Configuration information processing method and device, electronic equipment and storage medium

Abstract

The invention provides a configuration information processing method and device, electronic equipment and a storage medium, and relates to the technical field of communication, and the method comprises the steps that a terminal sends a detection request to gateway equipment, and the gateway equipment judges whether the terminal is renetworking equipment or not based on the detection request; if it is determined that the terminal is the renetworking device, the temporary hot spot is opened, and after the terminal accesses the temporary hot spot, the gateway device sends configuration information of the target network to the terminal, so that the terminal accesses the target network, the terminal actively discovers and accesses the target network in a network disconnection state, manual interference of a user is avoided, and the networking efficiency of the terminal is improved.

Description

Technical Field

[0001] This disclosure relates to the field of communication technology, and in particular to a method, apparatus, electronic device, and storage medium for processing configuration information. Background Technology

[0002] As enterprises accelerate their digital transformation, the deployment scale of ICT (Information and Communication Technology) terminals continues to expand, leading to an increasing demand for automatic access to enterprise wireless networks.

[0003] However, when enterprise network configurations change, existing solutions often rely on manual intervention to modify network configuration information in ICT terminals, making it difficult to adapt to the need for automatic reconnection in diverse scenarios.

[0004] It should be noted that the information disclosed in the background section above is only used to enhance the understanding of the background of this disclosure, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0005] This disclosure provides a method, apparatus, electronic device, and storage medium for processing configuration information, which at least to some extent overcomes the technical problem in the related art that terminal reconnection to the network requires manual intervention.

[0006] Other features and advantages of this disclosure will become apparent from the following detailed description, or may be learned in part from practice of this disclosure.

[0007] According to one aspect of this disclosure, a method for processing configuration information is provided, applied to a gateway device, comprising: acquiring a probe request sent by a terminal; determining whether the terminal is a reconnection device based on the probe request; if it is determined that the terminal is a reconnection device, enabling a temporary hotspot to allow the terminal to access the temporary hotspot; and after detecting that the terminal has accessed the temporary hotspot, sending configuration information of the target network to the terminal to enable the terminal to access the target network.

[0008] In some embodiments, the probe request carries a network identifier; determining whether the terminal is a reconnection device based on the probe request includes: determining whether the network identifier carried in the probe request is a historical network identifier; if the network identifier carried in the probe request is the same as the historical network identifier, then the terminal is determined to be a reconnection device.

[0009] In some embodiments, enabling a temporary hotspot to allow a terminal to access the temporary hotspot includes: enabling a temporary hotspot with the same name as the network identifier carried in the probe request; configuring network authentication and VLAN (Virtual Local Area Network) isolation policies for the temporary hotspot; and sending a probe response to the terminal, the probe response carrying the configuration information of the temporary hotspot, so that the terminal can access the temporary hotspot according to the configuration information of the temporary hotspot.

[0010] In some embodiments, after detecting that a terminal has accessed a temporary hotspot, configuration information of the target network is sent to the terminal to enable the terminal to access the target network. This includes: after detecting that the terminal has accessed a temporary hotspot, obtaining the service request sent by the terminal through the temporary hotspot, and determining that the terminal has not completed network access authentication, then intercepting the service request and sending authentication information to the terminal, the authentication information being used to instruct the terminal to perform network access authentication; after detecting that the terminal has completed network access authentication, sending configuration information of the target network to the terminal to enable the terminal to access the target network.

[0011] In some embodiments, sending configuration information of a target network to a terminal includes: receiving a device identifier sent by the terminal; determining the PIN (Personal Identification Number) corresponding to the terminal based on the device identifier; encrypting the configuration information of the target network using the PIN corresponding to the terminal; and sending the encrypted configuration information of the target network to the terminal so that the terminal can access the target network through the configuration information of the target network.

[0012] In some embodiments, determining the PIN corresponding to the terminal based on the device identifier includes: determining whether the terminal is a first-time access device based on the device identifier; if the terminal is a first-time access device, sending the device identifier to the terminal management platform so that the terminal management platform determines the terminal corresponding to the gateway device based on the device identifier and then determines the PIN corresponding to the terminal; and receiving the PIN corresponding to the terminal sent by the terminal management platform.

[0013] In some embodiments, the method further includes: if the terminal is not a first-time access device, obtaining the PIN corresponding to the terminal stored locally by the gateway device.

[0014] In some embodiments, the method further includes: disabling the temporary hotspot after detecting that the terminal has accessed the target network.

[0015] According to another aspect of this disclosure, a method for processing configuration information is provided. The method is applied to a terminal and includes: sending a probe request to a gateway device so that the gateway device determines whether the terminal is a reconnection device based on the probe request; if the terminal is determined to be a reconnection device, then enabling a temporary hotspot; accessing the temporary hotspot and receiving configuration information of the target network sent by the gateway device through the temporary hotspot; and accessing the target network based on the configuration information of the target network.

[0016] In some embodiments, receiving configuration information of a target network sent by a gateway device via a temporary hotspot includes: sending the terminal's device identifier to the gateway device via the temporary hotspot, so that the gateway device determines the personal identification code (PIN) corresponding to the terminal based on the device identifier; encrypting the configuration information of the target network using the PIN corresponding to the terminal; and sending the encrypted configuration information of the target network to the terminal; receiving the encrypted configuration information of the target network sent by the gateway device; and accessing the target network based on the configuration information of the target network, including: decrypting the encrypted configuration information of the target network using the PIN stored locally on the terminal to obtain the decrypted configuration information of the target network; and accessing the target network using the configuration information of the target network.

[0017] In some embodiments, the method further includes: sending a service request to a gateway device via a temporary hotspot, so that after the gateway device determines that the terminal has not completed network access authentication, it intercepts the service request and sends authentication information to the terminal; receiving the authentication information and performing network access authentication based on the authentication information; and after completing network access authentication, sending the terminal's device identifier to the gateway device via the temporary hotspot.

[0018] In some embodiments, the method further includes disconnecting from the temporary hotspot.

[0019] According to another aspect of this disclosure, a configuration information processing apparatus is provided, configured in a gateway device, comprising: a probe request acquisition module for acquiring probe requests sent by a terminal; a reconnection determination module for determining whether a terminal is a reconnection device based on the probe request; a temporary hotspot activation module for activating a temporary hotspot if it is determined that the terminal is a reconnection device, so that the terminal can access the temporary hotspot; and a target network configuration information sending module for sending target network configuration information to the terminal after detecting that the terminal has accessed the temporary hotspot, so that the terminal can access the target network.

[0020] According to another aspect of this disclosure, a configuration information processing apparatus is provided, configured in a terminal, comprising: a probe request sending module, configured to send a probe request to a gateway device, so that the gateway device determines whether the terminal is a reconnection device based on the probe request; if the terminal is determined to be a reconnection device, a temporary hotspot is activated; a target network configuration information receiving module, configured to access the temporary hotspot and receive the target network configuration information sent by the gateway device through the temporary hotspot; and a target network access module, configured to access the target network based on the target network configuration information.

[0021] According to another aspect of this disclosure, a communication system is provided, comprising a gateway device and a terminal; the terminal is configured to send a probe request to the gateway device; the gateway device is configured to receive the probe request; determine whether the terminal is a reconnection device based on the probe request; if the terminal is determined to be a reconnection device, then activate a temporary hotspot; the terminal is further configured to access the temporary hotspot; the gateway device is further configured to send configuration information of the target network to the terminal after detecting that the terminal has accessed the temporary hotspot. The terminal is further configured to receive the configuration information of the target network sent by the gateway device through the temporary hotspot; and access the target network based on the configuration information of the target network.

[0022] In some embodiments, the device further includes: a terminal management platform; a terminal, further configured to send a device identifier of the terminal to a gateway device via a temporary hotspot; a gateway device, further configured to determine whether the terminal is a first-time access device based on the device identifier, and if the terminal is a first-time access device, send the device identifier to the terminal management platform; the terminal management platform, after determining that the terminal is the terminal corresponding to the gateway device based on the device identifier, determines the PIN corresponding to the terminal and sends it to the gateway device; the gateway device, further configured to receive the PIN corresponding to the terminal sent by the terminal management platform, encrypt the configuration information of the target network using the PIN corresponding to the terminal, and send the encrypted configuration information of the target network to the terminal; the terminal, further configured to decrypt the encrypted configuration information of the target network using the locally stored PIN to obtain the decrypted configuration information of the target network, and access the target network using the configuration information of the target network.

[0023] According to another aspect of this disclosure, an electronic device is also provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to process a method of executing configuration information of any of the above via executing the executable instructions.

[0024] According to another aspect of this disclosure, a computer-readable storage medium is also provided, on which a computer program is stored, and a method for processing configuration information that implements any of the above when the computer program is executed by a processor.

[0025] According to another aspect of this disclosure, a computer program product is also provided, comprising: a computer program or instructions, and a method for processing configuration information that implements any of the above when the computer program or instructions are executed by a processor.

[0026] The embodiments of this disclosure provide a method, apparatus, electronic device, and storage medium for processing configuration information. A terminal sends a probe request to a gateway device. The gateway device determines whether the terminal is a reconnection device based on the probe request. If the terminal is determined to be a reconnection device, a temporary hotspot is activated. After the terminal connects to the temporary hotspot, the gateway device sends configuration information of the target network to the terminal, enabling the terminal to access the target network. In this solution, the gateway device listens to the probe requests sent by the terminal, identifies the terminal as a reconnection device, activates a temporary hotspot, and sends configuration information of the target network through the temporary hotspot, enabling the terminal to access the target network. This achieves proactive discovery and access to the target network by the terminal in a network-disconnected state, avoiding manual interference from the user and improving the terminal's network connection efficiency.

