Access control method of router management page, terminal and router
By using an authentication code that interacts with encryption and decryption factors, the security and convenience issues of accessing the router management page are resolved, enabling convenient access authorization and enhanced security.
Patent Information
- Application Number
- CN202511262628.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-09-04
- Publication Date
- 2025-12-12
AI Technical Summary
The existing router management page has poor security and ease of access, especially the username and password authentication method, which has security risks and is cumbersome to operate.
The authentication code is exchanged using encryption and decryption factors. The terminal and the router generate, encrypt, and decrypt the authentication code to achieve convenient access authorization and improve security through identity authentication.
It achieves a balance between security and convenience in the router management page, improving the security and user experience of the access process.
Smart Images
Figure CN121125535A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of Internet technology, specifically to an access control method for a router management page, a terminal, and a router. Background Technology
[0002] With the rapid development of Internet technology, routers, as core network connection devices, are frequently accessed by users through a browser to configure their settings via their router management page (i.e., the router's web management interface). Therefore, the security of accessing this router management page is of paramount importance.
[0003] Currently, accessing router management pages typically uses username and password authentication, which poses significant security risks. For example, weak passwords are easily brute-forced, and password leaks could lead to unauthorized user access to the router, seriously threatening the network environment. Furthermore, this method requires considerable user intervention and is not very convenient.
[0004] Therefore, there are currently issues with the security and ease of access to router management pages. Summary of the Invention
[0005] This application provides an access control scheme for router management pages, which can effectively balance improving the security and convenience of accessing router management pages.
[0006] The embodiments of this application provide the following technical solutions:
[0007] According to one embodiment of this application, an access control method for a router management page is applied to a terminal. The method includes: sending a page access request to a router; receiving an encryption cipher issued by the router, wherein the encryption cipher is obtained by the router encrypting a first authentication code using an encryption factor; decrypting the encryption cipher using a decryption factor to obtain the first authentication code; and returning a second authentication code to the router based on the first authentication code, so that the router issues an authorization request when it determines that the second authentication code and the first authentication code meet predetermined authentication pass conditions, wherein the authorization request is used to authorize the terminal to open the router management page.
[0008] In some embodiments of this application, before sending a page access request to the router, the method further includes: generating the encryption factor and the decryption factor; saving the decryption factor; and transmitting the encryption factor to the router so that the router saves the encryption factor.
[0009] In some embodiments of this application, before transmitting the encryption factor to the router, the method further includes: scanning the information code generated by the router to obtain verification information; correspondingly, transmitting the encryption factor to the router includes: transmitting the verification information and the encryption factor to the router, so that the router saves the encryption factor after verifying the verification information.
[0010] In some embodiments of this application, after decrypting the encryption cipher using a decryption factor and before returning the second authentication code to the router based on the first authentication code, the method further includes: if the first authentication code is successfully decrypted, then authenticating the user to obtain an authentication result; and determining whether to return the second authentication code to the router based on the authentication result.
[0011] In some embodiments of this application, returning the second authentication code to the router based on the first authentication code includes: returning the first authentication code as the second authentication code to the router; or, encoding the first authentication code to obtain the second authentication code and returning the second authentication code to the router.
[0012] According to another embodiment of this application, an access control method for a router management page is applied to a router. The method includes: when receiving a page access request sent by a terminal, generating a first authentication code and encrypting the first authentication code using an encryption factor to obtain an encryption cipher; sending the encryption cipher to the terminal so that the terminal can decrypt the first authentication code in the encryption cipher using a decryption factor; receiving a second authentication code sent by the terminal based on the first authentication code; if the second authentication code and the first authentication code meet predetermined authentication conditions, issuing an authorization request to the terminal, the authorization request being used to authorize the terminal to open the router management page.
