Connection authorization system and method

Abstract

The invention provides a connection authorization method. The connection authorization method may include the following steps. A master device provides a white list to a wireless networking device, wherein the white list comprises white list information of at least one authorized device. And then, the wireless networking device is connected with the at least one authorized device according to the white list so as to provide a network for the at least one authorized device.

Description

Technical Field

[0001] The embodiments of the present invention are mainly related to a connection authorization technology, and more particularly to a connection authorization technology for performing connection authorization according to a whitelist. Background Art

[0002] With the continuous advancement of technology, the application and demand for Wi-Fi are also increasing.

[0003] When friends come to your home or visitors come to your company, they usually need to connect to the wireless networking device (e.g. Wi-Fi router) at home or at your company to access the Internet. However, friends or visitors usually need to enter the Wi-Fi password to connect to the wireless networking device to access the Internet. In addition, in addition to the inconvenience of friends or visitors having to enter the Wi-Fi password, for security reasons, users may need to change the Wi-Fi password after the friends or visitors leave.

[0004] Therefore, how to more flexibly and securely authorize friends or visitors to use wireless networking devices to access the Internet will be a topic worth discussing. Summary of the invention

[0005] In view of the above problems in the prior art, an embodiment of the present invention provides a connection authorization method and system.

[0006] According to one embodiment of the present invention, a connection authorization method is provided. The connection authorization method may include the following steps. A host device provides a whitelist to a wireless networking device, wherein the whitelist includes whitelist information of at least one authorized device. Then, the wireless networking device connects to the at least one authorized device according to the whitelist to provide a network to the at least one authorized device.

[0007] In some embodiments, the whitelist information includes a device name, a device address, and a connection time corresponding to each of the authorized devices.

[0008] In some embodiments, the connection authorization method further includes the following steps: The host device captures a photo corresponding to the user of the at least one authorized device. The host device obtains at least one feature vector contained in the photo based on a face recognition model, wherein each feature vector may correspond to a face. Then, the host device compares each feature vector with a stored feature vector to determine whether there is a matching feature vector.

[0009] In some embodiments, when there is a matching feature vector, the host device automatically sets the whitelist information of the authorized device corresponding to the matching feature vector.

[0010] In some embodiments, when there is no matching feature vector, the main device is used to capture another photo of the user of the authorized device corresponding to the non-matching feature vector, obtain a feature vector contained in the other photo based on the face recognition model, and store the feature vector corresponding to the other photo.

[0011] In some embodiments, the host device is used to store device information corresponding to each of the authorized devices.

[0012] In some embodiments, the device information includes a device name, a device address, a connection time, a whitelist termination time, and a last disconnection time corresponding to each of the authorized devices.

[0013] In some embodiments, the master device is used to set the whitelist termination time according to the last disconnection time.

[0014] In some embodiments, the host device is used to update and manage the whitelist information and the device information corresponding to each of the authorized devices.

[0015] According to one embodiment of the present invention, a connection authorization system is provided. The connection authorization system includes at least one authorized device, a wireless networking device, and a main device. The wireless networking device can connect to the at least one authorized device according to a white list to provide a network to the at least one authorized device. The main device can provide the white list to the wireless networking device, wherein the white list includes white list information of each authorized device.

[0016] As for other additional features and advantages of the present invention, those skilled in the art can make slight changes and modifications to the connection authorization method and system disclosed in the implementation method of this case without departing from the spirit and scope of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 is a block diagram showing a connection authorization system 100 according to an embodiment of the present invention.

[0018] Figure 2 is a block diagram showing a main device 110 according to an embodiment of the present invention.

[0019] Figure 3 is a flow chart showing an initial connection authorization procedure according to an embodiment of the present invention.

[0020] Figure 4 is a flow chart showing a connection authorization procedure according to an embodiment of the present invention.

[0021] Figure 5is a flow chart showing a connection authorization method according to an embodiment of the present invention.

