WO2018228051A1 - Device access method, apparatus and system - Google Patents

Device access method, apparatus and system Download PDF

Info

Publication number
WO2018228051A1
WO2018228051A1 PCT/CN2018/083872 CN2018083872W WO2018228051A1 WO 2018228051 A1 WO2018228051 A1 WO 2018228051A1 CN 2018083872 W CN2018083872 W CN 2018083872W WO 2018228051 A1 WO2018228051 A1 WO 2018228051A1
Authority
WO
WIPO (PCT)
Prior art keywords
ipc
access
nvr
identifier
message
Prior art date
Application number
PCT/CN2018/083872
Other languages
French (fr)
Chinese (zh)
Inventor
郑明淋
Original Assignee
杭州海康威视数字技术股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 杭州海康威视数字技术股份有限公司 filed Critical 杭州海康威视数字技术股份有限公司
Publication of WO2018228051A1 publication Critical patent/WO2018228051A1/en

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40Network security protocols
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W48/00Access restriction; Network selection; Access point selection
    • H04W48/08Access restriction or access information delivery, e.g. discovery data delivery
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00Television systems
    • H04N7/18Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00Television systems
    • H04N7/18Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast
    • H04N7/181Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast for receiving images from a plurality of remote sources
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06Authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W48/00Access restriction; Network selection; Access point selection
    • H04W48/08Access restriction or access information delivery, e.g. discovery data delivery
    • H04W48/10Access restriction or access information delivery, e.g. discovery data delivery using broadcasted information
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W48/00Access restriction; Network selection; Access point selection
    • H04W48/16Discovering, processing access restriction or access information

