WO2016011824A1 - 一种无线局域网中的热点配置方法、接入方法及设备 - Google Patents

一种无线局域网中的热点配置方法、接入方法及设备 Download PDF

Info

Publication number
WO2016011824A1
WO2016011824A1 PCT/CN2015/074785 CN2015074785W WO2016011824A1 WO 2016011824 A1 WO2016011824 A1 WO 2016011824A1 CN 2015074785 W CN2015074785 W CN 2015074785W WO 2016011824 A1 WO2016011824 A1 WO 2016011824A1
Authority
WO
WIPO (PCT)
Prior art keywords
hotspot
hot spot
link
terminal
type
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2015/074785
Other languages
English (en)
French (fr)
Inventor
马岚
杨翠红
张百胜
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to EP15825357.5A priority Critical patent/EP3174325B1/en
Priority to US15/328,182 priority patent/US20180027025A1/en
Publication of WO2016011824A1 publication Critical patent/WO2016011824A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H04L63/205—Network architectures or network communication protocols for network security for managing network security; network security policies in general involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/062—Pre-authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/69—Identity-dependent
    • H04W12/73—Access point logical identity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W28/00—Network traffic management; Network resource management
    • H04W28/16—Central resource management; Negotiation of resources or communication parameters, e.g. negotiating bandwidth or QoS [Quality of Service]
    • H04W28/18—Negotiating wireless communication parameters
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W36/00—Hand-off or reselection arrangements
    • H04W36/24—Reselection being triggered by specific parameters
    • H04W36/30—Reselection being triggered by specific parameters by measured or perceived connection quality data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W48/00—Access restriction; Network selection; Access point selection
    • H04W48/18—Selecting a network or a communication service
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0894—Policy-based network configuration management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/15—Setup of multiple wireless link connections
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W84/00—Network topologies
    • H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10—Small scale networks; Flat hierarchical networks
    • H04W84/12—WLAN [Wireless Local Area Networks]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/08—Access point devices

Definitions

  • WLAN refers to the application of wireless communication technology to interconnect computer devices to form a network system that can communicate with each other and achieve resource sharing.
  • the essence of WLAN is that the communication cable is no longer used to connect the computer to the network, but is connected wirelessly, which makes the construction of the network and the movement of the terminal more flexible.
  • Wireless fidelity (WiFi) technology is essentially a commercial certification.
  • Wi-Fi certified products comply with the IEEE 802.11b wireless network specification. It is the most widely used standard in WLAN, and the band is 2.4 GHz.
  • WLAN based on WiFi technology has become more and more popular, and coverage has become more and more extensive.
  • WLAN has become more and more people with its free and unlimited charm, especially as a new way for young people to live online. People hope that More and more public places can use WLAN to quickly and easily surf, browse or download information online.
  • the WLAN can be deployed in two ways: mode one: WLAN is deployed in an encrypted manner; and second, the WLAN is deployed in an unencrypted manner.
  • the WLAN In the first mode, the WLAN is deployed in an encrypted manner.
  • the user When the user connects to the WLAN, the user needs to obtain the key information through a certain channel, such as an inquiry, so that the user is not convenient to use in a public place.
  • the embodiment of the present invention is to provide a hotspot configuration method, an access method, and a device in a WLAN, which can ensure the security of data communication in a WLAN without affecting the user experience.
  • An embodiment of the present invention provides a hotspot configuration method in a WLAN, where the method includes:
  • the wireless access node configures a first hotspot having an unencrypted attribute and a second hotspot having an encrypted attribute, and a Service Set Identifier (SSID) of the first hotspot is the same as an SSID of the second hotspot;
  • SSID Service Set Identifier
  • An embodiment of the present invention provides an access method in a WLAN, where a first hotspot having an unencrypted attribute, a second hot spot having an encryption attribute, and a switching policy between the first hot spot and the second hot spot are configured.
  • the SSID of the first hotspot is the same as the SSID of the second hotspot; the method further includes:
  • the first configuration module is configured to configure a first hot spot having an unencrypted attribute and a second hot spot having an encrypted attribute, where an SSID of the first hot spot is the same as an SSID of the second hot spot;
  • the second configuration module is configured to configure a switching policy between the first hotspot and the second hotspot, where the switching policy is used to switch communication between the terminal and the first hotspot to be the second hotspot Communication between.
