A local area network access method and system based on WeChat

Through identity check-up and simulated access request verification between WeChat client and server, the user access interruption caused by VPN gateway problems is solved, and local area network access without VPN gateway is realized, which improves user experience and ensures data transmission security .

CN116170759BActive Publication Date: 2024-12-13北京自如信息科技有限公司
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202310134785.0
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2023-02-10
Publication Date
2024-12-13
Estimated Expiration
2043-02-10

AI Technical Summary

Technical Problem

In the prior art, when a VPN gateway is used to enable the user terminal to remotely access the local area network, problems with the VPN gateway will cause user access to interruption and affect user experience.

Method used

By performing identity verification between the WeChat client and the server, assigning tokens and WeChat message encryption keys, and verifying whether the client successfully accesses the server through simulated access requests, data access is established, and the dependence of the VPN gateway is avoided. Ensure the security of data transmission.

Benefits of technology

The user terminal can access the local area network without deploying a VPN, avoiding the problem of VPN gateway affecting the user experience, and through the transmission method of tokens and WeChat message encryption keys, the transmission security during data access is ensured and the user's access is improved. Experience.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116170759B_ABST
    Figure CN116170759B_ABST
Patent Text Reader

Abstract

The present invention provides a local area network access method and system based on WeChat, which is applied to WeChat client, by sending an access request to a server of the local area network; receiving a token and a WeChat message encryption key sent by the server; sending a simulated access request with a token to the server; after receiving an access success identifier sent by the server, establishing data access with the server based on the token and the WeChat message encryption key. Thus, by performing identity verification between the client and the server, a token and a WeChat message encryption key are allocated to the client that passes the verification, and the mutual trust relationship between the client and the server is recognized, so that the user terminal can access the local area network without deploying a VPN, avoiding problems with the VPN gateway that affect the normal access of the user, and by the transmission method of the token and the WeChat message encryption key, the transmission security in the data access process is guaranteed, and the user's access experience is improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a local area network access method and system based on WeChat. Background Art

[0002] In the prior art, if you want to achieve remote and secure access of user terminals to a private network, i.e., a local area network, it is usually achieved by configuring a VPN gateway with a private network in a VPN server. However, this technology is relatively cumbersome to deploy, and when a problem occurs in the VPN gateway, the user terminal's access to the private network will also be interrupted, affecting the user's access experience. Summary of the invention

[0003] In view of this, an embodiment of the present invention provides a LAN access method and system based on WeChat to overcome the problem in the prior art of using a VPN gateway to access the LAN, where access will be interrupted when a problem occurs in the VPN gateway, affecting the user's access experience.

[0004] The embodiment of the present invention provides a local area network access method based on WeChat, which is applied to a WeChat client, and the method includes:

[0005] Send an access request to the server in the local area network;

[0006] Receive a token and a WeChat message encryption key sent by the server, where the token and the WeChat message encryption key are allocated to the WeChat client after the server verifies the identity of the WeChat client using the access request;

[0007] Sending a simulated access request with the token to the server;

[0008] After receiving the access success identifier sent by the server, data access with the server is established based on the token and the WeChat message encryption key. The access success identifier is sent by the server after verifying that the token carried in the simulated access request is consistent with the token allocated to the WeChat client.

[0009] Optionally, sending an access request to a server in the local area network includes:

[0010] Get the identity information of the WeChat client;

[0011] An access request with the identity information is sent to the server.

[0012] Optionally, establishing data access to the server based on the token and the WeChat message encryption key includes:

[0013] Obtain the user's data access requirements;

[0014] generating a data access request based on the data access requirement and the token;

[0015] Encrypting the data access request using the WeChat message encryption key, and sending the encrypted data access request to the server;

[0016] The access data fed back by the server is received.

[0017] Optionally, the method further comprises:

[0018] The access data is decrypted using the WeChat message encryption key to obtain the decrypted access data.

[0019] The embodiment of the present invention also provides a local area network access method based on WeChat, which is applied to a server in the local area network, and the method includes:

[0020] Receive access requests sent by WeChat client;

[0021] Performing identity verification on the WeChat client using the access request, and assigning a token and a WeChat message encryption key to the WeChat client after the identity verification passes;

[0022] Sending the token and WeChat message encryption key to the WeChat client;

[0023] Receive a simulated access request with a token sent by the WeChat client;

[0024] Verify whether the token carried in the simulated access request is consistent with the token allocated to the WeChat client;

[0025] When the verification is consistent, an access success identifier is sent to the WeChat client to establish data access with the WeChat client.

