A method and communication system for accessing a wireless network based on an Internet of Things channel

Abstract

The embodiment of the present application provides a method and communication system for accessing a wireless network based on an Internet of Things channel. First, the terminal determines the target base station to be accessed to the wireless network based on the Internet of Things communication signal scanned. After determining the target base station, the terminal needs to send a terminal activation request to the network management platform through the target base station to obtain the authority to transmit communication data with the target base station through the Internet of Things communication module. After successful activation, the terminal continues to obtain the wireless network connection information of the target base station through the terminal Internet of Things communication module to access the wireless network of the target base station according to the wireless network connection information. In the process of obtaining wireless network connection information through the Internet of Things, whether the terminal has the authority to communicate with the target base station through the Internet of Things can be screened by checking whether the terminal is activated, thereby achieving the effect of screening the terminals that can access the wireless network of the target base station to improve the security of the terminal access to the wireless network.

Description

Technical Field

[0001] The present application relates to the field of Internet technology, and in particular to a method and a communication system for accessing a wireless network based on an Internet of Things channel. Background Art

[0002] Enterprise Internet connects people, data and machines through the network, thus realizing mutual control and data sharing between people and machines, and between machines. Terminal access to wireless network means that the terminal is connected to the base station, and the terminal uploads and downloads data in the corresponding wireless network through signal transmission and reception between the base station and the base station.

[0003] When a terminal accesses a wireless network, it usually broadcasts an access request to the surrounding base stations through the Wi-Fi channel. The access request usually directly carries the access password corresponding to the SSID of the wireless network. For example, if the SSID is "beijing01", its corresponding access password is often a manually set password, such as "12345678". In this way, if the terminal accesses the wireless network "beijing01", if the access request sent carries the access password "12345678", it can be successfully connected. This method of verifying wireless network access rights only by matching the access password and SSID is too simple and easy to be cracked by criminals, and has a low security factor. Summary of the invention

[0004] The present application provides a method and a communication system for accessing a wireless network based on an Internet of Things channel, which can effectively improve the security of a terminal accessing a wireless network.

[0005] In a first aspect, the present application provides a method for accessing a wireless network based on an Internet of Things channel, which is applied to a terminal, wherein the terminal is provided with a terminal Internet of Things communication module, and the terminal Internet of Things communication module is used for communication between the terminal and a base station through an Internet of Things channel, and the method includes:

[0006] Receiving an Internet of Things communication signal through the terminal Internet of Things communication module;

[0007] Determine a target base station according to the terminal Internet of Things communication signal;

[0008] Sending a terminal activation request to the target base station through the terminal Internet of Things communication module to obtain permission for the terminal and the target base station to transmit communication data through the terminal Internet of Things communication module on the network management platform;

[0009] Receiving the activation result sent by the target base station through the terminal Internet of Things communication module;

[0010] If the activation result is successful activation, the wireless network connection information of the target base station is obtained through the terminal Internet of Things communication module to access the wireless network of the target base station according to the wireless network connection information.

[0011] In a second aspect, the present application provides a method for accessing a wireless network based on an Internet of Things channel, which is applied to a target base station, wherein the target base station is provided with a base station Internet of Things communication module, and the base station Internet of Things communication module is used for communication between the target base station and a terminal through an Internet of Things channel, and the method includes: sending an Internet of Things communication signal to the terminal through the base station Internet of Things communication module;

[0012] Receiving a terminal activation request sent by the terminal through the base station Internet of Things communication module;

[0013] Sending the terminal activation request to the network management platform through the base station Internet of Things communication module, so that the terminal obtains the authority to transmit communication data with the target base station through the terminal Internet of Things communication module on the network management platform;

[0014] Receiving the activation result sent by the network management platform through the base station Internet of Things communication module;

[0015] The activation result is sent to the terminal through the base station Internet of Things communication module, so that when the activation result is successful activation, the terminal obtains the wireless network connection information of the target base station through the terminal Internet of Things communication module to access the wireless network of the target base station.

[0016] In a third aspect, the present application provides a method for accessing a wireless network based on an Internet of Things channel, which is applied to a network management platform, wherein the network management platform has a platform Internet of Things communication module, and the platform Internet of Things communication module is used for communication between the network management platform and a target base station through an Internet of Things channel, and the method includes:

[0017] Receiving a terminal activation request sent by the target base station through the platform Internet of Things communication module;

[0018] In response to the terminal activation request, determining whether the terminal corresponding to the terminal activation request has the authority to transmit communication data with the target base station through the terminal Internet of Things communication module, and generating an activation result;

[0019] Sending the activation result to the target base station through the platform Internet of Things communication module;

[0020] Receiving a wireless network connection information acquisition request sent by the target base station through the platform Internet of Things communication module;

[0021] In response to the wireless network connection information acquisition request, the wireless network connection information is sent to the target base station through the platform Internet of Things communication module, so that the target base station forwards the wireless network connection information to the terminal, allowing the terminal to access the wireless network of the target base station according to the wireless network connection information.