  • the embodiment of the present invention further provides a wireless access node, where the wireless access node includes: a first configuration module, a second configuration module, a receiving module, and a connection management module;
  • the first configuration module is configured to configure a first hot spot having an unencrypted attribute and a second hot spot having an encrypted attribute, where an SSID of the first hot spot is the same as an SSID of the second hot spot;
  • the second configuration module is configured to configure between the first hot spot and the second hot spot a handover policy, the handover policy is used to switch communication between the terminal and the first hotspot to communication with the second hotspot;
  • the connection management module is configured to: forward the WPS request message from the first link corresponding to the first hot spot to the second link corresponding to the second hot spot according to the switching policy between the first hot spot and the second hot spot And establishing a WPS session negotiation process with the terminal by using the second link, where the first link is a link established between the terminal and the first hotspot, and the second link is A link established between the terminal and the second hotspot.
  • the wireless access node is configured with a first hot spot having no encryption attribute and a second hot spot having an encryption attribute, and the SSID of the first hot spot
  • the SSID of the second hotspot is the same; and the switching policy between the first hotspot and the second hotspot is configured, where the switching policy is used to switch the communication between the terminal and the first hotspot to be the second hotspot
  • the embodiment of the present invention configures the first hotspot with the non-encrypted attribute, which facilitates the user to access the WLAN; configures the second hotspot with the encrypted attribute, and ensures the security of the communication link in the WLAN;
  • a communication connection between the first hotspot and the second hotspot can be established by using a switching policy between the first hotspot and the second hotspot.
  • the embodiment of the present invention automatically switches the terminal from the first link with a lower security level to the second link with a higher security level, without affecting the user body.
  • the security of the communication link in the WLAN is guaranteed under the premise of the test.
  • FIG. 1 is a schematic flowchart of implementing a hotspot configuration in a wireless local area network according to an embodiment of the present invention
  • FIG. 2 is a schematic flowchart of an implementation method of an access method in a wireless local area network according to an embodiment of the present invention
  • FIG. 6 is a schematic structural diagram of another wireless access node according to an embodiment of the present invention.
  • the wireless access node first configures a first hotspot having an unencrypted attribute and a second hotspot having an encrypted attribute, and the SSID of the first hot spot is the same as the SSID of the second hot spot. And configuring a switching policy between the first hotspot and the second hotspot, where the switching policy is used to switch communication between the terminal and the first hotspot to communication with the second hotspot;
  • the WPS request message sent by the terminal is received by the first link; and the WPS request message is sent by the first link corresponding to the first hot spot according to the switching policy between the first hot spot and the second hot spot.
  • Step S100 The wireless AP configures a first hotspot having an unencrypted attribute and a second hotspot having an encrypted attribute, where the service set identifier of the first hotspot is the same as the service set identifier of the second hotspot;
  • the network parameters of the first hotspot are configured as: SSID1, the security type is unencrypted, and the network type is broadcast;
  • the network parameters of the second hotspot are: SSID2, security type is encryption type, network type Is not a broadcast type;
  • the SSID1 is the same as the SSID2.
  • the unencrypted type may be an Open Open type
  • the encryption type may be a WiFi network secure access (WPA) or a WPA2 encryption type, and the unencrypted type and the encryption type are not specifically limited.
  • WPA WiFi network secure access
  • the SSID1 configured as the first hot spot of the broadcast type is visible, and the SSID2 configured as the second hot spot of the non-broadcast type is invisible; when the terminal is within the network range of the public WLAN arranged by the operator, the user turns on the terminal
  • the WiFi connection function can automatically search for the first hot spot of the Open type through the WiFi connection function. Since the second hotspot is configured as a network type that does not broadcast the SSID, the second hotspot cannot be searched by the conventional WiFi connection function.
  • N is a positive integer
  • corresponding network parameters are configured for each hotspot; wherein each hotspot has the same SSID, and the N mutually independent hotspots
  • the network parameters corresponding to at least one hotspot are configured as follows: the network type is broadcast type, and the security type is unencrypted type, so that the user accesses the WLAN; at least one hotspot corresponding network parameter is configured as: the network type is not broadcast type, security Type is encryption Type to guarantee the security of the communication link in the WLAN.
  • Step S101 Configure a handover policy between the first hotspot and the second hotspot, where the handover policy is used to switch communication between the terminal and the first hotspot to communication with the second hotspot;
  • the handover policy is a connection switching policy between the network parameters corresponding to the first hotspot and the second hotspot, and the connection channel between the network corresponding to the first hotspot and the corresponding network of the second hotspot is established according to the handover policy.
  • the handover policy is a connection switching policy between the network parameters corresponding to the first hotspot and the second hotspot, and the connection channel between the network corresponding to the first hotspot and the corresponding network of the second hotspot is established according to the handover policy.