[0026] Optionally, the using the access request to verify the identity of the WeChat client includes:

[0027] Extracting the identity information of the WeChat client from the access request;

[0028] Determine whether the identity information is consistent with the identity information of the entered WeChat client;

[0029] When the identity information is consistent with the identity information of the entered WeChat client, it is determined that the identity verification is passed.

[0030] Optionally, establishing data access with the WeChat client includes:

[0031] Receiving a data access request sent by the WeChat client;

[0032] Decrypt the data access request using the WeChat message encryption key to obtain the data access requirement and token of the WeChat client;

[0033] Determine whether the token obtained by decryption is consistent with the token assigned to the WeChat client;

[0034] When they are consistent, extracting access data based on the data access requirement;

[0035] The access data is sent to the WeChat client.

[0036] Optionally, extracting access data based on the data access requirement includes:

[0037] Extracting the operation command in the data access requirement;

[0038] Based on the operation command, a corresponding function module is called to perform a corresponding operation, and an execution result fed back by the function module is obtained;

[0039] Access data is obtained based on the execution result.

[0040] Optionally, sending the access data to the WeChat client includes:

[0041] Encrypt the access data and the token using the WeChat message encryption key to obtain encrypted access data;

[0042] The encrypted access data is sent to the WeChat client.

[0043] The embodiment of the present invention also provides a local area network access system based on WeChat, including: a WeChat client and a local area network server, wherein:

[0044] The WeChat client sends an access request to the server in the local area network;

[0045] The server receives an access request sent by a WeChat client; uses the access request to verify the identity of the WeChat client, and after the identity verification passes, allocates a token and a WeChat message encryption key to the WeChat client; and sends the token and the WeChat message encryption key to the WeChat client;

[0046] The WeChat client receives the token and WeChat message encryption key sent by the server; sends a simulated access request with the token to the server;

[0047] The server receives a simulated access request with a token sent by the WeChat client; verifies whether the token carried in the simulated access request is consistent with the token allocated to the WeChat client; and when the verification is consistent, sends an access success mark to the WeChat client;

[0048] After receiving the access success identifier sent by the server, the WeChat client establishes data access with the server based on the token and the WeChat message encryption key.

[0049] The technical solution of the present invention has the following advantages:

[0050] 1. The embodiment of the present invention provides a local area network access method based on WeChat, which is applied to the WeChat client. By performing identity verification between the client and the server, a token and a WeChat message encryption key are allocated to the client that has passed the verification, and by simulating an access request, it is verified whether the client has successfully accessed the server, thereby realizing the mutual trust relationship identification between the client and the server. After successful access, data access between the client and the server can be established, thereby realizing the access of the user terminal to the local area network without deploying a VPN, avoiding problems with the VPN gateway that affect the normal access of the user, and ensuring the transmission security during the data access process through the transmission method of the token and the WeChat message encryption key, thereby improving the user's access experience.

[0051] 2. An embodiment of the present invention provides a LAN access method based on WeChat, which is applied to a server of a LAN. By performing identity verification between the client and the server, a token and a WeChat message encryption key are allocated to the client that has passed the verification, and by simulating an access request, it is verified whether the client has successfully accessed the server, thereby realizing the mutual trust relationship identification between the client and the server. After successful access, data access between the client and the server can be established, thereby realizing the access of the user terminal to the LAN without deploying a VPN, avoiding problems with the VPN gateway that affect the normal access of the user, and ensuring the transmission security during the data access process through the transmission method of the token and the WeChat message encryption key, thereby improving the user's access experience.

[0052] 3. The embodiment of the present invention also provides a local area network access system based on WeChat, which is composed of a WeChat client and a local area network server. By performing identity verification between the client and the server, a token and a WeChat message encryption key are allocated to the client that has passed the verification, and by simulating an access request, it is verified whether the client has successfully accessed the server, thereby realizing the mutual trust relationship between the client and the server. After successful access, data access between the client and the server can be established, thereby realizing user terminal access to the local area network without deploying a VPN, avoiding problems with the VPN gateway that affect the user's normal access, and ensuring transmission security during data access through the transmission of tokens and WeChat message encryption keys, thereby improving the user's access experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0054] Figure 1 Schematic diagram of the structure of a local area network access system based on WeChat in an embodiment of the present invention;