[0013] In some embodiments of this application, before sending an authorization request to the terminal, the method further includes: determining whether the second authentication code is consistent with the first authentication code, or determining whether the second authentication code is consistent with the first authentication code and the first authentication code is within the validity period of the authentication code; if so, then determining that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0014] In some embodiments of this application, before sending an authorization request to the terminal, the method further includes: decoding the second authentication code to obtain a third authentication code; determining whether the third authentication code is consistent with the first authentication code, or determining whether the third authentication code is consistent with the first authentication code and the first authentication code is within the validity period of the authentication code; if so, determining that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0015] According to one embodiment of this application, an access control device for a router management page, applied to a terminal, includes: a request module, configured to: send a page access request to the router; an encryption receiving module, configured to: receive an encryption cipher issued by the router, wherein the encryption cipher is obtained by the router encrypting a first authentication code using an encryption factor; a decoding module, configured to: decrypt the encryption cipher using a decryption factor to obtain the first authentication code; and an authentication code returning module, configured to: return a second authentication code to the router based on the first authentication code, so that the router, upon determining that the second authentication code and the first authentication code meet predetermined authentication pass conditions, issues an authorization request, wherein the authorization request is used to authorize the terminal to open the router management page.
[0016] According to another embodiment of this application, an access control device for a router management page, applied to a router, includes: an encryption generation module, configured to: upon receiving a page access request sent by a terminal, generate a first authentication code and encrypt the first authentication code using an encryption factor to obtain an encryption cipher; an encryption cipher sending module, configured to: send the encryption cipher to the terminal so that the terminal can decrypt the first authentication code in the encryption cipher using a decryption factor; an authentication code receiving module, configured to: receive a second authentication code sent by the terminal based on the first authentication code; and an authorization module, configured to: if the second authentication code and the first authentication code meet predetermined authentication pass conditions, send an authorization request to the terminal, the authorization request being used to authorize the terminal to open the router management page.
[0017] In some embodiments of this application, before sending an authorization request to the terminal, the device further includes a verification module, configured to: determine whether the second authentication code is consistent with the first authentication code, or determine whether the second authentication code is consistent with the first authentication code and the first authentication code is within the validity period of the authentication code; if so, determine that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0018] In some embodiments of this application, before sending an authorization request to the terminal, the device further includes a verification module, configured to: decode the second authentication code to obtain a third authentication code; determine whether the third authentication code is consistent with the first authentication code, or determine whether the third authentication code is consistent with the first authentication code and the first authentication code is within the validity period of the authentication code; if so, determine that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0019] According to another embodiment of this application, a storage medium stores a computer program thereon, which, when executed by the processor of a router, causes the router to perform the methods described in the embodiments of this application.
[0020] According to another embodiment of this application, a storage medium stores a computer program thereon, which, when executed by a terminal's processor, causes the terminal to perform the methods described in the embodiments of this application.
[0021] According to another embodiment of this application, a router may include: a memory storing a computer program; and a processor reading the computer program stored in the memory to execute the methods described in the embodiments of this application.
[0022] According to another embodiment of this application, a terminal may include: a memory storing a computer program; and a processor reading the computer program stored in the memory to execute the methods described in the embodiments of this application.
[0023] According to another embodiment of this application, a computer program product or computer program includes computer instructions stored in a computer-readable storage medium. A router's processor reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the router to perform the methods provided in the various optional implementations described in the embodiments of this application.
[0024] According to another embodiment of this application, a computer program product or computer program includes computer instructions stored in a computer-readable storage medium. A terminal's processor reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the terminal to perform the methods provided in the various optional implementations described in the embodiments of this application.
[0025] In this embodiment, the terminal can perform the following actions: sending a page access request to the router; receiving an encryption cipher issued by the router, wherein the encryption cipher is obtained by the router encrypting a first authentication code using an encryption factor; decrypting the encryption cipher using a decryption factor to obtain the first authentication code; and returning a second authentication code to the router based on the first authentication code, so that the router issues an authorization request when it determines that the second authentication code and the first authentication code meet predetermined authentication pass conditions, wherein the authorization request is used to authorize the terminal to open the router management page.
