Wireless network connection method and device, electronic equipment and storage medium

Abstract

The invention provides a wireless network connection method and device, electronic equipment and a storage medium. The method comprises the following steps: receiving a beacon frame sent by a wireless access point, wherein the beacon frame comprises an encrypted message and a key material; determining a target key corresponding to a key material from an intelligent card of the terminal equipment according to the beacon frame; performing decryption processing on the encrypted message through the target key to obtain related information of a wireless network of the wireless access point; and sending an encrypted authentication request to the wireless access point according to the related information, the authentication request being used for establishing wireless network connection between the terminal device and the wireless access point. According to the scheme, after the terminal device comprising the smart card decrypts the encrypted message, the related information of the wireless network can be obtained, and the related information of the wireless network is prevented from being open to all devices, so that the security of network connection is improved.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a wireless network connection method, apparatus, electronic device, and storage medium. Background Technology

[0002] Wireless network technology allows terminal devices to transmit data and communicate via radio waves, enabling them to connect to the internet or other network resources without a physical connection (such as a network cable). Wireless network technology is widely used in various types of terminal devices, such as smartphones, tablets, laptops, and smart home devices. It greatly improves the convenience and flexibility of network connectivity.

[0003] In practical applications, the terminal device establishes a connection with the wireless access point, and the wireless access point assigns an Internet Protocol (IP) address to the terminal device that has established a connection, so that the terminal device can connect to the Internet or other network resources.

[0004] However, the process of establishing a connection between a terminal device and a wireless access point includes the transmission of management frames, which can lead to information leakage and low network connection security. Summary of the Invention

[0005] This application provides a wireless network connection method, apparatus, electronic device, and storage medium to improve the security of network connections.

[0006] In a first aspect, this application provides a method for connecting a wireless network, comprising: receiving a beacon frame sent by a wireless access point, the beacon frame including an encrypted message and key material; determining a target key corresponding to the key material from a smart card of a terminal device based on the beacon frame; decrypting the encrypted message using the target key to obtain relevant information about the wireless network of the wireless access point; and sending an encrypted authentication request to the wireless access point based on the relevant information, the authentication request being used to establish a wireless network connection between the terminal device and the wireless access point.

[0007] In one possible implementation, determining the target key corresponding to key material from the smart card of the terminal device includes: determining indication information in the key material, the indication information including a first indication or a second indication; obtaining the target key stored in the smart card according to the first indication; or obtaining the target key generated by the smart card according to the second indication.

[0008] In one possible implementation, obtaining the target key stored in the smart card includes: determining the address information of the wireless access point from the key material; sending the first instruction and the address information to the smart card via a communication channel, so that the smart card determines the target key based on the address information and key-value pairs stored in the smart card, wherein the target key is stored in the smart card and the key-value pairs have the address information as the key and the key as the value; and obtaining the target key from the smart card via the communication channel.

[0009] In one possible implementation, obtaining the target key generated by the smart card includes: determining key generation information from the key material; sending the second instruction and the key generation information to the smart card via a communication channel, so that the smart card generates the target key according to the key generation information and the key generation algorithm stored in the smart card; and obtaining the target key from the smart card via the communication channel.

[0010] In one possible implementation, sending an encrypted authentication request to the wireless access point based on the relevant information includes: sending the relevant information to the smart card so that the smart card encrypts the relevant information to obtain authentication information, the authentication information being used by the wireless access point to authenticate the terminal device; obtaining the authentication information from the smart card; determining an authentication request based on the authentication information; and sending the authentication request to the wireless access point.

[0011] In one possible implementation, the method further includes: receiving a management frame sent by the wireless access point, the management frame including encrypted information; sending the encrypted information to the smart card so that the smart card decrypts the encrypted information to obtain decrypted content; and obtaining the decrypted content from the smart card through a communication channel.

[0012] In one possible implementation, before receiving a beacon frame sent by a wireless access point, the method further includes: determining a target access point identifier for the wireless access point; determining a correspondence between the access point identifier and a smart card identifier; determining a target smart card identifier based on the target access point identifier and the correspondence; and installing a smart card corresponding to the target smart card identifier in the terminal device.