[0022] In a fourth aspect, the present application provides a communication system, which includes: a terminal, a target base station corresponding to the terminal, and a network management platform, wherein the terminal, the target base station and the network management platform are used to execute the above-mentioned method of accessing a wireless network based on an Internet of Things channel.

[0023] It can be seen from the above technical solution that the method and communication system for accessing a wireless network based on an IoT channel provided by the present application can enable the terminal to first scan the surrounding base stations that radiate IoT communication signals, and select the target base station to be accessed to the wireless network. After determining the target base station, the terminal needs to send a terminal activation request to the network management platform through the target base station to obtain the authority to transmit communication data with the target base station through the IoT communication module. After successful activation, the terminal continues to obtain the wireless network connection information of the target base station through the terminal IoT communication module to access the wireless network of the target base station according to the wireless network connection information. The process of obtaining wireless network connection information through the IoT can screen whether the terminal has the authority to communicate with the target base station through the IoT by checking whether the terminal is activated, thereby screening the terminals that can access the wireless network of the target base station to improve the security of the terminal access to the wireless network. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solution of the present application, the drawings required for use in the embodiments are briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0025] Figure 1 A flowchart of a method for accessing a wireless network based on an Internet of Things channel provided in an embodiment of the present application;

[0026] Figure 2 A schematic diagram of the structure of a base station provided in an embodiment of the present application;

[0027] Figure 3 A schematic diagram of the structure of a terminal provided in an embodiment of the present application;

[0028] Figure 4 A schematic diagram of IoT communication signal coverage provided by an embodiment of the present application;

[0029] Figure 5A schematic diagram of the structure of a communication system provided in an embodiment of the present application;

[0030] Figure 6 A schematic diagram of the structure of a network management platform provided in an embodiment of the present application;

[0031] Figure 7 A flowchart of a terminal registering on a network management platform provided in an embodiment of the present application;

[0032] Figure 8 A schematic diagram of the structure of a terminal provided in an embodiment of the present application;

[0033] Fig. 9 A schematic diagram of the structure of a target base station provided in an embodiment of the present application;

[0034] Fig.10 A schematic diagram of the structure of a network management platform provided in an embodiment of the present application. DETAILED DESCRIPTION

[0035] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0036] Figure 1 A flowchart of a method for accessing a wireless network based on an Internet of Things channel provided in an embodiment of the present application is shown in FIG. Figure 1 As shown, the method includes:

[0037] S1. The base station sends an IoT communication signal to the terminal through the base station IoT communication module.

[0038] Figure 2 A schematic diagram of the structure of a base station provided in an embodiment of the present application is shown in FIG. Figure 2As shown, the base station 2 includes a base station wireless network communication module 201 and a base station Internet of Things communication module 202, and at least one antenna 203 for sending and receiving wireless signals. The base station wireless network communication module 201 is coupled with at least one antenna 203, receives electromagnetic wave signals on the wireless network channel via the antenna 203, and sends electromagnetic wave signals on the wireless network channel via at least one antenna 203, so that the base station 2 has the ability to communicate with the terminal on the wireless network channel. The base station Internet of Things communication module 202 is coupled with at least one antenna 203, receives electromagnetic wave signals on the Internet of Things channel via the antenna 203, and sends electromagnetic wave signals on the Internet of Things channel via at least one antenna 203, so that the base station 2 has the ability to communicate with the terminal on the Internet of Things channel. Therefore, the base station 2 of the embodiment of the present application can communicate with one or more terminals on the wireless network channel and / or the Internet of Things channel at the same time.

[0039] In the present application, the base station 2 radiates the Internet of Things signal to the surroundings through the base station Internet of Things communication module 202 so that each terminal can find a usable base station.

[0040] S2. The terminal receives the IoT communication signal through the terminal IoT communication module.

[0041] Figure 3 A schematic diagram of a terminal structure provided in an embodiment of the present application is shown in FIG. Figure 3 As shown, the terminal 1 includes a terminal wireless network communication module 101 and a terminal Internet of Things communication module 102, and at least one antenna 103 for sending and receiving wireless signals. The terminal wireless network communication module 101 is coupled with at least one antenna 103, receives electromagnetic wave signals on the wireless network channel via the antenna 103, and performs filtering and demodulation on the received signals; in addition, the terminal wireless network communication module 101 modulates and amplifies the signals to be sent, and sends them on the wireless network channel via at least one antenna 103; so that the terminal 1 has the ability to communicate with the base station on the wireless network channel. The terminal Internet of Things communication module 102 is coupled with at least one antenna 103, receives electromagnetic wave signals on the Internet of Things channel via the antenna 103, and performs filtering and demodulation on the received signals; in addition, the terminal Internet of Things communication module 102 modulates and amplifies the signals to be sent, and sends them on the Internet of Things channel via at least one antenna 103, so that the terminal 1 has the ability to communicate with the base station on the Internet of Things channel. Therefore, the terminal 1 of the embodiment of the present application can communicate with the base station on the wireless network channel and the Internet of Things channel at the same time.

