WO2016179924A1 - 一种无线局域网的接入控制方法及装置、终端 - Google Patents
一种无线局域网的接入控制方法及装置、终端 Download PDFInfo
- Publication number
- WO2016179924A1 WO2016179924A1 PCT/CN2015/088154 CN2015088154W WO2016179924A1 WO 2016179924 A1 WO2016179924 A1 WO 2016179924A1 CN 2015088154 W CN2015088154 W CN 2015088154W WO 2016179924 A1 WO2016179924 A1 WO 2016179924A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- access
- terminal
- local area
- wireless local
- area network
- Prior art date
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W48/00—Access restriction; Network selection; Access point selection
Definitions
- This document relates to, but is not limited to, the field of communications, and in particular, to an access control method, apparatus, and terminal for a wireless local area network.
- smart mobile terminals have been widely accepted by people, and products such as smart phones and PADs have played an indispensable role in people's lives. These smart terminals are so popular because they can be used to access the Internet anytime, anywhere.
- access to the Internet mainly through operators' 3G/4G networks and/or through wireless LANs (such as Wi-Fi hotspots), and Wi-Fi hotspots have been widely used by users because of their low tariffs and high stability.
- Wi-Fi hotspots have been widely used by users because of their low tariffs and high stability.
- Wi-Fi hotspots In order to ensure the privacy and security of Wi-Fi hotspots, they all have certain security policies.
- the more commonly used security policies include three modes: (1) OPEN (open); (2) WPA (Wi-Fi Protected Access).
- Wi-Fi Protected Access PSK pre-shared key
- WPA2 PSK Wi-Fi Protected Access PSK (pre-shared key); (3) WPA2 PSK.
- the Wi-Fi hotspot In the first mode, the access of the terminal does not require any authentication. Just click on the name of the Wi-Fi hotspot in the search list to access it.
- the Wi-Fi hotspot In the second and third modes, the Wi-Fi hotspot is encrypted. When the terminal accesses, the corresponding password needs to be input, and the password can be accessed correctly.
- the factory default settings of the Wi-Fi hotspot security policy generally select a more secure WPA2 PSK, and the password is a more complex string of random numbers over 8 bits. In order to ensure that their hotspots are not stolen, the owner of the hotspot will generally set a more complicated password.
- the embodiment of the invention provides a fast wireless local area network access control method and device, and a terminal, to solve the problem of how to avoid the inconvenience and leakage of password transmission caused by inputting a password when accessing a wireless local area network hotspot.
- An embodiment of the present invention provides a method for controlling access of a wireless local area network, including:
- the WLAN hotspot device When receiving the application for accessing the access terminal, the WLAN hotspot device confirms to the access control terminal whether to allow the terminal to access;
- the wireless local area network hotspot device After receiving the information indicating that the access is permitted, the wireless local area network hotspot device completes the access of the application access terminal.
- the access control terminal includes any one or more of the following:
- the wireless local area network hotspot device itself The wireless local area network hotspot device itself;
- the initial access terminal of the wireless local area network hotspot device that is, the first terminal that accesses the wireless local area hotspot device through the wireless local area network after the wireless local area network hotspot device is powered on;
- the method further includes: determining, to the access control terminal, whether to allow the application access terminal to access,
- the WLAN hotspot device searches for the terminal identifier of the applied access terminal in the saved set of terminal identifiers that are allowed to be accessed, and if not found, performs the check with the access control terminal to confirm whether the application is allowed to be connected. The operation of entering the terminal access; if it can be found, the operation of confirming to the access control terminal whether to permit the access of the application access terminal is not performed.
- the terminal identifier is a wireless local area network module MAC address of the terminal.
- the method further includes: determining, to the access control terminal, whether to allow the application access terminal to access,
- the wireless local area network hotspot device queries the current password policy; if the current password policy is the predetermined mode, the step of confirming to the access control terminal whether to allow the application access terminal to access is performed.
- the information indicating that access is allowed is included in a data packet fed back by the access control terminal, and a value or a character that allows access is indicated in a predetermined flag bit in the data packet;
- the information allowed to be accessed is included in a data packet fed back by the access control terminal, and a predetermined value on the data packet indicates a value or character that is not allowed to be accessed.
- the method further includes:
- the wireless local area network hotspot device After receiving the information indicating that the access is not allowed, the wireless local area network hotspot device rejects the access of the application access terminal after receiving the information indicating that the access is not allowed.
- the application message includes a MAC address of the wireless local area network module of the application access terminal;
- the determining, by the access control terminal, whether to allow the access terminal to access the wireless local area network hotspot device includes:
- the wireless local area network hotspot device parses the MAC address information of the wireless local area network module of the application access terminal in the application message, and adds it to its own broadcast message for sending; the broadcast message is used to trigger the access control.
- the terminal presents an inquiry message to the user;
- the wireless local area network hotspot device parses the MAC address information of the wireless local area network module of the application access terminal in the application message, adds a flag bit, performs packing and encapsulation, and integrates the DATA frame of the downlink data into the DATA frame of the downlink data.
- the fixed message delivery mode established by the access control terminal is transmitted to the access control terminal; the flag bit is used to trigger the access control terminal to present an inquiry message to the user.
- the form of the inquiry message includes at least one of a notification bar message or a dialog message; the content of the inquiry message includes a MAC address of the wireless local area network module of the application access terminal or whether access is allowed. Select at least one of the boxes.
- a method for controlling access of a wireless local area network includes:
- the terminal After receiving the message that the WLAN hotspot device confirms whether to allow the access terminal to access, the terminal prompts the user to select, and generates, according to the user's selection, information indicating that the access is allowed or indicates that access is not allowed;
- the terminal feeds back the information indicating that access is allowed or indicates that access is not allowed to the wireless local area network hotspot device.
- prompting the user to select includes:
- An inquiry message is presented to the user on the screen of the terminal.
- the form of the inquiry message includes at least one of a notification bar message or a dialog message; the content of the inquiry message includes a MAC address of the wireless local area network module of the application access terminal or whether access is allowed. Select at least one of the boxes.
- the information indicating that access is allowed is included in a data packet fed back by the terminal, and a value or a character that allows access is indicated on a predetermined flag bit in the data packet;
- the information is included in a data packet fed back by the terminal, and a predetermined value on the data packet indicates a value or character that is not allowed to be accessed.
- the message that the terminal receives the WLAN hotspot device to confirm whether to allow the access terminal to apply for access includes:
- the terminal Receiving, by the terminal, the DATA frame of the downlink data of the wireless local area network hotspot device by using the fixed message delivery manner established by the terminal when accessing the wireless local area network hotspot device, where the DATA frame includes the wireless of the application access terminal
- the MAC address of the LAN module and the flag used for triggering
- a wireless local area network access control device is disposed in a wireless local area network hotspot device, and includes:
- the application processing module is configured to: when the WLAN hotspot device receives the application message for applying for the access terminal, confirm to the access control terminal whether the application access terminal is allowed to access;
- the access processing module is configured to complete the access of the application access terminal after receiving the information indicating that access is permitted from the access control terminal.
- the access control terminal includes any one or more of the following:
- the wireless local area network hotspot device itself The wireless local area network hotspot device itself;
- the initial access terminal of the wireless local area network hotspot device that is, the first terminal that accesses the wireless local area hotspot device through the wireless local area network after the wireless local area network hotspot device is powered on;
- the application processing module is further configured to: after querying whether the access control terminal allows the application access terminal to access, searching for the terminal of the application access terminal in the saved terminal identification set that is allowed to access Determining, if not found, performing the operation of confirming to the access control terminal whether to allow access by the application access terminal; if not, performing the operation to the access control terminal to confirm whether the application is allowed to be accessed The operation of entering the terminal.
- the terminal identifier is a wireless local area network module MAC address of the terminal.
- the application processing module is further configured to query a current password policy before confirming to the access control terminal whether to allow the application access terminal to access; if the current password policy is a predetermined mode, perform the The access control terminal confirms whether the operation of the application access terminal is allowed to be accessed.
- the information indicating that the access is allowed to be included in the data packet fed back by the access control terminal indicating a value or a character allowed to access on a predetermined flag bit; and the information indicating that the access is not allowed In the data packet fed back by the access control terminal, a value or a character that is not allowed to be accessed is indicated on a predetermined flag bit.
- the access processing module is further configured to reject the access of the application access terminal after receiving the information indicating that the access is not allowed.
- the application message includes a MAC address of the wireless local area network module of the application access terminal;
- the application processing module includes: a message processing unit and a message transmission unit;
- the message processing unit is configured to parse the MAC address information of the wireless local area network module of the application access terminal in the application message, and add its own broadcast message; the broadcast message is used to trigger the access control terminal to present Inquiring a message to the user;
- the message transmission unit is configured to send the broadcast message
- the message processing unit is configured to parse the MAC address information of the wireless local area network module of the application access terminal in the application message, add a flag bit, package and encapsulate, and merge the DATA frame of the downlink data into the DATA frame;
- the flag bit is used to trigger the access control terminal to present an inquiry message to the user;
- the message transmission unit is configured to be transmitted to the access control terminal by using a fixed message delivery manner established when the access control terminal accesses.
- the form of the inquiry message includes at least one of a notification bar message or a dialog message; the content of the inquiry message includes a MAC address of the wireless local area network module of the application access terminal or whether access is allowed. Select at least one of the boxes.
- a terminal comprising the above device.
- An access control device for a wireless local area network is disposed in the terminal, and includes: a message transmission unit and a message processing unit;
- the message processing unit is configured to prompt the user to select when the message transmission unit receives the message that the wireless local area network hotspot device confirms whether to allow the access terminal to access the application, and generates, according to the user's selection, that the access is allowed or the access is not allowed. Information entered;
- the message transmission unit is configured to feed back information indicating that access is permitted or indicates that access is not allowed to the wireless local area network hotspot device.
- the device further includes: a message display unit;
- the message processing unit is configured to prompt the user to select by:
- the message display unit is instructed to present an inquiry message to the user on the screen of the terminal.
- the form of the inquiry message includes at least one of a notification bar message or a dialog message; the content of the inquiry message includes a MAC address of the wireless local area network module of the application access terminal or whether access is allowed. Select at least one of the boxes.
