Portable WAPI terminal module

Abstract

The invention discloses a portable WAPI terminal module, which comprises a shell, a built-in battery jar, an external TYPE-C interface and a heat dissipation hole are supported by the shell, a fingerprint authentication area is arranged outside the shell, a mobile terminal is arranged in the shell, a WAPI module and a WAPI certificate are arranged in the mobile terminal, and the mobile terminal is used for identity authentication and data transmission; the access point is a wireless device supporting a WAPI or SSID protocol and is responsible for terminal access authentication; the authentication server is used for verifying the legality of certificates of the terminal and the AP and storing a certificate revocation list; and the encryption chip is used for storing an encryption certificate required by WAPI authentication, verifying the certificate, negotiating a key and decrypting private key data. According to the invention, the threshold of using the WAPI communication technology by the terminal equipment is simplified, the operation of connecting a WAPI wireless network by a user is simplified, networking can be carried out for data transmission after successful authentication, networking can be carried out only by firstly carrying out fingerprint matching equipment when the terminal equipment is used by the user, and the security and reliability of WAPI communication are enhanced.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of WAPI module application, and particularly relates to a portable WAPI terminal module. BACKGROUND

[0002] At present, the technology based on a wireless local area network (WLAN) has been widely applied, and WAPI, as a mandatory standard of the wireless local area network in China, has also been greatly developed in China, and a large number of terminals supporting WAPI, such as smart phones and tablet computers, have appeared. WAPI is a Chinese wireless local area network standard.

[0003] A WAPI mobile phone special wireless module such as AW-GH32 in the prior art can simultaneously support "WAPI / WAPI+Wi-Fi / WAPI+Wi-Fi+Bluetooth". However, in some special communication fields, the WAPI technology develops relatively slowly, and the main reason is that there is a certain technical threshold for using the WAPI communication, so that some manufacturers cannot conveniently use the WAPI technology, and the WAPI terminal needs to be operated in various certificate operations, which is relatively cumbersome, thereby affecting the use experience of users, and some scenes need to have higher security requirements, and these factors limit the use and development of the WAPI technology in the special communication field. SUMMARY

[0004] The present application relates to the technical field of WAPI module application, and particularly relates to a portable WAPI terminal module.

[0005] In order to achieve the above-mentioned purpose, the present application adopts the following technical scheme:

[0006] A portable WAPI terminal module comprises a shell, the shell supports a built-in battery slot, an external TYPE-C interface and a heat dissipation hole, the shell externally has a fingerprint authentication area, and the shell internally comprises:

[0007] A mobile terminal: a built-in WAPI module and a WAPI certificate are used for identity authentication and data transmission;

[0008] An access point: a wireless device supporting a WAPI or SSID protocol is responsible for terminal access authentication;

[0009] A discrimination server: the discrimination server verifies the legality of certificates of a terminal and an AP and stores a certificate revocation list;

[0010] An encryption chip: the encryption chip stores, verifies and negotiates encryption certificates required for WAPI authentication and decrypts private key data;

[0011] A certificate issuing authority: the certificate issuing authority is responsible for issuing and managing digital certificates;

[0012] Power management: the power management module is responsible for the power supply and energy management of the device, ensuring efficient operation and energy saving of the device in various working states;

[0013] Fingerprint authentication module: supports fingerprint authentication to realize network pairing;

[0014] The mobile terminal and the power management module are connected in series through the intelligent switch, the power management module is electrically connected with the fingerprint authentication module, the intelligent switch can be turned on through fingerprint authentication, the mobile terminal and the power management module are powered on, the whole WAPI terminal module is started to realize networking;

[0015] After the WPAI module device is started, it automatically searches for a network, searches for the required SSID access point, performs wireless association operation, then uses the WAPI certificate and private key stored in the encryption chip to perform authentication, obtains an IP address after successful authentication, then uses the IPSEC certificate and private key stored in the encryption chip to perform IPSEC authentication according to the IPSEC configuration, creates an IPSEC tunnel after successful authentication, then opens the data forwarding function of the module, and starts data communication.

[0016] As a further scheme of the application, the WAPI module comprises:

[0017] A digital certificate module based on an elliptic curve cryptography algorithm of a public key cryptography system, used for device identity authentication and digital signature;

[0018] An identity authentication module, which ensures legal access of the device through a three-way bidirectional authentication mechanism;

[0019] A data encryption module, which uses an encryption protocol to encrypt the transmission data to prevent man-in-the-middle attacks and data tampering.

