A message processing method and device

By judging the trust status of the wireless terminal in the wireless access device and performing priority mapping processing based on its message priority, the problem that the prior art cannot meet the priority processing needs of wireless terminal data packets of a specific manufacturer is solved, and the user experience is improved .

CN114245373BActive Publication Date: 2024-12-10NEW H3C BIG DATA TECH CO LTD
View PDF 10 Cites 0 Cited by

Patent Information

Application Number
CN202111428968.0
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2021-11-28
Publication Date
2024-12-10
Estimated Expiration
2041-11-28

AI Technical Summary

Technical Problem

The existing wireless LAN message processing method cannot meet the priority processing needs of wireless terminals of specific manufacturers for certain service data packets, resulting in poor user experience.

Method used

In the wireless access device, the trust status of the wireless terminal is determined by judging the encryption information in the management message, and priority mapping is performed based on the message priority of the trusted terminal to ensure that the data packet priority of the trusted terminal is higher than that of the trusted terminal. Untrusted terminal.

Benefits of technology

It meets the priority processing needs of wireless terminals of specific manufacturers for certain service data packets and improves user experience.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114245373B_ABST
    Figure CN114245373B_ABST
Patent Text Reader

Abstract

The present application provides a message processing method and device. The method is applied to a wireless access device and includes: when a management message sent by a first wireless terminal is received for the first time, if the management message carries a specified field, judging whether the first wireless terminal is a trusted terminal according to the encryption information in the specified field; when the judgment result is yes, adding the first wireless terminal to the trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created specified field, and recording the message priority trusted by the first wireless terminal in the specified field, and processing the management message; when a data message sent by a second wireless terminal is received, if the second wireless terminal is a wireless terminal in the local trusted terminal list, according to the locally recorded message priority trusted by the second wireless terminal, the data message is priority mapped and forwarded. The present application can improve the user experience of users holding wireless terminals of specific manufacturers.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a message processing method and device. Background Art

[0002] In a wireless local area network (WLAN), when a wireless access device (e.g., Access Point, AP) receives a data packet sent by a wireless terminal, it usually performs local priority mapping based on the service priority or port priority carried in the data packet to determine the queue into which the data packet enters and the priority carried when the data packet leaves the wireless access device, thereby providing differentiated services.

[0003] However, this message processing method still cannot meet the needs of wireless terminals of specific manufacturers for priority processing of data messages of certain services, which in turn leads to a poor experience for corresponding users. Summary of the invention

[0004] In order to overcome the problems existing in the related art, the present application provides a message processing method and device.

[0005] According to a first aspect of an embodiment of the present application, a message processing method is provided, the method being applied to a wireless access device, the method comprising:

[0006] When a management message sent by a first wireless terminal is received for the first time, if the management message carries a designated field, judging whether the first wireless terminal is a trusted terminal according to encryption information in the designated field, wherein the encryption information is obtained by encrypting a timestamp when the management message is sent by the first wireless terminal according to a preset encryption algorithm;

[0007] When the judgment result is yes, add the first wireless terminal to the trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field, record the message priority trusted by the first wireless terminal in the designated field, and process the management message;

[0008] When receiving a data message sent by a second wireless terminal, if the second wireless terminal is a wireless terminal in the local trusted terminal list, the data message is priority mapped according to the locally recorded message priority trusted by the second wireless terminal and then forwarded, wherein the level corresponding to the message priority trusted by the wireless terminal in the local trusted terminal list is higher than the level corresponding to the message priority trusted by the wireless terminal not in the local trusted terminal list.

