Network access method and system, network access equipment and terminal equipment

Abstract

The invention relates to the technical field of Internet, and discloses a network access method and system, a network access device and a terminal device, the network access method comprises the following steps: broadcasting a first network message of the network access device, the first network message being used for the terminal device to access a first network of the network access device; receiving authentication information sent by the terminal equipment through the first network; judging whether the terminal equipment passes network access authentication or not according to the authentication information of the terminal equipment; if the terminal device passes the network access authentication, a second network message is sent to the terminal device passing the authentication through the first network, and the second network message is used for the terminal device to access a second network. Through the above mode, the hardware requirement for the terminal equipment needing network distribution is reduced, and the terminal equipment can be conveniently subjected to network distribution again.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of Internet technology, and specifically to a network access method and system, a network access device, and a terminal device. Background Art

[0002] With the development of technology, terminal devices have become a part of modern family life. For example, terminal devices such as Internet Protocol Camera (IPC), smart network lights and smart network air conditioners have been widely used in people's daily lives.

[0003] After the terminal device is configured with the network, it is connected to the network, and the user can control the terminal device through control devices such as smart phones, tablets and notebooks. Currently, when configuring the terminal device with the network, the user enters the network name and password on the terminal device, and the terminal device accesses the network according to the network name and password; or the user enters the network name and password on the control device, and the control device generates a QR code containing the network name and password. The terminal device can obtain the network name and password by scanning the QR code and then access the network. The above-mentioned network configuration method has certain requirements on the hardware of the terminal device, such as requiring the terminal device to have physical buttons or touch screens that can be used to input characters, or a camera that can be used to scan QR codes.

[0004] In addition, in order to use IPC to effectively monitor whether the controlled area is in a safe state, IPC is usually installed in a higher position (such as under the eaves of the video surveillance area). When an abnormality occurs in the terminal device and it is disconnected from the originally connected network, or the network password of the IPC originally connected changes, the user is required to re-configure the terminal device in the above manner, because the above-mentioned configuration method requires operation of the terminal device. At this time, the IPC needs to be removed before it can be restored to the network. This method of re-configuring the network is extremely inconvenient, so when the terminal device is installed at a high position and is not suitable for direct operation, it causes inconvenience in operation. Summary of the invention

[0005] In view of the above problems, the embodiments of the present application provide a network access method and system, a network access device and a terminal device, which are used to solve the problems in the prior art that the hardware requirements for terminal devices that need to be configured are high, and the operation is inconvenient when the terminal devices are installed at a high position and need to be re-configured.

[0006] According to one aspect of an embodiment of the present application, a network access method is provided, which is applied to a network access device, and the method includes: broadcasting a first network message of the network access device, the first network message is used for a terminal device to access a first network of the network access device; receiving authentication information sent by the terminal device through the first network; judging whether the terminal device has passed the network access authentication according to the authentication information of the terminal device; if the terminal device has passed the network access authentication, sending a second network message to the authenticated terminal device through the first network, the second network message is used for the terminal device to access a second network.

[0007] In an optional manner, the method further includes: in response to a request from each terminal device for network access authentication, displaying an identification code of each terminal device stored in the network access device, wherein the network access device stores the authentication information after receiving the authentication information sent by each terminal device, the authentication information includes an identification code corresponding to the terminal device, and some characters of the displayed identification code are hidden; in response to an operation of selecting an identification code from the displayed identification codes, determining whether the authentication information including the selected identification code includes an access password of the terminal device corresponding to the selected identification code; if the authentication information including the selected identification code does not include the access password of the terminal device corresponding to the selected identification code, outputting a first prompt message, wherein the first prompt message is used to prompt the network access device to input the hidden characters in the selected identification code; obtaining the input characters; determining whether the input characters are consistent with the hidden characters according to the selected identification code; if the input characters are consistent with the hidden characters, confirming that the terminal device corresponding to the selected identification code has passed the network access authentication.

[0008] In an optional manner, the method also includes: if the authentication information including the selected identification code includes the access password of the terminal device corresponding to the selected identification code, outputting a second prompt information, the second prompt information being used to prompt the network access device to input the access password of the terminal device corresponding to the selected identification code; obtaining the input access password; determining whether the input access password is consistent with the access password of the terminal device corresponding to the selected identification code; if the input access password is consistent with the access password of the terminal device corresponding to the selected identification code, confirming that the terminal device corresponding to the selected identification code has passed the network access authentication.

[0009] In an optional manner, the method also includes: when the terminal device accesses the first network, determining whether the MAC address of the terminal device belongs to an address in a first blacklist; if the MAC address of the terminal device belongs to an address in the first blacklist, disconnecting the terminal device from the first network; if the MAC address of the terminal device does not belong to an address in the first blacklist, proceeding to the step of determining whether the terminal device has passed the network access authentication based on the authentication information of the terminal device.

[0010] In an optional manner, the first blacklist is updated through the following steps: determining whether the authentication information of the terminal device is encrypted; if the authentication information is encrypted, determining whether the encryption method of the authentication information is correct; if the encryption method of the authentication information is incorrect, adding the MAC address of the terminal device to the first blacklist; and / or after the terminal device accesses the first network, if the authentication information sent by the terminal device is not received within a first time period, adding the MAC address of the terminal device to the first blacklist.

[0011] In an optional manner, the method further includes: if the terminal device passes the network access authentication, sending an exception request to the terminal device through the first network; and receiving exception information of the terminal device sent by the terminal device to the network access device according to the exception request.

[0012] In an optional manner, the first network is a public network disclosed by the network access device to the outside world, and the second network is a private network provided to the terminal device for network configuration.

[0013] In an optional manner, the first network message includes the name of the first network or the first network message includes the name and password of the first network, and the second network message includes the name and password of the second network.

[0014] In an optional manner, the network access device is a network video recorder NVR, a network repeater Hub, a network router, or an electronic device installed with a network access application APP.

[0015] According to another aspect of an embodiment of the present application, a network access device is provided, including a memory, a processor, and a computer program stored in the memory, wherein the processor executes the computer program to implement the above-mentioned network access method.

[0016] According to another aspect of an embodiment of the present application, a network access method is provided, which is applied to a terminal device, and the method includes: obtaining a first network message broadcast by a network access device; accessing a first network of the network access device through the first network message; sending authentication information of the terminal device to the network access device through the first network, so that the network access device can determine whether the terminal device has passed the network access authentication; if the terminal device has passed the network access authentication, receiving a second network message sent by the network access device through the first network; and accessing a second network according to the second network message.

[0017] In an optional manner, when there are multiple network access devices broadcasting the first network message at the same time, the method also includes: step c1: if the second network message sent by the current network access device of the first network currently accessed by the terminal device is not received, repeat the following steps c2 to c5 until the second network message sent by one of the network access devices is received; step c2: disconnecting the first network of the current network access device currently accessed by the terminal device; step c3: obtaining the first network message broadcast by other network access devices among the multiple network access devices except the current network access device; step c4: accessing the first network of the other network access devices according to the first network message broadcast by the other network access devices; step c5: sending the authentication information to the network access device of the first network currently accessed by the terminal device.