[0020] As a further scheme of the application, the fingerprint authentication comprises the following steps:

[0021] Step one: input the administrator password;

[0022] Step two: perform network configuration, connect WIFI and input the password, and wait for successful connection;

[0023] Step three: input the fingerprint.

[0024] As a further scheme of the application, the TYPE-C interface is connected with a computer or a tablet.

[0025] As a further scheme of the application, the encryption chip is used to store the certificate and the certificate private key, and the content includes the WAPI ASUE certificate and the key, the WAPI AS certificate, the RSA client certificate and the key for IPSEC encryption, and the server certificate, the certificate is imported through the key input port of the module.

[0026] The beneficial effects of the present invention are:

[0027] The present invention can simplify the threshold for terminal devices to use WAPI communication technology, simplify the operation of users connecting to the WAPI wireless network, realize the opening of the intelligent switch through fingerprint authentication, realize the power-on of the mobile terminal and the power management module, start the entire WAPI terminal module to realize networking, realize fingerprint authentication first, and only after successful authentication can the network be connected for data transmission. When using, the user needs to first perform fingerprint matching on the device before entering the network, thereby enhancing the security and reliability of WAPI communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Fig. 1 This is a schematic diagram of the housing structure of a portable WAPI terminal module proposed in the present invention;

[0029] Fig. 2 This is a schematic diagram of the framework of a portable WAPI terminal module proposed by the present invention;

[0030] Fig. 3 This is a networking flow chart of a portable WAPI terminal module proposed by the present invention. DETAILED DESCRIPTION

[0031] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments.

[0032] It should be noted that, in the absence of conflict, the embodiments and features of the embodiments in this application can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0033] Reference Figs. 1-3 A portable WAPI terminal module includes: a housing, the housing supporting a built-in battery slot, an external TYPE-C interface and heat dissipation holes, an external fingerprint authentication area of ​​the housing, and the interior of the housing including:

[0034] Mobile terminal: built-in WAPI module and WAPI certificate for identity authentication and data transmission;

[0035] Access point: A wireless device that supports WAPI or SSID protocols and is responsible for terminal access authentication;

[0036] Authentication server: verifies the legitimacy of the terminal and AP certificates and stores the certificate revocation list;

[0037] Encryption chip: The encryption chip stores encryption certificates, verifies certificates, negotiates keys, and decrypts private key data required for WAPI authentication.

[0038] Certificate Authority: responsible for the issuance and management of digital certificates;

[0039] Power Management: the power management module is responsible for the power supply and energy management of the device, ensuring efficient operation and energy saving in various working states;

[0040] Fingerprint authentication module: supports fingerprint authentication to achieve network pairing;

[0041] The mobile terminal and the power management module are connected in series through an intelligent switch, and the power management module is electrically connected with the fingerprint authentication module, so that the intelligent switch can be turned on through fingerprint authentication, the mobile terminal and the power management module can be powered on, and the entire WAPI terminal module can be started to realize networking;

[0042] After the WPAI module device is started, it automatically searches for a network, searches for the required SSID access point, performs wireless association operation, then uses the WAPI certificate and private key stored in the encryption chip to perform authentication, obtains an IP address after successful authentication, then uses the IPSEC certificate and private key stored in the encryption chip to perform IPSEC authentication according to the IPSEC configuration, creates an IPSEC tunnel after successful authentication, then opens the data forwarding function of the module, and starts data communication.

[0043] In this embodiment, the WAPI module includes:

[0044] Digital certificate module, based on the elliptic curve cryptography algorithm of the public key cryptography system, used for device identity authentication and digital signature;

[0045] Identity authentication module, through a three-way mutual authentication mechanism, to ensure legal access of the device;

[0046] Data encryption module, using encryption protocol to encrypt the transmission data, preventing man-in-the-middle attacks and data tampering.

[0047] In this embodiment, the fingerprint authentication includes the following steps:

[0048] Step one: input the administrator password;

[0049] Step two: network configuration, connect WIFI and input password, wait for connection success;

[0050] Step three: enter the fingerprint.

[0051] In this embodiment, the TYPE-C interface is connected to a computer or a tablet.

[0052] In the embodiment, the encryption chip is used for storing certificates and certificate private keys, and the content includes WAPI AS UE certificate and key, WAPI AS certificate, IPSEC encryption RSA client certificate and key and server certificate, and the certificates are imported through the key input port of the module.