[0027] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0028] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure. It is obvious that the drawings described below are merely some embodiments of this disclosure, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort.

[0029] Figure 1 This diagram illustrates an application system architecture according to an embodiment of the present disclosure. Figure 2 This illustration shows a flowchart of a method for processing configuration information applied to a gateway device according to an embodiment of the present disclosure; Figure 3 This invention discloses a flowchart of another method for processing configuration information of a gateway device in an embodiment of the present disclosure. Figure 4 This invention discloses a flowchart illustrating another method for processing configuration information of a gateway device according to an embodiment of the present disclosure. Figure 5 This invention discloses a flowchart of a PIN determination method for a terminal according to an embodiment of the present invention. Figure 6 A flowchart illustrating a method for processing configuration information applied to a terminal according to an embodiment of this disclosure is shown. Figure 7 A flowchart illustrating another method for processing configuration information of a terminal in an embodiment of this disclosure is shown. Figure 8 This diagram illustrates the interaction flowchart of a communication system for a method of processing application configuration information according to an embodiment of this disclosure. Figure 9 This invention illustrates an interactive flowchart of a communication system used in another configuration information processing method according to an embodiment of the present disclosure. Figure 10 This diagram illustrates the architecture of the communication system in an embodiment of the present disclosure. Figure 11 A flowchart illustrating an example of a configuration information processing method in an embodiment of this disclosure is shown. Figure 12 A flowchart illustrating an example of another configuration information processing method in an embodiment of this disclosure is shown; Figure 13 This diagram illustrates a processing apparatus for configuration information configured in a gateway device according to an embodiment of the present disclosure. Figure 14 This diagram illustrates a processing device for configuration information configured in a terminal according to an embodiment of the present disclosure. Figure 15 A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown. Detailed Implementation

[0030] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, they are provided so that this disclosure will be more comprehensive and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0031] Furthermore, the accompanying drawings are merely illustrative of this disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and therefore repeated descriptions of them will be omitted. Some block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0032] To facilitate understanding, before introducing the embodiments of this disclosure, the following explanations are provided for several terms involved in the embodiments of this disclosure: Probe Request Identification: This refers to the gateway device or AP (Access Point) device listening to and analyzing the content of probe request frames actively broadcast by terminal devices when they are offline. By parsing the SSID (Service Set Identifier) ​​field contained therein, the device identifies the name of the wireless network that the terminal has previously connected to, thereby determining whether it belongs to the current network environment, which serves as the basis for triggering the network configuration synchronization process.

[0033] Temporary Hotspot: A wireless access point with a temporary SSID and password that is dynamically activated by the smart gateway device after a disconnected terminal is detected. It has Portal authentication and network access isolation capabilities and is used to guide the terminal to access the network and synchronize network configuration parameters. The temporary hotspot is automatically turned off after the terminal completes the synchronization.

[0034] Configuration Sync Process: This refers to the process by which the gateway device sends the latest target network configuration information to the terminal after it connects to a temporary hotspot. This process typically includes authentication, attribution confirmation, key encryption, configuration distribution, and network switching, and is used to enable automatic reconnection of terminals that have lost network access.

[0035] Device Identifier: This refers to a combination of information used to uniquely identify a device. For example, the deviceid field is usually composed of the device model, serial number, MAC (Media Access Control) address, etc. It is used to confirm device ownership, generate encryption parameters, etc., and serves as an important basis for device identity verification in the configuration information synchronization process.

[0036] PIN (Personal Identification Number): Also known as a PIN code, it refers to a unique identification code generated during device manufacturing or registration. It is used as the basis for symmetric encryption keys to transmit sensitive network configuration data through an encrypted channel established with the gateway, thereby improving the security of configuration information during the synchronization process.

[0037] AES (Advanced Encryption Standard) encryption: refers to an advanced symmetric encryption algorithm used during the distribution of configuration information to the target network to prevent the configuration content from being stolen or tampered with. The gateway device uses the terminal PIN code to generate an encryption key to encrypt the configuration content, and the terminal decrypts and restores the configuration using its local key after receiving it.

[0038] Portal Authentication: refers to an authentication mechanism that restricts a terminal's access to external network resources before it completes authentication, ownership confirmation, and configuration information acquisition after being redirected to an authentication page or authentication service process when it connects to a temporary hotspot. It is used to enhance access control and security protection during network configuration.

[0039] Ownership Verification Mechanism: During the configuration information synchronization process, if the local records do not show that the device has a history of connection, the gateway device will request confirmation through the platform interface whether the device belongs to the same enterprise account system. This ensures that the configuration information is not mistakenly sent to unauthorized devices, thereby improving the overall security and accuracy of the system.

[0040] The specific implementation methods of the embodiments of this disclosure will now be described in detail with reference to the accompanying drawings.

[0041] Figure 1 A schematic diagram of an exemplary application system architecture is shown, illustrating an application of the configuration information processing method described in the embodiments of this disclosure. For example... Figure 1 As shown, the system architecture may include a terminal 101, a network 102, and a server 103.

[0042] It should be noted that, in the embodiments of this disclosure, terminal 101 refers to an entity on the user side used to receive or transmit signals, and may also be referred to as terminal equipment, mobile station (MS), mobile terminal (MT), etc. The embodiments of this disclosure do not limit the specific technology or device form used in the terminal.

[0043] In some embodiments of this disclosure, the terminal 101 may be a mobile phone, tablet computer, laptop computer, notebook computer, personal digital assistant (PDA), handheld computer, netbook, ultra-mobile personal computer (UMPC), mobile internet device (MID), augmented reality (AR), virtual reality (VR) device, robot, wearable device, flight vehicle, vehicle user equipment (VUE), shipboard equipment, pedestrian user equipment (PUE), smart home (home devices with wireless communication capabilities, such as refrigerators, televisions, washing machines, or furniture), game console, personal computer (PC), ATM, or self-service machine, etc. Wearable devices include: smartwatches, smart bracelets, smart earphones, smart glasses, smart jewelry (smart bracelets, smart chains, smart rings, smart necklaces, smart anklets, smart anklets, etc.), smart wristbands, smart clothing, etc. Among these, in-vehicle devices can also be referred to as in-vehicle terminals, in-vehicle controllers, in-vehicle modules, in-vehicle components, in-vehicle chips, or in-vehicle units, etc. It should be noted that the specific type of terminal 101 is not limited in the embodiments disclosed herein.

[0044] Network 102 is the medium used to provide a communication link between terminal 101 and server 103, and can be a wired network or a wireless network. Optionally, the aforementioned wireless or wired network uses standard communication technologies and / or protocols. The network is typically the Internet, but can also be any network, including but not limited to Local Area Network (LAN), Metropolitan Area Network (MAN), Wide Area Network (WAN), mobile, wired or wireless network, private network or virtual private network, and any combination thereof. In some embodiments, technologies and / or formats including Hyper Text Markup Language (HTML), Extensible Markup Language (XML), etc., are used to represent data exchanged over the network. Furthermore, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Network (VPN), and Internet Protocol Security (IPSec) can be used to encrypt all or some of the links. In other embodiments, customized and / or dedicated data communication technologies may be used to replace or supplement the aforementioned data communication technologies.

[0045] Server 103 can be a server that provides various services, such as a backend management server that supports the device operated by the user using terminal 101. The backend management server can analyze and process received requests and other data, and feed the processing results back to the terminal device.

[0046] Optionally, server 103 can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms.

[0047] Those skilled in the art will know that Figure 1 The number of terminals, networks, and servers shown is merely illustrative; any number of terminals, networks, and servers can be used as needed. This disclosure does not limit the scope of the embodiments.

[0048] Under the above system architecture, this embodiment of the disclosure provides a method for processing configuration information, which can be executed by any electronic device with computing capabilities. For example, the configuration information processing method provided in this embodiment is executed by a gateway device.

[0049] Figure 2 This diagram illustrates a method for processing configuration information on the gateway device side according to an embodiment of the present disclosure. Figure 2 As shown, the configuration information processing method provided in this embodiment includes the following steps S202-S208.

[0050] In step S202, the probe request sent by the terminal is obtained.

[0051] The configuration information processing method provided in this embodiment is executed by a gateway device, that is, the gateway device obtains the probe request sent by the terminal. The gateway device can be a wireless router, an access point (AP) device, or an IoT gateway, etc.

[0052] For example, in a data-driven home scenario, the gateway device can be a home wireless router, and the terminals can include devices deployed in the smart home such as cameras, robot vacuums, smart control screens, smart speakers, and smartphones. As another example, in an office environment such as a business, the gateway device can be an access point device, and the terminals can include printers, conference terminals, cameras, etc., deployed on different floors and in different network areas of the office. Yet another example, in an industrial park scenario, the gateway device can be an IoT gateway, and the terminals can include sensors, PLC controllers, etc., deployed in the industrial park. This embodiment only explains the application scenarios of the configuration information processing method and is not intended to limit the scope.