[0055] Figure 2 This is a schematic diagram of interaction of local area network access based on WeChat in an embodiment of the present invention;

[0056] Figure 3 Schematic diagram of a specific process of local area network access based on WeChat in an embodiment of the present invention;

[0057] Figure 4 The figure is a schematic diagram of a specific process of consistency verification between a WeChat client and a server in an embodiment of the present invention. DETAILED DESCRIPTION

[0058] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0059] The technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

[0060] In the prior art, the way to achieve remote access of user terminals to a private network, i.e., a local area network, is usually achieved by configuring a VPN gateway with a private network in a VPN server. However, this technology is cumbersome to deploy, and when a problem occurs in the VPN gateway, the user terminal's access to the private network will also be interrupted, affecting the user's access experience.

[0061] Based on the above problems, the embodiment of the present invention provides a local area network access system based on WeChat, such as Figure 1 As shown, the system includes: a WeChat client 101 and a server 102 of a local area network, wherein the WeChat client 101 sends an access request to the server 102 of the local area network; the server 102 receives the access request sent by the WeChat client 101; the WeChat client 101 is authenticated by the access request, and after the identity verification is passed, a token and a WeChat message encryption key are allocated to the WeChat client 101; the token and the WeChat message encryption key are sent to the WeChat client 101; the WeChat client 101 receives the token and the WeChat message encryption key sent by the server 102; a simulated access request with the token is sent to the server 102; the server 102 receives the simulated access request with the token sent by the WeChat client 101; it is verified whether the token carried in the simulated access request is consistent with the token allocated to the WeChat client 101; when the verification is consistent, an access success mark is sent to the WeChat client 101; after receiving the access success mark sent by the server 102, the WeChat client 101 establishes data access with the server 102 based on the token and the WeChat message encryption key.

[0062] Specifically, if the above-mentioned local area network is the enterprise's proprietary network, the WeChat client 101 corresponds to the enterprise WeChat client 101. If the local area network is another type of intranet, the WeChat client 101 can also be a personal WeChat client 101. It can be specifically set according to the application scenario of the actual local area network, and the present invention is not limited to this. It should be noted that the server 102 of the local area network is the server 102 responsible for the entire local area network communication service. A local area network server 102 can correspond to several WeChat clients 101, which can correspond to both enterprise WeChat clients 101 and personal WeChat clients 101. In the embodiment of the present invention, the explanation is based on the example of one of the WeChat clients 101 accessing data with the local area network server 102. The specific interaction process between the WeChat client 101 and the local area network server 102 is shown in the figure. Figure 2 The interaction diagram shown in Figure 3 The specific process diagram of LAN access based on WeChat is shown. In actual application, the server 102 of the LAN can establish data access with multiple WeChat clients 101 at the same time. The specific implementation process is similar to the access process of one WeChat client 101, which will not be repeated here.

[0063] The detailed working process of WeChat client 101 and server 102 is described in the description of the relevant steps of the method embodiment below, which will not be described in detail here.

[0064] Through the collaborative cooperation of the above-mentioned components, the WeChat-based LAN access system provided by the embodiment of the present invention performs identity verification between the client and the server, allocates a token and a WeChat message encryption key to the client that has passed the verification, and verifies whether the client has successfully accessed the server by simulating an access request, thereby realizing the mutual trust relationship identification between the client and the server. After successful access, data access between the client and the server can be established, thereby realizing user terminal access to the LAN without deploying a VPN, avoiding problems with the VPN gateway that affect the user's normal access, and ensuring transmission security during data access through the transmission method of the token and the WeChat message encryption key, thereby improving the user's access experience.

[0065] The embodiment of the present invention also provides a local area network access method based on WeChat, which is applied to the above-mentioned Figure 1 The WeChat client 101 and the local area network server 102 are shown, such as Figure 2 As shown, the WeChat client 101 is used to execute steps S101 to S104, and the server 102 is used to execute steps S201 to S206.

[0066] Step S101: Send an access request to a server in a local area network.

[0067] Specifically, by obtaining the identity information of the WeChat client, an access request with the identity information is sent to the server. Taking the WeChat client as Enterprise WeChat as an example, the above identity information may include: the enterprise ID and application ID of Enterprise WeChat.

[0068] Step S201: Receive an access request sent by a WeChat client.

[0069] Step S202: Use the access request to verify the identity of the WeChat client, and after the identity verification passes, allocate a token and WeChat message encryption key to the WeChat client.

