Visitor network connection method and device, and computer readable storage medium
By reconfiguring the router's Wi-Fi security protection setting buttons as the guest network control buttons, the guest connection mode is turned on and off, solving the problem of WPS access security defects and cumbersome Web UI page operation, and providing a convenient and secure guest network access solution.
Patent Information
- Application Number
- CN202411933184.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-25
- Publication Date
- 2025-04-11
AI Technical Summary
In the prior art, WPS access has obvious security defects, and it is too cumbersome to enable visitors to access the network easily and securely.
By reconfiguring the router's Wi-Fi security protection setting button as the guest network control button, the guest connection mode is enabled and turned on and off. The guest device connects to or exits the guest network by scanning the preset identification code.
It reduces the complexity of visitor access network, improves the access security of visitor network, and provides a more convenient and secure wireless network fast access solution.
Smart Images

Figure CN119815468A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of routers, and in particular to a network connection method, device and computer-readable storage medium for visitors. Background Art
[0002] At present, with the rapid development of smart home and Internet of Things technology, wireless network has become an indispensable part of our lives. When there are guests at home who need to use the network but do not want to share the Wi-Fi password, common solutions include enabling guest Wi-Fi through a fixed network page or using WPS (Wi-Fi Protected Setup) for one-click direct connection. However, WPS technology has obvious security flaws, and enabling guest Wi-Fi through the Web UI page is too cumbersome. Specifically, on the one hand, there are some significant defects of WPS: first, the PIN code of WPS is 8 digits. Although the number of combinations is huge in theory, in fact, attackers can use specific algorithms to significantly reduce the number of attempts, thereby cracking the PIN code in a shorter time and obtaining the encryption key of the wireless network, which poses a threat to network security. Secondly, family members or visitors may accidentally press the WPS button, which may cause unauthorized devices to connect to the network, thereby accessing sensitive information or conducting malicious activities, which will expose the privacy of the home shared network and lead to the loss of personal privacy data. Finally, the success rate and speed of WPS connection are not satisfactory, and there are many devices that do not support the WPS function. On the other hand, there are some significant defects in enabling guest Wi-Fi through the web page: first, the process of web page activation is quite cumbersome, and you need to enter a specific domain name or IP address to enter the Web UI, and then enter the login password to configure the guest Wi-Fi page. For the elderly or children at home, such operations may be too complicated, and the login password of the router is also easy to leak, which may lead to more serious personal information security issues.
[0003] Therefore, how to enable visitors to access the network more easily and securely has become a technical problem that needs to be solved urgently. Summary of the invention
[0004] In order to overcome the deficiencies in the prior art, the purpose of the present invention is to provide a visitor network connection method, device and computer-readable storage medium to solve the problem that the current WPS access has obvious security defects and it is too cumbersome to enable guest Wi-Fi through the Web UI page.
[0005] The present invention proposes a network connection method for a visitor, which is applied to a router, wherein a Wi-Fi security protection setting button of the router is reconfigured as a network control button for the visitor, and the method comprises:
[0006] Turning on the guest connection mode according to the first trigger signal of the network control button;
[0007] When the guest connection mode is on, if the guest device scans a preset identification code, the guest device is allowed to access the guest network corresponding to the identification code;
[0008] Turning off the guest connection mode according to a second trigger signal of the network control button;
[0009] When the guest connection mode is in the off state, if the guest device scans the identification code, the guest device is prohibited from accessing the guest network.
[0010] Optionally, both the first trigger signal and the second trigger signal are long press signals;
[0011] The method of starting the guest connection mode according to the first trigger signal of the network control button further includes:
[0012] When the current visitor connection mode is in the closed state, the received long press signal is used as the first trigger signal;
[0013] The method of closing the guest connection mode according to the second trigger signal of the network control button further includes:
[0014] When the current visitor connection mode is in the on state, the received long press signal is used as the second trigger signal.
