Authentication operation execution method and device, storage medium and electronic device

Abstract

The invention discloses an authentication operation execution method and device, a storage medium and an electronic device, and relates to the technical field of smart home, the authentication operation execution method comprises the following steps: receiving a pre-authentication request sent by a terminal device, the pre-authentication request being used for requesting to associate the terminal device with WiFi; executing a pre-authentication operation on the terminal device through the pre-authentication request to obtain a first pre-authentication result corresponding to the pre-authentication operation, and feeding back the first pre-authentication result to the terminal device; executing a wireless network authentication operation on the terminal equipment according to the first pre-authentication result, and feeding back a second pre-authentication result corresponding to the wireless network authentication operation to the terminal equipment; and receiving a final identity authentication request sent by the terminal device according to the second pre-authentication result, and executing a final identity authentication operation on the terminal device according to the final identity authentication request.

Description

Technical Field

[0001] The present application relates to the field of smart home technology, and more specifically, to a method and device for executing an authentication operation, a storage medium, and an electronic device. Background Art

[0002] With the rapid development of mobile Internet, new Internet applications have higher and higher requirements for mobile networks. As the most popular Internet access method for users in the past decade, WiFi has significant advantages such as ease of use, high speed, low latency, and low cost, so it has been deployed on a large scale. At the same time, with the popularization of smart home devices, more and more devices are connected to home WiFi networks, and most of the devices work in the 2.4G frequency band, resulting in an increasingly busy home WiFi 2.4G air interface environment, intensified competition for wireless resources, and serious air interface message collisions.

[0003] Specifically, most of the current smart home devices that use WiFi access do not have effective end-to-end coordination with WiFi routers / APs at the WiFi mac layer. WiFi routers / APs schedule all STA devices equally and most use AC_BE queues for scheduling, which makes it easy for devices such as full-house screens with high network real-time performance and high traffic to experience problems such as increased WiFi network latency, network disconnection, failure to reconnect after disconnection, and failure to control sub-devices in the cloud in high-density environments. In other words, the existing authentication method between the STA end and the WiFi end leads to poor WiFi performance in high-density environments for full-house screens.

[0004] In the related technology, the existing authentication method between the STA end and the WiFi end leads to problems such as poor WiFi performance in a high-density environment of the whole house, and no effective solution has been proposed yet.

[0005] Therefore, it is necessary to improve the related technology to overcome the above-mentioned defects in the related technology. Summary of the invention

[0006] The embodiments of the present application provide a method and device for executing an authentication operation, a storage medium, and an electronic device, so as to at least solve the problem that the existing authentication method between the STA end and the WiFi end in the related technology leads to poor WiFi performance in a high-density environment of the whole house.

[0007] According to one aspect of an embodiment of the present application, a method for executing an authentication operation is provided, comprising: receiving a pre-authentication request sent by a terminal device, wherein the pre-authentication request is used to request that the terminal device be associated with WiFi; performing a pre-authentication operation on the terminal device through the pre-authentication request, obtaining a first pre-authentication result corresponding to the pre-authentication operation, and feeding back the first pre-authentication result to the terminal device; performing a wireless network authentication operation on the terminal device according to the first pre-authentication result, and feeding back a second pre-authentication result corresponding to the wireless network authentication operation to the terminal device; receiving a final identity authentication request sent by the terminal device according to the second pre-authentication result, and performing a final identity authentication operation on the terminal device according to the final identity authentication request.

[0008] In an exemplary embodiment, a pre-authentication operation is performed on the terminal device through the pre-authentication request to obtain a first pre-authentication result corresponding to the pre-authentication operation, including: determining whether the pre-authentication request includes a unique identifier of the terminal device; in a case where the pre-authentication request includes the unique identifier, mapping the scheduling priority of the terminal device to a first queue, and confirming that the first pre-authentication result is a successful pre-authentication; in a case where the pre-authentication request does not include the unique identifier, mapping the scheduling priority of the terminal device to a second queue, and determining that the first pre-authentication result is a pre-authentication failure, wherein the scheduling priority of the first queue is higher than the scheduling priority of the second queue.

[0009] In an exemplary embodiment, performing a final authentication operation on the terminal device according to the final authentication request includes: confirming whether the first media access control address of the terminal device is included in the whitelist of the WiFi; when the first media access control address is included in the whitelist, performing the final authentication operation on the terminal device through the final authentication request; when the first media access control address is not included in the whitelist, performing the final authentication operation on the terminal device according to the final authentication request and the timer of the WiFi.

[0010] In an exemplary embodiment, a final authentication operation on the terminal device is performed according to the final authentication request and the WiFi timer, including: parsing the target identifier and the second media access control address carried by the final authentication request; comparing the first media access control address with the second media access control address, and comparing the target identifier with the unique identifier of the terminal device; if preset conditions are met, confirming that the final authentication operation is successful, wherein the preset conditions include: the first media access control address is consistent with the second media access control address, the target identifier is consistent with the unique identifier, and the WiFi timer has not timed out, wherein the WiFi timer starts at the moment of confirming that the first media access control address is not included in the whitelist.

[0011] According to another aspect of an embodiment of the present application, a method for executing an authentication operation is also provided, including: sending a pre-authentication request to WiFi, wherein the pre-authentication request is used to request that a terminal device be associated with the WiFi; receiving a first pre-authentication result fed back by the WiFi, wherein the first pre-authentication result is a first pre-authentication result corresponding to a pre-authentication operation performed by the WiFi on the terminal device through the pre-authentication request; receiving a second pre-authentication result fed back by the WiFi, wherein the second pre-authentication result is a second pre-authentication result corresponding to a wireless network authentication operation performed by the WiFi on the terminal device according to the first pre-authentication result; and sending a final authentication request to the WiFi according to the second pre-authentication result to instruct the WiFi to perform a final authentication operation on the terminal device according to the final authentication request.

