A wireless hotspot management method, device and equipment
By performing security checks on the configuration information of wireless hotspots, the problem of existing technologies being unable to identify fake and maliciously tampered wireless hotspots is solved, thereby enabling security control of user terminals and reducing security risks.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- SHENZHEN LEAGSOFT TECH
- Filing Date
- 2026-02-09
- Publication Date
- 2026-05-29
AI Technical Summary
Existing technologies that rely solely on whitelist verification based on Wi-Fi hotspot names are insufficient to effectively identify fake or maliciously tampered Wi-Fi hotspots, leading to security risks as users blindly connect to them.
By scanning visible Wi-Fi hotspots, the system obtains the configuration information of each hotspot and performs security checks. Based on the check results, it executes control operations, including disabling, hiding, or allowing connections to Wi-Fi hotspots.
Accurately identify fake and maliciously tampered Wi-Fi hotspots, reduce the probability of security risks to user terminal access, and effectively avoid information leakage and terminal attack risks.
Smart Images
Figure CN122120765A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of network security, and in particular to a method, apparatus and device for managing wireless hotspots. Background Technology
[0002] With the rapid development of wireless communication technology, Wi-Fi and other wireless hotspots have been widely used in various environments such as homes, offices, and public spaces, becoming one of the main ways for user terminals such as mobile phones, computers, and tablets to access the network.
[0003] Currently, most existing technologies employ whitelist verification schemes to control access to Wi-Fi hotspots. Specifically, it checks whether the name of the Wi-Fi hotspot to be connected to is within a preset whitelist. If the name is within the whitelist, the user's terminal is allowed to connect; otherwise, the connection is denied.
[0004] However, the control method of relying solely on the name of the wireless hotspot for whitelist verification is difficult to effectively identify fake wireless hotspots and wireless hotspots with maliciously tampered configurations. This can easily lead to users blindly connecting to wireless hotspots with security risks, thereby causing security risks such as leakage of user information and attacks on user terminals. Summary of the Invention
[0005] This application provides a wireless hotspot management method, apparatus, and device, aiming to solve the technical problem that the management method of relying solely on the name of the wireless hotspot for whitelist verification is prone to causing user terminals to blindly connect to wireless hotspots with potential security risks.
[0006] In a first aspect, embodiments of this application provide a method for managing wireless hotspots, comprising: Scan for visible Wi-Fi hotspots to obtain multiple Wi-Fi hotspots; Obtain the configuration information of each of the multiple wireless hotspots; Security checks are performed on the configuration information of each of the multiple wireless hotspots to obtain multiple detection results, and the multiple detection results correspond one-to-one with the multiple wireless hotspots; Based on the multiple detection results, control and management operations are performed on the multiple wireless hotspots.
[0007] Optionally, the plurality of wireless hotspots includes target wireless hotspots, the plurality of detection results includes target detection results, and the security detection of the configuration information of each wireless hotspot in the plurality of wireless hotspots yields multiple detection results, including: Obtain the preset wireless hotspot whitelist corresponding to the target wireless hotspot; The security of the target wireless hotspot's configuration information is checked based on the preset wireless hotspot whitelist to obtain the target detection result.
[0008] Optionally, the preset wireless hotspot whitelist includes security protocol types, the configuration information of the target wireless hotspot includes security protocol types, and the step of performing security detection on the configuration information of the target wireless hotspot according to the preset wireless hotspot whitelist to obtain the target detection result includes: Based on the security protocol types of the preset wireless hotspot whitelist and the security protocol types of the target wireless hotspot, the target detection result is determined. The target detection result is either that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is higher than the security level corresponding to the security protocol type of the target wireless hotspot, or that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is lower than or equal to the security level corresponding to the security protocol type of the target wireless hotspot.
[0009] Optionally, the preset wireless hotspot whitelist also includes IP address ranges and DNS addresses, and the configuration information of the target wireless hotspot also includes IP addresses and DNS addresses. Determining the target detection result based on the security protocol types of the preset wireless hotspot whitelist and the security protocol types of the target wireless hotspot includes: If the IP address of the target wireless hotspot is within the IP address range, and the DNS address of the target wireless hotspot is the same as the DNS address of the preset wireless hotspot whitelist, then the target detection result is determined according to the security protocol type of the preset wireless hotspot whitelist and the security protocol type of the target wireless hotspot.
