A method and system for controlling Internet access rights based on intelligent router

Abstract

The present invention discloses a method and system for controlling Internet access rights based on an intelligent router, wherein the method comprises: submitting a network access request to the intelligent router through a terminal; after receiving the network access request, sending an identity information identification instruction of an accessing user to the terminal through the intelligent router; obtaining an identity identifier of the accessing user through the terminal based on the identity information identification instruction, and sending the identity identifier of the accessing user to the intelligent router; verifying the received identity identifier of the accessing user through the intelligent router, and when the identity identifier of the accessing user passes the verification, allocating network resource access rights to the terminal according to the preset network resource access rights of the accessing user; and initiating network access through the terminal based on the allocated network resource access rights.

Description

Technical Field

[0001] The present invention relates to the field of Internet communication technology, and more specifically, to a method and system for controlling Internet access rights based on an intelligent router. Background Art

[0002] With the development of communication technology, Internet applications are becoming more and more widespread, and routers are the entry hubs of the Internet. However, in many occasions or units, for security or other reasons, it is necessary to control the permissions of specific Internet terminals and Internet users or control the access targets. For example, in a certain area, different terminals and different Internet users have different access rights, or terminals have different access rights to different servers. Or in a family, different members have different Internet access rights, such as children in family members can only access specific websites. The prior art does not involve a method for controlling Internet access rights through an intelligent router.

[0003] Therefore, a technology is needed to control Internet access rights based on an intelligent router. Summary of the invention

[0004] The technical solution of the present invention provides a method and system for controlling Internet access rights based on an intelligent router, so as to solve the problem of how to control Internet access rights based on an intelligent router.

[0005] In order to solve the above problems, the present invention provides a method for controlling Internet access rights based on an intelligent router, the method comprising:

[0006] Submit a network access request to the smart router through the terminal;

[0007] After receiving the network access request, the intelligent router sends an access user's identity information identification instruction to the terminal;

[0008] Acquiring the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router;

[0009] The received identity of the accessing user is verified by the intelligent router, and when the identity of the accessing user passes the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the accessing user;

[0010] Initiate network access through the terminal based on the assigned network resource access rights.

[0011] Preferably, it also includes:

[0012] After receiving the network access request, the intelligent router sends the terminal and the identity information identification instruction of the accessing user to the terminal;

[0013] Acquire the identity of the terminal and the access user through the terminal based on the identity information identification instruction of the terminal and the access user, and send the identity of the terminal and the access user to the intelligent router;

[0014] The received terminal and the identity of the access user are verified by the intelligent router, and when the terminal and the identity of the access user pass the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the terminal and the access user;

[0015] Initiate network access through the terminal based on the assigned network resource access rights.

[0016] Preferably, the terminal's identity includes: a MAC address of the terminal;

[0017] The identity identification of the accessing user includes: fingerprint image, facial image, iris image and ID card.

[0018] Preferably, setting network resource access rights for the terminal according to the identity identifier of the terminal includes:

[0019] Allocate designated servers or web pages that terminals with different identities are allowed to access;

[0020] Setting network resource access rights for the terminal according to the identity of the access user includes:

[0021] Assign designated servers or web pages that are allowed to be accessed to users with different identities.

[0022] Preferably, after initiating network access based on the allocated network resource access rights through the terminal, the method further includes:

[0023] According to a predetermined time interval, sending an identity information identification instruction of the accessing user to the terminal through the intelligent router;

[0024] Acquiring the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router;

[0025] The received identity of the accessing user is verified by the intelligent router. When the identity of the accessing user passes the verification, the accessing user continues to access the network resources according to the allocated network resource access rights.

[0026] According to another aspect of the present invention, the present invention provides a system for controlling Internet access rights based on an intelligent router, the system comprising:

[0027] A request unit, used for submitting a network access request to the intelligent router through a terminal;

[0028] A control unit, configured to send an identity information identification instruction of a visiting user to the terminal after receiving the network access request through the intelligent router; obtain an identity identifier of the visiting user through the terminal based on the identity information identification instruction, and send the identity identifier of the visiting user to the intelligent router; verify the received identity identifier of the visiting user through the intelligent router, and when the identity identifier of the visiting user passes the verification, allocate network resource access rights to the terminal according to the preset network resource access rights of the visiting user;

[0029] The execution unit is used to initiate network access based on the allocated network resource access rights through the terminal.