- the information indicating that access is allowed is included in a data packet fed back by the feedback module, and a value or a character that allows access is indicated in a predetermined flag bit in the data packet;
- the incoming information is included in a data packet fed back by the feedback module, and a predetermined value on the data packet indicates a value or character that is not allowed to be accessed.
- the message transmission unit is configured to: after receiving the wireless local area network hotspot device, confirm whether to allow the access of the application access terminal:
- a DATA frame of downlink data of the wireless local area network hotspot device by using a fixed message delivery manner established when the terminal accesses the wireless local area network hotspot device, where the DATA frame includes the application connection
- a terminal comprising the above device.
- the embodiment of the invention provides a fast wireless local area network access control method and device, and a terminal, the method includes: the user can set an access control terminal of the wireless local area network hotspot device, and if other terminals apply to access the wireless local area network
- the hotspot device the WLAN hotspot device queries the access control terminal according to the application message, and the user directly decides whether to agree to access.
- This method solves the problem that external personnel need to input complex passwords when temporarily accessing the wireless local area network hotspot, avoids the inconvenience of transmitting and inputting the wireless local area hotkey password, and has no security risk of password leakage, thereby improving the user experience.
- FIG. 1 is a flowchart of an access control method for a wireless local area network according to Embodiment 1 of the present invention
- FIG. 2 is a schematic diagram of an access control apparatus for a wireless local area network according to Embodiment 2 of the present invention
- FIG. 3 is a flowchart of a method for controlling access of a wireless local area network according to Embodiment 3 of the present invention
- FIG. 4 is a schematic diagram of an access control apparatus for a wireless local area network according to Embodiment 4 of the present invention.
- Figure 5 is a schematic view of Embodiment 1;
- FIG. 6 is a flowchart of Embodiment 2.
- Embodiment 1 A method for controlling access of a wireless local area network, as shown in FIG. 1 , includes:
- the WLAN hotspot device when receiving the application message for applying for the access terminal, confirms to the access control terminal whether the application access terminal is allowed to access.
- the wireless local area network hotspot device After receiving the information indicating that the access is allowed, the wireless local area network hotspot device completes the access of the application access terminal.
- the step S20 may further include: after receiving the information indicating that the access is not allowed, the wireless local area network hotspot device rejects the access of the application access terminal.
- the access form of the WLAN may include accessing a Wi-Fi hotspot, and may also include other forms of accessing a wireless local area network.
- the wireless local area network hotspot device may also refuse to access the application access terminal if the information of the access control terminal is not received within a predetermined time.
- the access control terminal includes any one or any of the following:
- the wireless local area network hotspot device itself The wireless local area network hotspot device itself;
- the initial access terminal of the wireless local area network hotspot device that is, the terminal that accesses the wireless local area hotspot device through the wireless local area network after the wireless local area network hotspot device is powered on;
- the access control terminal may be pre-set by storing the terminal identification in the wireless local area network hotspot device. Users can also choose their own design and choose to be the end of access control. The predetermined condition of the terminal, so that the wireless local area network hotspot device can automatically select the corresponding terminal as the access control terminal.
- the access control terminal Before confirming to the access control terminal whether to allow the application access terminal to access, the access control terminal is already selected, and may be preset or temporarily set by the user, It may also be automatically selected according to predetermined conditions; the access control terminal may remain unchanged at all times, or may be adjusted by the user to other terminals as needed or automatically adjusted by the wireless local area network hotspot device according to predetermined conditions.
- the access control terminal and the application access terminal are both equipped with an operating system, including but not limited to Android, IOS, Windows, and other Linux-based operating systems.
- the wireless local area network hotspot device is also equipped with an operating system, including but not limited to Android, IOS, Windows, and other Linux-based operating systems.
- the terminal identifier of the access control terminal may be set or modified by directly logging in to the control interface of the wireless local area network hotspot device, or the terminal identifier of the access control terminal may be set by using the current access control terminal; Setting the terminal identifier of the access control terminal may enable the wireless local area network hotspot device to set a function of any terminal that has been accessed through the wireless local area network as an access control terminal.
- the access control terminal may be configured to have only one, or may be configured to include one or more.
- the user with access control authority can receive the application message regardless of which terminal is used, and choose whether to accept or not.
- the control priority of each access control terminal may be separately set, so that if the same application message is allowed, some access control terminals allow, and some do not allow, then control priority The highest level access control terminal shall prevail.
- the control authority of each access control terminal may be separately set. For example, in addition to processing the application message, some access control terminals may also manage all access control terminals of the wireless local area network hotspot device (such as adding , modify, delete, set the control priority, etc., and some can only choose whether to agree to access the application message.
- the method further includes: the wireless local area network hotspot device querying a current password policy; if the current password policy is a predetermined mode, performing the And confirming, by the access control terminal, whether the application access terminal is allowed to access; if not the predetermined mode, but other related modes, performing subsequent processing according to the operation corresponding to the mode in the related art.
- the predetermined mode may be, but is not limited to, an OPEN query mode; the access control terminal takes effect only when the password policy of the wireless local area network hotspot device is the OPEN query mode, and does not take effect under other password policies.
- the wireless local area network hotspot device When the wireless local area network hotspot device is in the OPEN query mode password policy (ie, in a predetermined mode), and the access control terminal is set, the wireless local area network hotspot device receives the application message of the other application access terminal. After the access control terminal is inquired, the user can decide whether to allow other application access terminals to access the wireless local area network hotspot device on the access control terminal.
- control interface of the WLAN hotspot device includes a password policy setting interface or option, including but not limited to (1) OPEN query mode, (2) OPEN mode, and (3) WPA-PSK mode, ( 4) WPA2-PSK mode.
- the OPEN query mode is different from the OPEN mode described in the Wi-Fi Alliance 802.11 protocol.
- any application access terminal is in the "white list” of the wireless local area network hotspot device, and the wireless local area hotspot device can be freely accessed without inputting any password.
- the password policy of the wireless local area network hotspot device is in the OPEN query mode, only the access control terminal is in the "white list” of the wireless local area network hotspot device, and all other terminals are in the "blacklist" of the wireless local area network hotspot device.
- the wireless local area network hotspot device Applying for an access terminal to initiate an application for accessing the wireless local area network hotspot device, the wireless local area network hotspot device sends an application message for applying for the access terminal to the access control terminal, and the user operates the access control terminal to determine whether to allow the application. Access to the access terminal. If allowed, the application access terminal is automatically added to the "white list" of the WLAN hotspot device, and the access process can be completed. If not allowed, the application access terminal is still in the "blacklist" of the wireless LAN hotspot device, and the access process is terminated.
- any other terminal except the access control terminal may also be set.
- the access control terminal When access is required, the access control terminal is allowed to access; for example, even if a terminal has been allowed to access before, but is disconnected and then accessed again, the access control terminal needs to be obtained again. Allowed.
- the access control terminal may also set different permission types for different application access terminals, for example, including permanent permission and temporary permission; and permanent permission is to add the application access terminal to the “white list”.
- Permanent permission is to add the application access terminal to the “white list”.
- Temporary permission is to allow only this access, and you need to apply again after accessing again.
- the method further includes:
- the WLAN hotspot device searches for the terminal identifier of the application for the access terminal in the saved set of terminal identifiers that are allowed to be accessed, and if not, the method determines whether to allow the application to access the access control terminal.
- the operation of the access terminal if the operation is not found, the access control terminal is not allowed to confirm the access operation of the application access terminal, and the access procedure of the application access terminal may be directly completed.
- the terminal identifier (including the terminal identifier of the preset access control terminal, the terminal identifier recorded in the “whitelist” and the “blacklist”, etc.) is a wireless local area network module of the terminal (including but not limited to Wi-Fi module) MAC address to ensure one-to-one correspondence with the terminal.
- the application message of the application for the access terminal that is received by the wireless local area network hotspot device includes, but is not limited to, a MAC address of the wireless local area network module of the application access terminal.
- the wireless local area network hotspot device confirms to the access control terminal whether to allow the access terminal to access the wireless local area network hotspot device.
- the wireless local area network hotspot device confirms to the access control terminal whether to allow the access terminal to access the wireless local area network hotspot device.
- the first alternative implementation is:
- the wireless local area network hotspot device parses the MAC address information of the wireless local area network module of the application access terminal in the application message, and adds it to its own broadcast message for sending; the broadcast message is used to trigger the access control.
- the terminal presents an inquiry message to the user;
- the wireless local area network hotspot device After receiving the application message, the wireless local area network hotspot device applies the application to the terminal.
- the information such as the MAC address of the WLAN module is parsed and added to its own broadcast message for transmission.
- the access control terminal retrieves such a broadcast message, it automatically parses and presents it to the user in the manner of an inquiry message for the user to make a judgment.
- the second optional implementation is:
- the wireless local area network hotspot device parses the MAC address information of the wireless local area network module of the application access terminal in the application message, adds a flag bit, performs packing and encapsulation, and integrates the DATA frame of the downlink data into the DATA frame of the downlink data.
- the fixed message delivery mode established by the access control terminal is transmitted to the access control terminal; the flag bit is used to trigger the access control terminal to present an inquiry message to the user.
- the access control terminal accesses the wireless local area network hotspot device
- a fixed message delivery manner is established with the wireless local area network hotspot device.
- the wireless local area network hotspot device parses the MAC address and other information of the wireless local area network module of the application access terminal in the application message, the flag is added, packaged and encapsulated, and integrated into the DATA frame of the downlink data, and transmitted. Giving the access control terminal.
- the access control terminal After receiving the data packet transmitted by the wireless local area network hotspot device, the access control terminal parses and detects the fixed flag bit, triggers the inquiry message, and presents the query message to the user for the user to make a judgment.
- the inquiry message may be directly triggered after receiving the application message, and the result selected by the user is directly obtained.
- the form of the query message includes, but is not limited to, at least one of the following: (1) a notification bar message; (2) a dialog message.
- the content of the inquiry message includes, but is not limited to, at least one of the following: (1) the wireless local area network module MAC address of the application access terminal; and (2) a selection box for allowing access.
- the access control terminal informs the WLAN hotspot device whether the application access terminal is allowed to access, and an optional specific implementation process is as follows:
- the access control terminal accesses the wireless local area network hotspot device, a fixed message delivery manner is established with the wireless local area network hotspot device. After the user selects whether to allow the access of the application access terminal, the access control terminal adds a receipt message to the flag indicating whether access is allowed, performs packing and encapsulation, and joins the DATA frame of the uplink data. Passed to the wireless local area Network hotspot device.
