Communication system and method supporting WAPI transmission, terminal and storage medium

Abstract

The invention belongs to the technical field of substation communication, and particularly provides a communication system and method supporting WAPI transmission, a terminal and a storage medium, the communication system comprises an authentication server AS, a WAPI wireless network and a plurality of WAPI mobile phone terminals, the WAPI mobile phone terminals are connected with the authentication server AS through the WAPI wireless network, and the authentication server AS configures addresses for the WAPI mobile phone terminals; the authentication server AS comprises a WAPI receiving unit, a WAPI verification unit and an association verification unit, and after the security verification is passed, the association verification unit is responsible for identifying the communication request. According to the communication system, an authentication server (AS) is introduced, a WAPI verification unit is arranged, and an accessed WAPI mobile phone terminal is strictly identified and verified. The verification mechanism ensures that only the authenticated and verified legal equipment can access the network and participate in communication, so that the safety of the whole communication system is remarkably enhanced.

Description

Technical Field

[0001] The present invention belongs to the technical field of substation communication, and in particular relates to a communication system, method, terminal and storage medium supporting WAPI transmission. Background Art

[0002] WAPI (Wireless LAN Authentication and Privacy Infrastructure) is a wireless LAN authentication and privacy infrastructure, a security protocol, and also a mandatory standard for wireless LAN security in China. Unlike WIFI's one-way encryption authentication, WAPI performs two-way authentication to ensure the security of transmission. It was first proposed by the State Key Laboratory of Integrated Business Network Theory and Key Technologies of Xidian University. Internet phone calls can be encrypted through WAPI, making calls more private and more secure, and the voice transmission efficiency is also at a high level.

[0003] Substation local communication includes wired communication network and wireless communication network within the station, which are used to achieve network access and data exchange of various business terminals. Wired communication networks such as optical fiber and industrial Ethernet network have problems such as long construction period, difficulty in implementation, high construction cost, poor flexibility, and inability to meet the full coverage of business terminals. For substation equipment operation and inspection business, the construction of integrated wiring across buildings and computer rooms within the station is difficult and costly. The transmission distance of wired communication is limited, the flexibility is insufficient, and it does not support mobile terminal access, and the terminal "plug and play" cannot be achieved. The large number of cables laid in the substation are difficult to repair, and there are strong The phenomenon of fire hazards caused by mixed placement of weak current cables. New services such as robot inspection and visual operation in substations are mobile, which is difficult to meet with wired communication methods; WAPI wireless network can meet the security communication requirements of the "last 100 meters" of the power communication network. With the promotion and application of WAPI network in substations, a large number of intelligent terminals are connected, and the demand for data communication such as control, monitoring, and sensing is growing rapidly. The demand for substation terminals to access the WAPI network has increased sharply. The communication system based on WAPI technology can realize direct communication, lacks identification and verification of WAPI terminals, and has poor security. Summary of the invention

[0004] In view of the above-mentioned deficiencies in the prior art, the present invention provides a communication system, method, terminal and storage medium supporting WAPI transmission to solve the above-mentioned technical problems.

[0005] In a first aspect, the present invention provides a communication system supporting WAPI transmission, including an authentication server AS, a WAPI wireless network and a plurality of WAPI mobile terminals, wherein the WAPI mobile terminals are connected to the authentication server AS via the WAPI wireless network, and the authentication server AS configures addresses for the WAPI mobile terminals; The authentication server AS includes a WAPI receiving unit, a WAPI verification unit and an association verification unit. When the WAPI receiving unit receives a communication request issued by a WAPI mobile terminal, the authentication server AS performs security verification on the WAPI mobile terminal that issues the communication request through the configured WAPI verification unit. After the security verification passes, the association verification unit is responsible for identifying the communication request and retrieving historical communication information to verify whether the communication request has established an association with other WAPI mobile terminals.

[0006] A further improvement of the technical solution is that the authentication server AS also includes an address management unit for configuring a corresponding address for each WAPI mobile terminal.

[0007] A further improvement of the technical solution is that the WAPI verification unit includes a user certificate verification subunit and a user identity verification subunit, the user certificate verification subunit is used to verify the management of the user certificate, and the user identity verification subunit is used to verify the identity of the user.

[0008] A further improvement of the technical solution is that it also includes a power adapter to supply power to the entire communication system.

