Configuration information updating method and network device

Abstract

The present invention provides a configuration information updating method and a network device, the configuration information updating method comprising: calculating a second network parameter according to a device list of the first network device and a first network parameter, the device list including all network devices in the network where the first network device is located; generating configuration update information according to the device list of the first network device and the second network parameter; encrypting the configuration update information and sending the encrypted configuration update information to a second network device in the network; receiving a configuration update result message fed back by the second network device, and determining whether to update the configuration information of the first network device based on the configuration update result message. The solution of the present invention improves the robustness and security of the configuration information update process in the network, achieves the effect of configuration security update and has a good user experience.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a configuration information updating method and network equipment. Background Art

[0002] A wireless mesh network is a dynamic self-organizing wireless network consisting of multiple access devices (such as routers and gateways), and all access devices are configured with the same networking parameters (network identifier MeshID, network key MeshKey), so as to achieve interconnection between access devices and form a multi-point to multi-point networking architecture. Terminals (PCs, mobile phones, smart hardware, etc.) that want to access the network can access the network through any access device. Compared with traditional single-access device networking, wireless mesh networks can extend network capabilities, improve network quality, and enhance networking robustness. When the networking parameters of a wireless mesh network change, the updated configuration needs to be synchronized to all access devices to achieve networking between access devices. At present, this synchronization process requires manual configuration of access devices one by one, which has a poor user experience and is prone to errors, and the efficiency of updating configuration is low.

[0003] In addition, there is also a solution in the prior art in which one router generates configuration parameters and sends them to other routers, thereby achieving automatic synchronization configuration between routers in a home network without manual operation, thereby improving the efficiency of synchronization configuration between routers. However, this solution does not have a configuration parameter negotiation process, and one router directly synchronizes the configuration to other routers for updating. Other routers cannot verify the authenticity of the configuration update content. In addition, a denial of service attack on the router responsible for configuration synchronization may cause the interruption of configuration update of the entire network, so this solution has security risks. Summary of the invention

[0004] The present invention provides a configuration information updating method and a network device. It is realized that all network devices connected to the wireless network can build the same device list and participate in the negotiation and verification process of new networking parameters, avoiding the problems of low efficiency and easy error in manual parameter configuration in the prior art, and the problem that a single network device executing configuration update is vulnerable to attack and generates security risks.

[0005] In order to solve the above technical problems, the technical solution of the present invention is as follows:

[0006] A configuration information updating method, applied to a first network device, the method comprising:

[0007] Calculate the second network parameter according to the device list of the first network device and the first network parameter, wherein the device list includes all network devices in the network where the first network device is located;

[0008] Generate configuration update information according to the device list of the first network device and the second network parameter;

[0009] Encrypting the configuration update information and sending the encrypted configuration update information to a second network device in the network;

[0010] A configuration update result message fed back by the second network device is received, and based on the configuration update result message, it is determined whether to update the configuration information of the first network device.

[0011] Optionally, the network includes: N first network devices and M second network devices, and all network devices in the network are screened based on a screening strategy to obtain the N first network devices, where N is an integer greater than or equal to 2, and M is an integer greater than or equal to 1.

[0012] Optionally, the screening strategy includes at least one of the following:

[0013] The network device with the largest and smallest device identifiers in the device list;

[0014] The network device with the largest and smallest MAC addresses in the device list;

[0015] The network device with the largest and smallest IP addresses in the device list;

[0016] The network devices in the device list that are powered on the latest and earliest.

[0017] Optionally, the first network parameter includes a first network identifier and a first network key; the second network parameter includes a second network identifier and a second network key;

[0018] The second network parameter calculated based on the device list of the first network device and the first network parameter includes:

[0019] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or

[0020] Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or

[0021] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or

[0022] The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

[0023] Optionally, encrypting the configuration update information includes:

[0024] The configuration update information is encrypted using the first network key.

[0025] Optionally, receiving a configuration update result message fed back by a second network device in the network, and determining whether to update configuration information of the first network device based on the configuration update result message includes:

[0026] Receive M configuration update result messages fed back by M second network devices in the network, and decrypt the M configuration update result messages using the first parameter key;

[0027] When the M result information fed back by the received M second network devices are all configuration update success messages, the configuration information of the first network device is updated, otherwise a correction operation is performed.

[0028] Optionally, when the first network device is a network device newly added to the network and has been configured with first network parameters,

[0029] Adding device information of the first network device to the device list;

[0030] The first network device encrypts the device information of the first network device using the first network key, and sends the encrypted device information to all other network devices in the network;

[0031] Receiving device information of other network devices encrypted by other network devices based on the first network key;

[0032] The first network device uses the first network key to decrypt device information of other network devices and updates the decrypted device information to the device list of the first network device.

[0033] Optionally, the device information includes a device identifier, a MAC address of the device, an IP address of the device, and a power-on time of the device.

[0034] Optionally, when the first network device is shut down or restored to initial settings, the device list of the first network device is cleared.

[0035] A configuration information updating method, applied to a second network device, the method comprising:

[0036] The second network parameter is calculated according to a device list of the second network device and the first network parameter, wherein the device list includes all network devices in the network where the second network device is located;

[0037] Receiving a configuration update message sent by a first network device in the network;

[0038] Decrypting the configuration update message to obtain a decrypted configuration update message;

[0039] Comparing the device list of the second network device with the device list included in the decrypted configuration update message to obtain a configuration update result message;

[0040] Send a configuration update result message to the first network device.

[0041] Optionally, the network includes: N first network devices and M second network devices, and all network devices in the network are screened based on a screening strategy to obtain the N first network devices, where N is an integer greater than or equal to 2, and M is an integer greater than or equal to 1.

