Portal network authentication optimization method and system based on router

Abstract

The invention provides a Portal network authentication optimization method and system based on a router. The method comprises the following steps: establishing WiFi relay connection between a GL router and Portal WiFi equipment; wiFi connection is established between the client and the GL router; the client side initiates an HTTP request to the portal wifi device; the Portal wifi device returns an HTTP (Hyper Text Transport Protocol) 302 redirection authentication page to the client side; after receiving the request for redirecting the authentication page, the client initiates an HTTP (Hyper Text Transport Protocol) request to the authentication server to request the authentication page content; the client requests an authentication page from the authentication server HTTP; the client sends an authentication request to the authentication server; the authentication server passes the authentication and returns an authentication interface redirected to the equipment to the client; the client requests an equipment authentication interface from the portal wifi equipment; and the Portal wifi device releases the device and redirects the device to an originally accessed website. The method has the beneficial effects that the complexity of network authentication is effectively reduced, the security and privacy protection of network connection are enhanced, and the network access experience of a user is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of network connection authentication, and in particular to a router-based Portal network authentication optimization method and system. Background Art

[0002] In the current network communication environment, when users connect to public networks such as public WiFi, campus networks, and hotel networks, they often need to obtain Internet access rights through Portal authentication. Portal authentication means that after a user connects to the network, he or she is redirected to a specific authentication page, where the user needs to enter authentication information, such as username and password, to obtain network access rights. However, traditional Portal authentication methods have many problems, including poor user experience, complex network switching, and privacy leakage. For example, for privacy and security, users usually enable security features such as VPN and encrypted DNS on their routers. However, during the Portal authentication process, users need to manually turn off these services to complete the authentication and then turn them back on after the authentication. This process is cumbersome and error-prone. In addition, some Portal services restrict the networking of devices connected through routers through technical means, allowing only terminal devices to connect to the network directly, which is an obstacle for users who want to protect personal privacy and network security. Summary of the invention

[0003] The present invention aims to solve the above technical problems and provide a new network security authentication and privacy protection solution to improve user experience, simplify the authentication process, and protect the user's network security and privacy.

[0004] The technical solution adopted by the present invention is: a router-based Portal network authentication optimization method, characterized in that it includes the steps of:

[0005] A WiFi relay connection is established between the GL router and the Portal WiFi device;

[0006] Establish a WiFi connection between the client and the GL router;

[0007] The client initiates an HTTP request to the portal wifi device;

[0008] The portal wifi device returns an HTTP 302 redirect authentication page to the client;

[0009] After receiving the redirect authentication page request, the client will initiate an HTTP request to the authentication server to request the authentication page content;

[0010] The authentication server processes the authentication page request from the client and returns the authentication page content;

[0011] The client encapsulates the correctly filled authentication information in the HTTP request and forwards it to the authentication server via the GL router;

[0012] After verifying that the client's authentication information is correct, the authentication server will return an HTTP response to inform that the authentication is successful and redirect the client to the device's authentication interface;

[0013] After successful authentication, the client will request the authentication interface of the Portal WiFi device to complete the device-level authentication;

[0014] The Portal WiFi device confirms that the device-level authentication is successful, releases the device data, and redirects the user to the originally requested website.

[0015] Further, establishing a WiFi relay connection between the GL router and the Portal WiFi device includes:

[0016] The GL router detects available WiFi networks in the surrounding area and automatically selects the Portal WiFi network for connection, and completes the network access between the GL router and the Portal WiFi device according to the preset configuration parameters.

[0017] Further, establishing a WiFi connection between the client and the GL router includes:

[0018] A WiFi connection is established between the client and the GL router through the WiFi protocol. During the WiFi connection establishment process, end-to-end security authentication is performed.

[0019] Furthermore, the router-based Portal network authentication optimization method includes an automatic authentication mode. When the user selects the automatic authentication mode, the GL router will automatically turn off the VPN and DNS encryption services when a Portal WiFi network that needs to be authenticated is detected, and automatically turn on the VPN and DNS encryption services after the authentication is completed.

[0020] Furthermore, the router-based Portal network authentication optimization method includes a camouflage mode, in which the GL router performs a TTL+1 operation on all packets passing through the relay interface at the kernel layer and recalculates the checksum to simulate the behavior of a terminal device directly connected to the network.