[0053] In one possible implementation, when the target network's configuration information is updated, the terminal, which stores the target network's configuration information from the last successful connection, attempts to connect using the previous configuration information. However, due to incorrect configuration information, the terminal fails to access the target network. At this point, the terminal automatically and periodically sends probe requests due to the network connection interruption. The gateway device listens for and receives the probe requests broadcast by the terminal within its coverage area using its wireless communication module.

[0054] The probe request carries a network identifier. In a wireless network, the network identifier can include SSID (Service Set Identifier) ​​and / or BSSID (Basic Service Set Identifier). SSID can also be understood as the publicly known name of the wireless network, such as "Enterprise_WiFi" or "Enterprise_NextGen". BSSID can also be understood as the MAC address of an access point (such as a gateway), used to uniquely identify a specific wireless access point.

[0055] In one possible implementation, the probe request includes a list of one or more SSIDs that the terminal wishes to connect to. This list includes SSIDs of historical networks that the terminal has successfully connected to, allowing the terminal to quickly locate connectable networks. The SSID carried in the probe request can be the SSID of the target network; for example, if the target network is a first WiFi network, the SSID carried in the probe request is also the SSID of the first WiFi network. Alternatively, the SSID carried in the probe request can be the SSID of another non-target network deployed in the environment. For example, if the target network is the first WiFi network, the SSID carried in the probe request could be the SSID of a second WiFi network; the first WiFi network and the second WiFi network can be two different networks.

[0056] In another possible implementation, the probe request carries the terminal's device identifier. For example, the device identifier could be a MAC address.

[0057] In step S204, it is determined whether the terminal is a reconnection device based on the probe request.

[0058] A reconnecting device can be understood as a terminal that, at some point in the past, has been authorized through a legitimate process to access the network served by the gateway device.

[0059] After capturing a probe request, the gateway device performs protocol parsing and extracts information elements for identity verification from the probe request. For example, the above information elements may be the SSID and / or the terminal's MAC address.

[0060] In one possible implementation, the gateway device extracts the MAC address of the terminal from the probe request. The gateway device internally stores a list of authorized devices, which records the MAC addresses of all terminals that have previously been allowed to access the network served by the gateway device. If the extracted terminal's MAC address is in the list of authorized devices, the terminal is determined to be a reconnection device; if the extracted terminal's MAC address is not in the list, the terminal is determined not to be a reconnection device.

[0061] In another possible implementation, the gateway device extracts the SSID carried in the probe request and stores a list of SSIDs served by the gateway device internally. If the SSID carried in the probe request is in the list of SSIDs served by the gateway device, the terminal is determined to be a reconnection device. If the SSID carried in the probe request is not in the list of SSIDs served by the gateway device, the terminal is determined not to be a reconnection device.

[0062] If it is determined that the terminal is a reconnection device, then step S206 is executed. If the terminal is not a reconnection device, the gateway device will not start the temporary hotspot and configuration information synchronization process, but will execute different processing strategies according to the specific situation of the terminal.

[0063] In step S206, if it is determined that the terminal is a reconnection device, a temporary hotspot is enabled so that the terminal can access the temporary hotspot.

[0064] A temporary hotspot can be understood as a temporary wireless network access point dynamically created by a gateway device, with a defined lifecycle and a dedicated purpose. In this embodiment, the temporary hotspot is used to securely send updated configuration information of the target network to the reconnection device.

[0065] If the terminal is determined to be a reconnection device, the gateway device's software logic triggers the configuration and broadcast of a new temporary hotspot. The SSID of the temporary hotspot can be a fixed name that the terminal can recognize, or it can be dynamically generated.

[0066] The name of the temporary hotspot, i.e., the SSID, can be the SSID carried in the probe request. If the probe request does not carry an SSID, the gateway device will look up the SSIDs that the temporary hotspot has previously connected to using the MAC address carried in the probe request. The name of the temporary hotspot can be the SSID that it has previously connected to.

[0067] The password for this temporary hotspot can be a known, pre-shared simple password (pre-configured in the gateway device and terminal firmware), or it can be an open network password. Furthermore, the password and other configuration information for this temporary hotspot can be the same as the original configuration information of the SSID carried in the probe request. Alternatively, the password and other configuration information for the temporary hotspot can be the same as the original configuration information of an SSID it has previously connected to.

[0068] In one possible implementation, the gateway device assigns a different IP (Internet Protocol) network segment to the temporary hotspot than to the target network. For example, the target network's IP network segment is 192.168.1.x, and the temporary hotspot's IP network segment is 192.168.4.x, to prevent IP conflicts and routing confusion.

[0069] After the gateway device enables a temporary hotspot, the terminal can access the temporary hotspot using its known SSID and corresponding password.

[0070] In step S208, after detecting that the terminal has accessed a temporary hotspot, the configuration information of the target network is sent to the terminal so that the terminal can access the target network.

[0071] After detecting that the terminal has accessed a temporary hotspot, the synchronization process of the target network's configuration information is triggered. Through the synchronization process of the target network's configuration information, the target network's configuration information is sent to the terminal. After receiving the target network's configuration information, the terminal accesses the target network through the configuration information.

[0072] The configuration information of the target network may include the target network's SSID, password, encryption method, authentication parameters, etc. The target network can be any type of wireless connection network. For example, the target network can be a primary wireless LAN in a home or small and medium-sized enterprise environment, a dedicated service network in an IoT system, a user network provided by public or commercial facilities, a unified logical network in a multi-AP distributed system, etc. In this embodiment, Wi-Fi is used as an example for illustration.

[0073] For example, the configuration information is as follows: "ssid": "Enterprise_NextGen", "last_connected": "2024-07-01T10:12:43Z", "encrypt_type": "WPA3", "password": "Ent2024@Secure" In this solution, the gateway device listens to the probe requests sent by the terminal, identifies the terminal as a reconnection device, and then opens a temporary hotspot. The configuration information of the target network is sent through the temporary hotspot so that the terminal can access the target network through the configuration information. This enables the terminal to actively discover and access the target network in the offline state, breaks through the dependence of related technologies on the online status of the terminal, improves the device's self-recovery capability and deployment stability, and avoids manual interference from the user, thus improving the terminal's network connection efficiency.

[0074] Based on the above embodiments, the present disclosure optimizes the method for processing configuration information on the gateway device side, such as... Figure 3 As shown, the optimized method for processing configuration information on the gateway device side includes steps S302-S316.

[0075] In step S302, a probe request sent by the terminal is obtained, and the probe request carries a network identifier.

[0076] A network identifier is an identification information used to uniquely distinguish different networks in a wireless network. This embodiment uses SSID, the publicly known name of the network, as an example for illustration.

[0077] The gateway device continuously listens for probe requests from various terminals within its wireless coverage area. When a terminal attempts to rediscover the network due to a network connection interruption or configuration failure, it will proactively send a probe request. After receiving the probe request, the gateway device parses it and extracts the SSID from it. This network identifier is the SSID that is being attempted to access or has previously been connected to.

[0078] In step S304, it is determined whether the network identifier carried in the probe request is a historical network identifier.

[0079] Historical network identifiers can be understood as a collection of one or more network identifiers stored locally on the gateway device that were used at some point in the past but may no longer be the primary identifier. For example, if the target network SSID changes from "Enterprise_WiFi" to "Enterprise_NextGen", then "Enterprise_WiFi" becomes a historical network identifier.

[0080] The gateway device maintains a historical list of network identifiers, which is a pre-configured database recording all old network identifiers that were valid on the network but have since changed. After retrieving the network identifier from the probe request, the gateway device compares it with the historical list of network identifiers.

[0081] In step S306, if the network identifier carried in the probe request is the same as the historical network identifier, then it is determined that the terminal is a reconnection device.

[0082] The fact that the network identifier carried in the probe request is the same as the historical network identifier can be understood as the existence of a historical network identifier in the list of historical network identifiers that is exactly the same as the network identifier carried in the probe request.

[0083] In this embodiment, the gateway device extracts the network identifier from the probe request and queries whether the SSID carried in the probe request is in the historical SSID list. If the SSID carried in the probe request is in the historical SSID list, it indicates that the terminal is a reconnection device. If the SSID carried in the probe request is not in the historical SSID list, it indicates that the terminal is not a reconnection device.

[0084] For example, the network identifier extracted by the gateway device from the probe request is "Home-WIFI-old". It queries whether "Home-WIFI-old" is in the historical SSID list. If "Home-WIFI-old" is in the historical SSID list, it indicates that the terminal is a reconnecting device. If "Home-WIFI-old" is not in the historical SSID list, it indicates that the terminal is not a reconnecting device.

[0085] In this embodiment, by comparing the network identifier carried in the terminal's probe request with the historical network identifier in the historical records, it is determined whether the terminal is a reconnection device, accurately identifying the state in which the terminal cannot access the network due to configuration failure, and accurately identifying the terminal that needs to trigger configuration information synchronization.

[0086] In step S308, a temporary hotspot with the same name as the network identifier carried in the probe request is created.

[0087] A temporary hotspot with the same name as the network identifier carried in the probe request refers to a temporary hotspot whose name is the same as the network identifier carried in the probe request.

[0088] The gateway device creates a temporary hotspot with the same name as the network identifier carried in the probe request sent by the terminal. For example, if the terminal is looking for an SSID of "Enterprise_WiFi" in its probe request, then the SSID of the temporary hotspot created by the gateway will also be "Enterprise_WiFi". This makes the terminal believe that the target network it is looking for has appeared, and thus attempt to connect to the temporary hotspot.