[0042] Optionally, the screening strategy includes at least one of the following:

[0043] The network device with the largest and smallest device identifiers in the device list;

[0044] The network device with the largest and smallest MAC addresses in the device list;

[0045] The network device with the largest and smallest IP addresses in the device list;

[0046] The network devices in the device list that are powered on the latest and earliest.

[0047] Optionally, the first network parameter includes a first network identifier and a first network key; the second network parameter includes a second network identifier and a second network key;

[0048] The second network parameter calculated based on the device list of the second network device and the first network parameter includes:

[0049] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or

[0050] Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or

[0051] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or

[0052] The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

[0053] Optionally, decrypting the configuration update message to obtain a decrypted configuration update message includes:

[0054] The N configuration update messages sent by the N first network devices are decrypted using the first parameter key.

[0055] Optionally, comparing the device list of the second network device with the device list included in the decrypted configuration update message to obtain the configuration update result message includes:

[0056] If the device lists in the N configuration update messages sent by the N first network devices are the same and are also the same as the device list of the second network device, compare whether the second network identifiers in the N configuration update messages are consistent with the second network identifier in the second network parameter calculated by the second network device; if they are the same, generate a configuration update result message indicating a successful configuration update; if they are different, locate the problematic first network device and generate a configuration update result message;

[0057] If the device lists in the N configuration update messages sent by the N first network devices are all the same but different from the device list of the second network device, the second network device recalculates and generates the second network parameter, compares whether the second network identifier in the N configuration update messages is consistent with the second network identifier in the second network parameter recalculated and generated by the second network device, and if they are the same, generates a configuration update result message indicating a successful configuration update; if they are different, locates the problematic first network device and generates a configuration update result message;

[0058] If a portion of the device list in the N configuration update messages sent by the N first network devices is different from the device list of the second network device, locating the problematic first network device and generating a configuration update result message to correct the problematic first network device and restart the configuration update;

[0059] If the device lists in the N configuration update messages sent by the N first network devices are different from the device list of the second network device, a configuration update result message is generated to reconstruct the device list including all network devices in the network and restart the configuration update.

[0060] Optionally, when the second network device is a network device newly added to the network and has been configured with the first network parameter,

[0061] Adding device information of the second network device to the device list;

[0062] The second network device encrypts the device information of the second network device using the first network key, and sends the encrypted device information to all other network devices in the network;

[0063] Receiving device information of other network devices encrypted by other network devices based on the first network key;

[0064] The second network device uses the first network key to decrypt the device information of other network devices and updates the decrypted device information to the device list of the second network device.

[0065] Optionally, the device information includes a device identifier, a MAC address of the device, an IP address of the device, and a power-on time of the device.

[0066] A first network device, comprising:

[0067] A first calculation module is configured to calculate a second network parameter according to a device list of the first network device and a first network parameter, wherein the device list includes all network devices in the network where the first network device is located;

[0068] A generating module, generating configuration update information according to a device list of the first network device and the second network parameter;

[0069] A first sending module; encrypting the configuration update information and sending the encrypted configuration update information to a second network device in the network;

[0070] The first receiving module receives a configuration update result message fed back by the second network device, and determines whether to update the configuration information of the first network device based on the configuration update result message.

[0071] A second network device, comprising:

[0072] A second calculation module is configured to calculate a second network parameter according to a device list of the second network device and the first network parameter, wherein the device list includes all network devices in the network where the second network device is located;

[0073] A second receiving module, receiving a configuration update message sent by a first network device in the network;

[0074] A decryption module, decrypting the configuration update message to obtain a decrypted configuration update message;

[0075] A comparison module, comparing the device list of the second network device with the device list included in the decrypted configuration update message to obtain a configuration update result message;

[0076] The second sending module sends the configuration update result message to the first network device.

[0077] A communication device comprises: a processor and a memory storing a computer program, wherein when the computer program is executed by the processor, the method described above is executed.

[0078] A computer-readable storage medium stores instructions, which, when executed on a computer, enable the computer to execute the method described above.

[0079] The above solution of the present invention includes at least the following beneficial effects:

[0080] All access devices in the wireless network can build the same device list and select benchmark devices from all devices, providing a data correction mechanism and a method for discovering problematic devices, improving the robustness and security of the configuration update process, and achieving the effect of secure configuration updates. At the same time, all devices in the network participate in the negotiation and verification of new networking parameters, and key parameters such as new networking keys are not transmitted between devices, which improves the security of new networking parameters. In addition, the configuration security update process between access devices does not require manual operation, is imperceptible to users, and provides a good user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0081] Figure 1 is a flow chart of a configuration information updating method according to an embodiment of the present invention;

[0082] Figure 2 is a specific flow chart of a method for updating configuration based on a device list according to an embodiment of the present invention;

[0083] Figure 3 is a schematic diagram of a process of constructing a network device list according to an embodiment of the present invention;

[0084] Figure 4 is another flowchart of the configuration update method according to an embodiment of the present invention;

[0085] Figure 5 is a schematic diagram of a first network device according to an embodiment of the present invention;

[0086] Figure 6 is a schematic diagram of a second network device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0087] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0088] like Figure 1 As shown, an embodiment of the present invention provides a configuration information updating method, which is applied to a first network device, and the method includes:

[0089] Step 110, calculating a second network parameter according to a device list of the first network device and a first network parameter, wherein the device list includes all network devices in the network where the first network device is located;

[0090] Step 120, generating configuration update information according to the device list of the first network device and the second network parameter;

[0091] Step 130, encrypting the configuration update information, and sending the encrypted configuration update information to a second network device in the network;

[0092] Step 140: Receive a configuration update result message fed back by the second network device, and determine whether to update the configuration information of the first network device based on the configuration update result message.

