: if the location information is in the first preset area, allowing the first terminal device to access the wireless network; or, if the location information is not in the first preset area, denying the first terminal device access to the wireless network.

[0080] It should be noted that, when the first data acquisition device includes an access control module, the access control module in the first data acquisition device can determine the access policy for the first terminal device based on the relative relationship between the location information of the first terminal device and the first preset area. When the location information is in the first preset area, the access control module allows the first terminal device to access the wireless network; when the location information is not in the first preset area, the access control module denies the first terminal device from accessing the wireless network. In this way, terminal devices at other locations are prevented from accessing the wireless network, which would affect the security of the devices and data in the wireless network.

[0081] In some embodiments, when the first terminal device requests to access the wireless network, the signal strength of the first data acquisition device is greater than or equal to the signal strength of at least one second data acquisition device.

[0082] In some examples, when a first terminal device sends a connection request to a data acquisition device, when the wireless network includes multiple data acquisition devices, the data acquisition device with the largest signal strength among the multiple data acquisition devices is selected as the first data acquisition device, and the other data acquisition devices are selected as the second data acquisition devices. The first data acquisition device is used to acquire and summarize data, and the second data acquisition device is used to assist the first data acquisition device in acquiring data. There can be one first data acquisition device and multiple second data acquisition devices.

[0083] S405: The first data collection device sends access decision information to the first terminal device.

[0084] In some examples, if the location information of the first terminal device is within a first preset range, the first data collection device will send a decision to allow the first terminal device access via first access decision information to the first terminal device, allowing the first terminal device to successfully access the wireless network or successfully enter the next stage of the authentication process. This allows terminal devices with legitimate location information to access the wireless network, thereby improving the security of devices and data on the wireless network.

[0085] In some examples, if the location information of the first terminal device is outside a first preset range, the first data collection device will send a second access decision message to the first terminal device, denying access to the first terminal device, thereby preventing the first terminal device from accessing the wireless network. This allows terminal devices with legitimate location information to access the wireless network, thereby improving the security of devices and data on the wireless network.

[0086] In some examples, the first data collection device may include an access point device, or a terminal device that supports a hotspot function, which is not limited here.

[0087] In some embodiments, as Figure 5 As shown, S506-S508 are the same as those in the above embodiment. Figure 4 The description of S403-S405 is the same as that in FIG, and will not be repeated here.

[0088] Need to explain, Figure 4 and Figure 5 In the related embodiments, the first data acquisition device is only used as an example to serve as an access controller responsible for deciding whether to allow the first terminal device to access.

[0089] In some examples, the first data acquisition device sends the location information of the first terminal device to other devices with access decision-making functions, such as a gateway node equipped with an access control module or other devices equipped with an access control module. Without limitation, the access control module can decide whether to allow the first terminal device to access based on the relationship between the location information and the first preset area, thereby preventing terminal devices at other locations from accessing the wireless network and reducing the security of devices and data in the wireless network.

[0090] See some examples Figure 6 , which shows a flow chart of another method for a device to access a network provided by an embodiment of the present application, such as Figure 6 As shown, taking the first data acquisition device as the master data acquisition device and the second data acquisition device as the slave data acquisition device as an example, the method may include S601-S610, wherein S601-S606 are the same as those in the above embodiment. Figure 5 The description of S501-S506 is similar and will not be repeated here. S607-S610 are as follows:

[0091] S607: The master data collection device aggregates the signal strength data or message delay data of the terminal devices collected at multiple points and sends it to the access controller;

[0092] S608: The access controller determines whether the access location of the terminal device is legal according to a preset rule;

[0093] S609: The access controller sends access decision information (allow / reject) to the master data collection device;

[0094] S610: The master data collection device sends access decision information (allow / reject) to the terminal device.

[0095] In some embodiments, the signal strength of the terminal device's WiFi signal or the message reception delay difference is collected by multiple data collection devices to calculate the terminal device's location, which is used as the terminal device's wireless network access authentication information.

