Router control method and apparatus, electronic device, and readable storage medium

Abstract

The application discloses a router control method and device, electronic equipment and a readable storage medium, and relates to the technical field of routers. The router control method comprises the following steps: when detecting that at least one visitor account terminal accesses a router, setting a wireless network shared by a visitor account of the visitor account terminal and an administrator account in the router; controlling network access operations of the visitor account through the wireless network according to an access control level corresponding to the visitor account, wherein the access control level comprises access control permissions for network resources and / or network time; if an access control adjustment instruction sent by the administrator account is received, adjusting the access control level according to the access control adjustment instruction, and controlling the network access operations of the visitor account through the wireless network according to the adjusted access control level. The application can realize the management and control of the visitor without creating a new wireless network for the visitor by the administrator.

Description

Technical Field

[0001] This application relates to the field of router technology, and more particularly to a router control method, apparatus, electronic device, and readable storage medium. Background Technology

[0002] To create a relatively secure network environment, router manufacturers have introduced their own guest login systems. Currently, guest login systems are implemented by using a separate SSID (Service Set Identifier) ​​to create a dedicated wireless network, which is then isolated using an internal VLAN (Virtual Local Area Network). This allows devices connected to the guest SSID to only have basic internet access functionality, logically isolated from the internal LAN. However, this approach requires administrators to create separate wireless networks for guests, leading to a waste of router resources. Summary of the Invention

[0003] The main objective of this application is to provide a router control method, device, electronic device, and readable storage medium, which aims to solve the technical problem of how to avoid administrators creating separate wireless networks for visitors while still enabling visitor control.

[0004] To achieve the above objectives, this application provides a router control method, which includes the following steps:

[0005] When at least one guest account terminal is detected to be connected to the router, the guest account of the guest account terminal and the administrator account in the router are configured to share the same wireless network;

[0006] The network access operations performed by the visitor account through the wireless network are controlled according to the access control level corresponding to the visitor account, wherein the access control level includes access control permissions for network resources and / or network time.

[0007] If an access control adjustment instruction is received from an administrator account, the access control level is adjusted according to the instruction, and the network access operations performed by the visitor account through the wireless network are controlled according to the adjusted access control level.

[0008] Optionally, the step of adjusting the access control level according to the access control adjustment instruction includes:

[0009] If the access control adjustment instruction includes level switching information, then the target access control level corresponding to the level switching information is selected from the preset access control list, and the access control level is adjusted to the target access control level. The access control list includes multiple access control levels, and each access control level corresponds to different access control permissions for network resources and / or network time.

[0010] Optionally, the step of adjusting the access control level according to the access control adjustment instruction includes:

[0011] If the access control adjustment instruction includes customized access control information, a new access control level is constructed based on the access control permissions corresponding to the customized access control information, and the new access control level is stored in a preset access control list, and the access control level is adjusted to the new access control level.

[0012] Optionally, after the step of setting the guest account terminal's guest account and the administrator account in the router to share a wireless network, the following steps are included:

[0013] Obtain user role tagging information sent by the administrator account, wherein the user role tagging information includes the user role corresponding to each visitor account and the access control level corresponding to each user role;

[0014] The access control level for each visitor account is determined based on the user role corresponding to each visitor account in the user role tagging information and the access control level corresponding to each user role.

[0015] Optionally, after controlling the network access operations performed by the visitor account through the wireless network according to the access control level corresponding to the visitor account, the process includes:

[0016] Detect the environmental scene information corresponding to the administrator account and the visitor account, wherein the environmental scene information includes at least one of scene location, scene event and environmental parameters;

[0017] If the environment scenario information of the administrator account and the environment scenario information corresponding to the visitor account do not match, an early warning message is generated and sent to the administrator account so that the administrator account can adjust the access control level corresponding to the visitor account based on the early warning message.

[0018] Optionally, if the environment scenario information of the administrator account and the environment scenario information corresponding to the visitor account do not match, the step of generating an alert includes:

[0019] Determine the location difference between the scene location corresponding to the administrator account and the scene location corresponding to the visitor account;

[0020] If the location difference is greater than a preset location difference threshold, and the duration of network access by the visitor account at the scene location corresponding to the visitor account is greater than a preset duration threshold, then it is determined that the environment scene information of the administrator account and the environment scene information corresponding to the visitor account do not match, and an early warning message is generated.

[0021] Optionally, after the step of controlling the network access operations performed by the visitor account through the wireless network according to the access control level corresponding to the visitor account, the method further includes:

[0022] Monitor the online behavior of the visitor accounts;

[0023] If abnormal network behavior of the visitor account is detected, the access control level corresponding to the visitor account is adjusted, and the network access operations performed by the visitor account through the wireless network are controlled according to the adjusted access control level.

[0024] Furthermore, to achieve the above objectives, this application also provides a router control device, the router control device comprising:

[0025] The detection module is used to configure the visitor account of the visitor account terminal and the administrator account in the router to share a wireless network when at least one visitor account terminal is detected to be connected to the router.