[0009] According to a second aspect of an embodiment of the present application, a message processing device is provided, the device being applied to a wireless access device, the device comprising:

[0010] a judgment module, configured to, when receiving a management message sent by a first wireless terminal for the first time, judge whether the first wireless terminal is a trusted terminal according to encryption information in the specified field if the management message carries a specified field, wherein the encryption information is obtained by encrypting a timestamp when the management message is sent by the first wireless terminal according to a preset encryption algorithm;

[0011] A first processing module, configured to, when the judgment result of the judgment module is yes, add the first wireless terminal to a trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field, record the message priority trusted by the first wireless terminal in the designated field, and process the management message;

[0012] The second processing module is used to, when receiving a data message sent by a second wireless terminal, if the second wireless terminal is a wireless terminal in a local trusted terminal list, perform priority mapping processing on the data message according to the locally recorded message priority trusted by the second wireless terminal and then forward it, wherein the level corresponding to the message priority trusted by the wireless terminal in the local trusted terminal list is higher than the level corresponding to the message priority trusted by the wireless terminal not in the local trusted terminal list.

[0013] The technical solution provided by the embodiments of the present application may have the following beneficial effects:

[0014] In the embodiment of the present application, the wireless access device determines whether the wireless terminal is a trusted terminal based on the management message of the wireless terminal from a certain manufacturer, and when the judgment result is yes, when the data message of the wireless terminal is subsequently received, the wireless access device directly forwards the data message after priority mapping based on the message priority trusted by the terminal (the level of this message priority is higher than the level of the message priority trusted by the wireless terminal that is not a trusted terminal). In this way, the requirements of the wireless terminal of a specific manufacturer for the priority processing of data messages of certain services can be met, thereby improving the poor experience of the corresponding users.

[0015] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The accompanying drawings, which are incorporated in the specification and constitute a part of this application, illustrate embodiments consistent with the application and, together with the description, serve to explain the principles of the application.

[0017] Figure 1 A flowchart of a message processing method provided in an embodiment of the present application;

[0018] Figure 2 A schematic diagram of the structure of a message processing device provided in an embodiment of the present application;

[0019] Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0020] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0021] The terms used in this application are for the purpose of describing specific embodiments only and are not intended to limit this application. The singular forms of "a", "said" and "the" used in this application and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0022] It should be understood that although the terms first, second, third, etc. may be used in the present application to describe various information, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0023] Next, the embodiments of the present application are described in detail.

[0024] The present application embodiment provides a message processing method, which is applied to a wireless access device, such as Figure 1 As shown, the method may include the following steps:

[0025] S11. When receiving a management message sent by a first wireless terminal for the first time, if the management message carries a designated field, judging whether the first wireless terminal is a trusted terminal according to the encryption information in the designated field; if the judgment result is no, executing step S12; if the judgment result is yes, executing step S13;

[0026] In this step, the designated field may be a newly added element identifier (Element ID) field, for example, field 221, etc. The designated field may include the manufacturer identifier of the manufacturer to which the first wireless terminal belongs, the message priority trusted by the first wireless terminal (for example, 802.11e priority, Differentiated Services Code Point (DSCP) priority, etc.), encryption information, etc.

[0027] Here, the encryption information is obtained by the first wireless terminal encrypting the timestamp when sending the management message according to a preset encryption algorithm. For example, the preset encryption algorithm may be an Advanced Encryption Standard (AES) encryption algorithm.

[0028] It should be noted that when the management message does not carry the designated field, the wireless access device still processes the management message in the existing manner, and subsequently processes the data message in the existing manner when receiving the data message sent by the first wireless terminal in this situation.

[0029] S12. Process the management message according to the existing method.

[0030] It should be noted that, in this case, when the wireless access device receives the data message sent by the first wireless terminal, it also processes the data message in the existing manner.

[0031] S13: Add the first wireless terminal to a trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field, record the message priority trusted by the first wireless terminal in the designated field, and process the management message.

[0032] S14. When receiving a data message sent by the second wireless terminal, if the second wireless terminal is a wireless terminal in the local trusted terminal list, the data message is forwarded after priority mapping is performed according to the message priority trusted by the second wireless terminal recorded locally.

[0033] In this step, the level corresponding to the priority of the message trusted by the wireless terminal in the local trusted terminal list is higher than the level corresponding to the priority of the message trusted by the wireless terminal not in the local trusted terminal list.