[0089] In step S310, network authentication and VLAN isolation policies are configured for temporary hotspots.

[0090] Network authentication, including portal authentication (also known as mandatory web portal authentication), is a network access control technology. After a device connects to the network, any request to access the internet is redirected to a specific authentication portal page. The device needs to complete some form of interaction on this page (such as clicking an "agree" button, entering a verification code, or logging in using a social media account) before the network grants it normal internet access.

[0091] VLAN isolation policy refers to the configuration that uses virtual LAN technology to logically isolate network traffic from temporary hotspots and other networks (especially the target network) managed by the gateway at Layer 2.

[0092] For this temporary hotspot, the gateway device enables the Portal authentication service and configures redirection rules to redirect all HTTP (Hypertext Transfer Protocol) and / or HTTPS (Hypertext Transfer Protocol Secure) requests to the portal server's IP address. The SSID of this temporary hotspot is associated with a pre-created VLAN with a strict access policy. Within this VLAN, before authentication, terminals are only allowed to communicate with the gateway's portal server and subsequent configuration delivery services; requests to access any other internal or external network resources are dropped.

[0093] For example, the configuration information for the temporary hotspot Enterprise_WiFi is as follows: The password is the same as the original hotspot password: 12341234; VLAN ID: 105, network restrictions allow only Portal authentication; The Portal is enabled to block all unauthenticated traffic and redirect it to the network authentication module.

[0094] In step S312, a probe response is sent to the terminal, which carries the configuration information of the temporary hotspot, so that the terminal can access the temporary hotspot according to the configuration information of the temporary hotspot.

[0095] In this embodiment, if the password of the temporary hotspot is different from the password of the historical SSID, the newly configured password of the temporary hotspot can be included in the configuration information; if the password of the temporary hotspot is the same as the password of the historical SSID, the password of the temporary hotspot does not need to be included in the configuration information.

[0096] In this embodiment, the gateway device configures network authentication and VLAN isolation policies for temporary hotspots, which improves the security of the target network's configuration information during transmission, effectively prevents the leakage of configuration information and spoofing attacks, and enhances the overall security level of the distribution network.

[0097] In step S314, after detecting that the terminal has accessed a temporary hotspot, the service request sent by the terminal is obtained through the temporary hotspot. If it is determined that the terminal has not completed network access authentication, the service request is intercepted and authentication information is sent to the terminal. The authentication information is used to instruct the terminal to perform network access authentication.

[0098] The above business requests can be understood as HTTP access requests and / or HTTPS access requests to external network resources of the gateway.

[0099] In this embodiment, the gateway device creates a temporary hotspot with the same name as the network identifier carried in the probe request sent by the terminal. The terminal then believes that the target network it is looking for has appeared and attempts to connect to the temporary hotspot. To improve network security, the gateway device sets up Portal authentication. Therefore, in this example, after connecting to the temporary hotspot, the terminal automatically initiates network connectivity checks or HTTP / HTTPS requests initiated by any application. The gateway device maintains an authentication status table; terminals accessing via the temporary hotspot all have an authentication status of "unauthenticated." Based on this status, the gateway device's firewall or policy enforcement module discards the terminal's internet access requests. After intercepting a request, the gateway device does not return the original content of the request but instead sends an HTTP redirect response to the terminal's browser, redirecting it to a preset authentication portal page for portal authentication. This redirect response serves as the authentication information.

[0100] In step S316, after detecting that the terminal has completed network authorization authentication, the configuration information of the target network is sent to the terminal so that the terminal can access the target network.

[0101] After the terminal completes network access authentication by interacting with the portal server, the portal server notifies the gateway device to update the terminal's authentication status. Upon receiving the authentication success message from the portal server, the gateway device detects that the terminal has completed network access authentication and then sends the target network configuration information to the terminal to enable the terminal to access the target network.

[0102] The gateway device sends the target network's configuration information to the terminal, including: displaying the target network's configuration information directly on the authentication success page or pushing the configuration information via JavaScript. Alternatively, the gateway device allows the terminal to access a specific, secure RESTful API interface, through which the terminal retrieves the configuration information. Or, the gateway device proactively pushes a configuration file to the terminal via a temporary hotspot.

[0103] In this embodiment, a verifiable communication channel is established within the temporary hotspot through service request interception and portal authentication. Only terminals that have passed portal authentication can obtain new configuration information of the target network, effectively preventing the leakage or malicious scraping of configuration information under unauthorized circumstances and improving network security.

[0104] Based on the above embodiments, the present disclosure optimizes the method for processing configuration information on the gateway device side, such as... Figure 4 As shown, the optimized method for processing configuration information on the gateway device side includes steps S402-S416.

[0105] In step S402, the probe request sent by the terminal is obtained.

[0106] In step S404, it is determined whether the terminal is a reconnection device based on the probe request.

[0107] In step S406, if it is determined that the terminal is a reconnection device, a temporary hotspot is enabled so that the terminal can access the temporary hotspot.

[0108] Steps S402-S406 provided in this embodiment are implemented in the same way as steps S202-S206 in the above embodiment. For details, please refer to the description in the above embodiment.

[0109] In step S408, after detecting that the terminal has accessed a temporary hotspot, the device identifier sent by the terminal is received.

[0110] A device identifier is a symbol or code that uniquely identifies a hardware terminal. A device identifier may include at least one of the following: MAC address, device serial number, International Mobile Equipment Identity (IMSI), or a unique device number provided by the manufacturer. In this embodiment, the device identifier including the deviceid field is used as an example for illustration.

[0111] In this embodiment, the gateway device can directly extract the deviceid field from the probe request sent by the terminal or the Ethernet header of any data link layer frame.

[0112] In step S410, the PIN corresponding to the terminal is determined based on the device identifier.

[0113] After obtaining the device identifier of the terminal, the gateway device uses the device identifier to find or generate a PIN code corresponding to the terminal.

[0114] In one possible implementation, the gateway device or the cloud server to which the gateway device is connected maintains a device identifier and PIN code mapping table. This mapping table is pre-configured and stored, for example, generated and stored by the administrator or the system when the terminal accesses the network.

[0115] In some embodiments, such as Figure 5 As shown, the process for determining the PIN corresponding to the terminal provided in this embodiment includes steps S502-S510.

[0116] In step S502, the device identifier sent by the receiving terminal is received.

[0117] In step S504, it is determined whether the terminal is accessing the device for the first time based on the device identifier. If yes, step S506 is executed; otherwise, step S510 is executed.

[0118] A device that is connected for the first time can be understood as a terminal that has no historical interaction records or configuration information in the local records of the current gateway device. In other words, the device identifier is appearing for the first time within the service period of this gateway.

[0119] After the gateway device obtains the terminal's device identifier, it first checks if the identifier exists in the locally stored list of registered devices. If the query result is negative, the terminal is determined to be a first-time access device, indicating that the gateway device is not aware of it and needs to seek verification and configuration from a higher-level terminal management platform, proceeding to step S506. If the query result is positive, the terminal is determined to be a non-first-time access device, indicating that the gateway device already has the device's relevant information locally, proceeding to step S510 to directly obtain the terminal's corresponding PIN from the local storage.

[0120] In step S506, a device identifier is sent to the terminal management platform so that the terminal management platform can determine the terminal corresponding to the gateway device based on the device identifier and then determine the PIN corresponding to the terminal.

[0121] A terminal management platform is a centralized management system deployed in the cloud, used to manage the global device information database, the ownership relationship between devices and gateways, and so on.

[0122] For newly connected devices, the gateway device itself cannot determine whether the terminal belongs to the network served by the gateway device, therefore it delegates the decision-making authority to the terminal management platform. The gateway device sends the terminal's device identifier to the terminal management platform via the network connection.

[0123] The terminal management platform verifies the terminal's legitimacy based on its device identifier, confirming that the terminal indeed belongs to or is permitted to be managed by the current gateway device according to its management policy. After successful verification, the terminal management platform assigns a PIN code to the terminal. This PIN code can be retrieved from its database or dynamically generated by the terminal management platform according to rules.

[0124] In step S508, the terminal's corresponding PIN is received from the terminal management platform.

[0125] The gateway device receives a response from the terminal management platform, which includes the PIN code corresponding to the terminal. After receiving the PIN code, the gateway device typically establishes a mapping record between the device identifier and the PIN code locally, so that the device can be directly verified locally when it connects again in the future.

[0126] In this embodiment, the gateway can dynamically determine the access policy by confirming the device ownership through the cloud, thereby realizing intelligent configuration and distribution in a multi-SSID environment, avoiding users from manually selecting networks, and enhancing the system's ability to adapt to complex deployment scenarios.

[0127] In step S510, the PIN corresponding to the terminal stored locally by the gateway device is obtained.

[0128] For devices that are not accessing the network for the first time, the gateway device does not need to interact with the terminal management platform. It can directly query and read the corresponding PIN code in its local device identifier and PIN code mapping table, using the device identifier as the key.

[0129] In this embodiment, for non-first-time access reception, the PIN code determination is completed locally on the gateway device, which improves response speed and reduces the pressure on the terminal management platform and network bandwidth consumption.

[0130] In step S412, the configuration information of the target network is encrypted using the PIN corresponding to the terminal.

[0131] The target network configuration information includes, but is limited to: SSID, password, authentication method, access frequency band, encryption method, etc.