[0010] Optionally, the step of performing control operations on the multiple wireless hotspots based on the multiple detection results includes: If the target detection result indicates that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is higher than the security level corresponding to the security protocol type of the target wireless hotspot, then the target wireless hotspot is disabled, and / or the target wireless hotspot is hidden.
[0011] Optionally, the step of performing control operations on the multiple wireless hotspots based on the multiple detection results includes: If the target detection result indicates that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is lower than or equal to the security level corresponding to the security protocol type of the target wireless hotspot, then it is determined that the target wireless hotspot is allowed to be connected.
[0012] Optionally, after performing control operations on the plurality of wireless hotspots based on the plurality of detection results, the method further includes: Record the management and control operations corresponding to the target wireless hotspot to obtain the management and control operation record.
[0013] Optionally, after recording the control operation and obtaining the control operation record, the method further includes: If the preset wireless hotspot whitelist becomes invalid, the control operation corresponding to the target wireless hotspot will be rolled back according to the control operation record.
[0014] Secondly, embodiments of this application also provide a wireless hotspot management device, which includes a unit for performing the above-described method.
[0015] Thirdly, embodiments of this application also provide a computer device, which includes a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the above-described method.
[0016] Fourthly, embodiments of this application also provide a computer-readable storage medium storing a computer program that, when executed by a processor, can implement the above-described method.
[0017] This application provides a method, apparatus, and device for managing wireless hotspots. The method includes: scanning visible wireless hotspots to obtain multiple wireless hotspots; acquiring configuration information for each of the multiple wireless hotspots; performing security checks on the configuration information of each of the multiple wireless hotspots to obtain multiple detection results, where each detection result corresponds one-to-one with the multiple wireless hotspots; and performing management operations on the multiple wireless hotspots based on the multiple detection results. Therefore, this application, by collecting the configuration information of all visible wireless hotspots and performing security checks on them, can accurately identify fake wireless hotspots and wireless hotspots with maliciously tampered configurations, thereby reducing the probability of user terminals accessing potentially insecure wireless hotspots from the source and effectively avoiding security risks such as user information leakage and illegal attacks on user terminals. Attached Figure Description
[0018] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.
[0019] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0020] One or more embodiments are illustrated by way of example with reference numerals in the accompanying drawings. These illustrations do not constitute a limitation on the embodiments. Elements with the same reference numerals in the drawings are denoted as similar elements. Unless otherwise stated, the figures in the drawings are not to be limited by scale.
[0021] Figure 1 is a flowchart illustrating a wireless hotspot management method provided in an embodiment of this application; Figure 2 A schematic block diagram of a wireless hotspot management device provided in an embodiment of this application; Figure 3 A computer device provided in an embodiment of this application. Detailed Implementation
[0022] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0023] The following disclosure provides numerous different embodiments or examples for implementing various structures of this application. To simplify the disclosure, specific examples of components and arrangements are described below. These are merely examples and are not intended to limit the scope of this application. Furthermore, reference numerals and / or letters may be repeated in different examples. Such repetition is for simplification and clarity and does not in itself indicate a relationship between the various embodiments and / or arrangements discussed.
[0024] It should be understood that, when used in this specification and the appended claims, the terms "comprising" and "including" indicate the presence of the described features, integrals, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or collections thereof.
[0025] It should also be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the scope of the application. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.
[0026] It should also be further understood that the term “and / or” as used in this application specification and the appended claims means any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.
[0027] As used in this specification and the appended claims, the term "if" may be interpreted, depending on the context, as "when," "once," "in response to determination," or "in response to detection." Similarly, the phrase "if determined" or "if [described condition or event] is detected" may be interpreted, depending on the context, as "once determined," "in response to determination," "once [described condition or event] is detected," or "in response to detection of [described condition or event]."
[0028] To address the technical problem that existing control methods that rely solely on Wi-Fi hotspot names for whitelist verification can easily lead to user terminals blindly connecting to Wi-Fi hotspots with security risks, this application provides a Wi-Fi hotspot control method and apparatus that can avoid the risk of user terminals accessing Wi-Fi hotspots with security risks.
[0029] Figure 1a This is a flowchart illustrating a wireless hotspot management method provided in an embodiment of this application. In one embodiment, the method includes: S101-S104.
[0030] S101. Scan for visible wireless hotspots to obtain multiple wireless hotspots.
