Data transmission system and method

Abstract

The invention discloses a data transmission system and method. A WiFi network connection subsystem in the system obtains and reports cell information of a cell where a terminal is located; the WiFi network authentication subsystem verifies whether the cell is covered with a WiFi network based on the cell information, if yes, safety verification is carried out on the terminal, and terminal identification information corresponding to the terminal MAC address is determined; and sending the terminal MAC address and encrypted information obtained by encrypting indication information for indicating data transmission through the WiFi network to a WiFi network connection subsystem according to the terminal identification information, decrypting the encrypted information by the subsystem, and controlling the terminal to perform data transmission through the WiFi network according to the indication information when the decrypted MAC address is the same as the terminal MAC address. According to the method and the device, the technical problem that the security of the whole system is relatively low because the related data transmission technology lacks security verification of the terminal on the WiFi network is solved.

Description

Technical Field

[0001] The present application relates to the field of wireless communication technology, and in particular to a data transmission system and method. Background Art

[0002] At present, typical mobile terminals such as 5G mobile phones have the ability to access both WiFi and 5G technology. That is, when using WiFi hotspots, they are used in permanent scenarios such as homes and fixed offices, while in public places such as shopping malls and supermarkets, they often use the traffic in mobile phone packages for digital transmission services.

[0003] However, for non-resident WiFi networks, every time you arrive at an unfamiliar place, you must first ask for the SSID name and wireless access password of the WiFi network before you can use it; or, you must use a one-time password to use WiFi normally. In addition, in order to quickly connect to WiFi when entering a trusted place, users often turn on the WiFi switch for a long time, or install WiFi automatic connection apps such as "WiFi Genie" on their phones. The phone will periodically scan for WiFi signals so that it can quickly connect once it enters the corresponding WiFi hotspot. Due to the periodic WiFi signal scanning, the phone is in a high energy consumption state for a long time, which accelerates the power consumption of the phone.

[0004] In summary, typical mobile terminals such as 5G mobile phones cannot use WiFi technology and 5G technology at the same time in a safe, convenient and low-energy manner. No effective solution has been proposed to the above problems. Summary of the invention

[0005] The embodiments of the present application provide a data transmission system and method to at least solve the technical problem that the security of the entire system is low due to the lack of terminal security verification of the WiFi network in the relevant data transmission technology.

[0006] According to one aspect of an embodiment of the present application, a data transmission system is provided, including: a WiFi network connection subsystem deployed on a target terminal side, and a WiFi network authentication subsystem deployed on a wireless network side, wherein the WiFi network connection subsystem is used to obtain cell information of a target service cell where the target terminal is located in a current period, and report the cell information to the WiFi network authentication subsystem; the WiFi network authentication subsystem is used to determine whether the target service cell is covered by a WiFi network based on the cell information, and when the target service cell is covered by a target WiFi network, respond to a connection request of the WiFi network connection subsystem to the target WiFi network; perform a security check on the target terminal, and when the target terminal passes the security check, determine the target terminal identification information corresponding to the target MAC address of the target terminal, and send encrypted information obtained by encrypting the target MAC address and indication information for indicating data transmission through the target WiFi network to the WiFi network connection subsystem according to the target terminal identification information; the WiFi network connection subsystem is also used to decrypt the encrypted information, and determine whether the decrypted MAC address is the same as the target MAC address, and when the decrypted MAC address is the same as the target MAC address, control the target terminal to transmit data through the target WiFi network according to the indication information.

[0007] Optionally, the WiFi network connection subsystem includes: a service cell monitoring module, wherein the service cell monitoring module is used to periodically obtain cell information of the service cell where the target terminal is located, and report the cell information of the target service cell where the target terminal is located in the current period to the WiFi network authentication subsystem, wherein the cell information includes at least one of the following: a physical cell identifier, a base station identifier of a base station where the service cell is located, and a group code of a cell group to which the service cell belongs.

[0008] Optionally, the data transmission system further includes: a WiFi network connection cooperation subsystem connected to the WiFi network authentication subsystem, and the WiFi network connection cooperation subsystem includes: a connection authentication information generation module, the WiFi network authentication subsystem includes: a terminal air interface connection authentication module, and the WiFi network connection subsystem also includes: a connection authentication information storage module, wherein the connection authentication information generation module is used to periodically generate connection authentication information for each WiFi network according to a preset information generation rule, and store the connection authentication information in a preset database, wherein the connection authentication information includes: an SSID name and a corresponding SSID connection password; the terminal air interface connection authentication module is used to store the cell information with the WiFi network. The preset wireless indoor distributed system cell group information is matched to obtain a corresponding matching result, wherein the wireless indoor distributed system cell group information includes multiple cell groups and a WiFi network covering each cell group, and each cell group includes multiple cells covered by the same WiFi network; when the matching result is a successful match, the target WiFi network covered in the target service cell is determined; the target connection authentication information of the target WiFi network is obtained from the connection authentication information generation module, and the target connection authentication information is fed back to the connection authentication information storage module, which is used to record the target connection authentication information in the historical connection database of the target terminal, and set the use priority of the target connection authentication information to the highest priority.

[0009] Optionally, the WiFi network connection collaboration subsystem also includes: a WiFi network coding module and a terminal MAC address authentication module, wherein the WiFi network coding module is used to obtain the MAC addresses of all access points of the target WiFi network, and encode the MAC addresses of all access points using a preset coding method to obtain corresponding target network coding information; the terminal MAC address authentication module is used to perform a security check on the target terminal based on the target MAC address when the connection request of the WiFi network connection subsystem is successfully responded to by the WiFi network authentication subsystem, and when the check passes, send the target network coding information to the WiFi network authentication subsystem.

[0010] Optionally, the terminal MAC address authentication module is also used to add the target MAC address to a preset connection state MAC address list; determine whether the target MAC address is in a preset white list MAC address list, wherein the white list MAC address list stores the MAC addresses of multiple terminals that use the target WiFi network for data transmission; if the target MAC address is in the white list MAC address list, add the target MAC address to a preset business state MAC address list to determine that the target terminal passes the security check.