[0026] In this embodiment of the application, when a terminal accesses a router management page, the terminal and the router can easily authorize access to the router management page through authentication code interaction. Furthermore, the authentication code is encrypted and decrypted using encryption and decryption factors, which further ensures the security of the access authorization process for the router management page. Thus, the overall security and convenience of accessing the router management page are effectively balanced and improved. Attached Figure Description
[0027] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0028] Figure 1 The flowchart illustrating an access control method for a router management page according to an embodiment of this application is shown schematically.
[0029] Figure 2 The diagram illustrates a user authentication process performed on the terminal side according to an embodiment of this application.
[0030] Figure 3 A block diagram of an access control device for a router management page on the terminal side according to an embodiment of this application is shown.
[0031] Figure 4 A block diagram of an access control device for a router management page on the router side according to an embodiment of this application is shown.
[0032] Figure 5 A block diagram of an electronic device according to an embodiment of this application is shown. Detailed Implementation
[0033] The present disclosure will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the embodiments provided herein are merely illustrative of the present disclosure and are not intended to limit the present disclosure. Furthermore, the embodiments provided below are some embodiments for implementing the present disclosure, and not all embodiments for implementing the present disclosure. Unless otherwise specified, the technical solutions described in the embodiments of the present disclosure can be implemented in any combination.
[0034] It should be noted that, in the embodiments of this disclosure, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a method or apparatus that includes a list of elements includes not only the elements expressly described, but also other elements not expressly listed, or elements inherent to implementing the method or apparatus. Without further limitations, an element defined by the phrase "comprising a..." does not exclude the presence of other related elements (e.g., steps in the method or units in the apparatus, such as portions of circuitry, processors, programs, or software, etc.) in the method or apparatus that includes that element.
[0035] For example, the access control method for a router management page provided in this disclosure includes a series of steps. However, the access control method for a router management page provided in this disclosure is not limited to the steps described. Similarly, the access control device for a router management page provided in this disclosure includes a series of units. However, the device provided in this disclosure is not limited to the units explicitly described, but may also include units that need to be set up when obtaining relevant information or processing based on information.
[0036] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of this disclosure.
[0037] It is understood that in the specific implementation of this application, relevant data is involved. When the embodiments in this application are applied to specific products or technologies, user permission or consent is required, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards.
[0038] With the rapid development of internet technology, routers, as core network connection devices, are frequently accessed by users through browsers and other software to configure settings via their management pages (such as the router's web management interface). Therefore, the security of accessing these management pages is paramount. Currently, accessing router management pages typically uses username and password authentication, which presents significant security risks. For example, weak passwords are easily brute-forced, and password leaks could lead to unauthorized access to the router, posing a serious threat to the network environment. Furthermore, this method requires considerable user intervention and is not very convenient. Therefore, the current state of router management page access suffers from both insecurity and lack of convenience.
[0039] To address these technical issues, this application provides an access control scheme for router management pages, which can improve the security of accessing router management pages.
[0040] The following describes relevant embodiments of the router management page access control scheme of this application from the perspective of the terminal. The subject executing this router management page access control method can be a terminal, such as a mobile phone or computer.
[0041] like Figure 1 As shown, the access control method for the router management page executed on the terminal side may include steps S110, S140, S150 and S160.
[0042] Step S110: Send a page access request to the router;
[0043] Step S140: Receive the encryption password sent by the router. The encryption password is obtained by the router encrypting the first authentication code using an encryption factor.
[0044] Step S150: Decrypt the encryption code using the decryption factor to obtain the first authentication code;
[0045] Step S160: Return the second authentication code to the router based on the first authentication code, so that the router can issue an authorization request when it determines that the second authentication code and the first authentication code meet the predetermined authentication pass conditions. The authorization request is used to authorize the terminal to open the router management page.
[0046] The router stores the encryption factor, and the terminal holds the corresponding decryption factor; the encryption factor and decryption factor are mutually exclusive. For example, the decryption factor can be a private key, and the encryption factor can be the public key corresponding to that private key.