[0015] Optionally, the step of starting the guest connection mode according to the first trigger signal of the network control button further includes:
[0016] Indicating that the guest connection mode is in the on state by means of a strobe indicator light signal of a first color or a second color;
[0017] The method of closing the guest connection mode according to the second trigger signal of the network control button further includes:
[0018] The first color or the second color of the constantly lit indicator light signal indicates that the guest connection mode is in the closed state; wherein the first color of the constantly lit indicator light signal indicates that the current network is in a normal state, and the second color of the constantly lit indicator light signal indicates that the current network is in an abnormal state;
[0019] The allowing the guest device to access the guest network corresponding to the identification code further includes:
[0020] The first color and the second color of the constantly lit indicator light signals together indicate that the guest device has been connected to the guest network.
[0021] Optionally, the step of starting the guest connection mode according to the first trigger signal of the network control button further includes:
[0022] When the guest connection mode is in the on state, the service set identifier of the guest network is configured to be in a hidden state.
[0023] Optionally, when the guest connection mode is in the on state, if the guest device scans a preset identification code, allowing the guest device to access a guest network corresponding to the identification code further includes:
[0024] When the guest connection mode is in the on state, if the guest device scans the preset identification code, receiving a connection request of the guest device;
[0025] The guest device is allowed to access the guest network according to the connection request.
[0026] Optionally, when the guest connection mode is in the on state, if the guest device scans a preset identification code, allowing the guest device to access a guest network corresponding to the identification code further includes:
[0027] Detecting whether the connection request is received at a preset frequency;
[0028] If the connection request is not received within a preset number of detection times, the guest connection mode is closed.
[0029] Optionally, the identification code is attached to the housing surface of the router;
[0030] wherein the identification code includes connection verification information corresponding to the guest network;
[0031] The connection verification information is preset in the router so that the router verifies the received connection request according to the connection verification information.
[0032] Optionally, the identification code is displayed on a display screen of a host device that has been connected to the router;
[0033] wherein the identification code includes connection verification information corresponding to the guest network;
[0034] The connection verification information is transmitted to the router, so that the router verifies the received connection request according to the connection verification information.
[0035] The present invention also proposes a network connection device for a visitor, the device comprising a network control button and a visitor connection module, wherein:
[0036] The network control module is used to start the visitor connection mode according to the received first trigger signal;
[0037] The guest connection module is used to allow the guest device to access the guest network corresponding to the identification code if the guest device scans the preset identification code when the guest connection mode is turned on;
[0038] The network control module is further used to close the guest connection mode according to the received second trigger signal;
[0039] The guest connection module is further configured to, when the guest connection mode is in an off state, prohibit the guest device from accessing the guest network if the guest device scans the identification code.
[0040] The present invention also proposes a computer-readable storage medium, on which a visitor's network connection program is stored. When the visitor's network connection program is executed by a processor, the steps of the visitor's network connection method as described in any one of the above items are implemented.
[0041] The visitor network connection method, device and computer-readable storage medium of the present invention are implemented by turning on the visitor connection mode according to the first trigger signal of the network control button; when the visitor connection mode is in the on state, if the visitor device scans the preset identification code, the visitor device is allowed to access the visitor network corresponding to the identification code; the visitor connection mode is turned off according to the second trigger signal of the network control button; when the visitor connection mode is in the off state, if the visitor device scans the identification code, the visitor device is prohibited from accessing the visitor network. The present invention realizes an efficient and convenient visitor network access solution, reduces the complexity of visitor network access, improves the access security of the visitor network, and enhances the user's network experience. BRIEF DESCRIPTION OF THE DRAWINGS
[0042] The present invention will be further described below with reference to the accompanying drawings and embodiments, in which:
[0043] Figure 1 is a flow chart of a network connection method for visitors of the present invention;
[0044] Figure 2 It is a working principle diagram of the network connection method for visitors of the present invention;
[0045] Figure 3 It is a module block diagram of the network connection device for visitors of the present invention. DETAILED DESCRIPTION
[0046] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.
