Wi-Fi network access method and device

Abstract

The invention discloses a Wi-Fi network access method and device, and the method comprises the steps: carrying out the semantic coding of a session key through employing a data analysis and coding algorithm based on machine learning, and carrying out the semantic coding of a Wi-Fi name and a Wi-Fi password, and the encoded Wi-Fi name semantic encoding feature and the Wi-Fi password semantic encoding feature are spliced, so that the encoded Wi-Fi name semantic encoding feature and the encoded Wi-Fi password semantic encoding feature are used as an encrypted WiFi signal according to collaborative semantic representation between the session key semantic encoding feature and the Wi-Fi information semantic splicing encoding feature. Thus, the generated encrypted data not only contains the bit stream of the original information, but also captures the high-level structure and semantic features, and the complex representation enables an attacker to be more difficult to analyze or inversely project. Moreover, coding parameters are dynamically adjusted and unique collaborative semantic representation is generated, so that the unpredictability and randomness of the system can be increased, and the anti-attack capability is greatly improved, especially for threats such as man-in-the-middle attack and brute force attack.

Description

Technical Field

[0001] The present application relates to the field of intelligent access, and more specifically, to a method and device for accessing a Wi-Fi network. Background Art

[0002] Wi-Fi (Wireless Fidelity) is a wireless network technology that allows electronic devices to connect to a local area network (LAN) or the Internet via radio waves without the use of physical cables. It is widely used in various environments such as homes, offices, and public places to provide users with convenient wireless network access services. Currently, Wi-Fi connections rely on verbal transmission of passwords and manual input verification, which is a cumbersome process and has the risk of leaks.

[0003] In this regard, patent CN115348643A proposes a Wi-Fi network access method, device and computer-readable storage medium. The user obtains the identification code by scanning the QR code on the network device through the terminal, and requests the Wi-Fi information from the resolution system; the system returns the Wi-Fi name and password, and the terminal automatically completes the connection settings. During the entire process, the user does not need to manually enter the password, avoiding the risk of password exposure.

[0004] The patent focuses on simplifying the Wi-Fi access process and reduces the risk of leakage by preventing users from directly accessing Wi-Fi passwords. However, there is a risk of Wi-Fi names and passwords being intercepted or eavesdropped during transmission, and the lack of encryption technology significantly increases the possibility of man-in-the-middle attacks. The lack of encryption not only makes the system more vulnerable to advanced security threats, but may also lead to insufficient long-term security and poor privacy protection.

[0005] Therefore, an optimized access solution to a Wi-Fi network is desired. Summary of the invention

[0006] In order to solve the above technical problems, the present application is proposed. The embodiment of the present application provides a method and device for accessing a Wi-Fi network, which semantically encodes the session key by using a data analysis and encoding algorithm based on machine learning, and semantically encodes the Wi-Fi name and the Wi-Fi password, and splices the encoded Wi-Fi name semantic encoding features and the Wi-Fi password semantic encoding features, so as to use the collaborative semantic representation between the session key semantic encoding features and the Wi-Fi information semantic splicing encoding features as the encrypted WiFi signal. In this way, the generated encrypted data not only contains the bit stream of the original information, but also captures the high-level structure and semantic features. This complex representation makes it more difficult for attackers to parse or reverse engineer. In addition, dynamically adjusting the encoding parameters and generating a unique collaborative semantic representation can increase the unpredictability and randomness of the system, greatly improving the anti-attack capability, especially against threats such as man-in-the-middle attacks and brute force cracking.

[0007] According to one aspect of the present application, a method for accessing a Wi-Fi network is provided, which includes: The terminal device generates a session key, and encrypts the session key using the public key of the identity resolution system to obtain an encrypted session key; The terminal device sends the encrypted session key together with the target identifier to the identity resolution system; After receiving the encrypted session key, the identity resolution system uses a private key to decrypt the encrypted session key to obtain the session key; The identity resolution system encrypts the Wi-Fi name and the Wi-Fi password using the session key to obtain an encrypted WiFi signal, and returns the encrypted WiFi signal to the terminal device; Upon receiving the encrypted WiFi signal, the terminal device uses the session key to decrypt the encrypted WiFi signal to obtain the Wi-Fi name and the Wi-Fi password; The terminal device automatically fills the Wi-Fi name and the Wi-Fi password into the Wi-Fi settings page to establish a Wi-Fi network connection.

[0008] According to another aspect of the present application, a device for accessing a Wi-Fi network is provided, and the device for accessing a Wi-Fi network is used to execute the method for accessing a Wi-Fi network as described in claims 1 to 7.