  • the first hotspot with the network type being the broadcast type and the security type being the unencrypted type is configured to facilitate the user to access the WLAN;
  • the second hotspot with the network type being the non-broadcast type and the security type being the encryption type is configured. Securing the security of the communication link in the WLAN; and, by using a handover policy between the first hotspot and the second hotspot, establishing a communication connection between the first hotspot and the second hotspot for subsequent delivery Messages during the WPS session negotiation process.
  • an embodiment of the present invention provides an access method in a WLAN, where a wireless AP pre-configures a first hotspot, a second hotspot, and a switching policy between the first hotspot and the second hotspot;
  • a wireless AP pre-configures a first hotspot, a second hotspot, and a switching policy between the first hotspot and the second hotspot;
  • Step S201 The wireless AP sends a WPS request message through the first link receiving terminal.
  • the first link is a link established between the terminal and the first hotspot.
  • Step S202 Establish a connection channel between the network corresponding to the first hot spot and the corresponding network of the second hot spot according to the switching policy between the first hot spot and the second hot spot, and send the WPS request message by using the connection channel.
  • the first link corresponding to the first hot spot is transmitted to the second link corresponding to the second hot spot.
  • connection channel between the network corresponding to the first hot spot and the network corresponding to the second hot spot is established according to the switching policy between the first hot spot and the second hot spot, and the WPS request is sent through the connection channel
  • the message is delivered by the first link corresponding to the first hot spot to the second link corresponding to the second hot spot.
  • the first link is a link established between the terminal and the first hot spot
  • the second link is a link established between the terminal and the second hot spot.
  • the network connection request is redirected to the web authentication server set by the operator for access, and the terminal can enter the web authentication website through the web browser, input the username and password of the WiFi service, and perform WiFi service verification;
  • the authentication server After obtaining the user name and password input by the user, the authentication server performs legality verification on the user identity of the terminal according to the obtained user name and password, and then notifies the wireless AP and the terminal of the verification result.
  • the WPS request message may be sent by the first link receiving terminal; a switching policy between a hot spot and a second hot spot, the WPS request message is transmitted from a first link corresponding to the first hot spot to a second link corresponding to the second hot spot, and the second link and the second link are
  • the terminal establishes a WPS session negotiation process, where the first link is a link established between the terminal and the first hotspot, and the second link is a chain established between the terminal and the second hotspot. Therefore, the embodiment of the present invention automatically switches from the first link with a lower security level to the second link with a higher security level, and can ensure the security of the communication link in the WLAN without affecting the user experience.
  • the access flow in the WLAN in the embodiment of the present invention is described in detail below by using the first embodiment and the second embodiment as an example:
  • a first hotspot having an unencrypted attribute and a second hot spot having an encrypted attribute, and a switching policy between the first hotspot and the second hotspot are configured in advance; wherein the first hotspot network
  • the parameter configuration is: SSID1 is Chinanet, the security type is Open, and the network type is broadcast.
  • the network parameters of the second hotspot are: SSID2 is Chinanet, security type is WAP2 encryption type, and network type is non-broadcast type.
  • the user When the current location of the terminal is within the network range of the public WLAN deployed by the operator, the user turns on the WiFi function of the terminal, and automatically searches for and displays the visible hotspot within the current WLA network through the WiFi function, and the user selects and connects to the service set identifier as Chinanet.
  • the first hot spot establishes an Open link with the first hot spot.
  • the access process in the WLAN in the first embodiment, as shown in FIG. 3, specifically includes the following steps:
  • Step S300 The wireless AP receives the network connection request sent by the terminal by using the Open link.
  • Step S301 When receiving the network connection request sent by the terminal, verify the validity of the user identity of the terminal; if the verification is successful, establish a WPS session negotiation process with the terminal through the Open link, and proceed to step S302; If the verification fails, the Open link between the terminal and the first hotspot is disconnected, and the processing flow ends.
  • the terminal can enter the web authentication website through the web browser, input the username and password of the WiFi service, and perform WiFi service verification; the web authentication After obtaining the user name and password entered by the user, the server performs legality verification on the identity of the user of the terminal according to the obtained user name and password, and then notifies the wireless AP and the terminal of the verification result, and instructs the terminal to initiate a WPS process. .
  • the terminal when the terminal receives the verification pass message, it initiates a WPS process flow; meanwhile, it sends a WPS request message to the wireless AP based on the established Open link.
  • Step S302 Receive, by using an Open link, the terminal to send a WPS request message.