[0011] Optionally, the WiFi network authentication subsystem also includes: a terminal identification module and an encryption module, wherein the terminal identification module is used to determine the target terminal identification information corresponding to the target MAC address from a preset terminal identification set, wherein the terminal identification set stores the correspondence between the MAC addresses of multiple terminals in the whitelist MAC address list of the target WiFi network and the terminal identification information, and the terminal identification information includes at least one of the following: a globally unique temporary identifier, an international mobile user identity code; the encryption module is used to encrypt the target MAC address and the indication information for indicating data transmission through the target WiFi network according to a preset encryption key to obtain encrypted information; and send the encrypted information to the WiFi network connection subsystem through a 5G network message according to the target terminal identification information.

[0012] Optionally, the WiFi network connection subsystem also includes: a decryption module and a data transmission control module, wherein the decryption module is used to use a preset decryption key to decrypt the encrypted information to obtain a corresponding decryption result; whether the MAC address in the decryption result is the same as the target MAC address; when the MAC address in the decryption result is different from the target MAC address, it is determined that the target WiFi network has not passed the security check; when the MAC address in the decryption result is the same as the target MAC address, it is determined that the target WiFi network has passed the security check; the data transmission control module is used to not use the target WiFi network for data transmission when the target WiFi network has not passed the security check; when the target WiFi network has passed the security check, control the target terminal to transmit data through the target WiFi network according to the indication information.

[0013] Optionally, the WiFi network connection subsystem also includes: a network performance monitoring module, wherein the network performance monitoring module is used to periodically monitor the network performance of the target WiFi network, wherein the network performance includes at least one of the following: received signal strength, carrier-to-interference ratio; a data transmission control module, which is used to continue to control the target terminal to transmit data through the target WiFi network when the network performance of the target WiFi network in multiple cycles is not lower than a preset network performance threshold; when the network performance of the target WiFi network in multiple cycles is lower than a preset network performance threshold, stop the target terminal from transmitting data through the target WiFi network, and control the target terminal to use a cellular data network for data transmission.

[0014] Optionally, a service cell monitoring module is used to monitor whether the target service cell where the target terminal is located in the current target period belongs to the target cell group of the target WiFi network, wherein the target cell group includes multiple cells within the coverage of the target WiFi network; a data transmission control module is used to continue to control the target terminal to transmit data through the target WiFi network when the target service cell belongs to the target cell group; when the target service cell does not belong to the target cell group, determine the duration of the target terminal's stay in the target service cell; when the duration does not exceed a preset duration threshold, continue to control the target terminal to transmit data through the target WiFi network; when the duration exceeds a preset duration threshold, stop the target terminal from transmitting data through the target WiFi network, and control the target terminal to use a cellular data network for data transmission.

[0015] According to another aspect of an embodiment of the present application, a data transmission method is also provided, which is applied to a WiFi network connection subsystem, including: obtaining cell information of a target service cell where a target terminal is located in a current cycle; reporting the cell information to a WiFi network authentication subsystem, and obtaining encrypted information fed back by the WiFi network authentication subsystem, wherein the WiFi network authentication subsystem is used to determine whether the target service cell is covered by a WiFi network based on the cell information, and when the target service cell is covered by a target WiFi network, respond to a connection request of the WiFi network connection subsystem to the target WiFi network; performing a security check on the target terminal, and when the target terminal passes the security check, determining target terminal identification information corresponding to a target MAC address of the target terminal, and encrypting the target MAC address and indication information for indicating data transmission through the target WiFi network according to the target terminal identification information to send encrypted information to the WiFi network connection subsystem; decrypting the encrypted information, and determining whether the decrypted MAC address is the same as the target MAC address, and when the decrypted MAC address is the same as the target MAC address, controlling the target terminal to transmit data through the target WiFi network according to the indication information.

[0016] According to another aspect of an embodiment of the present application, a data transmission method is also provided, which is applied to a WiFi network authentication subsystem, including: obtaining cell information of a target service cell where a target terminal is located in a current period reported by a WiFi network connection subsystem; determining whether the target service cell is covered by a WiFi network based on the cell information, and responding to a connection request of the WiFi network connection subsystem to the target WiFi network when the target service cell is covered by the target WiFi network; performing a security check on the target terminal, and when the target terminal passes the security check, determining the target terminal identification information corresponding to the target MAC address of the target terminal, and encrypting the target MAC address and the indication information for indicating data transmission through the target WiFi network according to the target terminal identification information to send the encrypted information to the WiFi network connection subsystem, wherein the WiFi network connection subsystem is used to decrypt the encrypted information, and determine whether the decrypted MAC address is the same as the target MAC address, and when the decrypted MAC address is the same as the target MAC address, control the target terminal to transmit data through the target WiFi network according to the indication information.

[0017] According to another aspect of an embodiment of the present application, a non-volatile storage medium is further provided, the non-volatile storage medium including a stored computer program, wherein a device where the non-volatile storage medium is located executes the above-mentioned data transmission method by running the computer program.

[0018] According to another aspect of an embodiment of the present application, a computer program product is further provided. The computer program product includes a stored computer program, wherein the computer program implements the above-mentioned data transmission method when executed by a processor.

[0019] In the embodiment of the present application, the WiFi network connection subsystem in the data transmission system performs a security check on the target WiFi network covering the target service cell where the target terminal is located in the current period, and the WiFi network authentication subsystem performs a security check on the target terminal, thereby realizing two-way authentication between the target WiFi network and the target terminal, ensuring the security of the target terminal and the target WiFi network, thereby solving the technical problem of low security of the entire system due to the lack of terminal security verification of the WiFi network in the relevant data transmission technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0021] Figure 1is a schematic structural diagram of an optional data transmission system according to an embodiment of the present application;

[0022] Figure 2 is a structural schematic diagram of a computer device (mobile device) for implementing a data transmission method according to an embodiment of the present application;

[0023] Figure 3 is a flowchart of an optional data transmission method according to an embodiment of the present application;

[0024] Figure 4 It is a flowchart of another optional data transmission method according to an embodiment of the present application. DETAILED DESCRIPTION

[0025] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0026] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0027] In addition, the relevant information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for display, data for analysis, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties. For example, an interface is set up between this system and the relevant user or organization. Before obtaining relevant information, it is necessary to send an acquisition request to the aforementioned user or organization through the interface, and obtain relevant information after receiving the consent information fed back by the aforementioned user or organization.