[0031] It should be noted that, in one embodiment, this application embodiment can periodically scan for visible wireless hotspots according to a preset cycle. The preset cycle is set based on practical experience. This application does not impose any limitations on this. In another embodiment, this application embodiment can scan for visible wireless hotspots based on event triggers. These events include device events and policy changes. Device events include events such as changes in the network connection status of the user terminal, user terminal network card insertion / removal events, user terminal wireless connection switching events, and user terminal system hotspot activation / deactivation events.
[0032] S102. Obtain the configuration information of each wireless hotspot among multiple wireless hotspots.
[0033] The configuration information for each Wi-Fi hotspot includes, but is not limited to, hotspot name, IP address, DNS address, and security protocol type. Security protocol types include, but are not limited to, WEP, WPA-PSK, WPA2-PSK, WPA, and WPA2.
[0034] S103. Perform security checks on the configuration information of each wireless hotspot among multiple wireless hotspots to obtain multiple detection results.
[0035] Multiple detection results correspond one-to-one with multiple Wi-Fi hotspots. In other words, each Wi-Fi hotspot corresponds to one detection result.
[0036] S104. Perform control and management operations on multiple wireless hotspots based on multiple detection results.
[0037] The control operations include, but are not limited to, disabling Wi-Fi hotspots, hiding Wi-Fi hotspots, and allowing connections to Wi-Fi hotspots.
[0038] This application provides a method for managing wireless hotspots. The method includes: scanning visible wireless hotspots to obtain multiple wireless hotspots; acquiring configuration information for each of the multiple wireless hotspots; performing security checks on the configuration information of each of the multiple wireless hotspots to obtain multiple detection results, where each detection result corresponds one-to-one with the multiple wireless hotspots; and performing management operations on the multiple wireless hotspots based on the multiple detection results. Therefore, this application, by collecting the configuration information of all visible wireless hotspots and performing security checks on them, can accurately identify fake wireless hotspots and wireless hotspots with maliciously tampered configurations, thereby reducing the probability of user terminals accessing potentially insecure wireless hotspots from the source and effectively avoiding security risks such as user information leakage and illegal attacks on user terminals.
[0039] In one embodiment, the plurality of wireless hotspots includes target wireless hotspots, and the plurality of detection results includes target detection results. S103 specifically includes the following steps: S1031-S1032.
[0040] S1031. Obtain the preset wireless hotspot whitelist corresponding to the target wireless hotspot.
[0041] Please see Figure 1b , Figure 1bThis application provides a preset wireless hotspot whitelist. It should be noted that multiple preset wireless hotspot whitelists can exist in this application, and each preset wireless hotspot whitelist corresponds to a different wireless hotspot. Furthermore, this application will use a target wireless hotspot as an example to describe in detail the security detection process of the target wireless hotspot. For other wireless hotspots, the same detection method as the target wireless hotspot is used. Therefore, this application will not elaborate further on this.
[0042] S1032. Perform security checks on the configuration information of the target wireless hotspot according to the preset wireless hotspot whitelist, and obtain the target detection results.
[0043] It should be noted that in this embodiment of the application, the configuration information of the target wireless hotspot is matched with the contents of the preset wireless hotspot whitelist to obtain the target detection result.
[0044] In one embodiment, the preset wireless hotspot whitelist includes security protocol types, and the configuration information of the target wireless hotspot includes security protocol types. Specifically, S1032 includes the following steps: S10321.
[0045] S10321. Determine the target detection result based on the security protocol type of the preset wireless hotspot whitelist and the security protocol type of the target wireless hotspot.
[0046] Specifically, the target detection result is either that the security level of the security protocol type in the preset wireless hotspot whitelist is higher than the security level of the security protocol type of the target wireless hotspot, or that the security level of the security protocol type in the preset wireless hotspot whitelist is lower than or equal to the security level of the security protocol type of the target wireless hotspot.
[0047] In one embodiment, the preset wireless hotspot whitelist further includes IP address ranges and DNS addresses, and the configuration information of the target wireless hotspot further includes IP addresses and DNS addresses. S10321 specifically includes the following steps: a.
[0048] a. If the IP address of the target wireless hotspot is within the IP address range, and the DNS address of the target wireless hotspot is the same as the DNS address of the preset wireless hotspot whitelist, then the target detection result is determined according to the security protocol type of the preset wireless hotspot whitelist and the security protocol type of the target wireless hotspot.
