Network connection establishment method, device, system and terminal equipment
By obtaining and utilizing the pseudo-wireless access network identifier of the terminal, and combining the pre-stored mapping relationship, network connection is established, the problem of difficult network security in outdoor wireless LAN equipment maintenance is solved, and the security management and illegality of terminal equipment are realized Prevention of user access.
Patent Information
- Application Number
- CN201911396293.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2019-12-30
- Publication Date
- 2025-01-03
- Estimated Expiration
- 2039-12-30
AI Technical Summary
When maintaining and upgrading wireless LAN equipment installed outdoors, it is difficult to ensure network security through black and white lists or complex passwords, especially to obtain the physical address of the terminal, and brute force cracking may obtain network passwords, resulting in illegal user access.
By obtaining the pseudo-wireless access network identifier of the terminal, and using the pre-stored mapping relationship to determine the connection configuration information of the target wireless access network, establishing a network connection, and using the pseudo-wireless access network identifier to broadcast to confuse illegal users and improve the network Security.
It effectively avoids illegal user access, improves the security of WiFi network, simplifies the management and maintenance of terminal equipment by maintenance personnel, hides functional WiFi hotspots, and enhances the security of network connections.
Smart Images

Figure CN113132984B_ABST
Abstract
Description
Technical Field
[0001] The embodiments of the present invention relate to the field of communication technology, and specifically to a method, device, system and terminal equipment for establishing a network connection. Background Art
[0002] Wireless Local Area Network (WLAN) can form a network system for mutual communication and resource sharing through wireless communication technology, making the network construction and terminal mobility more flexible.
[0003] For devices installed outdoors that can provide wireless network access, when maintaining and upgrading the devices by establishing a WiFi connection through wireless LAN technology, the security of the WiFi connection needs to be considered.
[0004] When limiting user access by setting up a blacklist or whitelist, it is difficult to obtain the physical addresses of all terminals to set corresponding permissions because the access terminals are not fixed; and when limiting users from using the network by setting up a complex password, the network password can still be obtained through brute force cracking. Summary of the invention
[0005] The embodiments of the present invention provide a method, device, system and terminal equipment for establishing a network connection, which can improve network security and prevent access by illegal users.
[0006] In a first aspect, an embodiment of the present invention provides a method for establishing a network connection, comprising: obtaining a network identifier of a pseudo wireless access network of a terminal, where the pseudo wireless access network is a wireless access network that can be scanned; determining connection configuration information of a target wireless access network having a mapping relationship with the obtained network identifier by using a pre-stored mapping relationship between the network identifier of the pseudo wireless access network and connection configuration information of a target wireless access network, wherein the target wireless access network is a wireless access network for which a network identifier is not broadcast in the terminal; and establishing a network connection with the target wireless access network according to the connection configuration information.
[0007] In a second aspect, an embodiment of the present invention provides a method for establishing a network connection, comprising: broadcasting a network identifier of a pseudo wireless access network so that the network identifier of the pseudo wireless access network can be scanned; in response to receiving connection configuration information of a target wireless access network, establishing a network connection according to the connection configuration information of the target wireless access network.
[0008] In a third aspect, an embodiment of the present invention provides a method for operating a terminal, comprising: establishing a network connection with the terminal using the network connection establishment method of the first aspect; and performing a predetermined operation on the terminal.
[0009] In a fourth aspect, an embodiment of the present invention provides a method for establishing a network connection, including: a terminal broadcasts a network identifier of a pseudo wireless access network; a user device obtains the network identifier of the pseudo wireless access network by scanning; using a pre-stored mapping relationship between the network identifier of the pseudo wireless access network and the connection configuration information of the target wireless access network, determining the connection configuration information of the target wireless access network that has a mapping relationship with the network identifier obtained by scanning; and establishing a network connection with the target wireless access network according to the connection configuration information.
[0010] In a fifth aspect, an embodiment of the present invention provides a network connection establishment device, including: an identification scanning module, used to obtain a network identification of a pseudo wireless access network of a terminal, where the pseudo wireless access network is a wireless access network that can be scanned; a configuration determination module, used to determine the connection configuration information of a target wireless access network that has a mapping relationship with the acquired network identification by using a pre-stored mapping relationship between the network identification of the pseudo wireless access network and the connection configuration information of the target wireless access network, wherein the target wireless access network is a wireless access network that does not broadcast the network identification in the terminal; and a connection establishment module, used to establish a network connection with the target wireless access network according to the connection configuration information.
[0011] In a sixth aspect, an embodiment of the present invention provides a terminal device, comprising a first wireless access device and a second wireless access device, wherein the network identification broadcast of the first wireless access device is configured to be in an on state, and the network identification broadcast of the second wireless access device is configured to be in an off state; and wherein the first wireless access device is used to broadcast the network identification of a pseudo wireless access network so that the network identification of the pseudo wireless access network can be scanned; and the second wireless access device is used to establish a network connection according to the connection configuration information of the target wireless access network in response to receiving the connection configuration information of the target wireless access network.