[0047] When a user requests access to the router's management page via a terminal, the terminal can send a page access request to the router. For example, after a user opens a browser on the terminal and enters the router's management address (such as 192.168.1.1), unlike the traditional access process, the router may no longer display a login interface with username and password input fields; instead, the terminal can directly send a page access request to the router. Alternatively, after entering the management address (such as 192.168.1.1) in the browser, a login interface containing only a login button may be displayed first. When the user clicks the login button, the terminal then sends a page access request to the router.
[0048] When a router receives a page access request from a terminal, it can generate a first authentication code and encrypt it using an encryption factor to obtain an encryption cipher. The first authentication code can be a random code or a code with a regular pattern. In one specific method, the first authentication code is a random code. Using a random code (such as a 16-bit random string) can further enhance access security.
[0049] The router can send the encryption cipher to the terminal via a predefined protocol such as HTTPS. The terminal can decrypt the cipher using a decryption factor to obtain the first authentication code. Subsequently, the terminal can send a second authentication code to the router via HTTPS or a predefined protocol based on the first authentication code; for example, the terminal can send the first authentication code as the second authentication code to the router.
[0050] After receiving the second authentication code sent by the terminal based on the first authentication code, the router can verify whether the second authentication code and the first authentication code meet the predetermined authentication conditions. If the second authentication code and the first authentication code meet the predetermined authentication conditions, the router sends an authorization request to the terminal. This authorization request authorizes the terminal to open the router management page, which is then displayed in the terminal's browser. Users can configure router-related parameters (such as device blacklists, network connection passwords, etc.) on this router management page.
[0051] Furthermore, in this embodiment of the application, when a terminal accesses a router management page, the terminal and the router can conveniently authorize access to the router management page through authentication code interaction. Moreover, the authentication code is encrypted and decrypted using encryption and decryption factors, further ensuring the security of the router management page access authorization process. Thus, the overall security and convenience of accessing the router management page are effectively balanced and improved.
[0052] The following describes further optional embodiments of the steps performed by the terminal side when controlling access to the router management page.
[0053] In one embodiment, before sending a page access request to the router in step S110, the method may further include: generating an encryption factor and a decryption factor; saving the decryption factor; and transmitting the encryption factor to the router so that the router saves the encryption factor.
[0054] In this embodiment, the terminal generates a pair of encryption and decryption factors. The decryption factor is stored locally on the terminal. The terminal transmits the encryption factor to the router, which then stores it in its secure area. Upon receiving a page access request from the terminal, the router can retrieve the encryption factor corresponding to the terminal's identifier from this secure area and encrypt the first authentication code. The terminal can then successfully decrypt the encrypted code using the decryption factor. For example, the terminal can use a cryptographic library (such as OpenSSL) to generate a pair of asymmetric keys (public and private keys), where the private key serves as the decryption factor and the public key as the encryption factor.
[0055] In some of these methods, after saving the encryption factor, the router can also return a success message to the terminal to inform the terminal that the encryption factor has been saved successfully.
[0056] Furthermore, before transmitting the encryption factor to the router, the process may include: scanning the information code generated by the router to obtain verification information; correspondingly, transmitting the encryption factor to the router includes: transmitting the verification information and the encryption factor to the router so that the router can save the encryption factor after verifying the verification information.
[0057] When a terminal requests access to the router's management page for the first time, the router can generate an information code (such as a QR code or barcode) containing verification information. This information code can be displayed on the router's own display screen or on the login interface shown in the browser on the terminal.
[0058] Users can scan the information code using the terminal to obtain verification information (which may include router identification information and session identification, etc.). The terminal can then package this verification information together with the encryption factor and transmit it to the router. After verifying the verification information (e.g., confirming that the verification information is valid information provided by the router), the router saves the encryption factor. Thus, the router can conveniently and reliably obtain and save the corresponding encryption factor of the terminal. Alternatively, the terminal can also package the terminal identifier, verification information, and encryption factor together and transmit them to the router. The router can then associate and save the terminal identifier and encryption factor in a secure area within the router.
[0059] See Figure 2In one embodiment, after decrypting the encryption cipher using the decryption factor and before returning the second authentication code to the router based on the first authentication code, the method may further include: step S210, if the first authentication code is successfully decrypted, then the user is authenticated to obtain an authentication result; step S220, based on the authentication result, determining whether to return the second authentication code to the router.