[0070] Specifically, in order to ensure the security of WeChat client access, it is necessary to ensure that the WeChat client is a known and legitimate client (hereinafter referred to as the client) accessing the server. The client information, such as the enterprise ID and application ID of WeChat for Enterprise, needs to be entered on the server first. After the client information is entered on the server, the client can actively initiate an access request to the server.

[0071] Furthermore, the above step S202 extracts the identity information of the WeChat client from the access request; determines whether the identity information is consistent with the identity information of the WeChat client that has been entered; and determines that the identity verification is passed when the identity information is consistent with the identity information of the WeChat client that has been entered. Exemplarily, after receiving the access request from the client, the server needs to first verify the information of the client to compare whether the enterprise ID, application ID and other information are consistent with the entered information. If they are consistent, the subsequent steps can be executed. If they are inconsistent, the client's access request is rejected to avoid the intrusion of illegal clients and ensure the security of the local area network. When the information is verified, in order to make the subsequent access of the client and the server more convenient, the server is assigned a token Token and a WeChat message encryption key EncodingAESKey, so that authentication is not required for each request, which greatly improves the access speed and efficiency and further improves the user experience.

[0072] Step S203: Send the token and WeChat message encryption key to the WeChat client.

[0073] Step S102: Receive the token and WeChat message encryption key sent by the server.

[0074] Step S103: Send a simulated access request with a token to the server.

[0075] Specifically, after receiving the Token sent by the server, in order to ensure the legitimacy and usability of the Token, the client simulates a user access request by carrying the Token to eliminate access failures and ensure the smooth progress of subsequent access.

[0076] Step S204: Receive a simulated access request with a token sent by the WeChat client.

[0077] Step S205: Verify whether the token carried in the simulated access request is consistent with the token allocated to the WeChat client.

[0078] Step S206: When the verification is consistent, an access success indicator is sent to the WeChat client.

[0079] Step S104: After receiving the access success identifier sent by the server, establish data access with the server based on the token and the WeChat message encryption key.

[0080] Specifically, when the server returns a successful access mark, it means that the token can be used normally. At this time, the user can be allowed to access the client, and the subsequent data interaction between the client and the server only needs to carry the token to access, without the need for consistency verification, thereby further simplifying the access process and improving the user experience.

[0081] By executing the above steps, the WeChat-based LAN access method provided by the embodiment of the present invention distributes a token and a WeChat message encryption key to the client that has passed the verification by performing identity verification between the client and the server, and verifies whether the client has successfully accessed the server by simulating an access request, thereby realizing the mutual trust relationship identification between the client and the server. After successful access, data access between the client and the server can be established, thereby realizing the access of the user terminal to the LAN without deploying a VPN, avoiding problems with the VPN gateway that affect the normal access of the user, and ensuring the transmission security during the data access process through the transmission method of the token and the WeChat message encryption key, thereby improving the user's access experience.

[0082] Specifically, in one embodiment, the WeChat client 101 executes step S104 including executing the following steps S41 to S45, and the server 102 executes step S206 including executing the following steps S61 to S65. The specific process of the consistency check between the WeChat client 101 and the server 102 is as follows: Figure 4 shown.

[0083] Step S41: Obtain the user's data access requirements.

[0084] Specifically, the user's data access demand may be that the user sends a specified command to the backend of the local area network. Exemplarily, the specified command format may be in the form of keyword+parameter, wherein the keyword is used to identify the function and the parameter is the data used in the corresponding function.

[0085] Step S42: Generate a data access request based on the data access requirement and the token.

[0086] Specifically, the data access request may be created in a preset format, such as creating a data access request in the format of a sender, a recipient, a token, and a command.

[0087] Step S43: Encrypt the data access request using the WeChat message encryption key, and send the encrypted data access request to the server.

[0088] Step S61: receiving a data access request sent by the WeChat client.

[0089] Step S62: Use the WeChat message encryption key to decrypt the data access request to obtain the data access requirement and token of the WeChat client.

[0090] Step S63: Determine whether the token obtained by decryption is consistent with the token assigned to the WeChat client;

[0091] Step S64: When they are consistent, extract access data based on the data access requirement.

[0092] Specifically, by extracting the operation command in the data access requirement; calling the corresponding function module based on the operation command to perform the corresponding operation, obtaining the execution result fed back by the function module; and obtaining the access data based on the execution result.