[0012] According to another aspect of an embodiment of the present application, a device for executing an authentication operation is also provided, including: a first receiving module, used to receive a pre-authentication request sent by a terminal device, wherein the pre-authentication request is used to request that the terminal device be associated with WiFi; a first execution module, used to perform a pre-authentication operation on the terminal device through the pre-authentication request, obtain a first pre-authentication result corresponding to the pre-authentication operation, and feedback the first pre-authentication result to the terminal device; a second execution module, used to perform a wireless network authentication operation on the terminal device according to the first pre-authentication result, and feedback a second pre-authentication result corresponding to the wireless network authentication operation to the terminal device; a third execution module, used to receive a final identity authentication request sent by the terminal device according to the second pre-authentication result, and perform a final identity authentication operation on the terminal device according to the final identity authentication request.

[0013] In an exemplary embodiment, after receiving the first pre-authentication result fed back by the WiFi, the method further includes: when the first pre-authentication result includes a first field, determining whether the second field is a preset field, wherein the first field is a field for carrying a unique identifier of the terminal device, and the second field is a status field in the first field; when the second field is the preset field, determining that the first pre-authentication result is a successful pre-authentication; when the second field is not the preset field, determining that the first pre-authentication result is a failed pre-authentication.

[0014] In an exemplary embodiment, before sending a final authentication request to the WiFi according to the second pre-authentication result, the method further includes: when the second pre-authentication result indicates that the wireless network authentication operation is successfully authenticated, obtaining a first field for carrying a unique identifier of the terminal device; filling a third field included in the first field with a first media access control address of the terminal device, wherein the first media access control address is an address encrypted by a preset key, and the preset key is determined by the wireless network authentication operation; and determining the final authentication request by filling in the first field.

[0015] According to another aspect of the embodiments of the present application, a computer-readable storage medium is provided, in which a computer program is stored, wherein the computer program is configured to execute the above-mentioned authentication operation execution method when running.

[0016] According to another aspect of an embodiment of the present application, an electronic device is also provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the method for executing the authentication operation through the computer program.

[0017] According to another aspect of the embodiments of the present application, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the execution method of the above-mentioned authentication operation is implemented.

[0018] Through this application, first, a pre-authentication request sent by a terminal device for requesting to associate the terminal device with WiFi is received; then, a pre-authentication operation is performed on the terminal device through the pre-authentication request, and a first pre-authentication result corresponding to the pre-authentication operation is obtained, and the first pre-authentication result is fed back to the terminal device; secondly, a wireless network authentication operation is performed on the terminal device according to the first pre-authentication result, and a second pre-authentication result corresponding to the wireless network authentication operation is fed back to the terminal device; finally, a final identity authentication request is received from the terminal device according to the second pre-authentication result, and a final identity authentication operation is performed on the terminal device according to the final identity authentication request. In other words, through the pre-authentication operation, the wireless network authentication operation and the final identity authentication operation, effective terminal-pipe collaborative authentication between the terminal device and the WiFi terminal is realized. Therefore, the above technical solution is adopted to solve the problem of poor WiFi performance in a high-density environment of the whole house screen caused by the existing authentication method of the STA terminal (i.e., the terminal device) and the WiFi terminal in the related technology; and the WiFi performance in a high-density environment of the whole house screen is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0020] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0021] Figure 1 It is a hardware environment diagram of an optional method for executing an authentication operation according to an embodiment of the present application;

[0022] Figure 2 is a flowchart (I) of an optional method for executing an authentication operation according to an embodiment of the present application;

[0023] Figure 3 is a flowchart (II) of an optional method for executing an authentication operation according to an embodiment of the present application;

[0024] Figure 4 is a flowchart (III) of an optional method for executing an authentication operation according to an embodiment of the present application;

[0025] Figure 5 is a flowchart (IV) of an optional method for executing an authentication operation according to an embodiment of the present application;

[0026] Figure 6 is a flowchart of an optional method for executing an authentication operation according to an embodiment of the present application (V);

[0027] Figure 7 is a structural block diagram of an optional authentication operation execution device according to an embodiment of the present application (I);

[0028] Figure 8 This is a structural block diagram (II) of an optional authentication operation execution device according to an embodiment of the present application. DETAILED DESCRIPTION

[0029] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0030] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0031] According to one aspect of an embodiment of the present application, a method for executing an authentication operation is provided. The method for executing the authentication operation is widely used in smart home (Smart Home), smart home, smart home device ecology, smart residential (IntelligenceHouse) ecology and other whole-house intelligent digital control application scenarios. Optionally, in this embodiment, the above-mentioned method for executing the authentication operation can be applied to Figure 1 In the hardware environment shown in FIG. 1 , a plurality of terminal devices 102 and a server 104 are formed. Figure 1As shown, the server 104 is connected to multiple terminal devices 102 via a network, and can be used to provide services (such as application services, etc.) for the terminals or clients installed on the terminals. A database can be set on the server or independently of the server to provide data storage services for the server 104. Cloud computing and / or edge computing services can be configured on the server or independently of the server to provide data computing services for the server 104.

[0032] The network may include but is not limited to at least one of the following: wired network, wireless network. The wired network may include but is not limited to at least one of the following: wide area network, metropolitan area network, local area network, and the wireless network may include but is not limited to at least one of the following: WIFI (Wireless Fidelity), Bluetooth. The terminal device 102 may be but is not limited to a PC, a mobile phone, a tablet computer, a smart air conditioner, a smart range hood, a smart refrigerator, a smart oven, a smart stove, a smart washing machine, a smart water heater, a smart washing device, a smart dishwasher, a smart projection device, a smart TV, a smart clothes drying rack, a smart curtain, a smart audio and video, a smart socket, a smart speaker, a smart fresh air device, a smart kitchen and bathroom device, a smart bathroom device, a smart sweeping robot, a smart window cleaning robot, a smart mopping robot, a smart air purification device, a smart steamer, a smart microwave oven, a smart kitchen treasure, a smart purifier, a smart water dispenser, a smart door lock, etc.