[0013] Secondly, this application provides a wireless network connection device, comprising: a receiving module for receiving a beacon frame sent by a wireless access point, the beacon frame including an encrypted message and key material; a determining module for determining a target key corresponding to the key material from a smart card of a terminal device based on the beacon frame; a decryption module for decrypting the encrypted message using the target key to obtain relevant information about the wireless network of the wireless access point; and a sending module for sending an encrypted authentication request to the wireless access point based on the relevant information, the authentication request being used to establish a wireless network connection between the terminal device and the wireless access point.

[0014] In one possible implementation, the determining module is specifically configured to determine indication information in the key material, the indication information including a first indication or a second indication; the determining module is further configured to obtain the target key stored in the smart card according to the first indication; or, the determining module is further configured to obtain the target key generated by the smart card according to the second indication.

[0015] In one possible implementation, the determining module is specifically configured to determine the address information of the wireless access point from the key material; the determining module is further configured to send the first instruction and the address information to the smart card through a communication channel, so that the smart card determines the target key based on the address information and key-value pairs stored in the smart card, the target key being stored in the smart card, the key-value pairs having the address information as the key and the key as the value; the determining module is further configured to obtain the target key from the smart card through the communication channel.

[0016] In one possible implementation, the determining module is specifically configured to determine key generation information from the key material; the determining module is further configured to send the second instruction and the key generation information to the smart card through a communication channel, so that the smart card generates the target key according to the key generation information and the key generation algorithm stored in the smart card; the determining module is further configured to obtain the target key from the smart card through the communication channel.

[0017] In one possible implementation, the device further includes: an authentication module, configured to send the relevant information to the smart card, so that the smart card encrypts the relevant information to obtain authentication information, the authentication information being used by the wireless access point to authenticate the terminal device; the authentication module is configured to obtain the authentication information from the smart card, determine an authentication request based on the authentication information, and send the authentication request to the wireless access point.

[0018] In one possible implementation, the device further includes: a connection module for receiving a management frame sent by the wireless access point, the management frame including encrypted information; the connection module is further configured to send the encrypted information to the smart card so that the smart card decrypts the encrypted information to obtain decrypted content; the connection module is further configured to obtain the decrypted content from the smart card through a communication channel.

[0019] In one possible implementation, the apparatus further includes: an installation module for determining a target access point identifier of the wireless access point; the installation module for determining a correspondence between the access point identifier and a smart card identifier; the installation module for determining a target smart card identifier based on the target access point identifier and the correspondence; and the installation module for installing a smart card corresponding to the target smart card identifier in the terminal device.

[0020] Thirdly, this application provides an electronic device, including: a processor, and a memory communicatively connected to the processor; the memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement the method described in any one of the first aspects.

[0021] Fourthly, this application provides a computer-readable storage medium storing computer-executable instructions, which are executed by a processor as described in any one of the first aspects.

[0022] Fifthly, this application provides a computer program product, including a computer program, which is executed by a processor as described in any one of the first aspects.

[0023] This application provides a wireless network connection method, apparatus, electronic device, and storage medium. The method includes: receiving a beacon frame sent by a wireless access point, the beacon frame including an encrypted message and key material; determining a target key corresponding to the key material from a smart card of a terminal device based on the beacon frame; decrypting the encrypted message using the target key to obtain wireless network information of the wireless access point; and sending an encrypted authentication request to the wireless access point based on the relevant information, the authentication request being used to establish a wireless network connection between the terminal device and the wireless access point. This solution, by decrypting the encrypted message using a terminal device containing a smart card, can obtain relevant wireless network information, preventing the wireless network information from being disclosed to all devices, thereby improving network connection security. Attached Figure Description

[0024] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0025] Figure 1 This is a schematic diagram illustrating an application scenario of a wireless network connection method provided in an embodiment of this application.

[0026] Figure 2 A flowchart illustrating a wireless network connection method provided in an embodiment of this application;

[0027] Figure 3 A schematic diagram of a media access control frame provided in an embodiment of this application;

[0028] Figure 4 A flowchart illustrating a wireless network connection method provided in an embodiment of this application;

[0029] Figure 5 A schematic diagram of the software architecture of the terminal device provided in the embodiments of this application;

[0030] Figure 6 A schematic diagram of the authentication process provided for an embodiment of this application;

[0031] Figure 7 This is a schematic diagram of the structure of a wireless network connection device provided in an embodiment of this application;

[0032] Figure 8 This is a schematic diagram of the structure of a wireless network connection device provided in an embodiment of this application;

[0033] Figure 9 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application.