[0047] In the subsequent description, the suffixes such as "module", "component" or "unit" used to represent elements are only used to facilitate the description of the present invention, and have no specific meanings. Therefore, "module", "component" or "unit" can be used in a mixed manner.
[0048] Figure 1 This embodiment provides a visitor's network connection method, which is applied to a router, and the Wi-Fi security protection setting button of the router is reconfigured as a visitor's network control button, and the method includes:
[0049] S1. Turn on the guest connection mode according to the first trigger signal of the network control button;
[0050] S2. When the guest connection mode is on, if the guest device scans a preset identification code, the guest device is allowed to access a guest network corresponding to the identification code;
[0051] S3, closing the guest connection mode according to the second trigger signal of the network control button;
[0052] S4. When the guest connection mode is in the closed state, if the guest device scans the identification code, the guest device is prohibited from accessing the guest network.
[0053] In this embodiment, in order to ensure the security of access, the original WPS function of the router is disabled to prevent security loopholes that may be caused by its connection mechanism.
[0054] In this embodiment, the SSID name and password of the newly added guest connection mode are written during factory production through corresponding writing software commands. For example, first, the factory's equipment tools generate the SSID and password of the guest connection mode according to customized rules, and generate the corresponding QR code. Then, the SSID and password of the guest connection mode are written into the router device through software commands, and at the same time, the corresponding QR code is affixed to the body of the router.
[0055] In this embodiment, the WPS button on the router is modified to a guest connection mode button, and the PIN corresponding to the button is configured as an interrupt mode. Based on this, the application layer of the router captures the pressing and lifting actions of the button by monitoring the touch events of the button. For example, when the user presses and holds this button for 2 seconds, it first determines whether the guest connection mode is enabled. If it is enabled, the shutdown operation is performed, and if it is not enabled, the guest connection mode is started. Further, in this embodiment, when the guest connection mode is turned on, the SSID is synchronously set to a hidden state. At the same time, the router will detect the user access status in the guest connection mode at preset time intervals (for example, one minute, two minutes, etc.). If no user access is detected for a preset number of consecutive times (for example, ten times, twenty times, etc.), the guest connection mode is actively closed.
[0056] Please refer to Figure 2 In this embodiment, the specific connection steps include:
[0057] S10, during the production phase of the routing device, write the SSID and password of the guest WiFi to the cloud database of the routing device through a command;
[0058] S20, generating a QR code according to the SSID and password of the guest's WiFi, printing it, and attaching it to the body of the routing device, so that the guest can scan the code with his or her own mobile device;
[0059] S30, before the guest's own mobile device scans the code, the SSID and password of the guest WiFi written by the above production line are read from the cloud database of the routing device and entered as the current guest WiFi login information;
[0060] S40, the user (household owner or guest) turns on / off the button corresponding to the guest WiFi (i.e., the original WPS button of the routing device);
[0061] S50, the button will report the event to the guest WiFi through an interrupt;
[0062] S60, when the event is reported to the guest WiFi, after determining that the connection mode is turned on, the LED of the routing device is controlled to indicate light;
[0063] S70, when the guest's own mobile device scans the code, the SSID and password of the guest's WiFi are directly verified through the above connection mode;
[0064] S80, if the verification is successful, it is determined that the guest WiFi connection is successful. Further, when the guest connection mode is not needed, long press the button to close the guest connection mode.
[0065] It can be seen that in this embodiment, the guest connection mode can be turned on with one click, providing users with a wireless network quick access solution that does not require complicated operations and password input. Compared with the traditional WPS connection method, the above solution has higher security and convenience, and can effectively prevent the risk of password leakage and illegal access, while providing users with an excellent wireless Internet experience.