[0132] After the gateway device determines the configuration information of the target network (e.g., SSID and password), it uses the PIN code corresponding to the terminal to encrypt the configuration information.

[0133] Specifically, the PIN code can be used directly as the key for a symmetric encryption algorithm (such as AES) to encrypt the configuration information of the target network. Alternatively, the PIN code can be combined with a randomly generated value, and an encryption key can be calculated using a key derivation function, which can then be used to encrypt the configuration information.

[0134] In step S414, encrypted configuration information of the target network is sent to the terminal so that the terminal can access the target network through the configuration information of the target network.

[0135] The gateway will send encrypted configuration information to the terminal via a communication channel established through a temporary hotspot. After receiving the ciphertext, the terminal must perform a decryption operation locally using a known and identical PIN code to restore the target network's configuration information and ultimately use that configuration information to access the target network.

[0136] In this embodiment, the configuration information of the target network is encrypted by using a PIN code strongly associated with the terminal, thereby improving the security of the target network's configuration information during transmission, effectively preventing configuration leakage and spoofing attacks, and enhancing the overall security level of the distribution network.

[0137] In step S416, after detecting that the terminal has accessed the target network, the temporary hotspot is turned off.

[0138] In this embodiment, the gateway device, through its network monitoring module, confirms that a terminal previously connected to the temporary hotspot has successfully used the updated configuration information to complete the authentication and association with the target network, and has obtained an IP address from the target network, thus entering a state where normal communication is possible. Then, the gateway device stops broadcasting the SSID of the temporary hotspot and releases the wireless channel, IP address pool and other related hardware and software resources it occupies, causing it to completely disappear from the network.

[0139] The gateway records the device identifier of the connected terminal in the terminal connection record of the gateway device, and the process ends.

[0140] In this embodiment, by disabling temporary hotspots and returning wireless bandwidth to the target network, the network performance and stability of all access devices are improved.

[0141] Under the above system architecture, this embodiment of the disclosure provides a method for processing configuration information on the terminal side, which can be executed by any electronic device with computing power. For example, the configuration information processing method provided in this embodiment is executed by a terminal.

[0142] Figure 6 This invention discloses a flowchart of a terminal-side configuration information processing method according to an embodiment of the present disclosure, as shown below. Figure 6 As shown, the terminal-side configuration information processing method provided in this embodiment includes the following steps S602-S606.

[0143] In step S602, a probe request is sent to the gateway device so that the gateway device can determine whether the terminal is a reconnection device based on the probe request. If the terminal is determined to be a reconnection device, a temporary hotspot is enabled.

[0144] When the target network's configuration information is updated, the terminal, whose memory stores the target network's configuration information from the last successful connection, attempts to connect using the previous configuration information. However, due to incorrect configuration information, the terminal cannot access the target network. At this point, the terminal automatically and periodically sends probe requests due to the network connection interruption. The gateway device listens for and receives these probe requests broadcast by the terminal within its coverage area via its wireless communication module. This probe request carries the SSID, which is the SSID the terminal previously successfully connected to. The gateway device then creates a temporary hotspot with the same SSID as the previously successfully connected SSID, and the password for this temporary hotspot is the same as the password for the previously successfully connected SSID.

[0145] In step S604, a temporary hotspot is accessed, and the configuration information of the target network sent by the gateway device is received through the temporary hotspot.

[0146] The target network's configuration information includes the target network's SSID and password.

[0147] In this embodiment, since the gateway device creates a temporary hotspot with the same SSID as the probe request, the terminal believes that the target network it is looking for has appeared, and thus attempts to access the temporary hotspot using the password of the SSID that it previously successfully connected to.

[0148] When a terminal accesses a temporary hotspot, the gateway device is triggered to execute a synchronization process for the target network's configuration information. Through this synchronization process, the target network's configuration information is sent to the terminal.

[0149] In step S606, the target network is accessed based on the configuration information of the target network.

[0150] The terminal accesses the target network based on the SSID and password in the configuration information.

[0151] In this solution, the terminal sends a probe request, and the gateway device listens for this request. If the gateway device identifies the terminal as a reconnecting device, it activates a temporary hotspot and sends the target network's configuration information through the temporary hotspot. This allows the terminal to access the target network using the configuration information, enabling the terminal to proactively discover and access the target network even when offline. This overcomes the dependence of related technologies on the terminal's online status, improving the device's self-recovery capability and deployment stability. Simultaneously, it avoids manual interference from the user, improving the terminal's network connection efficiency.

[0152] Based on the above embodiments, the present disclosure optimizes the method for processing configuration information on the terminal side, such as... Figure 7 As shown, the optimized terminal-side configuration information processing method provided in this embodiment includes S702-S716.

[0153] In step S702, a probe request is sent to the gateway device so that the gateway device can determine whether the terminal is a reconnection device based on the probe request. If the terminal is determined to be a reconnection device, a temporary hotspot is enabled.

[0154] When the gateway device listens to the probe request initiated by the terminal, it identifies whether the probe request contains a previously connected SSID. If the probe request contains a previously connected SSID, it determines that the terminal may be a reconnecting device and automatically triggers the temporary hotspot control process. The gateway opens a temporary hotspot with the same name as the previously used SSID and configures Portal authentication and VLAN isolation policies. Simultaneously, it returns a probe response to the ICT terminal, guiding the terminal to connect to the temporary hotspot network.

[0155] In step S704, a temporary hotspot is accessed, and a service request is sent to the gateway device through the temporary hotspot. After the gateway device determines that the terminal has not completed network authorization authentication, it intercepts the service request and sends authentication information to the terminal.

[0156] In step S706, authentication information is received, and network access authentication is performed based on the authentication information.

[0157] After receiving the probe response, the terminal automatically connects to the temporary hotspot and then attempts to establish MQTT connections and other business requests. The business requests are intercepted by the Portal authentication mechanism, which guides the terminal to execute the authentication process. The gateway device receives the deviceid actively reported by the terminal.

[0158] In step S708, after completing network access authentication, the terminal's device identifier is sent to the gateway device via a temporary hotspot, so that the gateway device can determine the personal identification code (PIN) corresponding to the terminal based on the device identifier, encrypt the configuration information of the target network using the PIN corresponding to the terminal, and send the encrypted configuration information of the target network to the terminal.

[0159] If the terminal is accessing the gateway device for the first time, the gateway device cannot identify its affiliation from its local configuration; the platform affiliation determination process is initiated, and the deviceid is reported to the terminal management platform; the terminal management platform determines whether the terminal belongs to the enterprise corresponding to the current gateway device through the enterprise account relationship; if it is determined that the terminal belongs to the enterprise corresponding to the current gateway device, the network configuration synchronization process is authorized to continue.

[0160] In step S710, the encrypted configuration information of the target network sent by the gateway device is received.

[0161] In step S712, the encrypted target network configuration information is decrypted using the PIN stored locally on the terminal to obtain the decrypted target network configuration information.

[0162] In step S714, the connection to the temporary hotspot is disconnected.

[0163] In step S716, the target network is accessed using the configuration information of the target network.

[0164] The terminal uses its corresponding PIN code to encrypt the target network's SSID / password and other configuration information; the encrypted configuration information is then sent to the terminal via a secure channel; the terminal decrypts the information using its local PIN to obtain the decrypted target network configuration information.

[0165] The terminal disconnects from the temporary hotspot and automatically switches to the target network SSID for connection.

[0166] In this embodiment, the terminal disconnects from the temporary hotspot and releases the wireless channel, IP address pool and other related hardware and software resources it occupies, which can eliminate channel congestion and co-channel interference.

[0167] Based on the same inventive concept, this disclosure also provides a communication system, such as... Figure 8 As shown, the system includes a gateway device and a terminal; the interaction process of the communication system includes steps S802-S810.

[0168] In step S802, the terminal sends a probe request to the gateway device.

[0169] In step S804, the gateway device obtains a probe request; and determines whether the terminal is a reconnection device based on the probe request; if it is determined that the terminal is a reconnection device, a temporary hotspot is enabled.

[0170] In step S806, the terminal connects to a temporary hotspot.

[0171] In step S808, after the gateway device detects that the terminal has accessed a temporary hotspot, it sends the configuration information of the target network to the terminal.

[0172] In step S810, the terminal receives the configuration information of the target network sent by the gateway device through a temporary hotspot; and accesses the target network based on the configuration information of the target network.

[0173] Based on the above embodiments, the present disclosure optimizes the communication system, such as... Figure 9 As shown, the optimized communication system also includes a terminal management platform. The interaction process of the communication system includes steps S902-S922.

[0174] In step S902, the terminal sends a probe request to the gateway device.

[0175] In step S904, the gateway device obtains a probe request; and determines whether the terminal is a reconnection device based on the probe request; if it is determined that the terminal is a reconnection device, a temporary hotspot is enabled.

[0176] In step S906, the terminal connects to a temporary hotspot.

[0177] In step S908, the terminal sends its device identifier to the gateway device via a temporary hotspot.

[0178] In step S910, the gateway device determines whether the terminal is a first-time access device based on the device identifier.

[0179] In step S912, if the terminal is accessing the device for the first time, the gateway device sends the device identifier to the terminal management platform.

[0180] In step S914, after the terminal management platform determines that the terminal is the terminal corresponding to the gateway device based on the device identifier, it determines the PIN corresponding to the terminal.