[0026] The control module is used to control the network access operations performed by the visitor account through the wireless network according to the access control level corresponding to the visitor account, wherein the access control level includes access control permissions for network resources and / or network time.

[0027] The adjustment module is used to adjust the access control level according to the access control adjustment instruction sent by the administrator account if it receives the access control adjustment instruction, and control the network access operation of the visitor account through the wireless network according to the adjusted access control level.

[0028] This application also provides an electronic device, which is a physical device, comprising: a memory, a processor, and a program of the router control method stored in the memory and executable on the processor. When the program of the router control method is executed by the processor, it can implement the steps of the router control method as described above.

[0029] This application also provides a readable storage medium, which is a computer-readable storage medium, on which a program implementing a router control method is stored. The program implementing the router control method is executed by a processor to implement the steps of the router control method as described above.

[0030] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the router control method described above.

[0031] The technical solution of this application involves setting up a shared wireless network for both the visitor and administrator accounts when at least one visitor account terminal is detected to be connected to the router. The system controls the visitor account's network access operations based on its access control level. Upon receiving an access control adjustment command from the administrator account, the system adjusts the access control level accordingly and then controls the visitor account's network access operations based on the adjusted level. This eliminates the need for the administrator to create a separate wireless network for the visitor, allowing the visitor and administrator accounts to share a single wireless network and avoiding wasted router resources. Furthermore, the administrator account can control the visitor account's access control level based on the shared wireless network, enabling intelligent management of visitors by restricting their login and access to network resources. Attached Figure Description

[0032] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0033] To more clearly illustrate the technical solutions in this embodiment or the prior art, the accompanying drawings used in the description of the embodiment or the prior art will be briefly introduced below. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0034] Figure 1 This is a schematic diagram of the router architecture in the router control method of this application;

[0035] Figure 2 This is a flowchart illustrating the first embodiment of the router control method in this application;

[0036] Figure 3 This is a schematic diagram illustrating the process of administrator account managing visitor accounts in the first embodiment of the router control method of this application;

[0037] Figure 4This is a flowchart illustrating the second embodiment of the router control method in this application;

[0038] Figure 5 This is another flowchart illustrating the administrator account's management of visitor accounts in the second embodiment of the router control method of this application;

[0039] Figure 6 This is a schematic diagram of a module structure of the router control device of this application;

[0040] Figure 7 This is a schematic diagram of the hardware operating environment of the electronic device in this embodiment.

[0041] The purpose, features, and advantages of this application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0042] To make the above-mentioned objects, features, and advantages of the present invention more apparent and understandable, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0043] In this embodiment, the router control method of this application can be applied to a router, as shown below. Figure 1 The router includes various modules such as an MCU (Microcontroller Unit), Flash memory, a button, power supply, WAN (Wide Area Network), LAN (Local Area Network), a 2.4G module, and antennas connected to the 2.4G module and a 5G module. The power supply module can be a power interface that accepts an AC-to-DC power adapter. The Flash memory can store default and user-defined visitor control configuration files. It can also receive and store location and air quality information from the MCU. The 2.4G or 5G module enables WiFi functionality. The WAN port can connect to a fiber optic cable for internet access. Users can connect to the LAN port via Ethernet cable for internet access. Furthermore, the router can be equipped with a main microphone, a noise-canceling microphone, and a voice encoding module for voice input; and a speaker and voice decoding module can be added for audio output.

[0044] Example 1

[0045] Based on this, please refer to Figure 2 This embodiment provides a router control method, which includes:

[0046] Step S10: When at least one guest account terminal is detected to be connected to the router, the guest account of the guest account terminal and the administrator account in the router are set to share the same wireless network.

[0047] Step S20: Control the network access operations performed by the visitor account through the wireless network according to the access control level corresponding to the visitor account, wherein the access control level includes access control permissions for network resources and / or network time.

[0048] Step S30: If an access control adjustment instruction is received from the administrator account, the access control level is adjusted according to the access control adjustment instruction, and the network access operation performed by the visitor account through the wireless network is controlled according to the adjusted access control level.

[0049] Since routers can cause administrators to create separate wireless networks, leading to wasted router resources, this embodiment aims to eliminate the need for administrators to create separate wireless networks and to restrict visitor logins and the resources they can access after logging in.

[0050] In one optional embodiment, the router is pre-configured with multiple levels of guest control logic at the factory, and the different levels of guest control logic are stored as access control levels in a preset access control list. For example, the access control list has four levels: Level 1: Limited internet access time (e.g., only 30 minutes) and restricted resource access (e.g., no access to NAS). Level 2: Restricted access time period (e.g., only from 8:00 AM to 8:00 PM) and limited internet access time. Level 3: Normal permissions, access to all resources, and unlimited access time. Level 4: Complete network access ban, meaning guests cannot access the network through the router, such as being unable to transmit data packets.