[0030] Preferably, the control unit is further used for:

[0031] After receiving the network access request, the intelligent router sends the terminal and the identity information identification instruction of the accessing user to the terminal;

[0032] Acquire the identity of the terminal and the access user through the terminal based on the identity information identification instruction of the terminal and the access user, and send the identity of the terminal and the access user to the intelligent router;

[0033] The received terminal and the identity of the access user are verified by the intelligent router, and when the terminal and the identity of the access user pass the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the terminal and the access user;

[0034] The execution unit is further configured to initiate network access through the terminal based on the allocated network resource access rights.

[0035] Preferably, the terminal's identity includes: a MAC address of the terminal;

[0036] The identity identification of the accessing user includes: fingerprint image, facial image, iris image and ID card.

[0037] Preferably, the control unit is further used to: set network resource access rights for the terminal according to the identity of the terminal, including:

[0038] Allocate designated servers or web pages that terminals with different identities are allowed to access;

[0039] Setting network resource access rights for the terminal according to the identity of the access user includes:

[0040] Assign designated servers or web pages that are allowed to be accessed to users with different identities.

[0041] Preferably, the control unit is further configured to, after initiating network access based on the allocated network resource access rights through the terminal, further include:

[0042] According to a predetermined time interval, sending an identity information identification instruction of the accessing user to the terminal through the intelligent router;

[0043] Acquiring the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router;

[0044] The received identity of the accessing user is verified by the intelligent router. When the identity of the accessing user passes the verification, the accessing user continues to access the network resources according to the allocated network resource access rights.

[0045] The technical solution of the present invention provides a method and system for controlling Internet access rights based on an intelligent router, wherein the method includes: submitting a network access request to the intelligent router through a terminal; after receiving the network access request, the intelligent router sends an identity information identification instruction of the accessing user to the terminal; obtaining the identity identification of the accessing user through the terminal based on the identity information identification instruction, and sending the identity identification of the accessing user to the intelligent router; verifying the received identity identification of the accessing user through the intelligent router, and when the identity identification of the accessing user passes the verification, allocating network resource access rights to the terminal according to the preset network resource access rights of the accessing user; initiating network access through the terminal based on the allocated network resource access rights. The technical solution of the present invention solves the different Internet access needs of users with different identities, improves the security of access to resources by setting different access rights of accessing users, and realizes timed supervision of network access users. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] A more complete understanding of exemplary embodiments of the present invention may be obtained by referring to the following drawings:

[0047] Figure 1 A flow chart of a method for controlling Internet access rights based on an intelligent router according to a preferred embodiment of the present invention;

[0048] Figure 2 A flow chart of a method for controlling Internet access rights by an intelligent router according to a preferred embodiment of the present invention; and

[0049] Figure 3 The figure is a structural diagram of a system for controlling Internet access rights based on an intelligent router according to a preferred embodiment of the present invention. DETAILED DESCRIPTION

[0050] Now, exemplary embodiments of the present invention are described with reference to the accompanying drawings. However, the present invention can be implemented in many different forms and is not limited to the embodiments described herein. These embodiments are provided to disclose the present invention in detail and completely and to fully convey the scope of the present invention to those skilled in the art. The terms used in the exemplary embodiments shown in the accompanying drawings are not intended to limit the present invention. In the accompanying drawings, the same units / elements are marked with the same reference numerals.

[0051] Unless otherwise specified, the terms (including technical terms) used herein have the commonly understood meanings to those skilled in the art. In addition, it is understood that the terms defined in commonly used dictionaries should be understood to have the same meanings as those in the context of the relevant fields, and should not be understood as idealized or overly formal meanings.

