How to connect to WiFi using biometric information

Abstract

This invention provides a method for connecting to WiFi using biometric information. A dedicated key for biometric authentication is generated at the router end and sent to the user terminal during registration. The user terminal binds its biometric information with the dedicated key, establishes a binding relationship, and saves it. The router adds a biometric authentication flag to the WiFi Beacon frame. When the user terminal connects to WiFi, it recognizes the flag and performs biometric identification. After successful identification, the user terminal obtains the dedicated key based on the binding relationship and uses the dedicated key for authentication to connect to WiFi. This method transmits only the dedicated key during authentication, solving the problem of large data volume in the authentication process when using biometric information for WiFi connection. This invention is applicable to WiFi connections.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method for connecting to WiFi using biometric information. Background Art

[0002] In today's digital society, WiFi network connections have become an indispensable part of people's daily lives and business activities. However, as the convenience brought by convenient network use increases, network security has also become a matter of concern. Traditional username and password authentication methods have a series of security risks, such as easy cracking, users may forget passwords or use weak passwords, and password leaks. These security risks threaten the security of users' personal information and network data.

[0003] In order to meet these challenges, biometric identification technology has gradually attracted widespread attention and has been widely used on terminal devices. Compared with traditional identity authentication methods, biometric information uses unique physiological or behavioral characteristics (such as fingerprints, irises, faces, and voices) as the basis for identity authentication, which is unforgeable and more secure. This technology not only eliminates the problem of users forgetting passwords, but also effectively prevents the threat of password leakage and identity forgery.

[0004] A Chinese invention patent with publication number CN106255109 A discloses a method and system for router authority authentication, which specifically discloses: collecting biometric information with identity identification uniqueness; transmitting the collected biometric information to a database through a router, and the database stores the authority information of the router; searching the database according to the biometric information to determine whether there is matching biometric information; when there is matching biometric information, obtaining the authority information associated with the biometric information and feeding back the authority information; adjusting the corresponding service of the router according to the fed-back authority information.

[0005] Although it can effectively eliminate the problem of users forgetting passwords and prevent the threats of password leakage and identity forgery, there is a problem. The huge amount of biometric information data will increase the time consumption of data interaction in the authentication process, hindering the promotion and application of biometric recognition technology in mid- and low-end routers. Summary of the invention

[0006] The technical problem solved by the present invention is to provide a method for connecting to WiFi using biometric information, so as to solve the problem of large amount of data in the authentication process when using biometric information for WiFi connection.

[0007] The present invention solves the above technical problems by adopting a technical solution: a method for connecting to WiFi using biometric information, comprising the following steps:

[0008] S1. Generate a dedicated key for biometric information authentication at the router end, and issue the dedicated key to the user terminal when the user terminal registers. The user terminal binds the user biometric information with the dedicated key to obtain a binding relationship and saves it;

[0009] S2. The router adds a biometric information authentication mark to the WiFi Beacon frame;

[0010] S3, when the user terminal connects to WiFi, after recognizing the logo, the user terminal performs biometric information recognition. After the recognition is passed, the user terminal obtains the corresponding private key through the biometric information according to the binding relationship, and sends the private key to the router;

[0011] S4. The router receives the private key sent by the user terminal and compares it with the generated private key for verification. After the verification is passed, the user terminal and the router establish a communication channel.

[0012] Furthermore, the dedicated key is sent to the user terminal for EAP authentication.

[0013] Furthermore, the private key is obtained by combining the WiFi's BSSID, manufacturer ID, device ID and manufacturer extension field to obtain the key plaintext, then generating a 256-bit hash value through the SHA-256 hash function, and then performing Base64 encoding to obtain the private key.

[0014] Furthermore, the data format of the Beacon frame after adding the biometric information authentication mark is: manufacturer-defined message ID+message payload length+manufacturer OUI+biometric information authentication mark+manufacturer-defined field.

[0015] Furthermore, when the user terminal connects to WiFi, Captive Portal authentication is used.

[0016] Furthermore, the biometric information includes one or more of fingerprint, iris, face and voice.

[0017] Beneficial effects of the present invention: The present invention provides a method for connecting to WiFi using biometric information, generating a dedicated key for biometric information authentication at a router end, and sending the dedicated key to a user terminal when the user terminal registers, the user terminal binds the user's biometric information with the dedicated key, obtains a binding relationship, and saves it, the router adds a biometric information authentication mark in a Beacon frame of the WiFi, when the user terminal connects to the WiFi, after identifying the mark, the user terminal performs biometric information identification, after the identification is passed, the user terminal obtains the dedicated key according to the binding relationship, and sends the dedicated key to the router; the router receives the dedicated key sent by the user terminal, and compares and verifies it with the generated dedicated key, after the verification is passed, the user terminal establishes a communication channel with the router to realize WiFi connection, thereby only transmitting the dedicated key during the authentication process, solving the problem of large data volume in the authentication process when using biometric information for WiFi connection. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 It is a flow chart of a method for connecting to WiFi using biometric information provided by the present invention. DETAILED DESCRIPTION