[0009] Compared with the prior art, the present application provides a method and device for accessing a Wi-Fi network, which semantically encodes the session key by using a data analysis and encoding algorithm based on machine learning, and semantically encodes the Wi-Fi name and the Wi-Fi password, and splices the encoded Wi-Fi name semantic encoding features and the Wi-Fi password semantic encoding features, so as to use the collaborative semantic representation between the session key semantic encoding features and the Wi-Fi information semantic splicing encoding features as the encrypted WiFi signal. In this way, the generated encrypted data not only contains the bit stream of the original information, but also captures the high-level structure and semantic features. This complex representation makes it more difficult for attackers to parse or reverse engineer. In addition, dynamically adjusting the encoding parameters and generating a unique collaborative semantic representation can increase the unpredictability and randomness of the system, greatly improving the anti-attack capability, especially against threats such as man-in-the-middle attacks and brute force cracking. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] By describing the embodiments of the present application in more detail in conjunction with the accompanying drawings, the above and other purposes, features and advantages of the present application will become more apparent. The accompanying drawings are used to provide a further understanding of the embodiments of the present application and constitute a part of the specification. Together with the embodiments of the present application, they are used to explain the present application and do not constitute a limitation of the present application. In the accompanying drawings, the same reference numerals generally represent the same components or steps.

[0011] Figure 1 is a flowchart of a method for accessing a Wi-Fi network according to an embodiment of the present application; Figure 2 A data flow diagram of a method for accessing a Wi-Fi network according to an embodiment of the present application; Figure 3 This is a flowchart of sub-step S4 of the method for accessing a Wi-Fi network according to an embodiment of the present application. DETAILED DESCRIPTION

[0012] Below, the exemplary embodiments according to the present application will be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments of the present application, and it should be understood that the present application is not limited to the exemplary embodiments described here.

[0013] As shown in this application and claims, unless the context clearly indicates an exception, the words "a", "an", "an" and / or "the" do not refer to the singular and may also include the plural. Generally speaking, the terms "include" and "comprise" only indicate the inclusion of the steps and elements that have been clearly identified, and these steps and elements do not constitute an exclusive list. The method or device may also include other steps or elements.

[0014] Although the present application makes various references to certain modules in the system according to the embodiments of the present application, any number of different modules can be used and run on the user terminal and / or server. The modules are only illustrative, and different aspects of the system and method can use different modules.

[0015] Flowcharts are used in the present application to illustrate the operations performed by the system according to the embodiments of the present application. It should be understood that the preceding or following operations are not necessarily performed accurately in order. On the contrary, various steps may be processed in reverse order or simultaneously as required. Meanwhile, other operations may also be added to these processes, or a certain step or several steps of operations may be removed from these processes.

[0016] Below, the exemplary embodiments according to the present application will be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments of the present application, and it should be understood that the present application is not limited to the exemplary embodiments described here.

[0017] In the technical solution of the present application, a method for accessing a Wi-Fi network is proposed. Figure 1 The present invention is a flowchart of a method for accessing a Wi-Fi network according to an embodiment of the present application. Figure 2 FIG. 1 is a data flow diagram of a method for accessing a Wi-Fi network according to an embodiment of the present application. Figure 1 and Figure 2 As shown, according to the Wi-Fi network access method of the embodiment of the present application, the steps include: S1, the terminal device generates a session key, and uses the public key of the identity resolution system to encrypt the session key to obtain the encrypted session key; S2, the terminal device sends the encrypted session key together with the target identifier to the identity resolution system; S3, after receiving the encrypted session key, the identity resolution system uses the private key to decrypt the encrypted session key to obtain the session key; S4, the identity resolution system uses the session key to encrypt the Wi-Fi name and the Wi-Fi password to obtain an encrypted WiFi signal, and returns the encrypted WiFi signal to the terminal device; S5, after receiving the encrypted WiFi signal, the terminal device uses the session key to decrypt the encrypted WiFi signal to obtain the Wi-Fi name and the Wi-Fi password; S6, the terminal device automatically fills the Wi-Fi name and the Wi-Fi password into the Wi-Fi settings page to establish a Wi-Fi network connection.

[0018] In particular, in S1, the terminal device generates a session key, and uses the public key of the identity resolution system to encrypt the session key to obtain the encrypted session key. In the process of modern Wi-Fi network access, in order to ensure that users can connect to the wireless network safely and conveniently, and at the same time protect sensitive information such as Wi-Fi name (SSID) and password (PSK) from being leaked, a secure communication mechanism is established between the terminal device and the identity resolution system. The core of this mechanism is to use the session key in symmetric encryption technology to encrypt data, and to ensure the secure transmission of the session key through an asymmetric encryption algorithm.