  • Step S303 The WPS request message is transmitted from the Open link corresponding to the first hot spot to the WAP2 encrypted link corresponding to the second hot spot according to the switching policy between the first hot spot and the second hot spot, and the The WAP2 encrypted link establishes a WPS session negotiation process with the terminal.
  • the key is negotiated with the terminal and a data connection is established, which can ensure the security of the communication link in the WLAN.
  • the terminal is consistent with the operation step of connecting the existing Open hotspot, and the WPA2-protected encrypted link can be established corresponding to the second hotspot without inputting the password of the second hotspot.
  • the data transmission is performed by the WPA2-protected encrypted link; in this way, the terminal can be automatically switched to the WPA2-protected encrypted link corresponding to the second hotspot by the Open link corresponding to the first hotspot that is initially connected, through the encrypted link protected by WPA2 Data transmission is performed to ensure the security of the communication link in the WLAN without affecting the user experience.
  • the user when the current location of the terminal is within the network range of the public WLAN deployed by the operator, the user turns on the WiFi function of the terminal, and automatically searches for and displays the visible hotspot in the current WLA network range through the WiFi function. Selecting and connecting to the first hot spot whose service set identifier is Chinanet, and establishing an Open link with the first hotspot.
  • the access procedure in the WLAN in the second embodiment, as shown in FIG. 4, specifically includes the following steps:
  • Step S400 The wireless AP receives the network connection request sent by the terminal by using the Open link.
  • Step S401 When receiving the network connection request sent by the terminal, establish a WPS session negotiation process with the terminal through the Open link.
  • Step S403 The WPS request message is transmitted from the Open link corresponding to the first hot spot to the WAP2 corresponding to the second hot spot according to the switching policy between the first hot spot and the second hot spot. Encrypting the link and establishing a WPS session negotiation process with the terminal through the WAP2 encrypted link.
  • the embodiment of the present invention further provides two types of wireless APs.
  • the principle and method for solving the problem by the wireless AP are similar. Therefore, the implementation process and implementation principles of the wireless AP can refer to the implementation process and the implementation principle of the foregoing method. , the repetition will not be repeated.
  • a wireless AP includes: a first configuration module 500 and a second configuration module 501;
  • the first configuration module 500 is configured to configure a first hotspot with an unencrypted attribute and a second hotspot with an encrypted attribute, where the service set identifier SSID of the first hotspot is the same as the SSID of the second hotspot;
  • the unencrypted network type is an Open Open type
  • the encrypted network type is a WPA2 type
  • the second configuration module 501 is configured to configure a handover policy between the first hotspot and the second hotspot, where the handover policy is used to switch communication between the terminal and the first hotspot to be the second hotspot Communication between.
  • the various parts of the wireless access node described above are separately described by functions into various modules or units.
  • the division of the above functional units or modules is only a preferred implementation manner of the embodiments of the present invention, and the division manner of the functional units or modules does not constitute a limitation of the present invention.
  • the first configuration module 500 is configured to configure a first hotspot with an unencrypted attribute and a second hotspot with an encrypted attribute, where the service set identifier of the first hot spot identifies the SSID and the second hotspot Same SSID;
  • the second configuration module 501 is configured as a switching policy between the first hotspot and the second hotspot, where the switching policy is used to switch communication between the terminal and the first hotspot to be between the second hotspot and the second hotspot.
  • the receiving module 600 is configured to send a WPS request message by using the first link receiving terminal;
  • the wireless AP further includes:
  • the various parts of the wireless access node described above are separately described by functions into various modules or units.
  • the division of the above functional units or modules is only a preferred implementation manner of the embodiments of the present invention, and the division manner of the functional units or modules does not constitute a limitation of the present invention.
  • the wireless AP may be a simple wireless access point with a function of automatically switching links, a wireless router, a wireless gateway, or a wireless bridge.
  • the first configuration module 500 and the second configuration module 501 may be located by a central processing unit (CPU), a microprocessor (MPU), a digital signal processor (DSP), or a field located in the wireless AP.
  • Programming gate array (FPGA) implementation; the first configuration module 500, the second configuration module 501, the receiving module 600, and the connection management module 601 may be a central processing unit (CPU), a microprocessor (MPU) located at the wireless access node ), digital signal processor (DSP), or current Field Programmable Gate Array (FPGA) implementation.
  • CPU central processing unit
  • MPU microprocessor
  • DSP digital signal processor
  • FPGA current Field Programmable Gate Array
  • the wireless access node is configured with a first hotspot with no encryption attribute, which can facilitate the user to access the WLAN, and the second hotspot with the encryption attribute can be configured to ensure the security of the communication link in the WLAN; And establishing, by using a switching policy between the first hotspot and the second hotspot, a communication connection between the first hotspot and the second hotspot.