[0021] The present invention also provides a router-based Portal network authentication optimization system, comprising:

[0022] Relay establishment module, used to establish WiFi relay connection between GL router and Portal WiFi device;

[0023] Client connection module, used to establish WiFi connection between client and GL router;

[0024] HTTP request initiation module, used by the client to initiate HTTP requests to the portal wifi device;

[0025] Redirect authentication return module, used by the Portal wifi device to return the HTTP 302 redirect authentication page to the client;

[0026] The content request authentication module is used for the client to initiate an HTTP request to the authentication server to request the authentication page content after receiving the redirect authentication page request;

[0027] The authentication page content return module is used for the authentication server to process the authentication page request of the client and return the authentication page content;

[0028] HTTP request forwarding module, used by the client to encapsulate the correctly filled authentication information in the HTTP request and forward it to the authentication server via the GL router;

[0029] HTTP response return module, used for the authentication server to return an HTTP response after verifying that the authentication information of the client is correct, informing that the authentication is successful, and redirecting the client to the authentication interface of the device;

[0030] The authentication interface request module is used for the client to request the authentication interface of the Portal WiFi device after successful authentication to complete the device-level authentication;

[0031] The device data release module is used by the Portal WiFi device to confirm that the device-level authentication is successful, release the device data, and redirect the user to the originally requested website.

[0032] Further, the relay establishment module is specifically used for:

[0033] The GL router detects available WiFi networks in the surrounding area and automatically selects the Portal WiFi network for connection, and completes the network access between the GL router and the Portal WiFi device according to the preset configuration parameters.

[0034] Furthermore, the client connection module is specifically used for:

[0035] A WiFi connection is established between the client and the GL router through the WiFi protocol. During the WiFi connection establishment process, end-to-end security authentication is performed.

[0036] Furthermore, the router-based Portal network authentication optimization system includes an automatic authentication module, which is used for when the user selects the automatic authentication mode, the GL router will automatically turn off the VPN and DNS encryption services when a Portal WiFi network that needs to be authenticated is detected, and automatically turn on the VPN and DNS encryption services after the authentication is completed.

[0037] Furthermore, the router-based Portal network authentication optimization system includes a camouflage module, which is used for the GL router to perform TTL+1 operation on all data packets passing through the relay interface at the kernel layer and recalculate the checksum to simulate the behavior of the terminal device directly connecting to the network.

[0038] The beneficial effects of the present invention are: the present invention provides users with a seamless, convenient and secure public network access solution, effectively reduces the complexity of network authentication, strengthens the security and privacy protection of network connections, and improves the user's network access experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the mechanisms shown in these drawings without paying any creative work.

[0040] Figure 1 This is a flow chart of a router-based Portal network authentication optimization method according to an embodiment of the present invention;

[0041] Figure 2 A block diagram of a router-based Portal network authentication optimization system according to an embodiment of the present invention;

[0042] Figure 3 This is a schematic diagram of a client logging into a router management page according to an embodiment of the present invention;

[0043] Figure 4 A schematic diagram of a mode selection page according to an embodiment of the present invention;

[0044] Figure 5 A schematic diagram of a login selection page according to an embodiment of the present invention;

[0045] Figure 6 This is a schematic diagram of an authentication prompt page according to an embodiment of the present invention;

[0046] Figure 7 Schematic diagram of the authentication pass page of an embodiment of the present invention DETAILED DESCRIPTION

[0047] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0048] It should be noted that the descriptions of "first", "second", etc. in the present invention are only for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the ability of ordinary technicians in the field to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

[0049] like Figure 1 As shown, an embodiment of the present invention is: a router-based Portal network authentication optimization method, characterized in that it includes the steps of:

[0050] A WiFi relay connection is established between the S10 and GL routers and the Portal WiFi device.

[0051] Among them, step S10 specifically includes: the GL router detects available WiFi networks around, automatically selects the Portal WiFi network for connection, and completes the network access between the GL router and the Portal WiFi device according to preset configuration parameters.

[0052] In this embodiment, the GL router acts as a proxy device and first needs to establish a WiFi connection with the Portal WiFi device. This connection is a relay type, which means that the GL router will act as a bridge between the client and the Portal WiFi device. The GL router has signal detection capabilities, can detect available Wi-Fi networks around, and automatically select the Portal WiFi network for connection. Once the Portal WiFi network is detected, the router will try to establish a connection and save network configuration information, such as SSID and security keys. The GL router has automatic connection capabilities, and can automatically connect after detecting the Portal WiFi network, and complete network access according to preset configuration parameters, such as security protocols, identity authentication methods, etc.