Definitions

  • the present application relates to the field of security monitoring technologies, and in particular, to a device access method, device and system.
  • monitoring images are usually obtained through a monitoring system and display of monitoring images.
  • the monitoring system mainly includes a Network Video Recorder (NVR) and at least one Internet Protocol Camera (IPC).
  • NVR Network Video Recorder
  • IPC Internet Protocol Camera
  • the NVR is provided with a WIreless-Fidelity (WIFI) access point (AP), and the IPC has a WIFI connection function.
  • WIFI WIreless-Fidelity
  • AP WIreless-Fidelity
  • the IPC is associated with the NVR by connecting to the WIFI AP.
  • the IPC is used to transmit the acquired monitoring image to the NVR, and the NVR is used to display the monitoring image. In this process, the user needs to perform more operations, and the process is cumbersome.
  • the related art has a device access method, in which the mobile phone sends a coded message to the IPC after receiving the operation command triggered by the user, and the coded message includes a preset service set identifier of the WIFI AP. (Service Set Identifier, SSID) and the access key of the IPC accessing the WIFI network.
  • the IPC decodes the encoded message by using a corresponding decoding rule to obtain an SSID and an access key.
  • the IPC sends the decoded SSID and access key to the NVR.
  • the NVR determines that the SSID sent by the IPC is the same as the preset SSID, the NVR allows the access authentication operation to be performed on the IPC, and the process is a pre-authentication process. Afterwards, the NVR performs an access authentication operation on the IPC based on the access key sent by the IPC. If the authentication is successful, the IPC is successfully associated with the NVR.
  • the above process needs to complete the pre-authentication process after the mobile phone receives the operation instruction triggered by the user, and the device cannot be automatically pre-authenticated.
  • the pre-authentication process is still cumbersome.
  • the embodiment of the present invention provides a device access method, device, and system, which can solve the problem that the device cannot be automatically pre-authenticated in the related art, and the pre-authentication process is still cumbersome.
  • the technical solution is as follows:
  • a device access method for a network hard disk recorder NVR, where the NVR is provided with a wireless fidelity WIFI access point AP, and the method includes:
  • the preset identifier set Detecting, in the preset identifier set, whether an identifier of the IPC in the access request message exists, where the preset identifier set includes an identifier of an IPC managed by the NVR;
  • the access authentication operation is allowed to be performed on the IPC.
  • the notification message includes a first access key, where the first access key is obtained by encrypting an original access key that is accessed by the NVR to the WIFI AP,
  • the method further includes:
  • the method further includes:
  • the status response message is used to indicate that the device status of the first IPC is a fault state, and the first IPC is any IPC managed by the NVR;
  • the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
  • the periodic broadcast notification message includes:
  • the beacon frame is periodically broadcast, and the beacon frame is used to indicate the notification message.
  • the performing the access authentication operation on the IPC based on the original access key includes:
  • the method before the periodically broadcasting the notification message, the method further includes:
  • the identifier of the IPC is a product serial number of the IPC.
  • the method before the receiving the associated message sent by the IPC, the method further includes:
  • a device access method for a network camera IPC, where the method includes:
  • the notification message includes the identifier of the preset WIFI AP, periodically broadcasting an access request message, where the access request message includes an identifier of the IPC.
  • the notification message includes a first access key, where the first access key is obtained by encrypting an original access key that is accessed by the NVR to the WIFI AP,
  • the method further includes:
  • the notification message includes the identifier of the WIFI AP
  • the first access key in the notification message is decrypted to obtain a second access key.
  • the periodic broadcast access request message includes:
  • the probe request frame is periodically broadcasted, and the probe request frame is used to indicate the access request message.
  • the method further includes:
  • the performing the access authentication operation based on the second access key includes:
  • the second association response message is used to indicate that the IPC is associated with the NVR, and the second association response message is that the NVR is determining the association.
  • the second access key in the message is generated when the second access key is different from the original access key.
  • the method before the sending the association message to the NVR, the method further includes:
  • a device access device for a network hard disk recorder (NVR), the NVR is provided with a wireless fidelity WIFI access point AP, and the device includes:
  • One or more processors are One or more processors.
  • the memory stores one or more programs, the one or more programs being configured to be executed by the one or more processors, the one or more programs including instructions for:
  • an access request message of the network camera IPC broadcast where the access request message includes an identifier of the IPC, where the access request message is generated by the IPC when determining that the notification message includes a preset identifier of a WIFI AP of;
  • the preset identifier set Detecting, in the preset identifier set, whether an identifier of the IPC in the access request message exists, where the preset identifier set includes an identifier of an IPC managed by the NVR;
  • the access authentication operation is allowed to be performed on the IPC.
  • the notification message includes a first access key, where the first access key is obtained by encrypting an original access key that is accessed by the NVR to the WIFI AP,
  • the one or more programs also include instructions for performing the following operations:
  • the one or more programs further include instructions for:
  • the status response message is used to indicate that the device status of the first IPC is a fault state, and the first IPC is any IPC managed by the NVR;
  • the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
  • the one or more programs further include instructions for:
  • the beacon frame is periodically broadcast, and the beacon frame is used to indicate the notification message.
  • the one or more programs further include instructions for:
  • the one or more programs further include instructions for:
  • the identifier of the IPC is a product serial number of the IPC.
  • the one or more programs further include instructions for:
  • a device access device for a network camera IPC, and the device includes:
  • One or more processors are One or more processors.
  • the memory stores one or more programs, the one or more programs being configured to be executed by the one or more processors, the one or more programs including instructions for:
  • the notification message includes the identifier of the preset WIFI AP, periodically broadcasting an access request message, where the access request message includes an identifier of the IPC.
  • the notification message includes a first access key, where the first access key is obtained by encrypting an original access key that is accessed by the NVR to the WIFI AP,
  • the one or more programs also include instructions for performing the following operations:
  • the notification message includes the identifier of the WIFI AP
  • the first access key in the notification message is decrypted to obtain a second access key.
  • the one or more programs further include instructions for:
  • the probe request frame is periodically broadcasted, and the probe request frame is used to indicate the access request message.
  • the one or more programs further include instructions for:
  • the one or more programs further include instructions for:
  • the second association response message is used to indicate that the IPC is associated with the NVR, and the second association response message is that the NVR is determining the association.
  • the second access key in the message is generated when the second access key is different from the original access key.
  • the one or more programs further include instructions for:
  • a device access system including an NVR and an IPC.
  • the NVR includes the device access device of any of the third aspects
  • the IPC includes the device access device of any of the fourth aspects.
  • a non-transitory computer readable storage medium having stored therein instructions for causing a computer to execute when the computer readable storage medium is run on a computer
  • the device access method provided by the above first aspect.
  • a computer program product comprising instructions for causing a computer to perform the device access method provided by the first aspect described above when the computer program product is run on a computer.
  • a non-transitory computer readable storage medium having stored therein instructions for causing a computer to execute when the computer readable storage medium is run on a computer
  • the device access method provided by the above second aspect.
  • a computer program product comprising instructions for causing a computer to perform the device access method provided by the second aspect described above when the computer program product is run on a computer.
  • the NVR can periodically broadcast the notification message, and when the notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message, and the access request The message includes the identity of the IPC. Then, the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set. The whole process does not require the mobile phone to receive the operation instructions triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
  • FIG. 1 is a schematic diagram of an implementation environment involved in a device access method provided in some embodiments of the present application
  • FIG. 2 is a flowchart of a method for a device access method according to an exemplary embodiment
  • FIG. 3 is a flowchart of a method for another device access method according to an exemplary embodiment
  • FIG. 4 is a flowchart of still another method for device access according to an exemplary embodiment
  • FIG. 5 is a flowchart of a method for an NVR performing an access authentication operation on an IPC in the embodiment shown in FIG. 4;
  • FIG. 6 is a block diagram of a device access apparatus according to an exemplary embodiment
  • FIG. 7 is a block diagram of another device access apparatus according to an exemplary embodiment.
  • FIG. 8 is a block diagram of a device access apparatus according to an exemplary embodiment
  • FIG. 9 is a block diagram of another device access device according to an exemplary embodiment.
  • FIG. 10 is a block diagram of still another device access device according to an exemplary embodiment
  • FIG. 11 is a block diagram of still another device access device according to an exemplary embodiment.
  • FIG. 1 it is a schematic diagram of an implementation environment involved in a device access method provided in some embodiments of the present application.
  • the implementation environment can include at least one monitoring system, each monitoring system including an NVR 01 and at least one IPC 02.
  • the NVR01 sets the WIFI AP, and the IPC02 has the WIFI connection function.
  • IPC02 can be associated with NVR01 through a WIFI AP.
  • the IPC02 is used to acquire a monitoring image and transmit the monitoring image to the NVR01.
  • the NVR01 is used to display the monitoring image.
  • NVR01 is used with IPC02. Through NVR01, multiple surveillance images acquired by IPC02 can be viewed, viewed, played back, managed and stored.
  • the embodiment of the present application does not limit the number of monitoring systems, and does not limit the number of IPC02 included in each monitoring system.
  • FIG. 2 is a flowchart of a method for a device access method according to an exemplary embodiment.
  • the device access method may be performed by the NVR 01 in the implementation environment shown in FIG. 1.
  • the method flow may include the following steps:
  • Step 201 Periodically broadcast a notification message.
  • Step 202 Acquire an access request message of an IPC broadcast, where the access request message includes an identifier of the IPC, where the access request message is generated when the IPC is determined to include the identifier of the preset WIFI AP.
  • Step 203 Detect whether there is an identifier of the IPC in the access request message in the preset identifier set, where the preset identifier set includes an identifier of the IPC managed by the NVR.
  • Step 204 When the identifier of the IPC in the access request message exists in the preset identifier set, the access authentication operation is allowed to be performed on the IPC.
  • the NVR can periodically broadcast a notification message to obtain an access request message of the IPC broadcast, where the access request message includes an identifier of the IPC, and the NVR detects whether the preset identifier set is If the identifier of the IPC in the access request message exists, and the identifier of the IPC in the access request message exists in the preset identifier set, the access authentication operation is allowed to be performed on the IPC.
  • the access request message is generated by the IPC when the notification message of the acquired NVR broadcast includes the identifier of the preset WIFI AP, and the entire process does not require the mobile phone to receive the operation instruction triggered by the user, thereby realizing automatic pre-authentication of the device, simplifying the pre-implementation. Certification process.
  • FIG. 3 is a flowchart of a method for accessing a device according to an exemplary embodiment.
  • the device access method may be performed by IPC02 in the implementation environment shown in FIG. 1.
  • the method flow may include the following steps:
  • Step 301 Acquire a notification message of an NVR broadcast.
  • Step 302 When the notification message includes the identifier of the preset WIFI AP, periodically broadcast an access request message, where the access request message includes an identifier of the IPC.
  • the IPC can obtain the notification message of the NVR broadcast, and periodically broadcast the access request message when the notification message includes the identifier of the preset WIFI AP, and the access is performed.
  • the request message includes the identifier of the IPC, so that the NVR allows the access authentication operation to be performed on the IPC when the NVR detects the identifier of the IPC in the access request message.
  • the entire process does not require the mobile phone to receive the operation instruction triggered by the user.
  • the device automatically pre-certifies and simplifies the pre-authentication process.
  • FIG. 4 is a flowchart of a method for a device access method according to an exemplary embodiment, and the device access method may be used in the implementation environment shown in FIG. 1.
  • the method flow may include the following steps:
  • Step 401 The NVR establishes a preset identifier set.
  • the preset identifier set includes an identifier of an IPC managed by the NVR.
  • the NVR manages k IPCs, and k ⁇ 2, then the preset identifier set established by the NVR includes the identifiers of k IPCs.
  • the NVR manages five IPCs, and the five IPCs are a first IPC, a second IPC, a third IPC, a fourth IPC, and a fifth IPC, where the identifier of the first IPC is a1, and the second IPC is The identifier is a2, the identifier of the third IPC is a3, the identifier of the fourth IPC is a4, and the identifier of the fifth IPC is a5.
  • the preset identifier set established by the NVR can be as shown in Table 1, and the identifiers of the five IPCs are included in Table 1.
  • the ID of the IPC can be the product serial number of the IPC.
  • each IPC may be assigned a number, and the identifier of each IPC may be the number corresponding to the IPC.
  • the numbers of the first IPC to the fifth IPC are 001, 002, 003, 004, and 005, respectively, and the identifiers of the first IPC to the fifth IPC may be 001, 002, 003, 004, and 005, respectively.
  • the identifier of the IPC may also be in other forms. The embodiment of the present application does not limit the representation of the identifier of the IPC.
  • Step 402 The NVR periodically broadcasts the notification message.
  • the NVR may periodically broadcast a beacon frame, where the beacon frame is used to indicate a notification message, that is, the specific content of the notification message may be determined by the beacon frame.
  • the management frame plays a supervisory role for joining or exiting the wireless network, and processing the transfer of associations between the WIFI APs.
  • the management frame mainly includes a beacon frame, a probe request frame, a probe response frame, an authentication request frame, an authentication response frame, an association request frame, and an association response. (association response) frame.
  • the beacon frame is used to declare the existence of the WIFI network, and periodically sending the beacon frame enables the workstation to know the existence of the WIFI network, so that the workstation can adjust the parameters necessary for joining the WIFI network when it needs to join.
  • the IPC is provided with a workstation through which the IPC communicates with the WIFI AP of the NVR.
  • the workstation uses the probe request frame to scan the WIFI network in the area.
  • the WIFI AP sends a probe response frame to the workstation.
  • the workstation When the workstation receives the probe response frame sent by the WIFI AP, the workstation sends an authentication request frame to the WIFI AP. The WIFI AP then sends an authentication response message to the workstation. After that, the workstation sends an association request frame to the WIFI AP, and the WIFI AP sends an association response frame to the workstation.
  • the frame structures of the beacon frame and the probe request frame each include a plurality of elements, and the structure of each element is as shown in Table 2.
  • Each element includes an element identifier, a payload content length, and a payload content.
  • the element identifier ranges from 1 to 255. Usually, some of the 255 element identifiers are defined and the rest are idle.
  • the identifier of the preset WIFI AP may be added to the beacon frame by using the element identifier in an idle state, and the identifier of the IPC is added to the probe. In the request frame.
  • the location of the identifier of the preset WIFI AP in the beacon frame is not limited, and the location of the identifier of the IPC in the probe request frame is not limited, that is, the element identifier in Table 2 is also It can be between the payload content length and the payload content, or it can be located after the payload content.
  • the identifier of the preset WIFI AP has a length of 1, the content is 0x63 (the data starting with 0x is hexadecimal data), and 7 to 15 of the element identifiers 1 to 255 of the beacon frame are not defined.
  • the element corresponding to the identifier of the WIFI AP to be added may have an element identifier of 8, a payload content length of 1, and a load content of 0x63.
  • Step 403 The IPC detects whether the notification message of the NVR broadcast includes the identifier of the preset WIFI AP.
  • the IPC obtains the notification message of the NVR broadcast, and detects whether the notification message of the NVR broadcast includes the identifier of the preset WIFI AP. For example, the IPC may obtain a notification message from a beacon frame periodically broadcast by the NVR.
  • Step 404 When the notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts an access request message, where the access request message includes an identifier of the IPC.
  • the IPC When the notification message broadcast by the NVR includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message.
  • the IPC may periodically broadcast a probe request frame, where the probe request frame is used to indicate an access request message, that is, the specific content of the access request message may be determined by the probe request frame.
  • the IPC when the IPC detects that the obtained notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message, where the access request message includes the identifier of the IPC.
  • the IPC detects that the obtained notification message does not include the identifier of the preset WIFI AP, the IPC does not broadcast the access request message.
  • the IPC refuses to associate with the device that broadcasts the notification message, and the device association process ends. In this way, it is ensured that the IPC workstation only establishes a connection with the preset NVR WIFI AP, and does not establish a connection with other NVR WIFI APs or non-NVR device WIFI APs.
  • the identifier of the WIFI AP can be represented by a plurality of types.
  • the WIFI AP of the NVR can be assigned a number.
  • the identifier of the WIFI AP can be the number of the WIFI AP, and the identifier of the WIFI AP is represented by the embodiment of the present application. Not limited.
  • Step 405 When the notification message includes the identifier of the preset WIFI AP, the IPC decrypts the first access key in the notification message to obtain the second access key.
  • the notification message includes a first access key.
  • the first access key is obtained by the NVR encrypting the original access key accessed to the WIFI AP.
  • the IPC When the IPC detects that the acquired notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message. Further, the IPC decrypts the first access key in the notification message by using a preset decryption rule to obtain a second access key.
  • Step 406 The NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set.
  • the access request message of the IPC broadcast includes the identifier of the IPC, and the identifier of the IPC in the access request message exists in the preset identifier set established in the NVR detection step 401.
  • the NVR allows the access authentication operation for the IPC.
  • the identifier of the IPC in the access request message is a3, and the preset identifier shown in the NVR detection table 1 has a3, and the NVR allows the access authentication operation for the IPC.
  • the identifier of the IPC in the access request message is b1, and the preset ID set shown in the NVR detection table 1 does not exist b1, and the NVR prohibits the access authentication operation on the IPC. In this way, it is ensured that the NVR only allows the access authentication operation of the IPC managed by the NVR, and prevents the NVR from performing access authentication operations on the remaining IPCs, thereby avoiding the disorder of the wireless signals generated by different monitoring systems.
  • the NVR may obtain an access request message broadcast by other mobile devices. At this time, the access request message does not include the identifier of the IPC.
  • the NVR obtains the access request message, it determines that the access request message does not include the identifier of the IPC, and the NVR prohibits the access authentication operation on the device, and the device authentication process ends.
  • Step 407 When the identifier of the IPC in the access request message exists in the preset identifier set, the NVR allows the access authentication operation to be performed on the IPC.
  • the NVR can determine that the IPC of the broadcast access request message is the IPC managed by the NVR, and the NVR allows the access authentication operation to be performed on the IPC. Pre-certification process.
  • Step 408 The NVR sends an access response message to the IPC indicated by the identifier of the IPC.
  • the access response message is used to indicate that the NVR allows an access authentication operation for the IPC.
  • the NVR may send a probe response frame to the IPC indicated by the identifier of the IPC, where the probe response frame is used to indicate an access response message.
  • Step 409 The NVR performs an access authentication operation on the IPC based on the original access key.
  • the notification message broadcast by the NVR in step 402 includes the first access key.
  • the IPC after the IPC receives the access response message sent by the NVR, the IPC performs an access authentication operation based on the second access key obtained in step 405.
  • step 409 may include:
  • Step 4091 The IPC sends an authentication message to the NVR.
  • the authentication message includes encrypted information of the image data to be transmitted.
  • the encrypted information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC.
  • the authentication message is used to indicate that the IPC is ready to perform an access authentication operation.
  • the IPC may send an authentication request frame to the NVR, where the authentication request frame is used to indicate the authentication message.
  • Step 4092 The NVR sends an authentication response message to the IPC indicated by the identifier of the IPC.
  • the NVR may send an authentication response frame to the IPC indicated by the identifier of the IPC, where the authentication response frame is used to indicate an authentication response message.
  • Step 4093 the IPC sends an association message to the NVR.
  • the association message includes the second access key obtained in step 405.
  • the IPC may send an association request frame to the NVR, where the association request frame is used to indicate the associated message.
  • Step 4094 The NVR detects whether the second access key in the associated message is the same as the original access key. When the second access key is the same as the original access key, step 4095 is performed; when the second access key is different from the original access key, step 4096 is performed.
  • the IPC decrypts the first access key by using a preset decryption rule, and the obtained second access key may or may not be the same as the original access key.
  • the NVR sends a first association response message to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate the IPC indicated by the identifier of the IPC.
  • the NVR association is successful.
  • the NVR sends a second association response message to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate the identifier of the IPC.
  • the indicated IPC failed to associate with the NVR.
  • the original access key is F1
  • the first access key obtained by the NVR encrypting the original access key F1 is F0
  • the IPC decrypts F0 by using a preset decryption rule to obtain F2, F2 and If F1 is different, the device association fails.
  • Step 4095 When the second access key is the same as the original access key, the NVR sends a first association response message to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate that the identifier of the IPC is indicated.
  • the IPC is successfully associated with the NVR.
  • the NVR may send an association response frame to the IPC indicated by the identifier of the IPC, where the association response frame is used to indicate the first association response message.
  • Step 4096 When the second access key is different from the original access key, the NVR sends a second association response message to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate the identifier of the IPC. The indicated IPC failed to associate with the NVR.
  • the NVR may send an association response frame to the IPC indicated by the identifier of the IPC, where the association response frame is used to indicate the second association response message.
  • Step 410 After receiving the fault indication message sent by the first IPC, or after receiving the status response message returned by the first IPC for the status detection message sent by the NVR, the NVR determines that the first IPC is faulty.
  • the status response message is used to indicate that the device status of the first IPC is a fault status, and the first IPC is any IPC managed by the NVR.
  • the first IPC may actively send a fault indication message to the NVR, and after receiving the fault indication message, the NVR determines that the first IPC is faulty.
  • the NVR may also periodically send a status detection message to the first IPC, and the first IPC sends a status response message to the NVR, where the status response message is used to indicate the device status of the first IPC.
  • the device status may include a normal status. And fault status.
  • Step 411 When it is determined that the first IPC is faulty, the NVR deletes the identifier of the first IPC from the preset identifier set, and adds the identifier of the backup IPC of the first IPC to the preset identifier set.
  • the NVR when an IPC managed by the NVR fails, the NVR can replace the failed IPC to ensure that the IPC managed by the NVR is in an available state.
  • the NVR manages 5 IPCs, which are the first IPC, the second IPC, the third IPC, the fourth IPC, and the fifth IPC, respectively.
  • the identifier of the first IPC is a1, the identifier of the second IPC is a2, the identifier of the third IPC is a3, the identifier of the fourth IPC is a4, and the identifier of the fifth IPC is a5.
  • the NVR deletes a1 from the preset identifier set shown in Table 1, and adds the identifier a6 of the backup IPC of the first IPC to Table 1, and the obtained result is shown in Table 3.
  • the identifiers of the five IPCs managed by the NVR become: a6, a2, a3, a4, and a5.
  • the number of the first IPC may also be multiple, that is, when there are multiple first IPCs that fail, the NVR can delete the identifiers of all the first IPCs that have failed from the preset mark set, and The identifier of the backup IPC of each first IPC is added to the preset identifier set.
  • the NVR can periodically broadcast the notification message, and when the notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message, and the access is performed.
  • the request message includes the identity of the IPC.
  • the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set.
  • the whole process does not require the mobile phone to receive the operation instructions triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
  • FIG. 6 is a block diagram of a device access device 500 for an NVR according to an exemplary embodiment.
  • the device access device includes:
  • the broadcast module 510 is configured to periodically broadcast a notification message.
  • the obtaining module 520 is configured to obtain an access request message of the IPC broadcast, where the access request message includes an identifier of the IPC, where the access request message is that the IPC determines that the acquired notification message of the NVR broadcast includes the identifier of the preset WIFI AP. Generated.
  • the detecting module 530 is configured to detect whether the identifier of the IPC in the access request message exists in the preset identifier set.
  • the preset identifier set includes an identifier of an IPC managed by the NVR.
  • the first processing module 540 is configured to perform an access authentication operation on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set.
  • the device access device provided by the embodiment of the present application can periodically broadcast a notification message to obtain an access request message of an IPC broadcast, where the access request message includes an identifier of the IPC.
  • the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set.
  • the access request message is generated by the IPC when the notification message of the acquired NVR broadcast includes the identifier of the preset WIFI AP, and the device does not need the mobile phone to receive the operation instruction triggered by the user, thereby realizing automatic pre-authentication of the device, simplifying the pre- Certification process.
  • the notification message includes a first access key, which is obtained by the NVR encrypting the original access key accessed to the WIFI AP. Further, as shown in FIG. 7, the device access device 500 further includes:
  • the sending module 550 is configured to send an access response message to the IPC indicated by the identifier of the IPC.
  • the authentication module 560 is configured to perform an access authentication operation on the IPC based on the original access key.
  • the device access device 500 further includes:
  • the second processing module 570 is configured to:
  • the status response message is used to indicate The device status of the first IPC is a fault state, and the first IPC is any IPC managed by the NVR;
  • the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
  • the broadcast module 510 is configured to:
  • the beacon frame is periodically broadcast, and the beacon frame is used to indicate a notification message.
  • the authentication module 560 is configured to:
  • the first association response message is sent to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate that the IPC indicated by the identifier of the IPC is successfully associated with the NVR. ;
  • the second association response message is sent to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate that the IPC indicated by the identifier of the IPC is associated with the NVR. failure.
  • the device access device 500 further includes:
  • the establishing module 580 is configured to establish a preset identifier set.
  • the IPC identifier is the product serial number of the IPC.
  • authentication module 560 is further configured to:
  • An authentication response message is sent to the IPC indicated by the identity of the IPC.
  • the device access device provided by the embodiment of the present application can periodically broadcast a notification message to obtain an access request message of an IPC broadcast, where the access request message includes an identifier of the IPC.
  • the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set.
  • the access request message is generated by the IPC when the notification message of the acquired NVR broadcast includes the identifier of the preset WIFI AP, and the device does not need the mobile phone to receive the operation instruction triggered by the user, thereby realizing automatic pre-authentication of the device, simplifying the pre- Certification process.
  • FIG. 8 is a block diagram of a device access device 600 for IPC according to an exemplary embodiment.
  • the device access device includes:
  • the obtaining module 610 is configured to obtain a notification message of the NVR broadcast.
  • the broadcast module 620 is configured to periodically broadcast an access request message when the notification message includes the identifier of the preset WIFI AP, where the access request message includes an identifier of the IPC.
  • the IPC can obtain the notification message of the NVR broadcast, and periodically broadcast the access request message when the notification message includes the identifier of the preset WIFI AP, and the access is performed.
  • the request message includes the identifier of the IPC, so that the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set.
  • the NVR allows the IPC to be connected.
  • the device does not need the mobile phone to receive the operation instruction triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
  • the notification message includes a first access key, and the first access key is obtained by encrypting the original access key that is accessed by the NVR to the WIFI AP. Further, as shown in FIG.
  • the access device 600 further includes:
  • the decryption module 630 is configured to: when the notification message includes the identifier of the preset WIFI AP, decrypt the first access key in the notification message to obtain the second access key.
  • the broadcast module 620 is configured to:
  • the probe request frame is periodically broadcast, and the probe request frame is used to indicate an access request message.
  • the device access device 600 further includes:
  • the receiving module 640 is configured to receive an access response message sent by the NVR, where the access response message is used to indicate that the NVR allows an access authentication operation on the IPC.
  • the authentication module 650 is configured to perform an access authentication operation based on the second access key.
  • the authentication module 650 is configured to:
  • authentication module 650 is further configured to:
  • the IPC can obtain the notification message of the NVR broadcast, and periodically broadcast the access request message when the notification message includes the identifier of the preset WIFI AP, and the access is performed.
  • the request message includes the identifier of the IPC, so that the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set.
  • the NVR allows the IPC to be connected.
  • the device does not need the mobile phone to receive the operation instruction triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
  • the embodiment of the present application provides a device access system, where the device access system includes an NVR and an IPC.
  • the NVR includes the device access device shown in FIG. 6 or FIG. 7;
  • the IPC includes the device access device shown in FIG. 8 or 9.
  • the embodiment of the present application further provides a device access device, which is used for an NVR, and the NVR is provided with a WIFI AP, and the device includes:
  • One or more processors are One or more processors.
  • the memory stores one or more programs, the one or more programs configured to be executed by the one or more processors, and configured to be executed by one or more processors by executing the above-described programs
  • the device access method performed by the NVR in the embodiment is not limited to the embodiment.
  • the embodiment of the present application further provides a device access device, which is used for IPC, and the device includes:
  • One or more processors are One or more processors.
  • the memory stores one or more programs, the one or more programs configured to be executed by the one or more processors, and configured by one or more processors to perform IPC in the various embodiments described above The device access method performed.
  • FIG. 10 is a schematic structural diagram of still another device access device 700, which is used in an NVR, and includes:
  • the bus 704 is used to connect to the processor 701, the memory 702, and the network interface 703, and the processor 701 is configured to execute the program 7021. stored in the memory 702.
  • Memory 702 may include high speed random access memory, and may also include non-volatile memory, such as at least one disk storage.
  • the communication connection between the device access device and the IPC is implemented through a network interface 703 (which may be wireless).
  • the processor 701 can execute the program 7021 stored in the memory 702 to implement the NVR, and cause the NVR to perform the following device access method:
  • the preset identifier set Detecting, in the preset identifier set, whether there is an identifier of the IPC in the access request message, where the preset identifier set includes an identifier of the IPC managed by the NVR;
  • the access authentication operation is allowed to be performed on the IPC.
  • the notification message includes a first access key, where the first access key is obtained by encrypting, by the NVR, the original access key that is preset to access the WIFI AP.
  • the method further includes:
  • the access authentication operation is performed on the IPC based on the original access key.
  • the method further includes:
  • the status response message is used to indicate the The device status of an IPC is a fault state, and the first IPC is any IPC managed by the NVR;
  • the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
  • the periodic broadcast notification message includes:
  • the beacon frame is periodically broadcast, and the beacon frame is used to indicate a notification message.
  • the access authentication operation is performed on the IPC based on the original access key, including:
  • the first association response message is sent to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate that the IPC indicated by the identifier of the IPC is successfully associated with the NVR. ;
  • the second association response message is sent to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate that the IPC indicated by the identifier of the IPC is associated with the NVR. failure.
  • the method before periodically broadcasting the notification message, the method further includes:
  • the IPC identifier is the product serial number of the IPC.
  • the method before receiving the associated message sent by the IPC, the method further includes:
  • the authentication message includes the encrypted information of the image data to be transmitted, and the encrypted information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
  • An authentication response message is sent to the IPC indicated by the identity of the IPC.
  • the device access device provided by the embodiment of the present application can periodically broadcast a notification message to obtain an access request message of an IPC broadcast, where the access request message includes an identifier of the IPC.
  • the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set.
  • the access request message is generated when the IPC determines that the notification message includes the identifier of the preset WIFI AP.
  • the device does not need the mobile phone to receive the operation instruction triggered by the user, and implements automatic pre-authentication of the device, which simplifies the pre-authentication process.
  • FIG. 11 is a schematic structural diagram of another device access apparatus 800 for IPC according to an exemplary embodiment.
  • the device access device 800 can include one or more of the following components: a processing component 801, a memory 802, a power component 803, a multimedia component 804, an audio component 805, an input/output (I/O) interface 806, a sensor Component 807, and communication component 808.
  • a processing component 801 a memory 802
  • a power component 803 a multimedia component 804
  • an audio component 805 an input/output (I/O) interface 806, a sensor Component 807, and communication component 808.
  • I/O input/output
  • Processing component 801 typically controls the overall operation of device 800, such as operations associated with display, data communication, camera operations, and recording operations.
  • Processing component 801 can include one or more processors 810 to execute instructions to perform all or part of the steps described above.
  • processing component 801 can include one or more modules to facilitate interaction between component 801 and other components.
  • processing component 801 can include a multimedia module to facilitate interaction between multimedia component 804 and processing component 801.
  • Memory 802 is configured to store various types of data to support operation at device 800. Examples of such data include instructions, pictures, videos, etc. for any application or method operating on device 800.
  • the memory 802 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read only memory (EEPROM), erasable Programmable Read Only Memory (EPROM), Programmable Read Only Memory (PROM), Read Only Memory (ROM), Magnetic Memory, Flash Memory, Disk or Optical Disk.
  • SRAM static random access memory
  • EEPROM electrically erasable programmable read only memory
  • EPROM erasable Programmable Read Only Memory
  • PROM Programmable Read Only Memory
  • ROM Read Only Memory
  • Magnetic Memory Flash Memory
  • Disk Disk or Optical Disk.
  • Power component 803 provides power to various components of device 800.
  • Power component 803 can include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power for device 800.
  • Multimedia component 804 includes a screen between the device 800 and a user that provides an output interface.
  • the screen can include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen can be implemented as a touch screen to receive input signals from the user.
  • the touch panel includes one or more touch sensors to sense touches, slides, and gestures on the touch panel. The touch sensor may sense not only the boundary of the touch or sliding action, but also the duration and pressure associated with the touch or slide operation.
  • the multimedia component 804 includes a front camera and/or a rear camera. When the device 800 is in an operation mode, such as a shooting mode or a video mode, the front camera and/or the rear camera can receive external multimedia data. Each front and rear camera can be a fixed optical lens system or have focal length and optical zoom capabilities.
  • the audio component 805 is configured to output and/or input audio signals.
  • the audio component 805 includes a microphone (MIC) that is configured to receive an external audio signal when the device 800 is in an operational mode, such as a call mode, a recording mode, and a voice recognition mode.
  • the received audio signal may be further stored in memory 802 or transmitted via communication component 808.
  • the audio component 805 also includes a speaker for outputting an audio signal.
  • the I/O interface 806 provides an interface between the processing component 801 and the peripheral interface module, which may be a keyboard, a click wheel, a button, or the like. These buttons may include, but are not limited to, a home button, a volume button, a start button, and a lock button.
  • Sensor assembly 807 includes one or more sensors for providing status assessment of various aspects to device 800.
  • sensor assembly 807 can detect an open/closed state of device 800, relative positioning of components, such as the display and keypad of device 800, and sensor component 807 can also detect the location of one component of device 800 or device 800. Changes, the presence or absence of user contact with device 800, device 800 orientation or acceleration/deceleration, and temperature variation of device 800.
  • Sensor assembly 807 can include a proximity sensor configured to detect the presence of nearby objects without any physical contact.
  • Sensor assembly 807 can also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications.
  • the sensor assembly 807 can also include an acceleration sensor, a gyro sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.
  • Communication component 808 is configured to facilitate wired or wireless communication between device 800 and other devices.
  • the device 800 can access a wireless network based on a communication standard, such as WIFI, 2G or 3G, or a combination thereof.
  • communication component 808 receives broadcast signals or broadcast associated information from an external broadcast management system via a broadcast channel.
  • the communication component 808 also includes a near field communication (NFC) module to facilitate short range communication.
  • NFC near field communication
  • the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.
  • RFID radio frequency identification
  • IrDA infrared data association
  • UWB ultra-wideband
  • Bluetooth Bluetooth
  • device 800 may be implemented by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable A gate array (FPGA), controller, microcontroller, microprocessor, or other electronic component implementation for performing the above methods.
  • ASICs application specific integrated circuits
  • DSPs digital signal processors
  • DSPDs digital signal processing devices
  • PLDs programmable logic devices
  • FPGA field programmable A gate array
  • controller microcontroller, microprocessor, or other electronic component implementation for performing the above methods.
  • non-transitory computer readable storage medium comprising instructions, such as a memory 802 comprising instructions executable by processor 810 of apparatus 800 to perform the above method.
  • the non-transitory computer readable storage medium can be a ROM, a random access memory (RAM), a read only memory (CD-ROM), a magnetic tape, a floppy disk, and an optical data storage device.
  • a non-transitory computer readable storage medium when instructions in the storage medium are executed by a processor of apparatus 800, enabling apparatus 800 to perform the apparatus access method illustrated in FIG. 3, or to perform the implementation illustrated in FIG. Related steps in the example.
  • the IPC can obtain the notification message of the NVR broadcast, and periodically broadcast the access request message when the notification message includes the identifier of the preset WIFI AP, and the access is performed.
  • the request message includes the identifier of the IPC, so that the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set.
  • the NVR allows the IPC to be connected.
  • the device does not need the mobile phone to receive the operation instruction triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
  • the embodiment of the present application further provides a device access system, where the device access system includes an NVR and an IPC.
  • the NVR includes the device access device shown in FIG. 10;
  • the IPC includes the device access device shown in FIG.
  • the above embodiments it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof.
  • software it may be implemented in whole or in part in the form of a computer program product comprising one or more computer instructions.
  • the computer program instructions When the computer program instructions are loaded and executed on a computer, the processes or functions described in accordance with embodiments of the present application are generated in whole or in part.
  • the computer can be a general purpose computer, a computer network, or other programmable device.
  • the computer instructions can be stored in a readable storage medium of a computer or transferred from one computer readable storage medium to another computer readable storage medium, for example, the computer instructions can be from a website site, computer, server or data
  • the center transmits to another website site, computer, server, or data center by wire (eg, coaxial cable, fiber optic, digital subscriber line) or wireless (eg, infrared, wireless, microwave, etc.).
  • the computer readable storage medium can be any available media that can be accessed by a computer or a data storage device such as a server, data center, or the like that includes one or more available media.
  • the usable medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium, or a semiconductor medium (eg, a solid state hard disk) or the like.