[0093] In this embodiment, the first network device is a benchmark device for configuration information obtained by screening all network access devices in a network (e.g., a wireless mesh network), and the second network device is other access devices in the network except for the benchmark device for configuration information. The first network parameter is the current configuration information of the network, for example, including the current network identifier and network key, and the second network parameter is the configuration information to be updated in the network, for example, including the updated network identifier and network key.

[0094] The present disclosure proposes a method for secure configuration update between access devices based on a benchmarking mechanism. In the present disclosure, the access devices exchange device information securely based on the networking key encryption, so that all access devices in the wireless mesh network can build the same device list. Each access device decides on multiple configuration update benchmarking devices, and calculates new networking parameters (new networking ID and new networking key) based on the same configuration parameter generation algorithm and the same device list, and the currently effective networking parameters (networking ID and networking key). Each configuration update benchmarking device encrypts the device list summary and the new networking ID with the new networking key generated by itself, constructs the configuration update benchmarking information, and encrypts it with the networking key and sends it to each access device. Each access device verifies the correctness of the new networking parameters generated by itself based on the configuration update benchmarking information, and then chooses to perform operations such as configuration parameter update, data correction, and problem device location based on the verification results; when each access device completes the configuration update, each configuration update benchmarking device performs configuration update again.

[0095] In an optional embodiment of the present invention, the network includes: N first network devices and M second network devices, and all network devices in the network are screened based on a screening strategy to obtain the N first network devices, where N is an integer greater than or equal to 2, and M is an integer greater than or equal to 1.

[0096] In this embodiment, all access devices in the network decide N benchmark devices, and usually the number N is greater than or equal to 2. Here, N=2 is taken as an example for description.

[0097] In an optional embodiment of the present invention, the screening strategy includes at least one of the following:

[0098] The network device with the largest and smallest device identifiers in the device list;

[0099] The network device with the largest and smallest MAC addresses in the device list;

[0100] The network device with the largest and smallest IP addresses in the device list;

[0101] The network devices in the device list that are powered on the latest and earliest.

[0102] In this embodiment, based on the same configuration update benchmark device screening strategy, all access devices in the wireless mesh network decide N (N>=2, for the convenience of expression, N=2 is used as an example) access devices as the benchmark devices for this configuration update, and they send the configuration update benchmark information to other access devices in the network for benchmark verification. The benchmark device screening strategy includes but is not limited to the following.

[0103] Strategy 1: The online devices with the largest and smallest device IDs in the device list are used as benchmark devices.

[0104] Strategy 2: The online devices with the largest and smallest MAC in the device list are used as benchmark devices.

[0105] Strategy 3: The online devices with the largest and smallest IP addresses in the device list are used as the configuration update master devices.

[0106] Strategy 4: The latest and earliest online devices in the device list are used as the configuration update master devices.

[0107] In an optional embodiment of the present invention, the first network parameter includes a first network identifier and a first network key; the second network parameter includes a second network identifier and a second network key;

[0108] The second network parameter calculated based on the device list of the first network device and the first network parameter includes:

[0109] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or

[0110] Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or

[0111] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or

[0112] The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

[0113] In this embodiment, based on the same configuration parameter generation algorithm, all access devices in the wireless mesh network calculate new networking parameters (MeshID_New, MeshKey_New) through a common device list and current networking parameters, including but not limited to the following configuration parameter generation algorithm.

[0114] Generation Algorithm 1:

[0115] Calculate MeshID_New based on the current MeshID, device list summary, and current date; calculate MeshKey_New based on the current MeshKey, device list summary, and current date.

[0116] Generation Algorithm 2:

[0117] Calculate MeshID_New based on the current MeshID, device list summary, and current date; calculate MeshKey_New based on the current MeshKey and the newly generated MeshID_New.

[0118] In an optional embodiment of the present invention, encrypting the configuration update information includes:

[0119] The configuration update information is encrypted using the first network key.

[0120] In an optional embodiment of the present invention, receiving a configuration update result message fed back by a second network device in the network, and determining whether to update the configuration information of the first network device based on the configuration update result message includes:

[0121] Receive M configuration update result messages fed back by M second network devices in the network, and decrypt the M configuration update result messages using the first parameter key;

[0122] When the M result information fed back by the received M second network devices are all configuration update success messages, the configuration information of the first network device is updated, otherwise a correction operation is performed.

[0123] like Figure 2 As shown, a method for configuring security updates based on a device list is shown, which specifically includes the following steps:

[0124] Step 21: Based on the same configuration update benchmark device screening strategy, all access devices in the wireless mesh network decide N (N>=2, for the convenience of expression, N=2 is used as an example) access devices as the benchmark devices for this configuration update, and they send the configuration update benchmark information to other access devices in the network for benchmark verification. The benchmark device screening strategy includes but is not limited to the following.

[0125] Strategy 1:

[0126] MasterD_Max(Device_ID)&MasterD_Min(Device_ID): The online devices with the largest and smallest device IDs in the device list are used as benchmark devices.

[0127] Strategy 2:

[0128] MasterD_Max(Device_MAC)&MasterD_Min(Device_MAC): The online devices with the largest and smallest MAC in the device list are used as benchmark devices.

[0129] Strategy 3:

[0130] MasterD_Max(Device_IP)&MasterD_Min(Device_IP): The online devices with the largest and smallest IP addresses in the device list serve as the configuration update master devices.

[0131] Strategy 4:

[0132] MasterD_Max(Device_Time)&MasterD_Min(Device_Time): The latest and earliest online devices in the device list are used as the master devices for configuration update.

[0133] Step 22: Based on the same configuration parameter generation algorithm, all access devices in the wireless mesh network calculate new networking parameters (MeshID_New, MeshKey_New) through the shared device list and the current networking parameters, including but not limited to the following configuration parameter generation algorithm.