[0051] In this embodiment, an access control level can be selected as the default access control level from the access control list. When at least one user account is detected to be connected to the router, network access control can be applied to the user account according to the default access control level. Network access control may include internet access time limits, resource access restrictions, etc.

[0052] Optionally, it can detect whether the user account accessing the router is a new user account. If it is a new user account, network access control can be performed on the new user account according to the default access control level. If it is not a new user account, the access control level of the user account when it last logged in to the router can be determined, and network access control can be performed according to that access control level.

[0053] Optionally, in this embodiment, it is not necessary to set up a separate wireless network for the administrator account. That is, in this embodiment, the router does not need to separate a separate wireless network through a separate SSID. Instead, it can directly use the router's own wireless network. When a guest account terminal connects to the router, the guest account of the guest account terminal will share the same wireless network as the administrator account.

[0054] Optionally, the guest account terminal may include a terminal capable of connecting to the router for network access, such as a mobile phone, computer, or wearable device. The guest account can be the account used by the guest account terminal to access the router. The administrator account can be the account used by the administrator user to manage the router.

[0055] Optionally, for step S10, when at least one guest account terminal is detected to be connected to the router, the guest account of the guest account terminal and the administrator account in the router are set to share a wireless network.

[0056] In this embodiment, when the router detects one or more guest account terminals accessing the router, it can configure all guest account terminals to share a single wireless network with the router's administrator account, without needing to create a separate wireless network using a separate SSID. Optionally, when configuring guest accounts and administrator accounts to share a single wireless network, the administrator can log in to the router's management interface and configure the wireless network there.

[0057] Optionally, for step S20, the network access operation performed by the visitor account through the wireless network is controlled according to the access control level corresponding to the visitor account, wherein the access control level includes access control permissions for network resources and / or network time.

[0058] In this embodiment, the administrator account can restrict guest account logins and access to resources based on the same network. Therefore, it is also necessary to determine the access control level corresponding to the guest account. Optionally, the access control level corresponding to the guest account can be determined by randomly selecting an access control level from a preset access control list, by selecting an access control level from the access control list based on the administrator account, or by determining the default access control level based on the router's factory settings and using the default access control level as the access control level corresponding to the guest account. Furthermore, it can be checked whether the guest account is a new guest account. If it is not a new guest account, the access control level applied during the guest account's previous login can be used as the access control level for this login.

[0059] Optionally, the access control level includes access control permissions for network resources and / or network time, such as permissions for limited internet access time, permissions for access time periods, permissions for whether network resources can be used, as well as normal permissions (i.e. there are no restrictions at this time, and any network resource can be accessed at any time and for any duration) and abnormal permissions (i.e. there are restrictions at this time, and network resources cannot be accessed at any time, such as completely prohibiting network access).

[0060] Optionally, after determining the access control level corresponding to the guest account, the network access operations performed by the guest account through the wireless network can be controlled. For example, if the access control level includes access control permissions such as internet access time limit (e.g., only 30 minutes of access) and no access to NAS (Network Attached Storage), then the guest account can only perform network access operations through the wireless network for 30 minutes, and the network access operations performed cannot include access to the NAS.

[0061] Optionally, when there are multiple guest accounts, the network access operations performed by each guest account through the wireless network can be controlled according to the access control level corresponding to each guest account.

[0062] Optionally, in step S30, if an access control adjustment instruction is received from an administrator account, the access control level is adjusted according to the access control adjustment instruction, and the network access operation performed by the visitor account through the wireless network is controlled according to the adjusted access control level.

[0063] In this embodiment, if it is detected that an administrator account needs to control access to a guest account, it is necessary to first determine whether to continue using the access control level corresponding to the guest account to control the guest account's network access operations via the wireless network. If yes, the access control level corresponding to the guest account will continue to be used; if not, and an access control adjustment instruction sent by the administrator account is received, the access control level can be adjusted according to the access control adjustment instruction to change the guest account's access control permissions. After the guest account's access control permissions are changed, the guest account's network access operations via the wireless network will also be checked synchronously to determine whether they comply with the changed access control permissions. If they do, the guest account's network access operations will continue. If they do not comply with the changed access control permissions, network access operations will be restricted according to the changed access control permissions, such as forced disconnection from the network.

[0064] Optionally, when a guest account performs network access operations via the wireless network, when the router's ingress or egress interface receives a data packet corresponding to the guest account (such as a data packet sent to the guest account, or a data packet uploaded and sent to the network by the guest account), the router will parse the data packet and match it with the application's access control policy. If a corresponding access control policy is matched, the access control policy will be executed; if no access control policy is matched, the guest account's network access operations via the wireless network will be prohibited.

[0065] Optionally, when a new user is detected accessing the router, access control is applied according to the default access control level 1 (e.g., access is limited to 30 minutes and NAS access is prohibited). If, within a certain period (e.g., 10 minutes), a user with an administrator account modifies their access permissions, the modified access control is executed (e.g., switching directly from one access control level to another, or even a customized access control level). If, within a certain period (e.g., 10 minutes), a user without an administrator account modifies their access permissions, the user is forcibly logged off after the device's limited usage time expires, such as after 30 minutes. Furthermore, when the router receives data packets, it controls the packets according to the applied access control logic, such as dropping or allowing them.