[0181] In step S916, the terminal management platform sends the PIN corresponding to the terminal to the gateway device.

[0182] In step S918, the gateway device uses the PIN corresponding to the terminal to encrypt the configuration information of the target network.

[0183] In step S920, the gateway device sends encrypted configuration information of the target network to the terminal.

[0184] In step S922, the terminal uses the locally stored PIN to decrypt the encrypted target network configuration information to obtain the decrypted target network configuration information; and uses the target network configuration information to access the target network.

[0185] In the system embodiment, the specific implementation methods of each step can be referred to the implementation methods of the gateway device and the terminal side, and will not be repeated in this embodiment.

[0186] In one application example, an application-specific communication system architecture is provided, which includes: a terminal, a terminal management platform, and a gateway device. For example... Figure 10 As shown, the example is an ICT terminal 1010 and an ICT business management platform 1020.

[0187] like Figure 10 As shown, the ICT business management platform 1020 includes: a terminal authentication module 1021; the terminal authentication module 1021 receives terminal identification information from the gateway device 1030 and performs verification and authentication of the terminal's affiliated enterprise account in the cloud. For example, the terminal identification information may include deviceid, MAC address, etc.

[0188] The gateway device 1030 includes a network configuration recording module 1031, an SSID identification module 1032, a terminal authentication module 1033, a terminal affiliation judgment module 1034, a hotspot control module 1035, and an encrypted configuration generation module 1036.

[0189] The network configuration recording module 1031 is used to record current and historical network configurations, such as SSID, password, and encryption method; the SSID identification module 1032 is used to listen for probe requests from terminals and analyze the SSID field carried in them; the terminal authentication module 1033 is used to receive device identifiers reported by terminals and determine whether they are terminals that have been accessed in the past; the terminal affiliation judgment module 1034 is used to interact with the ICT business management platform 1020 when local authentication fails to further confirm whether the terminal belongs to the same enterprise account; the hotspot control module 1035 is used to enable temporary hotspots consistent with historical SSIDs and configure VLAN isolation, Portal authentication and other policies; and the encrypted configuration generation module 1036 is used to encrypt the configuration (SSID and / or password) information of the target network using a PIN code based on the terminal identity information.

[0190] The ICT terminal 1010 includes a network connection module 1011 and a network configuration information synchronization module 1012. The network connection module 1011 is used to connect to the gateway's temporary hotspot or the target network; the network configuration information synchronization module 1012 is used to obtain encrypted network configuration information from the gateway device, and then reconnect to the actual target network after decryption using a local PIN code.

[0191] In an application instance, such as Figure 11 As shown, the automatically triggered process for ICT terminals to resynchronize network configuration information includes four steps: 1) SSID identification and temporary hotspot activation, 2) terminal connection and authentication guidance, 3) attribution determination and platform confirmation, and 4) encrypted configuration information distribution and terminal reconnection. The specific implementation methods for each step are as follows: 1) SSID identification and temporary hotspot activation The gateway device listens for probe requests initiated by ICT terminals and identifies whether the network configuration record module contains previously connected SSIDs. If the probe request includes a previously connected SSID (checking whether it is a previously used SSID), it determines that the ICT terminal may be a reconnecting device and automatically triggers the temporary hotspot control process. The gateway device opens a temporary hotspot with the same name as the previously connected SSID and configures Portal authentication and VLAN isolation policies. Simultaneously, it returns a probe response to the ICT terminal, guiding the terminal to connect to the temporary hotspot network.

[0192] 2) Terminal Connection and Authentication Guidance

[0193] After receiving the probe response, the ICT terminal automatically connects to the temporary hotspot and then attempts to establish MQTT connections and other service requests. The service requests are intercepted by the Portal authentication mechanism, which guides the ICT terminal to execute the authentication process. The gateway device receives the deviceid actively reported by the terminal and hands it over to the terminal authentication module for local matching and judgment.

[0194] 3) Ownership determination and platform confirmation

[0195] If the ICT terminal is accessing the gateway device for the first time, the gateway device cannot identify its affiliation from its local configuration; the platform affiliation determination process is initiated, and the deviceid is reported to the ICT business management platform; the ICT business management platform determines whether the terminal belongs to the enterprise corresponding to the current gateway device through the enterprise account relationship; if it is determined that it belongs to the enterprise corresponding to the current gateway device, it authorizes the continuation of the network configuration synchronization process.

[0196] 4) Encryption configuration distribution and terminal reconnection

[0197] The gateway device calls the encrypted configuration generation module and uses the PIN code corresponding to the terminal to encrypt the SSID / password and other configuration information of the target network. The encrypted configuration information is sent to the ICT terminal through a secure channel. The ICT terminal decrypts the information using its local PIN and automatically switches to the official network SSID to connect. After the ICT terminal successfully connects to the official network, the gateway device closes the temporary hotspot. The gateway device records the connected terminal deviceid in its local terminal connection record, and the process ends.

[0198] In one example, a process is provided for automatically synchronizing the configuration information of the target network after an ICT terminal loses network access, such as... Figure 12 As shown, the configuration information of the wireless network in an office area has been updated. The SSID has been changed from Enterprise_WiFi to Enterprise_NextGen, the password has been changed from Ent2023@Office to Ent2024@Secure, and a stronger encryption method has been enabled, such as changing the encryption method from WPA2 to WPA3.

[0199] A smart cloud printing terminal in the office area, model number ICT110112333 (MAC address A1:B2:C3:D4:E5:F6), lost network access after an update. Attempts to reconnect to the old SSID failed, triggering an automatic network configuration synchronization process, as detailed below: 1. Terminal detection and hotspot guidance (gateway triggering process) After the printer terminal is disconnected from the network, it periodically sends probe request frames, in which the SSID field is Enterprise_WiFi.

[0200] The gateway device listens to the probe request frame and confirms that it is a historical SSID of the enterprise through the "SSID identification module".

[0201] The gateway device automatically starts a temporary hotspot with the same name, Enterprise_WiFi, configured as follows: The password is the same as the original network password: 12341234; VLAN ID: 105, network restrictions allow only Portal authentication; enable WiFiDog for portal authentication; The Portal is enabled to block all unauthenticated traffic and redirect it to the network authentication module.

[0202] 2. Terminal Access and Authentication Interaction

[0203] When the printer terminal sends a probe request frame for the second time, the gateway device responds to the terminal with its probe response. This probe response carries the configuration information of the temporary hotspot Enterprise_WiFi, and the terminal accesses the Enterprise_WiFi temporary hotspot through this configuration information.

[0204] If an MQTT connection or direct connection to the platform is initiated but blocked by WiFiDog, a 307 redirect will redirect the terminal to the authentication server, guiding it into the authentication process.

[0205] The authentication page is returned to the terminal, and the terminal reports the deviceid based on the authentication hotspot JS.

[0206] The printer terminal reports deviceid=ICT110112333_A1B2C3D4E5F6 to the gateway device via HTTPS.

[0207] The gateway device checks in its local "Terminal Connection Records" whether the device ID has ever been connected to the gateway device.

[0208] 3. Platform ownership confirmation and PIN synchronization

[0209] Whether the device has been connected to this gateway device, the gateway device will report the device ID to the ICT business management platform.

[0210] The ICT business management platform queries the printer terminal's ownership record, confirms that the printer terminal belongs to the enterprise account (EnterpriseId) served by the gateway device, and allows its access. Simultaneously, the ICT business management platform returns the PIN code bound to the printer terminal. pin_code='E5QK19LPMT7Z83YBHFVAN2XJDWCU64RG' The gateway device creates a temporary network configuration session locally and saves the PIN for subsequent encryption operations.

[0211] 4. Generate and encrypt the official configuration information.

[0212] The gateway device adapts the original WiFi configuration information to the new WiFi configuration information; the new WiFi configuration information is shown below: SSID: Enterprise_NextGen Password: Ent2024@Secure Use pin_code to perform AES-128-CBC encryption, assuming the IV is 0001020304050607.

[0213] EncryptedConfig="7qC9sXTXKMR3U8cNqlIvAkOe+vZC6qRgf61C4tZWt4M="

[0214] The gateway device sends the new WiFi configuration information to the printer terminal via a RESTful API.

[0215] 5. Terminal decryption and reconnection

[0216] After receiving the encrypted configuration information, the printer terminal decrypts it using the locally stored PIN code E5QK19LPMT7Z83YBHFVAN2XJDWCU64RG to obtain the plaintext configuration information: SSID: Enterprise_NextGen Password: Ent2024@Secure The printer terminal disconnects from the temporary hotspot and connects to the newly configured wireless network.

[0217] The gateway device shuts down the temporary hotspot and releases VLAN resources.

[0218] The gateway device will connect to the local deviceId ICT110112333_A1B2C3D4E5F6 and store it in the terminal connection record.

[0219] This solution enables automatic identification of disconnected terminals and secure synchronization of network configuration information. It is suitable for scenarios requiring large-scale ICT device access, network configuration, and management, thereby improving the intelligence level of network configuration and maintenance efficiency.

[0220] It can be deployed on converged gateways and their connected AP devices. By listening to terminal requests and judging SSID matching, it automatically opens temporary hotspots and guides terminals to connect. Combined with the Portal authentication and encrypted configuration distribution mechanism, it only switches to the formal network after the terminal completes authentication and receives configuration information. This effectively avoids problems such as manual network configuration and configuration leakage, ensures network security, and improves the continuity and stability of device networking.