  • the terminal can be automatically switched from the first link with a lower security level to the second link with a higher security level, and the security of the communication link in the WLAN can be ensured without affecting the user experience.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Quality & Reliability (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明公开了一种无线局域网中的热点配置方法，所述方法包括：无线访问节点配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的SSID与所述第二热点的SSID相同；配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信。本发明还同时公开了一种无线局域网中的接入方法及设备。

Description

一种无线局域网中的热点配置方法、接入方法及设备 技术领域
本发明涉及移动通信系统中的无线通信领域，特别是涉及一种无线局域网(Wireless Local Area Networks，WLAN)中的热点配置方法、接入方法及设备。
背景技术
WLAN指应用无线通信技术将计算机设备互联起来，构成可以互相通信和实现资源共享的网络体系。无线局域网本质的特点是不再使用通信电缆将计算机与网络连接起来，而是通过无线的方式连接，从而使网络的构建和终端的移动更加灵活。
无线保真(wireless fidelity，WiFi)技术实质上是一种商业认证，具有Wi-Fi认证的产品符合IEEE 802.11b无线网络规范，它是WLAN中当前应用最为广泛的标准，采用波段是2.4GHz。在全球范围内，基于WiFi技术的WLAN已经日趋普及，覆盖范围也越来越广泛，WLAN以其自由无限的魅力成为越来越多人，尤其是成为年轻人的网络生活新方式，人们希望在越来越多的公共场所也能使用WLAN快速便捷的到网上冲浪、浏览或下载信息。
面对日益高涨的移动数据需求与移动数据网流量瓶颈间的矛盾，运营商早已意识到WLAN会成为重要的移动互联网接入业务，提前部署WLAN扩大WLAN覆盖规模。
现有技术中可以采用两种方式部署WLAN：方式一、采用加密方式部署WLAN；方式二、采用不加密方式部署WLAN。
发明人在实现本发明的过程中，发现现有WLAN的部署方案至少存在 以下缺陷：
1)方式一中采用加密方式部署WLAN，用户在连接WLAN时需要先通过某种渠道，如问询的方式获取到密钥信息，这样，不便于用户在公共场所使用。
2)方式二中采用不加密即Open方式部署WLAN，用户在连接WLAN时虽然不需要密钥，能方便用户使用，但由于目前绝大多数公共WiFi环境缺少甚至毫无安全防护措施，这就导致攻击者可以很容易地进入该WLAN，通过网络监听截获WLAN中的数据。在这种情况下，用户在WLAN中传输的任何信息都会暴露在攻击者面前，攻击者可截获用户名、密码、上网记录、设备信息、聊天记录及邮件内容等用户信息，因此，采用Open方式部署WLAN存在极大的安全隐患，严重威胁用户的信息安全。
另外，在方式二中，用户与WLAN建立连接时，首先通过WEB Portal方式重定向到一个用户登陆页面，让用户输入用户名和密码，以对用户身份进行鉴权，但所述身份鉴权主要用于识别用户身份、计费处理，却无助于保护用户接入WLAN的通信链路。
发明内容
有鉴于此，本发明实施例期望提供一种WLAN中的热点配置方法、接入方法及设备，能在不影响用户体验的前提下保障WLAN中数据通信的安全性。
本发明的技术方案是这样实现的：
本发明实施例提供了一种WLAN中的热点配置方法，该方法包括：
无线访问节点配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的服务集标识(Service Set Identifier，SSID)与所述第二热点的SSID相同；
配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用 于将终端与第一热点之间的通信切换为与第二热点之间的通信。
本发明实施例提供了一种WLAN中的接入方法，配置具有不加密属性的第一热点与具有加密属性的二热点、以及所述第一热点与第二热点之间的切换策略，所述第一热点的SSID与所述第二热点的SSID相同；该方法还包括：
无线访问节点通过第一链路接收终端发送的WiFi保护设置(WiFi Protected Setup，WPS)请求消息；
根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对应的第二链路，并通过所述第二链路与所述终端建立WPS会话协商过程；其中，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路。
根据上述方法，本发明实施例提供了一种无线访问节点，所述无线访问节点包括：第一配置模块、第二配置模块；其中，