[0096] In some examples, the terminal device initiates a network connection. When multiple APs are networked (using the same SSID), the AP with the strongest signal strength is selected as the master data collection device. After receiving the connection request, the master data collection device requests other APs (slave data collection devices) in the network to assist in collecting terminal location information. The master and slave data collection devices collect the signal strength or message reception delay of the request message sent by the user terminal device. The master and slave data collection devices send the collected information to the access controller. The access controller determines whether the user terminal device is within the "legal area" based on the collected data, and returns the access decision information to the data collection device (AP) to make an authentication decision (directly deny access, or require other authentication factors).

[0097] In some embodiments, the first data acquisition device is in a detection mode, and the first data acquisition device establishes a connection relationship with the second terminal device based on the connection request of the second terminal device; collects a set of location information corresponding to the second terminal device; and determines a first preset area based on the set of location information, and the first preset area indicates a legal access range corresponding to the wireless network.

[0098] It should be noted that when the first data acquisition device is in the detection mode and the first data acquisition device remains connected to the second terminal device, the first data acquisition device can further determine the legal access range of the wireless network by collecting the location information set of the second terminal device. In some examples, the second terminal device can be moved at the boundary of the legal access range of the wireless network so that the first terminal device can more efficiently collect the location information set used to determine the first preset range, and turn off the detection mode of the first data acquisition device after determining the first preset range. In this way, before the first terminal device applies to access the wireless network, the area included in the first preset range can be determined first, so that the first terminal device can access the wireless network when the location information is within the first preset range, and avoid access by terminal devices whose location information is not within the first preset range, so as to improve the security of devices and data in the wireless network.

[0099] In some embodiments, before a terminal device accesses a wireless network, a "legal area" boundary needs to be entered in advance in the access controller so that the access controller can determine whether the terminal device is within the area where access is allowed.

[0100] In some examples, the terminal device is connected to the access controller as a boundary data collection device, the wireless network access device (AP) starts the listening mode, and moves at the boundary of the target area to complete the boundary data collection of the wireless network "legal area". In some examples, see Figure 7 , which shows a scenario diagram of determining a legal area provided by an embodiment of the present application, such as Figure 7 As shown in the figure, the target wireless network coverage area includes 1 router / optical modem and 3 AP devices (including AP1, AP2, AP3). The user can move the handheld terminal device along the path shown by the arrow at the boundary of the target physical area, so that the AP completes the "legal area" boundary data collection.

[0101] In some embodiments, the first data acquisition device obtains the coverage range of the wireless network and the second preset area; the overlapping area of ​​the coverage range of the wireless network and the second preset area is used as the first preset area, and the second preset area is the target physical area corresponding to the wireless network.

[0102] It should be noted that the first data acquisition device can obtain the coverage range of the wireless network and the second preset area, and use the overlapping area of ​​the two as the first preset area, wherein the coverage range of the wireless network can include the collection of areas covered by the signals of all access points in the wireless network, and the second preset area is the target physical area defined for the wireless network. In some examples, the target physical area can be a floor plan, floor map, etc. of a building, which is not limited here. In this way, before the first terminal device applies to access the wireless network, the area included in the first preset range can be determined first, so that the first terminal device can access the wireless network when its location information is within the first preset range, and avoid access by terminal devices whose location information is not within the first preset range, so as to improve the security of devices and data in the wireless network.

[0103] Exemplarily, the target physical area may be input by a user, or may be obtained by the first data acquisition device from other devices (such as smart home devices such as a sweeping robot), without limitation.

