Router device and method for its local network management

Abstract

The present application discloses a router device and a localized network management method thereof. The localized network management method is applied to the router device and comprises the following steps. A device identifier is received. Device connection information of a network device is acquired according to the device identifier. The network device is bound to the router device and a connection between the router device and the network device is established according to the device connection information of the network device. Device operation information of the bound network device is received according to the connection between the router device and the network device. The device operation information is stored, and remote management and network control operations are performed on the bound network device. Thus, the dependence on a third-party server of a cloud management platform can be effectively reduced, and the network management efficiency and data security can be greatly improved.

Description

Technical Field

[0001] This invention relates to a network device, and more particularly to a router device and its localized network management method. Background Technology

[0002] Modern enterprises and small businesses typically use cloud-based management systems to remotely manage multi-brand, multi-model, and cross-regional network devices. However, this centralized management approach relies on third-party cloud servers, requiring all device settings and traffic data to be uploaded to an external platform. This means businesses cannot fully control their own information, increasing the risk of data leaks and unauthorized access.

[0003] Furthermore, existing cloud management systems have limitations in VPN configuration, with most only supporting single-device VPNs. This complicates cross-site connections within an enterprise and may even require additional VPN solutions. Moreover, cloud management systems are highly dependent on internet connectivity. If the connection to a third-party cloud server is interrupted, administrators will be unable to access or configure devices, impacting the stability of the enterprise network. Therefore, while cloud management improves convenience, it also brings problems such as data security, insufficient management flexibility, and network connectivity dependence, making it difficult to meet the needs of application scenarios with high privacy and stability requirements. Enterprises urgently need a more secure and flexible network management mechanism. Summary of the Invention

[0004] This disclosure provides a localized network management method applicable to router devices, and includes the following steps: Receiving a device identifier; Obtaining device connection information of a network device based on the device identifier; Binding the network device to the router device and establishing a connection between the router and the network device based on the device connection information; Receiving device operation information of the bound network device based on the connection with the network device; Storing the device operation information and performing remote management and network control operations on the bound network device.

[0005] This disclosure also provides a router device including a transceiver, a storage device, and a processor. The processor is coupled to the transceiver and the storage device and configured to perform the following operations: receiving a device identifier; obtaining device connection information of a network device based on the device identifier; binding the network device to the router device based on the device connection information of the network device and establishing a connection with the network device; receiving device operation information of the bound network device based on the connection with the network device; storing the device operation information and performing remote management and network control operations on the bound network device.

[0006] Based on the above, in this disclosed embodiment, the router device can confirm the binding relationship between itself and the network device according to the device identifier associated with the network device. After establishing a connection with the network device, the router device can receive and store the device operation information of the network device. Therefore, the router device can perform remote management and network control operations on the bound network device based on the recorded device operation information. Thus, the device operation information of the network device does not need to be uploaded to or stored on a third-party server in a cloud management platform. Through the local management mechanism of the router device, the dependence on third-party servers in the cloud management platform can be effectively reduced, improving the real-time performance and privacy of data processing. Attached Figure Description

[0007] Figure 1 This is a schematic diagram of a localized network management system according to an embodiment of the present disclosure;

[0008] Figure 2 This is a schematic diagram of a router device according to an embodiment of the present disclosure;

[0009] Figure 3 This is a flowchart of a localized network management method according to an embodiment of the present disclosure;

[0010] Figure 4 This is a flowchart of a localized network management method according to an embodiment of the present disclosure;

[0011] Figure 5 This is a flowchart of a localized network management method according to an embodiment of the present disclosure;

[0012] Figure 6 This is a schematic diagram of a management interface provided by a router device according to an embodiment of the present disclosure. Detailed Implementation

[0013] Reference will now be made in detail to exemplary embodiments of the invention, examples of which are illustrated in the accompanying drawings. Wherever possible, the same component reference numerals are used in the drawings and description to denote the same or similar parts.