[0066] In addition, to aid in understanding the router's guest control principle in this implementation, examples are provided below.

[0067] For example, refer to Figure 3When a new user connects, the default access control level is applied. The system checks if an administrator user is already controlling access. If not, the default access control level continues to apply. If so, it's determined that an administrator has implemented customized access control; otherwise, the pre-defined corresponding access control level is implemented. If both are present, the customized access control is applied. The new user can be a guest account terminal connected to the router. Administrator users can control guest accounts using their administrator accounts.

[0068] In this embodiment, when at least one guest account terminal is detected to be connected to the router, the guest account and the administrator account are configured to share a single wireless network. The network access operations of the guest account via the wireless network are controlled according to the access control level corresponding to the guest account. Upon receiving an access control adjustment command from the administrator account, the access control level is adjusted accordingly, and the network access operations of the guest account via the wireless network are then controlled based on the adjusted access control level. This eliminates the need for the administrator to create a new wireless network for the guest account on the router, allowing the guest account and the administrator account to share a single wireless network, thus avoiding wasted router resources. Furthermore, the administrator account can control the access control level of the guest account based on the shared wireless network, thereby restricting the guest account's login and the network resources it can access, achieving intelligent management of the guest account.

[0069] Example 2

[0070] Based on the first embodiment of this application, in another embodiment of this application, the same or similar content as in Embodiment 1 above can be referred to the above description, and will not be repeated hereafter. Based on this, please refer to... Figure 4 Step S30, the step of adjusting the access control level according to the access control adjustment instruction, includes:

[0071] Step a: If the access control adjustment instruction includes level switching information, then the target access control level corresponding to the level switching information is selected from the preset access control list, and the access control level is adjusted to the target access control level. The access control list includes multiple access control levels, and each access control level corresponds to different access control permissions for network resources and / or network time.

[0072] In this embodiment, upon receiving an access control adjustment command from the administrator account, it can be determined that the administrator needs to manage visitors. Therefore, the information carried in the access control adjustment command can be detected first. If the access control adjustment command includes level switching information, a search and filtering can be performed in the access control list (such as ACL) pre-configured in the router to obtain the target access control level corresponding to the level switching information. For example, if the visitor account is currently using access control level 1, and the level switching information includes switching to level 2, then the access control level 2 information is filtered out in the access control list and used as the target access control level. The access control level corresponding to the visitor account is then adjusted to the target access control level, and the visitor account will subsequently perform network access operations through the wireless network based on the target access control level until the visitor account terminal disconnects from the router. Optionally, the administrator account can perform operations such as deleting, modifying, and adding access control levels of different levels in the access control list.

[0073] In this embodiment, by including level switching information in the access control adjustment instruction, the target access control level is selected from the access control list, and then the access control level corresponding to the visitor account is adjusted to the target access control level, thereby realizing the administrator's control over the visitor account.

[0074] Further, the step of adjusting the access control level according to the access control adjustment instruction includes:

[0075] Step b: If the access control adjustment instruction includes customized access control information, a new access control level is constructed based on the access control permissions corresponding to the customized access control information, and the new access control level is stored in a preset access control list, and the access control level is adjusted to the new access control level.

[0076] In this embodiment, upon receiving an access control adjustment instruction from the administrator account, it can be determined that the administrator needs to manage visitors. Therefore, the information carried in the access control adjustment instruction can be detected first. If it is determined that the access control adjustment instruction includes customized access control information, then it is necessary to determine the specific access control permissions and other information contained in the customized access control information. For example, it may include permissions such as allowing network access only from 8:00 AM to 10:00 AM, and limiting the total time spent on grid access to no more than one hour. A new access control level can then be constructed based on this access control permission information, and this new access control level includes access control permission information, such as permissions allowing network access only from 8:00 AM to 10:00 AM, and limiting the total time spent on grid access to no more than one hour. This is then stored in a preset access control list. Optionally, when storing the new access control permission information in the access control list, it is checked whether there is an access control level in the access control list that is exactly the same as the new access control permission information. If so, it is replaced with the new access control permission information. If it does not exist, it can be stored directly. However, if it is detected that there are only differences in access control permission information but the same level number, the level number of the new access control permission information will be adjusted accordingly.

[0077] Furthermore, after the new access control level is constructed and stored in the access control list, the new access control level can be used as the target access control level. The access control level corresponding to the guest account can be adjusted to the target access control level. Subsequently, the guest account will perform network access operations through the wireless network based on the target access control level until the guest account terminal disconnects from the router.

[0078] In this embodiment, by including customized access control information in the access control adjustment instruction, a new access control level is constructed based on the customized access control information and stored in a preset access control list. The access control level corresponding to the visitor account is then adjusted to the new access control level, thereby realizing the administrator account's control over the visitor account.