[0134] Generation Algorithm 1:

[0135] Calculate MeshID_New based on current MeshID, device list summary, and current date; calculate MeshKey_New based on current MeshKey, device list summary, and current date

[0136] MeshID_New=SHA1(MeshID,SHA1(Device_List),Date_Current);

[0137] MeshKey_New=KDF(MeshKey,SHA1(Device_List),Date_Current)

[0138] Generation Algorithm 2:

[0139] Calculate MeshID_New based on the current MeshID, device list summary, and current date; calculate MeshKey_New based on the current MeshKey and the newly generated MeshID_New

[0140] MeshID_New=SHA1(MeshID,SHA1(Device_List),Date_Current);

[0141] MeshKey_New=KDF(MeshKey,MeshID_New)

[0142] in:

[0143] SHA1 is the hash algorithm;

[0144] KDF is a key generation algorithm;

[0145] Device_List is the device list;

[0146] Date_Current is the current date and is optional;

[0147] Step 23: All configuration update benchmarking devices construct configuration update benchmarking information based on their own device lists and new networking parameters. If the network selects N benchmarking devices, N configuration update benchmarking information will be generated. For the convenience of expression, the configuration update benchmarking information generated by a benchmarking device X can be described as follows: Message_Update_Refer_X = {SHA1(Device_List_X), EMeshKey_New_X(Device_List_X, MeshID_New_X)}, where: X is a positive integer with a value range of [1, N], Message_Update_Refer_X is the configuration update benchmarking information generated by the Xth benchmarking device, Device_List_X is the full network device list constructed by the Xth benchmarking device, and MeshID_New_X and MeshKey_New_X are the new networking parameters generated by the Xth benchmarking device.

[0148] Step 24: All configuration update benchmarking devices construct the configuration update benchmarking message Message_Update_Refer_X generated by themselves through MeshKey encryption, and send it to other access devices in the network.

[0149] Step 25: The access devices in the network (except the benchmarking devices) will receive the configuration update benchmarking messages sent by N benchmarking devices, and use MeshKey to decrypt to obtain N configuration update benchmarking information Message_Update_Refer_X, where: X is a positive integer in the range of [1,N].

[0150] Step 26: The access device in the network (except the benchmark device) performs SHA1 operation on the Device_List constructed by itself to generate SHA1(Device_List), and compares it with the SHA1(Device_List_X) in the N received Message_Update_Refer_X, and selects to perform network parameter update, data correction and network parameter update, and problem device location operations according to the comparison result. The details are described as follows:

[0151] Case 1: If the SHA1(Device_List_X) of all configuration update benchmarking devices is the same, and is the same as the SHA1(Device_List) generated by the access device itself, it means that all access devices calculate new networking parameters based on the same parameters. Use the MeshKey_New calculated by the access device itself to decrypt N configuration update benchmarking information Message_Update_Refer_X to obtain N groups of Device_List_X and MeshID_New_X. Compare whether the MeshID_New_X in the N groups of data is the same as the newly generated MeshID_New. If they are the same, it means that the networking parameters are correct, construct a successful configuration update result message, and update the configuration parameters; if they are different, it means that the networking parameters are calculated incorrectly, locate the problem device according to different items, form the cause of failure, and use MeshKey to encrypt and construct a configuration update failure result message.

[0152] Case 2: If the SHA1(Device_List_X) of all configuration update benchmarking devices is the same, but different from the SHA1(Device_List) generated by the access device itself, it means that the parameters used by the access device to calculate the new networking parameters are wrong and need to be corrected: Use SHA1(Device_List_X) as input to regenerate new networking parameters (MeshID_New', MeshKey_New'). Use MeshKey_New' to decrypt N configuration update benchmarking information Message_Update_Refer_X to obtain N groups of Device_List_X and MeshID_New_X. Compare whether the MeshID_New_X in the N groups of data is the same as the newly generated MeshID_New'. If they are the same, it means that the corrected networking parameters are correct, and update your own Device_List according to Device_List_X, then construct a successful configuration update result message, and update the configuration parameters; if they are different, it means that the networking parameters are calculated incorrectly, locate the problem device according to different items, form the cause of failure, and use MeshKey to encrypt and construct a configuration update failure result message.

[0153] Case 3: If the SHA1 (Device_List_X) of some configuration update benchmark devices is different from the SHA1 (Device_List) generated by the access device itself, it means that the parameters used by these configuration update benchmark devices to calculate the new networking parameters are wrong and need to be corrected. The access device locates the problematic configuration update benchmark device based on different items, forms the failure reason and Device_List together with MeshKey to encrypt the configuration update failure result message, and restarts the configuration update after the problematic configuration update benchmark device is corrected.

[0154] Case 4: If the SHA1 (Device_List_X) of all configuration update benchmark devices is different from the SHA1 (Device_List) generated by the access device itself, it means that the parameters used to calculate the new networking parameters of the network device are wrong, and the configuration update needs to be performed after the network device synchronously builds the Device_list. The access device forms the failure reason and the network device list update request, and constructs the configuration update failure result message with MeshKey encryption. After all network devices update the device list, the configuration update is restarted.

[0155] Step 27: The access device in the network (except the configuration updated benchmark device) sends the configuration updated result message to the configuration updated benchmark device.

[0156] Step 28: All configuration update benchmark devices use MeshKey to decrypt the configuration update result message. If a successful configuration update result message is received, they will update their own configuration parameters after receiving successful configuration update result messages from all access devices in the network (except the benchmark device for the configuration update). If a failed configuration update result message is received, the cause of the configuration update failure is analyzed based on the message, and corrective measures such as updating the device list are initiated before restarting the configuration update.