[0014] Please refer to Figure 1This is a schematic diagram of a localized network management system according to an embodiment of the present disclosure. The localized network management system 10 may include a router device 100, multiple network devices 200_1 to 200_3, and a terminal device T1. The terminal device T1 can connect to a public network (e.g., the Internet) via the router device 100. In some embodiments, the router device 100 may connect to the Internet via a modem or fiber optic converter from an Internet Service Provider (ISP). In some embodiments, the ISP's modem may be integrated into the router device 100. The terminal device T1 may connect to the router device 100 wired or wirelessly. For example, the router device 100 may be a wireless router compliant with the WiFi protocol, and the terminal device T1 may establish a connection with the router device 100 based on the WiFi protocol. In some embodiments, when the terminal device T1 establishes a wireless connection with the router device 100, the router device 100 may use the 2.4GHz, 5GHz, 6GHz frequency bands, or combinations thereof, to wirelessly communicate with the terminal device T1. Alternatively, in some embodiments, terminal device T1 may be connected via cable to a physical port (e.g., a local area network port) of router device 100.

[0015] In some embodiments, terminal device T1, which is directly connected to router device 100, or terminal device T2, which is indirectly connected to router device 100, can be configured to access the management interface of router device 100. Terminal device T2 can be indirectly connected to router device 100 via a public network.

[0016] In some embodiments, terminal devices T1 and T2 are, for example, smartphones, tablets, laptops, desktop computers, etc., and this disclosure is not limited thereto. Terminal device T1 can be connected to a public network by connecting to router device 100.

[0017] Multiple network devices 200_1 to 200_3 can be wireless routers, switches, or access points (APs), etc. These network devices 200_1 to 200_3 can be responsible for functions such as data forwarding and wireless signal coverage, depending on different application requirements. These network devices 200_1 to 200_3 can be located in different geographical locations, such as different offices, factories, branch offices, or remote sites. Although Figure 1 This explanation uses three network devices, 200_1 to 200_3, as an example, but this disclosure does not limit the number of network devices.

[0018] In some embodiments, router device 100 can act as a management server for managing network devices 200_1 to 200_3. That is, router device 100 can act as a management server across local area networks, responsible for the unified management of multiple network devices 200_1 to 200_n located in different geographical areas. Furthermore, after binding network devices 200_1 to 200_3 to a designated router device 100, router device 100 can record and monitor the device operation information and data analysis results of each network device 200_1 to 200_3 in real time, such as connection status, data traffic, and operating performance. Since router device 100 is a router with network management capabilities, it reduces reliance on third-party cloud servers, improving network security and privacy protection.

[0019] Please refer to Figure 2 This is a schematic diagram of a router device according to an embodiment of the present disclosure. The router device 100 may include a transceiver 111, a storage device 112, and a processor 113. The processor 113 is coupled to the transceiver 111 and the storage device 112.

[0020] Transceiver 111 can transmit and receive signals wirelessly or via a wired connection. The transceiver can also perform operations such as low-noise amplification, impedance matching, mixing, up- or down-frequency conversion, filtering, amplification, and similar functions. Router device 100 can receive and transmit data via transceiver 111. In some embodiments, router device 100 may also include an antenna (not shown).

[0021] Storage device 112 is used to store data such as files, instructions, program code, software modules, etc., and may be, for example, any type of fixed or removable random access memory (RAM), read-only memory (ROM), flash memory or other similar devices, integrated circuits or combinations thereof.

[0022] Processor 113 may be, for example, a programmable general-purpose or special-purpose microprocessor, digital signal processor (DSP), programmable controller, application-specific integrated circuit (ASIC), programmable logic device (PLD), or other similar device or combination thereof. Processor 113 may execute program code, software / firmware modules, instructions, etc., recorded in storage device 112 to implement the localized network management method of this disclosed embodiment.

