CN105898739A - Method for preventing hot spot from being illegally simulated - Google Patents
Method for preventing hot spot from being illegally simulated Download PDFInfo
- Publication number
- CN105898739A CN105898739A CN201610339403.8A CN201610339403A CN105898739A CN 105898739 A CN105898739 A CN 105898739A CN 201610339403 A CN201610339403 A CN 201610339403A CN 105898739 A CN105898739 A CN 105898739A
- Authority
- CN
- China
- Prior art keywords
- focus
- client
- certificate server
- authentication result
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W48/00—Access restriction; Network selection; Access point selection
- H04W48/08—Access restriction or access information delivery, e.g. discovery data delivery
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W48/00—Access restriction; Network selection; Access point selection
- H04W48/20—Selecting an access point
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The invention discloses a method for preventing a hot spot from being illegally simulated. The method comprises the steps of: scanning a two-dimensional code by a client, decrypting the two-dimensional code to obtain an ssid and a password of the hot spot, and prohibiting other applications from communicating with the client through a wifi (Wireless Fidelity) module connected with the client; establishing a connection with the hot spot by the client through the wifi module connected with the client; transmitting a random number to the hot spot by the client; and adopting a first encryption method to perform an encryption operation on the random number by the hot spot, thereby obtaining verification information. According to the technical scheme of the invention, through an authentication server, the uniqueness authentication of the hot spot can be realized, and the condition that an AP (Wireless Access Point) is phished can be avoided.
Description
Technical field
The present invention relates to focus management technique field, particularly relate to a kind of method preventing focus from illegally pretending to be.
Background technology
AP (wireless access points (WirelessAccessPoint)), i.e. wifi access point.Existing
Wifi becomes more and more popular, everybody all with, a device that can provide wifi signal is exactly focus, greatly
Family can be attached after searching focus with mobile phone or notebook, and it is all according to ssid that existing focus connects
Be attached with password, as long as and near the focus of the most identical ssid and password occurs in,
Just can connect, so facilitate everybody connection.Such as the focus of existing bus, user takes
Bus or i.e. can connect bus focus around bus.But have a problem that, as
Fruit is that illegal ssid becomes with cryptographic camouflage and bus wifi, and it is non-that such user just can connect this
The focus of method, will result in focus and " goes fishing ", and the most illegal focus pretends to be legal focus.This focus is such as
Fruit is to have information interception function, then user is during normal online, accidentally it is possible to cause
The leakage of information, such as bank card information, consequently, it is possible to cause serious safety issue.
Summary of the invention
For this reason, it may be necessary to provide a kind of method preventing focus from illegally pretending to be, solve existing focus spoofed
Problem.
For achieving the above object, inventor provide a kind of method preventing focus from illegally pretending to be, be applied to
Between client, focus and certificate server, focus has unique first encryption method, certificate server
There is the first decryption method corresponding with the first encryption method, comprise the steps:
Focus changes ssid and password at set intervals；
Quick Response Code is generated after focus encryption ssid and password；
Focus is two-dimensional code display information on the display being attached thereto；
The deciphering of client scan Quick Response Code obtains ssid and the password of focus；
Client forbids that other application programs communicate by being attached thereto wifi module；
Client, according to the ssid obtained and password, is set up even to focus by the wifi module being attached thereto
Connect；
Client sends and counts to focus at random；
Focus uses the first encryption method to be verified information after random number is encrypted computing；
Focus replys checking information to client；
Client sends focus identification information, checking information and counts to certificate server at random；
Certificate server obtains first decryption method according to focus identification information；
After certificate server uses first decryption method to be decrypted checking information and compare with random number
Relatively obtain authentication result；
Certificate server replys authentication result to client；
Client judges whether authentication result is passed through；
If passed through, then other application programs are allowed to communicate by being attached thereto wifi module；
If do not passed through, then disconnect the connection between focus.
Further, having unique second encryption method between certificate server, client has and second
The second decryption method that encryption method is corresponding, wherein:
When client sends authentication information to certificate server, client sends client identification information to recognizing
Card server；
After certificate server obtains authentication result, obtain the second encryption method according to client identification information,
Using the second encryption method to be encrypted authentication result and random number, then certificate server replys encryption
After authentication result to client；
Client judges, when whether authentication result is passed through, to enter authentication result initially with the second decryption method
Row deciphering, it is judged that random number is the most correct and whether authentication result is passed through；
If random number is correct and authentication result is passed through, then allow other application programs by being attached thereto wifi
Module communicates；
Otherwise, then the connection between focus is disconnected.