[0157] In an optional embodiment of the present invention, when the first network device is a network device newly added to the network and has been configured with the first network parameter,

[0158] Adding device information of the first network device to the device list;

[0159] The first network device encrypts the device information of the first network device using the first network key, and sends the encrypted device information to all other network devices in the network;

[0160] Receiving device information of other network devices encrypted by other network devices based on the first network key;

[0161] The first network device uses the first network key to decrypt device information of other network devices and updates the decrypted device information to the device list of the first network device.

[0162] In an optional embodiment of the present invention, the device information includes a device identifier, a MAC address of the device, an IP address of the device, and a power-on time of the device.

[0163] In an optional embodiment of the present invention, when the first network device is shut down or restored to initial settings, the device list of the first network device is cleared.

[0164] like Figure 3As shown, the method for the access device to construct a wireless mesh network device list specifically includes the following steps:

[0165] Step 31: After being powered on, the access devices that have been configured with the same networking parameters (MeshID, MeshKey) will automatically join the same wireless Mesh network (hereinafter referred to as the newly joined access devices), and their own device related information (device ID, MAC, IP, power-on time, etc.) will be added to the device list.

[0166] Step 32: The newly added access device encrypts its own device-related information using MeshKey and sends it to other access devices in the wireless Mesh network.

[0167] Step 33: Other connected devices use MeshKey to decrypt the received device-related information and update it into the device list.

[0168] Step 34: Other access devices encrypt their device-related information (device ID, MAC, IP, power-on time, etc.) using MeshKey and send it to the access device newly added to the network.

[0169] Step 35: The newly added access device uses MeshKey to decrypt the device-related information received from other access devices and updates it into the device list.

[0170] Step 36: If the access device is turned off or restored to factory settings, the device list maintained by the device will be automatically cleared, and the device list will be rebuilt according to the above process the next time it joins the network.

[0171] Through the above method, all access devices in the wireless mesh network build the same device list.

[0172] According to the embodiments of the present disclosure, all access devices in the wireless network can build the same device list and filter out benchmark devices from all devices, providing a data correction mechanism and a method for discovering problematic devices, improving the robustness and security of the configuration update process, and achieving the effect of secure configuration updates. At the same time, all devices in the network participate in the negotiation and verification of new networking parameters, and key parameters such as new networking keys are not transmitted between devices, which improves the security of new networking parameters. In addition, the configuration security update process between access devices does not require manual operation, is imperceptible to users, and provides a good user experience.

[0173] like Figure 4 As shown, a configuration information updating method is applied to a second network device, and the method includes:

[0174] Step 410: Calculate the second network parameter according to the device list of the second network device and the first network parameter, wherein the device list includes all network devices in the network where the second network device is located;

[0175] Step 420, receiving a configuration update message sent by a first network device in the network;

[0176] Step 430, decrypt the configuration update message to obtain a decrypted configuration update message;

[0177] Step 440, comparing the device list of the second network device with the device list included in the decrypted configuration update message to obtain a configuration update result message;

[0178] Step 450: Send a configuration update result message to the first network device.

[0179] In an optional embodiment of the present invention, the network includes: N first network devices and M second network devices, and all network devices in the network are screened based on a screening strategy to obtain the N first network devices, where N is an integer greater than or equal to 2, and M is an integer greater than or equal to 1.

[0180] In an optional embodiment of the present invention, the screening strategy includes at least one of the following:

[0181] The network device with the largest and smallest device identifiers in the device list;

[0182] The network device with the largest and smallest MAC addresses in the device list;

[0183] The network device with the largest and smallest IP addresses in the device list;

[0184] The network devices in the device list that are powered on the latest and earliest.

[0185] In an optional embodiment of the present invention, the first network parameter includes a first network identifier and a first network key; the second network parameter includes a second network identifier and a second network key;

[0186] In an optional embodiment of the present invention, step 410 specifically includes:

[0187] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or

[0188] Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or

[0189] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or

[0190] The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

[0191] In an optional embodiment of the present invention, step 430 specifically includes:

[0192] The N configuration update messages sent by the N first network devices are decrypted using the first parameter key.

[0193] In an optional embodiment of the present invention, step 440 specifically includes:

[0194] If the device lists in the N configuration update messages sent by the N first network devices are the same and are also the same as the device list of the second network device, compare whether the second network identifiers in the N configuration update messages are consistent with the second network identifier in the second network parameter calculated by the second network device; if they are the same, generate a configuration update result message indicating a successful configuration update; if they are different, locate the problematic first network device and generate a configuration update result message;

[0195] If the device lists in the N configuration update messages sent by the N first network devices are all the same but different from the device list of the second network device, the second network device recalculates and generates the second network parameter, compares whether the second network identifier in the N configuration update messages is consistent with the second network identifier in the second network parameter recalculated and generated by the second network device, and if they are the same, generates a configuration update result message indicating a successful configuration update; if they are different, locates the problematic first network device and generates a configuration update result message;

[0196] If a portion of the device list in the N configuration update messages sent by the N first network devices is different from the device list of the second network device, locating the problematic first network device and generating a configuration update result message to correct the problematic first network device and restart the configuration update;

[0197] If the device lists in the N configuration update messages sent by the N first network devices are different from the device list of the second network device, a configuration update result message is generated to reconstruct the device list including all network devices in the network and restart the configuration update.

[0198] In an optional embodiment of the present invention, when the second network device is a network device newly added to the network and has been configured with the first network parameter,

[0199] Adding device information of the second network device to the device list;

[0200] The second network device encrypts the device information of the second network device using the first network key, and sends the encrypted device information to all other network devices in the network;

[0201] Receiving device information of other network devices encrypted by other network devices based on the first network key;

[0202] The second network device uses the first network key to decrypt the device information of other network devices and updates the decrypted device information to the device list of the second network device.