[0034] It should be noted that, for the wireless access device, when receiving a data message sent by the second wireless terminal, if it is determined that the second wireless terminal is not a wireless terminal in the local trusted terminal list, the data message is still processed in the existing manner.

[0035] Specifically, in the above step S11, the wireless access device may determine whether the first wireless terminal is a trusted terminal in the following manner:

[0036] Decrypt the encrypted information according to a preset decryption algorithm corresponding to the preset encryption algorithm to obtain a timestamp;

[0037] Calculate the difference between the current timestamp and the timestamp;

[0038] If the calculated difference is not greater than the set threshold, determining that the first wireless terminal is a trusted terminal;

[0039] If the calculated difference is greater than a set threshold, it is determined that the first wireless terminal is not a trusted terminal.

[0040] It should be noted that, in the above judgment process, when the preset encryption algorithm is the AES encryption algorithm, the preset decryption algorithm is the AES decryption algorithm.

[0041] Furthermore, the threshold value may be set according to the actual network conditions of the WLAN where the wireless access device is located. For example, the threshold value may be 1 minute.

[0042] Further, in the embodiment of the present application, in order to improve the accuracy of the determination of the trusted terminal, when the wireless access device finds that the calculated difference is greater than the set threshold, it may not directly determine that the first wireless terminal is not a trusted terminal, but perform the following operations:

[0043] Notify the first wireless terminal to update the encryption information in the designated field carried in the management message;

[0044] Upon receiving the updated management message sent by the first wireless terminal, decrypting the encrypted information in the designated field in the updated management message according to a preset decryption algorithm to obtain a new timestamp, wherein the new timestamp is the timestamp when the first wireless terminal sends the updated management message;

[0045] The difference between the current timestamp and the new timestamp is calculated, and when the calculated difference is not greater than a set threshold, the first wireless terminal is determined to be a trusted terminal, and when the calculated difference is greater than the set threshold, the first wireless terminal is determined to be an untrusted terminal.

[0046] In this operation process, when the wireless access device notifies the first wireless terminal to update the encrypted information in the specified field carried in the management message, it can send a notification message carrying the specified field to the first wireless terminal. The encrypted information in this specified field is obtained by the wireless access device after encrypting the first specified information (for example, 0x00000000, etc.) according to a preset encryption algorithm, and is used to instruct the first wireless terminal to update the encrypted information.

[0047] Subsequently, after receiving the notification message, the first wireless terminal will decrypt the encrypted information in the designated field carried in the notification message according to a preset decryption algorithm to obtain the first designated information; thereafter, the first wireless terminal will send an updated management message to the wireless access device, and the encrypted information in the designated field carried in the updated management message is obtained by encrypting the timestamp when sending the updated management message by the first wireless terminal according to the preset encryption algorithm.

[0048] Specifically, in the above step S13, when the wireless access device processes the management message, it can process the management message in an existing manner, or it can send a corresponding response message carrying a specified field to the first wireless terminal. The encrypted information in this specified field is obtained by the wireless access device according to a preset encryption algorithm. The second specified information (for example, 0xffffffff, etc.) is encrypted, and is used to indicate that the first wireless terminal does not need to update the encryption information.

[0049] After receiving the response message, the first wireless terminal will decrypt the encrypted information in the designated field carried in the response message according to a preset decryption algorithm to obtain the second designated information; thereafter, the first wireless terminal will communicate with the wireless access device in the existing manner.