[0034] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0035] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0036] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, use, processing, transmission, provision, disclosure, and application of the relevant data all comply with the relevant laws, regulations, and standards of the relevant countries and regions, have taken necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation portals for users to choose to authorize or refuse.

[0037] It should be noted that the wireless network connection method, device, electronic device and storage medium of this application can be used in the field of communication technology, or in any field other than communication technology. The application field of the wireless network connection method, device, electronic device and storage medium of this application is not limited.

[0038] The terminal equipment in this application embodiment can also be referred to as: user equipment (UE), mobile station (MS), mobile terminal (MT), access terminal, user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent, or user device, etc.

[0039] A terminal device can be any device that provides voice / data connectivity to a user, such as a handheld device or in-vehicle device with wireless connectivity. Examples of current terminal devices include: mobile phones, tablets, laptops, PDAs, mobile internet devices, wearable devices, virtual reality (VR) devices, augmented reality (AR) devices, wireless terminals in industrial control, wireless terminals in autonomous driving, wireless terminals in smart grids, wireless terminals in transportation safety, wireless terminals in smart cities, wireless terminals in smart homes, cellular phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants, handheld devices with wireless communication capabilities, computing devices or other processing devices connected to a wireless modem, in-vehicle devices, wearable devices, terminal devices in 5G networks, or terminal devices in future evolved public land mobile networks (PLMNs), etc., and this application is not limited to these categories.

[0040] Figure 1 This illustration shows an application scenario of a wireless network connection method provided in this application. The scenario is as follows: a terminal device connects to a wireless access point, and the wireless access point establishes a connection with a network device. Uplink data from the terminal device is transmitted to the network device through the wireless access point, and downlink data from the network device is transmitted to the terminal device through the wireless access point, thereby establishing a connection between the terminal device and the Internet.

[0041] In practical applications, the wireless access point broadcasts its relevant information, which can be received by terminal devices within the signal coverage area of ​​the wireless access point. The terminal device then sends an authentication request to the wireless access point based on the relevant information. If the wireless access point approves the authentication request, the terminal device establishes a connection with the wireless access point.

[0042] For business scenarios with high security requirements, wireless access points are required to establish connections only with terminal devices within the same business scenario. However, if a wireless access point broadcasts its own information, and other terminal devices receive this information, it will lead to low network connection security for the wireless access point.

[0043] The wireless network connection method provided in this application is intended to solve the above-mentioned technical problems of the prior art.

[0044] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0045] Figure 2 This is a flowchart illustrating a wireless network connection method provided in an embodiment of this application. The method includes the following steps:

[0046] S201. Receive a beacon frame sent by a wireless access point. The beacon frame includes an encrypted message and key material.

[0047] As an example, the execution subject of this embodiment can be a wireless network connection device, which can be implemented in various ways. For example, it can be program software, or a medium storing relevant computer programs, such as a USB flash drive; or, the device can also be a physical device that integrates or installs relevant computer programs, such as a chip, a smart terminal, a computer, a server, etc.

[0048] The wireless access point (AP) periodically broadcasts beacon frames, which are used to announce the existence of the wireless access point and to announce relevant information about the wireless access point.

[0049] For example, the encrypted message in the beacon frame is obtained by encrypting the smart card in the wireless access point.

[0050] With the example scenario, the encrypted message is in encrypted form, while the key material is in plaintext form. Terminal devices within the coverage area of ​​the wireless access point can receive beacon frames, but only terminal devices in the service scenario corresponding to the wireless access point can decrypt the encrypted message to obtain relevant information about the wireless network, thereby improving the security of the network connection.

[0051] Optionally, beacon frames can be transmitted via Media Access Control (MAC) frames. MAC frames ensure reliable data transmission and control within the network.

[0052] Below, in conjunction with Figure 3 Explanation of media access control frames.

[0053] Figure 3 This is a schematic diagram of a media access control frame provided in an embodiment of this application. Figure 3 As shown, a Media Access Control (MAC) frame includes a MAC header and a MAC body. The MAC body includes a beacon header and a beacon body, with the beacon body containing plaintext key material and encrypted message. The beacon header supports network discovery, synchronization, and management, while the MAC header contains address and frame type information. Only terminal devices with decryption capabilities can access the information in the encrypted message.

[0054] One feasible implementation includes, before receiving the beacon frame sent by the wireless access point, the following steps: determining the target access point identifier of the wireless access point; determining the correspondence between the access point identifier and the smart card identifier; determining the target smart card identifier based on the target access point identifier and the correspondence; and installing the smart card corresponding to the target smart card identifier in the terminal device.