Further, client sends and the information of reception certificate server includes: client passes through mobile phone
Radio-frequency module sends and receives certificate server information.
Further, before this method starts, further comprise the steps of:
Client judges around whether there is the focus that two or more ssid information is identical with mac information, as
Fruit has, then point out this focus.
Further, also comprise the steps: to detect focus signal intensity, be less than at focus signal intensity
After preset value, disconnect the connection with focus and delete hot information.
Being different from prior art, technique scheme passes through certificate server, it is possible to achieve focus unique
Property certification, it is to avoid the situation that AP is gone fishing occurs.
Accompanying drawing explanation
Fig. 1 is the system architecture schematic diagram of the present invention.
Detailed description of the invention
By describing the technology contents of technical scheme, structural feature in detail, being realized purpose and effect, below
It is explained in detail in conjunction with specific embodiments.
Refer to shown in Fig. 1, present embodiments provide a kind of method preventing focus from illegally pretending to be, permissible
Being applied in the system 100 of Fig. 1, be applied between client, focus and certificate server, client can
To be mobile phone 101 or notebook client.Focus 102 has unique first encryption method, uniquely
I.e. different from other focuses, uniqueness association can be carried out by the identification information of focus.Authentication service
Device 103 has the first decryption method corresponding with the first encryption method.
This method comprises the steps: that focus changes ssid and password at set intervals；Focus encryption ssid
With generation Quick Response Code after password；Focus is two-dimensional code display information on the display being attached thereto.So ssid
Just it is not easy with password artificially to be cracked.
Client obtains the ssid of focus and password by photographic head scanning Quick Response Code deciphering, i.e. ssid and close
Code is encryption, and decipherment algorithm is deposited on the client.This Quick Response Code can be pasted onto and have this focus
The doorway of trade company, so want the user's relative difficult forging illegal focus to know ssid and password,
User, without being manually entered these information, quickly connects after convenience.Client forbids that other apply journey
Sequence communicates by being attached thereto wifi module；Client is typically mounted in operating system, operation system
Having other application programs on system, operating system connects wifi module, and application program can pass through wifi
Module communicates with external program.Client forbids that other application programs have many by wifi module communication
Plant implementation, by intercepting the communication of other application programs and data packet discarding can be fallen, or set
Put an invalid route, thus by all of application program all by this routing forwarding, i.e. can forbid
The communication of these application programs.
Client, according to the ssid obtained and password, is set up even to focus by the wifi module being attached thereto
Connect.
Client sends and counts to focus at random；Client can generate a random number, this random number
There is various ways.Focus uses the first encryption method to be verified after random number is encrypted computing
Information；Checking information is i.e. the random number after encryption.
Focus replys checking information to client；Client send focus identification information, checking information and with
Certificate server counted to by machine.Focus identification information can be mac address information or other information of focus,
If other information, focus replys checking information to client when, focus can be sent together by focus
Identification information is to client.
Certificate server obtains first decryption method according to focus identification information；Certificate server uses first
After checking information is decrypted by decryption method and compare with random number and obtain authentication result；Certification takes
Business device replys authentication result to client；Client judges whether authentication result is passed through.
If passed through, then other application programs are allowed to communicate by being attached thereto wifi module；If
Do not pass through, then disconnect the connection between focus.So, the focus falsely used owing to not knowing encryption method,
Then random number can not be encrypted and obtain correct checking information, natural nothing on certificate server
Method certification is passed through.Then client just can disconnect and the connection of the focus falsely used, thus avoids illegal focus
Connection.
Focus in order to avoid falsely using directly transmits legal authentication result to client, in some embodiment
In, there is unique second encryption method between certificate server, client has and the second encryption method pair
The second decryption method answered, wherein: when client sends authentication information to certificate server, client is sent out
Send client identification information to certificate server；After certificate server obtains authentication result, according to client
Identification information obtains the second encryption method, uses the second encryption method to add authentication result and random number
Close, the authentication result after then certificate server replys encryption is to client；Client judges authentication result
When whether passing through, initially with the second decryption method, authentication result is decrypted, it is judged that whether random number
Whether correct and authentication result is passed through；If random number is correct and authentication result is passed through, then other are allowed to answer
Communicate by being attached thereto wifi module by program；Otherwise, then the connection between focus is disconnected.