[0050] Further, in the embodiment of the present application, in order to improve network security, after the wireless access device adds the first wireless terminal to the trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field, it may also perform the following operations:

[0051] Start the timer;

[0052] When the timing duration of the timer reaches a preset first duration, notifying the first wireless terminal to update the encryption information in the designated field carried in the management message;

[0053] If an updated management message sent by the first wireless terminal is received before the timing duration of the timer reaches a preset second duration, re-determine whether the first wireless terminal is a trusted terminal based on the encrypted information in the designated field in the updated management message, and restart the timer when the determination result is yes, and delete the first wireless terminal from the corresponding trusted terminal list when the determination result is no, and if a management message sent by the first wireless terminal is received again after the first wireless terminal is deleted, the management message sent again by the first wireless terminal is regarded as the management message received for the first time, and the step of determining whether the first wireless terminal is a trusted terminal based on the encrypted information in the designated field is executed, wherein the preset second duration is greater than the preset first duration;

[0054] If the management message resent by the first wireless terminal has not been received when the timing duration of the timer reaches the preset second duration, the first wireless terminal will be deleted from the corresponding trusted terminal list. If a management message resent by the first wireless terminal is received after the first wireless terminal is deleted, the management message resent by the first wireless terminal will be regarded as the management message received for the first time, and the step of determining whether the first wireless terminal is a trusted terminal based on the encrypted information in the designated field will be executed.

[0055] It should be noted that in this operation process, the above-mentioned preset first duration and the preset second duration can be set according to the actual network conditions of the WLAN where the wireless access device is located. For example, the above-mentioned preset first duration can be 9 minutes, etc., and the above-mentioned preset second duration can be 10 minutes, etc. The above-mentioned preset second duration can be understood as the trust duration that the first wireless terminal is a trusted terminal.

[0056] It should be further explained that, in the above step S14, the second wireless terminal and the first wireless terminal may be the same wireless terminal, or they may be different wireless terminals.

[0057] The local trusted terminal list may include wireless terminals from only one wireless terminal manufacturer or from multiple wireless terminal manufacturers.

[0058] Once the wireless access device receives a data message sent by any wireless terminal in the local trusted terminal list, it will perform priority mapping on the data message according to the locally recorded message priority of the wireless terminal and then forward it. Since the level corresponding to the message priority trusted by the wireless terminal is higher, the corresponding data message will be forwarded by the wireless access device first, thereby improving the user experience of the user holding the wireless terminal.

[0059] It should be further explained that in the embodiments of the present application, the wireless access device can be a fat AP; it can also be a thin AP, in which case the forwarding mode of the WLAN where the wireless access device is located is a local forwarding mode; of course, it can also be an access controller (AC), in which case the forwarding mode of the WLAN where the wireless access device is located is a centralized forwarding mode.

[0060] It can be seen from the above technical solutions that in the embodiment of the present application, the wireless access device determines whether the wireless terminal is a trusted terminal based on the management message of the wireless terminal from a certain manufacturer, and when the judgment result is yes, when the data message of the wireless terminal is subsequently received, the wireless access device directly forwards the data message after priority mapping based on the message priority trusted by the terminal (the level of this message priority is higher than the level of the message priority trusted by the wireless terminal that is not a trusted terminal). In this way, the requirements of the wireless terminal of a specific manufacturer for the priority processing of data messages of certain services can be met, thereby improving the poor experience of the corresponding users.

[0061] Based on the same inventive concept, the present application also provides a message processing device, which is applied to a wireless access device, and its structural diagram is as follows: Figure 2 As shown, specifically including:

[0062] A judgment module 21 is used for, when receiving a management message sent by a first wireless terminal for the first time, if the management message carries a designated field, judging whether the first wireless terminal is a trusted terminal according to encryption information in the designated field, wherein the encryption information is obtained by encrypting the timestamp when sending the management message by the first wireless terminal according to a preset encryption algorithm;

[0063] A first processing module 22 is configured to, when the judgment result of the judgment module 21 is yes, add the first wireless terminal to a trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created specified field, record the message priority trusted by the first wireless terminal in the specified field, and process the management message;

[0064] The second processing module 23 is used to, when receiving a data message sent by a second wireless terminal, if the second wireless terminal is a wireless terminal in a local trusted terminal list, perform priority mapping processing on the data message according to the locally recorded message priority trusted by the second wireless terminal and then forward it, wherein the level corresponding to the message priority trusted by the wireless terminal in the local trusted terminal list is higher than the level corresponding to the message priority trusted by the wireless terminal not in the local trusted terminal list.