[0104] In some embodiments, see Figure 8 , which shows another scenario schematic diagram of determining a legal area provided by an embodiment of the present application, such as Figure 8 As shown, the target wireless network coverage area includes one router / optical modem and three AP devices (including AP1, AP2, and AP3). When determining the legal area corresponding to the wireless network, the location coordinates of the boundary of the user's residential floor plan are first determined, for example, (12, 12, 0, 3), (20, 5, 3, 3), (10, 0, 10, 25), (8, 3, 15, 15), (5, 10, 25, 12), and (8, 25, 0, 3). The area indicated by the user's residential floor plan is determined based on the location coordinates. The signal coverage range is determined based on the AP deployment location. The overlapping area of ​​the area indicated by the user's residential floor plan and the signal coverage range is determined as the boundary of the "legal area" of the wireless network. For example, the location coordinates of the boundary of the residential floor plan can be the location coordinates of multiple key locations.

[0105] In some examples, terminal devices with hotspot functionality can be used as data collection devices. The scale of data collection devices can be flexibly expanded through APs or terminal devices that support hotspot functionality and have passed certification. In other words, user terminal devices that are connected to the wireless network can act as data collection devices to collect the locations of other terminal devices.

[0106] In the embodiment of the present application, the physical location information of the user terminal device accessed is collected by the AP as a network authentication factor. The AP actively collects the location information, and the terminal device has no adaptation requirements. The location information cannot be forged, which can effectively prevent freeloading. The user enters the "legal authentication" boundary area to determine the area information that can legally access the network. The area can be customized according to the user's residential unit, effectively improving the accuracy of the legal area boundary. The "legal authentication" area can be flexibly expanded by deploying APs or using terminal devices that have already accessed the network. The authentication area can be expanded at zero cost, and the accuracy of the user terminal device location data can be increased by adding more data collection devices. This prevents other terminal devices that are not within the allowed access range from accessing the wireless network, ensuring that the communication performance of the wireless network is relatively stable, thereby improving the security of devices and data in the wireless network.

[0107] Based on the same inventive concept as the above embodiments, see Figure 9 , which shows a schematic diagram of the structure of a data acquisition device provided by an embodiment of the present application. Figure 9 As shown, the data acquisition device is used to implement any one of the methods for device accessing a network in the aforementioned embodiments. Specifically, the data acquisition device may include:

[0108] Receiving unit 901 is configured to receive, by a first data acquisition device, a first connection request sent by a first terminal device, the first connection request being used to request access to a wireless network to which the first data acquisition device serves as an access point;

[0109] The processing unit 902 is configured to obtain a first signal strength and / or a first message delay corresponding to the first connection request;

[0110] The processing unit 902 is further configured to determine the location information of the first terminal device based on the collected information, where the collected information includes the first network strength and / or the first message delay to determine the location information of the first terminal device;

[0111] The processing unit 902 is further configured to decide whether to allow the first terminal device to access based on the relationship between the location information and the first preset area.

[0112] In some embodiments, the processing unit 902 is specifically configured as a first data acquisition device to obtain a first signal strength and / or a first message delay of the first terminal device according to a message signal of the first connection request.

[0113] In some embodiments, the data acquisition device also includes a sending unit 903, which is configured as a first data acquisition device to send a collaboration request to at least one second data acquisition device, and the collaboration request is used to request at least one second data acquisition device to obtain the second network strength and / or second message delay of the first terminal device; and receive the second network strength and / or second message delay sent by at least one second data acquisition device.

[0114] In some embodiments, the second network strength and / or the second message delay are determined by the second data collection device according to the second connection request received from the first terminal device.

[0115] In some embodiments, the collected information also includes a second network strength and / or a second message delay, and the processing unit 902 is specifically configured as a first data collection device to determine the location information of the first terminal device based on the first signal strength and / or the first message delay, and the second signal strength and / or the second message delay.

[0116] In some embodiments, the sending unit 903 is further configured so that the first data acquisition device sends the location information of the first terminal device to the access control module; and the access control module decides whether to allow the first terminal device to access based on the relationship between the location information and the first preset area.