[0049] It's important to note that before comparing security protocol types, it's necessary to ensure that the target Wi-Fi hotspot's IP address is within the pre-defined Wi-Fi hotspot whitelist IP address range, and that the target Wi-Fi hotspot's DNS address is identical to the DNS address in the pre-defined whitelist. This mechanism effectively mitigates the risk of tampering with the target Wi-Fi hotspot's DNS address or IP address, thereby further ensuring the target Wi-Fi hotspot's security.
[0050] In one embodiment, S104 specifically includes the following steps: S1041.
[0051] S1041. If the target detection result shows that the security level of the security protocol type in the preset wireless hotspot whitelist is higher than the security level of the security protocol type of the target wireless hotspot, then disable the target wireless hotspot and / or hide the target wireless hotspot.
[0052] It should be noted that when the security level of the security protocol type in the preset Wi-Fi hotspot whitelist is higher than the security level of the security protocol type of the target Wi-Fi hotspot, it indicates that the security of the target Wi-Fi hotspot has been reduced. In other words, the configuration information of the target Wi-Fi hotspot may have been maliciously tampered with. Therefore, embodiments of this application need to prohibit user terminals from accessing the target Wi-Fi node or directly hide the target Wi-Fi hotspot on the user terminal to prevent user terminals from accidentally accessing it.
[0053] In one embodiment, S104 specifically includes the following step: S1042.
[0054] S1042. If the target detection result is that the security level of the security protocol type corresponding to the preset wireless hotspot whitelist is lower than or equal to the security level of the security protocol type corresponding to the target wireless hotspot, then the target wireless hotspot is determined to be allowed to be connected.
[0055] It should be noted that when the security level of the security protocol type in the preset Wi-Fi hotspot whitelist is lower than or equal to the security level of the security protocol type of the target Wi-Fi hotspot, it indicates that the security of the target Wi-Fi hotspot may have been enhanced. Therefore, in this embodiment, it can be further determined that the target Wi-Fi hotspot is allowed to be accessed.
[0056] In one embodiment, after S104, the method further includes S105.
[0057] S105. Record the management and control operations corresponding to the target wireless hotspot to obtain the management and control operation record.
[0058] It should be noted that, in this embodiment of the application, after performing control operations on the target wireless hotspot, the content of the control operations is recorded to generate a control operation record.
[0059] In one embodiment, after S105, the method further includes S106.
[0060] S106. If the preset wireless hotspot whitelist fails, roll back the control operation corresponding to the target wireless hotspot according to the control operation record.
[0061] Specifically, if the preset wireless hotspot whitelist corresponding to the target wireless hotspot becomes invalid, it is necessary to lift the control operation on the target wireless hotspot. Specifically, in this embodiment, the control operation corresponding to the target wireless hotspot can be rolled back and the control operation record can be cleared based on the control operation record of the target wireless hotspot.
[0062] In one embodiment, the network interface card (NIC) adapters of the user terminal can be periodically traversed. The NIC adapters include physical NIC adapters and virtual NIC adapters. This embodiment obtains information such as the NIC name, NIC description, MAC address, whether it is a wireless NIC, and the reason for NIC blocking by traversing the NIC adapters of the user terminal. It should be noted that users can manually set NIC policies to manage the NIC adapters of the user terminal. For example, if the NIC policy is "disable wired NICs when wireless is available," then when a wireless NIC is detected on the user terminal, all wired NICs on the user terminal will be disabled, and the reason for blocking will be noted. Furthermore, when the NIC policy expires, the corresponding NIC adapter can be unblocked based on the reason for blocking.
[0063] In one embodiment, this application also automatically identifies virtual wireless adapters, portable wireless hotspots, and hotspot sharing processes, and disables the corresponding virtual wireless adapters or portable wireless hotspots according to user-configured policy information. It can also destroy hotspot sharing processes to ensure the network security of the user terminal. This mechanism can cover the security detection of virtual network cards and portable hotspots, effectively protecting the network security of the user terminal.
[0064] In one embodiment, the preset wireless hotspot whitelist or user-configured policies mentioned in the above embodiments are all configured with effective scenarios and effective time periods. In this embodiment, the preset wireless hotspot whitelist or user-configured policies are monitored in real time to determine if they change. If changes occur, the wireless hotspot management method is re-executed to ensure secure access to wireless hotspots.
[0065] In one embodiment, a preset wireless hotspot blacklist can also be used to meet the user's business needs. Furthermore, the usage of the preset wireless hotspot blacklist and the preset wireless hotspot whitelist is similar. Therefore, further details will not be provided here.