[0009] In a second aspect, the present invention provides a communication method supporting WAPI transmission, comprising: Connect the WAPI mobile terminal to the authentication server AS through the WAPI wireless network. After power-on, the authentication server AS configures the address for the WAPI mobile terminal. The WAPI mobile terminal sends a communication request to the authentication server AS through the WAPI wireless network; When the WAPI receiving unit receives the communication request sent by the WAPI mobile terminal, the authentication server AS performs security verification on the WAPI mobile terminal that sends the communication request through the configured WAPI verification unit; After the security verification is passed, the association verification unit is responsible for identifying the communication request and retrieving historical communication information to verify whether the communication request has established an association with other WAPI mobile terminals.

[0010] A further improvement of the technical solution is that the WAPI mobile terminal is connected to the authentication server AS through the WAPI wireless network. After power-on, the authentication server AS configures the address for the WAPI mobile terminal. The specific steps include: Establish a physical connection between the WAPI mobile terminal and the authentication server AS through the WAPI wireless network, and connect the WAPI mobile terminal to the network port of the authentication server AS through the WAPI wireless network; Provide power to the WAPI mobile terminal and the authentication server AS, start the WAPI mobile terminal and the authentication server AS to provide power, and enter the management interface address of the authentication server AS; Use the preset administrator account information to log in to the WAPI management interface of the authentication server AS, and configure the working mode and network parameters corresponding to each WAPI mobile terminal in the WAPI management interface; In the WAPI management interface, dynamically configure the corresponding address for the WAPI mobile terminal through DHCP.

[0011] A further improvement of the technical solution is that the authentication server AS performs security verification on the WAPI mobile terminal that issues a communication request through the configured WAPI verification unit, including the following specific steps: When receiving a communication request from a WAPI mobile terminal, the authentication server AS verifies the management of the user certificate corresponding to the WAPI mobile terminal and verifies the identity of the user.

[0012] A further improvement of the technical solution is that after determining that a communication request has been received and an association has been established with other WAPI mobile terminals, the WAPI mobile terminal can conduct real-time communication of voice, text, images and videos with the target WAPI mobile terminal through the authentication server AS and the WAPI wireless network.

[0013] In a third aspect, a terminal is provided, including: processor, memory, wherein: The memory is used to store computer programs. The processor is used to call and run the computer program from the memory, so that the terminal executes the above-mentioned terminal method.

[0014] According to a fourth aspect, a computer storage medium is provided, wherein the computer-readable storage medium stores instructions, and when the instructions are executed on a computer, the computer executes the methods described in the above aspects.

[0015] The beneficial effects of the present invention are mainly reflected in the following aspects: Enhanced security: The communication system introduces an authentication server AS and is equipped with a WAPI verification unit to perform strict authentication and verification on the connected WAPI mobile terminals. This verification mechanism ensures that only authenticated and verified legitimate devices can access the network and participate in communications, thus significantly enhancing the security of the entire communication system.

[0016] Preventing misoperation: After the WAPI mobile terminal passes the security verification, the association verification unit in the system further identifies the communication request and retrieves the historical communication information to verify whether the request has established an association with other legitimate terminals. This function can effectively prevent illegal or unauthorized communication requests caused by staff's misoperation, thereby further improving the security of the system.

[0017] Improve system reliability: Through strict identification and association verification mechanisms, the system can effectively prevent the access of illegal and unauthorized devices, reducing potential safety hazards and failure risks. This helps to improve the reliability and stability of the entire communication system and ensure the normal operation of key environments such as substations.

[0018] Optimize resource allocation: The authentication server AS configures addresses for connected WAPI mobile terminals, realizing effective management and optimization of device resources. This configuration method helps to reasonably allocate network resources and improve the utilization of system resources, thereby further improving the performance and efficiency of the entire communication system.

[0019] Scalability and adaptability: The communication system is designed based on WAPI technology and has good scalability and adaptability. With the increasing number of intelligent terminals in substations and the rapid growth of data communication needs, the system can be easily expanded and upgraded to meet the access and data transmission needs of more terminals.

[0020] In summary, a communication system supporting WAPI transmission realizes strict identification and association verification of WAPI terminals by introducing an authentication server AS and corresponding verification units, significantly enhancing the security, reliability and stability of the system. At the same time, the system also has good scalability and adaptability, and can meet the growing data communication needs in key environments such as substations.

[0021] In addition, the invention has a reliable design principle, a simple structure and a very broad application prospect. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0023] Figure 1 is a schematic block diagram of a system according to an embodiment of the present invention.

[0024] Figure 2 is a schematic flow chart of a method according to an embodiment of the present invention.