[0012] In a seventh aspect, an embodiment of the present invention provides a network connection establishment system, including: a network identification broadcasting module, used for a terminal to broadcast the network identification of a pseudo wireless access network; a network identification scanning module, used for a user device to obtain the network identification of the pseudo wireless access network by scanning; a network configuration determination module, used for a user device to use a pre-stored mapping relationship between the network identification of the pseudo wireless access network and the connection configuration information of the target wireless access network to determine the connection configuration information of the target wireless access network that has a mapping relationship with the network identification obtained by scanning; a network connection establishment module, used for a user device to establish a network connection with the target wireless access network according to the connection configuration information.
[0013] In an eighth aspect, an embodiment of the present invention provides a server, comprising: a memory and a processor; the memory is used to store programs; the processor is used to read the executable program code stored in the memory to execute the network connection establishment method of the first aspect, the second aspect or the fourth aspect, or the method of operating a terminal of the third aspect.
[0014] In a ninth aspect, an embodiment of the present invention provides a computer-readable storage medium, in which instructions are stored. When the instructions are executed on a computer, the computer executes the network connection establishment method or the method for operating a terminal in the above-mentioned aspects.
[0015] According to the network connection establishment method, apparatus, system and terminal device of the embodiments of the present invention, the connection configuration information of the target wireless access network is determined based on the network identifier of the wireless access network that can be scanned, and the preset mapping relationship between the scanned network identifier and the connection configuration information of the terminal target wireless access network, so that by establishing a network connection with the target wireless access network of the terminal device, the maintenance personnel can improve the management and maintenance of the terminal device, improve the security of the WiFi network connection, and prevent the hotspot of the terminal device from being accessed by illegal users. BRIEF DESCRIPTION OF THE DRAWINGS
[0016] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. Together with the following specific embodiments, they are used to explain the present invention, but do not constitute a limitation of the present invention.
[0017] Figure 1 A schematic diagram of a network architecture of a network connection system in an embodiment of the present invention is shown.
[0018] Figure 2 A flow chart showing a method for establishing a network connection according to an embodiment of the present invention.
[0019] Figure 3 A schematic diagram showing the mapping relationship between scanned wireless access networks and target wireless access networks is shown.
[0020] Figure 4 A flow chart of a method for obtaining a network identifier and a password of a wireless access network in a terminal according to an embodiment is shown.
[0021] Figure 5 A flow chart showing a method for acquiring a network identifier and a password of a wireless access network in a terminal according to another embodiment is shown.
[0022] Figure 6 A flow chart of a method for obtaining a network identifier and a password of a wireless access network in a terminal according to another embodiment is shown.
[0023] Figure 7A schematic flow chart showing a method for establishing a network connection according to another embodiment of the present invention.
[0024] Figure 8 A schematic flow chart showing a method for establishing a network connection according to yet another embodiment of the present invention.
[0025] Fig. 9 A schematic flow chart of a method for operating a terminal according to an embodiment of the present invention is shown.
[0026] Fig.10 A detailed flow chart of a method for establishing a network connection according to another embodiment of the present invention is shown.
[0027] Fig.11 A schematic diagram of the structure of a network connection establishment device provided according to an embodiment of the present invention is shown.
[0028] Fig.12 A schematic diagram showing the structure of a terminal device in an embodiment of the present invention is shown.
[0029] Fig.13 A schematic diagram showing the structure of a system for establishing a network connection in an embodiment of the present invention is shown.
[0030] Fig.14 A schematic diagram showing the structure of a terminal operating system in an embodiment of the present invention is shown.
[0031] Fig.15 A structural diagram showing an exemplary hardware architecture of a computing device that can implement the method and apparatus according to an embodiment of the present invention. DETAILED DESCRIPTION
[0032] The specific embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. It should be understood that the specific embodiments described herein are only used to illustrate and explain the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention can be implemented without the need for some of these specific details. The following description of the embodiments is only intended to provide a better understanding of the present invention by illustrating examples of the present invention.
[0033] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "includes..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.
[0034] Figure 1FIG. 2 is a schematic diagram showing a network architecture of a network connection system in an embodiment of the present invention. Figure 1 As shown, the network architecture may include: a terminal device 10 , a user equipment 11 and a network 12 .
[0035] The terminal device 10 may include at least two wireless access devices, such as a first wireless access device 101 and a second wireless access device 102. Exemplarily, the wireless access device in the terminal device may be a WiFi hotspot or a wireless access point (Access Point, AP).
[0036] The user equipment 11 may be a computer equipped with a wireless network card, or a terminal device equipped with a WIFI module, such as a personal computer, a smart phone, a tablet computer, a personal digital assistant, a server, etc. In the embodiment of the present invention, the site device may also be referred to as a terminal, a wireless terminal, a wireless device or a wireless client.