[0055] Optionally, the corresponding relationship can be determined based on the business scenario.

[0056] With a scenario example, this describes a scenario where multiple smart home devices in a home are managed through a single wireless access point. A corresponding relationship exists between each smart home device and this access point. Smart home devices in other homes cannot connect to this access point. By generating encrypted messages, other smart home devices are prevented from obtaining the access point's information, thus enhancing security.

[0057] For example, the same smart card is installed on terminal devices and wireless access points that have a corresponding relationship, thereby ensuring that the data transmitted between terminal devices and wireless access points with a corresponding relationship can be correctly decrypted, and information is hidden for terminal devices that do not belong to the same business scenario to avoid information leakage.

[0058] In this feasible implementation, by installing the same smart card on the corresponding terminal devices and wireless access points, information leakage from the wireless access points is avoided, thereby improving security.

[0059] S202. Based on the beacon frame, determine the target key corresponding to the key material from the smart card of the terminal device.

[0060] The smart card contains an embedded integrated circuit chip for storing and processing data.

[0061] With the example of the scenario, the key material is generated by a smart card. The key material is used to generate the key. The generation process can only be achieved through a smart card, and the target key can only be generated through the smart card that generates the key material.

[0062] Optionally, the smart card is pre-configured with a key or a dynamic key generation algorithm, and the same smart card is configured with the same key or the same dynamic key generation algorithm.

[0063] It is understandable that terminal devices equipped with the same smart card as the wireless access point can generate target keys corresponding to key materials, thereby improving security.

[0064] For example, the terminal device is only responsible for the transparent transmission of encrypted messages and does not participate in the specific authentication logic or content processing. This allows the platform to be applied to different industries and application scenarios without the need for customized development. The authentication logic is entirely implemented by the smart card. Different businesses can customize the smart card's authentication algorithm and logic according to their own needs, and the terminal device does not need to be aware of these changes. The terminal device only needs to implement the message transparent transmission function and does not need to handle complex authentication logic and security mechanisms. This simplifies the design and implementation of the terminal device and reduces development and maintenance costs. Different smart cards can implement different authentication algorithms and strategies to meet the needs of different businesses. The terminal device can support multiple types of smart cards and authentication mechanisms without major modifications.

[0065] S203. Decrypt the encrypted message using the target key to obtain relevant information about the wireless network of the wireless access point.

[0066] The relevant information includes, but is not limited to, at least one of the following: network parameters, network name, or security settings.

[0067] As illustrated by the scenario example, in related technologies, the relevant information is publicly available to all terminal devices within the signal coverage area of ​​the wireless access point. In this application, for terminal devices that cannot obtain the target key for decryption, the relevant information cannot be obtained from the encrypted message, thereby achieving confidentiality of the relevant information and improving security.

[0068] S204. Based on the relevant information, send an encrypted authentication request to the wireless access point. The authentication request is used to establish a wireless network connection between the terminal device and the wireless access point.

[0069] The authentication request is used to request the wireless access point to authenticate the terminal device. After successful authentication, the terminal device can establish a connection with the wireless access point.

[0070] Optionally, the authentication request may include a verification password, which the wireless access point uses to authenticate the device by comparing it with the standard password.

[0071] The wireless network connection method provided in this application includes: receiving a beacon frame sent by a wireless access point, the beacon frame including an encrypted message and key material; determining a target key corresponding to the key material from the smart card of a terminal device based on the beacon frame; decrypting the encrypted message using the target key to obtain relevant information about the wireless network of the wireless access point; and sending an encrypted authentication request to the wireless access point based on the relevant information, the authentication request being used to establish a wireless network connection between the terminal device and the wireless access point. This solution, by having the terminal device containing the smart card decrypt the encrypted message, can obtain relevant information about the wireless network, preventing the wireless network information from being disclosed to all devices, thereby improving the security of the network connection.

[0072] Based on any of the above embodiments, the following, in conjunction with Figure 4 This section provides a detailed explanation of the process of connecting to a wireless network.

[0073] Figure 4 This is a flowchart illustrating a wireless network connection method provided in an embodiment of this application. Figure 4 As shown, the method includes:

[0074] S401. Receive a beacon frame sent by a wireless access point. The beacon frame includes encrypted messages and key materials.

[0075] It should be noted that the execution process of S401 is the same as that of S201, and will not be repeated here.