- the flag is also carried in the data packet fed back to the wireless local area network hotspot device.
- the WLAN hotspot device disassembles the data packet received by the access control terminal, detects the corresponding flag bit, parses the data on the flag bit, and parses the “permitted access” or After the value indicating "do not allow access", perform the corresponding operation.
- the information indicating that access is allowed is included in a data packet fed back by the access control terminal, and a value or a character that allows access is indicated in a predetermined flag bit in the data packet;
- the information allowed to be accessed is included in a data packet fed back by the access control terminal, and a predetermined value on the data packet indicates a value or character that is not allowed to be accessed.
- the present embodiment is further described by using an example of an optional embodiment in which a Wi-Fi hotspot device is used as a wireless local area network hotspot device, and an initial access terminal is used as a unique access control terminal, and the predetermined mode is an OPEN query. Mode; this example includes steps A to E:
- the initial access terminal modifies a password policy of the Wi-Fi hotspot device to an OPEN query mode on a control interface of the Wi-Fi hotspot device.
- the application access terminal opens the Wi-Fi function, searches for the name of the Wi-Fi hotspot device, and clicks to apply for access.
- the Wi-Fi hotspot device receives the application message of the application for the access terminal, and sends the MAC address of the Wi-Fi module of the application access terminal to the initial connection by using a broadcast message or a fixed message delivery manner. Enter the terminal and ask whether to allow the access terminal to access the Wi-Fi hotspot device.
- step E After the initial access terminal receives the inquiry in step D sent by the Wi-Fi hotspot device, if the access is selected, the application access terminal successfully accesses the Wi-Fi hotspot device; if the selection does not allow If access is applied, the application access terminal will not access the Wi-Fi hotspot device.
- the embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the above method.
- Embodiment 2 An access control device 20 for a wireless local area network is disposed in a wireless local area network hotspot device, as shown in FIG. 2, and includes:
- the application processing module 21 is configured to: when the WLAN hotspot device receives the application message for applying for the access terminal, confirm to the access control terminal whether the application access terminal is allowed to access;
- the access processing module 22 is configured to complete the access procedure of the application access terminal after receiving the information indicating that access is permitted from the access control terminal.
- the access processing module 22 may be further configured to terminate the access process of the application access terminal after receiving the information indicating that the access is not allowed.
- the access control terminal includes any one or any of the following:
- the wireless local area network hotspot device itself The wireless local area network hotspot device itself;
- the initial access terminal of the wireless local area network hotspot device that is, the first terminal that accesses the wireless local area hotspot device through the wireless local area network after the wireless local area network hotspot device is powered on;
- the application processing module 21 is further configured to: before confirming, by the access control terminal, whether to allow the application access terminal to access, searching for the application access terminal in the saved terminal identification set that is allowed to access.
- the terminal identifier if not found, performing the operation of confirming to the access control terminal whether to allow the application access terminal to access; if not, the method of confirming to the access control terminal whether to allow the The operation of applying for access to the access terminal may further instruct the access processing module to complete the access process of the application for the access terminal.
- the terminal identifier is a wireless local area network module MAC address of the terminal.
- the application processing module is further configured to query a current password policy before confirming to the access control terminal whether to allow the application access terminal to access; if the current password policy is a predetermined mode, perform the The access control terminal confirms whether the operation of the application access terminal is allowed to be accessed.
- the application message includes a MAC address of the wireless local area network module of the application access terminal;
- the application processing module 21 includes: a message processing unit and a message transmission unit;
- the message processing unit is configured to parse the MAC address information of the wireless local area network module of the application access terminal in the application message, and add its own broadcast message; the broadcast message is used to trigger the access control terminal to present Inquiring a message to the user;
- the message transmission unit is configured to send the broadcast message
- the message processing unit is configured to parse the MAC address information of the wireless local area network module of the application access terminal in the application message, add a flag bit, package and encapsulate, and merge the DATA frame of the downlink data into the DATA frame;
- the flag bit is used to trigger the access control terminal to present an inquiry message to the user;
- the message transmission unit is configured to be transmitted to the access control terminal by using a fixed message delivery manner established when the access control terminal accesses.
- the form of the inquiry message includes, but is not limited to, at least one of a notification bar message or a dialog message; the content of the inquiry message includes a MAC address of the wireless local area network module of the application access terminal or whether it is allowed At least one of the access selection boxes.
- the information indicating that the access is allowed to be included in the data packet fed back by the access control terminal indicating a value or a character allowed to access on a predetermined flag bit; and the information indicating that the access is not allowed In the data packet fed back by the access control terminal, a value or a character that is not allowed to be accessed is indicated on a predetermined flag bit.
- Embodiment 3 A method for controlling access of a wireless local area network, as shown in FIG. 3, includes:
- the terminal After receiving the message that the WLAN hotspot device confirms whether to allow the access terminal to access, the terminal prompts the user to select, and generates, according to the user's selection, information indicating that the access is allowed or indicates that access is not allowed.
- the terminal feeds back the information indicating that access is allowed or indicates that access is not allowed to the wireless local area network hotspot device.
- the prompting user selection includes:
- An inquiry message is presented to the user on the screen of the terminal.
- the form of the inquiry message includes, but is not limited to, at least one of a notification bar message or a dialog message; the content of the inquiry message includes a MAC address of the wireless local area network module of the application access terminal or whether it is allowed At least one of the access selection boxes.
- the information indicating that access is allowed is included in a data packet fed back by the terminal, and a value or a character that allows access is indicated on a predetermined flag bit in the data packet;
- the information is included in a data packet fed back by the terminal, and a predetermined value on the data packet indicates a value or character that is not allowed to be accessed.
- the message that the terminal receives the WLAN hotspot device to confirm whether to allow the access terminal to apply for access includes:
- the terminal Receiving, by the terminal, the DATA frame of the downlink data of the wireless local area network hotspot device by using the fixed message delivery manner established by the terminal when accessing the wireless local area network hotspot device, where the DATA frame includes the wireless of the application access terminal
- the MAC address of the LAN module and the flag used for triggering
- the embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the above method.
- Embodiment 4 a wireless local area network access control device 40, is disposed in the terminal, as shown in FIG. 4, comprising: a message transmission unit 41, a message processing unit 42;
- the message processing unit 42 is configured to prompt the user to select, after the message transmission unit 41 receives the message that the wireless local area network hotspot device confirms whether to allow the access of the access terminal to be requested, and generate an indication to allow access or representation according to the user's selection. Information that is not allowed to be accessed;
- the message transmission unit 41 is configured to feed back information indicating that access is permitted or indicates that access is not allowed to the wireless local area network hotspot device.
- the device further includes: a message display unit;
- the message processing unit prompts the user to select:
- the message processing unit instructs the message display unit to present an inquiry message to the user on the screen of the terminal.
- the form of the inquiry message includes, but is not limited to, at least one of a notification bar message or a dialog message; the content of the inquiry message includes a MAC address of the wireless local area network module of the application access terminal or whether it is allowed At least one of the access selection boxes.
- the information indicating that access is allowed is included in a data packet fed back by the feedback module, and a value or a character that allows access is indicated in a predetermined flag bit in the data packet; the information indicating that access is not allowed includes In the data packet fed back by the feedback module, a value or a character that is not allowed to be accessed is indicated on a predetermined flag bit in the data packet.
- the message that the message transmission unit receives the WLAN hotspot device to confirm whether to allow access to the access terminal is:
- a DATA frame of downlink data of the wireless local area network hotspot device by using a fixed message delivery manner established when the terminal accesses the wireless local area network hotspot device, where the DATA frame includes the application connection
- Embodiment 5 A terminal comprising the device of the second embodiment.
- the terminal can be a mobile phone, a tablet, a laptop, a router, etc., which can provide wireless LAN access.
- Embodiment 6 A terminal comprising the apparatus of Embodiment 4.
- the device of the second embodiment and the device of the fourth embodiment may be included in one terminal.
- the implementation example 1 has the initial access terminal as the only access control terminal, and the predetermined mode is the OPEN query mode.
- the system for performing hotspot access in this example is as shown in FIG. 5, and includes:
- the initial access terminal includes a message display unit, a message processing unit, and a message transmission unit.
- the message display unit in the access control terminal is configured to display the query sent from the Wi-Fi hotspot device to the user in the form of an inquiry message for the user to perform the judgment and operation.
- the message processing unit in the access control terminal is configured to process the query sent from the Wi-Fi hotspot device and process the feedback message of the user.
- the processing includes, but is not limited to, disassembly, parsing, and flagging, packaging, and encapsulation of received packets.
- the message transmission unit in the access control terminal is configured to perform transmission and reception of the encapsulated data packet with the Wi-Fi hotspot device.
- the Wi-Fi hotspot device includes an access processing module and an application processing module, wherein the application processing module includes a message processing unit and a message transmission unit.
- the message processing unit in the Wi-Fi hotspot device is configured to process an application message for applying for an access terminal and a related message of the access control terminal.
- the method includes: (1) extracting, from the application message sent by the application for the access terminal, the MAC address information of the Wi-Fi module of the application access terminal, and repackaging and encapsulating the data to be transmitted to the access control terminal. package. (2) Decomposing and parsing the user feedback message data packet sent back by the received access control terminal, decomposing the feedback command from the user and sending it to the access processing module, so that the Wi-Fi hotspot device performs corresponding operations.
- the message transmission unit in the Wi-Fi hotspot device is configured to: (1) receive and feed back an application message for applying for an access terminal; and (2) send and after the encapsulated data packet with the access control terminal. receive.
- Applying for an access terminal including a message processing unit, and a message transmission unit, the message transmission being set to send the application message of the access Wi-Fi hotspot device, and receiving a feedback message of the Wi-Fi hotspot device; the message processing a unit, configured to generate a request message for the user to access the Wi-Fi hotspot device, send the application message to the message transmission unit, and cancel the received feedback
- the information is parsed out and fed back to the user.
- Embodiment 2 A method for quickly accessing a Wi-Fi hotspot device, as shown in FIG. 6, the method includes an initial access terminal (access control terminal), a Wi-Fi hotspot device, and an application access terminal.
- the initial access terminal may be a mobile phone, a PAD, a PC, etc.