所述第一配置模块，配置为配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的SSID与所述第二热点的SSID相同；
所述第二配置模块，配置为配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信。
根据上述方法，本发明实施例还提供了一种无线访问节点，该无线访问节点包括：第一配置模块、第二配置模块、接收模块、连接管理模块；其中，
所述第一配置模块，配置为配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的SSID与所述第二热点的SSID相同；
所述第二配置模块，配置为配置所述第一热点与所述第二热点之间的 切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信；
所述接收模块，配置为通过第一链路接收终端发送的WPS请求消息；
所述连接管理模块，配置为根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对应的第二链路，并通过所述第二链路与所述终端建立WPS会话协商过程；其中，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路。
本发明实施例所提供的WLAN中的热点配置方法、接入方法及设备，无线访问节点配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的SSID与所述第二热点的SSID相同；并配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信；如此，本发明实施例配置具有不加密属性的第一热点，能方便用户接入WLAN；配置具有加密属性的第二热点，又能保障WLAN中通信链路的安全性；并且，通过所述第一热点与所述第二热点之间的切换策略，能够使所述第一热点与第二热点之间建立通信连接。
优选地，本发明实施例中，在配置第一热点、第二热点、以及所述第一热点与所述第二热点之间的切换策略后，可通过第一链路接收终端发送的WPS请求消息，根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对应的第二链路，并通过所述第二链路与所述终端建立WPS会话协商过程；其中，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路，如此，本发明实施例将终端从安全等级较低的第一链路自动切换到安全等级较高的第二链路，能够在不影响用户体 验的前提下保障WLAN中通信链路的安全性。
附图说明
图1为本发明实施例无线局域网中的热点配置的实现流程示意图；
图2为本发明实施例无线局域网中的接入方法的实现流程示意图；
图3为本发明实施例一的无线局域网中的接入方法的实现流程示意图；
图4为本发明实施例二的无线局域网中的接入方法的实现流程示意图；
图5为本发明实施例无线访问节点的组成结构示意图；
图6为本发明实施例另一无线访问节点的组成结构示意图。
具体实施方式
本发明实施例中，无线访问节点(Access Point，AP)先配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的SSID与所述第二热点的SSID相同；并配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信；之后，当用户接入WLAN时，通过第一链路接收终端发送的WPS请求消息；根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对应的第二链路，并通过所述第二链路与所述终端建立WPS会话协商过程；其中，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路。
这里，一个热点在WLAN中对应一个虚拟局域网(Virtual Local Area Network，VLAN)，热点的网络参数包括：SSID、安全类型、网络类型等；所述具有不加密属性的第一热点的网络参数包括：SSID1、安全类型为不加密类型、网络类型为广播类型；所述具有加密属性的第二热点的网络参数包括：SSID2、安全类型为加密类型、网络类型为不广播类型；所述SSID1 与所述SSID2相同。
下面结合附图和具体实施方式对本发明所述方法和装置作进一步说明。
本发明实施例提出了一种WLAN中的热点配置方法，如图1所示，包括如下步骤：
步骤S100：无线AP配置具有不加密属性的第一热点及具有加密属性的第二热点，所述第一热点的服务集标识与所述第二热点的服务集标识相同；
这里，将所述第一热点的网络参数配置为：SSID1、安全类型为不加密类型、网络类型为广播类型；将所述第二热点的网络参数为：SSID2、安全类型为加密类型、网络类型为不广播类型；所述SSID1与所述SSID2相同。
这里，所述不加密类型可以为开放Open类型；所述加密类型可以为WiFi网络安全接入(Protected Access，WPA)或WPA2加密类型，对不加密类型及加密类型不作具体限定。
这里，配置为广播类型的第一热点的SSID1是可见的，配置为不广播类型的第二热点的SSID2是不可见的；在终端处于运营商布置的公共WLAN的网络范围内时，用户开启终端的WiFi连接功能，通过WiFi连接功能可以自动搜索到Open类型的第一热点，由于第二热点配置为不广播SSID的网络类型，因此，通过常规的WiFi连接功能搜索不到所述第二热点。