[0066] The beneficial effect of this embodiment is that, by turning on the guest connection mode according to the first trigger signal of the network control button; when the guest connection mode is in the turned-on state, if the guest device scans the preset identification code, the guest device is allowed to access the guest network corresponding to the identification code; according to the second trigger signal of the network control button, the guest connection mode is turned off; when the guest connection mode is in the turned-off state, if the guest device scans the identification code, the guest device is prohibited from accessing the guest network. An efficient and convenient guest network access solution is realized, which reduces the complexity of guest access to the network, improves the access security of the guest network, and enhances the user's network experience.
[0067] In this embodiment, both the first trigger signal and the second trigger signal are long press signals; the opening of the guest connection mode according to the first trigger signal of the network control button further includes: when the guest connection mode is currently in the off state, the received long press signal is used as the first trigger signal; the closing of the guest connection mode according to the second trigger signal of the network control button further includes: when the guest connection mode is currently in the on state, the received long press signal is used as the second trigger signal. Thus, through the above one-button operation, not only the connection process is simplified, but also anyone other than the owner can operate safely, effectively avoiding the risk of password leakage.
[0068] In this embodiment, the step of turning on the guest connection mode according to the first trigger signal of the network control button further includes: indicating that the guest connection mode is in the turned-on state through a strobe indicator light signal of the first color or the second color; the step of turning off the guest connection mode according to the second trigger signal of the network control button further includes: indicating that the guest connection mode is in the turned-off state through a constant indicator light signal of the first color or the second color; wherein the constant indicator light signal of the first color indicates that the current network is in a normal state, and the constant indicator light signal of the second color indicates that the current network is in an abnormal state; the step of allowing the guest device to access the guest network corresponding to the identification code further includes: indicating that the guest device has accessed the guest network through the constant indicator light signals of the first color and the second color. For example, in order to more effectively indicate the state of the guest connection mode to the user, the present embodiment uses the only two-color LED light on the router (for example, the light supports red, indicating no network state, and green, indicating normal network state) to display status information at different stages. The specific rules are as follows: First, when the user activates the guest connection mode by pressing a button, the LED light will flash green or red at a frequency of 2HZ; second, after the guest connection mode is successfully activated, the red and green LED lights will remain on at the same time (at this time, the mixed display color is orange); third, when the user turns off the guest connection mode, the LED light will return to its original state, that is, the red light will be on when there is no network, and the green light will be on when the network is normal. As a result, the process of turning on, off, and accessing the guest connection mode is more intuitive, reducing the difficulty of operation.
[0069] In this embodiment, the step of enabling the guest connection mode according to the first trigger signal of the network control button further includes: when the guest connection mode is enabled, configuring the service set identifier of the guest network to be hidden, so as to avoid security issues caused by being in the guest connection mode for a long time.
[0070] In this embodiment, when the guest connection mode is on, if the guest device scans for a preset identification code, the guest device is allowed to access the guest network corresponding to the identification code, further comprising: when the guest connection mode is on, if the guest device scans for a preset identification code, a connection request from the guest device is received; and the guest device is allowed to access the guest network according to the connection request. Among them, the one-click connection guest Wi-Fi technology can directly turn on / off the guest Wi-Fi by pressing a button, and the router of this embodiment is combined with the above-mentioned connection request and directly connected through Wi-Fi Easy Connect technology, which is more convenient and quick. Furthermore, this embodiment can also be combined with relevant access control policies to limit the access scope and permissions of the guest connection mode network, thereby further improving network security.
[0071] In this embodiment, when the guest connection mode is turned on, if the guest device scans for a preset identification code, the guest device is allowed to access the guest network corresponding to the identification code, further comprising: detecting whether the connection request is received at a preset frequency; if the connection request is not received within a preset number of detections, the guest connection mode is turned off. Thus, the guest connection mode can be turned on and off adaptively based on one-click, solving the problem that some mobile phones or devices do not support the WPS function and cannot directly connect to the router Wi-Fi.