[0019] In one example, first, the terminal device needs to generate a random number as a session key. This step is critical because the quality of the session key directly affects the security of subsequent encryption operations. In order to generate high-quality random numbers, a cryptographically secure pseudo-random number generator (CSPRNG) is usually used, which can generate a numerical sequence with high unpredictability and randomness, making it difficult for attackers to guess or reproduce the same key value. In addition, the generated session key must meet specific length requirements (such as 128 bits, 256 bits, etc.) to provide sufficient security; and may need to be processed according to certain formats or encoding rules (such as ASCII, Base64 encoding) to facilitate subsequent encryption and decryption operations. In order to encrypt the session key with the public key of the identity resolution system, the terminal device must obtain the public key in advance. This can be achieved in a variety of ways. In some cases, the public key of the identity resolution system may be pre-installed in the terminal device. The latest version of the public key can also be obtained from official channels through a regular security update mechanism. You can also choose to download the public key from the identity resolution system itself, but the premise is that there is a secure channel for the first public key exchange to ensure that the authenticity and integrity of the public key are not compromised. Regardless of the method used, it is necessary to ensure that the obtained public key does belong to the expected identity resolution system, rather than a fake public key provided by a man-in-the-middle attacker. Therefore, in practical applications, digital certificates and public key infrastructure (PKI) are often relied on to verify the authenticity of the public key. Specifically, the public key of the identity resolution system is issued by a trusted third-party certification authority and is bound to a specific entity, which can effectively prevent forgery and tampering.

[0020] After selecting a suitable asymmetric encryption algorithm (such as RSA or ECC elliptic curve cryptography) and successfully obtaining the public key of the identity resolution system, the terminal device can start to perform encryption operations. The key here is to use the characteristics of asymmetric encryption - that is, anyone can use a public encryption key (public key) to encrypt information, but only the party with the corresponding private key can decrypt the information. Therefore, the terminal device uses the public key of the identity resolution system to encrypt the session key just generated to generate an "encrypted session key". This encryption method not only ensures the confidentiality of the session key during transmission, but also because each session key is unique, even if the key of a session is cracked, it will not affect the security of other sessions, thereby increasing the overall reliability of the system.

[0021] In particular, in S2, the terminal device sends the encrypted session key together with the target identifier to the identity resolution system. In the process of modern Wi-Fi network access, in order to ensure that users can connect to the wireless network safely and conveniently, while protecting sensitive information such as Wi-Fi name (SSID) and password (PSK) from being leaked, a secure communication mechanism is established between the terminal device and the identity resolution system. The core of this mechanism is to use the session key in symmetric encryption technology to encrypt data, and to ensure the secure transmission of the session key through an asymmetric encryption algorithm. When the terminal device completes the generation and encryption of the session key, the next key step is to send the encrypted session key together with the target identifier to the identity resolution system.

[0022] In one example, first, before preparing to send, the terminal device needs to construct a message packet. This message packet contains not only the encrypted session key, but also a target identifier, which is used to clearly indicate the specific Wi-Fi network that the user wants to connect to. The target identifier may be a unique identifier obtained by scanning a QR code, entering an SSID, or other means. In order to ensure the integrity and structure of the information, these data are usually organized into a message body in a specific format, such as JSON or XML format. This format is easy to parse and can be easily extended to support additional information (such as timestamps, version numbers, etc.), which is very important for future compatibility and security enhancements. In addition, considering the possible multiple application scenarios and different network environments, the message body can also include other auxiliary information, such as device type, operating system version, application identification, etc. This information can help the identity resolution system better understand the source of the request, optimize the response strategy, and even perform access control or logging. Therefore, the message body not only carries the core encrypted session key and target identifier, but also provides rich context information for subsequent processing, making the entire interaction more intelligent and efficient.

[0023] Since this phase involves the transmission of sensitive information, strict measures must be taken to protect the data from the risk of interception or tampering. The terminal device should use a secure transport layer protocol, such as TLS / SSL, to provide end-to-end encryption protection for the entire communication link. This means that even if the data transmitted on the network is intercepted by a third party, its content cannot be read without the correct decryption key. For the message itself, in addition to encrypting the session key using an asymmetric encryption algorithm (such as RSA), you can also consider digitally signing the entire message body. The digital signature uses the sender's private key to create a hash value based on the message content. The receiver can verify this hash value through the sender's public key, thereby confirming that the message is indeed from the expected source and has not been modified during transmission. In addition, to further enhance security, a one-time verification code (OTP) or timestamp can be added to the message body to prevent replay attacks. Once the message is successfully sent and responded to, the terminal device can immediately discard these temporary security parameters to ensure that each communication is unique and cannot be reused. This practice not only improves the system's anti-attack capabilities, but also meets the best practices of modern network security. Through the combined application of the above-mentioned multiple security mechanisms, the communication between the terminal device and the identification resolution system is fully and effectively protected, providing users with a highly reliable communication platform.

[0024] Depending on actual needs and technical conditions, different transmission methods can be selected to send the constructed message to the identity resolution system. The most common method is to send it to the specified interface of the identity resolution system through HTTP(S) POST request. This method is simple and direct, widely supported, and easy to integrate across platforms and languages. Another option is to use specially designed application layer protocols, such as MQTT, CoAP, etc., which are more suitable for resource-constrained IoT devices or low-bandwidth, high-latency network environments. Regardless of which method is adopted, best practices should be followed to ensure reliability, efficiency, and good compatibility with existing infrastructure during the transmission process. For some specific scenarios, multiple transmission methods can also be used in combination, such as completing preliminary authentication or key exchange through short-range wireless technology (such as Bluetooth, NFC), and then using a more stable Internet connection for subsequent data transmission. This can fully utilize the advantages of various technologies and effectively reduce the risks brought by a single transmission path. In short, when choosing a transmission method, multiple factors such as network conditions, device characteristics, and security requirements should be considered comprehensively, and efforts should be made to find the best solution that best suits the current environment to ensure that the entire communication process is both fast and stable.