[0028] Example 1

[0029] According to the embodiment of the present application, there is provided Figure 1The data transmission system 10 shown in FIG. Figure 1 As shown, the system 10 includes: a WiFi network connection subsystem 11 deployed on the target terminal side, and a WiFi network authentication subsystem 12 deployed on the wireless network side, and the WiFi network connection subsystem 11 and the WiFi network authentication subsystem 12 can realize data transmission according to the following interactive process, including:

[0030] First, the WiFi network connection subsystem 11 can obtain the cell information of the target service cell where the target terminal is located in the current cycle, and report the cell information to the WiFi network authentication subsystem 12;

[0031] Next, the WiFi network authentication subsystem 12 may determine whether the target service cell is covered by a WiFi network based on the cell information, and respond to the WiFi network connection subsystem's connection request to the target WiFi network when the target service cell is covered by the target WiFi network;

[0032] Then, the WiFi network authentication subsystem 12 can perform a security check on the target terminal, and when the target terminal passes the security check, determine the target terminal identification information corresponding to the target MAC address of the target terminal, and encrypt the target MAC address and the indication information for indicating data transmission through the target WiFi network according to the target terminal identification information and send the encrypted information obtained by encrypting the target MAC address to the WiFi network connection subsystem 11;

[0033] Finally, the WiFi network connection subsystem 11 can decrypt the encrypted information and determine whether the decrypted MAC address is the same as the target MAC address. When the decrypted MAC address is the same as the target MAC address, the target terminal is controlled to transmit data through the target WiFi network according to the instruction information.

[0034] In the above interaction process, the WiFi network authentication subsystem 12 can authenticate the target terminal, and the WiFi network connection subsystem 11 can also authenticate the target WiFi network, thereby realizing two-way authentication between the target terminal and the target WiFi network, and ensuring the security of the target WiFi network and the target terminal.

[0035] Specifically, the data transmission system 10 in the embodiment of the present application is mainly divided into the following three steps when performing bidirectional authentication on the target terminal and the target WiFi network:

[0036] Step S1: The target WiFi network authenticates the legitimacy of the air interface connection of the target terminal.

[0037] The relevant structures involved in step S1 in the above-mentioned data transmission system 10 will be described below.

[0038] The WiFi network connection subsystem 11 includes a service cell monitoring module 111. Specifically, the service cell monitoring module 111 can periodically obtain the cell information of the service cell where the target terminal is located, and report the cell information of the target service cell where the target terminal is located in the current period to the WiFi network authentication subsystem 12, wherein the cell information includes but is not limited to: physical cell identity (Physical Cell Identity, PCI), base station identity of the base station where the service cell is located (i.e., gNodeB ID), group code (Cell ID) of the cell group to which the service cell belongs, etc.

[0039] In addition, the data transmission system 10 further includes: a WiFi network connection cooperation subsystem 13 connected to the WiFi network authentication subsystem 12, and the WiFi network connection cooperation subsystem 13 includes: a connection authentication information generation module 131, the WiFi network authentication subsystem 12 includes: a terminal air interface connection authentication module 121, and the WiFi network connection subsystem 11 also includes: a connection authentication information storage module 112, wherein,

[0040] The connection authentication information generation module 131 can periodically generate connection authentication information for each WiFi network according to a preset information generation rule, and store the connection authentication information in a preset database, wherein the connection authentication information includes: an SSID name and a corresponding SSID connection password.

[0041] The reason why the connection authentication information generation module 131 adopts the scheme of periodically and dynamically generating the connection authentication information of each WiFi network is that the SSID names of existing WiFi networks are all in plain text and the SSID names are fixed for a long time, which makes them easy to become the target of wireless air interface cracking. In this way, the dynamic generation of connection authentication information can effectively improve the wireless air interface security of the WiFi network.

[0042] The terminal air interface connection authentication module 121 can match the cell information with the preset wireless indoor distributed system cell group information to obtain a corresponding matching result, wherein the wireless indoor distributed system cell group information includes multiple cell groups and a WiFi network covering each cell group, and each cell group includes multiple cells covered by the same WiFi network; when the matching result is a successful match, it is determined that the target service cell is covered by a WiFi network, and the target WiFi network covered in the target service cell is determined; the target connection authentication information of the target WiFi network is obtained from the connection authentication information generation module 131, and the target connection authentication information is fed back to the connection authentication information storage module 112;

[0043] In addition, the connection authentication information storage module 112 may record the target connection authentication information in a historical connection database of the target terminal, and set the use priority of the target connection authentication information to the highest priority.

[0044] Therefore, the above step S1 can be implemented by the interaction between the various modules introduced above and according to the following subdivided steps, including:

[0045] Step S11, when the target terminal reselects / switches from the outdoor to the 5G indoor sector, the serving cell monitoring module 111 may report the cell information of the target serving cell where the target terminal is currently located to the terminal air interface connection authentication module 121 in the WiFi network authentication subsystem 12;

[0046] Step S12, the terminal air interface connection authentication module 121 may match the cell information with the cell group information of the wireless indoor distributed system to obtain a corresponding matching result, wherein the cell group information of the wireless indoor distributed system includes multiple cells and a WiFi network covering each cell;

[0047] Step S13, when the matching result is a match failure, the terminal air interface connection authentication module 121 determines that the target serving cell is not covered by the target WiFi network;

[0048] Step S14, when the matching result is successful, the terminal air interface connection authentication module determines the target WiFi network covered in the target service cell;

[0049] Step S15, the terminal air interface connection authentication module 121 obtains the target connection authentication information of the target WiFi network from the connection authentication information generation module 131, and feeds the target connection authentication information back to the connection authentication information storage module 112;

[0050] Step S16, the connection authentication information storage module 112 may record the target connection authentication information in a historical connection database of the target terminal, and set the use priority of the target connection authentication information to the highest priority.

[0051] It should be noted that when the connection authentication information storage module 112 sets the use priority of the target connection authentication information as the highest priority, the use priority of the connection authentication information previously connected to the WiFi network needs to be lowered.

[0052] Step S2: The target WiFi network authenticates the legitimacy of the MAC address of the target terminal.

[0053] The relevant structures involved in step S2 in the above data transmission system 10 will be described below.

[0054] The WiFi network connection cooperation subsystem 13 also includes: a WiFi network coding module 132 and a terminal MAC address authentication module 133, wherein:

[0055] The WiFi network encoding module 132 may obtain the MAC addresses of all access points of the target WiFi network, and encode the MAC addresses of all access points using a preset encoding method to obtain corresponding target network encoding information.