[0042] In one embodiment, when the terminal 1 has multiple antennas 103, each antenna 103 can be used to cover a single or multiple communication frequency bands. Different antennas 103 can be coupled to the terminal wireless network communication module 101 or the terminal Internet of Things communication module 102 respectively, or can be coupled to the terminal wireless network communication module 101 or the terminal Internet of Things communication module 102 at the same time, and provide signal transceiver capabilities for the terminal wireless network communication module 101 and the terminal Internet of Things communication module 102 through frequency division multiplexing or time division multiplexing.

[0043] When the terminal 1 is located within the coverage of the IoT communication signal of the base station 2 , the terminal 1 can receive the IoT communication signal sent by the base station 2 through the terminal IoT communication module 102 to discover the base station 2 .

[0044] S3. The terminal determines the target base station based on the received IoT communication signal.

[0045] When the terminal is within the coverage of the IoT communication signal of only one base station, the base station is the target base station. When the terminal is within the coverage of the IoT communication signal of multiple base stations at the same time, the terminal needs to select the target base station for wireless network communication from these base stations. For example, Figure 4 A schematic diagram of IoT communication signal coverage provided by an embodiment of the present application, such as Figure 4 As shown, terminal 1 is located within the coverage range of the Internet of Things communication signals of base stations A, B and C. When terminal 1 receives the Internet of Things communication signals sent by base stations A, B and C, it can select the base station to be connected, such as base station A, and base station A is the target base station.

[0046] S4. The terminal sends a terminal activation request to the target base station through the terminal Internet of Things communication module.

[0047] After determining the target base station, the terminal needs to perform further activation operations before it can transmit data other than the activation request, such as wireless network access information, to the target base station through the IoT communication channel. Therefore, after determining the target base station, the terminal will send a terminal activation request to the target base station through the terminal IoT communication module to request activation of the function of transmitting data between the terminal and the target base station through the IoT communication channel. The activation request has a verification function. For example, the activation request may include a string of activation codes generated according to a certain algorithm, such as a hash value of the terminal MAC address generated according to a hash transformation, or a secret key generated by an encryption algorithm.

[0048] S5. The target base station receives the terminal activation request through the base station Internet of Things communication module.

[0049] S6. The target base station sends the terminal activation request to a network management platform through the base station Internet of Things communication module.

[0050] S7. The network management platform receives the terminal activation request through the platform Internet of Things communication module.

[0051] The target base station plays the role of data forwarding, realizing data transmission between the terminal and the network management platform. Figure 5 A schematic diagram of the structure of a communication system provided in an embodiment of the present application is shown in FIG. Figure 5 As shown, the communication system includes a terminal 1 , a base station 2 and a network management platform 3 , wherein the terminal 1 and the network management platform 3 perform data exchange through the base station 2 .

[0052] The network management platform 3 is used to manage various types of information of the terminal 1 and the base station 2, such as the terminal information of the terminal 1 (device ID, MAC address, registration time, validity time, terminal status, etc.). Figure 6 A schematic diagram of the structure of a network management platform provided in an embodiment of the present application is shown in FIG. Figure 6 As shown, the network management platform 3 includes a platform wireless network communication module 301 and a platform Internet of Things communication module 302, as well as at least one antenna 303, a processor 304 and a memory 305 for sending and receiving wireless signals. The platform wireless network communication module 301 is coupled with at least one antenna 303, receives electromagnetic wave signals on the wireless network channel via the antenna 303, and sends electromagnetic wave signals on the wireless network channel via at least one antenna 303, so that the network management platform 3 has the ability to communicate with the base station on the wireless network channel. The platform Internet of Things communication module 302 is coupled with at least one antenna 303, receives electromagnetic wave signals on the Internet of Things channel via the antenna 303, and sends electromagnetic wave signals on the Internet of Things channel via at least one antenna 303, so that the network management platform 3 has the ability to communicate with the base station on the Internet of Things channel. Therefore, the network management platform 3 of the embodiment of the present application can communicate with one or more base stations on the wireless network channel and / or the Internet of Things channel at the same time.

[0053] S8. The network management platform verifies whether the terminal is successfully activated according to the terminal activation request, and generates an activation result.

[0054] When the network management platform receives a terminal activation request, it needs to verify the content of the terminal activation request to obtain the activation result. For example, the terminal activation request is a string of activation codes generated based on the terminal's MAC address. The network management platform also calculates the terminal's MAC address according to a certain algorithm to obtain a string of verification codes. If the activation code is the same as the verification code, the terminal activation is successful; if the activation code is different from the verification code, the terminal activation fails. According to different terminal activation requests, the network management platform uses corresponding methods to activate the terminal.

[0055] S9. The network management platform sends the activation result to the target base station through the platform Internet of Things communication module.

[0056] After the network management platform generates the activation result, it sends the corresponding activation result, such as activation success or activation failure, to the target base station through the platform Internet of Things communication module.

[0057] S10. The target base station receives the activation result through the base station Internet of Things communication module.

[0058] S11. The target base station sends the activation result to the terminal through the base station Internet of Things communication module.

[0059] S12. The terminal receives the activation result through the terminal Internet of Things communication module.

[0060] S13. If the activation result is successful, the terminal sends a verification request to the target base station through the terminal Internet of Things communication module.