[0093] In actual applications, after receiving the encrypted data sent from the enterprise WeChat client, the server first uses the configured EncodingAESKey to decrypt the data into plaintext, which includes: sender, recipient, Token and command; then matches the Token in the plaintext. If they are consistent, the next step is executed. If they are inconsistent, an error is returned and the client is refused to provide access data.

[0094] Furthermore, the server will parse the commands in the plain text and extract them. According to the pre-set format, it will prioritize the keywords and confirm the specific operations that the client wants to perform. Then, the corresponding parameters will be transmitted to the corresponding functional module. Finally, the result returned by the functional module is the access data.

[0095] Step S65: Send the access data to the WeChat client.

[0096] Specifically, the access data and the token are encrypted by using the WeChat message encryption key to obtain the encrypted access data; and the encrypted access data is sent to the WeChat client.

[0097] In actual applications, in order to smoothly return the result to the client, the server also uses EncodingAESKey to encrypt the sender, receiver, token and return result fields. Then it returns them to the client.

[0098] Step S44: receiving access data fed back by the server.

[0099] Step S45: Decrypt the access data using the WeChat message encryption key to obtain the decrypted access data.

[0100] Specifically, after receiving the data, the client uses EncodingAESKey to perform AES decryption and obtains the return result. It is finally displayed on the WeChat for Enterprise client. In addition, in actual applications, in order to avoid sending incorrect access data due to server problems, the WeChat client can also use the allocated Token to compare the Token in the access data sent by the server. If they are consistent, it means that the access data corresponds to the data access request sent by the user through the client, further ensuring the accuracy of the data access results and improving the user experience.

[0101] The WeChat-based LAN access method provided in the embodiment of the present invention uses Token and EncodingAESKey to ensure the security of the transmission process and prevent data leakage caused by hijacking; and sets the format of the interactive command (keyword + parameter) to ensure that the server can recognize the command after receiving it; in order to ensure that the client can recognize the data and the security of data transmission, the access result returned by the server is encrypted in the same way to further ensure the security of the data transmission process.

[0102] In the prior art, to achieve communication between public and private network services, self-developed apps or clients are required, and the R&D cost is extremely high. As a third-party client, it is difficult to ensure the security of WeChat's communication with local services. The technical solution provided by the embodiment of the present invention relies on existing and common tools to achieve command interaction between the client and the private server; and uses the AES key of EncodingAESKey to encrypt and decrypt data, and combines tokens to identify the mutual trust relationship between the client and the server to ensure the security of data transmission. Based on the WeChat client, the command is pre-configured (keywords + parameters) to implement the LAN access function of the background command function module's screening + execution + output results.

[0103] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A local area network access method based on WeChat, applied to WeChat client, characterized in that: The method comprises: Send an access request to the server in the local area network; Receive a token and a WeChat message encryption key sent by the server, where the token and the WeChat message encryption key are allocated to the WeChat client after the server verifies the identity of the WeChat client using the access request; Sending a simulated access request with the token to the server; After receiving the access success identifier sent by the server, establishing data access with the server based on the token and the WeChat message encryption key, the access success identifier is sent by the server after verifying that the token carried in the simulated access request is consistent with the token allocated to the WeChat client; The establishing data access with the server based on the token and the WeChat message encryption key comprises: Obtain the user's data access requirements; Generate a data access request based on the data access requirement and the token, wherein the data access request is a data access request created in the format of a sender, a recipient, a token and a command; Encrypting the data access request using the WeChat message encryption key, and sending the encrypted data access request to the server; Receive access data fed back by the server, wherein the access data is the data access request sent by the WeChat client received by the server; use the WeChat message encryption key to decrypt the data access request to obtain the data access requirement and token of the WeChat client; determine whether the token obtained by decryption is consistent with the token assigned to the WeChat client; if they are consistent, extract the operation command in the data access requirement; based on the operation command, call the corresponding function module to perform the corresponding operation, and obtain the execution result fed back by the function module; obtain access data based on the execution result; use the WeChat message encryption key to encrypt the access data and the token to obtain the encrypted access data; send the encrypted access data to the WeChat client; Decrypt the access data using the WeChat message encryption key to obtain the decrypted access data; The sending of the access request to the server of the local area network comprises: Get the identity information of the WeChat client; Sending an access request with the identity information to the server so that the server extracts the identity information of the WeChat client from the access request; determining whether the identity information is consistent with the identity information of the WeChat client that has been entered; and determining that the identity verification has passed when the identity information is consistent with the identity information of the WeChat client that has been entered.