[0056] That is to say, the WiFi network encoding module 132 encodes the MAC addresses of all APs in the access point AP address list, wherein the encoding method includes but is not limited to: string encoding, compressed encoding, hexadecimal encoding, decimal encoding, binary encoding, etc. This application does not make any specific restrictions on the encoding method.

[0057] The terminal MAC address authentication module 133 can perform a security check on the target terminal according to the target MAC address when the connection request of the WiFi network connection subsystem is successfully responded by the WiFi network authentication subsystem, and send the target network coding information to the WiFi network authentication subsystem 12 when the check passes.

[0058] Therefore, the above step S2 can be implemented by the interaction between the various modules introduced above and according to the following subdivided steps, including:

[0059] Step S21 , the terminal MAC address authentication module 133 responds to the connection request of the WiFi network connection subsystem 11 to the target WiFi network.

[0060] It can be understood that the WiFi network connection subsystem 11 turns on the WiFi switch of the target terminal, connects to the network corresponding to the SSID name according to the target connection authentication information of the target WiFi network, and automatically enters the SSID connection password. However, the target terminal is not allowed to start data transmission at this time.

[0061] Step S22, when the connection request of the WiFi network connection subsystem is successfully responded by the WiFi network authentication subsystem, the terminal MAC address authentication module 133 performs security verification on the target terminal according to the target MAC address and through the following steps:

[0062] Step S221, adding the target MAC address to a preset connection state MAC address list, wherein the connection state MAC address list includes multiple MAC addresses that have established a connection with the target WiFi network;

[0063] Step S222, determining whether the target MAC address is in the whitelist MAC address list, wherein the whitelist MAC address list stores MAC addresses of multiple terminals that use the target WiFi network for data transmission;

[0064] Step S223, when the target MAC address is in the whitelist MAC address list, the target MAC address is added to the preset business state MAC address list, and it is determined that the target terminal passes the security check, wherein the business state MAC address list includes multiple MAC addresses of terminals that have passed the security check of the target WiFi network.

[0065] In the above steps S221-S223, it is considered that after the target terminal and the target WiFi network complete the first two-way authentication, since the target connection authentication information of the target WiFi network is constantly and dynamically updated, if the ordinary authentication process is adopted, after each dynamic update of the target connection authentication information, it is necessary to re-perform a two-way authentication between the target terminal and the target WiFi network, thereby greatly increasing the load of the data transmission system, and the two-way authentication takes a certain amount of time, which will seriously affect the user's service perception. Therefore, in order to take into account security, system load and user perception, the embodiment of the present application proposes to keep the business state MAC address list unchanged in the subsequent two-way authentication stage between the target terminal and the target WiFi network, so that when the target WiFi network performs subsequent authentication on the target terminal, it can directly query the business state MAC address list, thereby greatly simplifying the two-way authentication process.

[0066] It should be noted that although the terminal MAC address authentication module 133 adds the target MAC address to the service state MAC address list, since the WiFi network connection subsystem 11 has not authenticated the target WiFi network, data transmission is still currently not possible through the target WiFi network.

[0067] Step S23 , the terminal MAC address authentication module 133 obtains target network coding information from the WiFi network coding module 132 .

[0068] In step S24 , the terminal MAC address authentication module 133 sends the target network coding information to the WiFi network authentication subsystem 12 .

[0069] It should be noted that the terminal MAC address authentication module 133 can also send the target MAC address to the WiFi network authentication subsystem 12 belonging to the "network side" to facilitate network authentication of the terminal; and the WiFi network authentication subsystem 12 can also send the MAC addresses of all connection points of the target WiFi network to the WiFi network connection subsystem 11 belonging to the "terminal side" to facilitate terminal authentication of the network. Therefore, when the target terminal subsequently connects to the target WiFi network, fast two-way authentication between the target terminal and the target WiFi network can be achieved.

[0070] Step S3: The target terminal authenticates the legitimacy of the target WiFi network.

[0071] The relevant structures involved in step S3 in the above-mentioned data transmission system 10 will be described below.

[0072] The WiFi network authentication subsystem 12 further includes: a terminal identification module 122 and an encryption module 123, wherein:

[0073] The terminal identification module 122 can determine the target terminal identification information corresponding to the target MAC address from a preset terminal identification set, wherein the terminal identification set stores the correspondence between the MAC addresses of multiple terminals in the whitelist MAC address list of the target WiFi network and the terminal identification information, and the terminal identification information includes but is not limited to: (4G / 5G) Globally Unique Temporary Identifier (GUTI), International Mobile Subscriber Identity (IMSI), Temporary Mobile Subscriber Identity (TMSI), etc.

[0074] The encryption module 123 can encrypt the target MAC address and the indication information for indicating data transmission through the target WiFi network according to the preset encryption key to obtain encrypted information; and send the encrypted information to the WiFi network connection subsystem 11 through a 5G network message according to the target terminal identification information.

[0075] The WiFi network connection subsystem 11 also includes: a decryption module 113 and a data transmission control module 114, wherein:

[0076] The decryption module 113 can use a preset decryption key to decrypt the encrypted information to obtain a corresponding decryption result; whether the MAC address in the decryption result is the same as the target MAC address; when the MAC address in the decryption result is different from the target MAC address, it is determined that the target WiFi network has not passed the security check; when the MAC address in the decryption result is the same as the target MAC address, it is determined that the target WiFi network has passed the security check.

[0077] Furthermore, the data transmission control module 114 may not use the target WiFi network for data transmission when the target WiFi network fails the security check; when the target WiFi network passes the security check, the target terminal may be controlled to transmit data through the target WiFi network according to the instruction information.

[0078] In addition, when the target WiFi network passes the security check, the WiFi network connection subsystem 11 can also store the MAC addresses of all access points in the target WiFi network on the terminal side, that is, store the relevant information of the target WiFi network. In this way, in the subsequent two-way authentication stage between the target terminal and the target WiFi network, the target terminal can directly compare the MAC address of the access point it is connected to with the MAC addresses of all access points in the pre-stored target WiFi network. If they are included, it is determined that the target WiFi network has passed the security check, which greatly simplifies the two-way authentication process and improves user perception.