[0033] In this embodiment, a method for executing an authentication operation is provided, including but not limited to being applied to WiFi. Figure 2 1 is a flow chart of a method for executing an authentication operation according to an embodiment of the present application, and the flow chart includes the following steps:

[0034] Step S202: receiving a pre-authentication request sent by a terminal device, wherein the pre-authentication request is used to request to associate the terminal device with WiFi;

[0035] Step S204: performing a pre-authentication operation on the terminal device through the pre-authentication request, obtaining a first pre-authentication result corresponding to the pre-authentication operation, and feeding back the first pre-authentication result to the terminal device;

[0036] Step S206: performing a wireless network authentication operation on the terminal device according to the first pre-authentication result, and feeding back a second pre-authentication result corresponding to the wireless network authentication operation to the terminal device;

[0037] Step S208: receiving a final identity authentication request sent by the terminal device according to the second pre-authentication result, and performing a final identity authentication operation on the terminal device according to the final identity authentication request.

[0038] Through the above steps, first, a pre-authentication request sent by a terminal device for requesting to associate the terminal device with WiFi is received; then, a pre-authentication operation is performed on the terminal device through the pre-authentication request, and a first pre-authentication result corresponding to the pre-authentication operation is obtained, and the first pre-authentication result is fed back to the terminal device; secondly, a wireless network authentication operation is performed on the terminal device according to the first pre-authentication result, and a second pre-authentication result corresponding to the wireless network authentication operation is fed back to the terminal device; finally, a final identity authentication request is received from the terminal device according to the second pre-authentication result, and a final identity authentication operation is performed on the terminal device according to the final identity authentication request. In other words, through the pre-authentication operation, the wireless network authentication operation and the final identity authentication operation, effective terminal-pipe collaborative authentication between the terminal device and the WiFi terminal is realized. Therefore, the above technical solution is adopted to solve the problem of poor WiFi performance in a high-density environment of the whole house screen caused by the existing authentication method of the STA terminal and the WiFi terminal in the related technology; and the WiFi performance in a high-density environment of the whole house screen is improved.

[0039] For the above-mentioned step S204, it can be implemented through the following steps, including: determining whether the pre-authentication request includes the unique identifier of the terminal device; when the pre-authentication request includes the unique identifier, mapping the scheduling priority of the terminal device to the first queue, and confirming that the first pre-authentication result is a successful pre-authentication; when the pre-authentication request does not include the unique identifier, mapping the scheduling priority of the terminal device to the second queue, and determining that the first pre-authentication result is a pre-authentication failure, wherein the scheduling priority of the first queue is higher than the scheduling priority of the second queue.

[0040] Optionally, the unique identifier can be a unique identifier used by the manufacturer of the terminal device to identify the terminal device, for example, it can be haier oui. Optionally, the pre-authentication request can be an association request sent by the terminal device to WiFi, that is, an associate request frame. If the associate request frame does not carry the unique identifier, the scheduling priority of the terminal device is mapped to the second queue, and the second queue has a default priority, such as the AC_BE queue; if the associate request frame carries the unique identifier, the scheduling priority of the terminal device is mapped to the first queue, and the first queue has the highest priority, which is higher than the default priority, such as the AC_VO queue.

[0041] Among them, AC_BE (Access Category Best Effort) is the default data transmission category, which is used to handle most traditional data transmission, such as web browsing, file transfer, etc. The AC_BE queue is suitable for data streams that can tolerate certain delays and packet loss. In a high-density network environment, data in the AC_BE queue may experience longer delays due to network congestion. Among them, AC_VO (Access Category Voice) is a high-priority queue for transmitting voice data. Voice data is usually very sensitive to delay, so data packets in the AC_VO queue have higher priority when competing for wireless channels.

[0042] After executing the first pre-authentication operation, WiFi feeds back the first pre-authentication result to the terminal device, for example, feedback: an associate response frame. If the associate response frame contains a vendor IE carrying a unique identifier and the status field of the vendor IE is 0, it indicates that the first pre-authentication result is a successful pre-authentication; otherwise, it indicates that the first pre-authentication result is a failed pre-authentication.

[0043] After feeding back a first pre-authentication result to the terminal device, performing a wireless network authentication operation on the terminal device according to the first pre-authentication result, including: when the first pre-authentication result is that the pre-authentication is successful, performing a four-step key negotiation with the terminal device through the first queue to complete the wireless network authentication operation; when the first pre-authentication result is that the pre-authentication fails, performing a four-step key negotiation with the terminal device through the second queue to complete the wireless network authentication operation.

[0044] According to the first pre-authentication result, the queue to which the scheduling priority of the terminal device is mapped can be determined, and then a four-step key negotiation is performed with the terminal device through the first queue or the second queue to complete the wireless network authentication operation. The wireless network authentication operation can be wpa-psk authentication.

[0045] In an exemplary embodiment, performing a final authentication operation on the terminal device according to the final authentication request includes: confirming whether the first media access control address of the terminal device is included in the whitelist of the WiFi; when the first media access control address is included in the whitelist, performing the final authentication operation on the terminal device through the final authentication request; when the first media access control address is not included in the whitelist, performing the final authentication operation on the terminal device according to the final authentication request and the timer of the WiFi.

[0046] It can be understood that after performing the wireless network authentication operation, WiFi will confirm whether the first media access control address of the terminal device is in the WiFi whitelist; if it is in the whitelist, then receiving the final authentication request sent by the terminal device can confirm that the final authentication is successful; if it is not in the whitelist, it is necessary to start the WiFi timer at the moment of confirming that it is not in the whitelist, and receive the final authentication request sent by the terminal device before the timer expires, and complete the final authentication operation according to the final authentication request.

[0047] Furthermore, a final authentication operation on the terminal device is performed according to the final authentication request and the WiFi timer, including: parsing the target identifier and the second media access control address carried by the final authentication request; comparing the first media access control address with the second media access control address, and comparing the target identifier with the unique identifier of the terminal device; and confirming that the final authentication operation is successful if preset conditions are met, wherein the preset conditions include: the first media access control address is consistent with the second media access control address, the target identifier is consistent with the unique identifier, and the WiFi timer has not timed out, wherein the WiFi timer is started at the moment of confirming that the first media access control address is not included in the whitelist.