[0018] In an optional manner, the method also includes: obtaining the MAC address broadcast by the network access device; determining whether the MAC address of the network access device belongs to an address in a second blacklist; if the MAC address of the network access device belongs to an address in the second blacklist, not accessing the first network of the network access device; if the MAC address of the network access device does not belong to an address in the second blacklist, accessing the first network of the network access device; wherein the second blacklist is updated through the following steps: if after sending the authentication information of the terminal device to the network access device, no confirmation message sent by the network access device is received within a second time period, the MAC address of the network access device is added to the second blacklist.

[0019] In an optional manner, the first network is a public network disclosed by the network access device to the outside world, and the second network is a private network provided to the terminal device for network configuration.

[0020] In an optional manner, the first network message includes the name of the first network or the first network message includes the name and password of the first network, and the second network message includes the name and password of the second network.

[0021] According to another aspect of an embodiment of the present application, a terminal device is provided, including a memory, a processor, and a computer program stored in the memory, wherein the processor executes the computer program to implement the above-mentioned network access method.

[0022] According to another aspect of an embodiment of the present application, a network access system is provided, the system comprising a network access device and a terminal device, wherein: the network access device is used to broadcast a first network message of the network access device; the terminal device is used to obtain the first network message broadcast by the network access device, access the first network of the network access device through the first network message, and send authentication information of the terminal device to the network access device through the first network; the network access device is also used to receive the authentication information sent by the terminal device, and determine whether the terminal device has passed the network access authentication based on the authentication information, and if the terminal device has passed the network access authentication, send a second network message to the terminal device through the first network; the terminal device is also used to receive the second network message sent by the network access device, and access the second network based on the second network message.

[0023] In an embodiment of the present application, a first network message is broadcasted to a terminal device through a network access device, so that the terminal device establishes a first network communication connection with the network access device, and then the network access device can receive the authentication information sent by the terminal device to determine whether the terminal device passes the network access authentication. If the terminal device passes the network access authentication, the network access device sends a second network message to the terminal device so that the terminal device accesses the second network, thereby completing the network configuration process for the terminal device. In the above network configuration process, there is no need to directly input the second network message (such as the name and password of the second network) to the terminal device, nor is there a need for the terminal device to scan a QR code with the second network message. Therefore, the hardware requirements for the terminal device are relatively low, that is, the terminal device does not need to have physical buttons or touch screens that can be used to input characters, nor does the terminal device need to have a camera that can scan QR codes to complete the network configuration of the terminal device.

[0024] When an abnormality occurs in the terminal device, causing the device to be disconnected from the second network that was originally connected, or the configuration information of the second network (such as the password of the second network) changes, causing the terminal device to be unable to access the second network, the network access method provided in the embodiment of the present application can be used to reconfigure the terminal device. When the terminal device is an IPC and is set at a higher position, the IPC can be reconfigured without removing it, which is convenient to operate.

[0025] The above description is only an overview of the technical solution of the embodiment of the present application. In order to more clearly understand the technical means of the embodiment of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the embodiment of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The accompanying drawings are only used to illustrate the embodiments and are not to be considered as limiting the present application. In addition, the same reference symbols are used to represent the same components throughout the accompanying drawings. In the accompanying drawings:

[0027] Figure 1 A schematic diagram of an application scenario of the network access method provided in an embodiment of the present application is shown;

[0028] Figure 2 A schematic diagram showing the structure of a network access device provided in an embodiment of the present application is shown;

[0029] Figure 3 A schematic diagram of the structure of a terminal device provided in an embodiment of the present application is shown;

[0030] Figure 4 A schematic diagram of a network access system provided by an embodiment of the present application is shown;

[0031] Figure 5 A schematic diagram of a flow chart of a network access method provided in an embodiment of the present application is shown;

[0032] Figure 6 A schematic diagram of a process for confirming that a terminal device passes network access authentication provided by an embodiment of the present application is shown;

[0033] Figure 7 A schematic diagram of an application scenario of a network access method provided in another embodiment of the present application is shown. DETAILED DESCRIPTION

[0034] The exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present application are shown in the drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments set forth herein.

[0035] Figure 1 The following is a schematic diagram showing an application scenario of the network access method provided by the embodiment of the present application. Figure 1As shown, in the scenario of applying the network access method provided by the embodiment of the present application, it includes a network access device 10 and a terminal device 20. Among them, the network access device 10 can be a network video recorder (Network Video Recorder, NVR), a network router, a network repeater Hub, or an electronic device installed with a network access application APP, etc., which can provide a network connection. In this embodiment, the electronic device can create a network hotspot through the network access application APP installed thereon, and the network hotspot is equivalent to the first network of the network access device 10. The terminal device 20 is a device that needs to access the network, such as an Internet Protocol Camera (IPC), an intelligent network light, an intelligent network air conditioner, a smart phone, etc. The terminal device 20 can establish a network connection with the network access device 10 through the network provided by the network access device 10.

[0036] It should be noted that Figure 1 Only one network access device 10 and three terminal devices 20 are used as an example for illustration, and the present application does not limit the number of network access devices 10 and terminal devices 20. In some embodiments, multiple network access devices 10 and one terminal device 20, or one network access device 10 and one terminal device 20 may also be included.

[0037] Figure 2 The schematic diagram of the structure of the network access device provided by the embodiment of the present application is shown. Figure 2 As shown, the network access device 10 includes: a first processor 11, a display device 12, an input device 13 and a first memory 14.

[0038] The first memory 14 is used to store a first computer program 15. The first memory 14 may include a high-speed RAM memory, and may also include a non-volatile memory, such as at least one disk memory. The first computer program 15 includes computer executable instructions.

[0039] The first processor 11 is used to execute the first computer program 15 to implement the steps performed by the network access device 10 in the network access method provided in the embodiment of the present application.

[0040] The first processor 11 may be a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application. The one or more processors included in the network access device 10 may be processors of the same type, such as one or more CPUs; or may be processors of different types, such as one or more CPUs and one or more ASICs.

[0041] The display device 12 is used to display characters, and the display device 12 may be a display screen. The input device 13 is used to input characters to the network access device 10, such as a physical key.

[0042] In some embodiments, in order to improve the integration of the network access device 10, the display device 12 and the input device 13 may be touch screens that integrate display functions and input functions.

[0043] Figure 3 The structure diagram of the terminal device provided in the embodiment of the present application is shown. Figure 3 As shown, the terminal device 20 includes: a second processor 22 and a second memory 24 .

[0044] The second memory 24 is used to store a second computer program 26. The second memory 24 may include a high-speed RAM memory, or may also include a non-volatile memory, such as at least one disk memory. The second computer program 26 includes computer executable instructions.