[0079] It should be noted that the encryption key used in the above-mentioned encryption module 123 and the decryption key used in the decryption module 113 are obtained through pre-negotiation, and this application does not make any specific restrictions on the encryption algorithm and decryption algorithm used to generate the encryption key and decryption key.

[0080] Therefore, the above step S3 can be implemented by the interaction between the various modules introduced above and according to the following subdivided steps, including:

[0081] Step S31, the terminal identification module 122 determines the target terminal identification information corresponding to the target MAC address from the preset terminal identification set;

[0082] Step S32, the encryption module 123 encrypts the target MAC address and the instruction information for instructing data transmission through the target WiFi network (i.e., opening the data transmission channel of the target WiFi network) according to a preset encryption key to obtain encrypted information;

[0083] Step S33, the encryption module 123 sends the encrypted information to the decryption module 113 of the WiFi network connection subsystem 11 according to the target terminal identification information;

[0084] Step S34, the decryption module 113 uses a preset decryption key to decrypt the encrypted information to obtain a corresponding decryption result;

[0085] Step S35, whether the MAC address in the decryption result is the same as the target MAC address;

[0086] Step S36, when the MAC address in the decryption result is not the same as the target MAC address, it is determined that the target WiFi network has not passed the security check, and in this case, the data transmission control module 114 does not use the target WiFi network for data transmission;

[0087] Step S37, when the MAC address in the decryption result is the same as the target MAC address, it is determined that the target WiFi network passes the security check, and in this case, the data transmission control module 114 controls the target terminal to transmit data through the target WiFi network according to the instruction information.

[0088] After the target terminal and the target WiFi network complete the two-way authentication through the above steps S1-S3, the target terminal can use the target WiFi network to perform data transmission. The frequency band of the target WiFi network used by the target terminal can be selected according to actual conditions, and is generally preferably set to 5GHz.

[0089] Furthermore, when the target terminal transmits data through the target WiFi network, the 5G wireless indoor distribution system signal quality deviation or the target WiFi network deviation may occur in some local areas. In order to ensure that the target terminal can process the service normally, the corresponding data transmission switching mechanism can be set for the following two situations.

[0090] Scenario 1: The target serving cell where the target terminal is currently located belongs to the target cell group of the target WiFi network, but the network quality of the target WiFi network does not meet the requirements in a short period of time.

[0091] The above situation can be understood as, in the 5G wireless indoor distribution system, when the target service cell (PCI) where the target terminal is currently located belongs to the target cell group (PCI of multiple cells) of the target WiFi network, it means that the target terminal is still in the coverage of the target WiFi network, but in fact, the coverage of the target WiFi network may be smaller than the coverage of the 5G wireless indoor distribution system, making the target terminal located outside the coverage of the target WiFi network.

[0092] In this case, the data transmission control module 114 and the network performance monitoring module 115 in the WiFi network connection subsystem 11 may interact in the following manner to ensure that the target terminal can process services normally using the wireless network:

[0093] First, the network performance monitoring module 115 can periodically monitor the network performance of the target WiFi network, wherein the network performance includes but is not limited to: received signal strength (RSSI), carrier-to-interference ratio (C / 1), etc.;

[0094] Then, the data transmission control module 114 can continue to control the target terminal to transmit data through the target WiFi network when the network performance of the target WiFi network in multiple cycles is not lower than the preset network performance threshold; and when the network performance of the target WiFi network in multiple cycles is lower than the preset network performance threshold, stop the target terminal from transmitting data through the target WiFi network, and control the target terminal to use the cellular data network for data transmission.

[0095] The specific time length of each cycle can be set by oneself, such as monitoring once every two minutes, and the data transmission control system monitoring the network performance of multiple cycles can be monitoring the network performance of multiple consecutive cycles.

[0096] For example, if the target service currently located by the target terminal belongs to the target cell group of the target WiFi network, but the network signal quality of the target service cell does not meet the requirements in a short time, the WiFi network connection subsystem 11 can measure the network quality of the target WiFi network once every 2 seconds through the network performance monitoring module 115, and measure 10 times in succession to obtain corresponding measurement data; when the 10 sets of measurement data obtained are not lower than the specified network performance threshold, the data transmission control module 114 continues to control the target terminal to transmit data through the target WiFi network; when the 10 sets of measurement data obtained are all lower than the specified network performance threshold, the target terminal is controlled to stop transmitting data through the target WiFi network, and the target terminal is controlled to use the cellular data network for data transmission (that is, the data transmission channel of the target WiFi network is closed, and the data transmission channel of the cellular data network is opened).

[0097] Scenario 2: The network quality of the target WiFi network meets the requirements in a short period of time, but the target serving cell where the target terminal is currently located does not belong to the target cell group of the target WiFi network.

[0098] The above situation can be understood as follows: within the target WiFi network, when the target terminal moves to a certain area, the target serving cell (PCI) where the target terminal is currently located may not belong to the target cell group (PCI of multiple cells) of the target WiFi network, and after a short period of time, the target serving cell (PCI) where the target terminal is currently located belongs to the target cell group (PCI of multiple cells) of the target WiFi network again. For example, the target terminal is at a high-rise window position.

[0099] In this case, the serving cell monitoring module 111 and the data transmission control module 114 in the WiFi network connection subsystem 11 may interact in the following manner to ensure that the target terminal can process services normally using the wireless network:

[0100] First, the serving cell monitoring module 111 monitors whether the target serving cell where the target terminal is located in the current cycle belongs to the target cell group of the target WiFi network, wherein the target cell group includes multiple cells within the coverage of the target WiFi network;

[0101] In the case where the target serving cell belongs to the target cell group, the data transmission control module 114 continues to control the target terminal to perform data transmission through the target WiFi network;

[0102] In the case where the target serving cell does not belong to the target cell group, the data transmission control module 114 determines the duration of the target terminal's stay in the target serving cell;

[0103] When the duration does not exceed the preset duration threshold, the data transmission control module 114 continues to control the target terminal to transmit data through the target WiFi network;

[0104] When the duration exceeds a preset duration threshold, the data transmission control module 114 stops the target terminal from transmitting data through the target WiFi network, and controls the target terminal to use the cellular data network for data transmission.