[0117] In some embodiments, the processing unit 902 is specifically configured to allow the first terminal device to access the wireless network if the location information is in the first preset area; or to deny the first terminal device from accessing the wireless network if the location information is not in the first preset area.

[0118] In some embodiments, the sending unit 903 is specifically configured to send first access decision information to the first terminal device if the location information is in a first preset area, and the first access decision information is used to allow the first terminal device to access the wireless network.

[0119] In some embodiments, the sending unit 903 is specifically configured to send second access decision information to the first terminal device if the location information is not in the first preset area, and the second access decision information is used to deny the first terminal device access to the wireless network.

[0120] In some embodiments, when the first terminal device requests to access the wireless network, the signal strength of the first data acquisition device is greater than or equal to the signal strength of at least one second data acquisition device.

[0121] In some embodiments, the first data acquisition device is in a detection mode, and the processing unit 902 is further configured so that the first data acquisition device establishes a connection relationship with the second terminal device based on a connection request from the second terminal device; collects a set of location information corresponding to the second terminal device; and determines a first preset area based on the set of location information, where the first preset area indicates a legal access range corresponding to the wireless network.

[0122] In some embodiments, the processing unit 902 is further configured to obtain the coverage range of the wireless network and the second preset area as the first data acquisition device; the overlapping area of ​​the coverage range of the wireless network and the second preset area is used as the first preset area, and the second preset area is the target physical area corresponding to the wireless network.

[0123] In some embodiments, the receiving unit 901 is further configured to receive a collaboration request from the first data acquisition device, where the collaboration request is used to instruct the second data acquisition device to obtain the second signal strength and / or second message delay of the first terminal device.

[0124] In some embodiments, the sending unit 903 is further configured to send the second signal strength and / or second message delay of the first terminal device to the first data acquisition device based on the collaborative request. The second signal strength and / or second message delay are used by the first data acquisition device to decide whether to allow the first terminal device to access the wireless network to which the first data acquisition device and the second data acquisition device belong as access points.

[0125] In some embodiments, the receiving unit 901 is further configured to receive a second connection request from the first terminal device; and obtain a second signal strength and / or a second message delay of the first terminal device according to a message signal of the second connection request.

[0126] It is understood that in this embodiment, a "unit" can be a portion of a circuit, a portion of a processor, a portion of a program or software, etc., and can also be a module or a non-modular system. Furthermore, the various components in this embodiment can be integrated into a single processing unit, or each unit can exist physically separately, or two or more units can be integrated into a single unit. The aforementioned integrated units can be implemented in the form of hardware or software functional modules.

[0127] If the integrated unit is implemented in the form of a software functional module and is not sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this embodiment, or the part that contributes to the existing technology, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for causing a computer device (which can be a personal computer, server, or network device, etc.) or a processor to perform all or part of the steps of the method provided in this embodiment. The aforementioned storage medium includes various media that can store program code, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0128] Therefore, this embodiment provides a computer storage medium storing a paging program. When the paging program is executed by at least one processor, the steps of any one of the methods in the above embodiments are implemented.

[0129] Based on the above data acquisition equipment and computer storage media, see Figure 10 , which shows a hardware structure diagram of a data acquisition device provided by an embodiment of the present application. Figure 10 As shown, it may include: a processor 1001, a memory 1002 and a communication interface 1003; each component is coupled together via a communication line 1004. It is understood that the communication line 1004 is used to achieve connection and communication between these components. In addition to the data bus, the communication line 1004 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity, Figure 10 Various buses are labeled as communication lines 1004.

[0130] Processor 1001 is configured to, when running the computer program, execute:

[0131] The first data acquisition device receives a first connection request sent by the first terminal device, where the first connection request is used to request access to the wireless network to which the first data acquisition device serves as an access point; obtains a first signal strength and / or a first message delay corresponding to the first connection request; determines the location information of the first terminal device based on the acquired information, where the acquired information includes the first network strength and / or the first message delay to determine the location information of the first terminal device; and decides whether to allow the first terminal device to access based on a relationship between the location information and a first preset area.