[0053] S11. Establish a WiFi connection between the client and the GL router.

[0054] Among them, step S11 specifically includes: establishing a WiFi connection between the client and the GL router through the WiFi protocol, and performing end-to-end security authentication during the WiFi connection establishment process.

[0055] In this embodiment, after the GL router is successfully connected to the Portal WiFi device, the next step is to establish a secure wireless connection between the client (i.e., the user's personal device) and the GL router, which allows the terminal device to seamlessly access the Internet through the GL router. The connection between the client device and the GL router will be established in accordance with the WiFi protocol, and multiple parallel connections can be established between the client and the router to improve the stability and speed of data transmission. During the WiFi connection establishment process, end-to-end security authentication will be performed to ensure the security and reliability of data transmission. It involves the application of security protocols such as WPA2 PSK / WPA3 SAE encryption.

[0056] S12. The client initiates an HTTP request to the portal wifi device.

[0057] In this embodiment, the client device will initiate an HTTP request to the Portal WiFi device through the established WiFi connection. This step simulates the behavior of the user device directly accessing the Internet. The GL router will process the HTTP request sent by the client device in the internal routing table, intercept the request according to the authentication requirements of the Portal WiFi, and start the authentication process.

[0058] S13. The portal wifi device returns an HTTP 302 redirect authentication page to the client.

[0059] In this embodiment, when the Portal WiFi device receives a request from the client, if it is not authenticated, it will return an HTTP 302 status code to redirect the client to the authentication page. Identification and processing of redirection page: The GL router needs to identify the HTTP 302 redirection and forward the request for the authentication page to the client. This process ensures that the client can receive the authentication page and then enter the authentication information.

[0060] S14. After receiving the redirect authentication page request, the client will initiate an HTTP request to the authentication server to request the authentication page content.

[0061] In this embodiment, the GL router is responsible for forwarding the authentication page request of the client to the authentication server, and after receiving the response, returns the authentication page content to the client.

[0062] S15. The authentication server processes the authentication page request from the client and returns the authentication page content.

[0063] In this embodiment, the authentication server processes the authentication page request of the client and returns the authentication page content, which may include a login form, a login guide, etc.

[0064] S16. The client encapsulates the correctly filled authentication information in an HTTP request and forwards it to the authentication server via the GL router.

[0065] In this embodiment, the client encapsulates the correctly filled authentication information in the HTTP request and forwards it to the authentication server via the GL router. In this process, it is very important to ensure the secure transmission of the authentication information.

[0066] S17. After verifying that the authentication information of the client is correct, the authentication server returns an HTTP response to inform that the authentication is successful and redirects the client to the authentication interface of the device.

[0067] In this embodiment, the GL router processes the successful response returned by the authentication server and starts the subsequent device authentication process after confirming that the authentication is successful.

[0068] S18. After successful authentication, the client will request the authentication interface of the Portal WiFi device to complete the device-level authentication.

[0069] In this embodiment, the GL router forwards the device authentication interface request of the client to the Portal WiFi device and processes the returned authentication result.

[0070] S19. The Portal WiFi device confirms that the device-level authentication is successful, releases the device data, and redirects the user to the originally requested website.

[0071] In this embodiment, the GL router will automatically detect the release status and redirect the user to the original website after confirming that the device has obtained Internet access permission. At the same time, the GL router will automatically restart the VPN and DNS encryption services to protect the user's privacy.

[0072] In a specific embodiment, the router-based Portal network authentication optimization method includes an automatic authentication mode. When the user selects the automatic authentication mode, the GL router will automatically turn off the VPN and DNS encryption services when a Portal WiFi network that needs to be authenticated is detected, and automatically turn on the VPN and DNS encryption services after the authentication is completed.

[0073] In this embodiment, the GL router will automatically shut down the VPN and DNS encryption services according to the user's settings, and restart these services after successful authentication to ensure that the user's network use is not interrupted.

[0074] In a specific embodiment, a router-based Portal network authentication optimization method includes a camouflage mode, in which the GL router performs a TTL+1 operation on all data packets passing through a relay interface at the kernel layer and recalculates the checksum to simulate the behavior of a terminal device directly connected to the network.