[0037] The network 12 is a medium for providing communication links between various electronic devices. Specifically, the network 12 may include various connection types, such as wired or wireless communication links or optical fiber cables.
[0038] It should be understood that Figure 1 The number of devices in the example is only for illustration. It can be adjusted flexibly according to the actual application needs. In addition, this architecture can also include some auxiliary devices, such as routers, etc. It can be flexibly configured according to the needs, and there is no limitation in this regard.
[0039] For example, the terminal device 10 can be any product that can provide wireless access function. Taking the Road Side Unit (RSU) as an example, the RSU is a device in the Electronic Toll Collection (ETC) system that is installed on the roadside and can communicate with the On Board Unit (OBU) to realize vehicle identification and electronic deduction.
[0040] Usually, the RSU is installed on a traffic signal pole or a gantry above the highway, so after-sales maintenance personnel cannot access the device to capture log files or upgrade the RSU version; when the RSU turns on the WiFi hotspot function, the RSU can be remotely connected to establish a WiFi connection to obtain log files, perform maintenance and upgrade operations, etc.
[0041] Unlike ordinary home routers, when the terminal device 10 is installed outdoors, safety is particularly important, and information such as network identification signals and network passwords cannot be printed on the product labels of the terminal device 10. Therefore, in the face of tens of thousands of devices, maintenance personnel do not know the network identification information and network passwords of the WiFi hotspots of the current devices.
[0042] The embodiments of the present invention provide a network connection establishment method, device, system and terminal equipment, which can improve the management and maintenance of terminal equipment by maintenance personnel, improve the security of WiFi network connection, and prevent the hotspot of the terminal equipment from being accessed by illegal users.
[0043] Figure 2 FIG. 1 is a flow chart showing a method for establishing a network connection according to an embodiment of the present invention. Figure 2 As shown, the network connection establishment method may include the following steps.
[0044] S110: Acquire a network identifier of a pseudo wireless access network of the terminal, where the pseudo wireless access network is a wireless access network that can be scanned.
[0045] S120, using a pre-stored mapping relationship between a network identifier of a pseudo wireless access network and connection configuration information of a target wireless access network, determining connection configuration information of a target wireless access network having a mapping relationship with the acquired network identifier, wherein the target wireless access network is a wireless access network for which a network identifier is not broadcast in the terminal.
[0046] S130: Establish a network connection with the target wireless access network according to the connection configuration information.
[0047] In step S110, the network identification information includes network information such as a service set identifier (SSID) and a network name. Different SSIDs can be used to distinguish different networks.
[0048] According to the network connection establishment method of an embodiment of the present invention, the target wireless access network in the terminal cannot be obtained by scanning, and the connection configuration information of the target wireless access network is determined based on the network identifier of the wireless access network that can be scanned, and the preset mapping relationship between the scanned network identifier and the connection configuration information of the target wireless access network of the terminal, so as to establish a network connection with the target wireless access network of the terminal device through the connection configuration information.
[0049] In the embodiment of the present invention, the terminal device may preset two WiFi hotspots, and each WiFi hotspot may correspond to a wireless access network. SSID, as network identification information, may be used to distinguish different networks. Therefore, for ease of description, the wireless access networks corresponding to the two WiFi hotspots of the terminal device may be referred to as wireless access network SSID1 and wireless access network SSID2.
[0050] Among them, SSID1 turns off the broadcast of its own network identification information. Maintenance personnel need to establish a WiFi connection with the terminal device through the connection configuration information of SSID1 to capture the terminal device LOG file and perform maintenance and upgrade the terminal device.
[0051] SSID2, the broadcast of its own network identification information is turned on, and SSID2 is set to prohibit any user from accessing.
[0052] In one embodiment, there are multiple ways to set SSID2 to prohibit any user from accessing. As an example, the whitelist of SSID2 can be set to be enabled, and the list of the whitelist is empty.
[0053] As another example, the maximum number of users allowed to access SSID2 may be set to 0 to prohibit users from accessing SSID2.
[0054] As another example, SSID2 can also be set to reply with a rejection when receiving a management message from a user to establish a network connection; or to reject the request to establish a WIFI connection when receiving a request to establish a WIFI connection through a four-way handshake process. The management message in this example can be, for example, a management message transmitted through an association frame or an authentication frame.
[0055] In the terminal device, the network identifier (eg SSID) of each wireless access network and the network password corresponding to the network identifier are different.
[0056] Since SSID1 can be used to implement the management and maintenance functions of terminal devices, the WiFi hotspot corresponding to SSID1 is a functional WiFi hotspot; and SSID2 plays a confusing role by broadcasting its own network identifier, thereby better hiding the functional WiFi hotspot, so the WiFi hotspot corresponding to SSID2 is a disguised WiFi hotspot.
[0057] Figure 3 A schematic diagram showing the mapping relationship between the wireless access networks that can be scanned and the target wireless access network is shown. Figure 3 As shown, the network identifier of the pseudo wireless access network is the network identifier of the wireless access network that can be scanned by the terminal, that is, the network identifier of the wireless access network SSID2 that disguises the WiFi hotspot.