[0061] In the embodiment of the present application, the terminals that can communicate with the target base station through the IoT are screened through the terminal activation verification process, and only the successfully activated terminals have the authority to transmit data other than the activation request through the IoT communication channel. In other words, it is not that as long as the terminal scans the IoT communication signal, the terminal can perform normal data transmission with the target base station, but before the data is normally transmitted through the IoT communication channel, the terminal's authority needs to be verified, thereby restricting invalid or illegal terminals from communicating with the target base station through the IoT communication channel, thereby ensuring the security of IoT communication, and preventing invalid or illegal terminals from sending data to the target base station through the IoT communication channel, affecting the security of the target base station and other terminals communicating with the target base station.

[0062] If the activation result is an activation failure, the terminal cannot send data other than the terminal activation request to the target base station. For example, when the terminal activation fails, if the terminal wants to send data such as a verification request to the target base station, the controller inside the terminal will generate a blocking instruction to prevent the data from being sent, and generate a prompt such as a sending failure; or, if the terminal wants to send data such as a verification request to the target base station, the target base station cannot recognize the data after receiving the data, or the recognition result is invalid, etc., and the recognition result (unrecognizable, invalid, abnormal, etc.) is sent to the terminal through the base station Internet of Things communication module to prevent the terminal from communicating with the target base station through the Internet of Things. At this time, the terminal can periodically send a terminal activation request to the target base station to obtain the right to communicate with the target base station through the Internet of Things, wherein the period for the terminal to send the terminal activation request can be a custom time, such as after receiving the activation result of the activation failure, or at a preset interval, or at a fixed time, etc.

[0063] If the activation result is successful, the terminal and the target base station can communicate in the Internet of Things, that is, the terminal can exchange data other than the terminal activation request with the target base station, and both the terminal and the target base station can recognize this data. At this time, the terminal needs to continue to request the wireless network connection information corresponding to the target base station to access the wireless network corresponding to the target base station and realize wireless network communication with the target base station. The terminal generates a verification request, which carries at least the MAC address of the terminal, and can also carry identification information such as the IP address of the terminal and the device ID of the terminal.

[0064] S14. The target base station receives the verification request through the base station Internet of Things communication module.

[0065] S15. The target base station sends the verification request to the network management platform through the base station Internet of Things communication module.

[0066] S16. The network management platform receives the verification request through the platform Internet of Things communication module.

[0067] S17. The network management platform verifies the terminal according to the verification request to obtain a verification result.

[0068] The terminal cannot access any wireless network. Due to restrictions such as operators and working areas, the terminal will limit the wireless networks it uses. At the same time, the wireless network will also limit the terminals that can access it. Combining the above two restrictions, the wireless network that the terminal has the right to access can be called authorized wireless network, and the wireless network that the terminal does not have the right to access can be called unauthorized wireless network.

[0069] As mentioned above, the network management platform is used to manage various types of information of terminals and base stations. Among them, the network management platform is used to store the authorized wireless network information corresponding to the terminal. After the terminal is registered on the network management platform, the network management platform will generate the authorized wireless network information corresponding to the terminal. At the same time, the network management platform also stores the access conditions of each base station. In this way, the network management platform can determine whether the terminal has the authority to access the wireless network of the target base station based on the authorized wireless network information corresponding to the terminal and the access conditions of the base station.

[0070] Figure 7 A flowchart of a terminal registering on a network management platform is provided in an embodiment of the present application, such as Figure 7 As shown, the method includes:

[0071] S101. The network management platform receives terminal information of a terminal and generates corresponding terminal permissions.

[0072] S102: The network management platform generates and stores terminal permissions corresponding to the terminal according to the terminal information and the stored wireless network information.

[0073] The terminal information may be information with a unique identification function such as the device ID of the terminal, the MAC address of the terminal, etc., and may also include wireless network information that the terminal is restricted or specified to access. In this way, the network management platform can generate terminal permissions corresponding to the terminal according to the terminal information. The network management platform will pre-store wireless network information (base station information), which may be the SSID, BSSID, etc. of the wireless network, and may also include terminal information that is restricted or specified to access the wireless network. The network management platform combines the terminal information and the wireless network information to generate terminal permissions according to certain rules. The generation rules may be that the terminal is restricted to access wireless networks corresponding to certain SSIDs or BSSIDs, or that the wireless network is restricted to access terminals with non-specified device IDs or MAC addresses. For example, if terminal A is restricted to access the wireless network with SSID "beijing03", the network management platform 3 generates the corresponding terminal permissions according to the terminal information of terminal A, which is restricted to access "beijing03". It should be noted that, relative to these restricted wireless networks, wireless networks that are not restricted to access, that is, wireless networks that are authorized to access, can be called authorized wireless networks of the terminal, such as the wireless network with SSID "beijing01". The terminal permissions obtained through the above process will be an important parameter for determining whether the terminal has the right to access the wireless network of the target base station.