[0025] In actual operation, various abnormal situations may be encountered, such as network interruption, server busyness, authentication failure, etc. Therefore, the terminal device should have a good error handling mechanism to detect and report problems in time, and give reasonable solution suggestions. For example, when encountering a temporary network failure, you can try to resend the request; if the authentication fails due to reasons such as certificate expiration, the user is prompted to update the necessary configuration information. In addition, in order to improve the user experience, you can also set a timeout mechanism and retry logic to avoid long waiting times that affect the normal use of users. For more serious errors, such as being unable to connect to the identity resolution system or receiving an invalid response, the terminal device should provide users with clear error prompts and guide them on how to solve the problem. This may involve specific steps such as contacting technical support, checking network settings, or restarting the device. In this way, it can not only help users quickly restore normal network connections, but also collect valuable feedback information to provide a reference for future product improvements. In short, a sound exception handling mechanism is not only an important part of ensuring the stable operation of the system, but also an indispensable part of improving the overall user experience.

[0026] Finally, once the message is successfully sent, the terminal device usually waits for a confirmation reply from the identity resolution system. This step is not only a confirmation of the successful sending, but also a prerequisite for ensuring the smooth progress of subsequent steps. After receiving the message, the identity resolution system will first verify the authenticity and integrity of the message, then use its own private key to decrypt the session key, and then continue to process the Wi-Fi connection request according to the predetermined process.

[0027] In particular, in S3, after receiving the encrypted session key, the identity resolution system uses the private key to decrypt the encrypted session key to obtain the session key. After the terminal device successfully sends the encrypted session key together with the target identifier to the identity resolution system, the next key step is that the identity resolution system receives this information and uses its private key to decrypt the encrypted session key to restore the original session key.

[0028] In one example, first, the identity resolution system needs to receive the message package from the terminal device. This seemingly simple step actually includes multiple levels of verification. Since the message is encrypted and protected by a secure transport layer protocol (such as TLS / SSL), the identity resolution system must first establish a secure connection and receive the complete message body. On this basis, it needs to parse the content of the message body to confirm that it contains a valid encryption session key and target identifier. In addition, if the message body is accompanied by a digital signature or other security parameters, the identity resolution system must also verify it to ensure the authenticity and integrity of the message. For example, by using the public key provided by the terminal device to verify the digital signature, replay attacks or tampering risks can be effectively prevented. This strict verification mechanism lays a solid foundation for subsequent decryption operations and ensures a secure starting point for the communication link.

[0029] After confirming the validity of the message, the identity resolution system enters the critical decryption preparation stage. Before that, it needs to prepare its own private key, which is a dedicated key used for decryption in an asymmetric encryption system. Private keys are usually stored in a secure place and can only be accessed by authorized service components. In order to ensure the security of private keys, additional protection measures may be taken, such as storing them in a hardware security module (HSM) or using operating system-level access control mechanisms to limit access rights. In addition, considering performance factors, the identity resolution system may also cache frequently used private keys to quickly respond to a large number of concurrent requests. This practice not only improves the response speed of the system, but also provides a guarantee for stable operation under high-load environments.

[0030] Next, the identity resolution system will start to use the private key to decrypt the encrypted session key. This is the decryption process in the asymmetric encryption algorithm, that is, the private key is used to restore the data encrypted by the corresponding public key. Common asymmetric encryption algorithms include RSA, ECC (elliptic curve cryptography), etc., which all provide strong security protection. Specifically in this scenario, assuming that the terminal device uses the RSA algorithm for encryption, the identity resolution system will also use the same algorithm for decryption. During the decryption process, the private key interacts with the encrypted session key, and after a series of mathematical operations, the final output is the original generated session key. It is worth noting that the decryption speed of the asymmetric encryption algorithm is relatively slow, especially when processing longer keys. Therefore, in practical applications, asymmetric encryption is usually used only to encrypt shorter data (such as session keys), while subsequent data transmission uses faster symmetric encryption algorithms. This not only ensures the security of the initial communication, but also improves the efficiency of subsequent interactions.

[0031] After successfully decrypting the session key, the identity resolution system needs to further verify it. This step is to ensure that the session key is indeed generated by a legitimate terminal device and has not been tampered with during the entire transmission process.

[0032] Security is always an important consideration throughout the decryption process. The identity resolution system must not only ensure that it can correctly decrypt the session key, but also guard against various potential security threats. For example, it is crucial to prevent the leakage of private keys. To this end, in addition to the physical and logical protection measures mentioned above, private keys should be updated regularly and their use should be monitored. For any suspicious activities detected, take immediate action, such as suspending services, notifying administrators, etc. In addition, the identity resolution system should support the latest encryption standards and technologies, and promptly eliminate outdated or vulnerable algorithms to maintain a high level of security protection capabilities. At the same time, the introduction of multi-layer defense mechanisms, such as intrusion detection systems (IDS) and firewall rules, can detect and block malicious behavior at the first time to ensure the continuous and stable operation of the system.