[0058] There is a mapping relationship between the network identifier of the pseudo wireless access network and the network identifier and network password of the target wireless access network of the terminal device (for example, the wireless access network SSID1 of the functional WiFi hotspot). The mapping relationship is stored in advance, and the SSID and network password of SSID1 are searched according to the scanned SSID of SSID2.
[0059] In one embodiment, before step S110, the method may further include: saving a mapping relationship between a network identifier of a wireless access network that can be scanned and connection configuration information of a target wireless access network in preset configuration information, wherein the connection configuration information of the target wireless access network is information calculated by a predetermined algorithm using the network identifier of the wireless access network that can be scanned or using parameter information associated with the network identifier of the wireless access network that can be scanned.
[0060] In the embodiment of the present invention, a certain mapping relationship may be maintained between the wireless networks corresponding to the two WIFi hotspots with SSID broadcast turned on and the two hotspots with SSID broadcast turned off in the terminal.
[0061] In the preset configuration information of the embodiment of the present invention, the network identifier and network password of the wireless access network having a mapping relationship with the wireless access network that can be scanned can be implemented by a variety of methods. Figure 4-Figure 6 , explaining the specific steps of obtaining the network ID and password of the wireless access network in the terminal.
[0062] Figure 4 A flow chart showing a method for obtaining a network identifier and a password of a wireless access network in a terminal according to an embodiment; Figure 5 A flow chart showing a method for obtaining a network identifier and a password of a wireless access network in a terminal according to another embodiment; Figure 6 A flow chart of a method for obtaining a network identifier and a password of a wireless access network in a terminal according to another embodiment is shown.
[0063] like Figure 4 As shown, the acquisition method may include: S21, generating network identifiers and passwords of the target wireless access network SSID1 and the pseudo wireless access network SSID2 respectively; S22, acquiring and saving the network identifier and password of SSID1, and the network identifier and password of SSID2.
[0064] In one embodiment, the network identifier and network password of the wireless access network (SSID1) that has a mapping relationship with the wireless access network (such as SSID2) that can be scanned can be a network identifier and network password randomly generated or custom set by maintenance personnel before the terminal device is turned on.
[0065] like Figure 5As shown, the acquisition method may include: S31, generating a network identifier and password of a pseudo wireless access network SSID2; S32, calculating the network identifier and password of a target wireless access network SSID1 through a predetermined algorithm according to the network identifier of the pseudo SSID2.
[0066] like Figure 6 As shown, the acquisition method may include: S41, generating a network identifier and password of a pseudo wireless access network SSID2; S42, calculating the network identifier and password of the target wireless access network SSID1 through a predetermined algorithm using other parameter information associated with the network identifier and password of SSID2.
[0067] pass Figure 5 and Figure 6 It can be known that the network identifier and network password of the wireless access network having a mapping relationship with the scanned wireless access network can be the network identifier and network password calculated in advance using the specified information of the first wireless access network and a predetermined algorithm. The specified information of the first wireless access network includes the network identifier of the first wireless access network, or parameter information associated with the first wireless access network.
[0068] In this embodiment, the parameter information associated with the first wireless access network includes any one of the physical address of the terminal, the International Mobile Equipment Identity (IMEI) and the product serial number (SN); the predetermined algorithm is any one of an encryption algorithm or a bit operation.
[0069] As an example, the predetermined algorithm may be any algorithm, such as a message digest (MD5) algorithm, a hash encryption algorithm SHA-256, or a bitwise operation such as AND, OR, or shift. As a specific example, the SSID of the wireless access network that can be scanned is calculated by the MD5 algorithm to obtain a string of characters, and a part of the string is taken as the SSID and password of the target wireless access network.
[0070] As an example, other parameter information associated with the SSID of SSID2, such as but not limited to the physical address, IMEI number, SN serial number and other information of the terminal device, is used as a seed to calculate the SSID and password of SSID1 through a predetermined algorithm. For example, the above physical address, IMEI number or SN serial number is calculated by the MD5 algorithm to obtain a string of characters, and a part of the string is taken as the SSID and password of SSID2.
[0071] From the above description, it can be known that in one embodiment, step S120 may include: searching for connection configuration information having a mapping relationship with the network identifier obtained by scanning from preset configuration information, and using the found connection configuration information as the connection configuration information of the target wireless access network.
[0072] In this embodiment, the connection configuration information of the target wireless access network stored in the preset configuration information includes connection configuration information obtained by any one of the following methods: randomly generated connection configuration information, user-defined connection configuration information, and connection configuration information calculated by a predetermined algorithm using a network identifier of a wireless access network that can be scanned, or using parameter information associated with the network identifier of a wireless access network that can be scanned.