[0079] Further, after the step of setting the guest account on the guest account terminal and the administrator account in the router to share a wireless network, the following steps are included:

[0080] Step c: Obtain user role tagging information sent by the administrator account, wherein the user role tagging information includes the user role corresponding to each visitor account and the access control level corresponding to each user role;

[0081] Step d: Determine the access control level for each visitor account based on the user role corresponding to each visitor account in the user role tagging information and the access control level corresponding to each user role.

[0082] In this embodiment, the administrator account can also assign user roles to each visitor account. For example, it can assign user roles to all visitor accounts currently connected to the router, such as "child," "elderly," or "adult," or "family member," "relative," or "friend." Different access control levels are then set for each assigned user role. For instance, if there are three visitor accounts, the administrator account can assign user roles to each account, designating them as "family member," "relative," and "friend," respectively, and setting the access control level for "family member" to level 3, "relative" to level 2, and "friend" to level 1. For example, ... Figure 5 As shown, when a new user connects, the default access control level is implemented, and user roles are marked. The system checks if an administrator user is already controlling access. If not, the default access control level continues to apply. If so, it's determined that an administrator has implemented customized access control; otherwise, the pre-defined corresponding level of access control is implemented. If so, the customized access control is applied. The new user can be a guest account terminal connected to the router. Administrator users can control guest accounts through their administrator accounts.

[0083] Optionally, after the router obtains the user role tagging information sent by the administrator account, it can adjust the access control level of each visitor account according to the user role tagging information to match the user role tagging information.

[0084] Optionally, when assigning user roles to guest accounts, the administrator account can also assign special roles, granting them management privileges over other guest accounts. For example, one or more guest accounts can be assigned the role of "owner," and this owner role can control the access levels of other user roles. For instance, a guest account with the owner role can, with a single click, prevent other user roles from logging into the router again after a family gathering.

[0085] In this embodiment, the access control level corresponding to each visitor account is determined based on the user role tagging information sent by the administrator account, thereby enabling the administrator account to manage visitor accounts in different ways according to their roles.

[0086] Further, after controlling the network access operations performed by the visitor account through the wireless network according to the access control level corresponding to the visitor account, the process includes:

[0087] Step e: Detect the environmental scene information corresponding to the administrator account and the visitor account, wherein the environmental scene information includes at least one of scene location, scene event, and environmental parameters;

[0088] Step f: If the environment scenario information of the administrator account and the environment scenario information corresponding to the visitor account do not match, an early warning message is generated and sent to the administrator account so that the administrator account can adjust the access control level corresponding to the visitor account based on the early warning message.

[0089] In this embodiment, the router can also check and determine the environmental scene information corresponding to the administrator account and the guest account. The environmental scene information for the administrator account includes the scene location, scene event, and environmental parameters corresponding to the administrator account. The router's location can be used as the scene location for the administrator account. The scene event for the administrator account can be determined by the transmission of data packets from various guest accounts through the router. For example, if multiple guest accounts transmit data packets through the router multiple times within a certain time period, the router is determined to be in a certain scene event. If it is detected that neither the guest account nor the administrator account has accessed the network through the router within the time period and within a preset duration, the scene event is determined to have ended. The environmental parameters corresponding to the administrator account can be environmental parameters detected by the router, such as the air quality of the router's environment detected by built-in sensors, including but not limited to humidity, weather conditions, and other environmental parameters that affect the router's network speed.

[0090] Optionally, the environmental scenario information corresponding to the guest account includes the scenario location, scenario events, and environmental parameters. The real-time location of the guest account's terminal can be used as the scenario location. The scenario event can be determined by the guest account's terminal accessing the network through a router. For example, if the guest account's terminal frequently sends data packets to the router within a certain time period, the guest account is considered to be in a scenario event. If the guest account's terminal does not send data packets to the router within the time period and a preset duration, the scenario event is considered to have ended. The environmental parameters can be environmental parameters affecting network speed detected by the guest account's terminal.

[0091] After determining the environment scenario information for the administrator account and the visitor account, it is also necessary to check whether the environment scenario information for the administrator account and the visitor account matches. If they do not match, an alert is generated and sent to the administrator account so that the administrator can adjust the access control level for the visitor account accordingly.

[0092] Optionally, a mismatch between the environment scene information of the administrator account and the environment scene information corresponding to the visitor account includes at least one of the following situations: the location difference between the scene location corresponding to the administrator and the scene location corresponding to the visitor account is greater than a preset location difference threshold; the scene event corresponding to the visitor account or the scene event corresponding to the administrator account has ended; or the environment parameters corresponding to the visitor account or the environment parameters corresponding to the administrator account are abnormal. Abnormal environment parameters can refer to poor network stability and speed in the current environment. For example, if the detected weather condition in the environmental parameter summary is thunderstorms, this will lead to a decrease in network stability and speed.