[0023] Please refer to Figure 3 This is a flowchart of a localized network management method according to an embodiment of the present disclosure. Please refer to it as well. Figure 1 and Figure 2 The method of this embodiment is applicable to the router device 100 of the localized network management system 10 in the above embodiment. The following describes the detailed steps of the localized network management method of this embodiment in conjunction with the various components in the router device 100 and the localized network management system 10.

[0024] In step S310, processor 113 receives a device identifier. In different embodiments, the device identifier may be a personal identification number (PIN code) or a two-dimensional barcode (e.g., a QR code).

[0025] In some embodiments, when remotely binding network device 200_1 via a client application (App), desktop utility, or management interface (WebPortal), processor 113 may use a management interface to receive a PIN Code or QR Code entered by the user to verify the legitimacy of network device 200_1. In some embodiments, the device identifier may be sent to the user via SMS or email, and the user may manually enter the device identifier in a management interface. The management interface may be displayed by a terminal device T1 connected to router device 100. Alternatively, the management interface may be displayed by a terminal device T2 indirectly connected to (e.g., via a public network) router device 100.

[0026] In step S320, the processor 113 can obtain the device connection information of a network device 200_1 based on the device identifier. The device connection information of the network device 200_1 may include MAC address (Media Access Control Address), IP address (Internet Protocol Address), connection type, and device hostname, etc.

[0027] In some embodiments, processor 113 may verify a device identifier to obtain device connection information for network device 200_1. For example, when the PIN Code received by processor 113 is verified, processor 113 may obtain device connection information for network device 200_1. That is, the correct PIN Code corresponding to network device 200_1 may be generated by router device 100 and verified by router device 100.

[0028] In some embodiments, processor 113 may decode a device identifier to obtain device connection information of network device 200_1. For example, processor 113 may decode a QR code to obtain device connection information of network device 200_1. That is, the device connection information of network device 200_1 may be encoded as a QR code or other type of graphical code, so that processor 113 can obtain the device connection information of network device 200_1 by decoding the device identifier.

[0029] In step S330, the processor 113 binds network device 200_1 to router device 100 based on the device connection information of network device 200_1, and establishes a connection with network device 200_1. Specifically, after obtaining the device connection information of network device 200_1, the processor 113 can add network device 200_1 to the management list. Furthermore, the processor 113 can establish a remote connection with network device 200_1 based on the device connection information of network device 200_1. Further, router device 100 can establish a cross-regional connection with network device 200_1 via a public network.

[0030] In some embodiments, router device 100 can establish a VPN (Virtual Private Network) connection with network device 200_1. For example, processor 113 uses a secure communication protocol that can establish a secure encrypted channel to establish a VPN connection between router device 100 and network device 200_1. Such secure communication protocols include, for example, IPSec (Internet Protocol Security), SSL VPN (Secure Sockets Layer Virtual Private Network), or WireGuard. In this way, even if network device 200_1 and router device 100 are located in different geographical areas (such as remote offices, branch offices, etc.), they can still communicate securely with router device 100 through a public network, ensuring the stability of the connection and data security between devices, and supporting cross-regional management and remote operation. Therefore, router device 100 can quickly establish site-to-site VPN connections with multiple network devices. In some embodiments, router device 100 may be configured as a VPN server, which can assist network devices 200_1 to 200_3 in establishing site-to-site VPN connections to protect data transmitted between these cross-local area network devices.

[0031] In step S340, the processor 113 receives device operation information from the bound network device 200_1 based on the connection with the network device 200_1. In some embodiments, the device operation information may include real-time device status, network traffic data, device logs, and security information, etc. Real-time device status may include the number of device connections, processor load, or memory usage, etc. Network traffic data may include uplink / downlink data traffic, packet loss rate, or packet latency status, etc. Device logs may include error logs or connection records, etc. Security information may include firewall information or unauthorized access alerts, etc. The network device 200_1 may periodically report device operation information. Alternatively, the network device 200_1 may report device operation information based on event triggering.