[0060] After successfully decrypting the encryption using the decryption factor, the terminal can further authenticate the user's identity through methods such as fingerprint recognition or facial recognition, obtaining the authentication result. Then, based on the authentication result, it determines whether to return a second authentication code to the router. Only after deciding to return the second authentication code to the router will the terminal return the second authentication code based on the first authentication code. This further enhances the security of accessing the router's management page through enhanced user authentication.
[0061] Specifically, if the authentication result is successful, a second authentication code can be returned to the router; otherwise, a second authentication code will not be returned to the router.
[0062] Furthermore, in one embodiment, returning a second authentication code to the router based on the first authentication code may include one of the following methods:
[0063] The first method involves returning the first authentication code to the router as the second authentication code.
[0064] Alternatively, in the second approach, the first authentication code is encoded to obtain the second authentication code, which is then returned to the router.
[0065] In the first method, when the terminal returns the second authentication code to the router based on the first authentication code, it directly returns the first authentication code as the second authentication code to the router. The router can then directly verify whether the second authentication code matches the first authentication code it sent to the terminal. If the second authentication code matches the first authentication code sent to the terminal, the router can determine that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0066] In the second method, the terminal encodes the first authentication code to obtain a second authentication code and returns it to the router. The router then decodes the second authentication code to obtain a third authentication code and verifies whether the third authentication code matches the first authentication code sent to the terminal. If the third authentication code matches the first authentication code sent to the terminal, the router can determine that the second authentication code meets the predetermined authentication pass conditions, further enhancing authentication security. The encoding and decoding methods can be set according to actual conditions, and this application does not impose specific limitations on them.
[0067] The following describes embodiments of the router management page access control scheme of this application from the router side. The entity executing this router management page access control method can be a router, such as a home router or an enterprise-level router.
[0068] like Figure 1 As shown, the access control method for the router management page executed on the router side may include steps S120, S130, S170 and S180.
[0069] Step S120: When a page access request is received from the terminal, a first authentication code is generated, and the first authentication code is encrypted using an encryption factor to obtain an encryption password;
[0070] Step S130: Send the encryption cipher to the terminal so that the terminal can decrypt the first authentication code in the encryption cipher using the decryption factor;
[0071] Step S170: The receiving terminal sends a second authentication code based on the first authentication code;
[0072] Step S180: If the second authentication code and the first authentication code meet the predetermined authentication pass conditions, an authorization request is sent to the terminal. The authorization request is used to authorize the terminal to open the router management page.
[0073] Corresponding to the aforementioned terminal-side embodiment, for scenarios involving access to the router management page, the router and terminal conveniently achieve access authorization through authentication code interaction; moreover, the authentication code is encrypted and decrypted using encryption and decryption factors, further ensuring the security of the access authorization process. Thus, overall, it effectively balances and improves both the security and convenience of accessing the router management page.
[0074] The following describes further optional embodiments of the steps performed on the router side when controlling access to the router management page.
[0075] In one embodiment, before sending the authorization request to the terminal, the method may further include: determining whether the second authentication code is consistent with the first authentication code, or determining whether the second authentication code is consistent with the first authentication code and the first authentication code is within the validity period of the authentication code; if so, then determining that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0076] In some methods, the router may not set a corresponding validity period for the first authentication code. When the router determines that the second authentication code is consistent with the first authentication code, it determines that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0077] In other methods, the router can set a corresponding validity period for the first authentication code. The router only determines that the second authentication code meets the predetermined authentication conditions when it determines that the second authentication code is consistent with the first authentication code and the first authentication code is within the validity period, thereby further ensuring authentication security.