[0203] In an optional embodiment of the present invention, the device information includes a device identifier, a MAC address of the device, an IP address of the device, and a power-on time of the device.

[0204] All access devices in the wireless network can build the same device list and participate in the negotiation and verification of new networking parameters. Key parameters such as new networking keys are not transmitted between devices, which improves the security of new networking parameters. In addition, the configuration security update process between access devices does not require manual operation, is imperceptible to users, and provides a good user experience.

[0205] All access devices in the wireless network can build the same device list and select benchmark devices from all devices, providing a data correction mechanism and a method for discovering problematic devices, improving the robustness and security of the configuration update process, and achieving the effect of secure configuration updates. At the same time, all devices in the network participate in the negotiation and verification of new networking parameters, and key parameters such as new networking keys are not transmitted between devices, which improves the security of new networking parameters. In addition, the configuration security update process between access devices does not require manual operation, is imperceptible to users, and provides a good user experience.

[0206] like Figure 5 As shown, a first network device 50 includes:

[0207] A first calculation module 510 calculates a second network parameter according to a device list of the first network device and a first network parameter, wherein the device list includes all network devices in the network where the first network device is located;

[0208] A generating module 520 generates configuration update information according to the device list of the first network device and the second network parameter;

[0209] A first sending module 530 encrypts the configuration update information and sends the encrypted configuration update information to a second network device in the network;

[0210] The first receiving module 540 receives a configuration update result message fed back by the second network device, and determines whether to update the configuration information of the first network device based on the configuration update result message.

[0211] In an optional embodiment of the present invention, the network includes: N first network devices and M second network devices, and all network devices in the network are screened based on a screening strategy to obtain the N first network devices, where N is an integer greater than or equal to 2, and M is an integer greater than or equal to 1.

[0212] In an optional embodiment of the present invention, the screening strategy includes at least one of the following:

[0213] The network device with the largest and smallest device identifiers in the device list;

[0214] The network device with the largest and smallest MAC addresses in the device list;

[0215] The network device with the largest and smallest IP addresses in the device list;

[0216] The network devices in the device list that are powered on the latest and earliest.

[0217] In an optional embodiment of the present invention, the first network parameter includes a first network identifier and a first network key; the second network parameter includes a second network identifier and a second network key;

[0218] The first calculation module 510 is further configured to:

[0219] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or

[0220] Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or

[0221] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or

[0222] The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

[0223] In an optional embodiment of the present invention, encrypting the configuration update information includes:

[0224] The configuration update information is encrypted using the first network key.

[0225] In an optional embodiment of the present invention, the first receiving module 540 is specifically used for:

[0226] Receive M configuration update result messages fed back by M second network devices in the network, and decrypt the M configuration update result messages using the first parameter key;

[0227] When the M result information fed back by the received M second network devices are all configuration update success messages, the configuration information of the first network device is updated, otherwise a correction operation is performed.

[0228] In an optional embodiment of the present invention, when the first network device is a network device newly added to the network and has been configured with the first network parameter,

[0229] Adding device information of the first network device to the device list;

[0230] The first network device encrypts the device information of the first network device using the first network key, and sends the encrypted device information to all other network devices in the network;

[0231] Receiving device information of other network devices encrypted by other network devices based on the first network key;

[0232] The first network device uses the first network key to decrypt device information of other network devices and updates the decrypted device information to the device list of the first network device.

[0233] In an optional embodiment of the present invention, the device information includes a device identifier, a MAC address of the device, an IP address of the device, and a power-on time of the device.

[0234] In an optional embodiment of the present invention, when the first network device is shut down or restored to initial settings, the device list of the first network device is cleared.

[0235] All access devices in the wireless network can build the same device list and select benchmark devices from all devices, providing a data correction mechanism and a method for discovering problematic devices, improving the robustness and security of the configuration update process, and achieving the effect of secure configuration updates. At the same time, all devices in the network participate in the negotiation and verification of new networking parameters, and key parameters such as new networking keys are not transmitted between devices, which improves the security of new networking parameters. In addition, the configuration security update process between access devices does not require manual operation, is imperceptible to users, and provides a good user experience.

[0236] like Figure 6 As shown, a second network device 60 includes:

[0237] A second calculation module 610 is configured to calculate a second network parameter according to a device list of the second network device and the first network parameter, wherein the device list includes all network devices in the network where the second network device is located;

[0238] A second receiving module 620 receives a configuration update message sent by a first network device in the network;

[0239] A decryption module 630 decrypts the configuration update message to obtain a decrypted configuration update message;

[0240] A comparison module 640 compares the device list of the second network device with the device list included in the decrypted configuration update message to obtain a configuration update result message;

[0241] The second sending module 650 sends the configuration update result message to the first network device.

[0242] In an optional embodiment of the present invention, the network includes: N first network devices and M second network devices, and all network devices in the network are screened based on a screening strategy to obtain the N first network devices, where N is an integer greater than or equal to 2, and M is an integer greater than or equal to 1.

[0243] In an optional embodiment of the present invention, the screening strategy includes at least one of the following:

[0244] The network device with the largest and smallest device identifiers in the device list;

[0245] The network device with the largest and smallest MAC addresses in the device list;

[0246] The network device with the largest and smallest IP addresses in the device list;

[0247] The network devices in the device list that are powered on the latest and earliest.

[0248] In an optional embodiment of the present invention, the first network parameter includes a first network identifier and a first network key; the second network parameter includes a second network identifier and a second network key;

[0249] The second calculation module 610 is specifically used for:

[0250] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or

[0251] Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or

[0252] Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or

[0253] The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

[0254] In an optional embodiment of the present invention, the decryption module 630 is specifically used for:

[0255] The N configuration update messages sent by the N first network devices are decrypted using the first parameter key.

