Dynamic Wi-Fi Access Permission Management via Signature Verification
Solution Overview
Problem
Wi-Fi networks face security vulnerabilities as lost devices can still access the network due to persistent network access permissions, compromising communication security.
Innovation Solution
A network access permission management method that involves a configuration device generating an update instruction with identification and signature information, which is verified by station devices to update or revoke access permissions, ensuring that only authorized devices connect, thereby enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network access permission is configured for a station device to enable secure communication, then communication security is improved, but if the device is lost the station device can still access the network which reduces security
Solution Approach 1:
The patent implements dynamic network access permission management by introducing a permission update mechanism. The access permission is no longer static but can be updated remotely through update instructions sent from a configuration device to station devices. When a device is lost, the system can dynamically revoke its access permission by broadcasting an update instruction, making the permission adaptive to changing security requirements.
Solution Approach 2:
The patent establishes a feedback loop where station devices send connection requests to the configuration device, which then determines whether to update access permissions based on current security requirements. This feedback mechanism allows the system to continuously monitor and adjust network access permissions, ensuring that security policies are enforced in real-time and that lost devices can be promptly disconnected.
2Reliability
If network access permission is updated remotely to revoke access for lost devices, then security is improved, but the complexity of permission management increases
Solution Approach 1:
The patent introduces a configuration device as an intermediary that centralizes the management of network access permissions. Instead of each station device independently managing its own permissions, the configuration device acts as a mediator that receives connection requests, determines whether permission updates are needed, and broadcasts update instructions to relevant devices. This intermediary approach simplifies the overall system architecture by consolidating management functions in a single point of control.
Solution Approach 2:
The patent uses copying of access permission information through broadcast mechanisms. When a permission update is needed, the configuration device creates an update instruction containing the necessary permission information and broadcasts it to all station devices. This copying approach allows consistent permission management across the network without requiring complex point-to-point communication protocols, reducing management complexity while maintaining security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present invention disclose a network access permission management method and a related device. The method includes the following steps: A configuration device may generate a network access permission update instruction for a target device. A station device may update network access permission of the target device when receiving the network access permission update instruction and when verification of signature information of the configuration device succeeds. If the target device sends a connection request message to the station device subsequently, the station device may determine, according to updated network access permission, whether to accept or reject a connection request of the target device. In this way, a user may modify or revoke, based on a requirement, network access permission of any device in a Wi-Fi network. If a device is lost, network access permission of the device may be revoked in this manner, and the network access permission of the device may also be restored in this manner when the device is found back. In this way, communication security between devices in the Wi-Fi network can be ensured, and improving security of the Wi-Fi network.