[0025] Figure 3 A schematic diagram of the structure of a terminal provided by an embodiment of the present invention.

[0026] 110 is an authentication server AS, 111 is a WAPI receiving unit, 112 is a WAPI verification unit, 112A is a user certificate verification subunit, 112B is a user identity verification subunit, 113 is an association verification unit, 120 is a WAPI wireless network, 130 is a WAPI mobile phone terminal, and 140 is a power adapter. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the technical solutions in the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0028] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art of the present invention. The terms used in the specification of the present invention herein are only for the purpose of describing specific embodiments and are not intended to limit the present invention.

[0029] like Figure 1 As shown, the present invention provides a communication system supporting WAPI transmission, including an authentication server AS, a WAPI wireless network and several WAPI mobile phone terminals. The WAPI mobile phone terminals are connected to the authentication server AS through the WAPI wireless network, and the authentication server AS configures addresses for the WAPI mobile phone terminals; the authentication server AS includes a WAPI receiving unit, a WAPI verification unit and an association verification unit. When the WAPI receiving unit receives a communication request sent by the WAPI mobile phone terminal, the authentication server AS performs security verification on the WAPI mobile phone terminal that sends the communication request through the configured WAPI verification unit, and after the security verification passes, the association verification unit is responsible for identifying the communication request and retrieving historical communication information to verify whether the communication request has established an association with other WAPI mobile phone terminals.

[0030] Among them, the authentication server AS: as the core of the system, is responsible for key functions such as security verification, address configuration, and association verification; the WAPI wireless network: as a communication medium, supports the WAPI protocol to ensure the security of data transmission; the WAPI mobile terminal: the client device of the system, communicates with the authentication server AS through the WAPI wireless network.

[0031] Specifically, WAPI receiving unit: When a WAPI mobile terminal sends a communication request through a WAPI wireless network, the request is first captured by the WAPI receiving unit, which performs a preliminary analysis on the request to confirm the type and source of the request.

[0032] WAPI authentication unit: After receiving a communication request, the WAPI authentication unit starts the security authentication process. The authentication process includes but is not limited to checking the integrity of the request, verifying the terminal's certificate and key, etc. If the authentication is successful, the WAPI authentication unit will generate a successful authentication flag or token and pass it to the associated authentication unit.

[0033] Association verification unit: After receiving the verification success sign or token, the association verification unit further processes the communication request. It first identifies the type of request (such as message, file transfer, etc.) and determines the destination of the request (that is, which WAPI mobile terminal to establish an association with). Then, the association verification unit queries the historical communication information database to check whether the current request is associated with the previous communication request. This can be achieved by checking the identifier, session ID, etc. in the request.

[0034] If the association verification succeeds, that is, the current request is associated with a previous request or session, the association verification unit will allow the request to pass and forward it to the target WAPI mobile terminal.

[0035] If the association verification fails, that is, the association cannot be established or the request is abnormal, the association verification unit will reject the request and generate a corresponding error message and return it to the WAPI mobile terminal that issued the request.

[0036] In addition, address configuration includes: the address management unit in the authentication server AS allocates IP addresses to the connected WAPI mobile terminals. Address allocation can be static or dynamic, and is configured according to the network environment and terminal requirements. After the allocation is completed, the address management unit records and maintains the address information for subsequent management and query.

[0037] Specifically, the authentication server AS also includes an address management unit, which is used to configure a corresponding address for each WAPI mobile terminal. The allocation method can be static allocation or dynamic allocation. Static allocation pre-allocates a fixed IP address for each WAPI mobile terminal. This method is suitable for scenarios with a small number of terminals and fixed locations. Dynamic allocation dynamically allocates IP addresses to connected WAPI mobile terminals through a DHCP (Dynamic Host Configuration Protocol) server. This method is more flexible and suitable for scenarios with a large number of terminals and frequently changing locations. In addition, the address allocation process includes: WAPI mobile terminal access: When the WAPI mobile terminal accesses the network, it will send a connection request to the authentication server AS; address request processing: After the address management unit of the authentication server AS receives the connection request, it will allocate an IP address to the terminal according to a pre-set address allocation policy; address sending and confirmation: Send the allocated IP address to the WAPI mobile terminal and wait for the terminal's confirmation. If the terminal confirms that it has received the address and can communicate normally, the address allocation process is completed.