[0066] Each execution step in the above embodiments will generate a complete audit record and retain it properly; these records can fully support subsequent users to carry out audit and verification work, thereby ensuring the traceability of the entire process.
[0067] See Figure 2 , Figure 2This is a schematic block diagram of a wireless hotspot management device provided in an embodiment of this application. Corresponding to the above-described wireless hotspot management method, this application also provides a wireless hotspot management device. This wireless hotspot management device includes a unit for executing the above-described wireless hotspot management method, and can be configured in a terminal such as a desktop computer, tablet computer, or laptop computer. Specifically, the wireless hotspot management device includes: Scanning unit 201 is used to scan visible wireless hotspots and obtain multiple wireless hotspots; The acquisition unit 202 is used to acquire the configuration information of each of the plurality of wireless hotspots; The detection unit 203 is used to perform security detection on the configuration information of each of the plurality of wireless hotspots and obtain multiple detection results, wherein the multiple detection results correspond one-to-one with the plurality of wireless hotspots. The execution unit 204 is used to perform control operations on the multiple wireless hotspots based on the multiple detection results.
[0068] In one embodiment, the plurality of wireless hotspots includes a target wireless hotspot, the plurality of detection results includes a target detection result, and the detection unit 203 is specifically used for: Obtain the preset wireless hotspot whitelist corresponding to the target wireless hotspot; The security of the target wireless hotspot's configuration information is checked based on the preset wireless hotspot whitelist to obtain the target detection result.
[0069] In one embodiment, the preset wireless hotspot whitelist includes security protocol types, the configuration information of the target wireless hotspot includes security protocol types, and the detection unit 203 is specifically used for: Based on the security protocol types of the preset wireless hotspot whitelist and the security protocol types of the target wireless hotspot, the target detection result is determined. The target detection result is either that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is higher than the security level corresponding to the security protocol type of the target wireless hotspot, or that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is lower than or equal to the security level corresponding to the security protocol type of the target wireless hotspot.
[0070] In one embodiment, the preset wireless hotspot whitelist further includes IP address ranges and DNS addresses, and the configuration information of the target wireless hotspot further includes IP addresses and DNS addresses. The detection unit 203 is specifically used for: If the IP address of the target wireless hotspot is within the IP address range, and the DNS address of the target wireless hotspot is the same as the DNS address of the preset wireless hotspot whitelist, then the target detection result is determined according to the security protocol type of the preset wireless hotspot whitelist and the security protocol type of the target wireless hotspot.
[0071] In one embodiment, the execution unit 204 is specifically used for: If the target detection result indicates that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is higher than the security level corresponding to the security protocol type of the target wireless hotspot, then the target wireless hotspot is disabled, and / or the target wireless hotspot is hidden.
[0072] In one embodiment, the execution unit 204 is specifically used for: If the target detection result indicates that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is lower than or equal to the security level corresponding to the security protocol type of the target wireless hotspot, then it is determined that the target wireless hotspot is allowed to be connected.
[0073] In one embodiment, the device further includes: The recording unit 205 is used to record the control operations corresponding to the target wireless hotspot to obtain the control operation record.
[0074] In one embodiment, the device further includes: The rollback unit 206 is used to roll back the management operation corresponding to the target wireless hotspot according to the management operation record if the preset wireless hotspot whitelist fails.
[0075] like Figure 3 As shown, this application provides a computer device including a processor 31, a communication interface 32, a memory 33, and a communication bus 34. The processor 31, the communication interface 32, and the memory 33 communicate with each other through the communication bus 34. The memory 33 is used to store computer programs. In one embodiment of this application, when the processor 31 executes the program stored in the memory 33, it implements the wireless hotspot management control method provided in any of the foregoing method embodiments.
[0076] It will be understood by those skilled in the art that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program may be stored in a storage medium, which is a computer-readable storage medium. The computer program is executed by at least one processor in the computer system to implement the process steps of the embodiments of the above methods.
[0077] Therefore, embodiments of this application also provide a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the wireless hotspot management method provided in any of the foregoing method embodiments.
[0078] The storage medium is a physical, non-transient storage medium, such as a USB flash drive, external hard drive, read-only memory (ROM), magnetic disk, or optical disk, or any other physical storage medium capable of storing program code. The computer-readable storage medium can be non-volatile or volatile.
[0079] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this application.