- the application access terminal may be a mobile phone, a PAD, a PC, etc.
- the method includes the following steps S101 to S111:
- Step S101 The initial access terminal accesses the Wi-Fi hotspot device, and the access may be, but not limited to, the same as the related art, and is accessed by using a Wi-Fi password.
- Step S102 setting an initial access terminal as an access control terminal on the Wi-Fi hotspot device.
- the initial access terminal has become an access control terminal, and a fixed message delivery mode is established with the Wi-Fi hotspot device.
- step S103 the password policy is selected as the OPEN query mode on the Wi-Fi hotspot device.
- the access control terminal has begun to function, and the user can allow other terminals to access the Wi-Fi hotspot device through the access control terminal.
- Step S104 The application access terminal turns on the Wi-Fi function, searches for the name of the Wi-Fi hotspot device, and clicks to apply for access.
- Step S105 the Wi-Fi hotspot device parses the received application message out of the MAC address information of the Wi-Fi module of the application access terminal, and then adds the flag bit to perform packing and encapsulation.
- Step S106 The Wi-Fi hotspot device merges the encapsulated data packet into a DATA frame of its downlink data, and transmits the data packet to the access control terminal.
- Step S107 After receiving the data packet transmitted by the Wi-Fi hotspot device, the access control terminal performs parsing, detects a fixed flag bit, triggers an inquiry query message to the user, and applies for an access terminal in the inquiry message. The information is presented to the user for the user to make a judgment.
- Step S108 After the user selects whether to allow the access of the application access terminal, the access control terminal adds a receipt message (ie, a feedback message) to the flag bit, performs packing and encapsulation, and integrates the uplink data.
- a receipt message ie, a feedback message
- the DATA frame is passed to the Wi-Fi hotspot device.
- Step S109 the Wi-Fi hotspot device disassembles the received data packet, detects the corresponding flag bit, parses the data, and parses out that "allow access” or “not allow access” Feedback results.
- Step S110 The Wi-Fi hotspot device automatically executes a corresponding command according to the parsed feedback result. If it is information indicating "allow access”, the MAC address of the Wi-Fi module of the application access terminal is automatically added to the "white list” of the Wi-Fi hotspot device; if it is "not allowed to access” The information is that the MAC address of the Wi-Fi module of the application access terminal is still in the "blacklist" of the Wi-Fi hotspot device.
- Step S111 if the application access terminal Wi-Fi module MAC address is added to the "white list" of the Wi-Fi hotspot device, the application access terminal will automatically complete the access; if the application access terminal is applied The Wi-Fi module MAC address is still in the "blacklist" of the Wi-Fi hotspot device and is denied access to the Wi-Fi hotspot device.
- the above technical solution solves the problem that an external person needs to input a complicated password when temporarily accessing a wireless local area network hotspot, avoids the inconvenience of transmitting and inputting the wireless local area hotkey password, and has no security risk of password leakage, thereby improving the user experience. .
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
一种无线局域网的接入控制方法和装置、终端；方法包括：无线局域网热点设备收到申请接入终端的申请接入消息时，向接入控制终端确认是否允许所述终端接入；所述无线局域网热点设备从所述接入控制终端收到表示允许接入的信息后，完成所述申请接入终端的接入。上述技术方案解决了在接入无线局域网热点时，需要输入复杂密码的问题，避免了热点密码在传递时的不便和泄露的风险，提升了用户体验，而且保证了热点的接入是可控的。
Description
本文涉及但不限于通信领域，特别涉及一种无线局域网的接入控制方法及装置、终端。
目前，智能的移动终端已经普遍被人们所接收，智能手机、PAD等产品已经在人们的生活中扮演了不可或缺的角色。这些智能终端之所以这样流行，因为使用它能够随时随地、方便的接入互联网。目前接入互联网的方式主要有通过运营商的3G/4G网络和/或通过无线局域网(比如Wi-Fi热点)，而Wi-Fi热点以其低廉的资费和高稳定性已经被用户普遍使用，尤其在家里和小型的办公环境中。为了保证Wi-Fi热点的私有性和安全性，其都具有一定的安全策略，目前较为常用的安全策略包括三种模式：(1)OPEN(开放)；(2)WPA(Wi-Fi Protected Access，Wi-Fi保护接入)PSK(pre-shared key，预共享密钥)；(3)WPA2 PSK。第一种模式下，终端的接入不需要任何鉴权，只要在搜索列表中点击Wi-Fi热点的名称即可接入。第二种和第三种模式都给Wi-Fi热点进行了加密，终端接入的时候需要输入相应的密码，密码正确才可以接入。Wi-Fi热点安全策略的出厂默认设置一般都选择了安全性较高的WPA2 PSK，而且密码是超过8位的较为复杂的一串随机数。为了保证自己热点不被盗用，热点的拥有者一般也会设置较为复杂的密码。这样在其他用户想接入这个热点的时候，拥有者需要将这个复杂的、难以一下说清楚的密码告知接入者，反复几次，很不方便，在告知的过程中也可能被不相关的人获取，存在泄密的风险；而且由于密码较为复杂，输入时还容易出错。尤其在家庭聚会，或者人员来往较多的小型办公场所，申请接入热点的人较多，就显得更为不便。
发明内容
以下是对本文详细描述的主题的概述。本概述并非是为了限制权利要求的保护范围。
本发明实施例提供一种快捷的无线局域网的接入控制方法和装置、终端，以解决如何避免在接入无线局域网热点时，输入密码带来的密码传递不便和泄露的问题。
本发明实施例提供了一种无线局域网的接入控制方法，包括：
无线局域网热点设备收到申请接入终端的申请接入消息时，向接入控制终端确认是否允许所述终端接入；
所述无线局域网热点设备从所述接入控制终端收到表示允许接入的信息后，完成所述申请接入终端的接入。
可选地，所述接入控制终端包括以下任一种或多种：
所述无线局域网热点设备本身；
所述无线局域网热点设备的初始接入终端，即所述无线局域网热点设备上电后第一个通过无线局域网接入该无线局域网热点设备的终端；
预先设置的接入控制终端。
可选地，所述方法还包括：所述向接入控制终端确认是否允许所述申请接入终端接入前，
所述无线局域网热点设备在所保存的允许接入的终端标识集合中查找所述申请接入终端的终端标识，如果查找不到，则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作；如果能查找到，则不进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作。
可选地，所述终端标识是终端的无线局域网模块MAC地址。
可选地，所述方法还包括：所述向接入控制终端确认是否允许所述申请接入终端接入前，
所述无线局域网热点设备查询当前的密码策略；如果当前的密码策略是预定模式则进行所述向接入控制终端确认是否允许所述申请接入终端接入的步骤。
可选地，所述表示允许接入的信息包括在所述接入控制终端反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述接入控制终端反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
可选地，所述的方法还包括：
所述无线局域网热点设备从所述接入控制终端收到表示不允许接入的信息后，拒绝所述申请接入终端的接入。
可选地，所述申请消息包括所述申请接入终端的无线局域网模块的MAC地址；
当所述接入控制终端不是所述无线局域网设备本身时，所述向所述接入控制终端确认是否允许申请接入终端接入无线局域网热点设备包括：
所述无线局域网热点设备将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来，加入自己的广播消息中进行发送；所述广播消息用于触发所述接入控制终端呈现询问消息给用户；
或者，
所述无线局域网热点设备将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来后，加入标志位，进行打包和封装，合入其下行数据的DATA帧中，采用所述接入控制终端接入时所建立的固定消息传递方式传递给所述接入控制终端；所述标志位用于触发所述接入控制终端呈现询问消息给用户。