[0045] The second processor 22 is used to execute the second computer program 26 to implement the steps performed by the terminal device 20 in the network access method provided in the embodiment of the present application.

[0046] The second processor 22 may be a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application. The one or more processors included in the terminal device 20 may be processors of the same type, such as one or more CPUs; or may be processors of different types, such as one or more CPUs and one or more ASICs.

[0047] Figure 4 A schematic diagram of a network access system provided by an embodiment of the present application is shown. Figure 4As shown, the network access system 1 includes a network access device 10 and a terminal device 20. The network access device 10 is used to execute the steps performed by the network access device 10 in the network access method provided in the embodiment of the present application. The terminal device 20 is used to execute the steps performed by the terminal device 20 in the network access method provided in the embodiment of the present application. In this embodiment, the network access system 1 may include one or more network access devices 10 and one or more terminal devices 20. Multiple terminal devices 20 can access the network through the same network access device 10.

[0048] Figure 5 FIG. 1 is a flow chart showing a network access method provided by an embodiment of the present application. Figure 5 As shown, the method comprises the following steps:

[0049] Step 101: the network access device 10 broadcasts a first network message of the network access device 10 .

[0050] Among them, the network access device 10 creates a first network. In this embodiment, the first network is a public network disclosed by the network access device 10 (for example, it can be a wired network or a wireless network). All terminal devices located within the coverage of the first network of the network access device 10 can establish a first network connection with the network access device 10. The second network can be a private network provided by the network access device 10 to the terminal device 20 for network configuration, for example, it can be a wired network or a wireless network, or it can be a private network provided by other network access devices other than the network access device 10 to the terminal device 20 for network configuration. The first network message includes, but is not limited to, the name of the first network, or the name and password of the first network. The name of the first network is the Service Set Identifier (SSID) of the first network. The password of the first network is the key required for the terminal device 20 to access the first network. In this embodiment, when the network access device 10 is a network video recorder NVR, a network router or a network repeater Hub, the network access device 10 sends the first network message by periodic broadcasting, so that the terminal device 20 can access the first network of the network access device 10 according to the first network message. When the network access device 10 is a mobile electronic device with a network access application APP installed (for example, a mobile phone or tablet computer on which the user has downloaded the network access application APP), the user needs to open the network access application APP of the mobile electronic device to create a network hotspot, which is equivalent to the first network of the network access device 10, so that the terminal device 20 can access the first network established by the mobile electronic device through the network hotspot.

[0051] Step 102: The terminal device 20 receives a first network message.

[0052] Among them, after the network access device 10 broadcasts the first network message, as long as the terminal device 20 is within the network signal coverage of the network access device 10, the terminal device 20 can obtain the first network message broadcast by the network access device 10, that is, obtain the name of the first network or obtain the name and password of the first network.

[0053] Step 103: The terminal device 20 accesses the first network of the network access device 10 through a first network message.

[0054] Among them, for the first network created by the network access device 10, the terminal device 20 can access the first network established by the network access device 10 through the first network message. In the embodiment of the present application, the first network is a public network open to the outside world, that is, all network devices that can receive the first network message broadcast by the network access device 10 can access the first network established by the network access device 10. Since the first network is a public network, if the first network is not set with a network password, the first network message can only include the name of the first network, and the terminal device 20 can access the first network established by the network access device 10 according to the name of the first network. If the first network is set with a network password, the first network message can include the name and password of the first network, and the terminal device 20 can access the first network established by the network access device 10 according to the name and password of the first network.

[0055] It should be noted that, in some embodiments, in order to ensure the security of the data stored in the network access device 10, even if any terminal device can access the first network of the network access device 10 through the first network message broadcast by the network access device 10, the first network is limited to communication between the two parties, such as the terminal device 20 mentioned below sending authentication information to the network access device 10. The terminal device 20 cannot obtain the data stored in the network access device 10 through the first network connection, nor can it send the video image obtained by the terminal device 20 to the network access device 10 through the first network connection.

[0056] Step 104: The terminal device 20 sends authentication information of the terminal device 20 to the network access device 10 through the first network.

[0057] Among them, authentication information refers to information used to identify and verify the identity of the terminal device 20. For example, the authentication information may include the serial number (SN) of the terminal device 20, the unique identifier (UID) of the terminal device 20, or information composed of the SN and the UID. The authentication information of different terminal devices 20 is different. The authentication information is pre-set in the terminal device 20. After the terminal device 20 accesses the first network established by the network access device 10, the terminal device 20 can communicate with the network access device 10, and then the authentication information of the terminal device 20 can be sent to the network access device 10.

[0058] Step 105 : The network access device 10 receives the authentication information sent by the terminal device 20 .

[0059] The network access device 10 receives authentication information from the terminal device 20 so as to subsequently verify the identity of the terminal device 20 according to the authentication information.

[0060] Step 106: The network access device 10 determines whether the terminal device 20 passes the network access authentication based on the authentication information.

[0061] The user can authenticate the terminal device 20 in advance through the network access device 10. If the user authenticates the terminal device 20 in advance through the network access device 10, the network access device 10 stores the authentication information of the authenticated terminal device 20. In this step, the terminal device 20 is a terminal device that has passed the network access authentication.

[0062] In order to better introduce the terminal device 20 that has passed the network access authentication, the network access device 10 is an NVR and the terminal device 20 is an IPC. Here, the IPC is responsible for capturing and encoding video images, and then sending the video stream to the NVR through the network. The NVR receives the video stream and records and stores it. After the user purchases the IPC and NVR, the purchased IPC establishes a network connection with the NVR so that the IPC transmits the video stream to the NVR. In such a scenario, the user authenticates these IPCs (IPCs belonging to the user) on the NVR, and the authenticated IPC is the terminal device 20 that has passed the network access authentication. The user will not authenticate other IPCs that do not belong to the user on his own NVR, so other IPCs that do not belong to the user cannot pass the network access authentication. The network access device 10 determines whether the terminal device 20 has passed the network access authentication by determining whether the authentication information received in step 105 is consistent with the stored authentication information of the terminal device 20. If the two are consistent, it is determined that the terminal device 20 has passed the network access authentication.

[0063] Step 107: If the terminal device 20 passes the network access authentication, the network access device 10 sends a second network message to the terminal device 20 through the first network.

[0064] Among them, the network access device 10 pre-stores a second network message for the terminal device 20 to configure the network. In this embodiment, the second network is a private network provided to the terminal device 20 for network configuration. The private network usually provides services for specific user terminals and has certain security and privacy to ensure that only authorized user terminals and network devices that have passed network access authentication can access the network resources. Since the second network is not open to the outside world, compared with the first network, the second network pays more attention to network security management and access control. Therefore, the network access device 10 only sends the second network message to the terminal device 20 that has passed the network access authentication through the first network to ensure the security and privacy of the second network. In this embodiment, the second network message includes, but is not limited to, the name and password of the second network. The name of the second network can be the service set identifier (Service Set Identifier, SSID) of the second network, and the password of the second network is the key required for the terminal device 20 to access the second network.