[0132] In some embodiments, the processor 1001 is configured to execute the steps of any one of the methods described in the foregoing embodiments when running the computer program.

[0133] The memory 1002 is used to store computer programs that can be run on the processor 1001 .

[0134] The communication interface 1003 is used to receive and send signals when sending and receiving information with other external network elements.

[0135] It is understood that the memory 1002 in the embodiment of the present application can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct RAM bus random access memory (DRRAM). The memory 1002 of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0136] The processor 1001 may be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above method can be completed by hardware integrated logic circuits or software instructions in the processor 1001. The processor 1001 may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. The methods, steps, and logic block diagrams disclosed in the embodiments of this application can be implemented or executed. The general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in the embodiments of this application can be directly implemented and executed by a hardware decoding processor, or by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium mature in the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, etc. The storage medium is located in the memory 1002 , and the processor 1001 reads the information in the memory 1002 and completes the steps of the above method in combination with its hardware.

[0137] It is understood that the embodiments described herein may be implemented using hardware, software, firmware, middleware, microcode, or a combination thereof. For hardware implementation, the processing unit may be implemented in one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), general-purpose processors, controllers, microcontrollers, microprocessors, other electronic units for performing the functions described herein, or a combination thereof.

[0138] For software implementation, the techniques described herein can be implemented by modules (e.g., procedures, functions, etc.) that perform the functions described herein. The software code can be stored in a memory and executed by a processor. The memory can be implemented in the processor or external to the processor.

[0139] Optionally, as another embodiment, the processor 1001 is further configured to execute the steps of the method in any one of the aforementioned embodiments when running the computer program.

[0140] Optionally, the computer-executable instructions in this application may also be referred to as application code, which is not specifically limited in this application.

[0141] In a specific implementation, as an embodiment, the processor 1001 may include one or more CPUs, such as Figure 10 CPU0 and CPU1 in.

[0142] It should be noted that Figure 10 This is merely an example of a data acquisition device and does not limit the specific structure of the data acquisition device. For example, the terminal device or the network device may further include other functional modules.

[0143] An embodiment of the present application provides a computer program product comprising instructions, which, when executed on a computer, enables the computer to execute any one of the methods provided in the aforementioned embodiments.

[0144] An embodiment of the present application provides a chip system, which may include a processing circuit and a storage medium, wherein the storage medium stores computer program instructions; when the computer program instructions are executed by the processing circuit, the method provided in any one of the aforementioned embodiments is implemented.

[0145] It should be noted that, in this application, the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or apparatus comprising a series of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or apparatus comprising the element.

[0146] The serial numbers of the above embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0147] The methods disclosed in the several method embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments.

[0148] The features disclosed in the several product embodiments provided in this application can be arbitrarily combined without conflict to obtain new product embodiments.

[0149] The features disclosed in the several method or device embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments or device embodiments.

[0150] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A method for a device to access a network, characterized in that: Applied to a first data acquisition device, the method comprises: Receiving a first connection request sent by a first terminal device, wherein the first connection request is used to request access to a wireless network to which the first data acquisition device belongs as an access point; Obtaining a first signal strength and / or a first message delay corresponding to the first connection request; Determine the location information of the first terminal device according to the collected information, where the collected information includes determining the location information of the first terminal device based on the first network strength and / or the first message delay; Whether to allow the first terminal device to access is decided based on the relationship between the location information and the first preset area.

2. The method according to claim 1, characterized in that The obtaining the first signal strength and / or the first message delay corresponding to the first connection request includes: Obtain the first signal strength and / or the first message delay of the first terminal device according to the message signal of the first connection request.