[0073] In another embodiment, step S120 may include: using the acquired network identifier, or parameter information associated with the acquired network identifier, to calculate and obtain connection configuration information of the target wireless access network according to a predetermined algorithm.
[0074] In an embodiment of the present invention, the connection configuration information of the target wireless access network can be obtained from the stored information according to the SSID of the scanned wireless access network by looking up a table; or the same predetermined algorithm as above can be used to calculate the network identifier of the terminal device that can be scanned to obtain the connection configuration information of the target wireless access network.
[0075] The network connection establishment method of the embodiment of the present invention obtains device information by scanning the disguised WiFi hotspot of the terminal device, and then calculates or searches the SSID and password of the functional WiFi hotspot through the device information, thereby adding a network using the SSID and password of the functional WiFi hotspot, and actively scans the functional SSID to establish a network connection. The network connection establishment method can perform security defense from the source, hide the functional WiFi hotspot so that the outside world cannot perceive the existence of the hotspot, broadcast the disguised WiFi hotspot to confuse criminals, and thus ensure the security of the network connection.
[0076] Figure 7 FIG. 2 is a flow chart showing a method for establishing a network connection according to another embodiment of the present invention. Figure 7 As shown, the network connection establishment method may include: S210, broadcasting the network identifier of the pseudo wireless access network so that the network identifier of the pseudo wireless access network can be scanned; S220, in response to receiving the connection configuration information of the target wireless access network, establishing a network connection according to the connection configuration information of the target wireless access network.
[0077] According to the network connection establishment method of the embodiment of the present invention, the terminal broadcasts the network identifier of the pseudo wireless access network, which can confuse criminals, and after receiving the connection configuration information of the target wireless access network, establishes a network connection according to the connection configuration information of the target wireless access network, thereby achieving the effect of safely and conveniently establishing a WiFi connection.
[0078] In one embodiment, the pseudo wireless access network is configured to prohibit user access.
[0079] In this embodiment, the pseudo wireless access network in the terminal is enabled for device information broadcasting, and is set to prohibit any user from accessing, thereby further improving the security of the network.
[0080] Figure 8 FIG. 2 is a flow chart showing a method for establishing a network connection according to another embodiment of the present invention. Figure 8 As shown, the network connection establishment method may include: S310, the terminal broadcasts the network identifier of the pseudo wireless access network. S320, the user equipment obtains the network identifier of the pseudo wireless access network by scanning. S330, using the pre-stored mapping relationship between the network identifier of the pseudo wireless access network and the connection configuration information of the target wireless access network, determining the connection configuration information of the target wireless access network that has a mapping relationship with the obtained network identifier, wherein the target wireless access network is a wireless access network that does not broadcast the network identifier in the terminal. S340, the user equipment establishes a network connection with the target wireless access network according to the connection configuration information.
[0081] In the network connection establishment method of this embodiment, the terminal broadcasts the network identifier of the pseudo wireless access network so that the network identifier of the pseudo wireless access network can be scanned. The user equipment queries the connection configuration information of the target wireless access network that has a mapping relationship with the network identifier by scanning the network identifier, and then establishes a connection with the target wireless access network based on the queried connection configuration information, thereby improving the security of the WiFi network and preventing the WiFi network of the terminal from being accessed by illegal users.
[0082] Fig. 9 FIG. 1 is a flow chart showing a method for operating a terminal according to an embodiment of the present invention. Fig. 9 As shown, the method for operating the terminal may include: S410, by combining the above embodiment with Figure 1-Figure 6 The described network connection establishment method establishes a network connection with a terminal. S420, performs a predetermined operation on the terminal.
[0083] In one embodiment, the predetermined operation includes at least one of log capture, remote maintenance, and software upgrade.
[0084] In an embodiment of the present invention, when after-sales personnel or maintenance personnel need to operate the terminal device, they can first establish a WiFi connection with the terminal through the network connection establishment method described in the above embodiment, and remotely obtain logs, maintain, upgrade versions, etc. by establishing a WiFi connection.
[0085] In order to better understand the network connection establishment method of the embodiment of the present invention, Fig.10 FIG. 2 is a detailed flow chart showing a method for establishing a network connection according to another embodiment of the present invention. Fig.10 As shown, the network connection establishment method of the embodiment of the present invention may include the following steps.
[0086] S501, presetting the SSID and password of the functional wireless network in the terminal.
[0087] In this step, before the terminal device starts up the WiFi hotspots SSID1 and SSID2, it is necessary to predetermine the SSID and password of SSID1, the SSID and password of SSID2, and the mapping relationship between SSID1 and SSID2. Among them, SSID1 is the wireless access network corresponding to the functional WiFi hotspot, and SSID2 is the wireless access network corresponding to the disguised WiFi hotspot.
[0088] S502, the terminal turns on two wireless access networks, sets the SSID broadcast of SSID1 to be off, the SSID broadcast of SSID2 to be on, and prohibits site devices from accessing.
[0089] S503, determining whether the user equipment has scanned the SSID2 of the terminal, if not, executing S504; if scanned, executing S505.