[0105] The above control process can be understood as follows: when the target terminal is within the coverage of the target WiFi network and the target terminal turns on the WiFi function, the serving cell monitoring module 111 can periodically monitor whether the serving cell where the target terminal is located belongs to the target cell group of the target WiFi network. If it is monitored that the target service cell where the target terminal is located belongs to the target cell group of the target WiFi network, the data transmission control module 114 continues to control the target terminal to perform data transmission through the target WiFi network; conversely, if it is monitored that the target service cell where the target terminal is located does not belong to the target cell group of the target WiFi network, a preset timer can be started, and the timer can be used to detect and determine the cumulative duration of the target terminal's stay in the target service cell, wherein: when the cumulative duration exceeds a preset duration threshold (such as 5 minutes), it indicates that the target terminal has currently left the coverage of the target WiFi network, so at this time the data transmission control module 114 can stop the target terminal from performing data transmission through the target WiFi network, and control the target terminal to perform data transmission using the cellular data network; and when the cumulative duration does not exceed the preset duration threshold (such as 5 minutes), it indicates that the target terminal is currently still in the coverage of the target WiFi network, so the data transmission control module 114 continues to control the target terminal to perform data transmission through the target WiFi network.

[0106] In addition, when the serving cell where the target terminal is located in the current cycle does not belong to the cell group of the target WiFi network, the target terminal is connected to the target WiFi network, but stops data transmission through the target WiFi network.

[0107] In this case, the data transmission control module 114 may continue to perform network switching in the following manner to ensure that the target terminal can process services normally using the wireless network:

[0108] First, the data transmission control module 114 may periodically monitor the network performance of the target WiFi network;

[0109] When the network performance of the target WiFi network is lower than a preset network performance threshold in multiple cycles, the target terminal is stopped from transmitting data through the target WiFi network, and the target terminal is controlled to use a cellular data network for data transmission;

[0110] When the network performance of the target WiFi network in multiple cycles is higher than the preset network performance threshold, the target terminal continues to be controlled to transmit data through the target WiFi network.

[0111] In particular, in order to reduce the energy consumption of the terminal, the embodiment of the present application may further add an indication module in the WiFi network connection subsystem 11. The indication module may prompt the target terminal through a first prompt message that the target terminal is in the coverage of the target WiFi network, but the target terminal is not connected to the target WiFi network; prompt the target terminal through a second prompt message that after the target terminal and the target WiFi network have completed two-way authentication, the target terminal is performing data transmission through the target WiFi network; and prompt the target terminal through a third prompt message that the target terminal has currently left the coverage of the target WiFi network.

[0112] For example, the above-mentioned indication module may be a function light, and the corresponding first prompt message may be that the function light continues to flash slowly, the second prompt message may be that the function light is always on, and the third prompt message may be that the function light is off.

[0113] In the above data transmission system 10, by dynamically generating the target authentication connection information of the target WiFi network, the security of the air interface connection of the target WiFi network can be ensured; two-way authentication is performed between the target terminal and the target WiFi network, so that the security of the target terminal and the target WiFi network is improved; in addition, according to the access of the target terminal to the target WiFi network, the data transmission mode is adaptively adjusted, and when the target WiFi network is not used for data transmission, the data transmission channel of the target WiFi network is closed in time or the WiFi switch of the terminal is turned off. This not only ensures that the business processing of the target terminal can be processed continuously under any circumstances, but also prevents the terminal from being in a high energy consumption state for a long time, accelerating the power consumption of the mobile phone.

[0114] Example 2

[0115] According to an embodiment of the present application, a method embodiment of a data transmission method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions (i.e., a WiFi network connection subsystem), and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0116] The method embodiments provided in the embodiments of the present application may be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 2 The structure block diagram of a computer device (mobile terminal) for implementing the data transmission method is shown. Figure 2As shown, the computer terminal 20 (or mobile device 20) may include one or more (202a, 202b, ..., 202n are used to illustrate) processors 202 (the processor 202 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 204 for storing data, and a transmission device 206 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 2 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 2 More or fewer components as shown, or with Figure 2 Different configurations are shown.

[0117] It should be noted that the one or more processors 202 and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 20 (or mobile device). As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0118] The memory 204 can be used to store software programs and modules of application software, such as program instructions / data storage devices corresponding to the data transmission method in the embodiment of the present application. The processor 202 executes various functional applications and data processing by running the software programs and modules stored in the memory 204, that is, the data transmission method of the above-mentioned application is realized. The memory 204 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 204 may further include a memory remotely arranged relative to the processor 202, and these remote memories may be connected to the computer terminal 20 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0119] The transmission device 206 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 20. In one example, the transmission device 206 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 206 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0120] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 20 (or mobile device).

[0121] In the above operating environment, Figure 3 is a flow chart of an optional data transmission method according to an embodiment of the present application, such as Figure 3 As shown, the method at least includes steps S302-S306, wherein:

[0122] Step S302, obtaining the cell information of the target serving cell where the target terminal is located in the current cycle.

[0123] Step S304: Report the cell information to the WiFi network authentication subsystem, and obtain the encrypted information fed back by the WiFi network authentication subsystem.

[0124] The WiFi network authentication subsystem can determine whether the target service cell is covered by the WiFi network based on the cell information, and respond to the connection request of the WiFi network connection subsystem to the target WiFi network when the target service cell is covered by the target WiFi network; perform security verification on the target terminal, and when the target terminal passes the security verification, determine the target terminal identification information corresponding to the target MAC address of the target terminal, and send the encrypted information obtained by encrypting the target MAC address and the indication information for indicating data transmission through the target WiFi network to the WiFi network connection subsystem according to the target terminal identification information;

[0125] Step S306, decrypt the encrypted information and determine whether the decrypted MAC address is the same as the target MAC address. When the decrypted MAC address is the same as the target MAC address, control the target terminal to transmit data through the target WiFi network according to the instruction information.

[0126] It should be noted that the interaction process between the WiFi network connection subsystem and the WiFi network authentication subsystem through the above steps S302-S306 has been specifically described in the embodiment, and will not be repeated here.

[0127] Example 3

[0128] According to an embodiment of the present application, a method embodiment of a data transmission method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a WiFi network authentication subsystem such as a set of computer executable instructions, and the WiFi network authentication subsystem can be specifically referred to. Figure 2 , and, although a logical order is shown in the flow charts, in some cases, the steps shown or described may be performed in an order different from that shown here.