[0076] S402. Determine the instruction information in the key material, the instruction information including a first instruction or a second instruction.

[0077] The smart card has storage and processing functions; it can store keys and generate keys. The first instruction instructs the smart card to retrieve the stored target key, and the second instruction instructs the smart card to generate the target key.

[0078] For example, the target key can be a key pre-configured on the smart card or a key historically generated on the smart card.

[0079] If the instruction is the first instruction, then execute S403.

[0080] If the instruction is the second instruction, then execute S404.

[0081] S403. According to the first instruction, obtain the target key stored in the smart card.

[0082] With the example of the scenario, the first instruction is used to instruct the terminal device to decrypt the encrypted message according to the stored target key.

[0083] One feasible implementation method is to obtain the target key stored in the smart card by: determining the address information of the wireless access point from the key material; sending a first instruction and the address information to the smart card through a communication channel, so that the smart card determines the target key based on the address information and the key-value pairs stored in the smart card, wherein the target key is stored in the smart card and the key-value pairs are with the address information as the key and the key as the value; and obtaining the target key from the smart card through the communication channel.

[0084] Below, in conjunction with Figure 5 The software architecture of the terminal device is described.

[0085] Figure 5 This is a schematic diagram of the software architecture of the terminal device provided in an embodiment of this application. Figure 5 As shown, the software architecture includes a hardware layer, a kernel layer, and an application layer. The hardware layer implements the physical layer technologies of the wireless network protocol, such as channel coding, modulation, or Multiple Input Multiple Output (MIMO) technologies. The kernel layer implements message processing, including the reception and transmission of management frames and data frames. The application layer implements wireless network configuration and wireless network access process management. The hardware layer and kernel layer are invisible to the product. The communication channel is used to transmit key materials and keys between the application layer and the kernel layer.

[0086] It is understandable that communication channels can achieve decoupling without affecting the functionality of the original modules, thus reducing the difficulty of development and maintenance.

[0087] For example, the smart card management module enables communication between the host program and the smart card, providing interface functions such as encryption key acquisition, authentication message acquisition, and authentication message authentication. The terminal access authentication module implements the authentication process between the terminal device and the wireless access point, including at least authentication request, authentication response, and authentication confirmation. The management frame encryption / decryption module implements encryption and decryption of management frames. The key management module caches the key for each wireless access point's management frames.

[0088] As illustrated by the scenario example, a terminal device can identify multiple wireless access points. Since the interval between beacon frames from these access points is short, retrieving the key from the smart card every time a beacon frame is received would significantly consume the terminal device's performance. This problem can be avoided by using a key buffer; this application uses a hash table to buffer the keys. Because the address of each wireless access point is unique, using the access point's address information as the key and the corresponding key from the terminal device as the value to form a key-value pair can accurately store the key corresponding to each wireless access point.

[0089] Optionally, key-value pairs can be managed through an aging mechanism.

[0090] With scenario examples, an aging mechanism is used to periodically delete key-value pairs that have not been used for a long time, key-value pairs corresponding to user-specified wireless access points, or key-value pairs corresponding to non-existent wireless access points. This prevents key-value pairs from occupying too much space and improves the speed of querying key-value pairs.

[0091] In this feasible implementation, the target key can be quickly obtained by querying the key-value pairs in the smart card, thereby improving the connection efficiency of the wireless network.

[0092] S404. Obtain the target key generated by the smart card according to the second instruction.

[0093] With the example scenario, if the wireless access point updates the key, it sends a second instruction to instruct the terminal device to generate a target key, which is a key that has not been stored in the smart card.

[0094] One feasible implementation method is to obtain the target key generated by the smart card by: determining the key generation information from the key material; sending a second instruction and the key generation information to the smart card through a communication channel, so that the smart card generates the target key according to the key generation information and the key generation algorithm stored in the smart card; and obtaining the target key from the smart card through the communication channel.

[0095] The generated information can be the generation rules for the target key, such as key type and key length.

[0096] With the example of a scenario, the smart card includes a key generator and a key generation algorithm. Until the second instruction is received, the smart card generates the target key based on the key generation information, the key generator, and the key generation algorithm.

[0097] Optionally, the key-value pair can be updated based on the generated target key.

[0098] In this feasible implementation, security is improved by generating and using a new key to avoid the risk of the original key being leaked.

[0099] S405. Decrypt the encrypted message using the target key to obtain relevant information about the wireless network of the wireless access point.