[0075] In this embodiment, in the camouflage mode, the GL router will change the TTL value and recalculate the checksum of all passing data packets to ensure that the data packets pass the inspection of the Portal WiFi device and protect the user's network security.

[0076] In this embodiment, the authentication process of the client interface is as follows: Figure 3-Figure 7 As shown, the user's operation process is: one of the terminals logs in to the router management page and clicks on relay scan; selects the specified WiFi to connect, and checks the automatic enablement of public hotspot authentication mode, and checks the camouflage mode; clicks Apply and waits for connection; clicks Go to login and authenticates according to the prompts on the authentication page; after the authentication is passed, all terminal devices connected to the router can access the Internet normally.

[0077] The technical effects of the present invention are embodied in the following aspects:

[0078] Improved user experience: Users do not need to perform tedious manual operations when connecting to the public network. All authentication processes are automatically completed by the GL router, which greatly improves the user experience.

[0079] Privacy and security protection: By automatically managing VPN and DNS encryption services, the present invention effectively protects the user's network privacy and prevents data leakage.

[0080] Convenience of network connection: When users switch to different network environments, GL routers can automatically complete authentication without repeated operations, which improves the convenience of network connection.

[0081] Device connection flexibility: GL routers support users to access the public network through personal routers, without being restricted by PortalWiFi devices, which improves the connection flexibility of devices.

[0082] Network security enhancement: The present invention enhances network security by operating data packets at the kernel layer to simulate the behavior of terminal devices directly connected to the network.

[0083] Through the implementation of the above technical solution, the present invention provides users with a seamless, convenient and secure public network access solution, effectively solves the problems existing in the traditional Portal authentication method, improves the user experience, and also strengthens the security and privacy protection of the network.

[0084] like Figure 2As shown, the embodiment of the present invention also provides a router-based Portal network authentication optimization system, including:

[0085] The relay establishment module 10 is used to establish a WiFi relay connection between the GL router and the Portal WiFi device;

[0086] The client connection module 11 is used to establish a WiFi connection between the client and the GL router;

[0087] HTTP request initiation module 12, used for the client to initiate an HTTP request to the portal wifi device;

[0088] The redirection authentication return module 13 is used for the Portal wifi device to return the HTTP 302 redirection authentication page to the client;

[0089] The content request authentication module 14 is used for the client to initiate an HTTP request to the authentication server to request the authentication page content after receiving the redirect authentication page request;

[0090] The authentication page content return module 15 is used for the authentication server to process the authentication page request of the client and return the authentication page content;

[0091] HTTP request forwarding module 16, used for the client to encapsulate the correctly filled authentication information in the HTTP request and forward it to the authentication server via the GL router;

[0092] HTTP response returning module 17, used for the authentication server to return an HTTP response after verifying that the authentication information of the client is correct, to inform that the authentication is successful, and to redirect the client to the authentication interface of the device;

[0093] The authentication interface request module 18 is used for the client to request the authentication interface of the Portal WiFi device after successful authentication to complete the device-level authentication;

[0094] The device data release module 19 is used for the Portal WiFi device to confirm that the device-level authentication is successful, release the device data, and redirect the user to the website of the original request.

[0095] Wherein, the relay establishment module 10 is specifically used for:

[0096] The GL router detects available WiFi networks in the surrounding area and automatically selects the Portal WiFi network for connection, and completes the network access between the GL router and the Portal WiFi device according to the preset configuration parameters.

[0097] The client connection module 11 is specifically used for:

[0098] A WiFi connection is established between the client and the GL router through the WiFi protocol. During the WiFi connection establishment process, end-to-end security authentication is performed.

[0099] In a specific embodiment, a router-based Portal network authentication optimization system includes an automatic authentication module, which is used when a user selects the automatic authentication mode, the GL router will automatically turn off the VPN and DNS encryption services when a Portal WiFi network that needs to be authenticated is detected, and automatically turn on the VPN and DNS encryption services after the authentication is completed.

[0100] In a specific embodiment, a router-based Portal network authentication optimization system includes a camouflage module, which is used for the GL router to perform TTL+1 operation on all data packets passing through the relay interface at the kernel layer and recalculate the checksum to simulate the behavior of the terminal device directly connecting to the network.