[0048] It should be noted that after the terminal device completes the wireless network authentication operation with WiFi, it starts to generate the final authentication request. The specific method of generating the final authentication request is: the final authentication request includes a vendor IE carrying a unique identifier, and the data segment of the vendor IE is filled with encrypted data, and the encrypted data is obtained by encrypting the unique identifier and the media access control address of the terminal device through PTK. For example: in the action authrequest frame (final authentication request), the vendor IE carrying haier oui, the data segment of the vendor IE is filled with oui and mac address after being encrypted by PTK.

[0049] In an exemplary embodiment, after comparing the first media access control address with the second media access control address, and comparing the target identifier with the unique identifier of the terminal device, the method further includes: upon confirming that the final authentication operation is successful, saving the first media access control address to a whitelist, and mapping the scheduling queue of the terminal device to the first queue; upon confirming that the final authentication operation fails, mapping the scheduling queue of the terminal device to the second queue, wherein the scheduling priority of the first queue is higher than the scheduling priority of the second queue.

[0050] Optionally, if the final identity authentication operation is successful, the first media access control address of the currently interacting terminal device is saved to the whitelist, and the scheduling queue of the terminal device is mapped to the first queue; if the final identity authentication operation fails, the scheduling queue of the terminal device is mapped to the second queue.

[0051] In this embodiment, a method for executing an authentication operation is also provided, including but not limited to being applied to a terminal device. Figure 3 : is a flowchart (II) of a method for executing an authentication operation according to an embodiment of the present application, and the process includes the following steps:

[0052] Step S302: Send a pre-authentication request to the WiFi, wherein the pre-authentication request is used to request to associate the terminal device with the WiFi;

[0053] Step S304: receiving a first pre-authentication result fed back by the WiFi, wherein the first pre-authentication result is a first pre-authentication result corresponding to a pre-authentication operation performed by the WiFi on the terminal device through the pre-authentication request;

[0054] Step S306: receiving a second pre-authentication result fed back by the WiFi, wherein the second pre-authentication result is a second pre-authentication result corresponding to a wireless network authentication operation performed by the WiFi on the terminal device according to the first pre-authentication result;

[0055] Step S308: Send a final identity authentication request to the WiFi according to the second pre-authentication result, so as to instruct the WiFi to perform a final identity authentication operation on the terminal device according to the final identity authentication request.

[0056] Through the above steps, a pre-authentication request is sent to WiFi, wherein the pre-authentication request is used to request that the terminal device be associated with the WiFi; a first pre-authentication result fed back by the WiFi is received, wherein the first pre-authentication result is a first pre-authentication result corresponding to the pre-authentication operation performed by the WiFi on the terminal device through the pre-authentication request; a second pre-authentication result fed back by the WiFi is received, wherein the second pre-authentication result is a second pre-authentication result corresponding to the wireless network authentication operation performed by the WiFi on the terminal device according to the first pre-authentication result; a final identity authentication request is sent to the terminal device according to the second pre-authentication result to instruct the WiFi to perform the final identity authentication operation on the terminal device according to the final identity authentication request. That is to say, through the pre-authentication operation, the wireless network authentication operation and the final identity authentication operation, the effective terminal-pipe collaborative authentication between the terminal device and the WiFi terminal is realized. Therefore, the above technical solution is adopted to solve the problem that the existing authentication method between the STA terminal and the WiFi terminal in the related technology leads to poor WiFi performance in the high-density environment of the whole house screen; and the WiFi performance in the high-density environment of the whole house screen is improved.

[0057] Optionally, after receiving the first pre-authentication result fed back by the WiFi, the terminal device needs to determine what information the first pre-authentication result indicates, specifically: when the first pre-authentication result includes a first field, determine whether the second field is a preset field, wherein the first field is a field used to carry a unique identifier of the terminal device, and the second field is a status field in the first field; when the second field is the preset field, determine that the first pre-authentication result is a successful pre-authentication; when the second field is not the preset field, determine that the first pre-authentication result is a failed pre-authentication.

[0058] For example, when the whole-house screen module (i.e., terminal device) receives the associate response frame (i.e., the first pre-authentication result) responded by the AP (i.e., WiFi), it first checks whether it carries the vendor IE of haier oui. If not, the associate response frame is wrong, and the AP can be requested to respond with a new associate response frame again. If it carries the vendor IE of haier oui, the status field of the vendor IE is checked. If the status field is 0, it indicates that the pre-authentication is successful. If the status field is not 0, it indicates that the pre-authentication has failed.

[0059] Before sending a final authentication request to the WiFi according to the second pre-authentication result, a method for generating a final authentication request includes: when the second pre-authentication result indicates that the wireless network authentication operation is successfully authenticated, obtaining a first field for carrying a unique identifier of the terminal device; filling a third field included in the first field with a first media access control address of the terminal device, wherein the first media access control address is an address encrypted by a preset key, and the preset key is determined by the wireless network authentication operation; and determining the final authentication request through the filled first field.

[0060] It can be understood that the first field is the vendor IE carrying haier oui, and the third field is the data segment of the vendor IE. One way to generate the final authentication request is: after filling the first media access control address into the third field, encrypt the entire first field to obtain the final authentication request. Another way to generate the final authentication request is: after splicing the unique identifier and the first media access control address, encrypt the obtained spliced ​​field through PTK (i.e., preset key) and fill it into the third field; finally, the first field including the filled third field is used as the final authentication request.

[0061] In an exemplary embodiment, after receiving the first pre-authentication result fed back by the WiFi, the method further includes: when the first pre-authentication result is that the pre-authentication is successful, performing four-step key negotiation with the WiFi through the first queue to complete the wireless network authentication operation; when the first pre-authentication result is that the pre-authentication fails, performing four-step key negotiation with the WiFi through the second queue to complete the wireless network authentication operation.

[0062] In an exemplary embodiment, after sending a final identity authentication request to the terminal device according to the second pre-authentication result, the method further includes: when confirming that the final identity authentication operation is successfully authenticated, interacting with the WiFi through a first queue; when confirming that the final identity authentication operation fails, interacting with the WiFi through a second queue.