[0100] It should be noted that the execution process of S405 is the same as that of S203, and will not be repeated here.

[0101] S406. Send relevant information to the smart card so that the smart card can encrypt the relevant information to obtain authentication information. The authentication information is used by the wireless access point to authenticate the terminal device.

[0102] The authentication information may include at least one of the following: device name, software version, wireless standard, frequency band support, or password.

[0103] With the example scenario, the wireless access point decrypts the authentication information using its smart card to obtain the content of the authentication information.

[0104] S407. Obtain authentication information from the smart card, determine the authentication request based on the authentication information, and send the authentication request to the wireless access point.

[0105] Optionally, the authentication process can be performed via the terminal access authentication module.

[0106] Below, in conjunction with Figure 6 Explain the certification process.

[0107] Figure 6 This is a schematic diagram illustrating the authentication process provided in an embodiment of this application. Figure 6As shown, the smart card of the wireless access point generates encrypted messages and key materials and sends them to the wireless access point. The wireless access point sends encrypted messages and key materials to the terminal device via beacon frames. The terminal device obtains the target key corresponding to the key materials through the smart card. The terminal device and the wireless access point communicate by transmitting other management frames. The terminal device sends an authentication request to the wireless access point to identify itself and request authentication. In response to the authentication request, the wireless access point generates authentication response information according to a predefined authentication mechanism and sends it to the terminal device. The terminal device sends an authentication confirmation to the wireless access point to complete the authentication process. After the complete authentication process, the terminal device establishes a wireless network connection with the wireless access point and transmits encrypted data through the connection.

[0108] One feasible implementation method for connecting a wireless network further includes: receiving a management frame sent by a wireless access point, the management frame including encrypted information; sending the encrypted information to a smart card so that the smart card can decrypt the encrypted information to obtain decrypted content; and obtaining the decrypted content from the smart card through a communication channel.

[0109] The management frames include, but are not limited to, at least one of the following: beacon frames, probe frames, authentication frames, association frames, reassociation frames, or action frames.

[0110] With the aid of scenario examples, management frames are used to maintain and manage wireless network connections, including functions such as network discovery, authentication, and association. The content of management frames is encrypted and decrypted via a smart card.

[0111] In this feasible implementation, the content in the management frame is encrypted by a smart card, and only terminal devices or wireless access points with the same service can decrypt it, thereby improving the security of the network connection.

[0112] Figure 7 This is a schematic diagram of a wireless network connection device provided in an embodiment of this application. Figure 7 As shown, the wireless network connection device 70 may include: a receiving module 71, a determining module, a decryption module 73, and a sending module 74, wherein...

[0113] The receiving module 71 is used to receive beacon frames sent by the wireless access point. The beacon frames include encrypted messages and key materials.

[0114] The determination module 72 is used to determine the target key corresponding to the key material from the smart card of the terminal device based on the beacon frame.

[0115] The decryption module 73 is used to decrypt encrypted messages using the target key to obtain relevant information about the wireless network of the wireless access point.

[0116] The sending module 74 is used to send an encrypted authentication request to the wireless access point based on relevant information. The authentication request is used to establish a wireless network connection between the terminal device and the wireless access point.

[0117] Optionally, the receiving module 71 can perform... Figure 2 S201 in the embodiment.

[0118] Optionally, module 72 can be executed. Figure 2 S202 in the embodiment.

[0119] Optionally, the decryption module 73 can execute... Figure 2 S203 in the embodiment.

[0120] Optionally, the sending module 74 can perform... Figure 2 S204 in the embodiment.

[0121] It should be noted that the wireless network connection device shown in the embodiments of this application can execute the technical solution shown in the above method embodiments, and its implementation principle and beneficial effects are similar, so they will not be described again here.

[0122] In one possible implementation, the determining module 72 is specifically used for:

[0123] Determine the instruction information in the key material, including either a first instruction or a second instruction;

[0124] According to the first instruction, retrieve the target key stored in the smart card; or...

[0125] According to the second instruction, obtain the target key generated by the smart card.

[0126] In one possible implementation, the determining module 72 is specifically used for:

[0127] Determine the address information of the wireless access point from the key material;

[0128] The first instruction and address information are sent to the smart card through the communication channel, so that the smart card can determine the target key based on the address information and the key-value pair stored in the smart card. The target key is stored in the smart card, and the key-value pair uses the address information as the key and the key as the value.

