WiFi Device Access Control via SSID Tagging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for managing multi-SSID WiFi access are inefficient as they require frequent querying of IP/MAC mapping tables and MAC address lists, leading to low processing efficiency and potential network security risks when users attempt to access management interfaces.
Innovation Solution
Implementing an access control method that uses preset tags to determine and manage access requests based on service set identifiers (SSIDs) rather than MAC addresses, reducing the need for IP/MAC mapping table queries and enhancing security by avoiding static IP-related risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IP/MAC mapping table queries and MAC address list verification are performed for each WEBUI access request, then access control can be implemented, but processing efficiency is low
Solution Approach 1:
The patent applies preliminary action by pre-configuring access control policies and MAC address lists in the kernel layer before access requests arrive. When a user attempts to access the WEBUI, the system checks against pre-established rules rather than performing real-time IP/MAC mapping queries and MAC list verifications. This shifts the computational burden to setup time rather than request processing time, thereby improving efficiency while maintaining access control reliability
Solution Approach 2:
The patent segments the access control functionality into two distinct layers: kernel layer and application layer. The kernel layer handles efficient packet capture, filtering, and preliminary access control based on pre-configured policies. The application layer handles WEBUI-specific access control. This segmentation allows each layer to specialize in its function, with the kernel layer optimizing for speed and the application layer for policy enforcement, resolving the contradiction between reliable access control and processing efficiency
2Reliability
If IP/MAC mapping table and MAC address list are queried for each access request, then access control is maintained, but system complexity increases
Solution Approach 1:
The patent extracts the access control functionality from the application layer and implements it in the kernel layer. By taking out the packet filtering and access control logic from the higher-level application code and placing it in the kernel, the system reduces application layer complexity while maintaining access control reliability. The kernel handles low-level packet inspection and filtering, freeing the application layer from complex IP/MAC mapping table queries and MAC list verifications
Solution Approach 2:
The patent creates a universal access control mechanism in the kernel layer that handles multiple types of access control requests (WEBUI access, network access, etc.) through a single unified framework. Instead of implementing separate access control logic for each application, the kernel provides a universal packet filtering and access control system that serves multiple functions, thereby reducing overall system complexity while maintaining reliable access control
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
Embodiments of the present invention disclose an access control method for a WiFi device and a WiFi device. The method includes: receiving, at a user layer of the WiFi device, an access request for accessing the WiFi device based on a service set identifier SSID, where the access request includes a request for accessing a management interface WEBUI of the WiFi device; determining, at the user layer of the WiFi device, whether a tag of the received access request is the same as one of tags that are preset for SSIDs forbidden to access the WiFi device; if the determination result is positive, rejecting the access request; if the determination result is negative, accepting the access request. In this way, access control of a WiFi device can be implemented in a simple manner.