[0090] S504: Determine that the user connection fails.
[0091] S505, according to the scanned SSID of SSID2, search for the SSID and password of SSID1, if not scanned, execute S504; if scanned, execute S506.
[0092] S506, adding the SSID and password of SSID1, and establishing a network connection using the SSID and password of SSID1 scanned by active scanning.
[0093] S507, the terminal verifies whether the received SSID and password of SSID1 are correct. If the verification result is incorrect, execute S504; if the verification result is correct, execute S508.
[0094] S508: The user equipment successfully establishes a connection with the terminal equipment.
[0095] According to the network connection establishment method in the embodiment of the present invention, the security risk of WiFi connection can be reduced, because the SSID broadcast of the functional SSID is turned off from the source, and the outside world cannot perceive the existence of the hotspot, and the broadcasted camouflage SSID acts as a cover, thereby ensuring the connection security of the wireless connection network corresponding to the camouflage SSID.
[0096] The following describes in detail a network connection establishment device according to an embodiment of the present invention in conjunction with the accompanying drawings. Fig.11 FIG. 2 shows a schematic diagram of the structure of a network connection establishment device provided according to an embodiment of the present invention. Fig.11 As shown, the network connection establishing device may include the following modules.
[0097] The identification scanning module 610 is used to obtain the network identification of the pseudo wireless access network of the terminal, where the pseudo wireless access network is a wireless access network that can be scanned.
[0098] The configuration determination module 620 is used to determine the connection configuration information of the target wireless access network having a mapping relationship with the acquired network identifier by using the pre-stored mapping relationship between the network identifier of the pseudo wireless access network and the connection configuration information of the target wireless access network, wherein the target wireless access network is a wireless access network for which the network identifier is not broadcast in the terminal.
[0099] The connection establishing module 630 is used to establish a network connection with the target wireless access network according to the connection configuration information.
[0100] In one embodiment, the mapping relationship described in the configuration determination module 620 is stored in the preset configuration information. The configuration determination module 620 is specifically used to search for connection configuration information having a mapping relationship with the network identifier obtained by scanning from the preset configuration information, and use the searched connection configuration information as the connection configuration information of the target wireless access network.
[0101] In one embodiment, the connection configuration information of the target wireless access network stored in the preset configuration information includes connection configuration information obtained by any one of the following methods: randomly generated connection configuration information, user-defined connection configuration information, and connection configuration information calculated by a predetermined algorithm using a network identifier of a wireless access network that can be scanned, or using parameter information associated with the network identifier of a wireless access network that can be scanned.
[0102] In one embodiment, the configuration determination module 620 specifically uses the obtained network identifier, or parameter information associated with the obtained network identifier, to calculate and obtain the connection configuration information of the target wireless access network according to a predetermined algorithm.
[0103] In one embodiment, the associated parameter information includes any one of a physical address of the terminal, an international mobile equipment identity code, and a product serial number; and the predetermined algorithm is any one of an encryption algorithm or a bit operation.
[0104] According to the network connection establishment device of the embodiment of the present invention, when it is necessary to capture the LOG log of the terminal device and to perform terminal device maintenance, the maintenance personnel can use the user device such as the WiFi of a mobile phone or a notebook to scan the network identification of the terminal device, and query the hidden SSID and password of the terminal device according to the scanned network identification, so as to establish a connection with the wireless access network actually used for terminal device maintenance. The network connection establishment device can improve network security and prevent the wireless access network actually used for terminal device maintenance from being accessed by illegal users.
[0105] Fig.12 FIG. 2 shows a schematic diagram of the structure of a terminal device in an embodiment of the present invention. Fig.12 As shown, the terminal device may include a first wireless access device 710 and a second wireless access device 720, wherein the network identification broadcast of the first wireless access device 710 is configured to be in an on state, and the network identification broadcast of the second wireless access device 720 is configured to be in an off state.
[0106] In this embodiment, the first wireless access device 710 is used to broadcast the network identifier of the pseudo wireless access network so that the network identifier of the pseudo wireless access network can be scanned; the second wireless access device 720 is used to establish a network connection according to the connection configuration information of the target wireless access network in response to receiving the connection configuration information of the target wireless access network.
[0107] In one embodiment, the first wireless access device is configured to prohibit user access, thereby prohibiting user equipment from accessing the wireless access network corresponding to the first wireless access device, further improving the network security of the terminal equipment.
[0108] In the embodiment of the present invention, the first wireless access device 710 of the terminal device corresponds to the disguised WiFi hotspot in the above embodiment, and the second wireless access device 720 of the terminal device corresponds to the WiFi hotspot in the above embodiment. When the WiFi of the terminal device is turned on, the SSID and password of SSID1 and the SSID and password of SSID2 are used as parameters to start the WiFi, and the SSID broadcast of SSID1 is set to be closed, and SSID2 is set to prohibit user access, so as to achieve the purpose of safely establishing a network connection.