[0022] The reference numerals are described as follows:

[0023] 100: Connection authorization system

[0024] 110: Main device

[0025] 120: Wireless networking device

[0026] 130: Authorized device

[0027] 210: Processor

[0028] 220: Communication circuit

[0029] 230: Image capture circuit

[0030] 240: Storage circuit

[0031] S310~S370, S410~S430, S510~S520: Steps DETAILED DESCRIPTION

[0032] This section describes the preferred method of implementing the present invention, which is intended to illustrate the spirit of the present invention rather than to limit the scope of protection of the present invention. The scope of protection of the present invention shall be determined by the appended claims.

[0033] Figure 1 FIG. 1 is a block diagram showing a connection authorization system 100 according to an embodiment of the present invention. Figure 1 As shown, the connection authorization system 100 may include a host device 110, a wireless networking device 120, and at least one authorized device 130. Figure 1 The connection authorization system 100 shown in FIG. 1 is only for the convenience of illustrating the embodiment of the present invention, but the present invention is not limited to Figure 1 The connection authorization system 100 may also include other devices. For example, the connection authorization system 100 may include multiple authorized devices 130. According to an embodiment of the present invention, the wireless networking device 120 may be a router or an Internet Protocol (IP) sharing device, but the present invention is not limited thereto.

[0034] According to one embodiment of the present invention, the host device 110 may be a smart phone, a laptop, or a desktop computer, but the present invention is not limited thereto. The host device 110 may be used to set the whitelist information included in the whitelist to be provided to the wireless networking device 120. In one embodiment, the host device 110 may provide the whitelist information to the wireless networking device 120 by directly establishing a connection with the wireless networking device 120. In another embodiment, the host device 110 may also remotely control the wireless networking device 120, i.e., provide the whitelist information to the wireless networking device 120 through a remote server.

[0035] According to another embodiment of the present invention, the connection authorization system 100 may also include multiple host devices. Each host device can perform the operations performed by the host device 110 described in the following embodiments.

[0036] According to an embodiment of the present invention, the authorized device 130 may be a smart phone, a laptop, or a tablet computer, but the present invention is not limited thereto. In an embodiment of the present invention, the authorized device 130 is a device that indicates that the user of the main device 110 agrees that the device can use the network provided by the wireless networking device 120. After the authorized device 130 is connected to the Service Set Identifier (SSID) of the wireless networking device 120, the authorized device 130 only needs to wait for the authorization of the main device 110, and does not need to enter a password. In other words, after the wireless networking device 120 obtains the whitelist information corresponding to the authorized device 130 from the main device 110, the authorized device 130 can be authorized to use the network provided by the wireless networking device 120 (i.e., the Wi-Fi connection has been established). In other words, when a device does not correspond to the whitelist information in the whitelist of the wireless networking device 120 (i.e., it has not been authorized by the main device 110), the device will not be authorized to use the network provided by the wireless networking device 120.

[0037] Figure 2 FIG. 1 is a block diagram showing a main device 110 according to an embodiment of the present invention. Figure 2 As shown, the host device 110 may include a processor 210, a communication circuit 220, an image capture circuit 230, and a storage circuit 240. Figure 2 The main device 110 shown in FIG. 1 is only for the convenience of explaining the embodiment of the present invention, but the present invention is not limited to Figure 2 The main device 110 may also include other components and circuits.

[0038] The processor 210 may be a controller or a processor. The processor 210 may be used to control the operation of the communication circuit 220, the image capture circuit 230 and the storage circuit 240. According to an embodiment of the present invention, the processor 210 may also execute software and firmware program codes to perform operations related to connection authorization.

[0039] The communication circuit 220 can be used to establish a connection with the wireless networking device 120 to provide whitelist information to the wireless networking device 120. The whitelist information may include a device name (e.g., model of the authorized device 130), a device address (i.e., the multimedia access control (MAC) address of the authorized device 130), and a connection time (i.e., the time point when the authorized device 130 is authorized to connect to the network via the wireless networking device 120) for each authorized device 130.