[0052] Figure 1 The present invention provides a method for controlling network access rights of an intelligent router and an identity authentication module. First, the intelligent router includes an identity authentication module and a rights management module. Figure 2 As shown. The identity authentication module includes but is not limited to facial recognition, fingerprint recognition, iris recognition, ID card recognition, etc. The authority management module of the intelligent router can set different access rights according to different authentication IDs. The administrator can enter the authority for different applicants and different terminals. For example, identity entry management is performed for different applicants or Internet terminals. When the applicant uses the Internet terminal, the Internet terminal will send a connection application to the intelligent router, and the intelligent router will verify the identity of the applicant to the Internet terminal. For example, the Internet terminal can perform facial recognition on the applicant through a camera and verify it with the identity authentication module of the intelligent router. After the verification is passed, the applicant can use the Internet terminal to access a specific server or a specific web page through the intelligent router. At the same time, during the Internet access process, the intelligent router can conduct multiple verifications with the applicant at regular intervals to prevent the Internet user from impersonating the applicant's identity. When targeting different Internet terminals, after the intelligent router enters the authority of the Internet terminal, the Internet terminal can have access rights to the server or a specific website through the intelligent router. Realize the Internet terminal's access to a specific web page or a specific server. Among them, the identity authentication module can also perform security authentication on the authority administrator. For example, only people with the fingerprint feature have the setting authority to the intelligent router.

[0053] like Figure 1 As shown, the present invention provides a method for controlling Internet access rights based on an intelligent router, the method comprising:

[0054] Step 101: Submit a network access request to the intelligent router through a terminal;

[0055] Step 102: After receiving the network access request, the intelligent router sends an identification instruction of the access user to the terminal;

[0056] Step 103: obtaining the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router; preferably, the identity of the terminal includes: the MAC address of the terminal;

[0057] The identity identification of the accessing user includes: fingerprint image, facial image, iris image and ID card.

[0058] Step 104: verifying the received identity of the accessing user through the intelligent router, and when the identity of the accessing user passes the verification, allocating network resource access rights to the terminal according to the preset network resource access rights of the accessing user;

[0059] Preferably, setting network resource access rights for a terminal according to the identity of the terminal includes:

[0060] Allocate designated servers or web pages that terminals with different identities are allowed to access;

[0061] Set network resource access permissions for terminals based on the identity of the accessing user, including:

[0062] Assign designated servers or web pages that are allowed to be accessed to users with different identities.

[0063] Step 105: Initiate network access through the terminal based on the allocated network resource access rights.

[0064] As an implementation mode of the present invention, the present invention realizes the control of Internet access rights of family members.

[0065] Parents set permissions for family members on the smart router, enter facial features of family members, and enter permissions for different members to access different websites (website whitelist and blacklist entry). When children use tablets to take online classes during the summer vacation, the tablets will apply for connection to the smart router after they are turned on. The smart router applies for facial recognition authentication to the tablet. At this time, the child uses the tablet camera to perform facial recognition authentication, and then compares it with the original input information in the identity authentication module in the smart router. After the comparison is successful, the child can access the Internet, and the Internet access permission is also limited to the designated online course website. This function greatly reduces the supervision energy of parents and limits children's Internet access to healthy websites such as learning.

[0066] Preferably, it also includes:

[0067] After receiving the network access request, the intelligent router sends the terminal and the identity information identification instruction of the accessing user to the terminal;

[0068] Obtaining the identity of the terminal and the access user through the terminal based on the identity information identification instruction of the terminal and the access user, and sending the identity of the terminal and the access user to the intelligent router;

[0069] The received terminal and the identity of the access user are verified by the intelligent router. When the identity of the terminal and the access user passes the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the terminal and the access user;

[0070] Initiate network access through the terminal based on the assigned network resource access rights.

[0071] As an implementation mode of the present invention, the present invention realizes the control of the Internet access authority of the terminals of the confidential units and the access users.