So, authentication result is also the data of encryption, if the focus falsely used at will sends other legal recognizing
Card result, then do not encrypt through the second encryption method due to this authentication result, then cannot decipher
To correct random number and authentication result.Thus avoiding the focus falsely used, arbitrarily send one other are legal
Authentication result to client, and cause the problem that client connects.
Certainly, as long as client is not by being the wifi module acquisition that is authenticated result, it is possible to significantly
Improve the correctness of authentication result, as mobile phone radio frequency module (2G, 3G, 4G communication module can be passed through
Deng), client sends and receives the information of certificate server and includes: client is sent out by mobile phone radio frequency module
Send and receive certificate server information.Wifi pattern when so the focus owing to falsely using is carried out, and mobile phone is penetrated
Frequency module cannot be falsely used, then client is legal recognizing from the authentication result that mobile phone radio frequency module gets
Card result.
Many times, the focus falsely used and legal focus are in a place, for this illegal feelings
Condition, needs to remind in time user.Then before this method starts, further comprise the steps of: client and judge around
Whether exist two or more ssid (abbreviation of Service Set Identifier, service set) information and
Mac (Media Access Control, media interviews control, and can be obtained by the beacon frame of scan hot spot)
The focus that information is identical, if it has, then point out this focus.Prompting can be by dialog box or highlighted aobvious
The mode shown is carried out, and user one sees such situation, will vigilance relatively when of connection.
In order to avoid connecting illegal focus elsewhere, present invention additionally comprises following steps: detection
Focus signal intensity, after focus signal intensity is less than preset value, disconnects the connection with focus and deletes heat
Dot information.After deleting hot information, the equipment installing client just cannot connect this hot information automatically,
Thus ensure safety.
Although being described the various embodiments described above, but those skilled in the art once learn
Basic creative concept, then can make other change and amendment to these embodiments, so above institute
Stating only embodiments of the invention, not thereby limit the scope of patent protection of the present invention, every utilization is originally
Equivalent structure or equivalence flow process that description of the invention and accompanying drawing content are made convert, or directly or indirectly use
In the technical field that other are relevant, within being the most in like manner included in the scope of patent protection of the present invention.
Claims (3)
1. the method preventing focus from illegally pretending to be, is applied between client, focus and certificate server,
Focus has unique first encryption method, and certificate server has first corresponding with the first encryption method
Decryption method, it is characterised in that comprise the steps:
Focus changes ssid and password at set intervals；
Quick Response Code is generated after focus encryption ssid and password；
Focus is two-dimensional code display information on the display being attached thereto；
The deciphering of client scan Quick Response Code obtains ssid and the password of focus；
Client forbids that other application programs communicate by being attached thereto wifi module；
Client, according to the ssid obtained and password, is set up even to focus by the wifi module being attached thereto
Connect；
Client sends and counts to focus at random；
Focus uses the first encryption method to be verified information after random number is encrypted computing；
Focus replys checking information to client；
Client sends focus identification information, checking information and counts to certificate server at random；
Certificate server obtains first decryption method according to focus identification information；
After certificate server uses first decryption method to be decrypted checking information and compare with random number
Relatively obtain authentication result；
Certificate server replys authentication result to client；
Client judges whether authentication result is passed through；
If passed through, then other application programs are allowed to communicate by being attached thereto wifi module；
If do not passed through, then disconnect the connection between focus.
A kind of method preventing focus from illegally pretending to be the most according to claim 1, it is characterised in that
Having unique second encryption method between certificate server, client has corresponding with the second encryption method
Second decryption method, wherein:
When client sends authentication information to certificate server, client sends client identification information to recognizing
Card server；
After certificate server obtains authentication result, obtain the second encryption method according to client identification information,
Using the second encryption method to be encrypted authentication result and random number, then certificate server replys encryption
After authentication result to client；
Client judges, when whether authentication result is passed through, to enter authentication result initially with the second decryption method
Row deciphering, it is judged that random number is the most correct and whether authentication result is passed through；
If random number is correct and authentication result is passed through, then allow other application programs by being attached thereto wifi
Module communicates；
Otherwise, then the connection between focus is disconnected.