[0032] In step S350, processor 113 stores device operating information and performs remote management and network control operations on the bound network device 200_1. Specifically, processor 113 can store the device operating information of network device 200_1 in storage device 112. That is, router device 100 can record the device operating information of one or more bound network devices in the management list. From another perspective, in some embodiments, router device 100 may be configured with a central processing unit and stored information to realize remote management and control of multiple network devices.

[0033] In some embodiments, router device 100 can analyze the device operation information of network device 200_1 to perform network device management functions based on the analysis results. For example, processor 113 can present the analysis results of the device operation information of network device 200_1 in a graphical interface, allowing administrators to quickly grasp the operating status of network device 200_1. Alternatively, router device 100 can optimize bandwidth allocation for network device 200_1 based on network traffic data of network device 200_1.

[0034] In some embodiments, router device 100 can remotely restart or remotely shut down the bound network device 200_1. Alternatively, in some embodiments, router device 100 can control network device 200_1 to perform firmware updates to fix security vulnerabilities or improve performance.

[0035] In some embodiments, since terminal device T2 can issue network device management commands to router device 100 via a public network, router device 100 can remotely manage network device 200_1. In some embodiments, router device 100 can perform backup of device operation information of network device 200_1.

[0036] It should be noted that the above embodiment is illustrated using network device 200_1 as an example, but router device 100 can obtain the device operation information of other network devices 200_2 and 200_3 and perform remote management and network control operations on the bound network devices 200_2 and 200_3 according to similar processes and operations.

[0037] Therefore, through simple and convenient operation, administrators can bind network devices and routers located in different geographical locations, with the router acting as a network management server for managing these devices. This eliminates the need to send network administrators to different geographical areas to manage the network devices remotely and centrally. Furthermore, the private data of these network devices will not flow into third-party servers, significantly improving data security and network security.

[0038] In some embodiments, the router device may perform an authentication procedure on the device identifier. When the device identifier is successfully authenticated, the router device can obtain the device connectivity information of the network device. The device identifier includes a Personal Identification Number (PIN code) generated by an authentication server.

[0039] Please refer to Figure 4 This is a flowchart of a localized network management method according to an embodiment of the present disclosure. In step S401, network device 200_1 sends a Personal Identification Number (PIN) request to router device 100, requesting router device 100 to generate a PIN. Specifically, network device 200_1 can call a configured Application Programming Interface (API) to request a PIN from router device 100 via the public network. Network device 200_1 can display the PIN obtained from router device 100 on its device management interface. A user can access the device management interface of network device 200_1, where network device 200_1 provides options for generating a PIN. When the user selects an option, network device 200_1 sends the PIN request to router device 100.

[0040] In step S402, in response to receiving the Personal Identification Number (PIN) request information, router device 100 establishes a PIN for network device 200_1. The PIN for network device 200_1 can be a temporary identifier with a time limit, ensuring that it is valid only for a specific period. That is, the PIN established by router device 100 is only valid within a specified time period. Alternatively, router device 100 can limit the number of times the identifier can be used, for example, only once.

[0041] In step S403, router device 100 sends a personal identification number to network device 200_1. Users of network device 200_1 can then obtain their personal identification number by logging into the device management interface of network device 200_1. In other embodiments, router device 100 may also send the personal identification number of network device 200_1 directly to the user, for example, via email or SMS.

[0042] In step S404, router device 100 receives the personal identification number input by the user via terminal device T1 or terminal device T2. Furthermore, the user of network device 200_1 can send the personal identification number of network device 200_1 to the administrator via email or SMS, so that the administrator can manually input the personal identification number to router device 100 via terminal device T1 or terminal device T2 connected to router device 100.