[0019] The present invention aims to solve the problem that the amount of data in the authentication process is large when using biometric information to connect to WiFi. The present invention provides a method for connecting to WiFi using biometric information. Figure 1 As shown, the following steps are included:

[0020] S1. Generate a private key for biometric information authentication on the router side, and send the private key to the user terminal when the user terminal registers. The user terminal binds the user's biometric information with the private key to obtain a binding relationship and saves it. Specifically, the private key is sent to the user terminal using EAP authentication. The private key is obtained by combining the WiFi's BSSID, manufacturer ID, device ID and manufacturer extension field to obtain a key plaintext, then generating a 256-bit hash value through the SHA-256 hash function, and then performing Base64 encoding to obtain the private key.

[0021] S2. The router adds a biometric information authentication mark to the WiFi Beacon frame; specifically, the data format of the Beacon frame after adding the biometric information authentication mark is: manufacturer-defined message ID + message payload length + manufacturer OUI + biometric information authentication mark + manufacturer-defined field.

[0022] S3. When the user terminal connects to WiFi, after recognizing the logo, the user terminal performs biometric information recognition. After the recognition is passed, the user terminal obtains the corresponding private key through the biometric information according to the binding relationship, and sends the private key to the router; specifically, when the user terminal connects to WiFi, Captive Portal authentication is adopted.

[0023] S4. The router receives the private key sent by the user terminal and compares it with the generated private key for verification. After the verification is passed, the user terminal and the router establish a communication channel.

[0024] In this way, biometric information recognition is placed on the user side, reducing the cost of integrating biometric information recognition technology in routers. In addition, during the authentication process, biometric information is replaced by a dedicated key, reducing the amount of data transmitted, thereby shortening the data transmission time during authentication.

[0025] In the present invention, the biometric information includes one or more of fingerprint, iris, face and voice.

[0026] Example

[0027] A method for connecting to WiFi using biometric information, comprising the following steps:

[0028] Step 1: Generate a dedicated key for biometric information authentication on the router side; when the user terminal registers on the router side, the router side sends the dedicated key to the user terminal through EAP authentication; the user terminal binds the user biometric information with the dedicated key, obtains a binding relationship, and saves it;

[0029] Step 2: The router adds a biometric information authentication mark to the WiFi Beacon frame;

[0030] Step 3: The user terminal selects the router WiFi to connect, and the user terminal checks whether the current WiFi has been registered. When the registered user terminal device connects to the router WiFi, after recognizing the logo, it automatically jumps to the Captive Portal authentication page for biometric information recognition. After the recognition is passed, the user terminal obtains the corresponding private key through the biometric information according to the binding relationship, and sends the private key to the router;

[0031] Step 4: The router receives the private key sent by the user terminal and compares it with the generated private key for verification. After the verification is passed, the user terminal establishes a communication channel with the router to achieve WiFi connection.

[0032] Specifically, an unregistered user terminal uses a password to log in to connect to WiFi, and uses a password to register to obtain a dedicated key.

Claims

1. A method for connecting to WiFi using biometric information, characterized in that: The following steps are involved: S1. Generate a private key for biometric information authentication on the router side, and send the private key to the user terminal when the user terminal registers. The user terminal binds the user's biometric information with the private key to obtain a binding relationship and saves it. The private key is obtained by combining the WiFi BSSID, manufacturer ID, device ID and manufacturer extension field to obtain the key plaintext, then generate a 256-bit hash value through the SHA-256 hash function, and then perform Base64 encoding to obtain the private key; S2. The router adds a biometric information authentication mark to the Beacon frame of the WiFi. The data format of the Beacon frame after adding the biometric information authentication mark is: manufacturer-defined message ID + message payload length + manufacturer OUI + biometric information authentication mark + manufacturer-defined field; S3, when the user terminal connects to WiFi, after recognizing the logo, the user terminal performs biometric information recognition. After the recognition is passed, the user terminal obtains the corresponding private key through the biometric information according to the binding relationship, and sends the private key to the router; S4. The router receives the private key sent by the user terminal and compares it with the generated private key for verification. After the verification is passed, the user terminal and the router establish a communication channel.

2. The method for connecting to WiFi using biometric information according to claim 1, characterized in that: The private key is sent to the user terminal for EAP authentication.

3. The method for connecting to WiFi using biometric information according to claim 1 or 2, characterized in that: When the user terminal connects to WiFi, Captive Portal authentication is used.

4. The method for connecting to WiFi using biometric information according to claim 1 or 2, characterized in that: The biometric information includes one or more of fingerprint, iris, face and voice.

Images