可选地，所述询问消息的形式包括通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
一种无线局域网的接入控制方法，包括：
终端收到无线局域网热点设备确认是否允许申请接入终端接入的消息后，提示用户选择，根据用户的选择生成表示允许接入或表示不允许接入的信息；
所述终端反馈所述表示允许接入或表示不允许接入的信息给所述无线局域网热点设备。
可选地，提示用户选择包括：
在所述终端的屏幕上呈现询问消息给用户。
可选地，所述询问消息的形式包括通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
可选地，所述表示允许接入的信息包括在所述终端反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述终端反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
可选地，所述终端收到无线局域网热点设备确认是否允许申请接入终端接入的消息包括：
所述终端收到所述无线局域网热点设备的广播消息，所述广播消息中包括所述申请接入终端的无线局域网模块的MAC地址；
或者，
所述终端通过接入所述无线局域网热点设备时所建立的固定消息传递方式，收到所述无线局域网热点设备的下行数据的DATA帧，所述DATA帧中包括所述申请接入终端的无线局域网模块的MAC地址及用于触发的标志位。
一种无线局域网的接入控制装置，设置于无线局域网热点设备中，包括：
申请处理模块，设置为当所述无线局域网热点设备收到申请接入终端的申请消息时，向接入控制终端确认是否允许所述申请接入终端接入；
接入处理模块，设置为从所述接入控制终端收到表示允许接入的信息后，完成所述申请接入终端的接入。
可选地，所述接入控制终端包括以下任一种或多种：
所述无线局域网热点设备本身；
所述无线局域网热点设备的初始接入终端，即所述无线局域网热点设备上电后第一个通过无线局域网接入该无线局域网热点设备的终端；
预先设置的接入控制终端。
可选地，所述申请处理模块还设置为询问接入控制终端是否允许所述申请接入终端接入前，在所保存的允许接入的终端标识集合中查找所述申请接入终端的终端标识，如果查找不到则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作；如果能查找到则不进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作。
可选地，所述终端标识是终端的无线局域网模块MAC地址。
可选地，所述申请处理模块还设置为在向接入控制终端确认是否允许所述申请接入终端接入前，查询当前的密码策略；如果当前的密码策略是预定模式则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作。
可选地，所述表示允许接入的信息包括在所述接入控制终端反馈的数据包中，在预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述接入控制终端反馈的数据包中，在预定的标志位上表示不允许接入的数值或字符。
可选地，接入处理模块还设置为收到表示不允许接入的信息后，拒绝所述申请接入终端的接入。
可选地，所述申请消息包括所述申请接入终端的无线局域网模块的MAC地址；
当所述接入控制终端不是所述无线局域网设备本身时，所述申请处理模块包括：消息处理单元和消息传输单元；
所述消息处理单元设置为将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来，加入自己的广播消息；所述广播消息用于触发所述接入控制终端呈现询问消息给用户；
所述消息传输单元设置为对所述广播消息进行发送；
或者，
所述消息处理单元设置为将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来后，加入标志位，进行打包和封装，合入其下行数据的DATA帧中；所述标志位用于触发所述接入控制终端呈现询问消息给用户；
所述消息传输单元设置为采用所述接入控制终端接入时所建立的固定消息传递方式传递给所述接入控制终端。
可选地，所述询问消息的形式包括通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
一种终端，包括上述的装置。
一种无线局域网的接入控制装置，设置于终端中，包括：消息传输单元、消息处理单元；
所述消息处理单元设置为当所述消息传输单元收到无线局域网热点设备确认是否允许申请接入终端接入的消息后，提示用户选择，根据用户的选择生成表示允许接入或表示不允许接入的信息；
所述消息传输单元设置为将所述表示允许接入或表示不允许接入的信息反馈给所述无线局域网热点设备。
可选地，所述的装置还包括：消息显示单元；
所述消息处理单元是设置为通过如下方式实现提示用户选择：
指示所述消息显示单元在所述终端的屏幕上呈现询问消息给用户。
可选地，所述询问消息的形式包括通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
可选地，所述表示允许接入的信息包括在所述反馈模块反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述反馈模块反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
可选地，所述消息传输单元是设置为通过如下方式实现收到无线局域网热点设备确认是否允许申请接入终端接入的消息：
收到所述无线局域网热点设备的广播消息，所述广播消息中包括所述申请接入终端的无线局域网模块的MAC地址；
或者，
所述消息传输单元通过所在终端接入所述无线局域网热点设备时所建立的固定消息传递方式，收到所述无线局域网热点设备的下行数据的DATA帧，所述DATA帧中包括所述申请接入终端的无线局域网模块的MAC地址及用于触发的标志位。
一种终端，包括上述的装置。
本发明实施例提供了一种快捷的无线局域网的接入控制方法和装置、终端，所述方法包括：用户可设置无线局域网热点设备的接入控制终端，如有其他终端申请接入此无线局域网热点设备，此无线局域网热点设备会根据申请消息询问所述接入控制终端，由用户直接决定是否同意接入。此方法解决了外部人员在临时接入无线局域网热点时，需要输入复杂密码的问题，避免了无线局域网热点密码在传递和输入时的不便，而且不存在密码泄露的安全隐患，提升了用户体验。
在阅读并理解了附图和详细描述后，可以明白其他方面。
附图概述
图1是本发明实施例一的无线局域网的接入控制方法的流程图；
图2是本发明实施例二的无线局域网的接入控制装置示意图；
图3是本发明实施例三的无线局域网的接入控制方法的流程图；
图4是本发明实施例四的无线局域网的接入控制装置示意图；
图5是实施示例1的示意图；
图6是实施示例2的流程图。
下面将结合附图及实施例对本发明实施例的技术方案进行更详细的说明。
需要说明的是，如果不冲突，本发明实施例以及实施例中的各个特征可以相互结合，均在本申请的保护范围之内。另外，虽然在流程图中示出了逻辑顺序，但是在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤。
实施例一、一种无线局域网的接入控制方法，如图1所示，包括：
S10、无线局域网热点设备收到申请接入终端的申请消息时，向接入控制终端确认是否允许所述申请接入终端接入；
S20、所述无线局域网热点设备从所述接入控制终端收到表示允许接入的信息后，完成所述申请接入终端的接入。
可选地，所述步骤S20还可以包括：所述无线局域网热点设备从所述接入控制终端收到表示不允许接入的信息后，拒绝所述申请接入终端的接入。
可选地，所述无线局域网的接入形式可以包括接入Wi-Fi热点，也可以包括其它接入无线局域网的形式。
可选的，所述无线局域网热点设备如果在预定时间内未收到所述接入控制终端的任何信息，也可以拒绝所述申请接入终端接入。
可选的，所述接入控制终端包括以下任一种或任几种：
所述无线局域网热点设备本身；
所述无线局域网热点设备的初始接入终端，即所述无线局域网热点设备上电后，第一个通过无线局域网接入该无线局域网热点设备的终端；
预先设置的接入控制终端；
可以但不限于通过在所述无线局域网热点设备中存储终端标识来预先设置所述接入控制终端。用户还可以根据需要自行设计选择被选为接入控制终
端的预定条件，从而使所述无线局域网热点设备能够自动选定相应的终端作为接入控制终端。
对于所述无线局域网热点设备而言，在向接入控制终端确认是否允许所述申请接入终端接入之前，所述接入控制终端就是已经选定的，可以由用户预先设置或临时设置、也可以根据预定条件自动选定；所述接入控制终端可以始终保持不变，也可以由用户根据需要调整成其它终端或由所述无线局域网热点设备根据预定条件自动调整。
可选的，所述接入控制终端和申请接入终端均搭载有操作***，包括但不限于Android，IOS，Windows，以及基于Linux的其它操作***。所述无线局域网热点设备也搭载有操作***，包括但不限于Android，IOS，Windows，以及基于Linux的其它操作***。
可选的，可通过直接登录所述无线局域网热点设备的控制界面设置或修改所述接入控制终端的终端标识，也可以通过目前的接入控制终端进行设置接入控制终端的终端标识；通过设置所述接入控制终端的终端标识，可以使所述无线局域网热点设备具备将任意一个已经通过无线局域网接入的终端设置为接入控制终端的功能。
可选地，所述接入控制终端可以设定为只能有一个，也可以设定为包括一个或多个。
有多个接入控制终端的情况比如：属于同一个用户的手机、平板，这样可以使具有接入控制权限的用户无论在使用哪个终端，都可以收到所述申请消息，并选择是否同意接入。当有多个接入控制终端时，可以分别设定每个接入控制终端的控制优先级，这样如果对于同一个申请消息，有的接入控制终端允许，有的不允许，则以控制优先级最高的接入控制终端为准。还可以分别设定每个接入控制终端的控制权限，比如有的接入控制终端除了处理所述申请消息外，还可以对所述无线局域网热点设备的所有接入控制终端进行管理(比如添加、修改、删除、设置控制优先级等)，有的则只能对申请消息选择是否同意接入。
当设定接入控制终端只能有一个时，如果用户将一台接入的终端设置为接入控制终端，那么在取消设置之前，其他接入设备将不能被设置为接入控
制终端。
可选地，所述向接入控制终端确认是否允许所述申请接入终端接入前还包括：所述无线局域网热点设备查询当前的密码策略；如果当前的密码策略是预定模式则进行所述向接入控制终端确认是否允许所述申请接入终端接入的步骤；如果不是所述预定模式，而是其它相关的模式，则按照相关技术中该模式对应的操作进行后续处理。
可选地，所述预定模式可以但不限于称为OPEN询问模式；所述接入控制终端只在无线局域网热点设备的密码策略为OPEN询问模式时生效，在其他密码策略下不生效。
当所述无线局域网热点设备为OPEN询问模式的密码策略(即：处于预定模式)，并设置好了接入控制终端时，所述无线局域网热点设备会在收到其他申请接入终端的申请消息后询问接入控制终端，用户可在接入控制终端上决定是否允许其他申请接入终端接入所述无线局域网热点设备。
可选的，所述无线局域网热点设备的控制界面中包括有密码策略的设置界面或选项，包括但不限于(1)OPEN询问模式，(2)OPEN模式，(3)WPA-PSK模式，(4)WPA2-PSK模式。
可选的，所述的OPEN询问模式不同于Wi-Fi联盟802.11协议中所述的OPEN模式。当无线局域网热点设备的密码策略处于OPEN模式时，任何申请接入终端都处于无线局域网热点设备的“白名单”中，都可以在不用输入任何密码的情况下自由接入无线局域网热点设备。当无线局域网热点设备的密码策略处于OPEN询问模式时，只有所述的接入控制终端处于无线局域网热点设备的“白名单”中，其它所有终端都处于无线局域网热点设备的“黑名单”中。申请接入终端发起接入无线局域网热点设备的申请，无线局域网热点设备会将申请接入终端的申请消息发给所述接入控制终端，由用户操作所述接入控制终端来决定是否允许申请接入终端的接入。如果允许，则申请接入终端会自动被添加至无线局域网热点设备的“白名单”中，接入过程可以完成。如果不允许，则申请接入终端仍处于无线局域网热点设备的“黑名单”中，接入过程终止。
可选的，也可以设置除了所述接入控制终端以外，任何其它终端每次申
请接入时都需要所述接入控制终端允许后才能接入；比如，即使一个终端之前曾经被允许接入过，但断开后再次接入时，还需要再次得到所述接入控制终端的允许。
可选的，所述接入控制终端还可以为不同的申请接入终端设置不同的允许类型，比如包括永久允许和暂时允许；永久允许就是将所述申请接入终端添加进了“白名单”；暂时允许就是只允许本次接入，以后再次接入还需要再次申请。
可选地，所述向接入控制终端确认是否允许所述申请接入终端接入前还包括：
所述无线局域网热点设备在所保存的允许接入的终端标识集合中查找所述申请接入终端的终端标识，如果查找不到则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作；如果能查找到则不进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作，还可以直接完成所述申请接入终端的接入过程。