[0043] In step S406, in response to receiving the personal identification number input by the user, the router device 100 executes a verification procedure. In step S407, when the personal identification number input by the user passes verification, the router device 100 obtains the device connection information of the network device 200_1 corresponding to the successfully verified personal identification number. Specifically, the router device 100 can determine whether the personal identification number transmitted by the router device 100 conforms to predetermined specifications and is still within its validity period. The router device 100 can compare whether the personal identification number input by the user matches a personal identification number previously generated for network device 200_1. When the personal identification number transmitted by the router device 100 matches the personal identification number of network device 200_1, the router device 100 can determine that the personal identification number transmitted by the router device 100 has passed verification. After the personal identification number passes verification, the router device 100 obtains the device connection information of the network device 200_1 corresponding to the successfully verified personal identification number.

[0044] In step S408, the router device 100 binds the network device 200_1 to the router device 100 according to the device connection information of the network device 200_1, and establishes a connection between the two devices. In step S409, the network device 200_1 sends its device operation information to the router device 100. In step S410, the router device 100 stores the device operation information and performs remote management and network control operations on the bound network device 200_1. The detailed operations of steps S408 to S410 can be found in the foregoing embodiments and will not be repeated here.

[0045] Please refer to Figure 5 This is a flowchart of a localized network management method according to an embodiment of the present disclosure. Please refer to it as well. Figure 1 and Figure 2 The method of this embodiment is applicable to the router device 100 of the localized network management system 10 in the above embodiment. The following describes the detailed steps of the localized network management method of this embodiment in conjunction with the various components in the router device 100 and the localized network management system 10.

[0046] In step S510, processor 113 receives a device identifier. In this embodiment, step S510 can be implemented as steps S511 to S512. In step S511, processor 113 establishes a connection with a terminal device T1 or terminal device T2. In step S512, processor 113 receives the device identifier through the management interface displayed on terminal device T1 or terminal device T2. The administrator can manually enter the device identifier in the web management interface (Web Portal) displayed on terminal device T1 or terminal device T2. Alternatively, the administrator can manually enter the device identifier in the operation interface of the desktop utility program (OSUtility) and mobile application (App) displayed on terminal device T1 or terminal device T2.

[0047] In step S520, processor 113 obtains device connection information for network device 200_1 based on the device identifier. In step S530, processor 113 binds network device 200_1 to router device 100 based on the device connection information of network device 200_1, and establishes a connection with network device 200_1. In step S540, processor 113 receives device operation information of the bound network device 200_1 based on the connection with network device 200_1. Detailed operations of steps S520 to S540 can be found in the foregoing embodiments and will not be repeated here.

[0048] In step S550, processor 113 stores device operating information and performs remote management and network control operations on the bound network device 200_1. In some embodiments, step S550 may be implemented as steps S551 to S553.

[0049] In step S551, processor 113 stores the device operation information of network device 200_1. In step S552, processor 113 analyzes the device operation information of network device 200_1 to obtain network usage status data of network device 200_1. Network usage status data includes, for example, traffic statistics, bandwidth utilization, network connection quality, or device load status. In step S553, processor 113 displays the network usage status data of network device 200_1 through terminal device T1 or terminal device T2. Specifically, terminal device T1 or terminal device T2 can be a manager's computer, mobile device, or dedicated network management platform, and processor 113 can display the real-time operating status of network device 200_1 through a graphical user interface (GUI) or dashboard.

[0050] In some embodiments, the processor 113 may adjust the QoS (Quality of Service) policy, optimize routing settings, or further perform troubleshooting analysis based on the network usage status data of the network device 200_1 to ensure the stable operation of the network device 200_1.

[0051] In some embodiments, the processor 113 may also send a real-time notification to a terminal device T1 or a terminal device T2 based on the network usage status data or device operation information of the network device 200_1. For example, when the network connection quality of the network device 200_1 is lower than a default threshold, the processor 113 may trigger a real-time notification to remind the administrator to optimize the network or check for potential anomalies. In addition, if abnormal traffic patterns are detected (e.g., abnormally high traffic in a short period of time, unauthorized access, or potential network attacks), the processor 113 may generate an alarm in real time and display relevant information through the terminal device T1 or the terminal device T2, enabling the administrator to take appropriate countermeasures for the network device 200_1 quickly.