[0072] In this embodiment, the identification code is attached to the shell surface of the router; wherein the identification code includes connection verification information corresponding to the guest network; the connection verification information is preset in the router so that the router verifies the received connection request according to the connection verification information.
[0073] In this embodiment, unlike the above-mentioned solution, the identification code is displayed on the display screen of the host device that has been connected to the router; wherein the identification code includes connection verification information corresponding to the guest network; the connection verification information is transmitted to the router so that the router verifies the received connection request according to the connection verification information.
[0074] Furthermore, in this embodiment, when the management device connected to the router opens the Web UI page, it supports configuration of the guest Wi-Fi, including Mac address filtering, encryption method, speed limit, etc. Among them, the default encryption method is WPA2 / WPA3, and when an unchangeable QR code is attached to the router body, the SSID, password, and whether to hide the guest Wi-Fi settings are prohibited from being modified, while when a dynamic QR code is displayed on the display screen of other access devices or management devices, the SSID, password, and whether to hide the guest Wi-Fi settings are allowed to be modified.
[0075] In this embodiment, to ensure network security and prevent the connected users of the guest Wi-Fi from accessing other shared resources in the network, this embodiment strictly sets firewall rules according to the following steps:
[0076] First, the router is configured as follows:
[0077] VLAN 1: Dedicated to local area network (LAN) devices, with an IP address range of 192.168.1.0 / 24.
[0078] VLAN 2: Dedicated to guest Wi-Fi, its IP address range is 192.168.2.0 / 24.
[0079] External Internet interface: eth0 (assumed to be connected to an external network).
[0080] Internal network interface: eth1 (the interface connecting VLAN 1 and VLAN 2).
[0081] This ensures that devices in VLAN 2 (i.e., guest Wi-Fi) can only access the Internet and cannot access any devices in VLAN 1 (LAN).
[0082] Next, configure the network interface and VLAN, and ensure that the interfaces of VLAN 1 and VLAN 2 are correctly configured. Assume that eth0 is the physical network interface, and eth0.1 and eth0.2 are the virtual interfaces of VLAN 1 and VLAN 2. Based on this, the router is configured as follows:
[0083]
[0084] (3) Allow VLAN 1 and VLAN 2 to access the external Internet
[0085]
[0086]
[0087] (4) Prevent VLAN 2 from accessing VLAN 1 resources
[0088]
[0089] Therefore, while enhancing security, it can also effectively prevent the risk of security vulnerabilities in WPS and improve operational convenience.
[0090] Based on the above embodiments, the present invention further proposes a network connection device for a visitor, the device comprising a network control module 10 and a visitor connection module 20, wherein:
[0091] The network control module 10 is used to start the visitor connection mode according to the received first trigger signal;
[0092] The guest connection module 20 is used to allow the guest device to access the guest network corresponding to the identification code if the guest device scans the preset identification code when the guest connection mode is turned on;
[0093] The network control module 10 is further configured to close the guest connection mode according to the received second trigger signal;
[0094] The guest connection module 20 is further configured to, when the guest connection mode is in an off state, prohibit the guest device from accessing the guest network if the guest device scans the identification code.
[0095] It should be noted that the above-mentioned device embodiment and method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, and the technical features in the method embodiment are correspondingly applicable in the device embodiment, which will not be repeated here.
[0096] Based on the above embodiments, the present invention further proposes a computer-readable storage medium, on which a visitor's network connection program is stored. When the visitor's network connection program is executed by a processor, the steps of the visitor's network connection method as described in any of the above items are implemented.
[0097] It should be noted that the above-mentioned medium embodiment and method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, and the technical features in the method embodiment are correspondingly applicable in the medium embodiment, which will not be repeated here.
[0098] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for enabling a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present invention.
[0099] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.
[0100] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation modes, which are merely illustrative rather than restrictive. Under the guidance of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the present invention and the claims, all of which are within the protection of the present invention.