[0093] In this embodiment, when the environmental scenario information corresponding to the administrator account and the visitor account does not match, an early warning message is generated and sent to the administrator account so that the administrator account can adjust the access control level corresponding to the visitor account, thereby facilitating the administrator account's management of the visitor account.

[0094] Furthermore, if the environment scenario information of the administrator account and the environment scenario information corresponding to the visitor account do not match, the step of generating an alert includes:

[0095] Step f1: Determine the location difference between the scene location corresponding to the administrator account and the scene location corresponding to the visitor account;

[0096] Step f2: If the location difference is greater than a preset location difference threshold, and the duration of network access by the visitor account at the scene location corresponding to the visitor account is greater than a preset duration threshold, then it is determined that the environment scene information of the administrator account and the environment scene information corresponding to the visitor account do not match, and an early warning message is generated.

[0097] In this embodiment, to avoid false positives, when the location difference between the scene location corresponding to the administrator account and the scene location corresponding to the visitor account is greater than a preset location difference threshold, it is also necessary to check whether the duration of network access by the visitor account at that scene location is greater than a preset duration threshold. The preset location difference threshold can be a pre-set location threshold, such as 10 meters. The preset duration threshold can be a pre-set time period, such as 5 minutes or 2 minutes. When it is determined that the duration of network access exceeds the preset duration threshold, it is determined that the environmental scene information of the administrator account and the environmental scene information corresponding to the visitor account do not match. At this point, a corresponding warning message can be generated and sent to the administrator account.

[0098] In this embodiment, if the location difference between the scene location corresponding to the administrator account and the scene location corresponding to the visitor account is greater than a preset location difference threshold, and the duration of the visitor's visit is greater than a preset duration threshold, it is determined that the environmental scene information of the administrator account and the environmental scene information corresponding to the visitor account do not match, and an early warning message is generated. This allows for timely notification to the administrator account when there are abnormalities with the visitor account, enabling the administrator account to take control.

[0099] Furthermore, after the step of assigning user roles to all user accounts connected to the router to obtain administrator and guest accounts, the method further includes:

[0100] Step x: Monitor the online behavior of the visitor account;

[0101] Step y: If abnormal network behavior of the visitor account is detected, adjust the access control level corresponding to the visitor account, and control the network access operations of the visitor account through the wireless network according to the adjusted access control level.

[0102] In this embodiment, when a guest account accesses the network through the router, its network behavior also needs to be monitored to determine if any anomalies exist. For example, if the access control level corresponding to the guest account includes prohibiting access to the NAS, and the guest account's network behavior involves multiple requests to access the NAS, the access control level corresponding to the guest account can be adjusted, such as prohibiting network access operations for a period of time after the current time point. After adjusting the access control level, access control for the guest account can be implemented based on the adjusted access control level.

[0103] In this embodiment, by monitoring the network behavior of guest accounts and adjusting the access control level when an anomaly is detected, the network access operations of guest accounts through the wireless network are controlled according to the adjusted access control level, thereby enabling timely management when anomalies occur in guest accounts.

[0104] Example 3

[0105] This application also provides a router control device, please refer to... Figure 6 The router control device includes:

[0106] The detection module A10 is used to set the visitor account of the visitor account terminal and the administrator account in the router to share a wireless network when at least one visitor account terminal is detected to be connected to the router.

[0107] Control module A20 is used to control the network access operations performed by the visitor account through the wireless network according to the access control level corresponding to the visitor account, wherein the access control level includes access control permissions for network resources and / or network time.

[0108] The adjustment module A30 is used to adjust the access control level according to the access control adjustment instruction sent by the administrator account if it receives the access control adjustment instruction, and to control the network access operation of the visitor account through the wireless network according to the adjusted access control level.

[0109] Optionally, module A30 is adjusted for:

[0110] If the access control adjustment instruction includes level switching information, then the target access control level corresponding to the level switching information is selected from the preset access control list, and the access control level is adjusted to the target access control level. The access control list includes multiple access control levels, and each access control level corresponds to different access control permissions for network resources and / or network time.

[0111] Optionally, module A30 is adjusted for:

[0112] If the access control adjustment instruction includes customized access control information, a new access control level is constructed based on the access control permissions corresponding to the customized access control information, and the new access control level is stored in a preset access control list, and the access control level is adjusted to the new access control level.

[0113] Optionally, the detection module A10 is used for:

[0114] Obtain user role tagging information sent by the administrator account, wherein the user role tagging information includes the user role corresponding to each visitor account and the access control level corresponding to each user role;

[0115] The access control level for each visitor account is determined based on the user role corresponding to each visitor account in the user role tagging information and the access control level corresponding to each user role.

[0116] Optionally, the control module A20 is used for:

[0117] Detect the environmental scene information corresponding to the administrator account and the visitor account, wherein the environmental scene information includes at least one of scene location, scene event and environmental parameters;

[0118] If the environment scenario information of the administrator account and the environment scenario information corresponding to the visitor account do not match, an early warning message is generated and sent to the administrator account so that the administrator account can adjust the access control level corresponding to the visitor account based on the early warning message.