[0063] Obviously, the above-described embodiments are only part of the embodiments of the present application, not all of the embodiments. In order to better understand the execution method of the above-mentioned authentication operation, the above-mentioned process is described below in conjunction with the embodiments, but it is not intended to limit the technical solutions of the embodiments of the present application, specifically:

[0064] In order to solve the problems of increased WiFi network latency, disconnection reconnection failure, and cloud control sub-device failure in the high-density environment of the whole house screen, the embodiment of the present application improves WiFi performance by performing end-to-end collaboration between the WiFi router ("tube", equivalent to the WiFi in the above embodiment) and the WiFi module of the whole house screen ("end", equivalent to the terminal device in the above embodiment). The so-called end-to-end collaboration is to design a specific WiFi mac layer algorithm between the whole house screen WiFi module and the WiFi router / AP. The WiFi router / AP identifies the whole house screen WiFi module through pre-authentication in the association stage. After the key negotiation is successful, the final identity authentication and the final identification of the whole house screen are completed through the action frame, and the priority of the whole house screen device is mapped to the AC_VO queue (the AC_VO queue has the highest priority, and the AC_VO queue is equivalent to the first queue in the above embodiment). At the same time, the EDCA parameters of the whole house screen are dynamically adjusted through the air interface traffic statistics, so that the whole house screen WiFi module has the highest priority in the competition for radio frequency resources under the BSS, thereby improving the WiFi network experience of the whole house screen.

[0065] Figure 4 The overall message interaction process of end-to-end collaboration is shown (taking wpa2-psk authentication as an example). Figure 4 As shown in the figure, the process of associating the whole-house screen WiFi module with WiFi includes detecting the network and link authentication. In addition, in the association process, pre-authentication is performed when the association request is made, and the final identity authentication process is added after the key negotiation is completed. Pre-authentication improves the air interface competitiveness of the key negotiation message in a high-density environment and improves the connection success rate. After the wpa-psk authentication is successful, the final identity authentication is achieved through the action authrequest / response mechanism, which improves security and improves the air interface competitiveness of the whole-house screen WiFi module during data transmission, thereby improving network throughput.

[0066] Specifically, Figure 4 The following steps are included

[0067] Step S401: STA sends a probe request to WiFi (i.e. Figure 4 probe request in );

[0068] Step S402: WiFi feeds back a detection response to the STA (i.e. Figure 4 probe response in );

[0069] Step S403: The STA sends an authentication request to the WiFi (i.e. Figure 4 auth request in the url);

[0070] Step S404: WiFi sends an authentication response to the STA (i.e. Figure 4 auth response in );

[0071] Step S405: The STA sends an association request to the WiFi (i.e. Figure 4 The associate request in the authentication request is equivalent to the pre-authentication request in the above embodiment), and the association request carries the vendorspecific IE of haier oui (0x14, 0x57, 0x90);

[0072] Step S406: WiFi sends an association response to the STA (i.e. Figure 4 The authentication response carries the vendor-specific IE of haier oui (0x14, 0x57, 0x90);

[0073] Step S407: The STA and WiFi perform a wpa2-psk authentication process;

[0074] WPA2-PSK authentication is a wireless network authentication method. WPA2 stands for WiFi Protected Access II, which is a security standard in WiFi networks used to encrypt data and authenticate network users.

[0075] Step S408: The STA sends a final identity authentication request to the WiFi (i.e. Figure 4 action authrequest);

[0076] Step S409: WiFi feeds back the final authentication response to the STA (i.e. Figure 4 action authresponse in .

[0077] Furthermore, Figure 5 The STA authentication algorithm process is shown. Figure 6 The AP authentication algorithm process is shown.

[0078] Figure 5 The steps include:

[0079] Step S501: Execute detection and link authentication process with WiFi;

[0080] Step S502: Send an associate request frame carrying haier oui;

[0081] Step S503: Determine whether the pre-authentication is successful; if (the first pre-authentication result indicates) the pre-authentication is successful, execute step S504; if (the first pre-authentication result indicates) the pre-authentication fails, execute step S505;

[0082] Step S504: Use AC_VO queue to negotiate key with WiFi;

[0083] Step S505: Use AC_BE queue to negotiate key with WiFi;

[0084] Step S506: Execute wpa2-psk authentication process with WiFi;

[0085] Step S507: Obtain a pre-authentication result (ie, a second pre-authentication result);

[0086] Step S508: Determine whether the pre-authentication is successful; if (the second pre-authentication result indicates) the pre-authentication is successful, execute step S509; if (the second pre-authentication result indicates) the pre-authentication fails, execute step S512;

[0087] Step S509: Initiate a final identity authentication request based on the action frame;

[0088] Step S510: confirm whether the final identity authentication is successful; if the final identity authentication is successful, execute step S511; if the final identity authentication fails, execute step S512;

[0089] Step S511: using the AC_VO queue to send data frames;

[0090] Step S512: Use the AC_BE queue to send data frames.

[0091] Figure 6 The steps include:

[0092] Step S601: Execute the detection response and link authentication process with the STA end;

[0093] Step S602: receiving an associate req (i.e., an associate request frame or an association request) sent by the terminal;

[0094] Step S603: Determine whether associate req carries haier oui; if so, execute step S604; otherwise, execute step S606;

[0095] Step S604: Map the terminal scheduling priority to AC_VO;

[0096] Step S605: sending an associate response carrying haier oui;

[0097] Step S606: Map the terminal scheduling priority to AC_BE;

[0098] Step S607: Send an associate response without haier oui;

[0099] Step S608: Save the terminal pre-authentication status;

[0100] Step S609: Execute the wpa2-psk authentication process with the STA end;

[0101] Step S610: confirm whether the current STA end exists in the whitelist; if not, execute step S611; otherwise, execute step S612;

[0102] Step S611: Start the final identity authentication timer and receive the final identity authentication request of the terminal based on the action frame;

[0103] Step S612: confirm whether the final identity authentication is successful; if successful, execute step S613; if failed, execute step S615;

[0104] Step S613: Save the terminal mac to the whitelist;

[0105] Step S614: The terminal scheduling queue is mapped to the configured AC_VO, and the process ends.

[0106] Step S615: The terminal scheduling queue is mapped to AC_BE, and the process ends.