[0078] Furthermore, in one embodiment, before sending an authorization request to the terminal, the method may further include: decoding the second authentication code to obtain a third authentication code; determining whether the third authentication code is consistent with the first authentication code, or determining whether the third authentication code is consistent with the first authentication code and the first authentication code is within the validity period of the authentication code; if so, determining that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0079] The terminal encodes the first authentication code to obtain the second authentication code and returns it to the router. The router then decodes the second authentication code to obtain the third authentication code and verifies whether the third authentication code matches the first authentication code sent to the terminal. If the third authentication code matches the first authentication code sent to the terminal, the router can determine that the second authentication code meets the predetermined authentication pass conditions, further enhancing authentication security.
[0080] In addition, in some embodiments, after the router sends an authorization request to the terminal, the router can record a log of the terminal successfully logging into the router's management page. The log may include the time, user identity, and terminal information for subsequent auditing.
[0081] To facilitate better implementation of the router management page access control method provided in this application embodiment, this application embodiment also provides a router management page access control device based on the above-described router management page access control method. The meanings of the terms used are the same as in the router management page access control method described above, and specific implementation details can be found in the descriptions in the method embodiments.
[0082] Figure 3 A block diagram of an access control device for a router management page on the terminal side according to an embodiment of this application is shown. Figure 3As shown, the access control device 300 for the router management page may include: a request module 310, which can be used to send a page access request to the router; an encryption receiving module 320, which can be used to receive an encryption cipher issued by the router, wherein the encryption cipher is obtained by the router encrypting a first authentication code using an encryption factor; a decryption module 330, which can be used to decrypt the encryption cipher using a decryption factor to obtain the first authentication code; and an authentication code return module 340, which can be used to return a second authentication code to the router based on the first authentication code, so that the router issues an authorization request when it determines that the second authentication code and the first authentication code meet the predetermined authentication pass conditions, wherein the authorization request is used to authorize the terminal to open the router management page.
[0083] In some embodiments of this application, before sending a page access request to the router, the device further includes a key module for: generating the encryption factor and the decryption factor; storing the decryption factor; and transmitting the encryption factor to the router so that the router stores the encryption factor.
[0084] In some embodiments of this application, before transmitting the encryption factor to the router, the device further includes a scanning module for: scanning the information code generated by the router to obtain verification information; correspondingly, the key module is used for: transmitting the verification information and the encryption factor to the router so that the router saves the encryption factor after verifying the verification information.
[0085] In some embodiments of this application, after the encryption cipher is decrypted using a decryption factor and before the second authentication code is returned to the router based on the first authentication code, the device further includes an identity authentication module, configured to: if the first authentication code is successfully decrypted, authenticate the user and obtain an identity authentication result; and determine whether to return the second authentication code to the router based on the identity authentication result.
[0086] In some embodiments of this application, the authentication code return module is configured to: return the first authentication code as the second authentication code to the router; or, encode the first authentication code to obtain the second authentication code and return the second authentication code to the router.
[0087] Figure 4 A block diagram of an access control device for a router management page on the router side according to another embodiment of this application is shown. Figure 4As shown, the access control device 400 for the router management page may include: an encryption generation module 410, which can be used to: generate a first authentication code when receiving a page access request sent by a terminal, and encrypt the first authentication code using an encryption factor to obtain an encryption cipher; an encryption cipher sending module 420, which can be used to: send the encryption cipher to the terminal so that the terminal can decrypt the first authentication code in the encryption cipher using a decryption factor; an authentication code receiving module 430, which can be used to: receive a second authentication code sent by the terminal based on the first authentication code; and an authorization module 440, which can be used to: if the second authentication code and the first authentication code meet predetermined authentication conditions, send an authorization request to the terminal, the authorization request being used to authorize the terminal to open the router management page.
[0088] In some embodiments of this application, before sending an authorization request to the terminal, the device further includes a verification module, configured to: determine whether the second authentication code is consistent with the first authentication code, or determine whether the second authentication code is consistent with the first authentication code and the first authentication code is within the validity period of the authentication code; if so, determine that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0089] In some embodiments of this application, before sending an authorization request to the terminal, the device further includes a verification module, configured to: decode the second authentication code to obtain a third authentication code; determine whether the third authentication code is consistent with the first authentication code, or determine whether the third authentication code is consistent with the first authentication code and the first authentication code is within the validity period of the authentication code; if so, determine that the second authentication code and the first authentication code meet the predetermined authentication pass conditions.