[0072] In a confidential unit, the information department manager enters the employee permissions for the smart router, including the MAC, fingerprint, and facial features of the Internet terminal used. Different access permissions are assigned. When staff with different permissions or levels access the server, they have different access permissions. The permissions can be different according to each person's ID (including fingerprint, facial recognition), etc. This can also prevent the account password from being used by others to the greatest extent.

[0073] Preferably, after initiating network access based on the allocated network resource access rights through the terminal, the method further includes:

[0074] According to a predetermined time interval, an identification instruction of the accessing user's identity information is sent to the terminal through the intelligent router;

[0075] Obtaining the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router;

[0076] The received identity of the accessing user is verified by the intelligent router. When the identity of the accessing user passes the verification, the accessing user continues to access the network resources according to the allocated network resource access rights.

[0077] The present invention solves the problem of different Internet access requirements of different users by performing different authority control on different users. The present invention improves the security of network access by setting access rights of different users and realizes the timed supervision of network access.

[0078] The present invention can control different people and different access rights through the function of intelligent routing Internet connection hub, and can also implement management, so as to solve the Internet access pain points of some Internet access areas or units and families.

[0079] Figure 3 This is a system structure diagram for controlling Internet access rights based on an intelligent router according to a preferred embodiment of the present invention. Figure 3 As shown, the present invention provides a system for controlling Internet access rights based on an intelligent router, the system comprising:

[0080] The request unit 301 is used to submit a network access request to the intelligent router through a terminal;

[0081] The control unit 302 is used to send an identity information identification instruction of the accessing user to the terminal after receiving the network access request through the intelligent router; obtain the identity identifier of the accessing user through the terminal based on the identity information identification instruction, and send the identity identifier of the accessing user to the intelligent router; verify the received identity identifier of the accessing user through the intelligent router, and when the identity identifier of the accessing user passes the verification, allocate network resource access rights to the terminal according to the preset network resource access rights of the accessing user;

[0082] Preferably, the terminal's identity includes: a MAC address of the terminal;

[0083] The identity identification of the accessing user includes: fingerprint image, facial image, iris image and ID card.

[0084] Preferably, the control unit 302 is further configured to: set network resource access rights for the terminal according to the identity of the terminal, including:

[0085] Allocate designated servers or web pages that terminals with different identities are allowed to access;

[0086] Set network resource access permissions for terminals based on the identity of the accessing user, including:

[0087] Assign designated servers or web pages that are allowed to be accessed to users with different identities.

[0088] Preferably, the control unit 302 is further configured to, after initiating network access based on the allocated network resource access rights through the terminal, further include:

[0089] According to a predetermined time interval, an identification instruction of the accessing user's identity information is sent to the terminal through the intelligent router;

[0090] Obtaining the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router;

[0091] The received identity of the accessing user is verified by the intelligent router. When the identity of the accessing user passes the verification, the accessing user continues to access the network resources according to the allocated network resource access rights.

[0092] The execution unit 303 is configured to initiate network access through the terminal based on the allocated network resource access rights.

[0093] Preferably, the control unit 302 is further configured to:

[0094] After receiving the network access request, the intelligent router sends the terminal and the identity information identification instruction of the accessing user to the terminal;

[0095] Obtaining the identity of the terminal and the access user through the terminal based on the identity information identification instruction of the terminal and the access user, and sending the identity of the terminal and the access user to the intelligent router;

[0096] The received terminal and the identity of the access user are verified by the intelligent router. When the identity of the terminal and the access user passes the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the terminal and the access user;

[0097] The execution unit is further used to initiate network access based on the allocated network resource access rights through the terminal.

[0098] A system 300 for controlling Internet access rights based on an intelligent router according to a preferred embodiment of the present invention corresponds to a method 100 for controlling Internet access rights based on an intelligent router according to another preferred embodiment of the present invention, and will not be described in detail herein.

[0099] The invention has been described above with reference to a few embodiments. However, it is readily apparent to a person skilled in the art that other embodiments than the ones disclosed above are equally within the scope of the invention, as defined by the appended patent claims.