Claims
1. A visitor network connection method, applied to a router, characterized in that: The Wi-Fi security protection setting button of the router is reconfigured as a network control button for the visitor, and the method includes: Turning on the guest connection mode according to the first trigger signal of the network control button; When the guest connection mode is on, if the guest device scans a preset identification code, the guest device is allowed to access the guest network corresponding to the identification code; Turning off the guest connection mode according to a second trigger signal of the network control button; When the guest connection mode is in the off state, if the guest device scans the identification code, the guest device is prohibited from accessing the guest network.
2. The visitor's network connection method according to claim 1, characterized in that: The first trigger signal and the second trigger signal are both long press signals; The method of starting the guest connection mode according to the first trigger signal of the network control button further includes: When the current visitor connection mode is in the closed state, the received long press signal is used as the first trigger signal; The method of closing the guest connection mode according to the second trigger signal of the network control button further includes: When the current visitor connection mode is in the on state, the received long press signal is used as the second trigger signal.
3. The network connection method for visitors according to claim 1, characterized in that: The method of starting the guest connection mode according to the first trigger signal of the network control button further includes: Indicating that the guest connection mode is in the on state by means of a strobe indicator light signal of a first color or a second color; The method of closing the guest connection mode according to the second trigger signal of the network control button further includes: The first color or the second color of the constantly lit indicator light signal indicates that the guest connection mode is in the closed state; wherein the first color of the constantly lit indicator light signal indicates that the current network is in a normal state, and the second color of the constantly lit indicator light signal indicates that the current network is in an abnormal state; The allowing the guest device to access the guest network corresponding to the identification code further includes: The first color and the second color of the constantly lit indicator light signals together indicate that the guest device has been connected to the guest network.
4. The network connection method for visitors according to claim 1, characterized in that: The method of starting the guest connection mode according to the first trigger signal of the network control button further includes: When the guest connection mode is in the on state, the service set identifier of the guest network is configured to be in a hidden state.
5. The visitor's network connection method according to claim 1, characterized in that: When the guest connection mode is in the on state, if the guest device scans a preset identification code, the guest device is allowed to access a guest network corresponding to the identification code, further comprising: When the guest connection mode is in the on state, if the guest device scans the preset identification code, receiving a connection request of the guest device; The guest device is allowed to access the guest network according to the connection request.
6. The network connection method for visitors according to claim 5, characterized in that: When the guest connection mode is in the on state, if the guest device scans a preset identification code, the guest device is allowed to access a guest network corresponding to the identification code, further comprising: Detecting whether the connection request is received at a preset frequency; If the connection request is not received within a preset number of detection times, the guest connection mode is closed.
7. The visitor's network connection method according to claim 6, characterized in that: The identification code is attached to the housing surface of the router; wherein the identification code includes connection verification information corresponding to the guest network; The connection verification information is preset in the router so that the router verifies the received connection request according to the connection verification information.
8. The network connection method for visitors according to claim 6, characterized in that: The identification code is displayed on a display screen of a host device connected to the router; wherein the identification code includes connection verification information corresponding to the guest network; The connection verification information is transmitted to the router, so that the router verifies the received connection request according to the connection verification information.
9. A visitor's network connection device, characterized in that: The device comprises a network control module and a visitor connection module, wherein: The network control module is used to start the visitor connection mode according to the received first trigger signal; The guest connection module is used to allow the guest device to access the guest network corresponding to the identification code if the guest device scans the preset identification code when the guest connection mode is turned on; The network control module is further used to close the guest connection mode according to the received second trigger signal; The guest connection module is further configured to, when the guest connection mode is in an off state, prohibit the guest device from accessing the guest network if the guest device scans the identification code.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a visitor's network connection program, and when the visitor's network connection program is executed by the processor, the steps of the visitor's network connection method according to any one of claims 1 to 8 are implemented.
Citation Information
Cited By
Networking method, device, system and medium
CN120547560A