[0090] It should be noted that although several modules or units for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to the embodiments of this application, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.
[0091] Furthermore, embodiments of this application also provide an electronic device, such as... Figure 5 As shown, Figure 5 A block diagram of an electronic device according to an embodiment of this application is shown, specifically:
[0092] The electronic device may include components such as a processor 501 with one or more processing cores, and a memory 502 with one or more computer-readable storage media. Those skilled in the art will understand that... Figure 5 The electronic device structure shown does not constitute a limitation on the router and may include more or fewer components than illustrated, or combine certain components, or have different component arrangements. Wherein:
[0093] The processor 501 is the control center of the electronic device, connecting various parts of the computer device via various interfaces and lines. It executes software programs and / or modules stored in the memory 502, and calls data stored in the memory 502, to perform various functions of the computer device and process data. Optionally, the processor 501 may include one or more processing cores; preferably, the processor 501 may integrate an application processor and a modem processor, wherein the application processor mainly handles the operating system, user page, and application programs, and the modem processor mainly handles wireless communication. It is understood that the modem processor may not be integrated into the processor 501.
[0094] The memory 502 can be used to store software programs and modules. The processor 501 executes various functional applications and data processing by running the software programs and modules stored in the memory 502. The memory 502 may mainly include a program storage area and a data storage area. The program storage area may store the operating system, application programs required for at least one function (such as sound playback function, image playback function, etc.), etc.; the data storage area may store data created according to the use of the electronic device, etc. In addition, the memory 502 may include high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device, flash memory device, or other volatile solid-state storage device. Accordingly, the memory 502 may also include a memory controller to provide the processor 501 with access to the memory 502.
[0095] Although not shown, the electronic device may also include a display unit, etc., which will not be described in detail here. Specifically, in this embodiment, the processor 501 in the electronic device can load the executable files corresponding to the processes of one or more computer programs into the memory 502 according to instructions, and the processor 501 runs the computer programs stored in the memory 502, thereby realizing the various functions in the foregoing embodiments of this application.
[0096] For example, in some scenarios, when an electronic device is implemented as a terminal, such as processor 501, it can perform the following steps: send a page access request to a router; receive an encryption cipher issued by the router, the encryption cipher being obtained by the router encrypting a first authentication code using an encryption factor; decrypt the encryption cipher using a decryption factor to obtain the first authentication code; and return a second authentication code to the router based on the first authentication code, so that the router issues an authorization request when it determines that the second authentication code and the first authentication code meet predetermined authentication conditions, the authorization request being used to authorize the terminal to open the router management page.
[0097] For example, in other scenarios, when the electronic device is implemented as a router, the processor 501 can perform the following steps: upon receiving a page access request sent by a terminal, generating a first authentication code and encrypting the first authentication code using an encryption factor to obtain an encryption cipher; sending the encryption cipher to the terminal so that the terminal can decrypt the first authentication code in the encryption cipher using a decryption factor; receiving a second authentication code sent by the terminal based on the first authentication code; if the second authentication code and the first authentication code meet predetermined authentication conditions, issuing an authorization request to the terminal, the authorization request being used to authorize the terminal to open the router management page.
[0098] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be performed by a computer program, or by a computer program controlling related hardware. The computer program can be stored in a computer-readable storage medium and loaded and executed by a processor.
[0099] Therefore, embodiments of this application also provide a storage medium storing a computer program that can be loaded by a processor to execute the steps in any of the methods provided in embodiments of this application.
[0100] The storage medium can be a computer-readable storage medium, which may include: read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.
[0101] Since the computer program stored in the storage medium can execute the steps of any of the methods provided in the embodiments of this application, the beneficial effects that the methods provided in the embodiments of this application can achieve can be realized. For details, please refer to the previous embodiments, which will not be repeated here.
[0102] According to another embodiment of this application, a computer program product or computer program includes computer instructions stored in a computer-readable storage medium. A router's processor reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the router to perform the methods provided in the various optional implementations described in the embodiments of this application.