[0101] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A router-based Portal network authentication optimization method, characterized in that: Includes steps: A WiFi relay connection is established between the GL router and the Portal WiFi device; Establish a WiFi connection between the client and the GL router; The client initiates an HTTP request to the portal wifi device; The portal wifi device returns an HTTP 302 redirect authentication page to the client; After receiving the redirect authentication page request, the client will initiate an HTTP request to the authentication server to request the authentication page content; The authentication server processes the authentication page request from the client and returns the authentication page content; The client encapsulates the correctly filled authentication information in the HTTP request and forwards it to the authentication server via the GL router; After verifying that the client's authentication information is correct, the authentication server will return an HTTP response to inform that the authentication is successful and redirect the client to the device's authentication interface; After successful authentication, the client will request the authentication interface of the Portal WiFi device to complete the device-level authentication; The Portal WiFi device confirms that the device-level authentication is successful, releases the device data, and redirects the user to the originally requested website.

2. The router-based Portal network authentication optimization method according to claim 1, characterized in that: Establishing a WiFi relay connection between the GL router and the Portal WiFi device includes: The GL router detects available WiFi networks around it and automatically selects the Portal WiFi network for connection, and completes the network access between the GL router and the PortalWiFi device according to the preset configuration parameters.

3. The router-based Portal network authentication optimization method according to claim 1, characterized in that: Establishing a WiFi connection between the client and the GL router includes: A WiFi connection is established between the client and the GL router through the WiFi protocol. During the WiFi connection establishment process, end-to-end security authentication is performed.

4. The router-based Portal network authentication optimization method according to claim 1, characterized in that: Including automatic authentication mode. When the user selects automatic authentication mode, the GL router will automatically turn off the VPN and DNS encryption services when it detects a Portal WiFi network that requires authentication, and automatically turn on the VPN and DNS encryption services after the authentication is completed.

5. The router-based Portal network authentication optimization method according to claim 1, characterized in that: Including camouflage mode, GL router performs TTL+1 operation on all data packets passing through the relay interface at the kernel layer and recalculates the checksum to simulate the behavior of terminal devices directly connected to the network.

6. A router-based Portal network authentication optimization system, characterized in that: include: Relay establishment module, used to establish WiFi relay connection between GL router and PortalWiFi device; Client connection module, used to establish WiFi connection between client and GL router; HTTP request initiation module, used by the client to initiate HTTP requests to the portal wifi device; Redirect authentication return module, used by the Portal wifi device to return the HTTP 302 redirect authentication page to the client; The content request authentication module is used for the client to initiate an HTTP request to the authentication server to request the authentication page content after receiving the redirect authentication page request; The authentication page content return module is used for the authentication server to process the authentication page request of the client and return the authentication page content; HTTP request forwarding module, used by the client to encapsulate the correctly filled authentication information in the HTTP request and forward it to the authentication server via the GL router; HTTP response return module, used for the authentication server to return an HTTP response after verifying that the authentication information of the client is correct, informing that the authentication is successful, and redirecting the client to the authentication interface of the device; The authentication interface request module is used for the client to request the authentication interface of the Portal WiFi device after successful authentication to complete the device-level authentication; The device data release module is used by the Portal WiFi device to confirm that the device-level authentication is successful, release the device data, and redirect the user to the originally requested website.

7. The router-based Portal network authentication optimization system according to claim 6, characterized in that: The relay establishment module is specifically used for: The GL router detects available WiFi networks around it and automatically selects the Portal WiFi network for connection, and completes the network access between the GL router and the PortalWiFi device according to the preset configuration parameters.

8. The router-based Portal network authentication optimization system according to claim 6, characterized in that: The client connection module is specifically used for: A WiFi connection is established between the client and the GL router through the WiFi protocol. During the WiFi connection establishment process, end-to-end security authentication is performed.

9. The router-based Portal network authentication optimization system according to claim 6, characterized in that: Includes an automatic authentication module, which is used when the user selects the automatic authentication mode. The GL router will automatically turn off the VPN and DNS encryption services when it detects a Portal WiFi network that requires authentication, and automatically turn on the VPN and DNS encryption services after the authentication is completed.

10. The router-based Portal network authentication optimization system according to claim 6, characterized in that: Includes a camouflage module, which is used by the GL router to perform TTL+1 operations on all data packets passing through the relay interface at the kernel layer and recalculate the checksum to simulate the behavior of the terminal device directly connected to the network.

Images