[0221] In office environments, a large number of terminal devices (such as printers, conference terminals, and cameras) are distributed across different floors and network areas. The solution disclosed herein can automatically detect and synchronize the configuration of devices that are out of the network, which facilitates unified information management and reduces the on-site maintenance pressure on operation and maintenance personnel.

[0222] In industrial park environments, industrial IoT terminals such as sensors and PLC controllers often experience configuration failures due to migration or network reconstruction. The solution disclosed herein can automatically synchronize configuration parameters after the terminal is reconnected or moved, ensuring rapid reconnection between the device and the gateway and improving the stability of the industrial network.

[0223] In digital home scenarios, this solution addresses the issue of devices such as cameras, robot vacuums, and smart control screens deployed in smart homes losing network connectivity after users change Wi-Fi settings. This solution can assist devices in restoring their connection through old SSID identification and temporary hotspots, improving the user's seamless experience after network switching. It is suitable for smart home service deployments by telecom operators.

[0224] Based on the same inventive concept, this disclosure also provides a configuration information processing apparatus, as described in the following embodiments. Since the principle by which this configuration information processing apparatus solves the problem is similar to that of the method embodiments described above, the implementation of this configuration information processing apparatus embodiment can refer to the implementation of the method embodiments described above, and repeated details will not be elaborated further.

[0225] Figure 13 This illustration shows a schematic diagram of a configuration information processing device configured on a gateway device according to an embodiment of the present disclosure, such as... Figure 13 As shown in the diagram, the configuration information processing device configured on the gateway device includes: a probe request acquisition module 1310, a reconnection judgment module 1320, a temporary hotspot activation module 1330, and a target network configuration information sending module 1340.

[0226] The probe request acquisition module 1310 is used to acquire probe requests sent by the terminal; the reconnection judgment module 1320 is used to determine whether the terminal is a reconnection device based on the probe request; the temporary hotspot activation module 1330 is used to activate a temporary hotspot if it is determined that the terminal is a reconnection device, so that the terminal can access the temporary hotspot; and the target network configuration information sending module 1340 is used to send the target network configuration information to the terminal after detecting that the terminal has accessed the temporary hotspot, so that the terminal can access the target network.

[0227] In some embodiments, the probe request carries a network identifier; the reconnection determination module 1320 is specifically used to determine whether the network identifier carried in the probe request is a historical network identifier; if the network identifier carried in the probe request is the same as the historical network identifier, then it is determined that the terminal is a reconnection device.

[0228] In some embodiments, the temporary hotspot activation module 1330 is specifically used to activate a temporary hotspot with the same name as the network identifier carried in the probe request; configure network authentication and VLAN isolation policies for the temporary hotspot; and send a probe response to the terminal, the probe response carrying the configuration information of the temporary hotspot, so that the terminal can access the temporary hotspot according to the configuration information of the temporary hotspot.

[0229] In some embodiments, the target network configuration information sending module 1340 is specifically used to detect that the terminal has accessed a temporary hotspot, obtain the service request sent by the terminal through the temporary hotspot, and if it is determined that the terminal has not completed network access authentication, then intercept the service request and send authentication information to the terminal. The authentication information is used to instruct the terminal to perform network access authentication. After detecting that the terminal has completed network access authentication, the module sends the target network configuration information to the terminal so that the terminal can access the target network.

[0230] In some embodiments, the target network configuration information sending module 1340 is specifically used to receive a device identifier sent by a terminal; determine the PIN corresponding to the terminal based on the device identifier; encrypt the target network configuration information using the PIN corresponding to the terminal; and send the encrypted target network configuration information to the terminal so that the terminal can access the target network through the target network configuration information.

[0231] In some embodiments, the configuration information sending module 1340 of the target network includes a PIN determination unit, used to determine the PIN corresponding to the terminal based on the device identifier, including: determining whether the terminal is a first-time access device based on the device identifier; if the terminal is a first-time access device, sending the device identifier to the terminal management platform so that the terminal management platform determines the terminal corresponding to the gateway device based on the device identifier and then determines the PIN corresponding to the terminal; and receiving the PIN corresponding to the terminal sent by the terminal management platform.

[0232] In some embodiments, the PIN determination unit is further configured to obtain the PIN corresponding to the terminal stored locally by the gateway device if the terminal is not a first-time access device.

[0233] In some embodiments, a temporary hotspot shutdown module is also included, which is used to shut down the temporary hotspot after detecting that the terminal has accessed the target network.

[0234] Figure 14 This diagram illustrates a configuration information processing device configured on a terminal according to an embodiment of the present disclosure, such as... Figure 14 As shown, the schematic diagram of the configuration information processing device configured on the gateway device includes: a probe request sending module 1410, a target network configuration information receiving module 1420, and a target network access module 1430.

[0235] The probe request sending module 1410 is used to send a probe request to the gateway device so that the gateway device can determine whether the terminal is a reconnection device based on the probe request. If the terminal is determined to be a reconnection device, a temporary hotspot is enabled. The target network configuration information receiving module 1420 is used to access the temporary hotspot and receive the target network configuration information sent by the gateway device through the temporary hotspot. The target network access module 1430 is used to access the target network based on the target network configuration information.

[0236] In some embodiments, the target network configuration information receiving module 1420 is specifically configured to send the terminal's device identifier to the gateway device via a temporary hotspot, so that the gateway device determines the personal identification code (PIN) corresponding to the terminal based on the device identifier, encrypts the target network configuration information using the terminal's PIN, and sends the encrypted target network configuration information to the terminal; receive the encrypted target network configuration information sent by the gateway device; and access the target network based on the target network configuration information, including: decrypting the encrypted target network configuration information using the PIN stored locally on the terminal to obtain the decrypted target network configuration information; and accessing the target network using the target network configuration information.

[0237] In some embodiments, a network access authentication module is further included, which is used to send a service request to the gateway device through a temporary hotspot, so that after the gateway device determines that the terminal has not completed network access authentication, it intercepts the service request and sends authentication information to the terminal; receives the authentication information and performs network access authentication based on the authentication information; and after completing network access authentication, sends the terminal's device identifier to the gateway device through the temporary hotspot.

[0238] In some embodiments, the system further includes a temporary hotspot disconnection module for disconnecting from the temporary hotspot.

[0239] It should be noted that the examples and application scenarios implemented by the modules in the above device embodiments and the corresponding steps in the method embodiments are the same, but are not limited to the content disclosed in the above method embodiments. It should also be noted that the above modules, as part of the device, can be executed in a computer system such as a set of computer-executable instructions.

[0240] Those skilled in the art will understand that various aspects of this disclosure can be implemented in the following forms: a completely hardware implementation, a completely software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which can be collectively referred to herein as a "circuit", "module" or "system".

[0241] Based on the same inventive concept, this disclosure also provides an electronic device, which includes: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform a processing method for configuration information of any of the above-described methods by executing the executable instructions. Since the principle by which this electronic device embodiment solves the problem is similar to that of the above-described method embodiment, the implementation of this electronic device embodiment can refer to the implementation of the above-described method embodiment, and repeated details will not be elaborated further.

[0242] The following reference Figure 15 To describe an electronic device 1500 according to such an embodiment of the present disclosure. Figure 15The electronic device 1500 shown is merely an example and should not be construed as limiting the functionality and scope of use of the embodiments disclosed herein.

[0243] like Figure 15 As shown, the electronic device 1500 is manifested in the form of a general-purpose computing device. The components of the electronic device 1500 may include, but are not limited to: at least one processing unit 1510, at least one storage unit 1520, and a bus 1530 connecting different system components (including storage unit 1520 and processing unit 1510).

[0244] The storage unit stores program code that can be executed by the processing unit 1510, causing the processing unit 1510 to perform the steps described in the "Exemplary Methods" section above according to various exemplary embodiments of this disclosure.

[0245] In some embodiments, when the electronic device 1500 is a gateway device, the processing unit 1510 may execute the following steps of the above method embodiment: obtaining a probe request sent by the terminal; determining whether the terminal is a reconnection device based on the probe request; if it is determined that the terminal is a reconnection device, then enabling a temporary hotspot to allow the terminal to access the temporary hotspot; after detecting that the terminal has accessed the temporary hotspot, sending configuration information of the target network to the terminal to allow the terminal to access the target network.

[0246] In some embodiments, when the electronic device 1500 is a terminal, the processing unit 1510 may perform the following steps of the above method embodiment: send a probe request to the gateway device so that the gateway device determines whether the terminal is a reconnection device based on the probe request; if the terminal is determined to be a reconnection device, then enable a temporary hotspot; access the temporary hotspot and receive the configuration information of the target network sent by the gateway device through the temporary hotspot; access the target network based on the configuration information of the target network.

[0247] Storage unit 1520 may include readable media in the form of volatile storage units, such as random access memory (RAM) 15201 and / or cache memory 15202, and may further include read-only memory (ROM) 15203.

[0248] Storage unit 1520 may also include a program / utility 15204 having a set (at least one) of program modules 15205, such program modules 15205 including but not limited to: operating system, one or more application programs, other program modules and program data, each or some combination of these examples may include an implementation of a network environment.

[0249] Bus 1530 can represent one or more of several types of bus structures, including a memory cell bus or memory cell controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local bus using any of the various bus structures.