[0100] Generally, all terms used in the claims are to be interpreted according to their ordinary meaning in the technical field, unless explicitly defined otherwise herein. All references to "a / / the [means, component, etc.]" are to be openly interpreted as at least one instance of a means, component, etc., unless explicitly stated otherwise. The steps of any method disclosed herein do not necessarily have to be performed in the exact order disclosed, unless explicitly stated otherwise.

Claims

1. A method for controlling Internet access rights based on an intelligent router, the method comprising: Submit a network access request to the smart router through the terminal; After receiving the network access request, the intelligent router sends an access user's identity information identification instruction to the terminal; Acquiring the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router; The received identity of the accessing user is verified by the intelligent router, and when the identity of the accessing user passes the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the accessing user; Initiate network access through the terminal based on the assigned network resource access rights; According to a predetermined time interval, sending an identity information identification instruction of the accessing user to the terminal through the intelligent router; Acquiring the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router; The received identity of the accessing user is verified by the intelligent router. When the identity of the accessing user passes the verification, the accessing user continues to access the network resources according to the allocated network resource access rights.

2. The method according to claim 1, further comprising: After receiving the network access request, the intelligent router sends the terminal and the identity information identification instruction of the accessing user to the terminal; Acquire the identity of the terminal and the access user through the terminal based on the identity information identification instruction of the terminal and the access user, and send the identity of the terminal and the access user to the intelligent router; The received terminal and the identity of the access user are verified by the intelligent router, and when the terminal and the identity of the access user pass the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the terminal and the access user; Initiate network access through the terminal based on the assigned network resource access rights.

3. According to the method of claim 1, the identity of the terminal comprises: MAC address of the terminal; The identity identification of the accessing user includes: fingerprint image, facial image, iris image and ID card.

4. The method according to claim 1, setting network resource access rights for the terminal according to the identity of the terminal, comprising: Allocate designated servers or web pages that terminals with different identities are allowed to access; Setting network resource access rights for the terminal according to the identity of the access user includes: Assign designated servers or web pages that are allowed to be accessed to users with different identities.

5. A system for controlling Internet access rights based on an intelligent router, the system comprising: A request unit, used for submitting a network access request to the intelligent router through a terminal; A control unit, configured to send an access user's identity information identification instruction to the terminal after receiving the network access request through the intelligent router; Acquiring the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router; The received identity of the accessing user is verified by the intelligent router, and when the identity of the accessing user passes the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the accessing user; The control unit is further configured to, after initiating network access through the terminal based on the allocated network resource access rights, further include: According to a predetermined time interval, sending an identity information identification instruction of the accessing user to the terminal through the intelligent router; Acquiring the identity of the accessing user through the terminal based on the identity information identification instruction, and sending the identity of the accessing user to the intelligent router; The received identity of the accessing user is verified by the intelligent router, and when the identity of the accessing user passes the verification, the accessing user continues to access the network resources according to the allocated network resource access rights; The execution unit is used to initiate network access based on the allocated network resource access rights through the terminal.

6. The system according to claim 5, wherein the control unit is further configured to: After receiving the network access request, the intelligent router sends the terminal and the identity information identification instruction of the accessing user to the terminal; Acquire the identity of the terminal and the access user through the terminal based on the identity information identification instruction of the terminal and the access user, and send the identity of the terminal and the access user to the intelligent router; The received terminal and the identity of the access user are verified by the intelligent router, and when the terminal and the identity of the access user pass the verification, the network resource access rights are allocated to the terminal according to the preset network resource access rights of the terminal and the access user; The execution unit is further configured to initiate network access through the terminal based on the allocated network resource access rights.

7. The system according to claim 5, wherein the terminal identity comprises: MAC address of the terminal; The identity identification of the accessing user includes: fingerprint image, facial image, iris image and ID card.

8. The system according to claim 5, wherein the control unit is further configured to: set network resource access rights for the terminal according to the identity of the terminal, including: Allocate designated servers or web pages that terminals with different identities are allowed to access; Setting network resource access rights for the terminal according to the identity of the access user includes: Assign designated servers or web pages that are allowed to be accessed to users with different identities.

Images