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Multimedia (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

Disclosed are a device access method, apparatus and system, wherein same belong to the technical field of security monitoring. The method comprises: an NVR periodically broadcasting a notification message; the NVR acquiring an access request message broadcast by an Internet protocol camera (IPC), wherein the access request message comprises an identifier of the IPC, and the access request message is generated by the IPC when determining that the acquired notification message broadcast by the NVR comprises an identifier of a pre-set WIFI AP; the NVR detecting whether the identifier of the IPC in the access request message exists in a pre-set identifier set, wherein the pre-set identifier set comprises an identifier of an IPC managed by the NVR; and when the identifier of the IPC in the access request message exists in the pre-set identifier set, the NVR allowing an access authentication operation to be performed on the IPC. The present application solves the problems in the related art that automatic pre-authentication of a device cannot be realized and the pre-authentication process is still troublesome, thereby simplifying the device pre-authentication process, and is used for device association.

Description

设备接入方法、装置及***Device access method, device and system
本申请要求于2017年06月15日提交中国国家知识产权局、申请号为201710452592.4、发明名称为“设备接入方法、装置及***”的中国专利申请的优先权,其全部内容通过引用结合在本申请中。This application claims the priority of the Chinese Patent Application, which is filed on June 15, 2017, the Chinese National Intellectual Property Office, the application number is 201710452592.4, and the invention is entitled "Device Access Method, Apparatus and System", the entire contents of which are incorporated by reference. In this application.
技术领域Technical field
本申请涉及安防监控技术领域,特别涉及一种设备接入方法、装置及***。The present application relates to the field of security monitoring technologies, and in particular, to a device access method, device and system.
背景技术Background technique
在安防监控技术领域,通常会通过监控***获取监控图像并显示监控图像。监控***主要包括网络硬盘录像机(Network Video Recorder,NVR)和至少一个网络摄像机(Internet Protocol Camera,IPC)。其中,NVR设置有无线保真(WIreless-Fidelity,WIFI)接入点(Access Point,AP),IPC具有WIFI连接功能。IPC通过连接WIFI AP与NVR关联。其中,IPC用于将获取的监控图像传输至NVR,NVR用于显示该监控图像。该过程中,用户需要执行较多操作,过程很繁琐。In the field of security monitoring technology, monitoring images are usually obtained through a monitoring system and display of monitoring images. The monitoring system mainly includes a Network Video Recorder (NVR) and at least one Internet Protocol Camera (IPC). Among them, the NVR is provided with a WIreless-Fidelity (WIFI) access point (AP), and the IPC has a WIFI connection function. The IPC is associated with the NVR by connecting to the WIFI AP. The IPC is used to transmit the acquired monitoring image to the NVR, and the NVR is used to display the monitoring image. In this process, the user needs to perform more operations, and the process is cumbersome.
相关技术中有一种设备接入方法,该方法中,手机在接收到用户触发的操作指令后,向IPC发送编码后的报文,该编码后的报文包括预设的WIFI AP的服务集标识(Service Set Identifier,SSID)和IPC接入WIFI网络的接入密钥。IPC采用对应的解码规则对该编码后的报文进行解码,得到SSID和接入密钥。IPC将解码后得到的SSID和接入密钥发送至NVR。当NVR确定IPC发送的SSID与预设的SSID相同时,NVR允许对该IPC进行接入认证操作,该过程为预认证过程。之后,NVR基于IPC发送的接入密钥对该IPC进行接入认证操作。如果认证成功,则IPC与NVR关联成功。The related art has a device access method, in which the mobile phone sends a coded message to the IPC after receiving the operation command triggered by the user, and the coded message includes a preset service set identifier of the WIFI AP. (Service Set Identifier, SSID) and the access key of the IPC accessing the WIFI network. The IPC decodes the encoded message by using a corresponding decoding rule to obtain an SSID and an access key. The IPC sends the decoded SSID and access key to the NVR. When the NVR determines that the SSID sent by the IPC is the same as the preset SSID, the NVR allows the access authentication operation to be performed on the IPC, and the process is a pre-authentication process. Afterwards, the NVR performs an access authentication operation on the IPC based on the access key sent by the IPC. If the authentication is successful, the IPC is successfully associated with the NVR.
上述过程需要在手机接收到用户触发的操作指令后完成预认证过程,无法实现设备自动预认证,预认证过程仍较繁琐。The above process needs to complete the pre-authentication process after the mobile phone receives the operation instruction triggered by the user, and the device cannot be automatically pre-authenticated. The pre-authentication process is still cumbersome.
发明内容Summary of the invention
本申请实施例提供了一种设备接入方法、装置及***,可以解决相关技术 中无法实现设备自动预认证,预认证过程仍较繁琐的问题。所述技术方案如下:The embodiment of the present invention provides a device access method, device, and system, which can solve the problem that the device cannot be automatically pre-authenticated in the related art, and the pre-authentication process is still cumbersome. The technical solution is as follows:
根据本申请实施例的第一方面,提供一种设备接入方法,用于网络硬盘录像机NVR,所述NVR设置有无线保真WIFI接入点AP,所述方法包括:According to the first aspect of the embodiments of the present application, a device access method is provided for a network hard disk recorder NVR, where the NVR is provided with a wireless fidelity WIFI access point AP, and the method includes:
周期性广播通知消息;Periodically broadcast a notification message;
获取网络摄像机IPC广播的接入请求消息,所述接入请求消息包括所述IPC的标识,所述接入请求消息是所述IPC在确定获取的所述NVR广播的所述通知消息包括预设的WIFI AP的标识时生成的;Acquiring an access request message of the IPC broadcast of the network camera, where the access request message includes an identifier of the IPC, where the access request message is that the notification message of the NVR broadcasted by the IPC includes a preset Generated when the WIFI AP is identified;
检测预设标识集中是否存在所述接入请求消息中的IPC的标识,所述预设标识集包括所述NVR所管理的IPC的标识;Detecting, in the preset identifier set, whether an identifier of the IPC in the access request message exists, where the preset identifier set includes an identifier of an IPC managed by the NVR;
当所述预设标识集中存在所述接入请求消息中的IPC的标识时,允许对所述IPC进行接入认证操作。When the identifier of the IPC in the access request message exists in the preset identifier, the access authentication operation is allowed to be performed on the IPC.
可选的,所述通知消息包括第一接入密钥,所述第一接入密钥是所述NVR对接入至所述WIFI AP的原始接入密钥进行加密后得到的,Optionally, the notification message includes a first access key, where the first access key is obtained by encrypting an original access key that is accessed by the NVR to the WIFI AP,
在所述允许对所述IPC进行接入认证操作之后,所述方法还包括:After the access authentication operation is performed on the IPC, the method further includes:
向所述IPC的标识所指示的IPC发送接入响应消息;Sending an access response message to the IPC indicated by the identifier of the IPC;
基于所述原始接入密钥对所述IPC进行接入认证操作。Performing an access authentication operation on the IPC based on the original access key.
可选的,所述方法还包括:Optionally, the method further includes:
当接收到第一IPC发送的故障指示消息后,或者,当接收到所述第一IPC针对所述NVR发送的状态检测消息而返回的状态响应消息后,确定所述第一IPC出现故障,所述状态响应消息用于指示所述第一IPC的设备状态为故障状态,所述第一IPC为所述NVR所管理的任一IPC;After receiving the fault indication message sent by the first IPC, or after receiving the status response message returned by the first IPC for the status detection message sent by the NVR, determining that the first IPC is faulty, The status response message is used to indicate that the device status of the first IPC is a fault state, and the first IPC is any IPC managed by the NVR;
当确定所述第一IPC出现故障时,将所述第一IPC的标识从所述预设标识集中删除,并将所述第一IPC的备份IPC的标识添加至所述预设标识集中。When it is determined that the first IPC is faulty, the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
可选的,所述周期性广播通知消息,包括:Optionally, the periodic broadcast notification message includes:
周期性广播信标帧,所述信标帧用于指示所述通知消息。The beacon frame is periodically broadcast, and the beacon frame is used to indicate the notification message.
可选的,所述基于所述原始接入密钥对所述IPC进行接入认证操作,包括:Optionally, the performing the access authentication operation on the IPC based on the original access key includes:
接收所述IPC发送的关联消息,所述关联消息包括第二接入密钥,所述第二接入密钥是所述IPC对所述通知消息中的第一接入密钥进行解密后得到的;Receiving, by the IPC, an association message, where the association message includes a second access key, where the second access key is obtained by the IPC decrypting the first access key in the notification message. of;
检测所述关联消息中的第二接入密钥是否与所述原始接入密钥相同;Detecting whether the second access key in the associated message is the same as the original access key;
当所述第二接入密钥与所述原始接入密钥相同时,向所述IPC的标识所指示的IPC发送第一关联响应消息,所述第一关联响应消息用于指示所述IPC的 标识所指示的IPC与所述NVR关联成功;When the second access key is the same as the original access key, sending a first association response message to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate the IPC The IPC indicated by the identifier is successfully associated with the NVR;
当所述第二接入密钥与所述原始接入密钥不相同时,向所述IPC的标识所指示的IPC发送第二关联响应消息,所述第二关联响应消息用于指示所述IPC的标识所指示的IPC与所述NVR关联失败。When the second access key is different from the original access key, sending a second association response message to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate the The IPC indicated by the identity of the IPC fails to associate with the NVR.
可选的,在所述周期性广播通知消息之前,所述方法还包括:Optionally, before the periodically broadcasting the notification message, the method further includes:
建立所述预设标识集。Establishing the preset identifier set.
可选的,所述IPC的标识为所述IPC的产品序列号。Optionally, the identifier of the IPC is a product serial number of the IPC.
可选的,在所述接收所述IPC发送的关联消息之前,所述方法还包括:Optionally, before the receiving the associated message sent by the IPC, the method further includes:
接收所述IPC发送的认证消息,所述认证消息包括待传输图像数据的加密信息,所述加密信息用于所述NVR对所述IPC传输的所述待传输图像数据进行解密;Receiving an authentication message sent by the IPC, where the authentication message includes encryption information of image data to be transmitted, and the encryption information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
向所述IPC的标识所指示的IPC发送认证响应消息。Sending an authentication response message to the IPC indicated by the identity of the IPC.
根据本申请实施例的第二方面,提供一种设备接入方法,用于网络摄像机IPC,所述方法包括:According to a second aspect of the embodiments of the present application, a device access method is provided for a network camera IPC, where the method includes:
获取网络硬盘录像机NVR广播的通知消息;Obtaining a notification message of the network hard disk recorder NVR broadcast;
当所述通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,所述接入请求消息包括所述IPC的标识。And when the notification message includes the identifier of the preset WIFI AP, periodically broadcasting an access request message, where the access request message includes an identifier of the IPC.
可选的,所述通知消息包括第一接入密钥,所述第一接入密钥是所述NVR对接入至所述WIFI AP的原始接入密钥进行加密后得到的,Optionally, the notification message includes a first access key, where the first access key is obtained by encrypting an original access key that is accessed by the NVR to the WIFI AP,
所述方法还包括:The method further includes:
当所述通知消息包括预设的所述WIFI AP的标识时,对所述通知消息中的第一接入密钥进行解密,得到第二接入密钥。When the notification message includes the identifier of the WIFI AP, the first access key in the notification message is decrypted to obtain a second access key.
可选的,所述周期性广播接入请求消息,包括:Optionally, the periodic broadcast access request message includes:
周期性广播探测请求帧,所述探测请求帧用于指示所述接入请求消息。The probe request frame is periodically broadcasted, and the probe request frame is used to indicate the access request message.
可选的,在所述周期性广播接入请求消息之后,所述方法还包括:Optionally, after the periodic broadcast access request message, the method further includes:
接收所述NVR发送的接入响应消息,所述接入响应消息用于指示所述NVR允许对所述IPC进行接入认证操作;Receiving an access response message sent by the NVR, where the access response message is used to indicate that the NVR is allowed to perform an access authentication operation on the IPC;
基于所述第二接入密钥进行接入认证操作。Performing an access authentication operation based on the second access key.
可选的,所述基于所述第二接入密钥进行接入认证操作,包括:Optionally, the performing the access authentication operation based on the second access key includes:
向所述NVR发送关联消息,所述关联消息包括所述第二接入密钥;Sending an association message to the NVR, where the association message includes the second access key;
接收所述NVR发送的第一关联响应消息,所述第一关联响应消息用于指示 所述IPC与所述NVR关联成功,所述第一关联响应消息是所述NVR在确定所述关联消息中的第二接入密钥与所述原始接入密钥相同时生成的,Receiving a first association response message sent by the NVR, where the first association response message is used to indicate that the IPC is successfully associated with the NVR, and the first association response message is that the NVR is in determining the associated message. Generated when the second access key is the same as the original access key,
或者,接收所述NVR发送的第二关联响应消息,所述第二关联响应消息用于指示所述IPC与所述NVR关联失败,所述第二关联响应消息是所述NVR在确定所述关联消息中的第二接入密钥与所述原始接入密钥不相同时生成的。Or receiving a second association response message sent by the NVR, where the second association response message is used to indicate that the IPC is associated with the NVR, and the second association response message is that the NVR is determining the association. The second access key in the message is generated when the second access key is different from the original access key.
可选的,在所述向所述NVR发送关联消息之前,所述方法还包括:Optionally, before the sending the association message to the NVR, the method further includes:
向所述NVR发送认证消息,所述认证消息包括待传输图像数据的加密信息,所述加密信息用于所述NVR对所述IPC传输的所述待传输图像数据进行解密;Sending an authentication message to the NVR, where the authentication message includes encryption information of image data to be transmitted, and the encryption information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
接收所述NVR发送的认证响应消息。Receiving an authentication response message sent by the NVR.
根据本申请实施例的第三方面,提供一种设备接入装置,用于网络硬盘录像机NVR,所述NVR设置有无线保真WIFI接入点AP,所述装置包括:According to a third aspect of the embodiments of the present application, a device access device is provided for a network hard disk recorder (NVR), the NVR is provided with a wireless fidelity WIFI access point AP, and the device includes:
一个或多个处理器;和One or more processors; and
存储器;Memory
所述存储器存储有一个或多个程序,所述一个或多个程序被配置成由所述一个或多个处理器执行,所述一个或多个程序包含用于进行以下操作的指令:The memory stores one or more programs, the one or more programs being configured to be executed by the one or more processors, the one or more programs including instructions for:
周期性广播通知消息;Periodically broadcast a notification message;
获取网络摄像机IPC广播的接入请求消息,所述接入请求消息包括所述IPC的标识,所述接入请求消息是所述IPC在确定所述通知消息包括预设的WIFI AP的标识时生成的;Obtaining an access request message of the network camera IPC broadcast, where the access request message includes an identifier of the IPC, where the access request message is generated by the IPC when determining that the notification message includes a preset identifier of a WIFI AP of;
检测预设标识集中是否存在所述接入请求消息中的IPC的标识,所述预设标识集包括所述NVR所管理的IPC的标识;Detecting, in the preset identifier set, whether an identifier of the IPC in the access request message exists, where the preset identifier set includes an identifier of an IPC managed by the NVR;
在所述预设标识集中存在所述接入请求消息中的IPC的标识时,允许对所述IPC进行接入认证操作。When the identifier of the IPC in the access request message exists in the preset identifier set, the access authentication operation is allowed to be performed on the IPC.
可选的,所述通知消息包括第一接入密钥,所述第一接入密钥是所述NVR对接入至所述WIFI AP的原始接入密钥进行加密后得到的,Optionally, the notification message includes a first access key, where the first access key is obtained by encrypting an original access key that is accessed by the NVR to the WIFI AP,
所述一个或多个程序还包含用于进行以下操作的指令:The one or more programs also include instructions for performing the following operations:
向所述IPC的标识所指示的IPC发送接入响应消息;Sending an access response message to the IPC indicated by the identifier of the IPC;
基于所述原始接入密钥对所述IPC进行接入认证操作。Performing an access authentication operation on the IPC based on the original access key.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
当接收到第一IPC发送的故障指示消息后,或者,当接收到所述第一IPC针对所述NVR发送的状态检测消息而返回的状态响应消息后,确定所述第一 IPC出现故障,所述状态响应消息用于指示所述第一IPC的设备状态为故障状态,所述第一IPC为所述NVR所管理的任一IPC;After receiving the fault indication message sent by the first IPC, or after receiving the status response message returned by the first IPC for the status detection message sent by the NVR, determining that the first IPC is faulty, The status response message is used to indicate that the device status of the first IPC is a fault state, and the first IPC is any IPC managed by the NVR;
在确定所述第一IPC出现故障时,将所述第一IPC的标识从所述预设标识集中删除,并将所述第一IPC的备份IPC的标识添加至所述预设标识集中。When it is determined that the first IPC is faulty, the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
周期性广播信标帧,所述信标帧用于指示所述通知消息。The beacon frame is periodically broadcast, and the beacon frame is used to indicate the notification message.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
接收所述IPC发送的关联消息,所述关联消息包括第二接入密钥,所述第二接入密钥是所述IPC对所述通知消息中的第一接入密钥进行解密后得到的;Receiving, by the IPC, an association message, where the association message includes a second access key, where the second access key is obtained by the IPC decrypting the first access key in the notification message. of;
检测所述关联消息中的第二接入密钥是否与所述原始接入密钥相同;Detecting whether the second access key in the associated message is the same as the original access key;
当所述第二接入密钥与所述原始接入密钥相同时,向所述IPC的标识所指示的IPC发送第一关联响应消息,所述第一关联响应消息用于指示所述IPC的标识所指示的IPC与所述NVR关联成功;When the second access key is the same as the original access key, sending a first association response message to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate the IPC The IPC indicated by the identifier is successfully associated with the NVR;
当所述第二接入密钥与所述原始接入密钥不相同时,向所述IPC的标识所指示的IPC发送第二关联响应消息,所述第二关联响应消息用于指示所述IPC的标识所指示的IPC与所述NVR关联失败。When the second access key is different from the original access key, sending a second association response message to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate the The IPC indicated by the identity of the IPC fails to associate with the NVR.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
建立所述预设标识集。Establishing the preset identifier set.
可选的,所述IPC的标识为所述IPC的产品序列号。Optionally, the identifier of the IPC is a product serial number of the IPC.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
接收所述IPC发送的认证消息,所述认证消息包括待传输图像数据的加密信息,所述加密信息用于所述NVR对所述IPC传输的所述待传输图像数据进行解密;Receiving an authentication message sent by the IPC, where the authentication message includes encryption information of image data to be transmitted, and the encryption information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
向所述IPC的标识所指示的IPC发送认证响应消息。Sending an authentication response message to the IPC indicated by the identity of the IPC.
根据本申请实施例的第四方面,提供一种设备接入装置,用于网络摄像机IPC,所述装置包括:According to a fourth aspect of the embodiments of the present application, a device access device is provided for a network camera IPC, and the device includes:
一个或多个处理器;和One or more processors; and
存储器;Memory
所述存储器存储有一个或多个程序,所述一个或多个程序被配置成由所述一个或多个处理器执行,所述一个或多个程序包含用于进行以下操作的指令:The memory stores one or more programs, the one or more programs being configured to be executed by the one or more processors, the one or more programs including instructions for:
获取网络硬盘录像机NVR广播的通知消息;Obtaining a notification message of the network hard disk recorder NVR broadcast;
在所述通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,所述接入请求消息包括所述IPC的标识。And when the notification message includes the identifier of the preset WIFI AP, periodically broadcasting an access request message, where the access request message includes an identifier of the IPC.
可选的,所述通知消息包括第一接入密钥,所述第一接入密钥是所述NVR对接入至所述WIFI AP的原始接入密钥进行加密后得到的,Optionally, the notification message includes a first access key, where the first access key is obtained by encrypting an original access key that is accessed by the NVR to the WIFI AP,
所述一个或多个程序还包含用于进行以下操作的指令:The one or more programs also include instructions for performing the following operations:
在所述通知消息包括预设的所述WIFI AP的标识时,对所述通知消息中的第一接入密钥进行解密,得到第二接入密钥。When the notification message includes the identifier of the WIFI AP, the first access key in the notification message is decrypted to obtain a second access key.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
周期性广播探测请求帧,所述探测请求帧用于指示所述接入请求消息。The probe request frame is periodically broadcasted, and the probe request frame is used to indicate the access request message.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
接收所述NVR发送的接入响应消息,所述接入响应消息用于指示所述NVR允许对所述IPC进行接入认证操作;Receiving an access response message sent by the NVR, where the access response message is used to indicate that the NVR is allowed to perform an access authentication operation on the IPC;
基于所述第二接入密钥进行接入认证操作。Performing an access authentication operation based on the second access key.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
向所述NVR发送关联消息,所述关联消息包括所述第二接入密钥;Sending an association message to the NVR, where the association message includes the second access key;
接收所述NVR发送的第一关联响应消息,所述第一关联响应消息用于指示所述IPC与所述NVR关联成功,所述第一关联响应消息是所述NVR在确定所述关联消息中的第二接入密钥与所述原始接入密钥相同时生成的,Receiving a first association response message sent by the NVR, where the first association response message is used to indicate that the IPC is successfully associated with the NVR, and the first association response message is that the NVR is in determining the associated message. Generated when the second access key is the same as the original access key,
或者,接收所述NVR发送的第二关联响应消息,所述第二关联响应消息用于指示所述IPC与所述NVR关联失败,所述第二关联响应消息是所述NVR在确定所述关联消息中的第二接入密钥与所述原始接入密钥不相同时生成的。Or receiving a second association response message sent by the NVR, where the second association response message is used to indicate that the IPC is associated with the NVR, and the second association response message is that the NVR is determining the association. The second access key in the message is generated when the second access key is different from the original access key.
可选的,所述一个或多个程序还包含用于进行以下操作的指令:Optionally, the one or more programs further include instructions for:
向所述NVR发送认证消息,所述认证消息包括待传输图像数据的加密信息,所述加密信息用于所述NVR对所述IPC传输的所述待传输图像数据进行解密;Sending an authentication message to the NVR, where the authentication message includes encryption information of image data to be transmitted, and the encryption information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
接收所述NVR发送的认证响应消息。Receiving an authentication response message sent by the NVR.
根据本申请实施例的第五方面,提供一种设备接入***,包括NVR和IPC,According to a fifth aspect of the embodiments of the present application, a device access system, including an NVR and an IPC, is provided.
所述NVR包括第三方面任一所述的设备接入装置;The NVR includes the device access device of any of the third aspects;