[0033] In particular, in S4, the identification resolution system uses the session key to encrypt the Wi-Fi name and Wi-Fi password to obtain an encrypted WiFi signal, and returns the encrypted WiFi signal to the terminal device. It should be understood that during the Wi-Fi network access process, the encryption of the Wi-Fi name and Wi-Fi password is the key credential for connecting to the Wi-Fi network. Through encryption, these sensitive information can be effectively prevented from being intercepted or eavesdropped by unauthorized third parties during transmission. Even if the data is intercepted, the attacker cannot easily restore the original SSID and PSK. However, traditional encryption techniques mainly operate at the binary level, which means that they directly process the lowest level representation of data, that is, bit sequences or byte streams, and cannot capture the high-level structure and collaborative semantic information of the data. Specifically, in a specific example of the present application, such as Figure 3 As shown, the S4 includes: S41, semantically encoding the session key to obtain a session key semantic encoding vector; S42, semantically encoding and splicing the Wi-Fi name and the Wi-Fi password to obtain a Wi-Fi information semantic splicing encoding vector; S43, inputting the session key semantic encoding vector and the Wi-Fi information semantic splicing encoding vector into a semantic encryption encoder to obtain a session key-WiFi information collaborative semantic encoding vector as the encrypted WiFi signal.

[0034] Specifically, the S41 semantically encodes the session key to obtain a session key semantic encoding vector. It should be understood that the session key is originally a string of randomly generated binary numbers. In order to convert the session key into the same format and information for more accurate analysis and comparison in the subsequent process, in the technical solution of the present application, the session key is semantically encoded to obtain a session key semantic encoding vector. That is, semantic encoding can convert session keys of different lengths and formats into vector representations of fixed dimensions, so that they can be processed in the same mathematical space, which is very important for subsequent calculations, comparisons or machine learning tasks. In particular, in a specific embodiment of the present application, the session key can be semantically embedded using an embedding matrix to convert it into an embedded encoding vector of fixed dimensions, providing more reliable data support for subsequent semantic collaborative analysis.

[0035] Specifically, the S42 semantically encodes and concatenates the Wi-Fi name and the Wi-Fi password to obtain a Wi-Fi information semantic concatenation encoding vector. That is, in the technical solution of the present application, first, the Wi-Fi name and the Wi-Fi password are semantically encoded to obtain a Wi-Fi name semantic encoding vector and a Wi-Fi password semantic encoding vector; considering that there is a risk of leakage when the Wi-Fi name and password are directly transmitted in plain text, in order to be able to convert this information into a vector representation of a fixed dimension to increase the difficulty of cracking by attackers to a certain extent, in the technical solution of the present application, the Wi-Fi name and the Wi-Fi password are semantically encoded to obtain a Wi-Fi name semantic encoding vector and a Wi-Fi password semantic encoding vector. In particular, in a specific embodiment of the present application, the Wi-Fi name and the Wi-Fi password can be embedded and encoded by a Wi-Fi information embedding matrix to convert the Wi-Fi name and password into a vector representation in a high-dimensional space, generating a more complex encoding form. At the same time, through the embedded coding method, the Wi-Fi name semantic information and the Wi-Fi password semantic information can be understood, providing a data basis for subsequent data processing and encryption tasks. Then, the Wi-Fi name semantic coding vector and the Wi-Fi password semantic coding vector are spliced ​​to obtain the Wi-Fi information semantic splicing coding vector. Here, considering that the Wi-Fi name semantic coding vector and the Wi-Fi password semantic coding vector jointly define the identity of a Wi-Fi network, the separate name semantic coding vector and the password semantic coding vector each only reflect part of the information, and thus, a more comprehensive representation can be created to capture all the context required for the entire Wi-Fi connection. In the technical solution of the present application, the Wi-Fi name semantic coding vector and the Wi-Fi password semantic coding vector are spliced ​​to obtain the Wi-Fi information semantic splicing coding vector, which increases the dimension and complexity of the final representation, thereby providing richer features for subsequent processing.

[0036] Specifically, in S43, the session key semantic coding vector and the Wi-Fi information semantic splicing coding vector are input into a semantic encryption encoder to obtain a session key-WiFi information collaborative semantic coding vector as the encrypted WiFi signal. In the technical solution of the present application, in order to further enhance the security of the WiFi signal based on the session key semantic coding vector, in the technical solution of the present application, the session key semantic coding vector and the Wi-Fi information semantic splicing coding vector are input into a semantic encryption encoder to obtain a session key-WiFi information collaborative semantic coding vector. In particular, the semantic encryption encoder effectively integrates the intrinsic connection between session key features and Wi-Fi information features through powerful fine-grained feature alignment and deep interaction capabilities to generate a highly comprehensive and semantically rich collaborative semantic coding vector. This method not only significantly enhances the security of the encryption system, but also increases the difficulty for attackers to crack it.