[0074] The terminal registration process may occur before the terminal performs authority verification. For example, the terminal registration process may occur before the terminal scans the IoT communication signal of the target base station. At this time, the terminal information may be directly stored in the network management platform by relevant personnel, or directly sent to the network management platform by direct connection or other methods, or sent to the network management platform through the currently connected base station (for the case of switching base stations); the terminal registration process may also occur during the activation of the terminal on the network management platform. At this time, the terminal activation request sent by the terminal to the target base station carries the terminal information. After receiving the terminal activation request, the network management platform may parse the terminal information by decryption or other methods, thereby directly storing the terminal information, or storing the terminal information of the successfully activated terminal, and generating corresponding permissions to complete the registration of the terminal; the terminal registration process may also occur after the terminal obtains the activation result. The terminal may send a registration request to the target base station, carrying the terminal information in the registration request, to complete the registration in the network management platform, or may send a registration request to the target base station only after the activation is successful, to complete the registration in the network management platform.

[0075] The network management platform also needs to periodically update the stored terminal information and wireless network information, such as verifying terminal information and wireless network information that have not changed for a long time, verifying terminal information and wireless network information that have not been used for a long time, etc., to ensure the accuracy of terminal information and wireless network information, and thus ensure the security of wireless network communications.

[0076] In order to further improve the security of data transmission between the terminal and the target base station, both the terminal and the target base station need to support a unified private protocol and transmit data according to the private protocol. The transmission data generated according to different network protocols have different frame structures. Only terminals that support the same network protocol can recognize the data content sent by each other. This can prevent the sent data from being recognized by other terminals / base stations, and also avoid identifying and receiving data sent by illegal terminals / base stations. In the embodiment of the present application, the network protocol supported by the terminal and the target base station is referred to as a private protocol.

[0077] The specific process of the network management platform determining whether the terminal has the authority to access the target base station is as follows:

[0078] The network management platform receives the verification request forwarded by the target base station through the platform IoT communication module, and obtains the terminal information, such as the MAC address of the terminal, from it. The network management platform retrieves the corresponding terminal authority from the memory according to the MAC address of the terminal. For example, if the MAC address of the terminal is a, the network management platform stores "a→A", where A is the SSID of the base station, that is, the SSID of the authorized wireless network corresponding to the terminal with MAC address a is A. The network management platform can also learn the SSID of the target base station. If the SSID of the target base station is A, the terminal has the authority to access the wireless network of the target base station; if the SSID of the target base station is not A, the terminal does not have the authority to access the wireless network of the target base station.

[0079] S18. The network management platform sends the verification result to the target base station through the platform Internet of Things communication module.

[0080] S19. The target base station receives the verification result through the base station Internet of Things communication module.

[0081] S20. The target base station sends the verification result to the terminal through the base station Internet of Things communication module.

[0082] S21. The terminal receives the verification result through the terminal Internet of Things communication module.

[0083] In one implementation, the network management platform has a terminal access authority judgment function, that is, the network management platform can directly generate a verification result, including access or not access. If the verification result is access, the network management platform directly adds the SSID of the target base station and the key index information for accessing the target base station in the verification result; if the verification result is not access, the network management platform directly sends a verification result of not access to the target base station, or does not respond to the target base station.

[0084] In another implementation, the network management platform only queries the terminal's authority information based on the verification information, and sends the verification result to the target base station. At this time, the verification result includes the record information of the wireless network that the terminal can access, and the target base station determines the terminal's access authority based on the verification result. If the terminal has access authority, the target base station generates a wireless network access information acquisition request, or the target base station sends the judgment result that it can be accessed to the terminal and receives the terminal's wireless network access information acquisition request. The target base station then sends the wireless network access information acquisition request to the network management platform, and the network management platform generates the corresponding wireless network access information, including the SSID and key index information of the target base station; if the terminal does not have access authority, the target base station generates unauthorized access information and feeds it back to the terminal, or the target base station no longer sends any data to the terminal.

[0085] The target base station generates a corresponding data frame, such as a probe response, based on the private protocol, for the wireless network access information, wherein the key index information is written into the BSSID field in the probe response, and the SSID information of the target base station is written into the SSID field in the probe response. It can be seen from the above that in order to protect the security of the wireless network, it is necessary to define the SSID field using a private protocol. In this embodiment, the SSID field is defined using a private protocol to obtain the SSID information after the protocol, which is composed of the SSID field of the target base station and the private header information corresponding to the private protocol.

[0086] In order to further improve the confidentiality of the SSID field of the target base station, the SSID field of the target base station can be processed invisible, for example, the SSID field of the target base station is processed by a preset logical operation, such as the original SSID field of the target base station is a visible character in the ascii table, once the illegal terminal steals the SSID field of the target base station, the wireless network corresponding to the target base station can be directly discovered. After the SSID field of the target base station is processed, for example, each character in the SSID field is subjected to logical operations such as addition, subtraction, multiplication, and division, if the original character is ascii, the preset logical operation is -30, then the processed SSID field is ascii-30, because it does not conform to the usual format of the SSID field, non-specific terminals cannot recognize the processed SSID field, that is, they cannot discover the wireless network corresponding to the target base station, but specific terminals (such as terminals supporting private protocols) can recognize the invisible processed SSID field and use it as a normal SSID field, thereby avoiding the discovery and access of the wireless network of the target base station by illegal terminals, and improving the access security of the wireless network.