[0065] It is worth noting that the second network can be a network created by the network access device 10, or a local area network created by other devices other than the network access device 10. For example, if the network access device 10 is an NVR, the terminal device 20 is an IPC, and the IPC needs to establish a network connection with the NVR in order to transmit the video stream to the NVR, then the second network can be a private network created by the NVR. Alternatively, the network access device 10 is a mobile phone on which the user has downloaded the network access application APP, and the terminal device 20 is an IPC. The IPC needs to establish a network connection with the user's router in order to store the video stream to the cloud server or so that the user can remotely view the real-time video stream of the IPC through a mobile phone or other device, then the second network can be a local area network created by the user's router. In order to enable the mobile phone to send a second network message to the IPC, the user can set the second network message in the mobile phone in advance, and open the network hotspot of the mobile phone (equivalent to the first network) through the network access application APP when configuring the network with the router. At this time, the mobile phone can send the second network message of the router to the IPC through the network hotspot.

[0066] Step 108 : The terminal device 20 receives the second network message sent by the network access device 10 .

[0067] In some embodiments, after the terminal device 20 receives the second network message sent by the network access device 10, in order to facilitate the terminal device 20 to subsequently access the second network using the second network message, the terminal device 20 also stores the second network message (such as the name and password of the second network) in the second memory 24.

[0068] It should be noted that, in some embodiments, after the network access device 10 sends the second network message to the terminal device 20, the network access device 10 can actively disconnect the first network connection established with the terminal device 20, or the terminal device 20 can actively disconnect the first network connection established between the network access device 10. This can save network resources of the network access device 10 and the terminal device 20, and can also ensure the security of video data that can only be transmitted between the network access device 10 and the terminal device 20 through the second network, thereby avoiding the safety risks of the network access device 10 and the terminal device 20 transmitting video data using the first network.

[0069] Step 109: The terminal device 20 accesses the second network according to the second network message.

[0070] The terminal device 20 can access the second network through the second network message (such as the name and password of the second network).

[0071] In the embodiment of the present application, the network access device 10 broadcasts the first network message to the terminal device 20, so that the terminal device 20 establishes a first network communication connection with the network access device 10, and then the network access device 10 can receive the authentication information sent by the terminal device 20 to determine whether the terminal device 20 passes the network access authentication. If the terminal device 20 passes the network access authentication, the network access device 10 sends the second network message to the terminal device 20, so that the terminal device 20 accesses the second network, thereby completing the network configuration process for the terminal device 20. In the above network configuration process, it is not necessary to directly input the second network message (such as the name and password of the second network) to the terminal device 20, nor is it necessary for the terminal device 20 to scan the QR code with the second network message. Therefore, the hardware requirements for the terminal device 20 are relatively low, that is, the terminal device 20 does not need to have a physical button or touch screen that can be used to input characters, nor does it need the terminal device 20 to have a camera that can scan the QR code, and the network configuration of the terminal device 20 can be completed.

[0072] When an abnormality occurs in the terminal device 20, causing the connection to the second network that was originally connected to be disconnected, or the configuration information of the second network (such as the password of the second network) changes, causing the terminal device 20 to be unable to access the second network, the network access method provided in the embodiment of the present application can be used to re-configure the terminal device 20. When the terminal device 20 is an IPC and is set at a higher position, the IPC can be re-configured without removing it, which is convenient to operate.

[0073] Figure 6 The flowchart of the method for confirming that a terminal device passes network access authentication provided by an embodiment of the present application is shown. The method is also a method for authenticating the identity of the terminal device 20, and the method is executed by the network access device 10. Figure 6 As shown, the terminal device 20 can pass the network access authentication through the following steps.

[0074] Step 201: In response to a request from each terminal device for network access authentication, the identification code of each terminal device stored in the network access device 10 is displayed.

[0075] Among them, in the implementation Figure 5 In the process of the provided embodiment, the network access device 10 stores the authentication information after receiving the authentication information sent by each terminal device, and the authentication information includes an identification code corresponding to the terminal device, and the identification code may be the SN of the terminal device 20, or the UID of the terminal device 20, or the SN and UID of the terminal device 20. In this step, some characters of the identification code displayed by the network access device 10 are hidden, and the hidden characters may not be displayed, or may be replaced by specific symbols, such as "*" or "#", etc.

[0076] Specifically, after the terminal device 20 that establishes the first network connection with the network access device 10 sends authentication information to the network access device 10, if the terminal device 20 has not currently passed the network access authentication, that is, the terminal device 20 is not currently a terminal device that has passed the network access authentication, the network access device 10 stores the authentication information sent by the terminal device 20, for example, in a list. Different from the authentication information of the authenticated terminal device stored by the network access device 10 involved in step 106, the authentication information stored in the list is used for display in this step. The list of the network access device 10 stores the authentication information of all terminal devices 20 that have established the first network connection with the network access device 10 and sent authentication information to the network access device 10.

[0077] When the user inputs a request for authenticating the terminal device on the network access device 10, for example, when the user clicks the "Add Terminal Device" button in the display interface of the network access device 10, the network access device 10 displays part of the characters of each identification code stored in it in the form of a list on the display device 12. For example, the identification code is UID, including 16 characters, and the network access device 10 only displays 14 of them; or the identification code is SN, including 18 characters, and the network access device 10 only displays 15 of them; or the identification code includes SN and UID, and the network access device 10 only displays UID or only displays SN.

[0078] Step 202: In response to the operation of selecting an identification code from the displayed identification codes, determine whether the authentication information including the selected identification code stored in the network access device 10 includes the access password of the terminal device corresponding to the selected identification code. If yes, go to step 209; if no, go to step 203.

[0079] The access password of the terminal device 20 refers to the password used to access the terminal device 20. Taking the terminal device 20 as an IPC, in order to ensure the security of the data stored in the IPC and prevent others from stealing it, the user can set an access password for the IPC. Only by entering the correct access password into the IPC can the data stored in the IPC be read. Therefore, the identity of the user or device trying to access the IPC can also be verified by the access password of the terminal device 20 to ensure that only authorized users can access the monitoring screen and other data of the IPC.

[0080] If the user sets an access password for the terminal device 20, the authentication information sent by the terminal device 20 to the network access device 10 in step 104 includes the identification code and access password of the terminal device 20, and accordingly, the authentication information stored in the above list by the network access device 10 includes the identification code and access password of the terminal device 20. If the user does not set an access password for the terminal device 20, the authentication information sent by the terminal device 20 to the network access device 10 in step 104 includes the identification code of the terminal device 20 but does not include the access password of the terminal device 20, and the authentication information stored in the above list by the network access device 10 only includes the identification code of the terminal device 20 but does not include the access password.