可选的，所述终端标识(包括预置的接入控制终端的终端标识、所述“白名单”和“黑名单”中记录的终端标识等)是终端的无线局域网模块(包括但不限于Wi-Fi模块)MAC地址，来确保与终端的一一对应。
可选的，所述无线局域网热点设备收到的所述申请接入终端的申请消息，其内容主要包括但不限于所述申请接入终端的无线局域网模块的MAC地址。
可选的，当所述接入控制终端不是所述无线局域网热点设备本身时，所述无线局域网热点设备向所述接入控制终端确认是否允许申请接入终端接入无线局域网热点设备的过程至少包括两种不同的实现方式。
第一种可选的实现方式为：
所述无线局域网热点设备将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来，加入自己的广播消息中进行发送；所述广播消息用于触发所述接入控制终端呈现询问消息给用户；
具体为：
所述无线局域网热点设备在收到申请消息后，将其中的申请接入终端的
无线局域网模块的MAC地址等信息解析出来，并加入自己的广播消息中进行发送。当所述接入控制终端检索到这类广播消息后，会自动解析，并以询问消息的方式呈现给用户，供用户进行判断。
第二种可选的实现方式为：
所述无线局域网热点设备将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来后，加入标志位，进行打包和封装，合入其下行数据的DATA帧中，采用所述接入控制终端接入时所建立的固定消息传递方式传递给所述接入控制终端；所述标志位用于触发所述接入控制终端呈现询问消息给用户。
具体为：
所述接入控制终端接入所述无线局域网热点设备后，会与所述无线局域网热点设备建立一种固定的消息传递方式。所述无线局域网热点设备将所述申请消息中的申请接入终端的无线局域网模块的MAC地址等信息解析出来后，加入标志位，进行打包和封装，合入其下行数据的DATA帧中，传递给所述接入控制终端。接入控制终端接收到无线局域网热点设备传递过来的数据包后，进行解析，检测到固定的标志位，就触发询问消息，并以询问消息的方式呈现给用户，供用户进行判断。
可选的，当所述接入控制终端是所述无线局域网热点设备本身时，可以在收到所述申请消息后就直接触发询问消息，并直接得到用户选择的结果。
可选的，所述询问消息的形式包括但不限于以下至少一种：(1)通知栏消息；(2)对话框消息。所述询问消息的内容包括但不限于以下至少一种：(1)所述申请接入终端的无线局域网模块MAC地址；(2)是否允许接入的选择框。
可选的，所述接入控制终端告知无线局域网热点设备是否允许所述申请接入终端接入，其可选的一种具体实现过程如下：
所述接入控制终端接入所述无线局域网热点设备后，会与所述无线局域网热点设备建立一种固定的消息传递方式。当用户对是否允许所述申请接入终端接入进行选择后，接入控制终端会将回执消息加入表示是否允许接入的标志位，进行打包和封装，合入其上行数据的DATA帧中，传递给无线局域
网热点设备。
如果所述接入控制终端是检索到广播消息后触发呈现询问消息，也是在反馈给所述无线局域网热点设备的数据包中携带上述标志位。
相应的，无线局域网热点设备将从所述接入控制终端收到的数据包进行拆解，检测到对应的标志位，将该标示位上的数据进行解析，解析出表示“允许接入”或者表示“不允许接入”的数值后，执行相应的操作。
可选地，所述表示允许接入的信息包括在所述接入控制终端反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述接入控制终端反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
下面用一个可选实施方式的例子进一步说明本实施例，该例子中以Wi-Fi热点设备作为无线局域网热点设备，以初始接入终端作为唯一的接入控制终端，所述预定模式为OPEN询问模式；该例子包括步骤A～E：
A.所述初始接入终端成功接入Wi-Fi热点设备后，登录所述Wi-Fi热点设备的控制界面，将初始接入终端设置为接入控制终端。
B.所述初始接入终端在所述Wi-Fi热点设备的控制界面将Wi-Fi热点设备的密码策略修改为OPEN询问模式。
C.所述申请接入终端打开Wi-Fi功能，搜索Wi-Fi热点设备的名称，并点击申请接入。
D.所述Wi-Fi热点设备收到所述申请接入终端的申请消息，并通过广播消息或固定的消息传递方式将所述申请接入终端的Wi-Fi模块的MAC地址发送给初始接入终端，询问是否允许申请接入终端接入Wi-Fi热点设备。
E.所述初始接入终端接收到Wi-Fi热点设备发送的关于步骤D中的询问后，若选择允许接入，则申请接入终端会成功接入Wi-Fi热点设备；若选择不允许接入，则申请接入终端不会接入Wi-Fi热点设备。
本发明实施例还提供了一种计算机存储介质，所述计算机存储介质中存储有计算机可执行指令，所述计算机可执行指令用于执行上述方法。
实施例二、一种无线局域网的接入控制装置20，设置于无线局域网热点设备中，如图2所示，包括：
申请处理模块21，设置为当所述无线局域网热点设备收到申请接入终端的申请消息时，向接入控制终端确认是否允许所述申请接入终端接入；
接入处理模块22，设置为从所述接入控制终端收到表示允许接入的信息后，完成所述申请接入终端的接入过程。
可选地，所述接入处理模块22还可以设置为收到表示不允许接入的信息后，终止所述申请接入终端的接入过程。
可选地，所述接入控制终端包括以下任一种或任几种：
所述无线局域网热点设备本身；
所述无线局域网热点设备的初始接入终端，即所述无线局域网热点设备上电后第一个通过无线局域网接入该无线局域网热点设备的终端；
预先设置的接入控制终端。
可选地，所述申请处理模块21还设置为向接入控制终端确认是否允许所述申请接入终端接入前，在所保存的允许接入的终端标识集合中查找所述申请接入终端的终端标识，如果查找不到则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作；如果能查找到则不进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作，还可以指示所述接入处理模块完成所述申请接入终端的接入过程。
可选地，所述终端标识是终端的无线局域网模块MAC地址。
可选地，所述申请处理模块还设置为在向接入控制终端确认是否允许所述申请接入终端接入前，查询当前的密码策略；如果当前的密码策略是预定模式则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作。
可选地，所述申请消息包括所述申请接入终端的无线局域网模块的MAC地址；
当所述接入控制终端不是所述无线局域网设备本身时，所述申请处理模块21包括：消息处理单元和消息传输单元；
所述消息处理单元设置为将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来，加入自己的广播消息；所述广播消息用于触发所述接入控制终端呈现询问消息给用户；
所述消息传输单元设置为对所述广播消息进行发送；
或者，
所述消息处理单元设置为将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来后，加入标志位，进行打包和封装，合入其下行数据的DATA帧中；所述标志位用于触发所述接入控制终端呈现询问消息给用户；
所述消息传输单元设置为采用所述接入控制终端接入时所建立的固定消息传递方式传递给所述接入控制终端。
可选地，所述询问消息的形式包括但不限于通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
可选地，所述表示允许接入的信息包括在所述接入控制终端反馈的数据包中，在预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述接入控制终端反馈的数据包中，在预定的标志位上表示不允许接入的数值或字符。
实施例三、一种无线局域网的接入控制方法，如图3所示，包括：
S30、终端收到无线局域网热点设备确认是否允许申请接入终端接入的消息后，提示用户选择，根据用户的选择相应生成表示允许接入或表示不允许接入的信息；
S40、所述终端反馈所述表示允许接入或表示不允许接入的信息给所述无线局域网热点设备。
可选地，所述提示用户选择包括：
在所述终端的屏幕上呈现询问消息给用户。
可选地，所述询问消息的形式包括但不限于通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
可选地，所述表示允许接入的信息包括在所述终端反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述终端反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
可选地，所述终端收到无线局域网热点设备确认是否允许申请接入终端接入的消息包括：
所述终端收到所述无线局域网热点设备的广播消息，所述广播消息中包括所述申请接入终端的无线局域网模块的MAC地址；
或者，
所述终端通过接入所述无线局域网热点设备时所建立的固定消息传递方式，收到所述无线局域网热点设备的下行数据的DATA帧，所述DATA帧中包括所述申请接入终端的无线局域网模块的MAC地址及用于触发的标志位。
本发明实施例还提供了一种计算机存储介质，所述计算机存储介质中存储有计算机可执行指令，所述计算机可执行指令用于执行上述方法。
实施例四、一种无线局域网的接入控制装置40，设置于终端中，如图4所示，包括：消息传输单元41、消息处理单元42；
所述消息处理单元42设置为当所述消息传输单元41收到无线局域网热点设备确认是否允许申请接入终端接入的消息后，提示用户选择，根据用户的选择相应生成表示允许接入或表示不允许接入的信息；
所述消息传输单元41设置为将所述表示允许接入或表示不允许接入的信息反馈给所述无线局域网热点设备。
可选地，所述的装置还包括：消息显示单元；
所述消息处理单元提示用户选择是指：
所述消息处理单元指示所述消息显示单元在所述终端的屏幕上呈现询问消息给用户。
可选地，所述询问消息的形式包括但不限于通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
可选地，
所述表示允许接入的信息包括在所述反馈模块反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述反馈模块反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
可选地，所述消息传输单元收到无线局域网热点设备确认是否允许申请接入终端接入的消息是指：
所述消息传输单元收到所述无线局域网热点设备的广播消息，所述广播消息中包括所述申请接入终端的无线局域网模块的MAC地址；
或者，
所述消息传输单元通过所在终端接入所述无线局域网热点设备时所建立的固定消息传递方式，收到所述无线局域网热点设备的下行数据的DATA帧，所述DATA帧中包括所述申请接入终端的无线局域网模块的MAC地址及用于触发的标志位。
实施例五、一种终端，包括实施例二的装置。
该终端可以是手机、平板、笔记本电脑、路由器等可以提供无线局域网接入的设备。
实施例六、一种终端，包括实施例四的装置。
一个终端中可以既包括实施例二的装置，又包括实施例四的装置。
下面提供两个实施示例。
实施示例1以初始接入终端作为唯一的接入控制终端，所述预定模式为OPEN询问模式；该示例中进行热点接入的***如图5所示，包括：
初始接入终端(接入控制终端)，包括消息显示单元，消息处理单元，消息传输单元。
可选的，所述接入控制终端中的消息显示单元，设置为将从Wi-Fi热点设备传来的询问以询问消息的形式显示给用户，供用户进行判断和操作。
可选的，所述接入控制终端中的消息处理单元，设置为处理从Wi-Fi热点设备传来的询问和处理用户的反馈消息。其处理过程包括但不限于对收到数据包的拆解、解析，以及对用户的反馈消息增加标志位、打包和封装。
可选的，所述接入控制终端中的消息传输单元，设置为与Wi-Fi热点设备间进行封装后数据包的发送和接收。
Wi-Fi热点设备，包括接入处理模块和申请处理模块，其中申请处理模块包括消息处理单元，消息传输单元。
可选的，所述Wi-Fi热点设备中的消息处理单元，设置为处理申请接入终端的申请消息和接入控制终端的相关消息。可选的，包括：(1)从申请接入终端发送的申请消息中提取申请接入终端Wi-Fi模块MAC地址信息，并将其重新打包、封装，成为可以传输给接入控制终端的数据包。(2)将接收到的接入控制终端发回的用户反馈消息数据包进行拆解和解析，将用户反馈的命令分解出来发送给接入处理模块，使得Wi-Fi热点设备进行相应的操作。
可选的，所述Wi-Fi热点设备中的消息传输单元，设置为(1)接收和反馈申请接入终端的申请消息；(2)与接入控制终端间进行封装后数据包的发送和接收。
申请接入终端，包括消息处理单元，以及消息传输单元，所述消息传输设置为发送所述接入Wi-Fi热点设备的申请消息，以及接收Wi-Fi热点设备的反馈消息；所述消息处理单元，设置为将用户接入Wi-Fi热点设备的申请生成申请消息，将所述申请消息发送给消息传输单元；以及将接收到的反馈消