[0256] In an optional embodiment of the present invention, the comparison module 640 is specifically used for:

[0257] If the device lists in the N configuration update messages sent by the N first network devices are the same and are also the same as the device list of the second network device, compare whether the second network identifiers in the N configuration update messages are consistent with the second network identifier in the second network parameter calculated by the second network device; if they are the same, generate a configuration update result message indicating a successful configuration update; if they are different, locate the problematic first network device and generate a configuration update result message;

[0258] If the device lists in the N configuration update messages sent by the N first network devices are all the same but different from the device list of the second network device, the second network device recalculates and generates the second network parameter, compares whether the second network identifier in the N configuration update messages is consistent with the second network identifier in the second network parameter recalculated and generated by the second network device, and if they are the same, generates a configuration update result message indicating a successful configuration update; if they are different, locates the problematic first network device and generates a configuration update result message;

[0259] If a portion of the device list in the N configuration update messages sent by the N first network devices is different from the device list of the second network device, locating the problematic first network device and generating a configuration update result message to correct the problematic first network device and restart the configuration update;

[0260] If the device lists in the N configuration update messages sent by the N first network devices are different from the device list of the second network device, a configuration update result message is generated to reconstruct the device list including all network devices in the network and restart the configuration update.

[0261] In an optional embodiment of the present invention, when the second network device is a network device newly added to the network and has been configured with the first network parameter,

[0262] Adding device information of the second network device to the device list;

[0263] The second network device encrypts the device information of the second network device using the first network key, and sends the encrypted device information to all other network devices in the network;

[0264] Receiving device information of other network devices encrypted by other network devices based on the first network key;

[0265] The second network device uses the first network key to decrypt the device information of other network devices and updates the decrypted device information to the device list of the second network device.

[0266] In an optional embodiment of the present invention, the device information includes a device identifier, a MAC address of the device, an IP address of the device, and a power-on time of the device.

[0267] All access devices in the wireless network can build the same device list and select benchmark devices from all devices, providing a data correction mechanism and a method for discovering problematic devices, improving the robustness and security of the configuration update process, and achieving the effect of secure configuration updates. At the same time, all devices in the network participate in the negotiation and verification of new networking parameters, and key parameters such as new networking keys are not transmitted between devices, which improves the security of new networking parameters. In addition, the configuration security update process between access devices does not require manual operation, is imperceptible to users, and provides a good user experience.

[0268] The embodiment of the present invention further provides a communication device, comprising: a processor and a memory storing a computer program, wherein when the computer program is executed by the processor, the method described above is executed. All implementations in the above method embodiment are applicable to this embodiment and can achieve the same technical effect.

[0269] The embodiment of the present invention further provides a computer-readable storage medium, including instructions, which, when executed on a computer, enable the computer to execute the method described above. All implementations in the above method embodiment are applicable to this embodiment and can achieve the same technical effect.

[0270] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0271] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0272] In the embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0273] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0274] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0275] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, ROM, RAM, magnetic disks, or optical disks.

[0276] In addition, it should be noted that in the apparatus and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. Moreover, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order, and some steps can be performed in parallel or independently of each other. For those of ordinary skill in the art, it is understood that all or any steps or components of the method and apparatus of the present invention can be implemented in any computing device (including processors, storage media, etc.) or a network of computing devices in hardware, firmware, software or a combination thereof, which can be achieved by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

[0277] Therefore, the purpose of the present invention can also be achieved by running a program or a group of programs on any computing device. The computing device can be a well-known general device. Therefore, the purpose of the present invention can also be achieved by simply providing a program product containing a program code that implements the method or device. That is to say, such a program product also constitutes the present invention, and the storage medium storing such a program product also constitutes the present invention. Obviously, the storage medium can be any well-known storage medium or any storage medium developed in the future. It should also be pointed out that in the device and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. In addition, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order. Some steps can be performed in parallel or independently of each other.

[0278] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A configuration information updating method, characterized in that: Applied to a first network device, the method comprises: Calculate the second network parameter according to the device list of the first network device and the first network parameter, wherein the device list includes all network devices in the network where the first network device is located; Generate configuration update information according to the device list of the first network device and the second network parameter; Encrypting the configuration update information and sending the encrypted configuration update information to a second network device in the network; receiving a configuration update result message fed back by the second network device, and determining whether to update the configuration information of the first network device based on the configuration update result message; The first network parameter includes a first network identifier and a first network key; the second network parameter includes a second network identifier and a second network key; The second network parameter calculated based on the device list of the first network device and the first network parameter includes: Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

2. The method according to claim 1, characterized in that The network includes: N first network devices and M second network devices, and all network devices in the network are screened based on a screening strategy to obtain the N first network devices, where N is an integer greater than or equal to 2, and M is an integer greater than or equal to 1.

3. The method according to claim 2, characterized in that The screening strategy includes at least one of the following: The network device with the largest and smallest device identifiers in the device list; The network device with the largest and smallest MAC addresses in the device list; The network device with the largest and smallest IP addresses in the device list; The network devices in the device list that are powered on the latest and earliest.

4. The method according to claim 1, characterized in that: The encrypting of the configuration update information comprises: The configuration update information is encrypted using the first network key.

5. The method according to claim 2, characterized in that: Receiving a configuration update result message fed back by a second network device in the network, and determining whether to update configuration information of the first network device based on the configuration update result message includes: Receive M configuration update result messages fed back by M second network devices in the network, and decrypt the M configuration update result messages using the first parameter key; When the M result information fed back by the received M second network devices are all configuration update success messages, the configuration information of the first network device is updated, otherwise a correction operation is performed.