[0103] According to another embodiment of this application, a computer program product or computer program includes computer instructions stored in a computer-readable storage medium. A terminal's processor reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the terminal to perform the methods provided in the various optional implementations described in the embodiments of this application.
[0104] Other embodiments of this application will readily occur to those skilled in the art upon consideration of the specification and practice of the embodiments disclosed herein. This application is intended to cover any variations, uses, or adaptations of this application that follow the general principles of this application and include common knowledge or customary techniques in the art not disclosed herein.
[0105] It should be understood that this application is not limited to the embodiments described above and shown in the accompanying drawings, but various modifications and changes can be made without departing from its scope.
Claims
1. A method for access control of a router management page, characterized in that, Applied to a terminal, the method comprises: sending a page access request to a router; receiving an encrypted password issued by the router, the encrypted password being obtained by encrypting a first authentication code with an encryption factor by the router; decrypting the encrypted password with a decryption factor to obtain the first authentication code; returning a second authentication code to the router according to the first authentication code, so that the router issues an authorization request when determining that the second authentication code meets a predetermined authentication pass condition with the first authentication code, the authorization request being used to authorize the terminal to open a router management page.
2. The method of claim 1, wherein, Before the step of sending a page access request to a router, the method further comprises: generating the encryption factor and the decryption factor; saving the decryption factor, and transmitting the encryption factor to the router, so that the router saves the encryption factor.
3. The method of claim 2, wherein, Before the step of transmitting the encryption factor to the router, the method further comprises: scanning an information code generated by the router to obtain verification information; correspondingly, the step of transmitting the encryption factor to the router comprises: transmitting the verification information and the encryption factor to the router, so that the router saves the encryption factor after verifying that the verification information is correct.
4. The method according to any one of claims 1 to 3, characterized in that, After the step of decrypting the encrypted password with a decryption factor, and before the step of returning a second authentication code to the router according to the first authentication code, the method further comprises: if the first authentication code is successfully decrypted, performing identity authentication on a user to obtain an identity authentication result; determining whether to return the second authentication code to the router according to the identity authentication result.
5. The method according to any one of claims 1 to 3, characterized in that, The step of returning a second authentication code to the router according to the first authentication code comprises: returning the first authentication code to the router as the second authentication code; or, encoding the first authentication code to obtain the second authentication code, and returning the second authentication code to the router.
6. An access control method of a router management page, characterized by, Applied to a router, the method comprises: when receiving a page access request sent by a terminal, generating a first authentication code, and encrypting the first authentication code with an encryption factor to obtain an encrypted password; sending the encrypted password to the terminal, so that the terminal decrypts the first authentication code in the encrypted password with a decryption factor; receiving a second authentication code sent by the terminal according to the first authentication code; if the second authentication code meets a predetermined authentication pass condition with the first authentication code, issuing an authorization request to the terminal, the authorization request being used to authorize the terminal to open a router management page.
7. The method of claim 6, wherein, Before the step of issuing an authorization request to the terminal, the method further comprises: determining whether the second authentication code is consistent with the first authentication code, or determining whether the second authentication code is consistent with the first authentication code and the first authentication code is within an authentication code validity period; if yes, determining that the second authentication code meets the predetermined authentication pass condition with the first authentication code.
8. The method of claim 6, wherein, Before the step of issuing an authorization request to the terminal, the method further comprises: encoding the second authentication code to obtain a third authentication code; determining whether the third authentication code is consistent with the first authentication code, or determining whether the third authentication code is consistent with the first authentication code and the first authentication code is within an authentication code validity period; if yes, determining that the second authentication code meets the predetermined authentication passing condition with the first authentication code.
9. A terminal, characterized by comprising: comprising: a memory storing a computer program; a processor reading the computer program stored in the memory to execute the method of any one of claims 1 to 5.
10. A router, characterized in that, comprising: a memory storing a computer program; a processor reading the computer program stored in the memory to execute the method of any one of claims 6 to 8.