[0038] In addition, the management and maintenance of addresses include: Address recovery: When a WAPI mobile terminal disconnects from the network, the address management unit needs to recover the IP address previously assigned to the terminal for subsequent reallocation. Address conflict handling: If an IP address conflict occurs (that is, two or more terminals have the same IP address), the address management unit needs to adopt corresponding conflict resolution strategies, such as reallocating addresses, disconnecting conflicting terminals, etc.

[0039] Finally, during the address allocation process, it should be ensured that only WAPI mobile terminals that have been authenticated and successfully connected can obtain IP addresses to prevent unauthorized terminals from accessing. Encryption algorithms can be used to encrypt the assigned IP addresses to improve the security of communications. The entire communication process uses the WAPI protocol for encrypted transmission to ensure the confidentiality and integrity of the data. A secure communication channel is established between the authentication server AS and the WAPI mobile terminal to prevent man-in-the-middle attacks. Security credentials such as keys and certificates are regularly updated and checked to prevent them from being cracked or tampered with.

[0040] Specifically, the WAPI verification unit is a key component of the authentication server AS, which is responsible for ensuring that the mobile terminal accessing the WAPI wireless network is legal and authorized. The WAPI verification unit includes a user certificate verification subunit and a user identity verification subunit. The user certificate verification subunit is used to verify the management of user certificates, and the user identity verification subunit is used to verify the identity of the user.

[0041] Among them, the function of the user certificate verification subunit is to verify whether the user certificate provided by the WAPI mobile terminal is valid, complete and not tampered with; the specific verification process includes: certificate reception, certificate parsing, certificate verification, certificate storage and management, and certificate revocation check.

[0042] Specifically, certificate reception: receiving a user certificate from a WAPI mobile terminal.

[0043] Certificate parsing: Parse user certificates and extract key information from the certificates, such as the digital certificate authority (CA for short), public key, validity period, etc.

[0044] Certificate verification includes: validity verification, integrity verification, authority verification, and certificate chain verification (if necessary).

[0045] Validity verification: Check whether the certificate is within the validity period.

[0046] Integrity verification: Use digital signatures and public key algorithms to verify whether the certificate has been tampered with.

[0047] Authority verification: Verify that the issuing authority of the certificate is a trusted CA.

[0048] Certificate chain verification: Verify the integrity and validity of the certificate chain to ensure that the trust chain from the root CA to the user certificate is complete.

[0049] Certificate storage and management: Store verified certificates in the database and record the status of the certificate (such as valid, expired, revoked, etc.).

[0050] Certificate revocation check: Periodically or in real time query the certificate revocation list (CRL) to check whether the stored certificates have been revoked.

[0051] The function of the user identity authentication subunit is to verify whether the user identity information provided by the WAPI mobile terminal is authentic and valid. The specific verification process is: identity information reception, identity information analysis, identity authentication, session management and log recording.

[0052] Among them, identity information reception: receiving user identity information from the WAPI mobile terminal, such as user name and password, digital certificate, etc.

[0053] Identity information parsing: Parse user identity information and extract key information for verification.

[0054] Authentication includes: password verification, digital certificate verification and other verification mechanisms.

[0055] Password Authentication: If using username and password for authentication, compare the entered password with the password (or password hash) stored in the database.

[0056] Digital certificate verification: If digital certificates are used for verification, similar methods as certificate verification can be used for verification, including verification of the certificate's validity, integrity, and issuing authority.

[0057] Other verification mechanisms: Depending on actual needs, other verification mechanisms may also need to be used, such as biometrics, dynamic tokens, etc.

[0058] Session management: After verification, a session is created for the user and a session token (such as JSON Web Token, JWT for short) is generated. This token will be used for subsequent request verification.

[0059] Logging: Logs all authentication attempts and results for auditing and troubleshooting purposes.

[0060] For security reasons, the present invention also monitors the verification unit in real time and sets an alarm mechanism to respond in time when an abnormality or attack is detected.

[0061] Finally, the communication system also includes a power adapter to provide power for the entire communication system.

[0062] Figure 2 is a schematic flow chart of a method according to an embodiment of the present invention. Figure 2 The execution subject may be a communication system supporting WAPI transmission. According to different requirements, the order of the steps in the flow chart may be changed, and some may be omitted.