[0081] Step 203: Output the first prompt information.

[0082] If the user has not set an access password for the terminal device 20 corresponding to the selected identification code, for example, when the user configures the network for the terminal device 20 for the first time, the authentication information stored in the list of the network access device 10 does not include the access password of the terminal device 20 corresponding to the selected identification code, and at this time, the identification code of the terminal device 20 is verified to authenticate the terminal device 20. The network access device 10 outputs the first prompt information to prompt the user to input the hidden characters in the selected identification code to the network access device 10. For example, the identification code is UID, which includes 16 characters, and the network access device 10 only displays 14 of them, then the first prompt message is used to prompt the user to enter 2 hidden characters; or the identification code is SN, which includes 18 characters, and the network access device 10 only displays 15 of them, then the first prompt message is used to prompt the user to enter 3 hidden characters; or the identification code includes SN and UID, and the network access device 10 only displays UID, then the first prompt message is used to prompt the user to enter the hidden SN, or the network access device 10 only displays SN, then the first prompt message is used to prompt the user to enter the hidden UID.

[0083] Step 204: Acquire input characters. After the user inputs characters to the network access device 10 according to the first prompt information, the network access device 10 acquires the characters input by the user.

[0084] Step 205: Determine whether the input character is consistent with the hidden character according to the selected identification code. If yes, go to step 206; if no, go to step 207.

[0085] In step 104, since the authentication information sent by the terminal device 20 to the network access device 10 includes a complete identification code, the authentication information stored in the above list by the network access device 10 also includes a complete identification code. In this step, the network access device 10 determines whether the characters input by the user to the network access device 10 are consistent with the hidden characters in the displayed selected identification code based on the complete identification code stored in the list.

[0086] Step 206: Confirm that the terminal device 20 corresponding to the selected identification code passes the network access authentication.

[0087] For example, when the terminal device 20 is an IPC, a manufacturer usually sets a unique identification code for each IPC when producing the IPC, and the identification code is usually attached to the surface of the IPC in the form of a label, or sold to users together with the IPC in other forms (such as printed on a packaging box or an instruction manual, etc.). In other words, only the user who purchases the IPC or the user of the IPC (collectively referred to as an authorized user) knows the identification code of the IPC.

[0088] Therefore, in the embodiment of the present application, if the characters input by the user to the network access device 10 are consistent with the hidden characters, it means that the user is an authorized user of the terminal device 20 corresponding to the selected identification code, and has the authority to configure the network for the terminal device 20 corresponding to the selected identification code and has the authority to read the data stored in the terminal device 20. The terminal device 20 corresponding to the selected identification code can be determined as a terminal device that has passed the network access authentication.

[0089] Step 207: Determine whether the number of times characters are input to the network access device 10 reaches a first preset threshold. If yes, go to step 208; if no, go to step 204. The first preset threshold can be set as needed, for example, 3 times or 5 times.

[0090] Step 208: restricting the operation of inputting characters to the network access device 10 within the first preset time. The restriction of the operation of inputting characters to the network access device 10 within the first preset time may be that the network access device 10 is in a locked state within the first preset time, and the user cannot continue to input characters to the network access device 10. The first preset time may be set as required, for example, 5 minutes, 10 minutes, or 30 minutes. By restricting the operation of inputting characters to the network access device 10, malicious users can be prevented from guessing or cracking the identification code by constantly trying different characters.

[0091] Step 209: Output the second prompt information.

[0092] If the user has set an access password for the terminal device 20 corresponding to the selected identification code, for example, when the user configures the network for the terminal device 20 again, for example, when the user configures the network for the terminal device 20 for the first time, the user usually sets an access password for the terminal device 20, then the authentication information stored in the list of the network access device 10 includes the access password of the terminal device 20 corresponding to the selected identification code, and at this time, the access password of the terminal device 20 is verified to authenticate the terminal device 20. The network access device 10 outputs a second prompt message to prompt the user to enter the access password of the terminal device 20 corresponding to the selected identification code into the network access device 10. As described above, the access password of the terminal device 20 is set by the user for the terminal device 20, so the access password of the terminal device 20 can also be used to verify whether the user who attempts to configure the network for the terminal device 20 is an authorized user, thereby avoiding the leakage of data of the terminal device 20.

[0093] Step 210: Obtain the input access password.

[0094] Step 211: Determine whether the input access password is consistent with the access password of the terminal device corresponding to the selected identification code. If yes, go to step 206; if no, go to step 212.

[0095] Among them, step 210 to step 211 are similar to step 204 to step 205. Therefore, the principles and implementation methods of step 210 to step 211 can refer to step 204 to step 205 and will not be repeated here.

[0096] Step 212: Determine whether the number of times the access password is input to the network access device 10 reaches a second preset threshold. If yes, go to step 213; if no, go to step 210. The second preset threshold can be set as needed, such as 3 times, 5 times or 7 times.

[0097] Step 213: restricting the operation of inputting the access password to the network access device within a second preset time period, wherein the second preset time period can be set as required, such as 5 minutes, 10 minutes or 30 minutes.

[0098] Among them, step 212 to step 213 are similar to step 207 to step 208. Therefore, the principles and implementation methods of step 212 to step 213 can refer to step 207 to step 208 and will not be repeated here.

[0099] In the embodiment of the present application, for the case where the user has not set an access password for the terminal device 20, for example, the case where the user is configuring the network for the terminal device 20 for the first time, only when it is determined that the characters input by the user are consistent with the hidden characters in the selected identification code, it is indicated that the user is an authorized user, and the terminal device corresponding to the selected identification code is determined as an authenticated terminal device, thereby ensuring that only verified authorized users can configure the network for the terminal device 20 and access the terminal device 20, thereby maintaining the security of the terminal device 20 and the confidentiality of the data.

[0100] As described above, the identification code of the terminal device 20 is usually attached to the body surface of the terminal device 20 in the form of a label, or sold to the user together with the terminal device 20 in other forms (such as printed on a packaging box or an instruction manual, etc.). Therefore, there may be a situation where the identification code of the terminal device 20 is leaked. In view of this situation, in the embodiment of the present application, when the authentication information stored in the network access device 10 includes the access password of the terminal device corresponding to the selected identification code, if the terminal device 20 is abnormal and disconnected from the second network, the user needs to re-configure the network for the terminal device 20. At this time, the user is required to enter the access password of the terminal device to the network access device 10. Since the access password of the terminal device 20 is set by the user for the terminal device 20, only when the access password entered by the user is consistent with the access password of the authentication information in the list stored by the network access device 10, it indicates that the user is an authorized user, and the terminal device corresponding to the selected identification code is determined as an authenticated terminal device, thereby ensuring that only a verified authorized user can configure the network for the terminal device 20 and access the terminal device 20, thereby avoiding the leakage of data of the terminal device 20.