所述IPC包括第四方面任一所述的设备接入装置。The IPC includes the device access device of any of the fourth aspects.
根据本申请实施例的第六方面,提供一种非易失性计算机可读存储介质,该计算机可读存储介质中存储有指令,当该计算机可读存储介质在计算机上运行时,使得计算机执行上述第一方面所提供的设备接入方法。According to a sixth aspect of embodiments of the present application, there is provided a non-transitory computer readable storage medium having stored therein instructions for causing a computer to execute when the computer readable storage medium is run on a computer The device access method provided by the above first aspect.
根据本申请实施例的第七方面,提供一种包含指令的计算机程序产品,当该计算机程序产品在计算机上运行时,使得计算机执行上述第一方面所提供的设备接入方法。According to a seventh aspect of the embodiments of the present application, there is provided a computer program product comprising instructions for causing a computer to perform the device access method provided by the first aspect described above when the computer program product is run on a computer.
根据本申请实施例的第八方面,提供一种非易失性计算机可读存储介质,该计算机可读存储介质中存储有指令,当该计算机可读存储介质在计算机上运行时,使得计算机执行上述第二方面所提供的设备接入方法。According to an eighth aspect of embodiments of the present application, there is provided a non-transitory computer readable storage medium having stored therein instructions for causing a computer to execute when the computer readable storage medium is run on a computer The device access method provided by the above second aspect.
根据本申请实施例的第九方面,提供一种包含指令的计算机程序产品,当该计算机程序产品在计算机上运行时,使得计算机执行上述第二方面所提供的设备接入方法。According to a ninth aspect of the embodiments of the present application, there is provided a computer program product comprising instructions for causing a computer to perform the device access method provided by the second aspect described above when the computer program product is run on a computer.
本申请实施例提供的技术方案可以包括以下有益效果:The technical solutions provided by the embodiments of the present application may include the following beneficial effects:
本申请实施例提供的设备接入方法、装置及***,NVR能够周期性广播通知消息,且当通知消息包括预设的WIFI AP的标识时,IPC周期性广播接入请求消息,该接入请求消息包括IPC的标识。之后,NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,并当预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接入认证操作。整个过程无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。The device access method, device, and system provided by the embodiment of the present application, the NVR can periodically broadcast the notification message, and when the notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message, and the access request The message includes the identity of the IPC. Then, the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set. The whole process does not require the mobile phone to receive the operation instructions triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
应当理解的是,以上的一般描述和后文的细节描述仅是示例性的,并不能限制本申请。The above general description and the following detailed description are merely exemplary and are not intended to limit the application.
附图说明DRAWINGS
为了更清楚地说明本申请的实施例,下面将对实施例描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本申请的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他的附图。In order to more clearly illustrate the embodiments of the present application, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present application, For the ordinary technicians, other drawings can be obtained based on these drawings without any creative work.
图1是本申请部分实施例中提供的设备接入方法所涉及的实施环境示意图;1 is a schematic diagram of an implementation environment involved in a device access method provided in some embodiments of the present application;
图2是根据一示例性实施例示出的一种设备接入方法的方法流程图;FIG. 2 is a flowchart of a method for a device access method according to an exemplary embodiment;
图3是根据一示例性实施例示出的另一种设备接入方法的方法流程图;FIG. 3 is a flowchart of a method for another device access method according to an exemplary embodiment;
图4是根据一示例性实施例示出的又一种设备接入方法的方法流程图;FIG. 4 is a flowchart of still another method for device access according to an exemplary embodiment;
图5是图4所示实施例中NVR对IPC进行接入认证操作的方法流程图;5 is a flowchart of a method for an NVR performing an access authentication operation on an IPC in the embodiment shown in FIG. 4;
图6是根据一示例性实施例示出的一种设备接入装置的框图;FIG. 6 is a block diagram of a device access apparatus according to an exemplary embodiment;
图7是根据一示例性实施例示出的另一种设备接入装置的框图;FIG. 7 is a block diagram of another device access apparatus according to an exemplary embodiment;
图8是根据一示例性实施例示出的一种设备接入装置的框图;FIG. 8 is a block diagram of a device access apparatus according to an exemplary embodiment;
图9是根据一示例性实施例示出的另一种设备接入装置的框图;FIG. 9 is a block diagram of another device access device according to an exemplary embodiment;
图10是根据一示例性实施例示出的再一种设备接入装置的框图;FIG. 10 is a block diagram of still another device access device according to an exemplary embodiment;
图11是根据一示例性实施例示出的再一种设备接入装置的框图。FIG. 11 is a block diagram of still another device access device according to an exemplary embodiment.
此处的附图被并入说明书中并构成本说明书的一部分,示出了符合本申请的实施例,并与说明书一起用于解释本申请的原理。The drawings herein are incorporated in and constitute a part of the specification,
具体实施方式detailed description
为了使本申请的目的、技术方案和优点更加清楚,下面将结合附图对本申请作进一步地详细描述,显然,所描述的实施例仅仅是本申请一部份实施例,而不是全部的实施例。基于本申请中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其它实施例,都属于本申请保护的范围。The present application will be further described in detail below with reference to the accompanying drawings, and it is obvious that the described embodiments are only a part of the embodiments of the present application, but not all embodiments. . All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present application.
请参见图1,其示出了本申请部分实施例中提供的设备接入方法所涉及的实施环境示意图。该实施环境可以包括至少一个监控***,每个监控***包括NVR01和至少一个IPC02。NVR01设置WIFI AP,IPC02具有WIFI连接功能。每个监控***中,IPC02能够通过WIFI AP与NVR01关联。IPC02用于获取监控图像,并将该监控图像传输至NVR01。NVR01用于显示该监控图像。NVR01与IPC02配套使用,通过NVR01可以同时观看、浏览、回放、管理并存储多个IPC02获取的监控图像。Referring to FIG. 1 , it is a schematic diagram of an implementation environment involved in a device access method provided in some embodiments of the present application. The implementation environment can include at least one monitoring system, each monitoring system including an NVR 01 and at least one IPC 02. The NVR01 sets the WIFI AP, and the IPC02 has the WIFI connection function. In each monitoring system, IPC02 can be associated with NVR01 through a WIFI AP. The IPC02 is used to acquire a monitoring image and transmit the monitoring image to the NVR01. The NVR01 is used to display the monitoring image. NVR01 is used with IPC02. Through NVR01, multiple surveillance images acquired by IPC02 can be viewed, viewed, played back, managed and stored.
本申请实施例对监控***的数量不做限制,并对每个监控***包括的IPC02的数量不做限定。The embodiment of the present application does not limit the number of monitoring systems, and does not limit the number of IPC02 included in each monitoring system.
图2是根据一示例性实施例示出的一种设备接入方法的方法流程图,该设备接入方法可以由图1所示实施环境中的NVR01执行。参见图2,该方法流程可以包括如下几个步骤:FIG. 2 is a flowchart of a method for a device access method according to an exemplary embodiment. The device access method may be performed by the NVR 01 in the implementation environment shown in FIG. 1. Referring to FIG. 2, the method flow may include the following steps:
步骤201、周期性广播通知消息。Step 201: Periodically broadcast a notification message.
步骤202、获取IPC广播的接入请求消息,该接入请求消息包括IPC的标识,该接入请求消息是IPC在确定获取的NVR广播的通知消息包括预设的WIFI AP的标识时生成的。Step 202: Acquire an access request message of an IPC broadcast, where the access request message includes an identifier of the IPC, where the access request message is generated when the IPC is determined to include the identifier of the preset WIFI AP.
步骤203、检测预设标识集中是否存在接入请求消息中的IPC的标识,该预设标识集包括NVR所管理的IPC的标识。Step 203: Detect whether there is an identifier of the IPC in the access request message in the preset identifier set, where the preset identifier set includes an identifier of the IPC managed by the NVR.
步骤204、当预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接入认证操作。Step 204: When the identifier of the IPC in the access request message exists in the preset identifier set, the access authentication operation is allowed to be performed on the IPC.
综上所述,本申请实施例提供的设备接入方法,NVR能够周期性广播通知消息,获取IPC广播的接入请求消息,该接入请求消息包括IPC的标识,NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,并在预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接入认证操作。其中,接入请求消息是IPC在确定获取的NVR广播的通知消息包括预设的WIFI AP的标识时生成的,整个过程无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, in the device access method provided by the embodiment of the present application, the NVR can periodically broadcast a notification message to obtain an access request message of the IPC broadcast, where the access request message includes an identifier of the IPC, and the NVR detects whether the preset identifier set is If the identifier of the IPC in the access request message exists, and the identifier of the IPC in the access request message exists in the preset identifier set, the access authentication operation is allowed to be performed on the IPC. The access request message is generated by the IPC when the notification message of the acquired NVR broadcast includes the identifier of the preset WIFI AP, and the entire process does not require the mobile phone to receive the operation instruction triggered by the user, thereby realizing automatic pre-authentication of the device, simplifying the pre-implementation. Certification process.
图3是根据一示例性实施例示出的一种设备接入方法的方法流程图,该设备接入方法可以由图1所示实施环境中的IPC02执行。参见图3,该方法流程可以包括如下几个步骤:FIG. 3 is a flowchart of a method for accessing a device according to an exemplary embodiment. The device access method may be performed by IPC02 in the implementation environment shown in FIG. 1. Referring to FIG. 3, the method flow may include the following steps:
步骤301、获取NVR广播的通知消息。Step 301: Acquire a notification message of an NVR broadcast.
步骤302、当通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,该接入请求消息包括IPC的标识。Step 302: When the notification message includes the identifier of the preset WIFI AP, periodically broadcast an access request message, where the access request message includes an identifier of the IPC.
综上所述,本申请实施例提供的设备接入方法,IPC能够获取NVR广播的通知消息,并在通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,该接入请求消息包括IPC的标识,以便于NVR在检测到预设标识集中存在接入请求消息中的IPC的标识时,NVR允许对IPC进行接入认证操作,整个过程无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, in the device access method provided by the embodiment of the present application, the IPC can obtain the notification message of the NVR broadcast, and periodically broadcast the access request message when the notification message includes the identifier of the preset WIFI AP, and the access is performed. The request message includes the identifier of the IPC, so that the NVR allows the access authentication operation to be performed on the IPC when the NVR detects the identifier of the IPC in the access request message. The entire process does not require the mobile phone to receive the operation instruction triggered by the user. The device automatically pre-certifies and simplifies the pre-authentication process.
图4是根据一示例性实施例示出的一种设备接入方法的方法流程图,该设备接入方法可以用于图1所示的实施环境。参见图4,该方法流程可以包括如下几个步骤:FIG. 4 is a flowchart of a method for a device access method according to an exemplary embodiment, and the device access method may be used in the implementation environment shown in FIG. 1. Referring to FIG. 4, the method flow may include the following steps:
步骤401、NVR建立预设标识集。Step 401: The NVR establishes a preset identifier set.
该预设标识集包括NVR所管理的IPC的标识。比如NVR管理k个IPC,k≥2那么NVR建立的预设标识集包括k个IPC的标识。The preset identifier set includes an identifier of an IPC managed by the NVR. For example, the NVR manages k IPCs, and k≥2, then the preset identifier set established by the NVR includes the identifiers of k IPCs.
示例的,该NVR管理5个IPC,这个5个IPC分别是第一IPC、第二IPC、第三IPC、第四IPC和第五IPC,其中,第一IPC的标识为a1,第二IPC的标 识为a2,第三IPC的标识为a3,第四IPC的标识为a4,第五IPC的标识为a5。那么该NVR建立的预设标识集可以如表1所示,表1中包括这5个IPC的标识。For example, the NVR manages five IPCs, and the five IPCs are a first IPC, a second IPC, a third IPC, a fourth IPC, and a fifth IPC, where the identifier of the first IPC is a1, and the second IPC is The identifier is a2, the identifier of the third IPC is a3, the identifier of the fourth IPC is a4, and the identifier of the fifth IPC is a5. Then, the preset identifier set established by the NVR can be as shown in Table 1, and the identifiers of the five IPCs are included in Table 1.
表1Table 1
IPC的标识IPC logo
a1A1
a2A2
a3A3
a4A4
a5A5
示例的,IPC的标识可以为IPC的产品序列号。或者,也可以给每个IPC赋予一个编号,每个IPC的标识可以是对应IPC的编号。示例的,第一IPC至第五IPC的编号分别为001、002、003、004和005,那么第一IPC至第五IPC的标识可以分别为001、002、003、004和005。当然,IPC的标识还可以为其他表示形式,本申请实施例对IPC的标识的表示形式不做限定。For example, the ID of the IPC can be the product serial number of the IPC. Alternatively, each IPC may be assigned a number, and the identifier of each IPC may be the number corresponding to the IPC. For example, the numbers of the first IPC to the fifth IPC are 001, 002, 003, 004, and 005, respectively, and the identifiers of the first IPC to the fifth IPC may be 001, 002, 003, 004, and 005, respectively. Of course, the identifier of the IPC may also be in other forms. The embodiment of the present application does not limit the representation of the identifier of the IPC.
步骤402、NVR周期性广播通知消息。Step 402: The NVR periodically broadcasts the notification message.
可选的,NVR可以周期性广播信标(beacon)帧,该信标帧用于指示通知消息,即通过信标帧可以确定通知消息的具体内容。Optionally, the NVR may periodically broadcast a beacon frame, where the beacon frame is used to indicate a notification message, that is, the specific content of the notification message may be determined by the beacon frame.
作为一个无线网络标准,802.11的帧主要有三种类型:数据帧、控制帧和管理帧。其中,管理帧起到监督作用,用于加入或退出无线网络,以及处理WIFI AP之间关联的转移事宜。管理帧主要包括信标帧、探测请求(probe request)帧、探测响应(probe response)帧、认证请求(authentication request)帧、认证响应(authentication response)帧、关联请求(association request)帧和关联响应(association response)帧。As a wireless network standard, there are three main types of 802.11 frames: data frames, control frames, and management frames. The management frame plays a supervisory role for joining or exiting the wireless network, and processing the transfer of associations between the WIFI APs. The management frame mainly includes a beacon frame, a probe request frame, a probe response frame, an authentication request frame, an authentication response frame, an association request frame, and an association response. (association response) frame.
其中,信标帧用于声明WIFI网络的存在,定期发送信标帧可以使工作站(station)得知该WIFI网络的存在,从而使工作站在需要加入时能够调整加入WIFI网络所必需的参数。在本申请实施例中,IPC设置有工作站,IPC通过该工作站与NVR的WIFI AP进行通信。The beacon frame is used to declare the existence of the WIFI network, and periodically sending the beacon frame enables the workstation to know the existence of the WIFI network, so that the workstation can adjust the parameters necessary for joining the WIFI network when it needs to join. In the embodiment of the present application, the IPC is provided with a workstation through which the IPC communicates with the WIFI AP of the NVR.
工作站采用探测请求帧来扫描所在区域内的WIFI网络。当探测请求帧扫描的网络与工作站相兼容时,WIFI AP则会向该工作站发送探测响应帧。The workstation uses the probe request frame to scan the WIFI network in the area. When the network that probes the request frame scan is compatible with the workstation, the WIFI AP sends a probe response frame to the workstation.
当工作站接收到WIFI AP发送的探测响应帧时,工作站向WIFI AP发送认证请求帧。WIFI AP再向该工作站发送认证响应消息。之后,该工作站向WIFI AP 发送关联请求帧,WIFI AP再向该工作站发送关联响应帧。When the workstation receives the probe response frame sent by the WIFI AP, the workstation sends an authentication request frame to the WIFI AP. The WIFI AP then sends an authentication response message to the workstation. After that, the workstation sends an association request frame to the WIFI AP, and the WIFI AP sends an association response frame to the workstation.
需要说明的是,信标帧和探测请求帧的帧结构均包括多个元素(element),每个元素的结构如表2所示,每个元素包括元素标识符、负载内容长度和负载内容。其中,元素标识符一共有255个,比如元素标识符的取值范围为1~255,通常,255个元素标识符中一部分会被定义使用,其余部分处于空闲状态。在本申请实施例中,为了实现设备自动预认证,实现设备自动关联,可以采用处于空闲状态的元素标识符将预设的WIFI AP的标识添加至信标帧中,将IPC的标识添加至探测请求帧中。添加时,需要参考信标帧和探测请求帧的帧结构,比如可以参考表2所示的元素的结构。本申请实施例对预设的WIFI AP的标识在信标帧中的位置不做限定,对IPC的标识在探测请求帧中的位置不做限定,也即是,表2中的元素标识符也可以位于负载内容长度与负载内容之间,或者,也可以位于负载内容之后。It should be noted that the frame structures of the beacon frame and the probe request frame each include a plurality of elements, and the structure of each element is as shown in Table 2. Each element includes an element identifier, a payload content length, and a payload content. There are 255 element identifiers. For example, the element identifier ranges from 1 to 255. Usually, some of the 255 element identifiers are defined and the rest are idle. In the embodiment of the present application, in order to implement automatic pre-authentication of the device and implement automatic association of the device, the identifier of the preset WIFI AP may be added to the beacon frame by using the element identifier in an idle state, and the identifier of the IPC is added to the probe. In the request frame. When adding, it is necessary to refer to the frame structure of the beacon frame and the probe request frame, for example, the structure of the elements shown in Table 2 can be referred to. In the embodiment of the present application, the location of the identifier of the preset WIFI AP in the beacon frame is not limited, and the location of the identifier of the IPC in the probe request frame is not limited, that is, the element identifier in Table 2 is also It can be between the payload content length and the payload content, or it can be located after the payload content.
示例的,预设的WIFI AP的标识的长度为1,内容为0x63(以0x开始的数据为16进制数据),且信标帧的元素标识符1~255中的7~15未被定义使用,处于空闲状态,那么待添加的WIFI AP的标识所对应的元素的元素标识符可以为8,负载内容长度为1,负载内容为0x63。For example, the identifier of the preset WIFI AP has a length of 1, the content is 0x63 (the data starting with 0x is hexadecimal data), and 7 to 15 of the element identifiers 1 to 255 of the beacon frame are not defined. If the usage is in an idle state, the element corresponding to the identifier of the WIFI AP to be added may have an element identifier of 8, a payload content length of 1, and a load content of 0x63.
表2Table 2
元素标识符Element identifier 负载内容长度Load content length 负载内容Load content
步骤403、IPC检测NVR广播的通知消息是否包括预设的WIFI AP的标识。Step 403: The IPC detects whether the notification message of the NVR broadcast includes the identifier of the preset WIFI AP.
IPC获取NVR广播的通知消息,检测NVR广播的通知消息是否包括预设的WIFI AP的标识。示例的,IPC可以从NVR周期性广播的信标帧中获取通知消息。The IPC obtains the notification message of the NVR broadcast, and detects whether the notification message of the NVR broadcast includes the identifier of the preset WIFI AP. For example, the IPC may obtain a notification message from a beacon frame periodically broadcast by the NVR.
步骤404、当通知消息包括预设的WIFI AP的标识时,IPC周期性广播接入请求消息,该接入请求消息包括IPC的标识。Step 404: When the notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts an access request message, where the access request message includes an identifier of the IPC.
当NVR广播的通知消息包括预设的WIFI AP的标识时,IPC周期性广播接入请求消息。可选的,IPC可以周期性广播探测请求帧,该探测请求帧用于指示接入请求消息,即通过探测请求帧可以确定接入请求消息的具体内容。When the notification message broadcast by the NVR includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message. Optionally, the IPC may periodically broadcast a probe request frame, where the probe request frame is used to indicate an access request message, that is, the specific content of the access request message may be determined by the probe request frame.
在本申请实施例中,当IPC检测到获取的通知消息包括预设的WIFI AP的标识时,IPC再周期性广播接入请求消息,该接入请求消息包括IPC的标识。当IPC检测到获取的通知消息不包括预设的WIFI AP的标识时,IPC则不广播接入请求消息,在这种情况下,IPC拒绝与广播通知消息的设备关联,设备关联流程 结束。这样一来,能够保证IPC的工作站仅与预设的NVR的WIFI AP建立连接,不与其他NVR的WIFI AP或者非NVR设备的WIFI AP建立连接。In the embodiment of the present application, when the IPC detects that the obtained notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message, where the access request message includes the identifier of the IPC. When the IPC detects that the obtained notification message does not include the identifier of the preset WIFI AP, the IPC does not broadcast the access request message. In this case, the IPC refuses to associate with the device that broadcasts the notification message, and the device association process ends. In this way, it is ensured that the IPC workstation only establishes a connection with the preset NVR WIFI AP, and does not establish a connection with other NVR WIFI APs or non-NVR device WIFI APs.
其中,WIFI AP的标识的表示形式有多种,示例的,可以给NVR的WIFI AP赋予一个编号,WIFI AP的标识可以是该WIFI AP的编号,本申请实施例对WIFI AP的标识的表示形式不作限定。The identifier of the WIFI AP can be represented by a plurality of types. For example, the WIFI AP of the NVR can be assigned a number. The identifier of the WIFI AP can be the number of the WIFI AP, and the identifier of the WIFI AP is represented by the embodiment of the present application. Not limited.
步骤405、当通知消息包括预设的WIFI AP的标识时,IPC对通知消息中的第一接入密钥进行解密,得到第二接入密钥。Step 405: When the notification message includes the identifier of the preset WIFI AP, the IPC decrypts the first access key in the notification message to obtain the second access key.
该通知消息包括第一接入密钥。该第一接入密钥是NVR对接入至WIFI AP的原始接入密钥进行加密后得到的。The notification message includes a first access key. The first access key is obtained by the NVR encrypting the original access key accessed to the WIFI AP.
当IPC检测到获取的通知消息包括预设的WIFI AP的标识时,IPC周期性广播接入请求消息。进一步的,IPC采用预设的解密规则对该通知消息中的第一接入密钥进行解密,得到第二接入密钥。When the IPC detects that the acquired notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message. Further, the IPC decrypts the first access key in the notification message by using a preset decryption rule to obtain a second access key.
步骤406、NVR检测预设标识集中是否存在接入请求消息中的IPC的标识。Step 406: The NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set.
IPC广播的接入请求消息包括IPC的标识,NVR检测步骤401中建立的预设标识集中是否存在接入请求消息中的IPC的标识。当预设标识集中存在IPC的标识时,NVR才允许对IPC进行接入认证操作。The access request message of the IPC broadcast includes the identifier of the IPC, and the identifier of the IPC in the access request message exists in the preset identifier set established in the NVR detection step 401. When the identifier of the IPC exists in the preset identifier, the NVR allows the access authentication operation for the IPC.