息解析出来反馈给所述请接入用户。
实施示例2、一种能够快捷接入Wi-Fi热点设备的方法，如图6所示，该方法包括初始接入终端(接入控制终端)、Wi-Fi热点设备和申请接入终端。其中初始接入终端可以是手机、PAD、PC机等，申请接入终端可以是手机、PAD、PC机等，方法包括以下步骤S101～S111：
步骤S101，所述初始接入终端接入所述Wi-Fi热点设备，此接入可以但不限于与相关技术相同，采用输入Wi-Fi密码的方式接入。
步骤S102，在所述Wi-Fi热点设备上将初始接入终端设置为接入控制终端。此时，初始接入终端已经变成接入控制终端，与Wi-Fi热点设备建立了一种固定的消息传递方式。
步骤S103，在所述Wi-Fi热点设备上将密码策略选择为OPEN询问方式，此时接入控制终端已经开始发挥作用，用户能够通过接入控制终端允许其他终端接入Wi-Fi热点设备。
步骤S104，所述申请接入终端打开Wi-Fi功能，搜索Wi-Fi热点设备的名称，并点击申请接入。
步骤S105，所述Wi-Fi热点设备将收到的申请消息解析出申请接入终端的Wi-Fi模块的MAC地址信息后，加入标志位，进行打包和封装。
步骤S106，所述Wi-Fi热点设备将封装后的数据包合入其下行数据的DATA帧中，传递给接入控制终端。
步骤S107，所述接入控制终端接收到Wi-Fi热点设备传递过来的数据包后，进行解析，检测到固定的标志位，就触发呈现询问消息给用户，在询问消息中将申请接入终端的信息呈现给用户，供用户进行判断。
步骤S108，当用户对是否允许所述申请接入终端接入进行选择后，所述接入控制终端会将回执消息(即：反馈消息)加入标志位，进行打包和封装，合入其上行数据的DATA帧中，传递给Wi-Fi热点设备。
步骤S109，所述Wi-Fi热点设备将收到的数据包进行拆解，检测到对应的标志位，将数据进行解析，解析出表示“允许接入”或者“不允许接入”
的反馈结果。
步骤S110，所述Wi-Fi热点设备根据解析出的反馈结果自动执行相应的命令。如果是表示“允许接入”的信息，则自动将所述申请接入终端Wi-Fi模块的MAC地址加入Wi-Fi热点设备的“白名单”中；如果是表示“不允许接入”的信息，则所述申请接入终端Wi-Fi模块的MAC地址仍处于Wi-Fi热点设备的“黑名单”中。
步骤S111，如果将所述申请接入终端Wi-Fi模块MAC地址加入Wi-Fi热点设备的“白名单”中，则所述申请接入终端将自动完成接入；如果所述申请接入终端Wi-Fi模块MAC地址仍处于Wi-Fi热点设备的“黑名单”中，则被拒绝接入该Wi-Fi热点设备。
本领域普通技术人员可以理解上述方法中的全部或部分步骤可通过程序来指令相关硬件完成，所述程序可以存储于计算机可读存储介质中，如只读存储器、磁盘或光盘等。可选地，上述实施例的全部或部分步骤也可以使用一个或多个集成电路来实现。相应地，上述实施例中的各模块/单元可以采用硬件的形式实现，也可以采用软件功能模块的形式实现。本申请不限制于任何特定形式的硬件和软件的结合。
虽然本申请所揭露的实施方式如上，但所述的内容仅为便于理解本申请而采用的实施方式，并非用以限定本申请。
上述技术方案解决了外部人员在临时接入无线局域网热点时，需要输入复杂密码的问题，避免了无线局域网热点密码在传递和输入时的不便，而且不存在密码泄露的安全隐患，提升了用户体验。
Claims (30)
- 一种无线局域网的接入控制方法，包括：无线局域网热点设备收到申请接入终端的申请接入消息时，向接入控制终端确认是否允许所述终端接入；所述无线局域网热点设备从所述接入控制终端收到表示允许接入的信息后，完成所述申请接入终端的接入。
- 如权利要求1所述的方法，其中，所述接入控制终端包括以下任一种或多种：所述无线局域网热点设备本身；所述无线局域网热点设备的初始接入终端，即所述无线局域网热点设备上电后第一个通过无线局域网接入该无线局域网热点设备的终端；预先设置的接入控制终端。
- 如权利要求1所述的方法，所述方法还包括：所述向接入控制终端确认是否允许所述申请接入终端接入前，所述无线局域网热点设备在所保存的允许接入的终端标识集合中查找所述申请接入终端的终端标识，如果查找不到，则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作；如果能查找到，则不进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作。
- 如权利要求3所述的方法，其中：所述终端标识是终端的无线局域网模块媒体访问控制MAC地址。
- 如权利要求1所述的方法，所述方法还包括：所述向接入控制终端确认是否允许所述申请接入终端接入前，所述无线局域网热点设备查询当前的密码策略；如果当前的密码策略是预定模式则进行所述向接入控制终端确认是否允许所述申请接入终端接入的步骤。
- 如权利要求1所述的方法，其中：所述表示允许接入的信息包括在所述接入控制终端反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述接入控制终端反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
- 如权利要求1所述的方法，还包括：所述无线局域网热点设备从所述接入控制终端收到表示不允许接入的信息后，拒绝所述申请接入终端的接入。
- 如权利要求1-7任意一项所述的方法，其中：所述申请消息包括所述申请接入终端的无线局域网模块的媒体访问控制MAC地址；当所述接入控制终端不是所述无线局域网设备本身时，所述向所述接入控制终端确认是否允许申请接入终端接入无线局域网热点设备包括：所述无线局域网热点设备将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来，加入自己的广播消息中进行发送；所述广播消息用于触发所述接入控制终端呈现询问消息给用户；或者，所述无线局域网热点设备将所述申请消息中所述申请接入终端的无线局域网模块的媒体访问控制MAC地址信息解析出来后，加入标志位，进行打包和封装，合入其下行数据的数据DATA帧中，采用所述接入控制终端接入时所建立的固定消息传递方式传递给所述接入控制终端；所述标志位用于触发所述接入控制终端呈现询问消息给用户。
- 如权利要求8所述的方法，其中，所述询问消息的形式包括通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
- 一种无线局域网的接入控制方法，包括：终端收到无线局域网热点设备确认是否允许申请接入终端接入的消息后，提示用户选择，根据用户的选择生成表示允许接入或表示不允许接入的信息；所述终端反馈所述表示允许接入或表示不允许接入的信息给所述无线局域网热点设备。
- 如权利要求10所述的方法，其中，提示用户选择包括：在所述终端的屏幕上呈现询问消息给用户。
- 如权利要求11所述的方法，其中，所述询问消息的形式包括通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的媒体访问控制MAC地址或者是否允许接入的选择框中的至少一种。
- 如权利要求10所述的方法，其中：所述表示允许接入的信息包括在所述终端反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述终端反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
- 如权利要求10-13任意一项所述的方法，其中，所述终端收到无线局域网热点设备确认是否允许申请接入终端接入的消息包括：所述终端收到所述无线局域网热点设备的广播消息，所述广播消息中包括所述申请接入终端的无线局域网模块的媒体访问控制MAC地址；或者，所述终端通过接入所述无线局域网热点设备时所建立的固定消息传递方式，收到所述无线局域网热点设备的下行数据的数据DATA帧，所述DATA帧中包括所述申请接入终端的无线局域网模块的媒体访问控制MAC地址及用于触发的标志位。
- 一种设置于无线局域网热点设备中的无线局域网的接入控制装 置，包括：申请处理模块，设置为当所述无线局域网热点设备收到申请接入终端的申请消息时，向接入控制终端确认是否允许所述申请接入终端接入；接入处理模块，设置为从所述接入控制终端收到表示允许接入的信息后，完成所述申请接入终端的接入。
- 如权利要求15所述的装置，其中，所述接入控制终端包括以下任一种或多种：所述无线局域网热点设备本身；所述无线局域网热点设备的初始接入终端，即所述无线局域网热点设备上电后第一个通过无线局域网接入该无线局域网热点设备的终端；预先设置的接入控制终端。
- 如权利要求15所述的装置，所述申请处理模块，还设置为询问接入控制终端是否允许所述申请接入终端接入前，在所保存的允许接入的终端标识集合中查找所述申请接入终端的终端标识，如果查找不到则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作；如果能查找到则不进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作。
- 如权利要求17所述的装置，其中：所述终端标识是终端的无线局域网模块MAC地址。
- 如权利要求15所述的装置，所述申请处理模块，还设置为在向接入控制终端确认是否允许所述申请接入终端接入前，查询当前的密码策略；如果当前的密码策略是预定模式则进行所述向接入控制终端确认是否允许所述申请接入终端接入的操作。
- 如权利要求15所述的装置，其中：所述表示允许接入的信息包括在所述接入控制终端反馈的数据包中，在 预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述接入控制终端反馈的数据包中，在预定的标志位上表示不允许接入的数值或字符。
- 如权利要求15所述的装置，接入处理模块，还设置为收到表示不允许接入的信息后，拒绝所述申请接入终端的接入。
- 如权利要求15～21任意一项所述的装置，其中：所述申请消息包括所述申请接入终端的无线局域网模块的媒体访问控制MAC地址；当所述接入控制终端不是所述无线局域网设备本身时，所述申请处理模块包括：消息处理单元和消息传输单元；所述消息处理单元，设置为将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来，加入自己的广播消息；所述广播消息用于触发所述接入控制终端呈现询问消息给用户；所述消息传输单元，设置为对所述广播消息进行发送；或者，所述消息处理单元，设置为将所述申请消息中所述申请接入终端的无线局域网模块的MAC地址信息解析出来后，加入标志位，进行打包和封装，合入其下行数据的数据DATA帧中；所述标志位用于触发所述接入控制终端呈现询问消息给用户；所述消息传输单元，设置为采用所述接入控制终端接入时所建立的固定消息传递方式传递给所述接入控制终端。
- 如权利要求22所述的装置，其中，所述询问消息的形式包括通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的MAC地址或者是否允许接入的选择框中的至少一种。
- 一种终端，包括如权利要求15～23任意一项所述的装置。
- 一种设置于终端中的无线局域网的接入控制装置，包括：消息传输单元、消息处理单元；所述消息处理单元，设置为当所述消息传输单元收到无线局域网热点设备确认是否允许申请接入终端接入的消息后，提示用户选择，根据用户的选择生成表示允许接入或表示不允许接入的信息；所述消息传输单元，设置为将所述表示允许接入或表示不允许接入的信息反馈给所述无线局域网热点设备。
- 如权利要求25所述的装置，还包括：消息显示单元；所述消息处理单元是设置为通过如下方式实现提示用户选择：指示所述消息显示单元在所述终端的屏幕上呈现询问消息给用户。
- 如权利要求26所述的装置，其中，所述询问消息的形式包括通知栏消息或者对话框消息中的至少一种；所述询问消息的内容包括所述申请接入终端的无线局域网模块的媒体访问控制MAC地址或者是否允许接入的选择框中的至少一种。
- 如权利要求25所述的装置，其中：所述表示允许接入的信息包括在所述反馈模块反馈的数据包中，在所述数据包中预定的标志位上表示允许接入的数值或字符；所述表示不允许接入的信息包括在所述反馈模块反馈的数据包中，在所述数据包中预定的标志位上表示不允许接入的数值或字符。
- 如权利要求25-28任意一项所述的装置，其中，所述消息传输单元是设置为通过如下方式实现收到无线局域网热点设备确认是否允许申请接入终端接入的消息：收到所述无线局域网热点设备的广播消息，所述广播消息中包括所述申请接入终端的无线局域网模块的媒体访问控制MAC地址；或者，通过所在终端接入所述无线局域网热点设备时所建立的固定消息传递方式，收到所述无线局域网热点设备的下行数据的数据DATA帧，所述DATA帧中包括所述申请接入终端的无线局域网模块的媒体访问控制MAC地址及用于触发的标志位。
- 一种终端，包括如权利要求25～29任意一项所述的装置。
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510239703.4 | 2015-05-12 | ||