[0052] Please refer to Figure 6This is a schematic diagram of the management interface provided by a router device according to an embodiment of the present disclosure. After an administrator logs into the localized network management platform of the router device 100 using terminal device T1 or terminal device T2 with an administrator account, terminal device T1 or terminal device T2 can display the management interface U1. Furthermore, when an administrator connects to the router device 100 through terminal device T1 or terminal device T2 and enters an administrator account and authentication information (such as password, OTP, credential verification, etc.), the processor 113 verifies the administrator account's permissions and provides corresponding management functions according to the permission level. The management interface U1 includes device information Z1 of the router device 100, a management list L1, and a button 601. The management list L1 displays device information Z2 of multiple network devices bound to the router device 100. When the administrator clicks button 601, another management interface is provided for manually entering device identifiers, allowing the administrator to add other network devices to the management list L1.

[0053] In summary, in this disclosed embodiment, the router device can confirm the binding relationship between itself and the network device based on the device identifier associated with the network device. After establishing a connection with the network device, the router device can receive and store the device operation information of the network device. Therefore, the router device can perform remote management and network control operations on the bound network device based on the recorded device operation information. Thus, the device operation information of the network device does not need to be uploaded to or stored on a third-party server in a cloud management platform. Through the router device's local management mechanism, dependence on third-party servers in a cloud management platform can be effectively reduced, improving the real-time performance and privacy of data processing. Furthermore, this disclosed embodiment allows the router device to quickly establish site-to-site VPN connections with multiple network devices or to quickly establish site-to-site VPN connections between multiple network devices through a simple operation method, significantly improving network management efficiency and data security.

[0054] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A localized network management method, applicable to router devices, characterized in that, The method includes: Receive device identifier; Obtain the device connection information of the network device based on the device identifier; Based on the device connection information of the network device, the network device is bound to the router device, and a connection is established between the router and the network device. Based on the connection with the network device, receive device operation information of the bound network device; and The device stores the device's operating information and performs remote management and network control operations on the bound network device.

2. The localized network management method according to claim 1, characterized in that, The steps for obtaining the device connection information of the network device based on the device identifier include: Once the device identifier is verified, the device connection information of the network device is obtained.

3. The localized network management method according to claim 2, characterized in that, The device identifier includes a personal identification number.

4. The localized network management method according to claim 1, characterized in that, The steps for obtaining the device connection information of the network device based on the device identifier include: Decode the device identifier to obtain the device connection information of the network device.

5. The localized network management method according to claim 4, characterized in that, The device identifier includes a two-dimensional barcode.

6. The localized network management method according to claim 1, characterized in that, The steps for performing the remote management and network control operations on the bound network device include: Analyze the device operation information of the network device to obtain network usage status data of the network device.

7. The localized network management method according to claim 6, characterized in that, The steps of performing the remote management and network control operations on the bound network device further include: Based on the network usage status data or the device operation information of the network device, a real-time notification is sent to the terminal device.

8. The localized network management method according to claim 6, characterized in that, The steps of performing the remote management and network control operations on the bound network device further include: Establish a connection with the terminal device; and The terminal device displays the network usage status data of the network device.

9. The localized network management method according to claim 6, characterized in that, The steps of receiving the device identifier include: Establish a connection with the terminal device; and The device identifier is received through the management interface displayed on the terminal device.

10. A router device, characterized in that, include: transceiver; Storage device; as well as The processor, coupled to the transceiver and the storage device, is configured to: Receive device identifier; Obtain the device connection information of the network device based on the device identifier; Based on the device connection information of the network device, the network device is bound to the router device, and a connection is established between the router and the network device. Based on the connection with the network device, receive device operation information of the bound network device; as well as The device operation information is stored, and remote management and network control operations are performed on the bound network device based on the device operation information.

Images