[0063] like Figure 2 As shown, the method includes: Step 210, the WAPI mobile terminal is connected to the authentication server AS through the WAPI wireless network. After power-on, the authentication server AS configures an address for the WAPI mobile terminal; Step 220, the WAPI mobile terminal sends a communication request to the authentication server AS through the WAPI wireless network; Step 230, when the WAPI receiving unit receives the communication request sent by the WAPI mobile terminal, the authentication server AS performs security verification on the WAPI mobile terminal that sends the communication request through the configured WAPI verification unit; Step 240: After the security verification is passed, the association verification unit is responsible for identifying the communication request and retrieving historical communication information to verify whether the communication request has established an association with other WAPI mobile terminals.

[0064] To facilitate understanding of the present invention, the communication method supporting WAPI transmission provided by the present invention is further described below based on the principle of the communication method supporting WAPI transmission of the present invention and in combination with the communication process supporting WAPI transmission in the embodiment.

[0065] Specifically, the WAPI mobile terminal is connected to the authentication server AS through the WAPI wireless network. After power is turned on, the authentication server AS configures the address for the WAPI mobile terminal. The specific steps include: S211, establish a physical connection between the WAPI mobile terminal and the authentication server AS through the WAPI wireless network, and connect the WAPI mobile terminal to the network port of the authentication server AS through the WAPI wireless network; S212, providing power to the WAPI mobile terminal and the authentication server AS, starting the WAPI mobile terminal and the authentication server AS to provide power, and inputting the management interface address of the authentication server AS; S213, using the preset administrator account information to log in to the WAPI management interface of the authentication server AS, and configure the working mode and network parameters corresponding to each WAPI mobile terminal in the WAPI management interface; S214. In the WAPI management interface, dynamically configure a corresponding address for the WAPI mobile terminal through DHCP.

[0066] Furthermore, the authentication server AS performs security verification on the WAPI mobile terminal that issues a communication request through the configured WAPI verification unit, and the specific steps include: when receiving a communication request issued by the WAPI mobile terminal, the authentication server AS verifies the management of the user certificate corresponding to the WAPI mobile terminal and verifies the identity of the user.

[0067] In addition, after determining that the received communication request has established an association with other WAPI mobile terminals, the WAPI mobile terminal can conduct real-time communication of voice, text, images and videos with the target WAPI mobile terminal through the authentication server AS and the WAPI wireless network.

[0068] Figure 3 A schematic diagram of the structure of a terminal 300 provided in an embodiment of the present invention. The terminal 300 can be used to execute the communication method supporting WAPI transmission provided in an embodiment of the present invention.

[0069] The terminal 300 may include: a processor 310, a memory 320 and a communication module 330. These components communicate via one or more buses. Those skilled in the art will appreciate that the server structure shown in the figure does not limit the present invention, and it may be a bus structure or a star structure, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0070] The memory 320 can be used to store the execution instructions of the processor 310, and the memory 320 can be implemented by any type of volatile or non-volatile storage terminal or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. When the execution instructions in the memory 320 are executed by the processor 310, the terminal 300 can perform some or all of the steps in the following method embodiments.

[0071] The processor 310 is the control center of the storage terminal, and uses various interfaces and lines to connect various parts of the entire electronic terminal. It runs or executes software programs and / or modules stored in the memory 320, and calls data stored in the memory to perform various functions of the electronic terminal and / or process data. The processor can be composed of an integrated circuit (IC), for example, it can be composed of a single packaged IC, or it can be composed of multiple packaged ICs with the same or different functions. For example, the processor 310 can only include a central processing unit (CPU). In the embodiment of the present invention, the CPU can be a single computing core or multiple computing cores.

[0072] The communication module 330 is used to establish a communication channel so that the storage terminal can communicate with other terminals, receive user data sent by other terminals or send user data to other terminals.

[0073] The present invention also provides a computer storage medium, wherein the computer storage medium may store a program, and when the program is executed, the program may include some or all of the steps in each embodiment provided by the present invention. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM).

[0074] Those skilled in the art can clearly understand that the technology in the embodiments of the present invention can be implemented by means of software plus a necessary general hardware platform. Based on this understanding, the technical solution in the embodiments of the present invention, in essence or in other words, the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk, and other media that can store program codes, including several instructions for enabling a computer terminal (which can be a personal computer, a server, or a second terminal, a network terminal, etc.) to execute all or part of the steps of the methods described in each embodiment of the present invention.

[0075] In this specification, the same or similar parts between the various embodiments can be referred to each other. In particular, for the terminal embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description in the method embodiment.

[0076] In the several embodiments provided by the present invention, it should be understood that the disclosed systems and methods can be implemented in other ways. For example, the system embodiments described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of systems or modules, which can be electrical, mechanical or other forms.