[0101] In an embodiment of the present application, in order to prevent malicious users from guessing or cracking identification codes or access passwords by constantly trying different characters, when the number of incorrect characters or access passwords entered by the user into the network access device 10 exceeds a certain number, the network access device 10 restricts the user from entering characters or access passwords into the network access device 10 within a certain period of time, thereby ensuring the security of the terminal device 20 and the confidentiality of the data.

[0102] exist Figure 5 Based on the provided embodiment, in an embodiment of the present application, after step 103, the method also includes: after the terminal device 20 accesses the first network of the network access device 10, if the network access device 10 does not receive the authentication information sent by the terminal device 20 within the first time period, the network access device 10 adds the media access control (Media Access Control, MAC) address of the terminal device 20 to the first blacklist.

[0103] The MAC address is a unique identifier for identifying a network device. Different terminal devices 20 correspond to different MAC addresses. Therefore, after different terminal devices 20 access the first network established by the network access device 10 through the first network message, the network access device 10 can distinguish different terminal devices 20 through the MAC addresses of each terminal device 20.

[0104] Since terminal devices within the network signal coverage of the network access device 10 can access the first network established by the network access device 10 after receiving the first network message, it is possible that terminal devices that do not need to access the second network also access the first network, thereby causing congestion in the first network and affecting network performance.

[0105] In order to avoid the above situation, in the embodiment of the present application, after the terminal device 20 that needs to access the second network accesses the first network established by the network access device 10, the terminal device 20 will send its authentication information to the network access device 10. Therefore, in the embodiment of the present application, if the network access device 10 does not receive the authentication information sent by the device that establishes the first network connection with it within the first time period, it can be determined that the device is not a device that needs to access the second network, and then the MAC address of the device is added to the first blacklist, so that the device that establishes the first network connection with the network access device 10 can be managed according to the first blacklist in the future. It should be noted that the first time period can be set as needed, for example, 5 minutes, 10 minutes or 15 minutes.

[0106] exist Figure 5 Based on the embodiment provided, in the embodiment of the present application, after step 105, the method further includes the following steps:

[0107] Step a1: Determine whether the authentication information of the terminal device is encrypted. If yes, go to step a2; if no, go to step a3 and do not execute step 106.

[0108] Step a2: The network access device 10 determines whether the encryption method of the authentication information is correct. If so, the process goes to step 106; if not, the process goes to step a3 and step 106 is not performed.

[0109] When the authentication information of the terminal device 20 is encrypted, the authentication information sent by the terminal device 20 is the encrypted authentication information, and the encryption method is pre-stored in the network access device 10 .

[0110] Step a3: The network access device 10 adds the media access control MAC address of the terminal device 20 to the first blacklist.

[0111] In the embodiment of the present application, since the authentication information sent by the terminal device 20 that needs to access the second network to the network access device 10 is encrypted information and the encryption method is pre-stored in the network access device 10, after the network access device 10 receives the information sent by the terminal device 20, it can preliminarily determine whether the terminal device 20 is a device that needs to access the second network connection by judging whether the encryption method of the received information is correct. If the authentication information sent by the terminal device to the network access device 10 is not encrypted, or the encryption method does not match the encryption method pre-stored in the network access device 10, it can be determined that the terminal device is not a device that needs to access the second network, so the network access device 10 no longer executes step 106, and adds the MAC address of the terminal device to the first blacklist, so that the devices that establish the first network connection with the network access device 10 are subsequently managed according to the first blacklist.

[0112] In some embodiments, the network access method further includes the following steps:

[0113] Step b1: When the terminal device 20 establishes a first network connection with the network access device 10, the network access device 10 determines whether the MAC address of the terminal device 20 belongs to an address in the first blacklist. If yes, go to step b2; if no, go to step 105.

[0114] Among them, after the terminal device 20 accesses the first network established by the network access device 10, the network access device 10 can obtain the MAC address of the terminal device 20, and then determine whether the MAC address of the terminal device 20 belongs to the address in the first blacklist.

[0115] Step b2: the network access device 10 disconnects the first network to which the terminal device 20 accesses.

[0116] Since the first blacklist stores the MAC addresses of terminal devices that do not need to access the second network, in the embodiment of the present application, when it is determined that the MAC address of the terminal device 20 belongs to the address in the first blacklist, the network access device 10 disconnects the first network connection established with the terminal device 20, thereby avoiding congestion in the first network and improving the performance of the first network.

[0117] When an abnormality occurs in the terminal device 20, in order to determine the abnormality cause of the terminal device 20, in the embodiment of the present application, Figure 5 Based on the provided embodiment, after step 106, the method also includes: if the terminal device 20 passes the network access authentication, sending an exception request to the terminal device 20 through the first network, and receiving the exception information of the terminal device 20 sent by the terminal device 20 to the network access device 10 according to the exception request.

[0118] If the network access device 10 has sent the second network message to the terminal device 20 at the historical moment, and the terminal device 20 accesses the first network established by the network access device 10 again through the first network message broadcast by the network access device 10, it means that an abnormality has occurred in the terminal device 20. Therefore, in the embodiment of the present application, the network access device 10 sends a request message to the terminal device 20 and obtains the abnormal information sent by the terminal device 20, so that the network access device 10 confirms the abnormal cause of the terminal device 20 according to the abnormal information, so that the user can perform abnormal processing according to the abnormal cause to avoid the abnormality of the terminal device 20 again.

[0119] Figure 7 FIG. 2 shows a schematic diagram of an application scenario provided by another embodiment of the present application. Figure 7 As shown, in the scenario of applying the network access method provided by the present application, multiple network access devices and terminal devices 20 set as wireless network access points are included, wherein the multiple network access devices are respectively a first network access device 17 and a second network access device 18. It should be noted that Figure 7 Only two network access devices and one terminal device 20 are used as an example for illustration, and the embodiment of the present application does not limit the number of network access devices and terminal devices 20. In some embodiments, three or more network access devices and one terminal device 20, or three or more network access devices and two or more terminal devices 20 may also be included.

[0120] Among them, the first network access device 17 and the second network access device 18 refer to devices for broadcasting a first network message. The first network messages broadcast by the first network access device 17 and the second network access device 18 may be the same or different. In the embodiment of the present application, the terminal device 20 can receive the first network message broadcast by the first network access device 17 and access the first network established by the first network access device 17. The terminal device 20 can also receive the first network message broadcast by the second network access device 18 and access the first network established by the second network access device 18.

[0121] In order to better understand the above application scenario, the first network access device 17 is a first NVR, the second network access device 18 is a second NVR, and the terminal device 20 is an IPC. The first NVR and the IPC are devices of user A, and user A needs to establish a second network connection between the first NVR and the IPC so that the IPC stores the video stream to the first NVR. The second NVR is a device of user B.