A kind of method preventing focus from illegally pretending to be the most according to claim 2, it is characterised in that
Client send and receive certificate server information include: client by mobile phone radio frequency module send and
Receive certificate server information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610339403.8A CN105898739A (en) | 2016-05-19 | 2016-05-19 | Method for preventing hot spot from being illegally simulated |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610339403.8A CN105898739A (en) | 2016-05-19 | 2016-05-19 | Method for preventing hot spot from being illegally simulated |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105898739A true CN105898739A (en) | 2016-08-24 |
Family
ID=56717849
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610339403.8A Pending CN105898739A (en) | 2016-05-19 | 2016-05-19 | Method for preventing hot spot from being illegally simulated |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105898739A (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102547701A (en) * | 2010-12-24 | 2012-07-04 | ***通信集团公司 | Authentication method and wireless access point as well as authentication server |
| CN104683343A (en) * | 2015-03-03 | 2015-06-03 | 中山大学 | Method for rapidly logging WiFi hotspot by terminal |
| CN104883682A (en) * | 2014-02-27 | 2015-09-02 | 中兴通讯股份有限公司 | WIFI hotspot connecting and selecting method, communication terminal and system |
| CN105188055A (en) * | 2015-08-14 | 2015-12-23 | 中国联合网络通信集团有限公司 | Wireless network access method, wireless access point and server |
-
2016
- 2016-05-19 CN CN201610339403.8A patent/CN105898739A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102547701A (en) * | 2010-12-24 | 2012-07-04 | ***通信集团公司 | Authentication method and wireless access point as well as authentication server |
| CN104883682A (en) * | 2014-02-27 | 2015-09-02 | 中兴通讯股份有限公司 | WIFI hotspot connecting and selecting method, communication terminal and system |
| CN104683343A (en) * | 2015-03-03 | 2015-06-03 | 中山大学 | Method for rapidly logging WiFi hotspot by terminal |
| CN105188055A (en) * | 2015-08-14 | 2015-12-23 | 中国联合网络通信集团有限公司 | Wireless network access method, wireless access point and server |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8327143B2 (en) | Techniques to provide access point authentication for wireless network | |
| CN103139768B (en) | Authentication method in fusing wireless network and authentication device | |
| US10588015B2 (en) | Terminal authenticating method, apparatus, and system | |
| CN105792194B (en) | Authentication method, authentication device, the network equipment, the Verification System of base station legitimacy | |
| CN106559783B (en) | Authentication method, device and system for WIFI network | |
| US11381977B2 (en) | System and method for decrypting communication exchanged on a wireless local area network | |
| CN105050081A (en) | Method, device and system for connecting network access device to wireless network access point | |
| CN107005927A (en) | Cut-in method, equipment and the system of user equipment (UE) | |
| US11337067B2 (en) | Systems and methods for providing wireless access security by interrogation | |
| CN106559785B (en) | Authentication method, device and system, access device and terminal | |
| CN104270250A (en) | WiFi Internet surfing connecting authentication method and system based on asymmetric full-process encryption | |
| CN101938741A (en) | Method, system and device for mutual authentication | |
| CN105873034A (en) | Safe hot spot information processing method | |
| CN103152326A (en) | Distributed authentication method and authentication system | |
| CN105873035A (en) | Safe AP (access point) information processing method | |
| CN106027256B (en) | A kind of identity card card reading response system | |
| CN106028327A (en) | Method for realizing hotspot security through authentication server | |
| CN106028328A (en) | NFC-based hotspot authentication method | |
| CN106101058A (en) | A kind of hot information processing method based on Quick Response Code | |
| CN105099710A (en) | Cross-domain access control method for trusted radio frequency identification network | |
| CN105873036A (en) | Safe AP (access point) information processing method | |
| CN109743716A (en) | A kind of Wireless LAN Verification System and method based on NFC | |
| CN106878989A (en) | A kind of connection control method and device | |
| CN105898739A (en) | Method for preventing hot spot from being illegally simulated | |
| CN106411939A (en) | Enterprise information intranet WI-FI access security reinforcing authentication method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20160824 |