[0040] The image capture circuit 230 may be used to capture a facial photo corresponding to each user of the authorized device 130 , or to capture a group photo corresponding to the users of multiple authorized devices 130 .

[0041] The storage circuit 240 can be used to store software and firmware program codes, system data, etc. of the host device 110. The storage circuit 240 can be a volatile memory (e.g., random access memory (RAM)), or a non-volatile memory (e.g., flash memory, read-only memory (ROM)), a hard disk, or a combination of the above storage devices. According to an embodiment of the present invention, it can be used to store the feature vector and device information corresponding to each authorized device 130.

[0042] Figure 3 is a flow chart showing an initial connection authorization procedure according to an embodiment of the present invention. Figure 3 The flowchart of the connection authorization system 100 is applicable. In step S310, when an authorized device is connected to the wireless networking device for the first time, the host device may transmit a whitelist including whitelist information of the authorized device to the wireless networking device to authorize the authorized device to connect to the network via the wireless networking device. The whitelist information may include a device name, a device address, and a connection time corresponding to the authorized device. Table 1 is an example of a whitelist, but the present invention is not limited thereto.

[0043]

[0044] Table 1

[0045] In step S320 , the host device may capture a facial photo of the user of the authorized device.

[0046] In step S330, the host device can obtain a feature vector corresponding to the facial photo according to a face recognition model and store the feature vector. The feature vector is associated with the device address corresponding to the authorized device.

[0047] More specifically, this face recognition model can be a face recognition model pre-trained based on one or more face recognition algorithms (for example: Multi-task Cascaded Convolutional Networks (MTCNN), Facenet, Face-Alignment, etc., but the present invention is not limited to this). For example, a face recognition model can be established with a data set of 1000 people, each with 10 photos from different angles. First, a feature point database will be established with each person's frontal photo. Specifically, the MTCNN algorithm can be used to list the face position frame, and then the Facenet algorithm can be used to extract the facial feature values, and the face can be divided into matrices of several dimensions. Data such as the length and width of the nose, the width of the forehead, the length and shape of the eyes, and the width between the eyes are extracted into vector-based feature values, and then these feature values ​​are stored in the database. Next, the model is trained with photos of each person from other angles. Specifically, the face frames in the photo can be listed, and after being aligned using the Face-Alignment algorithm, the image is input into the model to extract feature point data to obtain its feature vector. Then, the similarity will be compared with the data in the database using the Euclidean distance, and the adjustment threshold will be set to determine whether it is the same person.

[0048] In addition, according to one embodiment of the present invention, the main device may store the device information corresponding to the authorized device. The device information may include a device name, a device address, a connection time, a whitelist termination time, and a last disconnection time corresponding to the authorized device. Since this authorized device is authorized for the first time, the main device may determine the first whitelist termination time based on the connection time corresponding to the authorized device. For example, if the connection time corresponding to the authorized device is 2023-03-25 11:13, the main device may set the whitelist termination time to 2023-03-26 11:13 (i.e., 24 hours, but the present invention is not limited thereto). In addition, since this authorized device is authorized for the first time, this authorized device does not yet have information on the last disconnection time.

[0049] Table 2 corresponds to Figure 3 This is an example of the display device information described in the process, but the present invention is not limited to this.

[0050]

[0051] Table 2

[0052] In step S340 , the host device may determine whether the authorized device has disconnected from the wireless networking device (ie, the Wi-Fi connection has been disconnected).

[0053] If the authorized device has disconnected from the wireless networking device, proceed to step S350. In step S350, the host device may record the time when the authorized device is disconnected as the last disconnection time corresponding to the authorized device, and remove the authorized device from the whitelist of the wireless networking device.