示例的,接入请求消息中的IPC的标识为a3,NVR检测表1所示的预设标识集中存在a3,NVR则允许对IPC进行接入认证操作。又比如,接入请求消息中的IPC的标识为b1,NVR检测表1所示的预设标识集中不存在b1,NVR则禁止对IPC进行接入认证操作。这样一来,能够保证NVR仅允许对其所管理的IPC进行接入认证操作,避免NVR对其余IPC进行接入认证操作,避免了不同监控***的无线信号产生的乱串现象。For example, the identifier of the IPC in the access request message is a3, and the preset identifier shown in the NVR detection table 1 has a3, and the NVR allows the access authentication operation for the IPC. For example, the identifier of the IPC in the access request message is b1, and the preset ID set shown in the NVR detection table 1 does not exist b1, and the NVR prohibits the access authentication operation on the IPC. In this way, it is ensured that the NVR only allows the access authentication operation of the IPC managed by the NVR, and prevents the NVR from performing access authentication operations on the remaining IPCs, thereby avoiding the disorder of the wireless signals generated by different monitoring systems.
此外,NVR可能会获取其他移动设备广播的接入请求消息,此时,该接入请求消息不包括IPC的标识。当NVR获取到该接入请求消息时,确定该接入请求消息不包括IPC的标识,那么NVR禁止对该设备进行接入认证操作,设备认证流程结束。In addition, the NVR may obtain an access request message broadcast by other mobile devices. At this time, the access request message does not include the identifier of the IPC. When the NVR obtains the access request message, it determines that the access request message does not include the identifier of the IPC, and the NVR prohibits the access authentication operation on the device, and the device authentication process ends.
步骤407、当预设标识集中存在接入请求消息中的IPC的标识时,NVR允许对IPC进行接入认证操作。Step 407: When the identifier of the IPC in the access request message exists in the preset identifier set, the NVR allows the access authentication operation to be performed on the IPC.
当预设标识集中存在接入请求消息中的IPC的标识时,NVR则可以确定广播接入请求消息的IPC是该NVR所管理的IPC,NVR则允许对IPC进行接入认证操作,至此,完成预认证过程。When the identifier of the IPC in the access request message exists in the preset identifier, the NVR can determine that the IPC of the broadcast access request message is the IPC managed by the NVR, and the NVR allows the access authentication operation to be performed on the IPC. Pre-certification process.
步骤408、NVR向IPC的标识所指示的IPC发送接入响应消息。Step 408: The NVR sends an access response message to the IPC indicated by the identifier of the IPC.
接入响应消息用于指示NVR允许对IPC进行接入认证操作。The access response message is used to indicate that the NVR allows an access authentication operation for the IPC.
可选的,NVR可以向IPC的标识所指示的IPC发送探测响应帧,该探测响应帧用于指示接入响应消息。Optionally, the NVR may send a probe response frame to the IPC indicated by the identifier of the IPC, where the probe response frame is used to indicate an access response message.
步骤409、NVR基于原始接入密钥对IPC进行接入认证操作。Step 409: The NVR performs an access authentication operation on the IPC based on the original access key.
步骤402中NVR广播的通知消息包括第一接入密钥。The notification message broadcast by the NVR in step 402 includes the first access key.
在本申请实施例中,当IPC接收到NVR发送的接入响应消息后,IPC基于步骤405得到的第二接入密钥进行接入认证操作。In the embodiment of the present application, after the IPC receives the access response message sent by the NVR, the IPC performs an access authentication operation based on the second access key obtained in step 405.
可选的,如图5所示,步骤409可以包括:Optionally, as shown in FIG. 5, step 409 may include:
步骤4091、IPC向NVR发送认证消息。Step 4091: The IPC sends an authentication message to the NVR.
认证消息包括待传输图像数据的加密信息。加密信息用于NVR对IPC传输的待传输图像数据进行解密。认证消息用于指示IPC准备进行接入认证操作。The authentication message includes encrypted information of the image data to be transmitted. The encrypted information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC. The authentication message is used to indicate that the IPC is ready to perform an access authentication operation.
可选的,IPC可以向NVR发送认证请求帧,该认证请求帧用于指示认证消息。Optionally, the IPC may send an authentication request frame to the NVR, where the authentication request frame is used to indicate the authentication message.
步骤4092、NVR向IPC的标识所指示的IPC发送认证响应消息。Step 4092: The NVR sends an authentication response message to the IPC indicated by the identifier of the IPC.
可选的,NVR可以向IPC的标识所指示的IPC发送认证响应帧,该认证响应帧用于指示认证响应消息。Optionally, the NVR may send an authentication response frame to the IPC indicated by the identifier of the IPC, where the authentication response frame is used to indicate an authentication response message.
步骤4093、IPC向NVR发送关联消息。Step 4093, the IPC sends an association message to the NVR.
关联消息包括步骤405中得到的第二接入密钥。The association message includes the second access key obtained in step 405.
可选的,IPC可以向NVR发送关联请求帧,该关联请求帧用于指示关联消息。Optionally, the IPC may send an association request frame to the NVR, where the association request frame is used to indicate the associated message.
步骤4094、NVR检测关联消息中的第二接入密钥是否与原始接入密钥相同。当第二接入密钥与原始接入密钥相同时,执行步骤4095;当第二接入密钥与原始接入密钥不相同时,执行步骤4096。Step 4094: The NVR detects whether the second access key in the associated message is the same as the original access key. When the second access key is the same as the original access key, step 4095 is performed; when the second access key is different from the original access key, step 4096 is performed.
在步骤405中,IPC采用预设的解密规则对第一接入密钥进行解密,得到的第二接入密钥与原始接入密钥可能相同,也可能不相同。当第二接入密钥与原始接入密钥相同时,NVR向IPC的标识所指示的IPC发送第一关联响应消息,该第一关联响应消息用于指示该IPC的标识所指示的IPC与NVR关联成功;当第二接入密钥与原始接入密钥不相同时,NVR向IPC的标识所指示的IPC发送第二关联响应消息,该第二关联响应消息用于指示该IPC的标识所指示的IPC与NVR关联失败。In step 405, the IPC decrypts the first access key by using a preset decryption rule, and the obtained second access key may or may not be the same as the original access key. When the second access key is the same as the original access key, the NVR sends a first association response message to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate the IPC indicated by the identifier of the IPC. The NVR association is successful. When the second access key is different from the original access key, the NVR sends a second association response message to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate the identifier of the IPC. The indicated IPC failed to associate with the NVR.
示例的,原始接入密钥为F1,NVR对原始接入密钥F1进行加密后得到的第一接入密钥为F0,IPC采用预设的解密规则对F0进行解密,得到F2,F2与F1不相同,则设备关联失败。For example, the original access key is F1, and the first access key obtained by the NVR encrypting the original access key F1 is F0, and the IPC decrypts F0 by using a preset decryption rule to obtain F2, F2 and If F1 is different, the device association fails.
步骤4095、当第二接入密钥与原始接入密钥相同时,NVR向IPC的标识所指示的IPC发送第一关联响应消息,该第一关联响应消息用于指示该IPC的标识所指示的IPC与NVR关联成功。Step 4095: When the second access key is the same as the original access key, the NVR sends a first association response message to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate that the identifier of the IPC is indicated. The IPC is successfully associated with the NVR.
可选的,NVR可以向IPC的标识所指示的IPC发送关联响应帧,该关联响应帧用于指示第一关联响应消息。Optionally, the NVR may send an association response frame to the IPC indicated by the identifier of the IPC, where the association response frame is used to indicate the first association response message.
步骤4096、当第二接入密钥与原始接入密钥不相同时,NVR向IPC的标识所指示的IPC发送第二关联响应消息,该第二关联响应消息用于指示该IPC的标识所指示的IPC与NVR关联失败。Step 4096: When the second access key is different from the original access key, the NVR sends a second association response message to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate the identifier of the IPC. The indicated IPC failed to associate with the NVR.
可选的,NVR可以向IPC的标识所指示的IPC发送关联响应帧,该关联响应帧用于指示第二关联响应消息。Optionally, the NVR may send an association response frame to the IPC indicated by the identifier of the IPC, where the association response frame is used to indicate the second association response message.
步骤410、当接收到第一IPC发送的故障指示消息后,或者,当接收到第一IPC针对NVR发送的状态检测消息而返回的状态响应消息后,NVR确定第一IPC出现故障。Step 410: After receiving the fault indication message sent by the first IPC, or after receiving the status response message returned by the first IPC for the status detection message sent by the NVR, the NVR determines that the first IPC is faulty.
其中,状态响应消息用于指示第一IPC的设备状态为故障状态,第一IPC为NVR所管理的任一IPC。The status response message is used to indicate that the device status of the first IPC is a fault status, and the first IPC is any IPC managed by the NVR.
可选的,当第一IPC出现故障时,第一IPC可以主动向NVR发送故障指示消息,NVR接收到该故障指示消息后,确定该第一IPC出现故障。此外,NVR也可以定期向第一IPC发送状态检测消息,第一IPC向NVR发送状态响应消息,该状态响应消息用于指示第一IPC的设备状态,可选的,该设备状态可以包括正常状态和故障状态。Optionally, when the first IPC fails, the first IPC may actively send a fault indication message to the NVR, and after receiving the fault indication message, the NVR determines that the first IPC is faulty. In addition, the NVR may also periodically send a status detection message to the first IPC, and the first IPC sends a status response message to the NVR, where the status response message is used to indicate the device status of the first IPC. Optionally, the device status may include a normal status. And fault status.
步骤411、当确定第一IPC出现故障时,NVR将第一IPC的标识从预设标识集中删除,并将第一IPC的备份IPC的标识添加至预设标识集中。Step 411: When it is determined that the first IPC is faulty, the NVR deletes the identifier of the first IPC from the preset identifier set, and adds the identifier of the backup IPC of the first IPC to the preset identifier set.
在本申请实施例中,当NVR所管理的某一IPC出现故障时,NVR可以对出现故障的IPC进行替换,从而保证NVR所管理的IPC均为可用状态。In the embodiment of the present application, when an IPC managed by the NVR fails, the NVR can replace the failed IPC to ensure that the IPC managed by the NVR is in an available state.
示例的,NVR管理5个IPC,这个5个IPC分别是第一IPC、第二IPC、第三IPC、第四IPC和第五IPC。其中,第一IPC的标识为a1,第二IPC的标识为a2,第三IPC的标识为a3,第四IPC的标识为a4,第五IPC的标识为a5。假设第一IPC出现故障,那么NVR将a1从表1所示的预设标识集中删除,并 将第一IPC的备份IPC的标识a6添加至表1中,得到的结果如表3所示。这样一来,NVR管理的5个IPC的标识变为:a6、a2、a3、a4和a5。For example, the NVR manages 5 IPCs, which are the first IPC, the second IPC, the third IPC, the fourth IPC, and the fifth IPC, respectively. The identifier of the first IPC is a1, the identifier of the second IPC is a2, the identifier of the third IPC is a3, the identifier of the fourth IPC is a4, and the identifier of the fifth IPC is a5. Assuming that the first IPC is faulty, the NVR deletes a1 from the preset identifier set shown in Table 1, and adds the identifier a6 of the backup IPC of the first IPC to Table 1, and the obtained result is shown in Table 3. In this way, the identifiers of the five IPCs managed by the NVR become: a6, a2, a3, a4, and a5.
表3table 3
IPC的标识IPC logo
a6A6
a2A2
a3A3
a4A4
a5A5
另外,第一IPC的数量也可以为多个,也即是,当出现故障的第一IPC有多个时,NVR能够将出现故障的所有第一IPC的标识从预设标记集中删除,并将每个第一IPC的备份IPC的标识添加至预设标识集中。In addition, the number of the first IPC may also be multiple, that is, when there are multiple first IPCs that fail, the NVR can delete the identifiers of all the first IPCs that have failed from the preset mark set, and The identifier of the backup IPC of each first IPC is added to the preset identifier set.
需要说明的是,本申请实施例提供的设备接入方法步骤的先后顺序可以进行适当调整,步骤也可以根据情况进行相应增减,任何熟悉本技术领域的技术人员在本申请揭露的技术范围内,可轻易想到变化的方法,都应涵盖在本申请的保护范围之内,因此不再赘述。It should be noted that the sequence of the steps of the device access method provided by the embodiment of the present application may be appropriately adjusted, and the steps may be correspondingly increased or decreased according to the situation, and any person skilled in the art may be within the technical scope disclosed in the present application. The methods that can be easily thought of as changes are covered by the scope of protection of the present application, and therefore will not be described again.
综上所述,本申请实施例提供的设备接入方法,NVR能够周期性广播通知消息,且当通知消息包括预设的WIFI AP的标识时,IPC周期性广播接入请求消息,该接入请求消息包括IPC的标识。之后,NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,并当预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接入认证操作。整个过程无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, in the device access method provided by the embodiment of the present application, the NVR can periodically broadcast the notification message, and when the notification message includes the identifier of the preset WIFI AP, the IPC periodically broadcasts the access request message, and the access is performed. The request message includes the identity of the IPC. Then, the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set. The whole process does not require the mobile phone to receive the operation instructions triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
图6是根据一示例性实施例示出的一种设备接入装置500的框图,该设备接入装置用于NVR,参见图6,该设备接入装置包括:FIG. 6 is a block diagram of a device access device 500 for an NVR according to an exemplary embodiment. Referring to FIG. 6, the device access device includes:
广播模块510,用于周期性广播通知消息。The broadcast module 510 is configured to periodically broadcast a notification message.
获取模块520,用于获取IPC广播的接入请求消息,该接入请求消息包括IPC的标识,该接入请求消息是IPC在确定获取的NVR广播的通知消息包括预设的WIFI AP的标识时生成的。The obtaining module 520 is configured to obtain an access request message of the IPC broadcast, where the access request message includes an identifier of the IPC, where the access request message is that the IPC determines that the acquired notification message of the NVR broadcast includes the identifier of the preset WIFI AP. Generated.
检测模块530,用于检测预设标识集中是否存在接入请求消息中的IPC的标识。该预设标识集包括NVR所管理的IPC的标识。The detecting module 530 is configured to detect whether the identifier of the IPC in the access request message exists in the preset identifier set. The preset identifier set includes an identifier of an IPC managed by the NVR.
第一处理模块540,用于在预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接入认证操作。The first processing module 540 is configured to perform an access authentication operation on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set.
综上所述,本申请实施例提供的设备接入装置,NVR能够周期性广播通知消息,获取IPC广播的接入请求消息,该接入请求消息包括IPC的标识。NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,并当预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接入认证操作。其中,接入请求消息是IPC在确定获取的NVR广播的通知消息包括预设的WIFI AP的标识时生成的,该装置无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, the device access device provided by the embodiment of the present application can periodically broadcast a notification message to obtain an access request message of an IPC broadcast, where the access request message includes an identifier of the IPC. The NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set. The access request message is generated by the IPC when the notification message of the acquired NVR broadcast includes the identifier of the preset WIFI AP, and the device does not need the mobile phone to receive the operation instruction triggered by the user, thereby realizing automatic pre-authentication of the device, simplifying the pre- Certification process.
其中,通知消息包括第一接入密钥,该第一接入密钥是NVR对接入至WIFI AP的原始接入密钥进行加密后得到的。进一步的,如图7所示,该设备接入装置500还包括:The notification message includes a first access key, which is obtained by the NVR encrypting the original access key accessed to the WIFI AP. Further, as shown in FIG. 7, the device access device 500 further includes:
发送模块550,用于向IPC的标识所指示的IPC发送接入响应消息。The sending module 550 is configured to send an access response message to the IPC indicated by the identifier of the IPC.
认证模块560,用于基于原始接入密钥对IPC进行接入认证操作。The authentication module 560 is configured to perform an access authentication operation on the IPC based on the original access key.
进一步的,如图7所示,该设备接入装置500还包括:Further, as shown in FIG. 7, the device access device 500 further includes:
第二处理模块570,用于:The second processing module 570 is configured to:
在接收到第一IPC发送的故障指示消息后,或者,在接收到第一IPC针对NVR发送的状态检测消息而返回的状态响应消息后,确定第一IPC出现故障,该状态响应消息用于指示第一IPC的设备状态为故障状态,第一IPC为NVR所管理的任一IPC;After receiving the fault indication message sent by the first IPC, or after receiving the status response message returned by the first IPC for the status detection message sent by the NVR, determining that the first IPC is faulty, the status response message is used to indicate The device status of the first IPC is a fault state, and the first IPC is any IPC managed by the NVR;
在确定第一IPC出现故障时,将第一IPC的标识从预设标识集中删除,并将第一IPC的备份IPC的标识添加至预设标识集中。When it is determined that the first IPC is faulty, the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
其中,广播模块510,用于:The broadcast module 510 is configured to:
周期性广播信标帧,信标帧用于指示通知消息。The beacon frame is periodically broadcast, and the beacon frame is used to indicate a notification message.
可选的,认证模块560,用于:Optionally, the authentication module 560 is configured to:
接收IPC发送的关联消息,该关联消息包括第二接入密钥,该第二接入密钥是IPC对通知消息中的第一接入密钥进行解密后得到的;Receiving an association message sent by the IPC, where the association message includes a second access key, where the second access key is obtained by decrypting the first access key in the notification message by the IPC;
检测关联消息中的第二接入密钥是否与原始接入密钥相同;Detecting whether the second access key in the associated message is the same as the original access key;
当第二接入密钥与原始接入密钥相同时,向IPC的标识所指示的IPC发送第一关联响应消息,第一关联响应消息用于指示IPC的标识所指示的IPC与NVR关联成功;When the second access key is the same as the original access key, the first association response message is sent to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate that the IPC indicated by the identifier of the IPC is successfully associated with the NVR. ;
当第二接入密钥与原始接入密钥不相同时,向IPC的标识所指示的IPC发送第二关联响应消息,第二关联响应消息用于指示IPC的标识所指示的IPC与NVR关联失败。When the second access key is different from the original access key, the second association response message is sent to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate that the IPC indicated by the identifier of the IPC is associated with the NVR. failure.
进一步的,如图7所示,该设备接入装置500还包括:Further, as shown in FIG. 7, the device access device 500 further includes:
建立模块580,用于建立预设标识集。The establishing module 580 is configured to establish a preset identifier set.
可选的,IPC的标识为IPC的产品序列号。Optionally, the IPC identifier is the product serial number of the IPC.
进一步的,认证模块560,还用于:Further, the authentication module 560 is further configured to:
接收IPC发送的认证消息,该认证消息包括待传输图像数据的加密信息,加密信息用于NVR对IPC传输的待传输图像数据进行解密;Receiving an authentication message sent by the IPC, where the authentication message includes the encrypted information of the image data to be transmitted, and the encrypted information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
向IPC的标识所指示的IPC发送认证响应消息。An authentication response message is sent to the IPC indicated by the identity of the IPC.
图7中其他标记含义可以参考图6。The meaning of other marks in Fig. 7 can be referred to Fig. 6.
综上所述,本申请实施例提供的设备接入装置,NVR能够周期性广播通知消息,获取IPC广播的接入请求消息,该接入请求消息包括IPC的标识。NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,并当预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接入认证操作。其中,接入请求消息是IPC在确定获取的NVR广播的通知消息包括预设的WIFI AP的标识时生成的,该装置无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, the device access device provided by the embodiment of the present application can periodically broadcast a notification message to obtain an access request message of an IPC broadcast, where the access request message includes an identifier of the IPC. The NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set. The access request message is generated by the IPC when the notification message of the acquired NVR broadcast includes the identifier of the preset WIFI AP, and the device does not need the mobile phone to receive the operation instruction triggered by the user, thereby realizing automatic pre-authentication of the device, simplifying the pre- Certification process.
图8是根据一示例性实施例示出的一种设备接入装置600的框图,该设备接入装置用于IPC,参见图8,该设备接入装置包括:FIG. 8 is a block diagram of a device access device 600 for IPC according to an exemplary embodiment. Referring to FIG. 8, the device access device includes:
获取模块610,用于获取NVR广播的通知消息。The obtaining module 610 is configured to obtain a notification message of the NVR broadcast.
广播模块620,用于在通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,该接入请求消息包括IPC的标识。The broadcast module 620 is configured to periodically broadcast an access request message when the notification message includes the identifier of the preset WIFI AP, where the access request message includes an identifier of the IPC.
综上所述,本申请实施例提供的设备接入装置,IPC能够获取NVR广播的通知消息,并在通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,该接入请求消息包括IPC的标识,以便于NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,当预设标识集中存在接入请求消息中的IPC的标识时,NVR允许对IPC进行接入认证操作,该装置无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, in the device access device provided by the embodiment of the present application, the IPC can obtain the notification message of the NVR broadcast, and periodically broadcast the access request message when the notification message includes the identifier of the preset WIFI AP, and the access is performed. The request message includes the identifier of the IPC, so that the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set. When the identifier of the IPC in the access request message exists in the preset identifier set, the NVR allows the IPC to be connected. In the authentication operation, the device does not need the mobile phone to receive the operation instruction triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
其中,通知消息包括第一接入密钥,该第一接入密钥是NVR对接入至WIFI  AP的原始接入密钥进行加密后得到的,进一步的,如图9所示,该设备接入装置600还包括:The notification message includes a first access key, and the first access key is obtained by encrypting the original access key that is accessed by the NVR to the WIFI AP. Further, as shown in FIG. The access device 600 further includes:
解密模块630,用于在通知消息包括预设的WIFI AP的标识时,对通知消息中的第一接入密钥进行解密,得到第二接入密钥。The decryption module 630 is configured to: when the notification message includes the identifier of the preset WIFI AP, decrypt the first access key in the notification message to obtain the second access key.
其中,广播模块620,用于:The broadcast module 620 is configured to:
周期性广播探测请求帧,探测请求帧用于指示接入请求消息。The probe request frame is periodically broadcast, and the probe request frame is used to indicate an access request message.
进一步的,如图9所示,该设备接入装置600还包括:Further, as shown in FIG. 9, the device access device 600 further includes:
接收模块640,用于接收NVR发送的接入响应消息,该接入响应消息用于指示NVR允许对IPC进行接入认证操作。The receiving module 640 is configured to receive an access response message sent by the NVR, where the access response message is used to indicate that the NVR allows an access authentication operation on the IPC.
认证模块650,用于基于第二接入密钥进行接入认证操作。The authentication module 650 is configured to perform an access authentication operation based on the second access key.
可选的,认证模块650,用于:Optionally, the authentication module 650 is configured to:
向NVR发送关联消息,关联消息包括第二接入密钥;Sending an association message to the NVR, where the association message includes a second access key;
接收NVR发送的第一关联响应消息,第一关联响应消息用于指示IPC与NVR关联成功,第一关联响应消息是NVR在确定关联消息中的第二接入密钥与原始接入密钥相同时生成的,Receiving a first association response message sent by the NVR, where the first association response message is used to indicate that the IPC is successfully associated with the NVR, and the first association response message is that the second access key of the NVR in determining the associated message is compared with the original access key. Generated at the same time,