[0107] Combined with the above Figure 5 and Figure 6 The process shown here needs to be explained as follows:

[0108] 1) When making an association request, the whole-house screen WiFi module sends an associate request frame carrying haier OUI. After receiving the request, the AP responds with an associate response with haier oui;

[0109] 2) The whole-house screen module receives the associate response frame responded by the AP, first checks whether it carries the vendor IE of haieroui, and checks the status field of the vendor IE. If the status field is 0, it indicates that the pre-authentication is successful, otherwise it indicates that the pre-authentication fails.

[0110] 3) After the whole-house screen module determines that the pre-authentication is successful according to the associate response frame sent by the AP, the terminal uses the AC_VO queue to send packets for the four-step key negotiation of wpa-psk authentication to complete the wpa-psk authentication; if the pre-authentication fails, the AC_BE queue is used for the four-step key negotiation to complete the wpa-psk authentication.

[0111] 4) After key negotiation is completed, PTK and GTK are generated. STA carries vendor IE of haier oui in action frame. The data segment of vendor IE is filled with oui and mac address after PTK encryption (action auth request frame), and the action frame carrying haier oui is sent out for final identity authentication. After receiving the frame, AP first checks whether it carries the verndor IE of haier OUI, and then decrypts the data segment of vendor IE through GTK, parses out OUI and mac address, and compares them with the mac address of the terminal currently sent. If the oui is haier oui, the verification is considered successful, and the action auth response carrying vendor IE of haier oui and the data segment status is 0 is sent. When the terminal receives the action auth response and confirms that the status field is 0, it is considered that the final identity authentication has been passed and the AC_VO queue is used to send the packet. At the same time, AP maps the scheduling column of STA to AC_VO.

[0112] 5) During the final verification process, AP will first obtain whether there is a STA mac address that has passed the pre-authentication in the current whitelist. If so, it will not use PTK decryption to verify the data segment of the action auth request sent by the terminal, but will directly consider the final authentication successful after receiving the action auth request sent by the STA. If there is no terminal mac in the whitelist, a timer will be started, and the action auth request from the terminal needs to be received before the timer expires and the data segment of the vendor IE needs to be verified successfully. Otherwise, the pre-authenticated STA will be remapped back to the AC_BE scheduling queue, and an action auth response will be sent to notify the terminal that the final authentication failed.

[0113] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods of each embodiment of the present application.

[0114] In this embodiment, a device for executing authentication operations is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0115] Figure 7 1 is a structural block diagram of an optional authentication operation execution device according to an embodiment of the present application (I), the device comprising:

[0116] A first receiving module 72 is used to receive a pre-authentication request sent by a terminal device, wherein the pre-authentication request is used to request to associate the terminal device with WiFi;

[0117] A first execution module 74 is configured to perform a pre-authentication operation on the terminal device through the pre-authentication request, obtain a first pre-authentication result corresponding to the pre-authentication operation, and feed back the first pre-authentication result to the terminal device;

[0118] A second execution module 76, configured to perform a wireless network authentication operation on the terminal device according to the first pre-authentication result, and feed back a second pre-authentication result corresponding to the wireless network authentication operation to the terminal device;

[0119] The third execution module 78 is used to receive a final identity authentication request sent by the terminal device according to the second pre-authentication result, and perform a final identity authentication operation on the terminal device according to the final identity authentication request.

[0120] Through the above-mentioned device, first, a pre-authentication request sent by a terminal device for requesting to associate the terminal device with WiFi is received; then, a pre-authentication operation on the terminal device is performed through the pre-authentication request, and a first pre-authentication result corresponding to the pre-authentication operation is obtained, and the first pre-authentication result is fed back to the terminal device; secondly, a wireless network authentication operation on the terminal device is performed according to the first pre-authentication result, and a second pre-authentication result corresponding to the wireless network authentication operation is fed back to the terminal device; finally, a final identity authentication request sent by the terminal device according to the second pre-authentication result is received, and a final identity authentication operation on the terminal device is performed according to the final identity authentication request. In other words, through the pre-authentication operation, the wireless network authentication operation and the final identity authentication operation, effective terminal-pipe collaborative authentication between the terminal device and the WiFi terminal is realized. Therefore, the above-mentioned technical solution is adopted to solve the problem of poor WiFi performance in a high-density environment of the whole house screen caused by the existing authentication method of the STA terminal and the WiFi terminal in the related technology; and the WiFi performance in a high-density environment of the whole house screen is improved.

[0121] In an exemplary embodiment, the first execution module 74 is used to: determine whether the pre-authentication request includes the unique identifier of the terminal device; if the pre-authentication request includes the unique identifier, map the scheduling priority of the terminal device to the first queue, and confirm that the first pre-authentication result is a successful pre-authentication; if the pre-authentication request does not include the unique identifier, map the scheduling priority of the terminal device to the second queue, and determine that the first pre-authentication result is a pre-authentication failure, wherein the scheduling priority of the first queue is higher than the scheduling priority of the second queue.

[0122] In an exemplary embodiment, the second execution module 76 is used to: when the first pre-authentication result is a successful pre-authentication, perform a four-step key negotiation with the terminal device through the first queue to complete the wireless network authentication operation; when the first pre-authentication result is a pre-authentication failure, perform a four-step key negotiation with the terminal device through the second queue to complete the wireless network authentication operation.

[0123] In an exemplary embodiment, the third execution module 78 is used to: confirm whether the first media access control address of the terminal device is included in the whitelist of the WiFi; if the first media access control address is included in the whitelist, perform the final authentication operation on the terminal device through the final authentication request; if the first media access control address is not included in the whitelist, perform the final authentication operation on the terminal device according to the final authentication request and the timer of the WiFi.

[0124] In an exemplary embodiment, the third execution module 78 is used to: parse out the target identifier and the second media access control address carried by the final authentication request; compare the first media access control address with the second media access control address, and compare the target identifier with the unique identifier of the terminal device; and confirm that the final authentication operation is successful if preset conditions are met, wherein the preset conditions include: the first media access control address is consistent with the second media access control address, the target identifier is consistent with the unique identifier, and the WiFi timer has not timed out, wherein the WiFi timer starts at the moment of confirming that the first media access control address is not included in the whitelist.