2. A local area network access method based on WeChat, applied to a server in a local area network, characterized in that: The method comprises: receiving an access request sent by a WeChat client, wherein the access request is for the WeChat client to obtain identity information of the WeChat client; and sending an access request with the identity information to the server; Performing identity verification on the WeChat client using the access request, and assigning a token and a WeChat message encryption key to the WeChat client after the identity verification passes; Sending the token and WeChat message encryption key to the WeChat client; Receive a simulated access request with a token sent by the WeChat client; Verify whether the token carried in the simulated access request is consistent with the token allocated to the WeChat client; When the verification is consistent, sending an access success identifier to the WeChat client to establish data access with the WeChat client; The establishing of data access with the WeChat client comprises: Receive a data access request sent by the WeChat client, where the data access request is created in the format of a sender, a recipient, a token and a command; the data access request is for the WeChat client to obtain the user's data access requirements; generate a data access request based on the data access requirements and the token; encrypt the data access request using the WeChat message encryption key, and send the encrypted data access request to the server; Decrypt the data access request using the WeChat message encryption key to obtain the data access requirement and token of the WeChat client; Determine whether the token obtained by decryption is consistent with the token assigned to the WeChat client; When they are consistent, extracting access data based on the data access requirement; Sending the access data to the WeChat client, so that the WeChat client decrypts the access data using the WeChat message encryption key to obtain the decrypted access data; The sending the access data to the WeChat client comprises: Encrypt the access data and the token using the WeChat message encryption key to obtain encrypted access data; Sending the encrypted access data to the WeChat client; The using the access request to verify the identity of the WeChat client includes: Extracting the identity information of the WeChat client from the access request; Determine whether the identity information is consistent with the identity information of the entered WeChat client; When the identity information is consistent with the identity information of the entered WeChat client, determining that the identity verification is passed; The extracting access data based on the data access requirement includes: Extracting the operation command in the data access requirement; Based on the operation command, a corresponding function module is called to perform a corresponding operation, and an execution result fed back by the function module is obtained; Access data is obtained based on the execution result.

3. A local area network access system based on WeChat, characterized in that: include: WeChat client and LAN server, among which, The WeChat client obtains the identity information of the WeChat client; and sends an access request with the identity information to the server; The server receives an access request sent by a WeChat client; uses the access request to perform identity verification on the WeChat client, and after the identity verification passes, allocates a token and a WeChat message encryption key to the WeChat client; and sends the token and the WeChat message encryption key to the WeChat client; the use of the access request to perform identity verification on the WeChat client includes: extracting identity information of the WeChat client from the access request; determining whether the identity information is consistent with the identity information of the WeChat client that has been entered; and determining that the identity verification passes when the identity information is consistent with the identity information of the WeChat client that has been entered; The WeChat client receives the token and WeChat message encryption key sent by the server; sends a simulated access request with the token to the server; The server receives a simulated access request with a token sent by the WeChat client; verifies whether the token carried in the simulated access request is consistent with the token allocated to the WeChat client; and when the verification is consistent, sends an access success mark to the WeChat client; After receiving the access success identifier sent by the server, the WeChat client establishes data access with the server based on the token and the WeChat message encryption key; the data access with the server based on the token and the WeChat message encryption key is established, including: obtaining the user's data access requirements; generating a data access request based on the data access requirements and the token, the data access request is to create a data access request in the format of sender, recipient, token and command; encrypting the data access request using the WeChat message encryption key, and sending the encrypted data access request to the server; receiving the access data fed back by the server; decrypting the access data using the WeChat message encryption key to obtain the decrypted data. The access data after that is obtained, wherein the access data is the data access request sent by the WeChat client received by the server; the data access request is decrypted using the WeChat message encryption key to obtain the data access requirement and token of the WeChat client; it is determined whether the token obtained by decryption is consistent with the token assigned to the WeChat client; when they are consistent, the operation command in the data access requirement is extracted; based on the operation command, the corresponding function module is called to perform the corresponding operation, and the execution result fed back by the function module is obtained; the access data is obtained based on the execution result; the access data and the token are encrypting using the WeChat message encryption key to obtain the encrypted access data; and the encrypted access data is sent to the WeChat client.

Citation Information

Patent Citations

  • Remote management method and system for local area network identity recognition unit

    CN111131488A