| CN201510239703.4A CN105101349A (zh) | 2015-05-12 | 2015-05-12 | 一种无线局域网的接入控制方法及装置、终端 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2016179924A1 true WO2016179924A1 (zh) | 2016-11-17 |
Family
ID=54580626
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2015/088154 WO2016179924A1 (zh) | 2015-05-12 | 2015-08-26 | 一种无线局域网的接入控制方法及装置、终端 |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN105101349A (zh) |
| WO (1) | WO2016179924A1 (zh) |
Families Citing this family (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105636039A (zh) * | 2015-08-31 | 2016-06-01 | 东莞酷派软件技术有限公司 | 通信网络接入的方法、通信网络接入的***和终端 |
| CN105812270A (zh) * | 2016-03-09 | 2016-07-27 | 联想(北京)有限公司 | 一种信息处理方法和无线路由设备 |
| CN105916188A (zh) * | 2016-04-18 | 2016-08-31 | 肖华薇 | 一种无线局域网连接方法、装置及*** |
| CN106101065A (zh) * | 2016-05-27 | 2016-11-09 | 北京奇虎科技有限公司 | 便携式控制端设备及WiFi接入远程鉴权方法、装置 |
| CN105848151A (zh) * | 2016-05-27 | 2016-08-10 | 北京奇虎科技有限公司 | WiFi接入点设备及WiFi接入鉴权控制方法、装置 |
| CN107979864B (zh) * | 2016-10-25 | 2021-11-19 | 中兴通讯股份有限公司 | 接入点的接入方法、装置及*** |
| CN106714162A (zh) * | 2016-11-29 | 2017-05-24 | 维沃移动通信有限公司 | 一种共享热点方法及移动终端 |
| CN106973385A (zh) * | 2016-11-29 | 2017-07-21 | 维沃移动通信有限公司 | 一种共享热点方法及移动终端 |
| CN106792689A (zh) * | 2016-12-16 | 2017-05-31 | 广东美晨通讯有限公司 | Wi‑fi热点管理方法和wi‑fi热点管理装置 |
| CN107592639A (zh) * | 2017-10-26 | 2018-01-16 | 上海斐讯数据通信技术有限公司 | 一种终端设备加入路由器白名单的方法及*** |
| CN108777879A (zh) * | 2018-05-02 | 2018-11-09 | 四川斐讯信息技术有限公司 | 一种访客网络登录的管理方法和装置 |
| CN109348480A (zh) * | 2018-12-03 | 2019-02-15 | 上海连尚网络科技有限公司 | 用于接入无线接入点的方法和路由设备 |
| CN109981681A (zh) * | 2019-04-10 | 2019-07-05 | 广东虹勤通讯技术有限公司 | 一种无线网络接入方法及无线网络连接*** |
| WO2022016393A1 (en) * | 2020-07-21 | 2022-01-27 | Arris Enterprises Llc | Fast access to local area network (lan) graphical user interface (gui) by client device |
| CN113115402B (zh) * | 2021-03-16 | 2023-10-20 | 北京小米移动软件有限公司 | 一种接入点的接入方法、装置、电子设备及存储介质 |
| CN115701182B (zh) * | 2022-11-07 | 2024-03-22 | 深圳易思智科技有限公司 | 一种基于鸿蒙***的网络连接方法 |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2004040937A1 (en) * | 2002-11-01 | 2004-05-13 | Nokia Corporation | Network access management |
| CN102404861A (zh) * | 2011-06-30 | 2012-04-04 | 华为终端有限公司 | 控制用户接入网络的方法及便携式wifi热点设备 |
| WO2014124681A1 (en) * | 2013-02-15 | 2014-08-21 | Telefonaktiebolaget L M Ericsson (Publ) | Allowing access to a wifi network based on network properties |
| CN104023374A (zh) * | 2014-05-27 | 2014-09-03 | 美的集团股份有限公司 | 无线局域网接入参数的配置方法和*** |
| CN104540128A (zh) * | 2014-12-26 | 2015-04-22 | 北京奇虎科技有限公司 | 无线网络接入的方法、装置及*** |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101895962A (zh) * | 2010-08-05 | 2010-11-24 | 华为终端有限公司 | Wi-Fi接入方法、接入点及Wi-Fi接入*** |
| CN103532946B (zh) * | 2013-10-09 | 2016-11-23 | 北京奇虎科技有限公司 | 基于无密码或任意密码的网络授权的方法、***和装置 |
-
2015
- 2015-05-12 CN CN201510239703.4A patent/CN105101349A/zh not_active Withdrawn
- 2015-08-26 WO PCT/CN2015/088154 patent/WO2016179924A1/zh active Application Filing
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2004040937A1 (en) * | 2002-11-01 | 2004-05-13 | Nokia Corporation | Network access management |
| CN102404861A (zh) * | 2011-06-30 | 2012-04-04 | 华为终端有限公司 | 控制用户接入网络的方法及便携式wifi热点设备 |
| WO2014124681A1 (en) * | 2013-02-15 | 2014-08-21 | Telefonaktiebolaget L M Ericsson (Publ) | Allowing access to a wifi network based on network properties |
| CN104023374A (zh) * | 2014-05-27 | 2014-09-03 | 美的集团股份有限公司 | 无线局域网接入参数的配置方法和*** |
| CN104540128A (zh) * | 2014-12-26 | 2015-04-22 | 北京奇虎科技有限公司 | 无线网络接入的方法、装置及*** |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105101349A (zh) | 2015-11-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| WO2016179924A1 (zh) | 一种无线局域网的接入控制方法及装置、终端 | |
| US20230147772A1 (en) | Method for adapting the security settings of a communication station, communication station and identification module | |
| US11917054B2 (en) | Network key processing method and system and related device | |
| US9553897B2 (en) | Method and computer device for monitoring wireless network | |
| JP3585422B2 (ja) | アクセスポイント装置及びその認証処理方法 | |
| CN104113934B (zh) | 通信设备接入路由器的方法及接入*** | |
| US8959601B2 (en) | Client configuration during timing window | |
| EP3592017B1 (en) | Credential information processing method and apparatus for network connection, and application (app) | |
| KR20160114620A (ko) | 동적 네트워크 액세스 관리를 위한 방법들, 디바이스들 및 시스템들 | |
| WO2017041675A1 (zh) | 一种发送和获取wifi联网信息的方法和对应装置 | |
| US8036183B2 (en) | Method and system for transporting configuration protocol messages across a distribution system (DS) in a wireless local area network (WLAN) | |
| CN109219965A (zh) | 一种通信方法及相关装置 | |
| WO2003050988A1 (fr) | Procede de selection d'une arithmetique de cryptage pour realiser une communication confidentielle | |
| EP4057658A1 (en) | Machine-card verification method applied to minimalist network, and related device | |
| US8312151B2 (en) | Communication systems and methods for dynamic and secure simplification of equipment networking | |
| WO2018090831A1 (zh) | 一种智能终端设备接入互联网的方法及装置 | |
| WO2014166206A1 (zh) | 安全网络接入处理方法及装置 | |
| CN104244373B (zh) | 一种无线终端加入无线网络的方法 | |
| WO2016086739A1 (zh) | 具有wlan功能的设备接入网络的方法及实现该方法的设备 | |
| CN108449758A (zh) | 一种智能硬件的绑定方法及*** | |
| CN114615688B (zh) | 一种WiFi热点设备与当前接入设备之间近距离自动配置方法 | |
| US10779166B2 (en) | Technique for controlling access to a radio access network | |
| CN108990052B (zh) | Wpa2协议脆弱性的检测方法 | |
| CN111163468A (zh) | 一种通信连接方法及设备 | |
| US20230262642A1 (en) | Wireless residential gateway and indoor base station |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 15891627 Country of ref document: EP Kind code of ref document: A1 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| 122 | Ep: pct application non-entry in european phase |
Ref document number: 15891627 Country of ref document: EP Kind code of ref document: A1 |