[0125] In an exemplary embodiment, the device also includes a mapping module, which is used to compare the first media access control address with the second media access control address, and after comparing the target identifier with the unique identifier of the terminal device: when it is confirmed that the final identity authentication operation is successful, the first media access control address is saved to a whitelist, and the scheduling queue of the terminal device is mapped to the first queue; when it is confirmed that the final identity authentication operation fails, the scheduling queue of the terminal device is mapped to the second queue, wherein the scheduling priority of the first queue is higher than the scheduling priority of the second queue.

[0126] Figure 8 2 is a structural block diagram of an optional authentication operation execution device according to an embodiment of the present application (II), the device comprising:

[0127] A first sending module 82 is used to send a pre-authentication request to the WiFi, wherein the pre-authentication request is used to request to associate the terminal device with the WiFi;

[0128] A second receiving module 84 is configured to receive a first pre-authentication result fed back by the WiFi, wherein the first pre-authentication result is a first pre-authentication result corresponding to a pre-authentication operation performed by the WiFi on the terminal device through the pre-authentication request;

[0129] A third receiving module 86 is configured to receive a second pre-authentication result fed back by the WiFi, wherein the second pre-authentication result is a second pre-authentication result corresponding to a wireless network authentication operation performed by the WiFi on the terminal device according to the first pre-authentication result;

[0130] The second receiving module 88 is used to send a final identity authentication request to the WiFi according to the second pre-authentication result, so as to instruct the WiFi to perform a final identity authentication operation on the terminal device according to the final identity authentication request.

[0131] Through the above device, a pre-authentication request is sent to WiFi, wherein the pre-authentication request is used to request that the terminal device be associated with the WiFi; a first pre-authentication result fed back by the WiFi is received, wherein the first pre-authentication result is a first pre-authentication result corresponding to the pre-authentication operation performed by the WiFi on the terminal device through the pre-authentication request; a second pre-authentication result fed back by the WiFi is received, wherein the second pre-authentication result is a second pre-authentication result corresponding to the wireless network authentication operation performed by the WiFi on the terminal device according to the first pre-authentication result; a final identity authentication request is sent to the WiFi according to the second pre-authentication result to instruct the WiFi to perform the final identity authentication operation on the terminal device according to the final identity authentication request. That is to say, through the pre-authentication operation, the wireless network authentication operation and the final identity authentication operation, the effective terminal-pipe collaborative authentication between the terminal device and the WiFi terminal is realized. Therefore, the above technical solution is adopted to solve the problem that the existing authentication method between the STA terminal and the WiFi terminal in the related technology leads to poor WiFi performance in the high-density environment of the whole house screen; and the WiFi performance in the high-density environment of the whole house screen is improved.

[0132] In an exemplary embodiment, the device also includes a result confirmation module, which is used to: after receiving the first pre-authentication result fed back by the WiFi: when the first pre-authentication result includes a first field, determine whether the second field is a preset field, wherein the first field is a field used to carry a unique identifier of the terminal device, and the second field is a status field in the first field; when the second field is the preset field, determine that the first pre-authentication result is a successful pre-authentication; when the second field is not the preset field, determine that the first pre-authentication result is a failed pre-authentication.

[0133] In an exemplary embodiment, the device also includes a final authentication request determination module, which is used to, before sending a final authentication request to the WiFi according to the second pre-authentication result: when the second pre-authentication result indicates that the wireless network authentication operation is successfully authenticated, obtain a first field for carrying a unique identifier of the terminal device; fill in a third field included in the first field with a first media access control address of the terminal device, wherein the first media access control address is an address encrypted by a preset key, and the preset key is determined by the wireless network authentication operation; determine the final authentication request through the filled first field.

[0134] In an exemplary embodiment, the device also includes a wireless network authentication module, which is used to: after receiving the first pre-authentication result fed back by the WiFi: when the first pre-authentication result is a pre-authentication success, perform a four-step key negotiation with the WiFi through the first queue to complete the wireless network authentication operation; when the first pre-authentication result is a pre-authentication failure, perform a four-step key negotiation with the WiFi through the second queue to complete the wireless network authentication operation.

[0135] In an exemplary embodiment, the device also includes a message interaction module, which is used to: after sending a final identity authentication request to the terminal device according to the second pre-authentication result: when it is confirmed that the final identity authentication operation is authenticated successfully, perform message interaction with the WiFi through a first queue; when it is confirmed that the final identity authentication operation fails, perform message interaction with the WiFi through a second queue.

[0136] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored, wherein the computer program is configured to execute the steps of any of the above method embodiments when running.

[0137] Optionally, in this embodiment, the storage medium may be configured to store a computer program for performing the following steps:

[0138] S1, receiving a pre-authentication request sent by a terminal device, wherein the pre-authentication request is used to request that the terminal device be associated with WiFi;

[0139] S2, performing a pre-authentication operation on the terminal device through the pre-authentication request, obtaining a first pre-authentication result corresponding to the pre-authentication operation, and feeding back the first pre-authentication result to the terminal device;

[0140] S3, performing a wireless network authentication operation on the terminal device according to the first pre-authentication result, and feeding back a second pre-authentication result corresponding to the wireless network authentication operation to the terminal device;

[0141] S4, receiving a final identity authentication request sent by the terminal device according to the second pre-authentication result, and performing a final identity authentication operation on the terminal device according to the final identity authentication request.

[0142] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0143] For specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary implementation modes, and this embodiment will not be described in detail herein.

[0144] An embodiment of the present application further provides an electronic device, including a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0145] Optionally, in this embodiment, the processor may be configured to perform the following steps through a computer program:

[0146] S1, receiving a pre-authentication request sent by a terminal device, wherein the pre-authentication request is used to request that the terminal device be associated with WiFi;

[0147] S2, performing a pre-authentication operation on the terminal device through the pre-authentication request, obtaining a first pre-authentication result corresponding to the pre-authentication operation, and feeding back the first pre-authentication result to the terminal device;

[0148] S3, performing a wireless network authentication operation on the terminal device according to the first pre-authentication result, and feeding back a second pre-authentication result corresponding to the wireless network authentication operation to the terminal device;

[0149] S4, receiving a final identity authentication request sent by the terminal device according to the second pre-authentication result, and performing a final identity authentication operation on the terminal device according to the final identity authentication request.