3. The method according to claim 1, characterized in that The method further comprises: Sending a collaboration request to at least one second data acquisition device, wherein the collaboration request is used to request the at least one second data acquisition device to obtain a second network strength and / or a second message delay of the first terminal device; Receive the second network strength and / or the second message delay sent by the at least one second data acquisition device.

4. The method according to claim 3, characterized in that The second network strength and / or the second message delay are determined by the second data acquisition device according to the second connection request received from the first terminal device.

5. The method according to claim 3 or 4, characterized in that The collected information further includes the second network strength and / or the second message delay, and determining the location information of the first terminal device according to the collected information includes: The location information of the first terminal device is determined based on the first signal strength and / or the first message delay, and the second signal strength and / or the second message delay.

6. The method according to any one of claims 1 to 5, characterized in that The determining whether to allow access by the first terminal device based on a relationship between the location information and the first preset area includes: If the location information is within a first preset area, allowing the first terminal device to access the wireless network; or, If the location information is not within the first preset area, the first terminal device is denied access to the wireless network.

7. The method according to any one of claims 1 to 6, characterized in that The method further comprises: If the location information is in a first preset area, first access decision information is sent to the first terminal device, where the first access decision information is used to allow the first terminal device to access the wireless network.

8. The method according to any one of claims 1 to 6, characterized in that The method further comprises: If the location information is not within the first preset area, second access decision information is sent to the first terminal device, where the second access decision information is used to deny the first terminal device access to the wireless network.

9. The method according to claim 3, characterized in that When the first terminal device requests to access the wireless network, the signal strength of the first data acquisition device is greater than or equal to the signal strength of the at least one second data acquisition device.

10. The method according to any one of claims 1 to 8, characterized in that The first data acquisition device is in a detection mode, and the method further includes: Establishing a connection relationship with the second terminal device based on the connection request of the second terminal device; Collecting a set of location information corresponding to the second terminal device; The first preset area is determined according to the location information set, where the first preset area indicates a legal access range corresponding to the wireless network.

11. The method according to any one of claims 1 to 9, characterized in that The method further comprises: Acquire the coverage of the wireless network and a second preset area; An overlapping area between the coverage range of the wireless network and the second preset area is used as the first preset area, and the second preset area is a target physical area corresponding to the wireless network.

12. A method for a device to access a network, characterized in that: Applied to a second data acquisition device, the method includes: Receiving a collaboration request from the first data acquisition device, wherein the collaboration request is used to instruct the second data acquisition device to obtain a second signal strength and / or a second message delay of the first terminal device; Based on the collaborative request, the second signal strength and / or the second message delay of the first terminal device are sent to the first data acquisition device, and the second signal strength and / or the second message delay are used by the first data acquisition device to decide whether to allow the first terminal device to access the wireless network to which the first data acquisition device and the second data acquisition device belong as access points.

13. The method according to claim 12, characterized in that The method further comprises: receiving a second connection request from the first terminal device; The second signal strength and / or the second message delay of the first terminal device are obtained according to the message signal of the second connection request.

14. A data acquisition device, characterized in that: The data acquisition device includes: Transceiver, used for sending and receiving signals; a memory for storing computer program instructions; A processor, configured to execute the computer program instructions to support the data acquisition to implement the method as described in any one of claims 1-11 or 12-13.

15. A network system, characterized in that: The network system includes a first data acquisition device and a second data acquisition device, and the network system is used to implement the method according to any one of claims 1-11 or 12-13.

16. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer program instructions, which, when executed by a processing circuit, implement the method according to any one of claims 1 to 11 or 12 to 13.

17. A computer program product comprising instructions, characterized in that When the computer program product is run on a computer, the computer is caused to perform the method according to any one of claims 1 to 11 or 12 to 13.

18. A chip system, characterized in that: The chip system includes a processing circuit and a storage medium, wherein the storage medium stores computer program instructions; when the computer program instructions are executed by the processing circuit, the method according to any one of claims 1-11 or 12-13 is implemented.

Images