或者,接收NVR发送的第二关联响应消息,第二关联响应消息用于指示IPC与NVR关联失败,第二关联响应消息是NVR在确定关联消息中的第二接入密钥与原始接入密钥不相同时生成的。Or receiving a second association response message sent by the NVR, where the second association response message is used to indicate that the IPC is associated with the NVR, and the second association response message is the second access key and the original access secret of the NVR in determining the associated message. Generated when the keys are different.
进一步的,认证模块650,还用于:Further, the authentication module 650 is further configured to:
向NVR发送认证消息,认证消息包括待传输图像数据的加密信息,加密信息用于NVR对IPC传输的待传输图像数据进行解密;Sending an authentication message to the NVR, where the authentication message includes the encrypted information of the image data to be transmitted, and the encrypted information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
接收NVR发送的认证响应消息。Receive an authentication response message sent by the NVR.
综上所述,本申请实施例提供的设备接入装置,IPC能够获取NVR广播的通知消息,并在通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,该接入请求消息包括IPC的标识,以便于NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,当预设标识集中存在接入请求消息中的IPC的标识时,NVR允许对IPC进行接入认证操作,该装置无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, in the device access device provided by the embodiment of the present application, the IPC can obtain the notification message of the NVR broadcast, and periodically broadcast the access request message when the notification message includes the identifier of the preset WIFI AP, and the access is performed. The request message includes the identifier of the IPC, so that the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set. When the identifier of the IPC in the access request message exists in the preset identifier set, the NVR allows the IPC to be connected. In the authentication operation, the device does not need the mobile phone to receive the operation instruction triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
本申请实施例提供了一种设备接入***,该设备接入***包括NVR和IPC。The embodiment of the present application provides a device access system, where the device access system includes an NVR and an IPC.
其中,NVR包括图6或图7所示的设备接入装置;The NVR includes the device access device shown in FIG. 6 or FIG. 7;
IPC包括图8或图9所示的设备接入装置。The IPC includes the device access device shown in FIG. 8 or 9.
本申请实施例还提供了一种设备接入装置,用于NVR,NVR设置有WIFI AP,该装置包括:The embodiment of the present application further provides a device access device, which is used for an NVR, and the NVR is provided with a WIFI AP, and the device includes:
一个或多个处理器;和One or more processors; and
存储器;Memory
所述存储器存储有一个或多个程序,所述一个或多个程序被配置成由所述一个或多个处理器执行,且经配置由一个或多个处理器通过执行上述程序来执行上述各个实施例中NVR所执行的设备接入方法。The memory stores one or more programs, the one or more programs configured to be executed by the one or more processors, and configured to be executed by one or more processors by executing the above-described programs The device access method performed by the NVR in the embodiment.
本申请实施例还提供了一种设备接入装置,用于IPC,该装置包括:The embodiment of the present application further provides a device access device, which is used for IPC, and the device includes:
一个或多个处理器;和One or more processors; and
存储器;Memory
所述存储器存储有一个或多个程序,所述一个或多个程序被配置成由所述一个或多个处理器执行,且经配置由一个或多个处理器通过执行上述各个实施例中IPC所执行的设备接入方法。The memory stores one or more programs, the one or more programs configured to be executed by the one or more processors, and configured by one or more processors to perform IPC in the various embodiments described above The device access method performed.
图10是根据一示例性实施例示出的再一种设备接入装置700的结构示意图,用于NVR,该设备接入装置700包括:FIG. 10 is a schematic structural diagram of still another device access device 700, which is used in an NVR, and includes:
处理器701、存储器702、网络接口703和总线704。总线704用于连接处理器701、存储器702和网络接口703,处理器701用于执行存储器702中存储的程序7021。 Processor 701, memory 702, network interface 703, and bus 704. The bus 704 is used to connect to the processor 701, the memory 702, and the network interface 703, and the processor 701 is configured to execute the program 7021. stored in the memory 702.
存储器702可能包含高速随机存取存储器,也可能包含非不稳定的存储器,例如至少一个磁盘存储器。通过网络接口703(可以是无线)实现该设备接入装置与IPC的通信连接。处理器701可以执行存储器702中存储的程序7021来实现NVR,并使得NVR执行下述设备接入方法:Memory 702 may include high speed random access memory, and may also include non-volatile memory, such as at least one disk storage. The communication connection between the device access device and the IPC is implemented through a network interface 703 (which may be wireless). The processor 701 can execute the program 7021 stored in the memory 702 to implement the NVR, and cause the NVR to perform the following device access method:
周期性广播通知消息;Periodically broadcast a notification message;
获取网络摄像机IPC广播的接入请求消息,接入请求消息包括IPC的标识,接入请求消息是IPC在确定获取的NVR广播的通知消息包括预设的WIFI AP的标识时生成的;Obtaining an access request message of the network camera IPC broadcast, where the access request message includes an identifier of the IPC, and the access request message is generated by the IPC when determining that the obtained notification message of the NVR broadcast includes the identifier of the preset WIFI AP;
检测预设标识集中是否存在接入请求消息中的IPC的标识,预设标识集包括NVR所管理的IPC的标识;Detecting, in the preset identifier set, whether there is an identifier of the IPC in the access request message, where the preset identifier set includes an identifier of the IPC managed by the NVR;
当预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接 入认证操作。When the identifier of the IPC in the access request message exists in the preset identifier set, the access authentication operation is allowed to be performed on the IPC.
可选的,通知消息包括第一接入密钥,该第一接入密钥是NVR对预设的接入至WIFI AP的原始接入密钥进行加密后得到的。Optionally, the notification message includes a first access key, where the first access key is obtained by encrypting, by the NVR, the original access key that is preset to access the WIFI AP.
在允许对IPC进行接入认证操作之后,该方法还包括:After allowing access authentication operations on the IPC, the method further includes:
向IPC的标识所指示的IPC发送接入响应消息;Sending an access response message to the IPC indicated by the identifier of the IPC;
基于原始接入密钥对IPC进行接入认证操作。The access authentication operation is performed on the IPC based on the original access key.
可选的,该方法还包括:Optionally, the method further includes:
当接收到第一IPC发送的故障指示消息后,或者,当接收到第一IPC针对NVR发送的状态检测消息而返回的状态响应消息后,确定第一IPC出现故障,状态响应消息用于指示第一IPC的设备状态为故障状态,第一IPC为NVR所管理的任一IPC;After receiving the fault indication message sent by the first IPC, or after receiving the status response message returned by the first IPC for the status detection message sent by the NVR, determining that the first IPC is faulty, the status response message is used to indicate the The device status of an IPC is a fault state, and the first IPC is any IPC managed by the NVR;
当确定第一IPC出现故障时,将第一IPC的标识从预设标识集中删除,并将第一IPC的备份IPC的标识添加至预设标识集中。When it is determined that the first IPC is faulty, the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
可选的,周期性广播通知消息,包括:Optionally, the periodic broadcast notification message includes:
周期性广播信标帧,信标帧用于指示通知消息。The beacon frame is periodically broadcast, and the beacon frame is used to indicate a notification message.
可选的,基于原始接入密钥对IPC进行接入认证操作,包括:Optionally, the access authentication operation is performed on the IPC based on the original access key, including:
接收IPC发送的关联消息,关联消息包括第二接入密钥,第二接入密钥是IPC对通知消息中的第一接入密钥进行解密后得到的;Receiving an association message sent by the IPC, where the association message includes a second access key, where the second access key is obtained by the IPC decrypting the first access key in the notification message;
检测关联消息中的第二接入密钥是否与原始接入密钥相同;Detecting whether the second access key in the associated message is the same as the original access key;
当第二接入密钥与原始接入密钥相同时,向IPC的标识所指示的IPC发送第一关联响应消息,第一关联响应消息用于指示IPC的标识所指示的IPC与NVR关联成功;When the second access key is the same as the original access key, the first association response message is sent to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate that the IPC indicated by the identifier of the IPC is successfully associated with the NVR. ;
当第二接入密钥与原始接入密钥不相同时,向IPC的标识所指示的IPC发送第二关联响应消息,第二关联响应消息用于指示IPC的标识所指示的IPC与NVR关联失败。When the second access key is different from the original access key, the second association response message is sent to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate that the IPC indicated by the identifier of the IPC is associated with the NVR. failure.
可选的,在周期性广播通知消息之前,该方法还包括:Optionally, before periodically broadcasting the notification message, the method further includes:
建立预设标识集。Create a preset ID set.
可选的,IPC的标识为IPC的产品序列号。Optionally, the IPC identifier is the product serial number of the IPC.
可选的,在接收IPC发送的关联消息之前,该方法还包括:Optionally, before receiving the associated message sent by the IPC, the method further includes:
接收IPC发送的认证消息,认证消息包括待传输图像数据的加密信息,加密信息用于NVR对IPC传输的待传输图像数据进行解密;Receiving an authentication message sent by the IPC, the authentication message includes the encrypted information of the image data to be transmitted, and the encrypted information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
向IPC的标识所指示的IPC发送认证响应消息。An authentication response message is sent to the IPC indicated by the identity of the IPC.
综上所述,本申请实施例提供的设备接入装置,NVR能够周期性广播通知消息,获取IPC广播的接入请求消息,该接入请求消息包括IPC的标识。NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,并当预设标识集中存在接入请求消息中的IPC的标识时,允许对IPC进行接入认证操作。其中,接入请求消息是IPC在确定通知消息包括预设的WIFI AP的标识时生成的,该装置无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, the device access device provided by the embodiment of the present application can periodically broadcast a notification message to obtain an access request message of an IPC broadcast, where the access request message includes an identifier of the IPC. The NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set, and allows the access authentication operation to be performed on the IPC when the identifier of the IPC in the access request message exists in the preset identifier set. The access request message is generated when the IPC determines that the notification message includes the identifier of the preset WIFI AP. The device does not need the mobile phone to receive the operation instruction triggered by the user, and implements automatic pre-authentication of the device, which simplifies the pre-authentication process.
图11是根据一示例性实施例示出的又一种设备接入装置800的结构示意图,用于IPC。参见图11,该设备接入装置800可以包括以下一个或多个组件:处理组件801,存储器802,电源组件803,多媒体组件804,音频组件805,输入/输出(I/O)接口806,传感器组件807,以及通信组件808。FIG. 11 is a schematic structural diagram of another device access apparatus 800 for IPC according to an exemplary embodiment. Referring to Figure 11, the device access device 800 can include one or more of the following components: a processing component 801, a memory 802, a power component 803, a multimedia component 804, an audio component 805, an input/output (I/O) interface 806, a sensor Component 807, and communication component 808.
处理组件801通常控制装置800的整体操作,诸如与显示,数据通信,相机操作和记录操作相关联的操作。处理组件801可以包括一个或多个处理器810来执行指令,以完成上述的方法的全部或部分步骤。此外,处理组件801可以包括一个或多个模块,便于处理组件801和其他组件之间的交互。例如,处理组件801可以包括多媒体模块,以方便多媒体组件804和处理组件801之间的交互。 Processing component 801 typically controls the overall operation of device 800, such as operations associated with display, data communication, camera operations, and recording operations. Processing component 801 can include one or more processors 810 to execute instructions to perform all or part of the steps described above. Moreover, processing component 801 can include one or more modules to facilitate interaction between component 801 and other components. For example, processing component 801 can include a multimedia module to facilitate interaction between multimedia component 804 and processing component 801.
存储器802被配置为存储各种类型的数据以支持在装置800的操作。这些数据的示例包括用于在装置800上操作的任何应用程序或方法的指令,图片,视频等。存储器802可以由任何类型的易失性或非易失性存储设备或者它们的组合实现,如静态随机存取存储器(SRAM),电可擦除可编程只读存储器(EEPROM),可擦除可编程只读存储器(EPROM),可编程只读存储器(PROM),只读存储器(ROM),磁存储器,快闪存储器,磁盘或光盘。 Memory 802 is configured to store various types of data to support operation at device 800. Examples of such data include instructions, pictures, videos, etc. for any application or method operating on device 800. The memory 802 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read only memory (EEPROM), erasable Programmable Read Only Memory (EPROM), Programmable Read Only Memory (PROM), Read Only Memory (ROM), Magnetic Memory, Flash Memory, Disk or Optical Disk.
电源组件803为装置800的各种组件提供电力。电源组件803可以包括电源管理***,一个或多个电源,及其他与为装置800生成、管理和分配电力相关联的组件。 Power component 803 provides power to various components of device 800. Power component 803 can include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power for device 800.
多媒体组件804包括在所述装置800和用户之间的提供一个输出接口的屏幕。在一些实施例中,屏幕可以包括液晶显示器(LCD)和触摸面板(TP)。如果屏幕包括触摸面板,屏幕可以被实现为触摸屏,以接收来自用户的输入信号。 触摸面板包括一个或多个触摸传感器以感测触摸、滑动和触摸面板上的手势。所述触摸传感器可以不仅感测触摸或滑动动作的边界,而且还检测与所述触摸或滑动操作相关的持续时间和压力。在一些实施例中,多媒体组件804包括一个前置摄像头和/或后置摄像头。当装置800处于操作模式,如拍摄模式或视频模式时,前置摄像头和/或后置摄像头可以接收外部的多媒体数据。每个前置摄像头和后置摄像头可以是一个固定的光学透镜***或具有焦距和光学变焦能力。 Multimedia component 804 includes a screen between the device 800 and a user that provides an output interface. In some embodiments, the screen can include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen can be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, slides, and gestures on the touch panel. The touch sensor may sense not only the boundary of the touch or sliding action, but also the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 804 includes a front camera and/or a rear camera. When the device 800 is in an operation mode, such as a shooting mode or a video mode, the front camera and/or the rear camera can receive external multimedia data. Each front and rear camera can be a fixed optical lens system or have focal length and optical zoom capabilities.
音频组件805被配置为输出和/或输入音频信号。例如,音频组件805包括一个麦克风(MIC),当装置800处于操作模式,如呼叫模式、记录模式和语音识别模式时,麦克风被配置为接收外部音频信号。所接收的音频信号可以被进一步存储在存储器802或经由通信组件808发送。在一些实施例中,音频组件805还包括一个扬声器,用于输出音频信号。The audio component 805 is configured to output and/or input audio signals. For example, the audio component 805 includes a microphone (MIC) that is configured to receive an external audio signal when the device 800 is in an operational mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signal may be further stored in memory 802 or transmitted via communication component 808. In some embodiments, the audio component 805 also includes a speaker for outputting an audio signal.
I/O接口806为处理组件801和***接口模块之间提供接口,上述***接口模块可以是键盘,点击轮,按钮等。这些按钮可包括但不限于:主页按钮、音量按钮、启动按钮和锁定按钮。The I/O interface 806 provides an interface between the processing component 801 and the peripheral interface module, which may be a keyboard, a click wheel, a button, or the like. These buttons may include, but are not limited to, a home button, a volume button, a start button, and a lock button.
传感器组件807包括一个或多个传感器,用于为装置800提供各个方面的状态评估。例如,传感器组件807可以检测到装置800的打开/关闭状态,组件的相对定位,例如所述组件为装置800的显示器和小键盘,传感器组件807还可以检测装置800或装置800的一个组件的位置改变,用户与装置800接触的存在或不存在,装置800方位或加速/减速和装置800的温度变化。传感器组件807可以包括接近传感器,被配置用来在没有任何的物理接触时检测附近物体的存在。传感器组件807还可以包括光传感器,如CMOS或CCD图像传感器,用于在成像应用中使用。在一些实施例中,该传感器组件807还可以包括加速度传感器,陀螺仪传感器,磁传感器,压力传感器或温度传感器。 Sensor assembly 807 includes one or more sensors for providing status assessment of various aspects to device 800. For example, sensor assembly 807 can detect an open/closed state of device 800, relative positioning of components, such as the display and keypad of device 800, and sensor component 807 can also detect the location of one component of device 800 or device 800. Changes, the presence or absence of user contact with device 800, device 800 orientation or acceleration/deceleration, and temperature variation of device 800. Sensor assembly 807 can include a proximity sensor configured to detect the presence of nearby objects without any physical contact. Sensor assembly 807 can also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 807 can also include an acceleration sensor, a gyro sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.
通信组件808被配置为便于装置800和其他设备之间有线或无线方式的通信。装置800可以接入基于通信标准的无线网络,如WIFI,2G或3G,或它们的组合。在一个示例性实施例中,通信组件808经由广播信道接收来自外部广播管理***的广播信号或广播相关信息。在一个示例性实施例中,所述通信组件808还包括近场通信(NFC)模块,以促进短程通信。例如,在NFC模块可基于射频识别(RFID)技术,红外数据协会(IrDA)技术,超宽带(UWB)技术,蓝牙(BT)技术和其他技术来实现。 Communication component 808 is configured to facilitate wired or wireless communication between device 800 and other devices. The device 800 can access a wireless network based on a communication standard, such as WIFI, 2G or 3G, or a combination thereof. In an exemplary embodiment, communication component 808 receives broadcast signals or broadcast associated information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 808 also includes a near field communication (NFC) module to facilitate short range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.
在示例性实施例中,装置800可以被一个或多个应用专用集成电路(ASIC)、数字信号处理器(DSP)、数字信号处理设备(DSPD)、可编程逻辑器件(PLD)、现场可编程门阵列(FPGA)、控制器、微控制器、微处理器或其他电子元件实现,用于执行上述方法。In an exemplary embodiment, device 800 may be implemented by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable A gate array (FPGA), controller, microcontroller, microprocessor, or other electronic component implementation for performing the above methods.
在示例性实施例中,还提供了一种包括指令的非临时性计算机可读存储介质,例如包括指令的存储器802,上述指令可由装置800的处理器810执行以完成上述方法。例如,所述非临时性计算机可读存储介质可以是ROM、随机存取存储器(RAM)、只读存储器(CD-ROM)、磁带、软盘和光数据存储设备等。In an exemplary embodiment, there is also provided a non-transitory computer readable storage medium comprising instructions, such as a memory 802 comprising instructions executable by processor 810 of apparatus 800 to perform the above method. For example, the non-transitory computer readable storage medium can be a ROM, a random access memory (RAM), a read only memory (CD-ROM), a magnetic tape, a floppy disk, and an optical data storage device.
一种非临时性计算机可读存储介质,当所述存储介质中的指令由装置800的处理器执行时,使得装置800能够执行图3所示的设备接入方法,或者执行图4所示实施例中的相关步骤。A non-transitory computer readable storage medium, when instructions in the storage medium are executed by a processor of apparatus 800, enabling apparatus 800 to perform the apparatus access method illustrated in FIG. 3, or to perform the implementation illustrated in FIG. Related steps in the example.
综上所述,本申请实施例提供的设备接入装置,IPC能够获取NVR广播的通知消息,并在通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,该接入请求消息包括IPC的标识,以便于NVR检测预设标识集中是否存在接入请求消息中的IPC的标识,当预设标识集中存在接入请求消息中的IPC的标识时,NVR允许对IPC进行接入认证操作,该装置无需手机接收用户触发的操作指令,实现了设备自动预认证,简化了预认证过程。In summary, in the device access device provided by the embodiment of the present application, the IPC can obtain the notification message of the NVR broadcast, and periodically broadcast the access request message when the notification message includes the identifier of the preset WIFI AP, and the access is performed. The request message includes the identifier of the IPC, so that the NVR detects whether there is an identifier of the IPC in the access request message in the preset identifier set. When the identifier of the IPC in the access request message exists in the preset identifier set, the NVR allows the IPC to be connected. In the authentication operation, the device does not need the mobile phone to receive the operation instruction triggered by the user, and realizes the automatic pre-authentication of the device, which simplifies the pre-authentication process.
本申请实施例还提供了一种设备接入***,该设备接入***包括NVR和IPC。The embodiment of the present application further provides a device access system, where the device access system includes an NVR and an IPC.
其中,NVR包括图10所示的设备接入装置;The NVR includes the device access device shown in FIG. 10;
IPC包括图11所示的设备接入装置。The IPC includes the device access device shown in FIG.
在上述实施例中,可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时,可以全部或部分地以计算机程序产品的形式实现,所述计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行所述计算机程序指令时,全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机的可读存储介质中,或者从一个计算机可读存储介质向另一个计算机可读存储介质传输,例如,所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用 户线)或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质(例如,软盘、硬盘、磁带)、光介质,或者半导体介质(例如固态硬盘)等。In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, it may be implemented in whole or in part in the form of a computer program product comprising one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions described in accordance with embodiments of the present application are generated in whole or in part. The computer can be a general purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a readable storage medium of a computer or transferred from one computer readable storage medium to another computer readable storage medium, for example, the computer instructions can be from a website site, computer, server or data The center transmits to another website site, computer, server, or data center by wire (eg, coaxial cable, fiber optic, digital subscriber line) or wireless (eg, infrared, wireless, microwave, etc.). The computer readable storage medium can be any available media that can be accessed by a computer or a data storage device such as a server, data center, or the like that includes one or more available media. The usable medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium, or a semiconductor medium (eg, a solid state hard disk) or the like.
所属领域的技术人员可以清楚地了解到,为描述的方便和简洁,上述描述的***、装置和模块的具体工作过程,可以参考前述方法实施例中的对应过程,在此不再赘述。A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the module described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.
本领域技术人员在考虑说明书及实践这里发明的发明后,将容易想到本申请的其它实施方案。本申请旨在涵盖本申请的任何变型、用途或者适应性变化,这些变型、用途或者适应性变化遵循本申请的一般性原理并包括本申请未公开的本技术领域中的公知常识或惯用技术手段。说明书和实施例仅被视为示例性的,本申请的真正范围和精神由权利要求指出。Other embodiments of the present application will be apparent to those skilled in the <RTIgt; The application is intended to cover any variations, uses, or adaptations of the application, which are in accordance with the general principles of the application and include common general knowledge or common technical means in the art that are not disclosed herein. . The specification and examples are to be regarded as illustrative only,
应当理解的是,本申请并不局限于上面已经描述并在附图中示出的精确结构,并且可以在不脱离其范围进行各种修改和改变。本申请的范围仅由所附的权利要求来限制。It is to be understood that the invention is not limited to the details of the details and The scope of the present application is limited only by the accompanying claims.

