Wireless Network Access With Account-Bound Dynamic Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless network access methods, particularly for Wi-Fi hotspots, face security risks due to the indirect sharing of access passwords without authorization, as they are stored in the terminal's operating system and can be accessed by third-party applications.
Innovation Solution
A wireless network access system that includes a server generating dynamic keys based on user accounts and identification information, verifying message integrity codes, and authenticating guest terminals through a secure connection process involving classified secure and common network areas, ensuring only authorized terminals can access secure networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access passwords are stored in the terminal's operating system for convenient access, then ease of operation is improved, but network security deteriorates due to unauthorized access by third-party applications
Solution Approach 1:
The patent extracts the password storage function from the terminal's operating system by introducing a dedicated security module. This module separately manages authentication credentials, preventing third-party applications from accessing stored passwords while maintaining convenient authentication for authorized users.
Solution Approach 2:
The patent introduces an authentication server as an intermediary between terminals and wireless networks. Instead of storing passwords locally, the system uses the authentication server to verify credentials, eliminating the security vulnerability of local password storage while preserving ease of access through centralized authentication management.
2Reliability
If dynamic keys are generated and verified through a centralized server, then network security is improved, but device complexity increases due to additional authentication components
Solution Approach 1:
The patent implements self-service authentication where terminals automatically generate and manage their own dynamic keys using locally stored seed information. The authentication server only performs verification rather than managing key generation, reducing server complexity while maintaining strong security through distributed key management.
Solution Approach 2:
The patent performs preliminary setup by pre-configuring terminal devices with unique identification information and seed data during manufacturing or initial registration. This preliminary action enables terminals to independently generate dynamic keys without requiring complex real-time key distribution infrastructure, reducing overall system complexity.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
The present application belongs to the field of network security, and disclosed therein are a wireless network access method, device, equipment and system. The method comprises: receiving a user account number and first identifier information of a wireless access point which are sent by a visitor terminal; generating a dynamic secret key key1 according to the user account number and the first identifier information, and sending the dynamic secret key key1 to the visitor terminal; receiving a first verification request sent by the wireless access point, the first verification request carrying a MAC address, the first identifier information and a first MIC; and according to the dynamic secret key key1 queried by the MAC address, verifying the first MIC, and generating a first authorization result according to the verification result for the first MIC.