[0129] The target key is obtained from the smart card through the communication channel.

[0130] In one possible implementation, the determining module 72 is specifically used for:

[0131] Determine the key generation information from the key material;

[0132] The second instruction and key generation information are sent to the smart card through the communication channel, so that the smart card generates the target key according to the key generation information and the key generation algorithm stored in the smart card.

[0133] The target key is obtained from the smart card through the communication channel.

[0134] Figure 8 This is a schematic diagram of the structure of a wireless network connection device provided in an embodiment of this application. Figure 7 Based on the illustrated embodiments, as Figure 8 As shown, the wireless network connection device 80 further includes: an authentication module 75, a connection module 76, and an installation module 77, wherein:

[0135] Authentication module 75 is used for:

[0136] Send relevant information to the smart card so that the smart card can encrypt the relevant information to obtain authentication information, which is used by the wireless access point to authenticate the terminal device;

[0137] The authentication information is obtained from the smart card. Based on the authentication information, the authentication request is determined and sent to the wireless access point.

[0138] Connection module 76, used for:

[0139] Receive management frames sent by the wireless access point, the management frames including encrypted information;

[0140] Send encrypted information to the smart card so that the smart card can decrypt the encrypted information to obtain the decrypted content;

[0141] The decrypted content is obtained from the smart card through the communication channel.

[0142] Install module 77, used for:

[0143] Determine the target access point identifier for the wireless access point;

[0144] Determine the correspondence between access point identifiers and smart card identifiers;

[0145] The target smart card identifier is determined based on the target access point identifier and its corresponding relationship;

[0146] Install the smart card corresponding to the target smart card identifier in the terminal device.

[0147] Figure 9 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application, such as... Figure 9 As shown, the electronic device includes:

[0148] The electronic device includes a processor 291 and a memory 292; it may also include a communication interface 293 and a bus 294. The processor 291, memory 292, and communication interface 293 can communicate with each other via the bus 294. The communication interface 293 can be used for information transmission. The processor 291 can invoke logical instructions stored in the memory 292 to execute the methods of the above embodiments.

[0149] Furthermore, the logic instructions in the aforementioned memory 292 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium.

[0150] The memory 292, as a computer-readable storage medium, can be used to store software programs and computer-executable programs, such as program instructions / modules corresponding to the methods in the embodiments of this application. The processor 291 executes functional applications and data processing by running the software programs, instructions, and modules stored in the memory 292, thereby implementing the methods in the above-described method embodiments.

[0151] The memory 292 may include a program storage area and a data storage area. The program storage area may store the operating system and application programs required for at least one function; the data storage area may store data created based on the use of the terminal device. Furthermore, the memory 292 may include high-speed random access memory and may also include non-volatile memory.

[0152] This application provides a non-transitory computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the methods described in the foregoing embodiments.

[0153] This application provides a computer program product, including a computer program that, when executed by a processor, implements the method as described in the foregoing embodiments.

[0154] It should be noted that, for the sake of simplicity, the foregoing method embodiments are all described as a series of actions. However, those skilled in the art should understand that this application is not limited to the described order of actions, as some steps may be performed in other orders or simultaneously according to this application. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily essential to this application.

[0155] It should be further noted that although the steps in the flowchart are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowchart may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the sub-steps or stages of other steps.

[0156] It should be understood that the above-described device embodiments are merely illustrative, and the device of this application can also be implemented in other ways. For example, the division of units / modules in the above embodiments is only a logical functional division, and there may be other division methods in actual implementation. For example, multiple units, modules, or components may be combined, or integrated into another system, or some features may be ignored or not executed.

[0157] Furthermore, unless otherwise specified, the functional units / modules in the various embodiments of this application can be integrated into one unit / module, or each unit / module can exist physically separately, or two or more units / modules can be integrated together. The integrated units / modules described above can be implemented in hardware or as software program modules.

[0158] When an integrated unit / module is implemented in hardware, the hardware can be digital circuits, analog circuits, etc. The physical implementation of the hardware structure includes, but is not limited to, transistors, memristors, etc. Unless otherwise specified, the processor can be any suitable hardware processor, such as a CPU, GPU, FPGA, DSP, and ASIC. Unless otherwise specified, the storage unit can be any suitable magnetic or magneto-optical storage medium, such as Resistive Random Access Memory (RRAM), Dynamic Random Access Memory (DRAM), Static Random Access Memory (SRAM), Enhanced Dynamic Random Access Memory (EDRAM), High-Bandwidth Memory (HBM), Hybrid Memory Cube (HMC), etc.