[0109] It should be clear that the present invention is not limited to the specific configurations and processes described in the above embodiments and shown in the figures. For the convenience and brevity of description, a detailed description of the known methods is omitted here, and the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, which will not be repeated here.
[0110] Fig.13 A schematic diagram showing the structure of a system for establishing a network connection in an embodiment of the present invention is shown.
[0111] like Fig.13 As shown, the network connection establishment system may include: a network identification broadcasting module 810, which is used for the terminal to broadcast the network identification of the pseudo wireless access network; a network identification scanning module 820, which is used for the user equipment to obtain the network identification of the pseudo wireless access network by scanning; a network configuration determination module 830, which is used to use the mapping relationship between the network identification of the pseudo wireless access network and the connection configuration information of the target wireless access network stored in advance to determine the connection configuration information of the target wireless access network that has a mapping relationship with the network identification obtained by scanning; a network connection establishment module 840, which is used to establish a network connection with the target wireless access network according to the connection configuration information.
[0112] In this embodiment, the terminal broadcasts the network identifier of the pseudo wireless access network that can be scanned, so that the user equipment queries the connection configuration information of the target wireless access network that has a mapping relationship with the network identifier through the scanned network identifier, and then establishes a connection with the target wireless access network based on the queried connection configuration information, thereby improving the security of the WiFi network and preventing the WiFi network of the terminal from being accessed by illegal users.
[0113] Fig.14 A schematic diagram showing the structure of a terminal operating system in an embodiment of the present invention is shown.
[0114] like Fig.14 As shown, the terminal operating system includes: a connection module 910, used to establish a network connection with the terminal using the network connection establishment device of claim 11; and an operation module 920, used to perform a predetermined operation on the terminal.
[0115] In this embodiment, when after-sales / maintenance personnel need to operate the terminal device, they can first establish a WiFi connection with the terminal through the network connection establishment method described in the above embodiment, and remotely obtain logs, maintain, upgrade versions, etc. by establishing a WiFi connection.
[0116] Fig.15 is a structural diagram showing an exemplary hardware architecture of a computing device capable of implementing the method and apparatus for establishing a network connection according to an embodiment of the present invention.
[0117] like Fig.15 As shown, the computing device 1000 includes an input device 1001, an input interface 1002, a central processing unit 1003, a memory 1004, an output interface 1005, and an output device 1006. The input interface 1002, the central processing unit 1003, the memory 1004, and the output interface 1005 are connected to each other via a bus 1010, and the input device 1001 and the output device 1006 are connected to the bus 1010 via the input interface 1002 and the output interface 1005, respectively, and are further connected to other components of the computing device 1000.
[0118] Specifically, the input device 1001 receives input information from the outside and transmits the input information to the central processing unit 1003 through the input interface 1002; the central processing unit 1003 processes the input information based on the computer executable instructions stored in the memory 1004 to generate output information, temporarily or permanently stores the output information in the memory 1004, and then transmits the output information to the output device 1006 through the output interface 1005; the output device 1006 outputs the output information to the outside of the computing device 1000 for user use.
[0119] In one embodiment, Fig.15 The computing device 1000 shown may be implemented as a network connection establishment system, which may include: a memory configured to store a program; and a processor configured to run the program stored in the memory to execute the network connection establishment method described in the above embodiment.
[0120] According to an embodiment of the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present invention includes a computer program product, which includes a computer program tangibly contained on a machine-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network, and / or installed from a removable storage medium.
[0121] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.
[0122] It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present invention, but the present invention is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also considered to be within the scope of protection of the present invention.
Claims
1. A network connection establishment method, applied to a user device, comprising: Acquire a network identifier of a pseudo wireless access network of the terminal, where the pseudo wireless access network is a wireless access network that can be scanned and is configured to prohibit user access; Determine the connection configuration information of the target wireless access network having a mapping relationship with the acquired network identifier by using the pre-stored mapping relationship between the network identifier of the pseudo wireless access network and the connection configuration information of the target wireless access network, wherein the target wireless access network is a wireless access network for which the network identifier is not broadcast in the terminal; A network connection is established with the target wireless access network according to the connection configuration information.
2. The method according to claim 1, wherein: The mapping relationship is stored in the preset configuration information; the use of the pre-stored mapping relationship between the network identifier of the pseudo wireless access network and the connection configuration information of the target wireless access network to determine the connection configuration information of the target wireless access network having a mapping relationship with the acquired network identifier includes: From the preset configuration information, connection configuration information having a mapping relationship with the network identifier obtained by scanning is searched, and the searched connection configuration information is used as the connection configuration information of the target wireless access network.
3. The method according to claim 2, wherein: The connection configuration information of the target wireless access network stored in the preset configuration information includes connection configuration information obtained by any one of the following methods: Randomly generated connection configuration information, user-defined connection configuration information, and connection configuration information calculated by a predetermined algorithm using a network identifier of a wireless access network that can be scanned, or using parameter information associated with a network identifier of a wireless access network that can be scanned.