[0065] Preferably, the judging module 21 is specifically configured to judge whether the first wireless terminal is a trusted terminal in the following manner:

[0066] Decrypting the encrypted information according to a preset decryption algorithm corresponding to the preset encryption algorithm to obtain the timestamp;

[0067] Calculate the difference between the current timestamp and the timestamp;

[0068] If the calculated difference is not greater than a set threshold, determining that the first wireless terminal is a trusted terminal;

[0069] If the calculated difference is greater than a set threshold, it is determined that the first wireless terminal is not a trusted terminal.

[0070] Preferably, the judging module 21 is further used for:

[0071] Before determining that the first wireless terminal is not a trusted terminal, notifying the first wireless terminal to update the encryption information in the designated field carried in the management message;

[0072] Upon receiving the updated management message sent by the first wireless terminal, decrypting the encrypted information in the designated field in the updated management message according to the preset decryption algorithm to obtain a new timestamp, wherein the new timestamp is the timestamp when the first wireless terminal sends the updated management message;

[0073] Calculate the difference between the current timestamp and the new timestamp, and when the calculated difference is not greater than the set threshold, determine that the first wireless terminal is a trusted terminal; when the calculated difference is greater than the set threshold, perform the step of determining that the first wireless terminal is not a trusted terminal.

[0074] Preferably, the device further comprises:

[0075] The third processing module ( Figure 2 ), configured to start a timer after the first processing module adds the first wireless terminal to the trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field;

[0076] When the timing duration of the timer reaches a preset first duration, notifying the first wireless terminal to update the encryption information in the designated field carried in the management message;

[0077] If an updated management message sent by the first wireless terminal is received before the timing duration of the timer reaches a preset second duration, re-determine whether the first wireless terminal is a trusted terminal according to the encrypted information in the designated field in the updated management message, and restart the timer when the determination result is yes, and delete the first wireless terminal from the corresponding trusted terminal list when the determination result is no, and if a management message sent by the first wireless terminal is received again after the first wireless terminal is deleted, treat the management message sent again by the first wireless terminal as the management message received for the first time, and perform the step of determining whether the first wireless terminal is a trusted terminal according to the encrypted information in the designated field, wherein the preset second duration is greater than the preset first duration;

[0078] If an updated management message sent by the first wireless terminal has not been received when the timing duration of the timer reaches the preset second duration, the first wireless terminal will be deleted from the corresponding trusted terminal list. If a management message sent by the first wireless terminal again is received after the first wireless terminal is deleted, the management message sent again by the first wireless terminal will be regarded as the management message received for the first time, and the step of determining whether the first wireless terminal is a trusted terminal based on the encrypted information in the designated field will be executed.

[0079] Preferably, the wireless access device is a fat AP; or, the wireless access device is a thin AP; or, the wireless access device is an AC.

[0080] It can be seen from the above technical solutions that in the embodiment of the present application, the wireless access device determines whether the wireless terminal is a trusted terminal based on the management message of the wireless terminal from a certain manufacturer, and when the judgment result is yes, when the data message of the wireless terminal is subsequently received, the wireless access device directly forwards the data message after priority mapping based on the message priority trusted by the terminal (the level of this message priority is higher than the level of the message priority trusted by the wireless terminal that is not a trusted terminal). In this way, the requirements of the wireless terminal of a specific manufacturer for the priority processing of data messages of certain services can be met, thereby improving the poor experience of the corresponding users.

[0081] The present application also provides an electronic device, such as Figure 3 As shown, it includes a processor 31 and a machine-readable storage medium 32, wherein the machine-readable storage medium 32 stores machine-executable instructions that can be executed by the processor 31, and the processor 31 is prompted by the machine-executable instructions to implement the steps of the above-mentioned message processing method.

[0082] The machine-readable storage medium may include a random access memory (RAM) or a non-volatile memory (NVM), such as at least one disk storage. Optionally, the machine-readable storage medium may also be at least one storage device located away from the processor.