[0087] It can be seen that through the above process, the network management platform can effectively prevent unregistered illegal terminals or terminals without corresponding access permissions from accessing the wireless network, thereby ensuring the security of the wireless network.

[0088] S22: If the verification result is verification passed, the terminal obtains the wireless network connection information in the verification result.

[0089] If the terminal passes the verification, it means that the terminal has the authority to access the target base station. At this time, the terminal can obtain the wireless network connection information, which includes the SSID and key index information of the target base station, so that the terminal can access the target base station according to the wireless network connection information. The wireless network connection information can also include restriction information such as the connection validity period, so that when the terminal does not use the wireless network connection information to access the target base station for a long time, the wireless network connection information will be invalidated to ensure the security of wireless network communications.

[0090] If the terminal fails the verification, it means that the terminal does not have the authority to access the target base station. At this time, the terminal takes corresponding access measures according to the reasons for failing the verification, such as unstable wireless network of the target base station, unregistered terminal, too many terminals accessing the target base station, etc., such as periodically sending verification requests to the target base station, or registering with the network management platform, etc., to access the target base station.

[0091] S23. The terminal accesses the target base station through a terminal wireless network communication module according to the wireless network connection information.

[0092] In one implementation, the wireless network connection information includes the SSID and key index information of the target base station. As described above, after the terminal registers the terminal information in the network management platform, the terminal and the network management platform already have an association relationship, that is, the terminal and the network management platform share the same password library. In the password library, the key index information corresponds to the password one-to-one. The corresponding password can be queried through the key index information. In this way, the terminal can use the key index information to query the corresponding password in the password library used by the terminal, that is, the access password. In this way, the terminal can send an access request to the SSID of the target base station, and the access request includes the access password. After the target base station receives the access request, it sends the access request to the network management platform. The network management platform queries the corresponding password in the password library used by the platform according to the key index information, that is, the verification password. At this time, the network management platform can directly compare the access password and the verification password to determine whether the terminal can access the target base station; the network management platform can also feedback the verification password to the target base station, and the target base station compares the access password and the verification password to determine whether the terminal can access the target base station. Among them, when the access password is consistent with the verification password, the terminal can access the target base station and realize wireless network communication with the target base station; when the access password is different from the verification, the terminal cannot access the target base station.

[0093] In another implementation, the wireless network connection information includes the SSID and key index information of the target base station. The terminal can generate the key index information based on the MAC address of the terminal, the SSID of the target base station, and the key index information. For example, based on the 6 bytes of the terminal's MAC address and the first three bytes of the BSSID corresponding to the SSID of the target base station, a 12-byte access password is obtained through the encryption method of psk2+ccmp. Specifically, an example is given, F(num) = the even bytes of the 6 bytes of the terminal's MAC address are added to the first three bytes of the BSSID to obtain the first 6 bytes of the access password, the odd bytes of the 6 bytes of the terminal's MAC address are added to the first three bytes of the BSSID to obtain the last 6 bytes of the access password, and finally the key index information is added to these 12 bytes to obtain the access password. For example, the access password that can be obtained through the above algorithm is:

[0094] stamac[0]+bssid[0]+num, stamac[1]+num, stamac[2]+bssid[1]+num, stamac[3]+num, stamac[4]+bssid[2]+num, stamac[5]+num, stamac[0]+num, stamac[1]+bssid[0]+num, stamac[2]+num, stamac[3]+bssid[1]+num, stamac[4]+num, stamac[5]+bssid[2]+num.

[0095] Among them, stamac represents the MAC address of the terminal, [] represents bytes, and num represents the key index information.

[0096] Usually, the first three bytes of the BSSID of the target base station can be defined in the range of 0-255, which will correspond to 256 different access password algorithms. Of course, other algorithms can also be used, such as using the SSID name of the target base station for calculation, adding a specified field after the specified byte, or subtracting a specified field after the specified byte. It can be seen that the access password can be calculated according to a variety of operation logics, which ensures the non-uniqueness of the access password and increases the difficulty of cracking the access password, thereby improving the security of the terminal accessing the target base station. At the same time, it can be seen from the above that the access password corresponding to the terminal has a unique correspondence with the terminal itself, that is, different terminals use different access passwords to connect to the same wireless network, which can also avoid the reuse of access passwords between different terminals.

[0097] In order to further ensure the access security of the wireless network and avoid the use of fixed access passwords, the network management platform can periodically update the key index information. For example, the network management platform can generate and send a key index information for each access request from the terminal, or resend new key index information after a preset time interval, or send new key index information at a preset time, etc.