[0119] Optionally, the control module A20 is used for:

[0120] Determine the location difference between the scene location corresponding to the administrator account and the scene location corresponding to the visitor account;

[0121] If the location difference is greater than a preset location difference threshold, and the duration of network access by the visitor account at the scene location corresponding to the visitor account is greater than a preset duration threshold, then it is determined that the environment scene information of the administrator account and the environment scene information corresponding to the visitor account do not match, and an early warning message is generated.

[0122] Optionally, the control module A20 is used for:

[0123] Monitor the online behavior of the visitor accounts;

[0124] If abnormal network behavior of the visitor account is detected, the access control level corresponding to the visitor account is adjusted, and the network access operations performed by the visitor account through the wireless network are controlled according to the adjusted access control level.

[0125] The router control device provided in this embodiment of the invention employs the router control method of any one of the embodiments 1 to 2 above, which can prevent administrators from creating separate wireless networks for visitors while still enabling visitor management. Compared with the prior art, the beneficial effects of the router control device provided in this embodiment of the invention are the same as those of the router control method provided in the above embodiments, and other technical features in the router control device are the same as those disclosed in the methods of the above embodiments, and will not be repeated here.

[0126] Example 4

[0127] This invention provides an electronic device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, which are executed by the at least one processor to enable the at least one processor to perform the router control method described in Embodiment 1 above.

[0128] The following is for reference. Figure 7 It shows a schematic diagram of the structure of an electronic device suitable for implementing the embodiments of the present disclosure. Figure 7 The electronic device shown is merely an example and should not be construed as limiting the functionality and scope of the embodiments disclosed herein.

[0129] like Figure 7 As shown, an electronic device may include a processing unit (such as a central processing unit, graphics processing unit, etc.) that can perform various appropriate actions and processes based on a program stored in read-only memory (ROM) or a program loaded from a storage device into random access memory (RAM). The RAM also stores various programs and data required for the operation of the electronic device. The processing unit, ROM, and RAM are interconnected via a bus. Input / output (I / O) interfaces are also connected to the bus.

[0130] Typically, the following systems can be connected to the I / O interface: input devices including, for example, touchscreens, touchpads, keyboards, mice, image sensors, microphones, accelerometers, gyroscopes, etc.; output devices including, for example, liquid crystal displays (LCDs), speakers, vibrators, etc.; storage devices including, for example, magnetic tapes, hard disks, etc.; and communication devices. Communication devices allow electronic devices to communicate wirelessly or wiredly with other devices to exchange data. Although electronic devices with various systems are shown in the figures, it should be understood that it is not required to implement or possess all the systems shown. More or fewer systems may be implemented alternatively.

[0131] In particular, according to embodiments of this disclosure, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments of this disclosure include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via a communication device, or installed from a storage device, or installed from a ROM. When the computer program is executed by a processing device, it performs the functions defined above in the methods of embodiments of this disclosure.

[0132] The electronic device provided by this invention, employing the router control method in the above embodiments, can prevent administrators from creating separate wireless networks for visitors while still enabling visitor management. Compared with the prior art, the beneficial effects of the electronic device provided by this invention are the same as those of the router control method provided in the above embodiments, and other technical features of this electronic device are the same as those disclosed in the previous embodiment method, and will not be repeated here.

[0133] It should be understood that various parts of this disclosure can be implemented using hardware, software, firmware, or a combination thereof. In the description of the above embodiments, specific features, structures, materials, or characteristics may be combined in any suitable manner in one or more embodiments or examples.

[0134] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

[0135] Example 5

[0136] This invention provides a computer-readable storage medium having computer-readable program instructions stored thereon, which are used to execute the router control method described in the above embodiments.

[0137] The computer-readable storage medium provided in this embodiment of the invention may be, for example, a USB flash drive, but is not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device. The program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination thereof.

[0138] The aforementioned computer-readable storage medium may be included in an electronic device or may exist independently without being assembled into an electronic device.

[0139] The aforementioned computer-readable storage medium carries one or more programs, which, when executed by an electronic device, enable the electronic device to perform the steps in the above embodiments.

[0140] Computer program code for performing the operations of this disclosure can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, and C++, and conventional procedural programming languages ​​such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0141] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0142] The modules described in the embodiments of this disclosure can be implemented in software or hardware. The names of the modules do not necessarily limit the functionality of the unit itself.

[0143] The computer-readable storage medium provided by this invention stores computer-readable program instructions for executing the router control method described above. This enables the avoidance of administrators creating separate wireless networks for visitors while simultaneously allowing for visitor management. Compared to the prior art, the beneficial effects of the computer-readable storage medium provided in this embodiment are the same as those of the router control method provided in Embodiment 1 or Embodiment 2, and will not be repeated here.

[0144] Example 6

[0145] This invention also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the router control method described above.