[0077] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical modules, that is, they may be located in one place or distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0078] In addition, each functional module in each embodiment of the present invention may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module.

[0079] Although the present invention has been described in detail with reference to the accompanying drawings and in combination with the preferred embodiments, the present invention is not limited thereto. Without departing from the spirit and essence of the present invention, a person of ordinary skill in the art may make various equivalent modifications or substitutions to the embodiments of the present invention, and these modifications or substitutions shall be within the scope of the present invention. Any person of ordinary skill in the art may easily think of changes or substitutions within the technical scope disclosed by the present invention, and these shall be within the scope of protection of the present invention.

Claims

1. A communication system supporting WAPI transmission, characterized in that: It includes an authentication server AS, a WAPI wireless network and several WAPI mobile terminals. The WAPI mobile terminals are connected to the authentication server AS through the WAPI wireless network. The authentication server AS configures addresses for the WAPI mobile terminals. The authentication server AS includes a WAPI receiving unit, a WAPI verification unit and an association verification unit. When the WAPI receiving unit receives a communication request issued by a WAPI mobile terminal, the authentication server AS performs security verification on the WAPI mobile terminal that issues the communication request through the configured WAPI verification unit. After the security verification passes, the association verification unit is responsible for identifying the communication request and retrieving historical communication information to verify whether the communication request has established an association with other WAPI mobile terminals.

2. The communication system supporting WAPI transmission according to claim 1, characterized in that: The authentication server AS also includes an address management unit, which is used to configure a corresponding address for each WAPI mobile terminal.

3. The communication system supporting WAPI transmission according to claim 1, characterized in that: The WAPI authentication unit includes a user certificate authentication subunit and a user identity authentication subunit. The user certificate authentication subunit is used to authenticate the management of user certificates, and the user identity authentication subunit is used to authenticate the identity of the user.

4. The communication system supporting WAPI transmission according to claim 1, characterized in that: It also includes a power adapter to power the entire communication system.

5. A communication method supporting WAPI transmission, characterized in that: include: Connect the WAPI mobile terminal to the authentication server AS through the WAPI wireless network. After power-on, the authentication server AS configures the address for the WAPI mobile terminal. The WAPI mobile terminal sends a communication request to the authentication server AS through the WAPI wireless network; When the WAPI receiving unit receives the communication request sent by the WAPI mobile terminal, the authentication server AS performs security verification on the WAPI mobile terminal that sends the communication request through the configured WAPI verification unit; After the security verification is passed, the association verification unit is responsible for identifying the communication request and retrieving historical communication information to verify whether the communication request has established an association with other WAPI mobile terminals.

6. The communication method supporting WAPI transmission according to claim 5, characterized in that: The WAPI mobile terminal is connected to the authentication server AS through the WAPI wireless network. After powering on, the authentication server AS configures the address for the WAPI mobile terminal. The specific steps include: Establish a physical connection between the WAPI mobile terminal and the authentication server AS through the WAPI wireless network, and connect the WAPI mobile terminal to the network port of the authentication server AS through the WAPI wireless network; Provide power to the WAPI mobile terminal and the authentication server AS, start the WAPI mobile terminal and the authentication server AS to provide power, and enter the management interface address of the authentication server AS; Use the preset administrator account information to log in to the WAPI management interface of the authentication server AS, and configure the working mode and network parameters corresponding to each WAPI mobile terminal in the WAPI management interface; In the WAPI management interface, dynamically configure the corresponding address for the WAPI mobile terminal through DHCP.

7. The communication method supporting WAPI transmission according to claim 5, characterized in that: The specific steps of the authentication server AS performing security verification on the WAPI mobile terminal that issues a communication request through the configured WAPI verification unit include: When receiving a communication request from a WAPI mobile terminal, the authentication server AS verifies the management of the user certificate corresponding to the WAPI mobile terminal and verifies the identity of the user.

8. The communication method supporting WAPI transmission according to claim 5, characterized in that: After determining that the received communication request has established an association with other WAPI mobile terminals, the WAPI mobile terminal can conduct real-time communication of voice, text, images and videos with the target WAPI mobile terminal through the authentication server AS and the WAPI wireless network.

9. A terminal, characterized in that: include: processor; A memory for storing execution instructions of the processor; The processor is configured to execute the method according to any one of claims 5 to 8.

10. A computer-readable storage medium storing a computer program, characterized in that: When the program is executed by a processor, the method according to any one of claims 5 to 8 is implemented.

Images