[0083] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0084] In another embodiment provided in the present application, a computer-readable storage medium is provided, in which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned message processing method are implemented.

[0085] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included in the scope of protection of the present application.

Claims

1. A message processing method, characterized in that: The method is applied to a wireless access device, and the method includes: When a management message sent by a first wireless terminal is received for the first time, if the management message carries a designated field, judging whether the first wireless terminal is a trusted terminal according to encryption information in the designated field, wherein the encryption information is obtained by encrypting a timestamp when the management message is sent by the first wireless terminal according to a preset encryption algorithm; When the judgment result is yes, add the first wireless terminal to the trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field, record the message priority trusted by the first wireless terminal in the designated field, and process the management message; When receiving a data message sent by a second wireless terminal, if the second wireless terminal is a wireless terminal in the local trusted terminal list, the data message is priority mapped according to the locally recorded message priority trusted by the second wireless terminal and then forwarded, wherein the level corresponding to the message priority trusted by the wireless terminal in the local trusted terminal list is higher than the level corresponding to the message priority trusted by the wireless terminal not in the local trusted terminal list.

2. The method according to claim 1, characterized in that Determine whether the first wireless terminal is a trusted terminal by: Decrypting the encrypted information according to a preset decryption algorithm corresponding to the preset encryption algorithm to obtain a timestamp when the management message is sent; Calculate the difference between the current timestamp and the timestamp when the management message is sent; If the calculated difference is not greater than a set threshold, determining that the first wireless terminal is a trusted terminal; If the calculated difference is greater than a set threshold, it is determined that the first wireless terminal is not a trusted terminal.

3. The method according to claim 2, characterized in that Before determining that the first wireless terminal is not a trusted terminal, the method further includes: Notifying the first wireless terminal to update the encryption information in the designated field carried in the management message; Upon receiving the updated management message sent by the first wireless terminal, decrypting the encrypted information in the designated field in the updated management message according to the preset decryption algorithm to obtain a new timestamp, wherein the new timestamp is the timestamp when the first wireless terminal sends the updated management message; Calculate the difference between the current timestamp and the new timestamp, and when the calculated difference is not greater than the set threshold, determine that the first wireless terminal is a trusted terminal; when the calculated difference is greater than the set threshold, perform the step of determining that the first wireless terminal is not a trusted terminal.

4. The method according to claim 1, characterized in that: The method further comprises: After adding the first wireless terminal to the trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field, starting a timer; When the timing duration of the timer reaches a preset first duration, notifying the first wireless terminal to update the encryption information in the designated field carried in the management message; If an updated management message sent by the first wireless terminal is received before the timing duration of the timer reaches a preset second duration, re-determine whether the first wireless terminal is a trusted terminal according to the encrypted information in the designated field in the updated management message, and restart the timer when the determination result is yes, and delete the first wireless terminal from the corresponding trusted terminal list when the determination result is no, and if a management message sent by the first wireless terminal is received again after the first wireless terminal is deleted, treat the management message sent again by the first wireless terminal as the management message received for the first time, and perform the step of determining whether the first wireless terminal is a trusted terminal according to the encrypted information in the designated field, wherein the preset second duration is greater than the preset first duration; If an updated management message sent by the first wireless terminal has not been received when the timing duration of the timer reaches the preset second duration, the first wireless terminal will be deleted from the corresponding trusted terminal list. If a management message sent by the first wireless terminal again is received after the first wireless terminal is deleted, the management message sent again by the first wireless terminal will be regarded as the management message received for the first time, and the step of determining whether the first wireless terminal is a trusted terminal based on the encrypted information in the designated field will be executed.

5. The method according to claim 1, characterized in that The wireless access device is a fat access point AP; or, the wireless access device is a thin AP; or, the wireless access device is an access controller AC.