[0146] The computer program product provided in this application can prevent administrators from creating separate wireless networks for visitors, while still enabling visitor management. Compared with the prior art, the beneficial effects of the computer program product provided in this embodiment are the same as those of the router control method provided in any of the above embodiments, and will not be repeated here.

[0147] The above are merely preferred embodiments of this application and do not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent scope of this application.

Claims

1. A router control method, characterized in that, The router control method includes the following steps: When at least one guest account terminal is detected to be connected to the router, the guest account of the guest account terminal and the administrator account in the router are configured to share the same wireless network; The network access operations performed by the visitor account through the wireless network are controlled according to the access control level corresponding to the visitor account, wherein the access control level includes access control permissions for network resources and / or network time. If an access control adjustment instruction is received from an administrator account, the access control level is adjusted according to the access control adjustment instruction, and the network access operation performed by the visitor account through the wireless network is controlled according to the adjusted access control level. Detect the environmental scene information corresponding to the administrator account and the visitor account, wherein the environmental scene information includes at least one of scene location, scene event and environmental parameters; Determine the location difference between the scene location corresponding to the administrator account and the scene location corresponding to the visitor account, wherein the location of the router is taken as the scene location corresponding to the administrator account, and the real-time location of the visitor account terminal is taken as the scene location corresponding to the visitor account. If the location difference is greater than a preset location difference threshold, and the duration of network access by the visitor account at the scene location corresponding to the visitor account is greater than a preset duration threshold, then it is determined that the environment scene information of the administrator account and the environment scene information corresponding to the visitor account do not match, and an early warning message is generated. The warning information is sent to the administrator account so that the administrator account can adjust the access control level corresponding to the visitor account based on the warning information.

2. The router control method as described in claim 1, characterized in that, The step of adjusting the access control level according to the access control adjustment instruction includes: If the access control adjustment instruction includes level switching information, then the target access control level corresponding to the level switching information is selected from the preset access control list, and the access control level is adjusted to the target access control level. The access control list includes multiple access control levels, and each access control level corresponds to different access control permissions for network resources and / or network time.

3. The router control method as described in claim 1, characterized in that, The step of adjusting the access control level according to the access control adjustment instruction includes: If the access control adjustment instruction includes customized access control information, a new access control level is constructed based on the access control permissions corresponding to the customized access control information, and the new access control level is stored in a preset access control list, and the access control level is adjusted to the new access control level.

4. The router control method as described in claim 1, characterized in that, After the step of setting the guest account on the guest account terminal and the administrator account in the router to share a wireless network, the following steps are included: Obtain user role tagging information sent by the administrator account, wherein the user role tagging information includes the user role corresponding to each visitor account and the access control level corresponding to each user role; The access control level for each visitor account is determined based on the user role corresponding to each visitor account in the user role tagging information and the access control level corresponding to each user role.

5. The router control method according to any one of claims 1-4, characterized in that, After the step of controlling the network access operations performed by the visitor account through the wireless network according to the access control level corresponding to the visitor account, the method further includes: Monitor the online behavior of the visitor accounts; If abnormal network behavior of the visitor account is detected, the access control level corresponding to the visitor account is adjusted, and the network access operations performed by the visitor account through the wireless network are controlled according to the adjusted access control level.

6. A router control device, characterized in that, The router control device includes: The detection module is used to configure the visitor account of the visitor account terminal and the administrator account in the router to share a wireless network when at least one visitor account terminal is detected to be connected to the router. The control module is used to control the network access operations performed by the visitor account through the wireless network according to the access control level corresponding to the visitor account, wherein the access control level includes access control permissions for network resources and / or network time. An adjustment module is configured to, upon receiving an access control adjustment instruction from an administrator account, adjust the access control level according to the instruction and control the network access operations performed by the visitor account through the wireless network according to the adjusted access control level; and to detect the environmental scene information corresponding to the administrator account and the visitor account, wherein the environmental scene information includes at least one of scene location, scene event, and environmental parameters; determine the location difference between the scene location corresponding to the administrator account and the scene location corresponding to the visitor account, wherein the location of the router is used as the scene location corresponding to the administrator account, and the real-time location of the visitor account terminal is used as the scene location corresponding to the visitor account; if the location difference is greater than a preset location difference threshold, and the duration of network access performed by the visitor account at the scene location corresponding to the visitor account is greater than a preset duration threshold, then determine that the environmental scene information of the administrator account and the environmental scene information corresponding to the visitor account do not match, and generate a warning message; and send the warning message to the administrator account so that the administrator account can adjust the access control level corresponding to the visitor account according to the warning message.

7. An electronic device, characterized in that, The electronic device includes: At least one processor; and, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor to enable the at least one processor to perform the steps of the router control method according to any one of claims 1 to 5.

8. A readable storage medium, characterized in that, The readable storage medium is a computer-readable storage medium, on which a program implementing the router control method is stored, and the program implementing the router control method is executed by a processor to implement the steps of the router control method as described in any one of claims 1 to 5.

Images