Claims (15)

  1. 一种设备接入方法,用于网络硬盘录像机NVR,所述NVR设置有无线保真WIFI接入点AP,所述方法包括:A device access method is used for a network hard disk recorder (NVR), and the NVR is provided with a wireless fidelity WIFI access point AP, and the method includes:
    周期性广播通知消息;Periodically broadcast a notification message;
    获取网络摄像机IPC广播的接入请求消息,所述接入请求消息包括所述IPC的标识,所述接入请求消息是所述IPC在确定获取的所述NVR广播的所述通知消息包括预设的WIFI AP的标识时生成的;Acquiring an access request message of the IPC broadcast of the network camera, where the access request message includes an identifier of the IPC, where the access request message is that the notification message of the NVR broadcasted by the IPC includes a preset Generated when the WIFI AP is identified;
    检测预设标识集中是否存在所述接入请求消息中的IPC的标识,所述预设标识集包括所述NVR所管理的IPC的标识;Detecting, in the preset identifier set, whether an identifier of the IPC in the access request message exists, where the preset identifier set includes an identifier of an IPC managed by the NVR;
    当所述预设标识集中存在所述接入请求消息中的IPC的标识时,允许对所述IPC进行接入认证操作。When the identifier of the IPC in the access request message exists in the preset identifier, the access authentication operation is allowed to be performed on the IPC.
  2. 根据权利要求1所述的方法,所述通知消息包括第一接入密钥,所述第一接入密钥是所述NVR对接入至所述WIFI AP的原始接入密钥进行加密后得到的,The method according to claim 1, wherein the notification message includes a first access key, and the first access key is after the NVR encrypts an original access key accessed to the WIFI AP. owned,
    在所述允许对所述IPC进行接入认证操作之后,所述方法还包括:After the access authentication operation is performed on the IPC, the method further includes:
    向所述IPC的标识所指示的IPC发送接入响应消息;Sending an access response message to the IPC indicated by the identifier of the IPC;
    基于所述原始接入密钥对所述IPC进行接入认证操作。Performing an access authentication operation on the IPC based on the original access key.
  3. 根据权利要求1所述的方法,所述方法还包括:The method of claim 1 further comprising:
    当接收到第一IPC发送的故障指示消息后,或者,当接收到所述第一IPC针对所述NVR发送的状态检测消息而返回的状态响应消息后,确定所述第一IPC出现故障,所述状态响应消息用于指示所述第一IPC的设备状态为故障状态,所述第一IPC为所述NVR所管理的任一IPC;After receiving the fault indication message sent by the first IPC, or after receiving the status response message returned by the first IPC for the status detection message sent by the NVR, determining that the first IPC is faulty, The status response message is used to indicate that the device status of the first IPC is a fault state, and the first IPC is any IPC managed by the NVR;
    当确定所述第一IPC出现故障时,将所述第一IPC的标识从所述预设标识集中删除,并将所述第一IPC的备份IPC的标识添加至所述预设标识集中。When it is determined that the first IPC is faulty, the identifier of the first IPC is deleted from the preset identifier set, and the identifier of the backup IPC of the first IPC is added to the preset identifier set.
  4. 根据权利要求1所述的方法,所述周期性广播通知消息,包括:The method according to claim 1, wherein the periodic broadcast notification message comprises:
    周期性广播信标帧,所述信标帧用于指示所述通知消息。The beacon frame is periodically broadcast, and the beacon frame is used to indicate the notification message.
  5. 根据权利要求2所述的方法,所述基于所述原始接入密钥对所述IPC进行接入认证操作,包括:The method of claim 2, the performing an access authentication operation on the IPC based on the original access key, comprising:
    接收所述IPC发送的关联消息,所述关联消息包括第二接入密钥,所述第二接入密钥是所述IPC对所述通知消息中的第一接入密钥进行解密后得到的;Receiving, by the IPC, an association message, where the association message includes a second access key, where the second access key is obtained by the IPC decrypting the first access key in the notification message. of;
    检测所述关联消息中的第二接入密钥是否与所述原始接入密钥相同;Detecting whether the second access key in the associated message is the same as the original access key;
    当所述第二接入密钥与所述原始接入密钥相同时,向所述IPC的标识所指示的IPC发送第一关联响应消息,所述第一关联响应消息用于指示所述IPC的标识所指示的IPC与所述NVR关联成功;When the second access key is the same as the original access key, sending a first association response message to the IPC indicated by the identifier of the IPC, where the first association response message is used to indicate the IPC The IPC indicated by the identifier is successfully associated with the NVR;
    当所述第二接入密钥与所述原始接入密钥不相同时,向所述IPC的标识所指示的IPC发送第二关联响应消息,所述第二关联响应消息用于指示所述IPC的标识所指示的IPC与所述NVR关联失败。When the second access key is different from the original access key, sending a second association response message to the IPC indicated by the identifier of the IPC, where the second association response message is used to indicate the The IPC indicated by the identity of the IPC fails to associate with the NVR.
  6. 根据权利要求5所述的方法,在所述接收所述IPC发送的关联消息之前,所述方法还包括:The method according to claim 5, before the receiving the associated message sent by the IPC, the method further includes:
    接收所述IPC发送的认证消息,所述认证消息包括待传输图像数据的加密信息,所述加密信息用于所述NVR对所述IPC传输的所述待传输图像数据进行解密;Receiving an authentication message sent by the IPC, where the authentication message includes encryption information of image data to be transmitted, and the encryption information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
    向所述IPC的标识所指示的IPC发送认证响应消息。Sending an authentication response message to the IPC indicated by the identity of the IPC.
  7. 一种设备接入方法,用于网络摄像机IPC,所述方法包括:A device access method is used for a network camera IPC, and the method includes:
    获取网络硬盘录像机NVR广播的通知消息;Obtaining a notification message of the network hard disk recorder NVR broadcast;
    当所述通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,所述接入请求消息包括所述IPC的标识。And when the notification message includes the identifier of the preset WIFI AP, periodically broadcasting an access request message, where the access request message includes an identifier of the IPC.
  8. 根据权利要求7所述的方法,所述通知消息包括第一接入密钥,所述第一接入密钥是所述NVR对接入至所述WIFI AP的原始接入密钥进行加密后得到的,The method according to claim 7, wherein the notification message includes a first access key, and the first access key is an encryption of the original access key accessed by the NVR to the WIFI AP. owned,
    所述方法还包括:The method further includes:
    当所述通知消息包括预设的所述WIFI AP的标识时,对所述通知消息中的第一接入密钥进行解密,得到第二接入密钥。When the notification message includes the identifier of the WIFI AP, the first access key in the notification message is decrypted to obtain a second access key.
  9. 根据权利要求7所述的方法,所述周期性广播接入请求消息,包括:The method according to claim 7, the periodic broadcast access request message includes:
    周期性广播探测请求帧,所述探测请求帧用于指示所述接入请求消息。The probe request frame is periodically broadcasted, and the probe request frame is used to indicate the access request message.
  10. 根据权利要求8所述的方法,在所述周期性广播接入请求消息之后,所述方法还包括:The method of claim 8, after the periodic broadcast access request message, the method further comprises:
    接收所述NVR发送的接入响应消息,所述接入响应消息用于指示所述NVR允许对所述IPC进行接入认证操作;Receiving an access response message sent by the NVR, where the access response message is used to indicate that the NVR is allowed to perform an access authentication operation on the IPC;
    基于所述第二接入密钥进行接入认证操作。Performing an access authentication operation based on the second access key.
  11. 根据权利要求10所述的方法,所述基于所述第二接入密钥进行接入认证操作,包括:The method of claim 10, the performing an access authentication operation based on the second access key, comprising:
    向所述NVR发送关联消息,所述关联消息包括所述第二接入密钥;Sending an association message to the NVR, where the association message includes the second access key;
    接收所述NVR发送的第一关联响应消息,所述第一关联响应消息用于指示所述IPC与所述NVR关联成功,所述第一关联响应消息是所述NVR在确定所述关联消息中的第二接入密钥与所述原始接入密钥相同时生成的,Receiving a first association response message sent by the NVR, where the first association response message is used to indicate that the IPC is successfully associated with the NVR, and the first association response message is that the NVR is in determining the associated message. Generated when the second access key is the same as the original access key,
    或者,接收所述NVR发送的第二关联响应消息,所述第二关联响应消息用于指示所述IPC与所述NVR关联失败,所述第二关联响应消息是所述NVR在确定所述关联消息中的第二接入密钥与所述原始接入密钥不相同时生成的。Or receiving a second association response message sent by the NVR, where the second association response message is used to indicate that the IPC is associated with the NVR, and the second association response message is that the NVR is determining the association. The second access key in the message is generated when the second access key is different from the original access key.
  12. 根据权利要求11所述的方法,在所述向所述NVR发送关联消息之前,所述方法还包括:The method of claim 11, before the sending the association message to the NVR, the method further includes:
    向所述NVR发送认证消息,所述认证消息包括待传输图像数据的加密信息,所述加密信息用于所述NVR对所述IPC传输的所述待传输图像数据进行解密;Sending an authentication message to the NVR, where the authentication message includes encryption information of image data to be transmitted, and the encryption information is used by the NVR to decrypt the image data to be transmitted transmitted by the IPC;
    接收所述NVR发送的认证响应消息。Receiving an authentication response message sent by the NVR.
  13. 一种设备接入装置,用于网络硬盘录像机NVR,所述NVR设置有无线保真WIFI接入点AP,所述装置包括:A device access device is used for a network hard disk recorder NVR, and the NVR is provided with a wireless fidelity WIFI access point AP, and the device includes:
    一个或多个处理器;和One or more processors; and
    存储器;Memory
    所述存储器存储有一个或多个程序,所述一个或多个程序被配置成由所述一个或多个处理器执行,所述一个或多个程序包含用于进行以下操作的指令:The memory stores one or more programs, the one or more programs being configured to be executed by the one or more processors, the one or more programs including instructions for:
    周期性广播通知消息;Periodically broadcast a notification message;
    获取网络摄像机IPC广播的接入请求消息,所述接入请求消息包括所述IPC的标识,所述接入请求消息是所述IPC在确定所述通知消息包括预设的WIFI AP的标识时生成的;Obtaining an access request message of the network camera IPC broadcast, where the access request message includes an identifier of the IPC, where the access request message is generated by the IPC when determining that the notification message includes a preset identifier of a WIFI AP of;
    检测预设标识集中是否存在所述接入请求消息中的IPC的标识,所述预设标识集包括所述NVR所管理的IPC的标识;Detecting, in the preset identifier set, whether an identifier of the IPC in the access request message exists, where the preset identifier set includes an identifier of an IPC managed by the NVR;
    在所述预设标识集中存在所述接入请求消息中的IPC的标识时,允许对所述IPC进行接入认证操作。When the identifier of the IPC in the access request message exists in the preset identifier set, the access authentication operation is allowed to be performed on the IPC.
  14. 一种设备接入装置,用于网络摄像机IPC,所述装置包括:A device access device for a network camera IPC, the device comprising:
    一个或多个处理器;和One or more processors; and
    存储器;Memory
    所述存储器存储有一个或多个程序,所述一个或多个程序被配置成由所述一个或多个处理器执行,所述一个或多个程序包含用于进行以下操作的指令:The memory stores one or more programs, the one or more programs being configured to be executed by the one or more processors, the one or more programs including instructions for:
    获取网络硬盘录像机NVR广播的通知消息;Obtaining a notification message of the network hard disk recorder NVR broadcast;
    在所述通知消息包括预设的WIFI AP的标识时,周期性广播接入请求消息,所述接入请求消息包括所述IPC的标识。And when the notification message includes the identifier of the preset WIFI AP, periodically broadcasting an access request message, where the access request message includes an identifier of the IPC.
  15. 一种设备接入***,包括NVR和IPC,A device access system, including NVR and IPC,
    所述NVR包括权利要求13所述的设备接入装置,所述IPC包括权利要求14所述的设备接入装置。The NVR includes the device access device of claim 13, the IPC comprising the device access device of claim 14.
PCT/CN2018/083872 2017-06-15 2018-04-20 Device access method, apparatus and system WO2018228051A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710452592.4A CN109151815A (en) 2017-06-15 2017-06-15 Equipment cut-in method, apparatus and system
CN201710452592.4 2017-06-15