优选地，可扩展至配置N个相互独立的热点，N为正整数；相应的，为每个热点配置对应的网络参数；其中，每个热点的SSID均相同，所述N个相互独立的热点中至少存在一个热点对应的网络参数配置为：网络类型为广播类型、安全类型为不加密类型，以便用户接入WLAN；至少存在一个热点对应的网络参数配置为：网络类型为不广播类型、安全类型为加密 类型，以保障WLAN中通信链路的安全性。
步骤S101：配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信；
这里，所述切换策略为所述第一热点与所述第二热点对应的网络参数间的连接切换策略，根据所述切换策略建立第一热点对应的网络与第二热点对应网络间的连接通道，以便后续传递WPS会话协商过程中的消息。
本发明实施例中，配置网络类型为广播类型、安全类型为不加密类型的第一热点，以方便用户接入WLAN；配置网络类型为不广播类型、安全类型为加密类型的第二热点，以保障WLAN中通信链路的安全性；并且，通过所述第一热点与所述第二热点之间的切换策略，能够使所述第一热点与第二热点之间建立通信连接，以便后续传递WPS会话协商过程中的消息。
基于上述方法，本发明实施例提出了一种WLAN中的接入方法，无线AP预先配置第一热点、第二热点、以及所述第一热点与第二热点之间的切换策略；之后，当用户接入WLAN时，如图2所示，包括如下步骤：
步骤S201：无线AP通过第一链路接收终端发送WPS请求消息。
这里，所述第一链路为终端与所述第一热点之间建立的链路。
步骤S202：根据所述第一热点与所述第二热点之间的切换策略，建立第一热点对应的网络与第二热点对应网络间的连接通道，通过所述连接通道将所述WPS请求消息由第一热点对应的第一链路传输到第二热点对应的第二链路。
这里，根据所述第一热点与所述第二热点之间的切换策略，建立第一热点对应的网络与第二热点对应的网络之间的连接通道，通过所述连接通道将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对应的第二链路。
这里，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路。
优选地，所述通过第一链路接收终端发送WPS请求消息之前，还包括：步骤S200：通过所述第一链路接收到所述终端发送的网络连接请求时，对所述终端的用户身份进行合法性验证；若验证通过，则通过第一链路与所述终端建立WPS会话协商过程，并转入步骤S201；若验证未通过，则断开所述终端与所述第一热点之间的第一链路，并结束处理流程。
这里，对所述终端的用户身份进行合法性验证，具体实现方式如下：
将所述网络连接请求重定向到运营商所设置的Web认证服务器进行访问，此时终端可以通过Web浏览器进入到Web认证网站，输入WiFi业务的用户名和密码，进行WiFi业务验证；所述Web认证服务器获取到用户输入的用户名和密码后，根据获取的用户名和密码对所述终端的用户身份进行合法性验证，然后，将验证结果通知所述无线AP及终端。
本发明实施例中，在配置第一热点、第二热点、以及所述第一热点与第二热点之间的切换策略后；可通过第一链路接收终端发送WPS请求消息；根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对应的第二链路，并通过所述第二链路与所述终端建立WPS会话协商过程；其中，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路，如此，本发明实施例从安全等级较低的第一链路自动切换到安全等级较高的第二链路，能够在不影响用户体验的前提下保障WLAN中通信链路的安全性。
为了更清楚地对本发明实施例进行说明，下面以实施例一及实施例二为例，对本发明实施例中的WLAN中的接入流程进行详细描述：
实施例一
本实施例一中，预先配置具有不加密属性的第一热点与具有加密属性的第二热点，以及所述第一热点与第二热点之间的切换策略；其中，所述第一热点的网络参数配置为：SSID1为Chinanet、安全类型为Open类型、网络类型为广播类型，所述第二热点的网络参数配置为：SSID2为Chinanet、安全类型为WAP2加密类型、网络类型为不广播类型。
终端当前的位置在运营商布置的公共WLAN的网络范围内时，用户开启终端的WiFi功能，通过WiFi功能自动搜索并显示当前WLA网络范围内的可见热点，用户选择并连接到服务集标识为Chinanet的第一热点，与所述第一热点建立Open链路。
本实施例一的WLAN中的接入流程，如图3所示，具体包括如下步骤：
步骤S300：无线AP通过所述Open链路接收终端发送的网络连接请求；
步骤S301：接收到终端发送的网络连接请求时，对所述终端的用户身份进行合法性验证；若验证通过，则通过Open链路与所述终端建立WPS会话协商过程，并转入步骤S302；若验证未通过，则断开所述终端与所述第一热点之间的Open链路，并结束处理流程。
这里，对所述终端的用户身份进行合法性验证，具体实现过程如下：
将所述网络连接请求重定向到运营商所设置的Web认证服务器进行访问后，终端可以通过Web浏览器进入到Web认证网站，输入WiFi业务的用户名和密码，进行WiFi业务验证；所述Web认证服务器获取到用户输入的用户名和密码后，根据获取的用户名和密码对所述终端的用户身份进行合法性验证，然后，将验证结果通知所述无线AP及终端，指示所述终端发起WPS处理流程。