[0053] Working principle: the terminal device using WAPI communication technology can be simplified, the operation of connecting WAPI wireless network by the user can be simplified, the intelligent switch can be started through fingerprint authentication, the mobile terminal and the power management module are powered on, the whole WAPI terminal module is started to realize networking, the fingerprint authentication is realized first, and only after the authentication succeeds, the data transmission can be realized, the user needs to perform fingerprint matching first when using the device, and then the device can be connected to the network, and the security and reliability of WAPI communication are enhanced.

[0054] For the convenience of description, spatial relative terms such as "above", "upper", "on", "top", etc. can be used herein to describe the spatial relationship of one device or feature to other devices or features as shown in the drawings. It should be understood that the spatial relative terms are intended to include different orientations in use or operation in addition to the orientation of the device described in the drawings. For example, if the device in the drawing is inverted, the device described as "above" or "on" other devices or structures will be positioned "below" or "under" other devices or structures. Thus, the exemplary term "above" can include both "above" and "below" orientations. The device can also be positioned in other different ways (rotated 90 degrees or in other orientations), and the spatial relative descriptions used herein are interpreted accordingly.

[0055] It should be noted that the terms used herein are only for the purpose of describing specific embodiments, and are not intended to limit the exemplary embodiments according to the present application. As used herein, the singular form is intended to include the plural form unless the context clearly indicates otherwise, and it should also be understood that when the terms "comprise" and / or "include" are used in the specification, there is a feature, step, operation, device, component and / or combination thereof.

[0056] It has to be noted that the terms "first", "second", and the like in the description and in the claims of the present application are used for distinguishing between similar elements and not necessarily for describing a sequential or chronological order. It is to be understood that the use of these terms is interchangeable under appropriate circumstances and the embodiments of the present application are capable of operation in other sequences than described or illustrated herein. Moreover, the terms "comprise", "have" and any variations thereof are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises, has or includes a list of elements is not necessarily limited to those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus.

[0057] The preferred embodiments of the application are described above in detail. The application is not limited to the embodiments described above, but can vary and be modified in various ways. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the application should be included in the scope of the protection of the application.

Claims

1. A portable WAPI terminal module, characterized by, It includes: The shell supports the built-in battery slot, the external TYPE-C interface and the heat dissipation hole, and the shell includes the external fingerprint authentication area inside the shell; Mobile terminal: built-in WAPI module and WAPI certificate, used for identity authentication and data transmission; Access point: wireless device supporting WAPI or SSID protocol, responsible for terminal access authentication; Authentication server: verifies the legality of the certificate of the terminal and AP, and stores the certificate revocation list; Encryption chip: encryption chip stores the encryption certificate required for WAPI authentication, certificate verification and key negotiation, and private key data decryption; Certificate authority: responsible for the issuance and management of digital certificates; Power management: the power management module is responsible for the power supply and energy management of the device, ensuring efficient operation and energy saving of the device in various working states; Fingerprint authentication module: supports fingerprint authentication to realize network pairing; The mobile terminal and the power management module are connected in series through the intelligent switch, and the power management module and the fingerprint authentication module are electrically connected, so that the intelligent switch can be turned on through fingerprint authentication, the mobile terminal and the power management module are powered on, and the entire WAPI terminal module is started to realize networking; After the WPAI module device is started, it automatically searches for the network, searches for the required SSID access point, performs wireless association operation, then uses the WAPI certificate and private key stored by the encryption chip to perform authentication, obtains the IP address after successful authentication, then uses the IPSEC certificate and private key stored by the encryption chip to perform IPSEC authentication according to the IPSEC configuration, creates an IPSEC tunnel after successful authentication, then opens the data forwarding function of the module, and starts data communication.

2. The portable WAPI terminal module according to claim 1, wherein, The WAPI module includes: Digital certificate module, based on the elliptic curve cryptography algorithm of the public key cryptography system, used for device identity authentication and digital signature; Identity authentication module, through a three-way mutual authentication mechanism, to ensure legal access of the device; Data encryption module, which uses encryption protocols to encrypt transmitted data to prevent man-in-the-middle attacks and data tampering.

3. The portable WAPI terminal module according to claim 1, wherein, The fingerprint authentication includes the following steps: Step one: input the administrator password; Step two: configure the network, connect to WIFI and input the password, and wait for the connection to be successful; Step three: enter the fingerprint.

4. The portable WAPI terminal module according to claim 1, wherein, The TYPE-C interface is connected to a computer or a tablet.

5. The portable WAPI terminal module according to claim 1, wherein, The encryption chip is used to store certificates and private keys, including WAPI ASUE certificates and keys, WAPI AS certificates, IPSEC encryption RSA client certificates and keys, and server certificates, which are imported through the module's key port.

Images