Publications (1)

Publication Number Publication Date
WO2018228051A1 true WO2018228051A1 (en) 2018-12-20

Family

ID=64659681

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/083872 WO2018228051A1 (en) 2017-06-15 2018-04-20 Device access method, apparatus and system

Country Status (2)

Country Link
CN (1) CN109151815A (en)
WO (1) WO2018228051A1 (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111818520A (en) * 2020-07-20 2020-10-23 深圳市富视康实业发展有限公司 Method and system for assembling NVR and IPC
CN112135296A (en) * 2020-09-23 2020-12-25 北京蓦然认知科技有限公司 Improved beacon frame based security monitoring method and device
CN113596808A (en) * 2021-07-28 2021-11-02 深圳市吉祥腾达科技有限公司 NVR and IPC wireless ad hoc network method

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109584625A (en) * 2019-01-25 2019-04-05 上海亦源智能科技有限公司 The connection control method and system of intelligent parking management equipment
CN111600732B (en) * 2019-02-20 2023-06-20 浙江宇视科技有限公司 Method and device for automatically activating and adding front-end equipment by front-end management equipment
CN112019801B (en) * 2019-05-31 2022-10-25 星宸科技股份有限公司 Image monitoring system and its local network system and construction method
CN110381505B (en) * 2019-07-22 2023-06-16 浙江大华技术股份有限公司 Method and device for accessing network hard disk video recorder

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2028857A1 (en) * 2007-08-21 2009-02-25 Alcatel Lucent Method and system for pausing and resuming a real-time data stream
EP2728860A2 (en) * 2012-10-30 2014-05-07 Teleste Oyj Integration of video surveillance systems
CN103905448A (en) * 2014-04-01 2014-07-02 江苏物联网研究发展中心 Video camera equipment entity authentication method for urban security and protection
CN106453370A (en) * 2016-10-27 2017-02-22 浙江宇视科技有限公司 Method and device for allowing IPC to register to NVR

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101192960A (en) * 2006-11-28 2008-06-04 中兴通讯股份有限公司 Main/slave switching detection and control device and method in distributed system
CN101132314B (en) * 2007-09-21 2010-09-29 中兴通讯股份有限公司 Method for implementing redundancy backup
US8522312B2 (en) * 2008-05-13 2013-08-27 At&T Mobility Ii Llc Access control lists and profiles to manage femto cell coverage
CN101989933A (en) * 2009-08-03 2011-03-23 中兴通讯股份有限公司 Method and system for failure detection
CN101873462B (en) * 2009-08-07 2012-05-30 杭州海康威视数字技术股份有限公司 DVR (Digital Video Recorder) as well as data backup and recovery method and system thereof
CN102227131A (en) * 2011-05-12 2011-10-26 杭州海康威视数字技术股份有限公司 Hot backup system of NVR and method thereof
CN103987130B (en) * 2014-05-16 2017-11-28 北京奇虎科技有限公司 Terminal access method, device and system based on WIFI equipment
CN104105096B (en) * 2014-07-28 2018-01-16 浙江宇视科技有限公司 A kind of radio switch-in method of IPC equipment
CN104994594A (en) * 2015-05-12 2015-10-21 深圳市蚂蚁邦科技有限公司 Method for automatically connecting with wifi at close range and wireless router
CN105430327A (en) * 2015-11-05 2016-03-23 成都基业长青科技有限责任公司 NVR cluster backup method and device
CN105430764B (en) * 2015-12-30 2019-01-25 魅族科技(中国)有限公司 A kind of method and terminal connecting Wi-Fi Hotspot
CN205527132U (en) * 2016-01-12 2016-08-31 陕西国际商贸学院 Elevator monitoring system based on thing networking
CN206061001U (en) * 2016-09-27 2017-03-29 深圳市赛立科技有限公司 Wireless video management, storage and the all-in-one for showing

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2028857A1 (en) * 2007-08-21 2009-02-25 Alcatel Lucent Method and system for pausing and resuming a real-time data stream
EP2728860A2 (en) * 2012-10-30 2014-05-07 Teleste Oyj Integration of video surveillance systems
CN103905448A (en) * 2014-04-01 2014-07-02 江苏物联网研究发展中心 Video camera equipment entity authentication method for urban security and protection
CN106453370A (en) * 2016-10-27 2017-02-22 浙江宇视科技有限公司 Method and device for allowing IPC to register to NVR

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111818520A (en) * 2020-07-20 2020-10-23 深圳市富视康实业发展有限公司 Method and system for assembling NVR and IPC
CN112135296A (en) * 2020-09-23 2020-12-25 北京蓦然认知科技有限公司 Improved beacon frame based security monitoring method and device
CN112135296B (en) * 2020-09-23 2024-03-19 陈卫锋 Method and device for safety monitoring based on improved beacon frame
CN113596808A (en) * 2021-07-28 2021-11-02 深圳市吉祥腾达科技有限公司 NVR and IPC wireless ad hoc network method
CN113596808B (en) * 2021-07-28 2023-10-10 深圳市吉祥腾达科技有限公司 NVR and IPC wireless ad hoc network method

Also Published As

Publication number Publication date
CN109151815A (en) 2019-01-04

Similar Documents

Publication Publication Date Title
WO2018228051A1 (en) Device access method, apparatus and system
CN110995665B (en) Network distribution method and device, electronic equipment and storage medium
KR101855602B1 (en) Methods, apparatuses, program and recoding medium for controlling device
WO2017092417A1 (en) Intelligent terminal equipment-based network access method and device
US10374819B2 (en) Methods and devices of accessing wireless network
WO2016141690A1 (en) Setting method and device for managing account of intelligent device
WO2016041329A1 (en) Method and device for accessing wireless network
EP3200421B1 (en) Method, apparatus and system for accessing wireless local area network
KR101868030B1 (en) Method, device, program and recordng medium for releasing connection
CN104869612A (en) Method and device for accessing network
US10305900B2 (en) Establishing a secure connection between a master device and a slave device
CN105243318A (en) User equipment control right determining method and apparatus and terminal device
KR101735306B1 (en) Method and apparatus for managing content in mobile terminal
CN105282158A (en) Intelligent equipment networking method, routing equipment, intelligent equipment and system
US20170171794A1 (en) Method and apparatus for acquiring routing information
US9723486B2 (en) Method and apparatus for accessing network
KR102507113B1 (en) Method, Appratus and System of Monitoring Supporting for Encrypted Communication Session
US10673611B2 (en) Data transmission method, device, and system
WO2019062115A1 (en) Method and apparatus for displaying application interface
WO2019119421A1 (en) Cell access method and device, and storage medium
WO2022205906A1 (en) Data encryption method and apparatus, electronic device and storage medium
CN104980919A (en) Method for acquiring network service information and equipment
CN112383532B (en) Device networking method and device, electronic device and storage medium
US9674768B2 (en) Method and device for accessing wireless network
CN114189950A (en) Information interaction method, information interaction device, server and storage medium

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18817609

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 18817609

Country of ref document: EP

Kind code of ref document: A1