[0159] If the integrated unit / module is implemented as a software program module and sold or used as an independent product, it can be stored in a computer-readable storage device (CMD). Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a memory and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned memory includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0160] In the above embodiments, the descriptions of each embodiment have their own emphasis. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments. The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as the combination of these technical features does not contradict each other, it should be considered within the scope of this specification.

[0161] Other embodiments of this application will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of this application that follow the general principles of this application and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this application are indicated by the following claims.

[0162] It should be understood that this application is not limited to the precise structure described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this application is limited only by the appended claims.

Claims

1. A connection method of a wireless network, characterized by, The method comprises the following steps: receiving a beacon frame sent by a wireless access point, wherein the beacon frame comprises an encrypted message and key material; determining a target key corresponding to the key material from a smart card of a terminal device according to the beacon frame; decrypting the encrypted message by using the target key to obtain relevant information of a wireless network of the wireless access point; sending an encrypted authentication request to the wireless access point according to the relevant information, wherein the authentication request is used to establish a wireless network connection between the terminal device and the wireless access point.

2. The method of claim 1, wherein, The method further comprises the following steps: determining the target key corresponding to the key material from the smart card of the terminal device comprises the following steps: determining indication information in the key material, wherein the indication information comprises a first indication or a second indication; acquiring the target key stored in the smart card according to the first indication; or 3. The method of claim 2, wherein, acquiring the target key generated by the smart card according to the second indication. The method further comprises the following steps: acquiring the target key stored in the smart card comprises the following steps: determining address information of the wireless access point from the key material; 4. The method of claim 2, wherein, sending the first indication and the address information to the smart card through a communication channel, so that the smart card determines the target key according to the address information and a key-value pair stored in the smart card, wherein the target key is stored in the smart card, and the key-value pair takes the address information as a key and takes a key as a value; acquiring the target key from the smart card through the communication channel. The method further comprises the following steps: acquiring the target key generated by the smart card comprises the following steps:

5. The method according to any one of claims 1-4, characterized in that, determining key generation information from the key material; sending the second indication and the key generation information to the smart card through a communication channel, so that the smart card generates the target key according to the key generation information and a key generation algorithm stored in the smart card; acquiring the target key from the smart card through the communication channel.

6. The method according to any one of claims 1-5, characterized in that, The method further comprises the following steps: sending the authentication request to the wireless access point according to the relevant information comprises the following steps: sending the relevant information to the smart card, so that the smart card encrypts the relevant information to obtain authentication information, wherein the authentication information is used for the wireless access point to perform authentication processing on the terminal device; acquiring the authentication information from the smart card, determining an authentication request according to the authentication information, and sending the authentication request to the wireless access point.

7. The method according to any one of claims 1 to 6, characterized in that, The method further comprises the following steps: receiving a management frame sent by the wireless access point, wherein the management frame comprises encrypted information; sending the encrypted information to the smart card, so that the smart card decrypts the encrypted information to obtain decrypted content; acquiring the decrypted content from the smart card through a communication channel. Before receiving the beacon frame sent by the wireless access point, the method further comprises the following steps:

8. A connection apparatus of a wireless network, characterized by comprising: determining a target access point identifier of the wireless access point; determining a correspondence relationship between an access point identifier and a smart card identifier; determining a target smart card identifier according to the target access point identifier and the correspondence relationship; installing a smart card corresponding to the target smart card identifier in the terminal device. The method comprises the following steps: a receiving module, configured to receive a beacon frame sent by a wireless access point, wherein the beacon frame comprises an encrypted message and key material; A determining module is configured to determine a target key corresponding to key material from a smart card of a terminal device according to the beacon frame; A decryption module is configured to decrypt the encrypted message by using the target key to obtain relevant information of a wireless network of the wireless access point; A sending module is configured to send an encrypted authentication request to the wireless access point according to the relevant information, and the authentication request is used to establish a wireless network connection between the terminal device and the wireless access point.

9. An electronic device, comprising: Comprise: A processor, and a memory connected with the processor in communication; The memory stores computer execution instructions; The processor executes the computer execution instructions stored in the memory to implement the method in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer execution instructions, and the computer execution instructions are executed by the processor to implement the method in any one of claims 1-7.

Images