[0080] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative. For example, the division of each unit is merely a logical functional division, and there may be other division methods in actual implementation. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed.
[0081] The steps in the methods of this application embodiment can be adjusted, merged, or deleted according to actual needs. The units in the apparatus of this application embodiment can be merged, divided, or deleted according to actual needs. Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.
[0082] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, a terminal, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application.
[0083] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.
[0084] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Since these modifications and variations fall within the scope of the claims and their equivalents, this application also intends to include these modifications and variations.
[0085] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.
Claims
1. A method for managing wireless hotspots, characterized in that, include: Scan for visible Wi-Fi hotspots to obtain multiple Wi-Fi hotspots; Obtain the configuration information of each of the multiple wireless hotspots; Security checks are performed on the configuration information of each of the multiple wireless hotspots to obtain multiple detection results, and the multiple detection results correspond one-to-one with the multiple wireless hotspots; Based on the multiple detection results, control and management operations are performed on the multiple wireless hotspots.
2. The method according to claim 1, characterized in that, The plurality of wireless hotspots includes target wireless hotspots, and the plurality of detection results includes target detection results. The security detection of the configuration information of each wireless hotspot in the plurality of wireless hotspots yields multiple detection results, including: Obtain the preset wireless hotspot whitelist corresponding to the target wireless hotspot; The security of the target wireless hotspot's configuration information is checked based on the preset wireless hotspot whitelist to obtain the target detection result.
3. The method according to claim 2, characterized in that, The preset wireless hotspot whitelist includes security protocol types, and the configuration information of the target wireless hotspot includes security protocol types. The step of performing security checks on the configuration information of the target wireless hotspot based on the preset wireless hotspot whitelist to obtain the target detection result includes: Based on the security protocol types of the preset wireless hotspot whitelist and the security protocol types of the target wireless hotspot, the target detection result is determined. The target detection result is either that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is higher than the security level corresponding to the security protocol type of the target wireless hotspot, or that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is lower than or equal to the security level corresponding to the security protocol type of the target wireless hotspot.
4. The method according to claim 3, characterized in that, The preset wireless hotspot whitelist also includes IP address ranges and DNS addresses, and the configuration information of the target wireless hotspot also includes IP addresses and DNS addresses. Determining the target detection result based on the security protocol types of the preset wireless hotspot whitelist and the security protocol types of the target wireless hotspot includes: If the IP address of the target wireless hotspot is within the IP address range, and the DNS address of the target wireless hotspot is the same as the DNS address of the preset wireless hotspot whitelist, then the target detection result is determined according to the security protocol type of the preset wireless hotspot whitelist and the security protocol type of the target wireless hotspot.
5. The method according to claim 4, characterized in that, The step of performing control operations on the multiple wireless hotspots based on the multiple detection results includes: If the target detection result indicates that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is higher than the security level corresponding to the security protocol type of the target wireless hotspot, then the target wireless hotspot is disabled, and / or the target wireless hotspot is hidden.
6. The method according to claim 4, characterized in that, The step of performing control operations on the multiple wireless hotspots based on the multiple detection results includes: If the target detection result indicates that the security level corresponding to the security protocol type of the preset wireless hotspot whitelist is lower than or equal to the security level corresponding to the security protocol type of the target wireless hotspot, then it is determined that the target wireless hotspot is allowed to be connected.
7. The method according to claim 5 or 6, characterized in that, After performing control operations on the multiple wireless hotspots based on the multiple detection results, the method further includes: Record the management and control operations corresponding to the target wireless hotspot to obtain the management and control operation record.
8. The method according to claim 7, characterized in that, After recording the control operation and obtaining the control operation record, the method further includes: If the preset wireless hotspot whitelist becomes invalid, the control operation corresponding to the target wireless hotspot will be rolled back according to the control operation record.
9. A wireless hotspot management device, characterized in that, include: The scanning unit is used to scan for visible wireless hotspots and obtain multiple wireless hotspots. The acquisition unit is used to acquire the configuration information of each of the plurality of wireless hotspots; The detection unit is used to perform security detection on the configuration information of each of the plurality of wireless hotspots and obtain multiple detection results, wherein each of the multiple detection results corresponds one-to-one with the plurality of wireless hotspots. An execution unit is used to perform control and management operations on the multiple wireless hotspots based on the multiple detection results.
10. A computer device, characterized in that, The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the method as described in any one of claims 1 to 8.