6. A message processing device, characterized in that: The device is applied to a wireless access device, and the device includes: a judgment module, configured to, when receiving a management message sent by a first wireless terminal for the first time, judge whether the first wireless terminal is a trusted terminal according to encryption information in the specified field if the management message carries a specified field, wherein the encryption information is obtained by encrypting a timestamp when the management message is sent by the first wireless terminal according to a preset encryption algorithm; A first processing module, configured to, when the judgment result of the judgment module is yes, add the first wireless terminal to a trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field, record the message priority trusted by the first wireless terminal in the designated field, and process the management message; The second processing module is used to, when receiving a data message sent by a second wireless terminal, if the second wireless terminal is a wireless terminal in a local trusted terminal list, perform priority mapping processing on the data message according to the locally recorded message priority trusted by the second wireless terminal and then forward it, wherein the level corresponding to the message priority trusted by the wireless terminal in the local trusted terminal list is higher than the level corresponding to the message priority trusted by the wireless terminal not in the local trusted terminal list.

7. The device according to claim 6, characterized in that The determination module is specifically configured to determine whether the first wireless terminal is a trusted terminal in the following manner: Decrypting the encrypted information according to a preset decryption algorithm corresponding to the preset encryption algorithm to obtain a timestamp when the management message is sent; Calculate the difference between the current timestamp and the timestamp when the management message is sent; If the calculated difference is not greater than a set threshold, determining that the first wireless terminal is a trusted terminal; If the calculated difference is greater than a set threshold, it is determined that the first wireless terminal is not a trusted terminal.

8. The device according to claim 7, characterized in that The judging module is further used for: Before determining that the first wireless terminal is not a trusted terminal, notifying the first wireless terminal to update the encryption information in the designated field carried in the management message; Upon receiving the updated management message sent by the first wireless terminal, decrypting the encrypted information in the designated field in the updated management message according to the preset decryption algorithm to obtain a new timestamp, wherein the new timestamp is the timestamp when the first wireless terminal sends the updated management message; Calculate the difference between the current timestamp and the new timestamp, and when the calculated difference is not greater than the set threshold, determine that the first wireless terminal is a trusted terminal; when the calculated difference is greater than the set threshold, perform the step of determining that the first wireless terminal is not a trusted terminal.

9. The device according to claim 6, characterized in that The device also includes: A third processing module, configured to start a timer after the first processing module adds the first wireless terminal to the trusted terminal list corresponding to the manufacturer identifier of the manufacturer to which the first wireless terminal belongs in the locally created designated field; When the timing duration of the timer reaches a preset first duration, notifying the first wireless terminal to update the encryption information in the designated field carried in the management message; If an updated management message sent by the first wireless terminal is received before the timing duration of the timer reaches a preset second duration, re-determine whether the first wireless terminal is a trusted terminal according to the encrypted information in the designated field in the updated management message, and restart the timer when the determination result is yes, and delete the first wireless terminal from the corresponding trusted terminal list when the determination result is no, and if a management message sent by the first wireless terminal is received again after the first wireless terminal is deleted, treat the management message sent again by the first wireless terminal as the management message received for the first time, and perform the step of determining whether the first wireless terminal is a trusted terminal according to the encrypted information in the designated field, wherein the preset second duration is greater than the preset first duration; If an updated management message sent by the first wireless terminal has not been received when the timing duration of the timer reaches the preset second duration, the first wireless terminal will be deleted from the corresponding trusted terminal list. If a management message sent by the first wireless terminal again is received after the first wireless terminal is deleted, the management message sent again by the first wireless terminal will be regarded as the management message received for the first time, and the step of determining whether the first wireless terminal is a trusted terminal based on the encrypted information in the designated field will be executed.

10. The device according to claim 6, characterized in that The wireless access device is a fat access point AP; or, the wireless access device is a thin AP; or, the wireless access device is an access controller AC.

Citation Information

Patent Citations

  • Processing method and system for data message

    CN102347932A

  • Terminal authentication method and system

    CN105975846A

  • Processing method and device for address resolution protocol messages

    CN107690004A

  • Message transmission method and device

    CN107733799A

  • CC (Challenge Collapsar) attack protection method and device

    CN107800723A