[0037] Specifically, the specific steps of inputting the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector into the semantic encryption encoder include: first, feature modulating the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector to obtain the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector. Specifically, the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector are input into a dimension modulation module based on point convolution to obtain the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector. That is, a dimension modulation module based on point convolution (i.e., 1x1 convolution) is used to adjust the dimensions of the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector. Point convolution is a special convolution operation, the core of which is to change the number of channels of the feature map without affecting the spatial resolution. This process can not only realize dimensional conversion, but also help to extract more abstract feature representations by introducing nonlinear transformations. Correspondingly, through the point convolution-based dimensional modulation module, the modulated feature vector not only maintains the rich information of the original features, but also can be effectively integrated in the new dimension. More specifically, the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector are feature modulated by the following feature modulation formula to obtain the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector; wherein the feature modulation formula is: ;in, and are respectively the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector, is the point convolutional coding, is the activation function, is the modulated session key semantic encoding vector, It is the semantic concatenation coding vector of the modulated Wi-Fi information.

[0038] Next, the fine-grained semantic information field between the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector is calculated to obtain the fine-grained semantic information field between the session key and Wi-Fi information features. Specifically, in the technical solution of the present application, after the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector are fine-grained associatively coded, the obtained session key-Wi-Fi information fine-grained semantic association matrix is ​​input into the semantic information field coding network based on the convolution kernel to obtain the fine-grained semantic information field between the session key and Wi-Fi information features. In particular, the fine-grained associative coding is intended to capture the subtle semantic relationship between the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector. When constructing the semantic information field, operations based on convolution kernels are used to capture semantic information of different scales and levels. As a local receptive field, the convolution kernel can focus on a specific area in the distribution of session key-Wi-Fi information features, thereby identifying local patterns and their semantic meanings. By stacking multiple convolutional layers, the system can gradually learn the mapping from low-level features to high-level semantic concepts to obtain the fine-grained semantic information field between the session key and Wi-Fi information features. It is worth mentioning that the fine-grained semantic information field between the session key and Wi-Fi information features not only contains the semantic information of the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector, but also includes the position alignment and offset information between the two, thereby providing precise guidance for subsequent feature mapping. More specifically, the fine-grained semantic information field between the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector is calculated using the following fine-grained semantic information field calculation formula to obtain the fine-grained semantic information field between the session key and Wi-Fi information features; wherein the fine-grained semantic information field calculation formula is: ;in, yes The transposed vector of yes Length, is the session key-Wi-Fi information fine-grained semantic association matrix, The convolution kernel is The convolutional coding of It is a fine-grained semantic information field between session key and Wi-Fi information features.

[0039] Further, based on the fine-grained semantic information field between the session key and Wi-Fi information features, the modulated session key semantic coding vector and the modulated Wi-Fi information semantic splicing coding vector are fine-grained aligned and interacted to obtain the session key-WiFi information collaborative semantic coding vector. That is, in an embodiment of the present application, first, the modulated session key semantic coding vector and the modulated Wi-Fi information semantic splicing coding vector are respectively mapped to the fine-grained semantic information field between the session key and Wi-Fi information features to obtain a fine-grained aligned session key semantic coding vector and a fine-grained aligned Wi-Fi information semantic splicing coding vector. During the mapping process, the position of each feature vector is adjusted according to the semantic strength and correlation of the corresponding position in the fine-grained semantic information field between the session key and Wi-Fi information features so that the feature vector better matches the semantic distribution in the fine-grained semantic information field between the session key and Wi-Fi information features to obtain the fine-grained aligned session key semantic coding vector and the fine-grained aligned Wi-Fi information semantic splicing coding vector. Subsequently, the position-weighted sum between the fine-grained aligned session key semantic coding vector and the fine-grained aligned Wi-Fi information semantic concatenation coding vector is calculated to obtain the session key-WiFi information collaborative semantic coding vector. It should be understood that the fine-grained position alignment characteristics of the semantic information between the fine-grained aligned session key semantic coding vector and the fine-grained aligned Wi-Fi information semantic concatenation coding vector can ensure that the fine-grained alignment between the session key-WiFi information features is maintained in the process of calculating the position-weighted sum to obtain the session key-WiFi information collaborative semantic coding vector. More specifically, based on the fine-grained semantic information field between the session key-Wi-Fi information features, the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector are fine-grained aligned and interacted with each other using the following fine-grained alignment interaction formula to obtain the session key-WiFi information collaborative semantic coding vector; wherein, the fine-grained alignment interaction formula is: ;in, is matrix multiplication, is the fine-grained aligned session key semantic encoding vector, is the fine-grained aligned Wi-Fi information semantic concatenation encoding vector, and is the weighting coefficient, It is the session key-WiFi information collaborative semantic encoding vector.