[0054] If the authorized device has not disconnected from the wireless networking device, proceed to step S360. In step S360, the host device may determine whether the connection time of the authorized device has exceeded a whitelist termination time.

[0055] If the connection time of the authorized device has exceeded a whitelist expiration time, step S370 is performed. In step S370, the host device may remove the authorized device from the whitelist of wireless networking devices.

[0056] If the connection time of the authorized device has not exceeded a whitelist termination time, the process returns to step S340.

[0057] Figure 4 is a flow chart showing a connection authorization procedure according to an embodiment of the present invention. Figure 4 The flowchart of FIG. 1 is applicable to the connection authorization system 100. In particular, the following Figure 4 The description is made by taking the first authorized device and the second authorized device as examples, but the present invention is not limited thereto. In step S410, when a first authorized device and a second authorized device need to be authorized to connect to the wireless networking device, the main device can first capture a photo of the user of the first authorized device and the user of the second authorized device.

[0058] In step S420, the host device may obtain a feature vector corresponding to each face in the group photo according to a face recognition model, and compare each feature vector with a stored feature vector to determine whether there is a matching feature vector.

[0059] If there is a matching feature vector (for example, the feature vector corresponding to the first authorized device matches the stored feature vector, i.e., the first authorized device has been authorized before), proceed to step S430. In step S430, the host device can automatically set the whitelist information of the first authorized device according to the device information of the first authorized device previously stored, and transmit the whitelist information of the first authorized device to the wireless networking device to authorize the first authorized device to connect to the network via the wireless networking device. In addition, the host device can also set the whitelist termination time corresponding to the first authorized device for this connection according to the last disconnection time corresponding to the first authorized device.

[0060] If there is no matching feature vector (for example, the second authorized device is authorized for the first time), the main device will capture a facial photo of the user of the second authorized device and perform Figure 3 process.

[0061]

[0062] Table 3

[0063]

[0064] Table 4

[0065] Tables 3 and 4 correspond to Figure 4 The whitelist and device information of the process are an example, but the present invention is not limited to this. Since the first authorized device has been authorized, the main device can set the whitelist expiration time corresponding to the first authorized device according to the last disconnection time of the first authorized device (16:47) recorded. As shown in Table 4, the whitelist expiration time corresponding to the first authorized device is the last disconnection time plus 1 hour (i.e. 17:47), but the present invention is not limited to this. In addition, since the second authorized device is authorized for the first time, the main device can determine the whitelist expiration time corresponding to the second authorized device according to the connection time corresponding to this second authorized device. As shown in Table 4, if the connection time corresponding to the second authorized device is 2023-05-20 (Sat) 10:38, the main device can set the whitelist expiration time corresponding to the second authorized device to 2023-05-21 (Sat) 10:38 (i.e. 24 hours, but the present invention is not limited to this).

[0066] According to another embodiment of the present invention, the master device can also set the whitelist expiration time corresponding to an authorized device according to multiple last disconnection times corresponding to the authorized device. For example, if the last last disconnection time corresponding to an authorized device is 17:35, and the last last disconnection time corresponding to the authorized device is 18:35, the master device can average the two last disconnection times and add 1 hour (i.e., 17:53+1=18:53), but the present invention is not limited to this. In addition, the master device can also set and adjust the whitelist expiration time corresponding to the authorized device according to holidays and weekdays.

[0067] According to one embodiment of the present invention, the master device can update and manage the whitelist information and device information corresponding to each authorized device. In one example, if an authorized device has not been connected to the wireless networking device for more than a predetermined time (e.g., 1 year), the master device can first remove all or part of the device information of this device. In another example, if the number of device information corresponding to an authorized device has exceeded a predetermined number of times (e.g., 5 records, i.e., this authorized device has been connected to the wireless networking device 5 times), the master device can first remove some of the older device information of this device (e.g., remove the oldest device information).