[0129] In the above Figure 2 In the WiFi network authentication subsystem structure shown, Figure 4 is a flow chart of an optional data transmission method according to an embodiment of the present application, such as Figure 4 As shown, the method at least includes steps S402-S406, wherein:

[0130] Step S402: Obtain cell information of a target serving cell where the target terminal is located in the current cycle, as reported by the WiFi network connection subsystem.

[0131] Step S404: determine whether the target service cell is covered by a WiFi network based on the cell information, and respond to the WiFi network connection subsystem's connection request to the target WiFi network when the target service cell is covered by the target WiFi network.

[0132] Step S406, performing a security check on the target terminal, and when the target terminal passes the security check, determining the target terminal identification information corresponding to the target MAC address of the target terminal, and encrypting the target MAC address and the indication information for indicating data transmission through the target WiFi network according to the target terminal identification information, and sending the encrypted information obtained by encrypting the target MAC address to the WiFi network connection subsystem.

[0133] Among them, the above-mentioned WiFi network connection subsystem is used to decrypt the encrypted information and determine whether the decrypted MAC address is the same as the target MAC address. When the decrypted MAC address is the same as the target MAC address, the target terminal is controlled to transmit data through the target WiFi network according to the instruction information.

[0134] It should be noted that the interaction process between the WiFi network authentication subsystem and the WiFi network connection subsystem through the above steps S402-S406 has been specifically described in the embodiment, and will not be repeated here.

[0135] Example 4

[0136] According to an embodiment of the present application, a computer program product is also provided, which includes a stored computer program, wherein when the computer program is executed by a processor, the data transmission method in Embodiments 2 and 3 is implemented.

[0137] Optionally, the computer program executes the following steps: obtaining cell information of a target service cell where the target terminal is located in the current cycle; reporting the cell information to a WiFi network authentication subsystem, and obtaining encrypted information fed back by the WiFi network authentication subsystem, wherein the WiFi network authentication subsystem is used to determine whether the target service cell is covered by a WiFi network based on the cell information, and when the target service cell is covered by a target WiFi network, respond to a connection request of the WiFi network connection subsystem to the target WiFi network; performing a security check on the target terminal, and when the target terminal passes the security check, determining target terminal identification information corresponding to a target MAC address of the target terminal, and encrypting the target MAC address and indication information for indicating data transmission through the target WiFi network according to the target terminal identification information to send encrypted information to the WiFi network connection subsystem; decrypting the encrypted information, and determining whether the decrypted MAC address is the same as the target MAC address, and when the decrypted MAC address is the same as the target MAC address, controlling the target terminal to transmit data through the target WiFi network according to the indication information.

[0138] Optionally, the computer program executes the following steps: obtaining cell information of a target service cell where the target terminal is located in the current cycle as reported by the WiFi network connection subsystem; determining whether the target service cell is covered by a WiFi network based on the cell information, and responding to a connection request to the target WiFi network by the WiFi network connection subsystem when the target service cell is covered by the target WiFi network; performing a security check on the target terminal, and when the target terminal passes the security check, determining the target terminal identification information corresponding to the target MAC address of the target terminal, and encrypting the target MAC address and indication information for indicating data transmission through the target WiFi network according to the target terminal identification information to send encrypted information to the WiFi network connection subsystem, wherein the WiFi network connection subsystem is used to decrypt the encrypted information, and determine whether the decrypted MAC address is the same as the target MAC address, and when the decrypted MAC address is the same as the target MAC address, control the target terminal to transmit data through the target WiFi network according to the indication information.

[0139] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0140] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0141] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0142] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed over multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0143] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0144] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the relevant technology or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or CD-ROM and other media that can store program codes.

[0145] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A data transmission system, characterized in that: include: A WiFi network connection subsystem deployed on the target terminal side and a WiFi network authentication subsystem deployed on the wireless network side, wherein: The WiFi network connection subsystem is used to obtain the cell information of the target service cell where the target terminal is located in the current cycle, and report the cell information to the WiFi network authentication subsystem; The WiFi network authentication subsystem is configured to determine whether the target service cell is covered by a WiFi network based on the cell information, and respond to the connection request of the WiFi network connection subsystem to the target WiFi network when the target service cell is covered by the target WiFi network; perform a security check on the target terminal, and when the target terminal passes the security check, determine the target terminal identification information corresponding to the target media access control MAC address of the target terminal, and encrypt the target MAC address and the indication information for indicating data transmission through the target WiFi network according to the target terminal identification information and send the encrypted information obtained by encrypting the target MAC address to the WiFi network connection subsystem; The WiFi network connection subsystem is also used to decrypt the encrypted information and determine whether the decrypted MAC address is the same as the target MAC address, and when the decrypted MAC address is the same as the target MAC address, control the target terminal to transmit data through the target WiFi network according to the indication information.

2. The system according to claim 1, characterized in that The WiFi network connection subsystem includes: a service cell monitoring module, wherein: The serving cell monitoring module is used to periodically obtain the cell information of the serving cell where the target terminal is located, and report the cell information of the target serving cell where the target terminal is located in the current period to the WiFi network authentication subsystem, wherein the cell information includes at least one of the following: a physical cell identifier, a base station identifier of a base station where the serving cell is located, and a group code of a cell group to which the serving cell belongs.

3. The system according to claim 1, characterized in that The data transmission system further includes: a WiFi network connection cooperation subsystem connected to the WiFi network authentication subsystem, and the WiFi network connection cooperation subsystem includes: a connection authentication information generation module, the WiFi network authentication subsystem includes: a terminal air interface connection authentication module, and the WiFi network connection subsystem also includes: a connection authentication information storage module, wherein, The connection authentication information generation module is used to periodically generate connection authentication information of each WiFi network according to a preset information generation rule, and store the connection authentication information in a preset database, wherein the connection authentication information includes: a service set identifier SSID name and a corresponding SSID connection password; The terminal air interface connection authentication module is used to match the cell information with the preset wireless indoor distributed system cell group information to obtain a corresponding matching result, wherein the wireless indoor distributed system cell group information includes multiple cell groups and a WiFi network covering each of the cell groups, and each cell group includes multiple cells covered by the same WiFi network; when the matching result is a successful match, determine the target WiFi network covered in the target service cell; obtain the target connection authentication information of the target WiFi network from the connection authentication information generation module, and feed back the target connection authentication information to the connection authentication information storage module The connection authentication information storage module is used to record the target connection authentication information in the historical connection database of the target terminal, and set the use priority of the target connection authentication information to the highest priority.