[0040] In particular, in S5, upon receiving the encrypted WiFi signal, the terminal device uses the session key to decrypt the encrypted WiFi signal to obtain the Wi-Fi name and the Wi-Fi password. That is, when the terminal device receives the encrypted WiFi signal sent back by the identity resolution system, it uses the previously generated and exchanged session key to decrypt the encrypted information to restore the original Wi-Fi name (SSID) and password (PSK).

[0041] In one example, first, the terminal device needs to receive a message packet from the identity resolution system. Since the message is encrypted and protected by a secure transport layer protocol (such as TLS / SSL), the terminal device must first establish a secure connection and receive the complete message body. On this basis, it needs to parse the content of the message body to confirm that it contains a valid encrypted WiFi signal. In addition, if the message body is accompanied by a digital signature or other security parameters, the terminal device must also verify it to ensure the authenticity and integrity of the message. Before this, the terminal device needs to prepare the previously generated and exchanged session key. This session key is generated by the terminal device during the initial communication and securely passed to the identity resolution system through asymmetric encryption technology. Next, the decryption process in the symmetric encryption algorithm is used, that is, the same key is used to restore the data encrypted by the key. Common symmetric encryption algorithms include AES (Advanced Encryption Standard), 3DES (Triple Data Encryption Algorithm), etc., all of which provide strong security guarantees. Specifically in this scenario, assuming that the identity resolution system uses the AES algorithm for encryption, the terminal device will also use the same algorithm for decryption. During the decryption process, the session key interacts with the encrypted WiFi signal, and after a series of mathematical operations, the final output is the original Wi-Fi name and password. It is worth noting that the decryption speed of the symmetric encryption algorithm is relatively fast, which is particularly suitable for processing larger amounts of data, allowing users to quickly obtain the required Wi-Fi information and achieve a fast connection.

[0042] In particular, in S6, the terminal device automatically fills the Wi-Fi name and the Wi-Fi password into the Wi-Fi setting page to establish a Wi-Fi network connection. That is, after the terminal device successfully decrypts the Wi-Fi name (SSID) and password (PSK), it fills these information into the Wi-Fi setting page to establish a Wi-Fi network connection.

[0043] In one example, the terminal device first needs to ensure that the Wi-Fi name and password have been successfully decrypted and verified. This stage involves further processing of the decrypted data, including but not limited to formatting and standardization. For example, the Wi-Fi name is usually a string, and the password may need to be converted or encoded according to a specific encryption standard. In addition, the terminal device also needs to check whether the information meets the expected format or length requirements to avoid potential input errors or incompatibility issues. Once confirmed, the terminal device will be ready to enter the next step, which is automatic filling of information.

[0044] To achieve a seamless user experience, the terminal device is usually designed with an intuitive and user-friendly user interface (UI) to display the Wi-Fi connection status and related information. When the terminal device prepares the Wi-Fi name and password, it automatically activates the Wi-Fi settings page and fills the information into the corresponding input box. Specifically, the terminal device accesses the Wi-Fi settings interface by calling the API or built-in tools provided by the operating system. For mobile devices, this may be done by calling system-level services; for desktop computers, it can be achieved by calling the corresponding network management tools or graphical interface components. During this process, the terminal device may display a short notification or prompt to inform the user that it is trying to automatically connect to the specified Wi-Fi network. This feedback mechanism helps to enhance the user's sense of trust and let them know that the system is working as expected. At the same time, if any problems or abnormalities are encountered, the terminal device can also notify the user in time and provide solution suggestions. For example, if the Wi-Fi name or password is found to be invalid, the terminal device can prompt the user to rescan the QR code or manually enter the correct information. After the Wi-Fi name and password are correctly filled in the settings page, the terminal device will begin the process of automatic configuration and connection. This step involves understanding the specific Wi-Fi protocol and authentication mechanism. Common Wi-Fi security modes include WPA2 / WPA3 Personal Edition, Enterprise Edition, etc., each of which has its own unique authentication process. The terminal device needs to select the appropriate authentication method based on the Wi-Fi information obtained and configure it according to the corresponding requirements. For example, when using WPA2-PSK (pre-shared key), the terminal device will directly use the decrypted password as the authentication credential; in more complex enterprise environments, additional authentication steps may be involved, such as 802.1X authentication. In order to ensure the success rate and stability of the connection, the terminal device usually attempts to connect multiple times until a stable connection is established. During this period, it can monitor changes in the network status and adjust parameters or retry the connection as needed. If the initial attempt fails, the terminal device can also try different channels or frequency bands to find the best connection path. In addition, the terminal device can also record the results of each connection for subsequent analysis and optimization. For example, by collecting data such as connection success rate and signal strength, the terminal device can identify which Wi-Fi networks are more stable and give priority to them for connection.