[0250] Electronic device 1500 can also communicate with one or more external devices 1540 (e.g., keyboard, pointing device, Bluetooth device, etc.), one or more devices that enable a user to interact with electronic device 1500, and / or any device that enables electronic device 1500 to communicate with one or more other computing devices (e.g., router, modem, etc.). This communication can be performed via input / output (I / O) interface 1550. Furthermore, electronic device 1500 can also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN), and / or public networks, such as the Internet) via network adapter 1560. As shown, network adapter 1560 communicates with other modules of electronic device 1500 via bus 1530. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with electronic device 1500, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0251] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, terminal device, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0252] Based on the same inventive concept, this disclosure also provides a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements a method for processing configuration information as described above. Since the principle by which this computer-readable storage medium embodiment solves the problem is similar to that of the above method embodiments, the implementation of this computer-readable storage medium embodiment can refer to the implementation of the above method embodiments, and repeated details will not be elaborated further.

[0253] More specific examples of computer-readable storage media in this disclosure may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0254] In this disclosure, a computer-readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, carrying readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium, capable of transmitting, propagating, or transmitting a program for use by or in connection with an instruction execution system, apparatus, or device.

[0255] Optionally, the program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, RF, etc., or any suitable combination thereof.

[0256] In practical implementation, program code for performing the operations of this disclosure can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java and C++, and conventional procedural programming languages ​​such as C or similar languages. The program code can execute entirely on the user's computing device, partially on the user's device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0257] Based on the same inventive concept, this disclosure also provides a computer program product, including a computer program or instructions, which, when executed by a processor, implements the configuration information processing method of any one of the above method embodiments. Since the principle by which this computer program product embodiment solves the problem is similar to that of the above method embodiments, the implementation of this computer program product embodiment can refer to the implementation of the above method embodiments, and repeated details will not be elaborated further.

[0258] It should be noted that although several modules or units for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to embodiments of this disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0259] Furthermore, although the steps of the method in this disclosure are described in a specific order in the accompanying drawings, this does not require or imply that the steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result. Additional or alternative steps may be omitted, multiple steps may be combined into one step, and / or a step may be broken down into multiple steps.

[0260] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, mobile terminal, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0261] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the appended claims.

Claims

1. A processing method of configuration information, characterized by, Applied to a gateway device, comprising: Obtaining a terminal sending a probe request; Determine whether the terminal is a reconnecting network device based on the probe request; If it is determined that the terminal is the reconnecting network device, start a temporary hotspot to enable the terminal to access the temporary hotspot; After detecting that the terminal accesses the temporary hotspot, send the configuration information of the target network to the terminal to enable the terminal to access the target network.

2. The method of claim 1, wherein, The probe request carries a network identifier; The determination whether the terminal is the reconnecting network device based on the probe request comprises: Determine whether the network identifier carried in the probe request is a historical network identifier; If the network identifier carried in the probe request is the same as the historical network identifier, it is determined that the terminal is the reconnecting network device.

3. The method of claim 2, wherein, The start of the temporary hotspot to enable the terminal to access the temporary hotspot comprises: Start a temporary hotspot with the same name as the network identifier carried in the probe request; Configure network authentication and VLAN isolation policy for the temporary hotspot; Send a probe response to the terminal, and the probe response carries the configuration information of the temporary hotspot, so that the terminal accesses the temporary hotspot according to the configuration information of the temporary hotspot.

4. The method of claim 1, wherein, After detecting that the terminal accesses the temporary hotspot, send the configuration information of the target network to the terminal to enable the terminal to access the target network, comprising: After detecting that the terminal accesses the temporary hotspot, obtain the service request sent by the terminal through the temporary hotspot, and determine that the terminal has not completed network permission authentication, then intercept the service request and send authentication information to the terminal, the authentication information is used to instruct the terminal to perform network permission authentication; After detecting that the terminal completes the network permission authentication, send the configuration information of the target network to the terminal to enable the terminal to access the target network.

5. The method of claim 1-4, wherein, The sending of the configuration information of the target network to the terminal comprises: Receive the device identifier sent by the terminal; Determine the personal identification code (PIN) corresponding to the terminal based on the device identifier; Encrypt the configuration information of the target network by using the PIN corresponding to the terminal; Send the encrypted configuration information of the target network to the terminal, so that the terminal accesses the target network through the configuration information of the target network.

6. The method of claim 5, wherein, The determination of the PIN corresponding to the terminal based on the device identifier comprises: Determine whether the terminal is a first access device based on the device identifier; If the terminal is a first access device, send the device identifier to a terminal management platform, so that the terminal management platform determines the PIN corresponding to the terminal after determining that the terminal is the terminal corresponding to the gateway device based on the device identifier; Receive the PIN corresponding to the terminal sent by the terminal management platform.

7. The method of claim 6, wherein, Further comprising: If the terminal is a non-first access device, obtain the PIN corresponding to the terminal stored locally by the gateway device.

8. The method of claim 1, wherein, Further comprising: After detecting that the terminal accesses the target network, close the temporary hotspot.

9. A processing method of configuration information, characterized by, Applied to a terminal, comprising: sending a probe request to a gateway device, so that the gateway device judges whether the terminal is a reconnecting device based on the probe request, and starts a temporary hotspot if it is determined that the terminal is the reconnecting device; accessing the temporary hotspot and receiving configuration information of a target network sent by the gateway device through the temporary hotspot; accessing the target network based on the configuration information of the target network.

10. The method of claim 9, wherein, The receiving of the configuration information of the target network sent by the gateway device through the temporary hotspot comprises: sending a device identifier of the terminal to the gateway device through the temporary hotspot, so that the gateway device determines a personal identification code (PIN) corresponding to the terminal based on the device identifier, encrypts the configuration information of the target network by using the PIN corresponding to the terminal, and sends the encrypted configuration information of the target network to the terminal; receiving the encrypted configuration information of the target network sent by the gateway device; The accessing of the target network based on the configuration information of the target network comprises: decrypting the encrypted configuration information of the target network by using a PIN stored locally in the terminal to obtain decrypted configuration information of the target network; accessing the target network by using the configuration information of the target network.

11. The method of claim 10, wherein, Further comprising: sending a service request to the gateway device through the temporary hotspot, so that the gateway device intercepts the service request and sends authentication information to the terminal after determining that the terminal has not completed network permission authentication; receiving the authentication information and performing network permission authentication based on the authentication information; sending a device identifier of the terminal to the gateway device through the temporary hotspot after completing the network permission authentication.

12. The method of claim 9, wherein, Further comprising: disconnecting the connection with the temporary hotspot.

13. A processing apparatus of configuration information, characterized by, The gateway device comprises: a probe request obtaining module configured to obtain a probe request sent by a terminal; a reconnecting device judging module configured to judge whether the terminal is a reconnecting device based on the probe request; a temporary hotspot starting module configured to start a temporary hotspot if it is determined that the terminal is the reconnecting device, so that the terminal accesses the temporary hotspot; a configuration information sending module configured to send configuration information of a target network to the terminal after detecting that the terminal accesses the temporary hotspot, so that the terminal accesses the target network.

14. A processing apparatus of configuration information, characterized by, The terminal comprises: a probe request sending module configured to send a probe request to a gateway device, so that the gateway device judges whether the terminal is a reconnecting device based on the probe request, and starts a temporary hotspot if it is determined that the terminal is the reconnecting device; a configuration information receiving module configured to access the temporary hotspot and receive configuration information of a target network sent by the gateway device through the temporary hotspot; a target network accessing module configured to access the target network based on the configuration information of the target network.

15. A communication system, characterized by The system comprises a gateway device and a terminal; the terminal is configured to send a probe request to the gateway device; The gateway device is configured to acquire the probe request and determine whether the terminal is a reconnecting device based on the probe request; if it is determined that the terminal is the reconnecting device, a temporary hotspot is started; The terminal is further configured to access the temporary hotspot; The gateway device is further configured to, after detecting that the terminal accesses the temporary hotspot, send configuration information of a target network to the terminal; The terminal is further configured to receive the configuration information of the target network sent by the gateway device through the temporary hotspot, and access the target network based on the configuration information of the target network.

16. The communication system of claim 15, wherein, Further comprising: a terminal management platform; The terminal is further configured to send a device identifier of the terminal to the gateway device through the temporary hotspot; The gateway device is further configured to determine whether the terminal is a first access device based on the device identifier, and send the device identifier to the terminal management platform if the terminal is the first access device; The terminal management platform is configured to, after determining that the terminal is a terminal corresponding to the gateway device based on the device identifier, generate a PIN corresponding to the terminal and send the PIN to the gateway device; The gateway device is further configured to receive the PIN corresponding to the terminal sent by the terminal management platform, encrypt the configuration information of the target network by using the PIN corresponding to the terminal, and send the encrypted configuration information of the target network to the terminal; The terminal is further configured to decrypt the encrypted configuration information of the target network by using a locally stored PIN to obtain decrypted configuration information of the target network, and access the target network by using the configuration information of the target network.

17. An electronic device, comprising: comprise: a processor; and a memory configured to store executable instructions of the processor; wherein the processor is configured to execute the executable instructions to perform the processing method of the configuration information according to any one of claims 1 to 12.

18. A computer readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the processing method of the configuration information according to any one of claims 1 to 12.

19. A computer program product, comprising: Computer program or instructions, characterized in that the computer program or instructions are executed by the processor to implement the processing method of the configuration information according to any one of claims 1 to 12.

Images