[0098] Figure 8 A schematic diagram of a terminal structure provided in an embodiment of the present application is shown in FIG. Figure 8 As shown, the terminal includes: a receiver 11, a processor 12 and a transmitter 13;

[0099] The receiver 11 is used to receive the Internet of Things communication signal through the terminal Internet of Things communication module;

[0100] The processor 12 is used to determine the target base station according to the terminal Internet of Things communication signal;

[0101] The transmitter 13 is used to send a terminal activation request to the target base station through the terminal Internet of Things communication module, so as to obtain the permission for the terminal and the target base station to transmit communication data through the terminal Internet of Things communication module on the network management platform;

[0102] The receiver 11 is also used to receive the activation result sent by the target base station through the terminal Internet of Things communication module;

[0103] The processor 12 is also used to obtain the wireless network connection information of the target base station through the terminal Internet of Things communication module if the activation result is successful activation, so as to access the wireless network of the target base station according to the wireless network connection information.

[0104] Fig. 9 A schematic diagram of the structure of a target base station provided in an embodiment of the present application is shown in FIG. Fig. 9 As shown, the target base station includes: a receiver 21 and a transmitter 22;

[0105] The receiver 21 is used to receive a terminal activation request sent by the terminal through the base station Internet of Things communication module;

[0106] The transmitter 22 is used to send the terminal activation request to the network management platform through the base station Internet of Things communication module, so that the terminal obtains the authority to transmit communication data with the target base station through the terminal Internet of Things communication module on the network management platform;

[0107] The receiver 21 is also used to receive the activation result sent by the network management platform through the base station Internet of Things communication module;

[0108] The transmitter 22 is also used to send the activation result to the terminal through the base station Internet of Things communication module, so that when the activation result is successful activation, the terminal obtains the wireless network connection information of the target base station through the terminal Internet of Things communication module to access the wireless network of the target base station.

[0109] Fig.10 A schematic diagram of the structure of a network management platform provided in an embodiment of the present application is shown in FIG. Fig.10 As shown, the network management platform includes: a receiver 31, a processor 32 and a transmitter 33;

[0110] The receiver 31 is used to receive the terminal activation request sent by the target base station through the platform Internet of Things communication module;

[0111] The processor 32 is used to respond to the terminal activation request to determine whether the terminal corresponding to the terminal activation request has the authority to transmit communication data with the target base station through the terminal Internet of Things communication module, and generate an activation result;

[0112] The transmitter 33 is used to send the activation result to the target base station through the platform Internet of Things communication module;

[0113] The receiver 31 is also used to receive a wireless network connection information acquisition request sent by the target base station through the platform Internet of Things communication module;

[0114] The transmitter 33 is also used to respond to the wireless network connection information acquisition request, and send the wireless network connection information to the target base station through the platform Internet of Things communication module, so that the target base station forwards the wireless network connection information to the terminal, allowing the terminal to access the wireless network of the target base station according to the wireless network connection information.

[0115] It can be seen from the above technical solution that the method and communication system for accessing a wireless network based on an Internet of Things channel provided by the embodiment of the present application can enable the terminal to first scan the surrounding base stations that radiate Internet of Things communication signals, and select the target base station to be accessed to the wireless network. After determining the target base station, the terminal needs to send a terminal activation request to the network management platform through the target base station to obtain the authority to transmit communication data with the target base station through the Internet of Things communication module. After successful activation, the terminal continues to obtain the wireless network connection information of the target base station through the terminal Internet of Things communication module to access the wireless network of the target base station according to the wireless network connection information. The process of obtaining wireless network connection information through the Internet of Things can screen whether the terminal has the authority to communicate with the target base station through the Internet of Things by checking whether the terminal is activated, thereby achieving the effect of screening the terminals that can access the wireless network of the target base station to improve the security of the terminal access to the wireless network.

[0116] Those skilled in the art can clearly understand that the technology in the embodiments of the present invention can be implemented by means of software plus a necessary general hardware platform. Based on this understanding, the technical solution in the embodiments of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which can be stored in a storage medium such as ROM / RAM, a disk, an optical disk, etc., and includes a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present invention or some parts of the embodiments.

[0117] Those skilled in the art will readily appreciate other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses or adaptations of the present invention that follow the general principles of the present invention and include common knowledge or customary techniques in the art that are not disclosed by the present invention. The specification and examples are to be considered exemplary only, and the true scope and spirit of the present invention are indicated by the following claims.

[0118] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A method for accessing a wireless network based on an Internet of Things channel, applied to a terminal, characterized in that: The terminal is provided with a terminal Internet of Things communication module, and the terminal Internet of Things communication module is used to connect an Internet of Things channel between the terminal and a base station. The method comprises: Receiving an Internet of Things communication signal through the terminal Internet of Things communication module; Determine a target base station according to the terminal Internet of Things communication signal; Sending a terminal activation request to the target base station through the terminal IoT communication module to obtain permission for the terminal and the target base station to transmit communication data through the terminal IoT communication module on the network management platform, wherein the terminal activation request is an activation code generated according to the MAC address of the terminal, and the activation code is used to compare with the verification code obtained by calculating the MAC address of the terminal according to a preset algorithm by the network management platform. If the activation code is the same as the verification code, the terminal is successfully activated; Receiving the activation result sent by the target base station through the terminal Internet of Things communication module; If the activation result is successful, obtaining the wireless network connection information of the target base station through the terminal Internet of Things communication module, so as to access the wireless network of the target base station according to the wireless network connection information; If the activation result is activation failure, the terminal cannot send data other than the terminal activation request to the target base station; Wherein, obtaining the wireless network connection information of the target base station through the terminal Internet of Things communication module includes: Sending a verification request to the target base station through the terminal Internet of Things communication module to verify the access authority of the terminal to the wireless network of the target base station on the network management platform, wherein the access authority is determined by the network management platform according to the authorized wireless network information corresponding to the terminal and the access condition of the target base station; Receiving the verification result sent by the target base station through the terminal Internet of Things communication module; If the verification result is verification passed, the wireless network connection information of the target base station is obtained from the verification result.