[0068] Figure 5 It is a flow chart of a connection authorization method according to an embodiment of the present invention. Figure 5 The connection authorization method shown in the figure can be applied to the connection authorization system 100. Figure 5 As shown, in step S510 , the host device 110 may provide a whitelist to a wireless networking device 120 , wherein the whitelist includes whitelist information of at least one authorized device 130 .

[0069] In step S520 , the wireless networking device 120 may connect to the at least one authorized device 130 according to the white list to provide a network to the at least one authorized device 130 .

[0070] According to an embodiment of the present invention, in the connection authorization method, the whitelist information may include a device name, a device address, and a connection time corresponding to each of the authorized devices 130 .

[0071] According to an embodiment of the present invention, in the connection authorization method, the main device 110 may further capture a photo corresponding to the user of the at least one authorized device 130. The main device 110 may further obtain at least one feature vector contained in the photo according to a face recognition model, wherein each feature vector may correspond to a face. The main device 110 may further compare each feature vector with a stored feature vector to determine whether there is a matching feature vector.

[0072] According to an embodiment of the present invention, in the connection authorization method, when there is a matching feature vector, the host device 110 can automatically set the whitelist information of the authorized device 130 corresponding to the matching feature vector.

[0073] According to one embodiment of the present invention, in the connection authorization method, when there is no matching feature vector, the main device 110 can further capture another photo corresponding to the user of the authorized device 130 corresponding to the non-matching feature vector, obtain a feature vector contained in the other photo based on the face recognition model, and store the feature vector corresponding to the other photo.

[0074] According to an embodiment of the present invention, in the connection authorization method, the host device may store device information corresponding to each of the above authorized devices 130. According to an embodiment of the present invention, in the connection authorization method, the device information may include a device name, a device address, a connection time, a whitelist termination time, and a last disconnection time corresponding to each of the above authorized devices.

[0075] According to an embodiment of the present invention, in the connection authorization method, the host device can set the whitelist termination time according to the last disconnection time.

[0076] According to an embodiment of the present invention, in the connection authorization method, the host device can update and manage the whitelist information and the device information corresponding to each of the authorized devices.

[0077] According to the connection authorization method proposed by the present invention, the authorized device and the wireless networking device can be directly authorized to connect to the network via the wireless networking device by means of face recognition, without the need to enter a password for authorization. In addition, the user does not need to frequently change the WI-Fi password for security reasons.

[0078] Serial numbers in this specification and claims, such as "first", "second", etc., are only for convenience of explanation and there is no sequential relationship between them.

[0079] The steps of the methods and algorithms disclosed in the specification of the present invention can be directly applied to hardware and software modules or a combination of the two by executing a processor. A software module (including execution instructions and related data) and other data can be stored in a data storage device, such as a random access memory (RAM), a flash memory, a read-only memory (ROM), an erasable programmable read-only memory (EPROM), an electronically erasable programmable read-only memory (EEPROM), a register, a hard disk, a portable hard disk, a compact disc read-only memory (CD-ROM), a DVD or any other computer-readable storage medium format in the prior art in this field. A storage medium can be coupled to a machine device, for example, such as a computer / processor (for convenience of explanation, the processor is represented in this specification), and the above-mentioned processor can read information (such as program code) and write information to the storage medium. A storage medium can integrate a processor. An application-specific integrated circuit (ASIC) includes a processor and a storage medium. A user device includes an application-specific integrated circuit. In other words, the processor and the storage medium are included in the user device in a manner that is not directly connected to the user device. In addition, in some embodiments, any suitable computer program product includes a readable storage medium, wherein the readable storage medium includes program code related to one or more disclosed embodiments. In some embodiments, the computer program product may include packaging materials.

[0080] The above paragraphs are described using multiple levels. Obviously, the teachings of this article can be implemented in multiple ways, and any specific architecture or function disclosed in the examples is only a representative situation. According to the teachings of this article, anyone familiar with this technology should understand that each level disclosed in this article can be implemented independently or two or more levels can be combined for implementation.