[0122] That is to say, the IPC should establish a second network connection with the first NVR instead of the second NVR. However, if the IPC always establishes a first network connection with the second NVR and does not establish a first network connection with the first NVR, the IPC will not obtain the name and password of the second network sent by the first NVR, and will not be able to establish a second network connection with the first NVR.

[0123] Therefore, in order to solve the above problems, Figure 5 Based on the embodiment provided, in the embodiment of the present application, after step 104, the method further includes the following steps:

[0124] Step c1: If the terminal device 20 does not receive the second network message sent by the current network access device of the first network currently accessed by the terminal device 20, the terminal device 20 repeats the following steps c2 to c5 until it receives the second network message sent by one of the multiple network access devices.

[0125] Specifically, after the terminal device 20 establishes a first network connection with a certain network access device, if the second network message sent by the network access device is not received, the following steps c2 to c5 are repeatedly executed. For example, the terminal device 20 currently establishes a first network connection with the second network access device 18, but the terminal device 20 does not receive the second network message sent by the second network access device 18, then the following steps c2 to c5 are repeatedly executed.

[0126] Step c2: the terminal device 20 disconnects from the first network of the current network access device to which the terminal device 20 is currently connected.

[0127] The current network access device is a device among multiple network access devices that currently establishes a first network connection with the terminal device. For example, the current terminal device 20 establishes a first network connection with the second network access device 18, then in this step, the current network access device is the second network access device 18.

[0128] Step c3: the terminal device 20 obtains a first network message broadcasted by other network access devices among multiple network access devices except the current network access device.

[0129] Among them, other network access devices refer to other network access devices among multiple network access devices except the current network access device in step c2. In order to better introduce other network access devices here, take multiple network access devices including a first network access device 17 and a second network access device 18 as an example. For example, in step c1, the terminal device 20 establishes a first network connection with the second network access device 18, and currently does not receive the second network message sent by the second network access device 18, then the current network access device in step c2 is the second network access device 18, and in this step, the other network access device is the first network access device 17. If the multiple network access devices include three or more network access devices, then the same applies and will not be repeated here.

[0130] Step c4: the terminal device 20 accesses the first network of other network access devices according to the first network message broadcast by other network access devices.

[0131] Among them, if the terminal device 20 obtains the first network message broadcast by the first network access device 17 in step c3, then in this step, the terminal device 20 establishes a first network connection with the first network access device 17 and sends the authentication information of the terminal device 20 to the first network access device 17.

[0132] Step c5: Send authentication information to the network access device that currently establishes the first network connection with the terminal device 20.

[0133] The current network access device in this step is not the same as the current network access device in step c2, and the current network access device in this step refers to the network access device that establishes the first network connection with the terminal device 20 in step c4. For example, if in step c4, the terminal device 20 establishes the first network connection with the first network access device 17, then the current network access device in this step is the first network access device 17, and the authentication information of the terminal device 20 is sent to the first network access device 17.

[0134] In an embodiment of the present application, when there are multiple network access devices broadcasting the first network message at the same time, the above-mentioned method can avoid the situation where the terminal device 20 always establishes a first network connection with a network access device among the multiple network access devices, resulting in the inability to receive the second network message sent by the network access device that actually needs to be configured for the terminal device 20, thereby ensuring that the network configuration for the terminal device 20 is completed.

[0135] On the basis of the above-mentioned embodiments, in the embodiment of the present application, after step 104, the method further includes: if the terminal device 20 does not receive the confirmation message sent by the network access device 10 within the second time period, the MAC address of the network access device 10 is added to the second blacklist. Among them, the first network message broadcast by the network access device 10 also includes the MAC address of the network access device 10, that is, when the network access device 10 broadcasts the name and password of the first network, it will also broadcast the MAC address of the network access device 10. Therefore, when the terminal device 20 obtains the name and password of the first network broadcast by the network access device 10, it will also obtain the MAC address of the network access device 10.

[0136] As described above, each network device corresponds to a unique MAC address, that is, the network access device 10 also corresponds to a MAC address. Among them, for the network access device 10 that needs to send the second network message to the terminal device 20, that is, the network access device 10 that needs to configure the network for the terminal device 20, after receiving the authentication information sent by the terminal device 20, it will send a confirmation message to the terminal device 20 to confirm that the network access device 10 has received the authentication information sent by the terminal device 20. For the network access device 10 that does not need to send the second network message to the terminal device 20, after receiving the authentication information sent by the terminal device 20, it will not send confirmation information to the terminal device 20. Therefore, the terminal device 20 can determine whether the network access device belongs to the device that needs to provide the second network message to it according to whether the confirmation information sent by the network access device is received. For the device that does not need to provide the second network message to the terminal device 20, the MAC address of the device is added to the second blacklist.

[0137] For example, user A has an IPC, an NVR, and a router, and the NVR and the router will broadcast the first network message at the same time. Here, the first network messages broadcast by the NVR and the router can be the same or different, but user A needs to establish a second network connection between the IPC and the NVR, that is, the NVR needs to provide the second network message to the IPC, and after the NVR receives the authentication information sent by the IPC, it will send a confirmation message to the IPC. If the IPC establishes a first network connection with the router, the IPC cannot obtain the second network message provided by the router, and after the router receives the authentication information sent by the IPC, it will not send a confirmation message to the IPC. Therefore, if the IPC establishes a first network connection with the router, the IPC will not receive the confirmation message sent by the router after sending the authentication information to the router. Therefore, the IPC can determine that the router does not belong to the network access device that provides the second network message to it, and then add the MAC address of the router to the second blacklist.

[0138] In the embodiment of the present application, if the terminal device 20 does not receive a confirmation message sent by the network access device 10 within the second time period, the MAC address of the network access device 10 is added to the second blacklist, so that the network access device can be managed according to the second blacklist later. It should be noted that the second time period can be set as needed, for example, 3 minutes, 5 minutes or 10 minutes.

[0139] In some embodiments, before step 103, the network access method further includes: the terminal device 20 determines whether the MAC address of the network access device 10 is an address in the second blacklist. If yes, step 103 is not performed; if no, the method goes to step 103.

[0140] In the embodiment of the present application, the first network message broadcast by the network access device 10 also includes the MAC address of the network access device 10, that is, when the network access device 10 broadcasts the first network message, it also broadcasts the MAC address of the network access device 10. Therefore, when the terminal device 20 obtains the first network message broadcast by the network access device 10, it also obtains the MAC address of the network access device 10.

[0141] As introduced above, if the MAC address of the network access device 10 belongs to the address in the second blacklist, it means that the network access device 10 is a device that does not need to send a second network message to the terminal device 20. Therefore, the terminal device 20 does not establish a first network connection with the network access device 10 and does not send authentication information to the network access device 10, so as to avoid leakage of authentication information of the terminal device 20.

[0142] An embodiment of the present application provides a computer-readable storage medium, wherein the storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned network access method embodiment is implemented.

[0143] An embodiment of the present application provides a computer program, which can be executed by a processor to implement the above-mentioned network access method embodiment.