4. The method according to claim 1, wherein: The determining the connection configuration information of the target wireless access network having a mapping relationship with the acquired network identifier by using the pre-stored mapping relationship between the network identifier of the pseudo wireless access network and the connection configuration information of the target wireless access network includes: The connection configuration information of the target wireless access network is obtained by calculating according to a predetermined algorithm using the obtained network identifier or parameter information associated with the obtained network identifier.
5. The method according to claim 4, wherein: The associated parameter information includes any one of a physical address, an international mobile equipment identity code, and a product serial number of the terminal; The predetermined algorithm is any one of an encryption algorithm or a bit operation.
6. A network connection establishment method, applied to a terminal, comprising: Broadcasting a network identifier of a pseudo wireless access network so that the network identifier of the pseudo wireless access network can be scanned, wherein the pseudo wireless access network is configured to prohibit user access; In response to receiving connection configuration information of a target wireless access network, a network connection is established according to the connection configuration information of the target wireless access network, wherein the target wireless access network is a wireless access network that does not broadcast a network identity in the terminal.
7. A network connection establishment method, applied to a terminal and a user device, comprising: The terminal broadcasts a network identifier of a pseudo wireless access network so that the network identifier of the pseudo wireless access network can be scanned, and the pseudo wireless access network is configured to prohibit user access; The user equipment obtains the network identifier of the pseudo wireless access network by scanning; The user equipment determines, by using a pre-stored mapping relationship between a network identifier of a pseudo wireless access network and connection configuration information of a target wireless access network, connection configuration information of a target wireless access network having a mapping relationship with the acquired network identifier, wherein the target wireless access network is a wireless access network for which a network identifier is not broadcast in the terminal; The user equipment establishes a network connection with the target wireless access network according to the connection configuration information.
8. A method for operating a terminal, applied to a user equipment, comprising: Establishing a network connection with a terminal using the network connection establishment method according to any one of claims 1 to 5; Perform predetermined operations on the terminal.
9. The method according to claim 8, wherein: The predetermined operation includes at least one of log capture, remote maintenance and software upgrade.
10. A network connection establishment device, comprising: an identification scanning module, used to obtain a network identification of a pseudo wireless access network of a terminal, wherein the pseudo wireless access network is a wireless access network that can be scanned and is configured to prohibit user access; a configuration determination module, configured to determine the connection configuration information of the target wireless access network having a mapping relationship with the acquired network identifier by using the pre-stored mapping relationship between the network identifier of the pseudo wireless access network and the connection configuration information of the target wireless access network, wherein the target wireless access network is a wireless access network for which the network identifier is not broadcast in the terminal; A connection establishing module is used to establish a network connection with the target wireless access network according to the connection configuration information.
11. A terminal device, comprising a first wireless access device and a second wireless access device, wherein: The network identification broadcast of the first wireless access device is configured to be in an on state, and the network identification broadcast of the second wireless access device is configured to be in an off state; and wherein, A first wireless access device, configured to broadcast a network identifier of a pseudo wireless access network so that the network identifier of the pseudo wireless access network can be scanned, wherein the pseudo wireless access network is configured to prohibit user access; The second wireless access device is used to establish a network connection according to the connection configuration information of the target wireless access network in response to receiving the connection configuration information of the target wireless access network, wherein the target wireless access network is a wireless access network that does not broadcast a network identifier in the terminal device.
12. A network connection establishment system, comprising: A network identification broadcasting module, configured for a terminal to broadcast a network identification of a pseudo wireless access network so that the network identification of the pseudo wireless access network can be scanned, and the pseudo wireless access network is configured to prohibit user access; A network identification scanning module, used for a user device to obtain a network identification of the pseudo wireless access network by scanning; a network configuration determination module, configured for the user equipment to determine, by using a pre-stored mapping relationship between a network identifier of a pseudo wireless access network and connection configuration information of a target wireless access network, connection configuration information of a target wireless access network having a mapping relationship with the acquired network identifier, wherein the target wireless access network is a wireless access network for which a network identifier is not broadcast in the terminal; A network connection establishing module is used for the user equipment to establish a network connection with the target wireless access network according to the connection configuration information.
13. A terminal operating system, comprising: A connection module, used to establish a network connection with a terminal using the network connection establishment device according to claim 10; The operation module is used to perform predetermined operations on the terminal.
14. A server, characterized in that: including memory and processor; The memory is used to store executable program codes; The processor is used to read the executable program code stored in the memory to execute the network connection establishment method according to any one of claims 1 to 5, claim 6, or claim 7, or the method for operating a terminal according to any one of claims 8 to 9.
15. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes instructions, which, when executed on a computer, enable the computer to execute the network connection establishment method according to any one of claims 1 to 5, claim 6, or claim 7, or the method for operating a terminal according to any one of claims 8 to 9.