[0081] Although the present disclosure has been disclosed as above by way of embodiments, it is not intended to limit the present disclosure. Anyone skilled in the art may make slight changes and modifications without departing from the spirit and scope of the present disclosure. Therefore, the protection scope of the present invention shall be determined by the appended claims.

Claims

1. A connection authorization method, comprising: Providing a whitelist to a wireless networking device by a host device, wherein the whitelist includes whitelist information of at least one authorized device; as well as The wireless networking device is connected to the at least one authorized device according to the white list to provide a network to the at least one authorized device.

2. The connection authorization method as claimed in claim 1, wherein the whitelist information includes a device name, a device address and a connection time corresponding to each of the authorized devices.

3. The connection authorization method as claimed in claim 1, further comprising: capturing a photo corresponding to a user of the at least one authorized device by the main device; Obtaining at least one feature vector contained in the photo by the main device according to a face recognition model, wherein each feature vector corresponds to a face; and The main device compares each of the feature vectors with the stored feature vectors to determine whether there is a matching feature vector.

4. The connection authorization method as claimed in claim 3, further comprising: When there is a matching feature vector, the main device automatically sets the whitelist information of the authorized device corresponding to the matching feature vector.

5. The connection authorization method as claimed in claim 3, further comprising: When there is no matching feature vector, the main device captures another photo of the user of the authorized device corresponding to the non-matching feature vector; Obtaining a feature vector contained in the other photo by the main device according to the face recognition model; and The main device stores the feature vector corresponding to the other photo.

6. The connection authorization method as claimed in claim 1, further comprising: The main device stores the device information corresponding to each of the authorized devices.

7. The connection authorization method as claimed in claim 6, wherein the device information includes a device name, a device address, a connection time, a whitelist termination time and a last disconnection time corresponding to each of the authorized devices.

8. The connection authorization method as claimed in claim 7, further comprising: The whitelist termination time is set by the main device according to the last disconnection time.

9. The connection authorization method as claimed in claim 6, further comprising: The whitelist information and the device information corresponding to each of the authorized devices are updated and managed by the main device.

10. A connection authorization system, comprising: at least one authorized device; a wireless networking device, connected to the at least one authorized device according to a white list, to provide a network to the at least one authorized device; as well as A main device provides the white list to the wireless networking device, wherein the white list includes white list information of each authorized device. 11 . The connection authorization system as claimed in claim 10 , wherein the whitelist information includes a device name, a device address and a connection time corresponding to each of the authorized devices.

12. The online authorization system as described in claim 10, wherein the main device further captures a photo corresponding to the user of the at least one authorized device, obtains at least one feature vector contained in the photo based on a face recognition model, and compares each of the feature vectors with the stored feature vectors to determine whether there is a matching feature vector, wherein each of the feature vectors can correspond to a face.

13. The connection authorization system as claimed in claim 12, wherein when there is a matching feature vector, the host device further automatically sets the whitelist information of the authorized device corresponding to the matching feature vector.

14. An online authorization system as described in claim 12, wherein when there is no matching feature vector, the main device further captures another photo corresponding to the user of the authorized device corresponding to the non-matching feature vector, obtains a feature vector contained in the other photo based on the face recognition model, and stores the feature vector corresponding to the other photo.

15. The connection authorization system as claimed in claim 10, wherein the host device stores device information corresponding to each of the authorized devices. 16 . The connection authorization system as claimed in claim 15 , wherein the device information includes a device name, a device address, a connection time, a whitelist termination time, and a last disconnection time corresponding to each of the authorized devices.

17. The connection authorization system as claimed in claim 16, wherein the host device sets the whitelist expiration time according to the last disconnection time.

18. The connection authorization system as claimed in claim 15, wherein the host device further updates and manages the whitelist information and the device information corresponding to each of the authorized devices.

Images