2. The method according to claim 1, characterized in that: The wireless network connection information includes the SSID and key index information of the target base station, and accessing the wireless network of the target base station according to the wireless network connection information includes: Determine an access password in a password library used by the terminal according to the key index information; Access the wireless network of the target base station according to the SSID of the target base station and the access password.

3. The method according to claim 1, characterized in that The wireless network connection information includes the SSID and key index information of the target base station, and accessing the wireless network of the target base station according to the wireless network connection information includes: Generate an access password according to the SSID of the target base station, the key index information and the MAC address of the terminal; Access the wireless network of the target base station according to the SSID of the target base station and the access password.

4. The method according to claim 2 or 3, characterized in that: The key index information changes periodically.

5. The method according to claim 1, characterized in that The method further comprises: The communication data is transmitted according to a proprietary protocol.

6. The method according to claim 1, characterized in that If the activation result is an activation failure, the terminal activation request is sent to the target base station through the terminal Internet of Things communication module according to a preset period.

7. A method for accessing a wireless network based on an Internet of Things channel, applied to a target base station, characterized in that: The target base station is provided with a base station Internet of Things communication module, and the base station Internet of Things communication module is used for communication between the target base station and the terminal through an Internet of Things channel. The method comprises: sending an Internet of Things communication signal to the terminal through the base station Internet of Things communication module; Receiving a terminal activation request sent by the terminal through the base station Internet of Things communication module; Sending the terminal activation request to the network management platform through the base station IoT communication module, so that the terminal obtains the authority to transmit communication data with the target base station through the terminal IoT communication module on the network management platform, wherein the terminal activation request is an activation code generated according to the MAC address of the terminal, and the activation code is used to compare with the verification code obtained by calculating the MAC address of the terminal by the network management platform according to a preset algorithm. If the activation code is the same as the verification code, the terminal is successfully activated; Receiving the activation result sent by the network management platform through the base station Internet of Things communication module; Sending the activation result to the terminal through the base station IoT communication module, so that when the activation result is successful activation, the terminal obtains the wireless network connection information of the target base station through the terminal IoT communication module to access the wireless network of the target base station; if the activation result is failed activation, the terminal cannot send data other than the terminal activation request to the target base station; Wherein, the obtaining the wireless network connection information of the target base station through the terminal Internet of Things communication module includes: Sending a verification request to the target base station through the terminal Internet of Things communication module to verify the access authority of the terminal to the wireless network of the target base station on the network management platform, wherein the access authority is determined by the network management platform according to the authorized wireless network information corresponding to the terminal and the access condition of the target base station; Receiving the verification result sent by the target base station through the terminal Internet of Things communication module; If the verification result is verification passed, the wireless network connection information of the target base station is obtained from the verification result.

8. A method for accessing a wireless network based on an Internet of Things channel, applied to a network management platform, characterized in that: The network management platform is provided with a platform Internet of Things communication module, and the platform Internet of Things communication module is used for communication between the network management platform and the target base station through an Internet of Things channel. The method comprises: Receiving a terminal activation request sent by the target base station through the platform Internet of Things communication module; In response to the terminal activation request, determine whether the terminal corresponding to the terminal activation request has the authority to transmit communication data with the target base station through the terminal Internet of Things communication module, and generate an activation result, wherein the terminal activation request is an activation code generated according to the MAC address of the terminal, and the activation code is used to compare with the verification code obtained by calculating the MAC address of the terminal by the network management platform according to a preset algorithm. If the activation code is the same as the verification code, the terminal is successfully activated; Sending the activation result to the target base station through the platform Internet of Things communication module, if the activation result is activation failure, the terminal cannot send data other than the terminal activation request to the target base station; When the activation result is successful, receiving a verification request sent by the target base station through the platform Internet of Things communication module; In response to the verification request, verify the access authority of the terminal to the wireless network of the target base station and generate a verification result, wherein the access authority is determined by the network management platform according to the authorized wireless network information corresponding to the terminal and the access condition of the target base station; The verification result is sent to the target base station through the platform Internet of Things communication module, so that the target base station forwards the verification result to the terminal, and the terminal accesses the wireless network of the target base station according to the wireless network connection information in the verification result when the verification result is passed.

9. A communication system, characterized in that: The communication system includes: a terminal, a target base station corresponding to the terminal, and a network management platform, wherein the terminal is used to execute the method as claimed in any one of claims 1 to 6, the target base station is used to execute the method as claimed in claim 7, and the network management platform is used to execute the method as claimed in claim 8.

Images