6. The method according to claim 1, characterized in that When the first network device is a network device newly added to the network and the first network parameter has been configured, adding the device information of the first network device to the device list; The first network device encrypts the device information of the first network device using the first network key, and sends the encrypted device information to all other network devices in the network; Receiving device information of other network devices encrypted by other network devices based on the first network key; The first network device uses the first network key to decrypt device information of other network devices and updates the decrypted device information to the device list of the first network device.

7. The method according to claim 6, characterized in that The device information includes the device identification, the device MAC address, the device IP address and the device startup time.

8. The method according to claim 6 or 7, characterized in that: When the first network device is shut down or restored to initial settings, the device list of the first network device is cleared.

9. A configuration information updating method, characterized in that: Applied to the second network device, the method comprises: The second network parameter is calculated according to a device list of the second network device and the first network parameter, wherein the device list includes all network devices in the network where the second network device is located; Receiving a configuration update message sent by a first network device in the network; Decrypting the configuration update message to obtain a decrypted configuration update message; Comparing the device list of the second network device with the device list included in the decrypted configuration update message to obtain a configuration update result message; Send a configuration update result message to the first network device.

10. The method according to claim 9, characterized in that The network includes: N first network devices and M second network devices, and all network devices in the network are screened based on a screening strategy to obtain the N first network devices, where N is an integer greater than or equal to 2, and M is an integer greater than or equal to 1.

11. The method according to claim 10, characterized in that The screening strategy includes at least one of the following: The network device with the largest and smallest device identifiers in the device list; The network device with the largest and smallest MAC addresses in the device list; The network device with the largest and smallest IP addresses in the device list; The network devices in the device list that are powered on the latest and earliest.

12. The method according to claim 10, characterized in that The first network parameters include a first network identifier and a first network key; The second network parameter includes a second network identifier and a second network key; The second network parameter calculated based on the device list of the second network device and the first network parameter includes: Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

13. The method according to claim 12, characterized in that The configuration update message is decrypted to obtain a decrypted configuration update message including: The N configuration update messages sent by the N first network devices are decrypted using the first parameter key.

14. The method according to claim 13, characterized in that Comparing the device list of the second network device with the device list included in the decrypted configuration update message to obtain a configuration update result message includes: If the device lists in the N configuration update messages sent by the N first network devices are the same and are also the same as the device list of the second network device, compare whether the second network identifiers in the N configuration update messages are consistent with the second network identifier in the second network parameter calculated by the second network device; if they are the same, generate a configuration update result message indicating a successful configuration update; if they are different, locate the first network device with the problem and generate a configuration update result message; If the device lists in the N configuration update messages sent by the N first network devices are all the same but different from the device list of the second network device, the second network device recalculates and generates the second network parameter, compares whether the second network identifier in the N configuration update messages is consistent with the second network identifier in the second network parameter recalculated and generated by the second network device, and if they are the same, generates a configuration update result message indicating a successful configuration update; if they are different, locates the problematic first network device and generates a configuration update result message; If a portion of the device list in the N configuration update messages sent by the N first network devices is different from the device list of the second network device, locating the problematic first network device and generating a configuration update result message to correct the problematic first network device and restart the configuration update; If the device lists in the N configuration update messages sent by the N first network devices are different from the device list of the second network device, a configuration update result message is generated to reconstruct the device list including all network devices in the network and restart the configuration update.

15. The method according to claim 12, characterized in that When the second network device is a network device newly added to the network and has been configured with the first network parameter, adding device information of the second network device to the device list; The second network device encrypts the device information of the second network device using the first network key, and sends the encrypted device information to all other network devices in the network; Receiving device information of other network devices encrypted by other network devices based on the first network key; The second network device uses the first network key to decrypt the device information of other network devices and updates the decrypted device information to the device list of the second network device.

16. The method according to claim 15, characterized in that The device information includes the device identification, the device MAC address, the device IP address and the device startup time.

17. A first network device, characterized in that: include: A first calculation module is configured to calculate a second network parameter according to a device list of the first network device and a first network parameter, wherein the device list includes all network devices in the network where the first network device is located; A generating module, generating configuration update information according to the device list of the first network device and the second network parameter; A first sending module; Encrypting the configuration update information and sending the encrypted configuration update information to a second network device in the network; A first receiving module receives a configuration update result message fed back by the second network device, and determines whether to update the configuration information of the first network device based on the configuration update result message; The first network parameter includes a first network identifier and a first network key; the second network parameter includes a second network identifier and a second network key; The second network parameter calculated based on the device list of the first network device and the first network parameter includes: Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and summary information of the device list; or Generate a second network identifier based on the first network identifier, summary information of the device list and the current date, and generate a second network key based on the first network key, summary information of the device list and the current date; or Generate a second network identifier based on the first network identifier and summary information of the device list, and generate a second network key based on the first network key and the second network identifier; or The second network identifier is calculated based on the first network identifier, summary information of the device list and the current date, and the second network key is calculated based on the first network key and the second network identifier.

18. A second network device, characterized in that: include: A second calculation module is configured to calculate a second network parameter according to a device list of the second network device and the first network parameter, wherein the device list includes all network devices in the network where the second network device is located; A second receiving module, receiving a configuration update message sent by a first network device in the network; A decryption module, decrypting the configuration update message to obtain a decrypted configuration update message; A comparison module, comparing the device list of the second network device with the device list included in the decrypted configuration update message to obtain a result message; The second sending module sends the configuration update result message to the first network device.

19. A communication device, characterized in that: include: A processor and a memory storing a computer program, wherein when the computer program is executed by the processor, the method according to any one of claims 1 to 8 or the method according to any one of claims 9 to 16 is executed.

20. A computer-readable storage medium, characterized in that: Instructions are stored, and when the instructions are executed on a computer, the computer is caused to execute the method according to any one of claims 1 to 8 or the method according to any one of claims 9 to 16.

Images