[0045] In summary, the access method of the Wi-Fi network according to the embodiment of the present application is explained, which semantically encodes the session key by using a data analysis and encoding algorithm based on machine learning, and semantically encodes the Wi-Fi name and the Wi-Fi password, and splices the encoded Wi-Fi name semantic coding features and the Wi-Fi password semantic coding features, so as to use the collaborative semantic representation between the session key semantic coding features and the Wi-Fi information semantic splicing coding features as the encrypted WiFi signal. In this way, the generated encrypted data not only contains the bit stream of the original information, but also captures the high-level structure and semantic features. This complex representation makes it more difficult for attackers to parse or reverse engineer. In addition, dynamically adjusting the encoding parameters and generating a unique collaborative semantic representation can increase the unpredictability and randomness of the system, greatly improving the anti-attack capability, especially against threats such as man-in-the-middle attacks and brute force cracking.

[0046] The embodiments of the present disclosure have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A method for accessing a Wi-Fi network, characterized in that: include: The terminal device generates a session key, and encrypts the session key using the public key of the identity resolution system to obtain an encrypted session key; The terminal device sends the encrypted session key together with the target identifier to the identity resolution system; After receiving the encrypted session key, the identity resolution system uses a private key to decrypt the encrypted session key to obtain the session key; The identity resolution system encrypts the Wi-Fi name and the Wi-Fi password using the session key to obtain an encrypted WiFi signal, and returns the encrypted WiFi signal to the terminal device; Upon receiving the encrypted WiFi signal, the terminal device uses the session key to decrypt the encrypted WiFi signal to obtain the Wi-Fi name and the Wi-Fi password; The terminal device automatically fills the Wi-Fi name and the Wi-Fi password into the Wi-Fi settings page to establish a Wi-Fi network connection.

2. The method for accessing a Wi-Fi network according to claim 1, characterized in that: The identity resolution system uses the session key to encrypt the Wi-Fi name and the Wi-Fi password to obtain an encrypted WiFi signal, including: semantically encoding the session key to obtain a session key semantic encoding vector; semantically encode and concatenate the Wi-Fi name and the Wi-Fi password to obtain a Wi-Fi information semantic concatenation encoding vector; Inputting the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector into a semantic encryption encoder to obtain a session key-WiFi information collaborative semantic coding vector as the encrypted WiFi signal, including: performing feature modulation on the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector to obtain a modulated session key semantic coding vector and a modulated Wi-Fi information semantic concatenation coding vector; calculating a fine-grained semantic information field between the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector to obtain a fine-grained semantic information field between session key and Wi-Fi information features; and performing fine-grained alignment interaction on the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector based on the fine-grained semantic information field between session key and Wi-Fi information features to obtain the session key-WiFi information collaborative semantic coding vector.

3. The method for accessing a Wi-Fi network according to claim 2, characterized in that: Semantically encoding and concatenating the Wi-Fi name and the Wi-Fi password to obtain a Wi-Fi information semantic concatenation encoding vector, including: Performing semantic encoding on the Wi-Fi name and the Wi-Fi password to obtain a Wi-Fi name semantic encoding vector and a Wi-Fi password semantic encoding vector; The Wi-Fi name semantic coding vector and the Wi-Fi password semantic coding vector are concatenated to obtain the Wi-Fi information semantic concatenated coding vector.

4. The method for accessing a Wi-Fi network according to claim 3, characterized in that: The session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector are feature modulated to obtain a modulated session key semantic coding vector and a modulated Wi-Fi information semantic concatenation coding vector, including: inputting the session key semantic coding vector and the Wi-Fi information semantic concatenation coding vector into a dimensional modulation module based on point convolution to obtain the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector.

5. The method for accessing a Wi-Fi network according to claim 4, characterized in that: The modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector have the same characteristic dimension.

6. The method for accessing a Wi-Fi network according to claim 5, characterized in that: Calculating a fine-grained semantic information field between the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector to obtain a fine-grained semantic information field between session key and Wi-Fi information features, including: after fine-grained association coding is performed on the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector, the obtained session key-Wi-Fi information fine-grained semantic association matrix is ​​input into a semantic information field coding network based on a convolution kernel to obtain the fine-grained semantic information field between the session key and Wi-Fi information features.

7. The method for accessing a Wi-Fi network according to claim 6, characterized in that: Based on the fine-grained semantic information field between the session key and Wi-Fi information features, fine-grained alignment interaction is performed on the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector to obtain the session key-WiFi information collaborative semantic coding vector, including: Mapping the modulated session key semantic coding vector and the modulated Wi-Fi information semantic concatenation coding vector to the fine-grained semantic information field between the session key and Wi-Fi information features respectively to obtain a fine-grained aligned session key semantic coding vector and a fine-grained aligned Wi-Fi information semantic concatenation coding vector; A position-weighted sum between the fine-grained aligned session key semantic coding vector and the fine-grained aligned Wi-Fi information semantic concatenation coding vector is calculated to obtain the session key-WiFi information collaborative semantic coding vector.

8. A device for accessing a Wi-Fi network, characterized in that: The Wi-Fi network access device is used to execute the Wi-Fi network access method described in claims 1 to 7.

Images