4. The system according to claim 3, characterized in that The WiFi network connection cooperation subsystem also includes: a WiFi network coding module and a terminal MAC address authentication module, wherein: The WiFi network encoding module is used to obtain the MAC addresses of all access points of the target WiFi network, and encode the MAC addresses of all access points using a preset encoding method to obtain corresponding target network encoding information; The terminal MAC address authentication module is used to perform a security check on the target terminal according to the target MAC address when the connection request of the WiFi network connection subsystem is successfully responded to by the WiFi network authentication subsystem, and send the target network coding information to the WiFi network authentication subsystem when the check passes.

5. The system according to claim 4, characterized in that The terminal MAC address authentication module is further used to add the target MAC address to a preset connection state MAC address list; determine whether the target MAC address is in a preset white list MAC address list, wherein the white list MAC address list stores the MAC addresses of multiple terminals that use the target WiFi network for data transmission; if the target MAC address is in the white list MAC address list, add the target MAC address to a preset business state MAC address list to determine that the target terminal passes the security check.

6. The system according to claim 1, characterized in that The WiFi network authentication subsystem also includes: a terminal identification module and an encryption module, wherein: The terminal identification module is used to determine the target terminal identification information corresponding to the target MAC address from a preset terminal identification set, wherein the terminal identification set stores the correspondence between the MAC addresses of multiple terminals in the whitelist MAC address list of the target WiFi network and the terminal identification information, and the terminal identification information includes at least one of the following: a globally unique temporary identifier, an international mobile subscriber identity code; The encryption module is used to encrypt the target MAC address and the indication information for indicating data transmission through the target WiFi network according to a preset encryption key to obtain the encrypted information; and send the encrypted information to the WiFi network connection subsystem through a 5G network message according to the target terminal identification information.

7. The system according to claim 1, characterized in that The WiFi network connection subsystem also includes: a decryption module and a data transmission control module, wherein: The decryption module is used to decrypt the encrypted information using a preset decryption key to obtain a corresponding decryption result; whether the MAC address in the decryption result is the same as the target MAC address; when the MAC address in the decryption result is not the same as the target MAC address, it is determined that the target WiFi network has not passed the security check; when the MAC address in the decryption result is the same as the target MAC address, it is determined that the target WiFi network has passed the security check; The data transmission control module is used for not using the target WiFi network for data transmission when the target WiFi network fails to pass the security check; and for controlling the target terminal to transmit data through the target WiFi network according to the indication information when the target WiFi network passes the security check.

8. The system according to claim 1, characterized in that The WiFi network connection subsystem also includes: a network performance monitoring module, wherein: The network performance monitoring module is used to periodically monitor the network performance of the target WiFi network, wherein the network performance includes at least one of the following: received signal strength and carrier-to-interference ratio; The data transmission control module is used to continue controlling the target terminal to transmit data through the target WiFi network when the network performance of the target WiFi network in multiple cycles is not lower than a preset network performance threshold; when the network performance of the target WiFi network in multiple cycles is lower than the preset network performance threshold, stop the target terminal from transmitting data through the target WiFi network, and control the target terminal to use a cellular data network for data transmission.

9. The system according to claim 8, characterized in that The serving cell monitoring module is used to monitor whether the target serving cell where the target terminal is located in the current target period belongs to the target cell group of the target WiFi network, wherein the target cell group includes multiple cells within the coverage of the target WiFi network; The data transmission control module is used to, when the target service cell belongs to the target cell group, continue to control the target terminal to transmit data through the target WiFi network; when the target service cell does not belong to the target cell group, determine the duration of the target terminal's stay in the target service cell; when the duration does not exceed a preset duration threshold, continue to control the target terminal to transmit data through the target WiFi network; when the duration exceeds a preset duration threshold, stop the target terminal from transmitting data through the target WiFi network, and control the target terminal to use a cellular data network for data transmission.

10. A data transmission method, characterized in that: include: The method is applied to a WiFi network connection subsystem, and includes: Obtain cell information of a target serving cell where the target terminal is located in the current cycle; Reporting the cell information to the WiFi network authentication subsystem, and obtaining the encrypted information fed back by the WiFi network authentication subsystem, wherein the WiFi network authentication subsystem is used to determine whether the target service cell is covered by a WiFi network based on the cell information, and respond to the connection request of the WiFi network connection subsystem to the target WiFi network when the target service cell is covered by the target WiFi network; performing a security check on the target terminal, and when the target terminal passes the security check, determining the target terminal identification information corresponding to the target MAC address of the target terminal, and encrypting the target MAC address and the indication information for indicating data transmission through the target WiFi network according to the target terminal identification information, and sending the encrypted information obtained by encrypting the target MAC address to the WiFi network connection subsystem; The encrypted information is decrypted, and it is determined whether the MAC address obtained by decryption is the same as the target MAC address. When the MAC address obtained by decryption is the same as the target MAC address, the target terminal is controlled to transmit data through the target WiFi network according to the indication information.

11. A data transmission method, characterized in that: include: The method is applied to a WiFi network authentication subsystem, and includes: Obtain cell information of the target service cell where the target terminal is located in the current cycle reported by the WiFi network connection subsystem; Verify whether the target serving cell is covered by a WiFi network based on the cell information, and respond to a connection request of the WiFi network connection subsystem to the target WiFi network when the target serving cell is covered by the target WiFi network; A security check is performed on the target terminal, and when the target terminal passes the security check, target terminal identification information corresponding to the target MAC address of the target terminal is determined, and encrypted information obtained by encrypting the target MAC address and indication information for indicating data transmission through the target WiFi network is sent to the WiFi network connection subsystem according to the target terminal identification information, wherein the WiFi network connection subsystem is used to decrypt the encrypted information, and determine whether the MAC address obtained by decryption is the same as the target MAC address, and when the MAC address obtained by decryption is the same as the target MAC address, control the target terminal to transmit data through the target WiFi network according to the indication information.

12. A computer program product, characterized in that include: A computer program, wherein when the computer program is executed by a processor, the data transmission method according to any one of claims 10 to 11 is implemented.

Images