[0150] In an exemplary embodiment, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0151] An embodiment of the present application further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the steps in any one of the above method embodiments are implemented.

[0152] An embodiment of the present application further provides another computer program product, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in any of the above method embodiments are implemented.

[0153] An embodiment of the present application also provides a computer program, which includes computer instructions, which are stored in a computer-readable storage medium; a processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the steps in any one of the above method embodiments.

[0154] For specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary implementation modes, and this embodiment will not be described in detail herein.

[0155] Obviously, those skilled in the art should understand that the above modules or steps of the present application can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order from that herein, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present application is not limited to any specific combination of hardware and software.

[0156] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A method for performing an authentication operation, characterized in that: include: Receiving a pre-authentication request sent by a terminal device, wherein the pre-authentication request is used to request that the terminal device be associated with WiFi; Performing a pre-authentication operation on the terminal device through the pre-authentication request, obtaining a first pre-authentication result corresponding to the pre-authentication operation, and feeding back the first pre-authentication result to the terminal device; Performing a wireless network authentication operation on the terminal device according to the first pre-authentication result, and feeding back a second pre-authentication result corresponding to the wireless network authentication operation to the terminal device; Receive a final identity authentication request sent by the terminal device according to the second pre-authentication result, and perform a final identity authentication operation on the terminal device according to the final identity authentication request.

2. The method for executing an authentication operation according to claim 1, characterized in that: Performing a pre-authentication operation on the terminal device through the pre-authentication request to obtain a first pre-authentication result corresponding to the pre-authentication operation includes: determining whether the pre-authentication request includes a unique identifier of the terminal device; In a case where the pre-authentication request includes the unique identifier, mapping the scheduling priority of the terminal device to the first queue, and confirming that the first pre-authentication result is a successful pre-authentication; In a case where the pre-authentication request does not include the unique identifier, the scheduling priority of the terminal device is mapped to the second queue, and the first pre-authentication result is determined to be pre-authentication failure, wherein the scheduling priority of the first queue is higher than the scheduling priority of the second queue.

3. The method for executing an authentication operation according to claim 1, characterized in that: Performing a final identity authentication operation on the terminal device according to the final identity authentication request includes: Confirm whether the WiFi whitelist includes the first media access control address of the terminal device; In a case where the first media access control address is included in the whitelist, performing a final identity authentication operation on the terminal device through the final identity authentication request; In a case where the first media access control address is not included in the whitelist, a final identity authentication operation is performed on the terminal device according to the final identity authentication request and a timer of the WiFi.

4. The method for executing an authentication operation according to claim 3, characterized in that: Performing a final identity authentication operation on the terminal device according to the final identity authentication request and the WiFi timer includes: Parsing out the target identifier and the second media access control address carried in the final identity authentication request; comparing the first media access control address with the second media access control address, and comparing the target identifier with a unique identifier of the terminal device; If preset conditions are met, confirm that the final identity authentication operation is successful, wherein the preset conditions include: the first media access control address is consistent with the second media access control address, the target identifier is consistent with the unique identifier, and the WiFi timer has not timed out, wherein the WiFi timer starts at the moment of confirming that the first media access control address is not included in the whitelist.

5. A method for performing an authentication operation, characterized in that: include: Sending a pre-authentication request to the WiFi, wherein the pre-authentication request is used to request that the terminal device be associated with the WiFi; Receive a first pre-authentication result fed back by the WiFi, wherein the first pre-authentication result is a first pre-authentication result corresponding to a pre-authentication operation performed by the WiFi on the terminal device through the pre-authentication request; Receive a second pre-authentication result fed back by the WiFi, wherein the second pre-authentication result is a second pre-authentication result corresponding to a wireless network authentication operation performed by the WiFi on the terminal device according to the first pre-authentication result; A final identity authentication request is sent to the WiFi according to the second pre-authentication result, so as to instruct the WiFi to perform a final identity authentication operation on the terminal device according to the final identity authentication request.

6. The method for executing an authentication operation according to claim 5, characterized in that: After receiving the first pre-authentication result fed back by the WiFi, the method further includes: In a case where the first pre-authentication result includes a first field, determining whether a second field is a preset field, wherein the first field is a field for carrying a unique identifier of the terminal device, and the second field is a status field in the first field; In a case where the second field is the preset field, determining that the first pre-authentication result is a pre-authentication success; When the second field is not the preset field, it is determined that the first pre-authentication result is pre-authentication failure.

7. The method for performing an authentication operation according to claim 5, characterized in that: Before sending a final identity authentication request to the WiFi according to the second pre-authentication result, the method further includes: When the second pre-authentication result indicates that the wireless network authentication operation is authenticated successfully, obtaining a first field for carrying a unique identifier of the terminal device; The third field included in the first field is filled with a first media access control address of the terminal device, wherein the first media access control address is an address encrypted by a preset key, and the preset key is determined by the wireless network authentication operation; The final identity authentication request is determined by the filled first field.

8. A device for executing an authentication operation, characterized in that: include: A first receiving module, configured to receive a pre-authentication request sent by a terminal device, wherein the pre-authentication request is used to request that the terminal device be associated with WiFi; A first execution module, configured to perform a pre-authentication operation on the terminal device through the pre-authentication request, obtain a first pre-authentication result corresponding to the pre-authentication operation, and feed back the first pre-authentication result to the terminal device; A second execution module, configured to perform a wireless network authentication operation on the terminal device according to the first pre-authentication result, and feed back a second pre-authentication result corresponding to the wireless network authentication operation to the terminal device; The third execution module is used to receive a final identity authentication request sent by the terminal device according to the second pre-authentication result, and perform a final identity authentication operation on the terminal device according to the final identity authentication request.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored program, wherein the program executes the method according to any one of claims 1 to 7 when executed.

10. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to execute the method according to any one of claims 1 to 7 through the computer program.

Images