[0144] An embodiment of the present application provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the above-mentioned network access method embodiment is implemented.

[0145] In several embodiments provided in the present application, if any function is implemented in the form of a software function module / unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, all or part of the technical solution of the present application can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, server or other electronic device) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (RandomAccess Memory, RAM), disk or optical disk and other media that can store computer program codes.

[0146] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A network access method, applied to a network access device, characterized in that: The method comprises: Broadcasting a first network message of the network access device, where the first network message is used for a terminal device to access a first network of the network access device; receiving authentication information sent by the terminal device through the first network; Determining whether the terminal device has passed the network access authentication according to the authentication information of the terminal device; If the terminal device passes the network access authentication, a second network message is sent to the authenticated terminal device through the first network, and the second network message is used for the terminal device to access the second network.

2. The method according to claim 1, characterized in that The method further comprises: In response to a request from each terminal device for network access authentication, displaying an identification code of each terminal device stored in the network access device, wherein the network access device stores the authentication information after receiving the authentication information sent by each terminal device, the authentication information includes an identification code corresponding to the terminal device, and some characters of the displayed identification code are hidden; In response to an operation of selecting an identification code from the displayed identification codes, determining whether the authentication information including the selected identification code includes an access password of a terminal device corresponding to the selected identification code; If the authentication information including the selected identification code does not include the access password of the terminal device corresponding to the selected identification code, outputting first prompt information, wherein the first prompt information is used to prompt the network access device to input the hidden characters in the selected identification code; Get the input character; Determining whether the input character is consistent with the hidden character according to the selected identification code; If the input character is consistent with the hidden character, it is confirmed that the terminal device corresponding to the selected identification code passes the network access authentication.

3. The method according to claim 2, characterized in that The method further comprises: If the authentication information including the selected identification code includes the access password of the terminal device corresponding to the selected identification code, outputting second prompt information, wherein the second prompt information is used to prompt the network access device to input the access password of the terminal device corresponding to the selected identification code; Get the entered access password; Determining whether the input access password is consistent with the access password of the terminal device corresponding to the selected identification code; If the input access password is consistent with the access password of the terminal device corresponding to the selected identification code, it is confirmed that the terminal device corresponding to the selected identification code passes the network access authentication.

4. The method according to claim 1, characterized in that: The method further comprises: When the terminal device accesses the first network, determining whether the MAC address of the terminal device belongs to an address in the first blacklist; If the MAC address of the terminal device belongs to the address in the first blacklist, disconnecting the first network accessed by the terminal device; If the MAC address of the terminal device does not belong to the addresses in the first blacklist, the process proceeds to the step of determining whether the terminal device has passed the network access authentication based on the authentication information of the terminal device.

5. The method according to claim 4, characterized in that The first blacklist is updated by the following steps: Determining whether the authentication information of the terminal device is encrypted; If the authentication information is encrypted, determining whether the encryption method of the authentication information is correct; If the encryption method of the authentication information is incorrect, adding the MAC address of the terminal device to the first blacklist; and / or After the terminal device accesses the first network, if no authentication information sent by the terminal device is received within a first time period, the MAC address of the terminal device is added to the first blacklist.

6. The method according to claim 1, characterized in that The method further comprises: If the terminal device passes the network access authentication, sending an abnormal request to the terminal device through the first network; Receive abnormal information of the terminal device sent by the terminal device to the network access device according to the abnormal request.

7. The method according to any one of claims 1 to 6, characterized in that: The first network is a public network disclosed by the network access device to the outside world, and the second network is a private network provided to the terminal device for network configuration.

8. The method according to claim 1, characterized in that The first network message includes the name of the first network or the first network message includes the name and password of the first network, and the second network message includes the name and password of the second network.

9. The method according to any one of claims 1 to 6, characterized in that: The network access device is a network video recorder NVR, a network repeater Hub, a network router or an electronic device installed with a network access application APP.

10. A network access device, comprising a memory, a processor and a computer program stored in the memory, characterized in that: The processor executes the computer program to implement the network access method according to any one of claims 1 to 9.

11. A network access method, applied to a terminal device, characterized in that: The method includes: Obtaining a first network message broadcast by a network access device; accessing the first network of the network access device through the first network message; Sending authentication information of the terminal device to the network access device through the first network, so that the network access device can determine whether the terminal device passes the network access authentication; If the terminal device passes the network access authentication, receiving a second network message sent by the network access device through the first network; Access the second network according to the second network message.

12. The method according to claim 11, characterized in that When there are first network messages broadcast simultaneously by multiple network access devices, the method further includes: Step c1: if the second network message sent by the current network access device of the first network currently accessed by the terminal device is not received, then repeat the following steps c2 to c5 until the second network message sent by one of the network access devices is received; Step c2: disconnecting the first network of the current network access device to which the terminal device is currently connected; Step c3: Acquire a first network message broadcasted by other network access devices among the multiple network access devices except the current network access device; Step c4: accessing the first network of the other network access device according to the first network message broadcasted by the other network access device; Step c5: Send the authentication information to the network access device of the first network to which the terminal device is currently connected.

13. The method according to claim 11, characterized in that The method further comprises: Obtaining the MAC address broadcast by the network access device; Determine whether the MAC address of the network access device belongs to an address in the second blacklist; If the MAC address of the network access device belongs to the address in the second blacklist, then the first network of the network access device is not accessed; If the MAC address of the network access device does not belong to the addresses in the second blacklist, accessing the first network of the network access device; The second blacklist is updated by the following steps: If, after sending the authentication information of the terminal device to the network access device, no confirmation message sent by the network access device is received within a second time period, the MAC address of the network access device is added to the second blacklist.

14. The method according to any one of claims 11 to 13, characterized in that: The first network is a public network disclosed by the network access device to the outside world, and the second network is a private network provided to the terminal device for network configuration.

15. The method according to claim 14, characterized in that The first network message includes the name of the first network or the first network message includes the name and password of the first network, and the second network message includes the name and password of the second network.

16. A terminal device comprising a memory, a processor and a computer program stored in the memory, characterized in that: The processor executes the computer program to implement the network access method according to any one of claims 11 to 15.

17. A network access system, characterized in that: The system includes a network access device and a terminal device, wherein: The network access device is used to broadcast a first network message of the network access device; The terminal device is used to obtain a first network message broadcast by the network access device, access a first network of the network access device through the first network message, and send authentication information of the terminal device to the network access device through the first network; The network access device is further used to receive authentication information sent by the terminal device, and determine whether the terminal device passes the network access authentication according to the authentication information, and if the terminal device passes the network access authentication, send the second network message to the terminal device through the first network; The terminal device is further configured to receive a second network message sent by the network access device, and access a second network according to the second network message.

18. The system according to claim 17, characterized in that The network access device is a network video recorder NVR, a network repeater Hub, a network router or an electronic device installed with a network access application APP.

Images