这里，所述终端收到验证通过的消息时，自身发起WPS处理流程；同时，基于已经建立的Open链路向所述无线AP发送WPS请求消息。
步骤S302：通过Open链路接收所述终端发送WPS请求消息。
这里，首先通过Open链路与所述终端建立WPS会话协商过程，接收所述终端发送WPS请求消息。
步骤S303：根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的Open链路传递到第二热点对应的WAP2加密链路，并通过所述WAP2加密链路与所述终端建立WPS会话协商过程。
这里，在所述第二链路中与所述终端协商密钥并建立数据连接，能够保障WLAN中通信链路的安全性。
本发明实施一的网络连接过程中，终端与连接现有Open热点的操作步骤一致，不需要输入第二热点的密码就可与所述第二热点建立对应的受WPA2保护的加密链路，通过受WPA2保护的加密链路进行数据传输；如此，终端可由最初连接的第一热点对应的Open链路自动切换到第二热点对应的受WPA2保护的加密链路，通过受WPA2保护的加密链路进行数据传输，从而在不影响用户体验的前提下保障WLAN中通信链路的安全性。
实施例二
基于上述实施例一中的配置，终端当前的位置在运营商布置的公共WLAN的网络范围内时，用户开启终端的WiFi功能，通过WiFi功能自动搜索并显示当前WLA网络范围内的可见热点，用户选择并连接到服务集标识为Chinanet的第一热点，与所述第一热点建立Open链路。
实施例二中的WLAN中的接入流程，如图4所示，具体包括如下步骤：
步骤S400：无线AP通过所述Open链路接收终端发送的网络连接请求；
步骤S401：接收到终端发送的网络连接请求时，通过Open链路与所述终端建立WPS会话协商过程。
步骤S402：通过第一链路接收所述终端发送WPS请求消息。
步骤S403：根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的Open链路传递到第二热点对应的WAP2 加密链路，并通过所述WAP2加密链路与所述终端建立WPS会话协商过程。
为实现上述方法，本发明实施例还提供了两种无线AP，由于无线AP解决问题的原理与方法相似，因此，无线AP的实施过程及实施原理均可以参见前述方法的实施过程及实施原理描述，重复之处不再赘述。
如图5所示，本发明实施例提供的一种无线AP，包括：第一配置模块500、第二配置模块501；其中，
所述第一配置模块500，配置为配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的服务集标识SSID与所述第二热点的SSID相同；
其中，所述第一热点的网络参数包括：SSID1、安全类型为不加密类型、网络类型为广播类型，所述第二热点的网络参数为：SSID2、安全类型为加密类型、网络类型为不广播类型，所述SSID1与所述SSID2相同；
其中，所述不加密的网络类型为开放Open类型；所述加密的网络类型为WPA2类型；
所述第二配置模块501，配置为配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信。
为了描述的方便，以上所述无线访问节点的各部分以功能分为各种模块或单元分别描述。以上功能单元或模块的划分方式仅为本发明实施例给出的一种优选实现方式，功能单元或模块的划分方式不构成对本发明的限制。
如图6所示，本发明实施例提供的另一种无线AP，包括：第一配置模块500、第二配置模块501、接收模块600、连接管理模块601；其中，
所述第一配置模块500，配置为配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的服务集标识SSID与所述第二热点的 SSID相同；
所述第二配置模块501，配置为所述第一热点与第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信；
所述接收模块600，配置为通过第一链路接收终端发送WPS请求消息；
所述连接管理模块601，配置为根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对应的第二链路，并通过所述第二链路与所述终端建立WPS会话协商过程；其中，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路。
具体实施中，所述无线AP还包括：
验证模块602，配置为通过所述第一链路接收所述终端发送的网络连接请求时，对所述终端的用户身份进行合法性验证，验证通过后通过第一链路与所述终端建立WPS会话协商过程。
为了描述的方便，以上所述无线访问节点的各部分以功能分为各种模块或单元分别描述。以上功能单元或模块的划分方式仅为本发明实施例给出的一种优选实现方式，功能单元或模块的划分方式不构成对本发明的限制。
在实际应用中，所述无线AP可以是具有自动切换链路功能的单纯性无线接入点、无线路由器、无线网关或无线网桥等设备。
在实际应用中，所述第一配置模块500、第二配置模块501可由位于所述无线AP的中央处理器(CPU)、微处理器(MPU)、数字信号处理器(DSP)、或现场可编程门阵列(FPGA)实现；所述第一配置模块500、第二配置模块501、接收模块600、连接管理模块601可由位于所述无线访问节点的中央处理器(CPU)、微处理器(MPU)、数字信号处理器(DSP)、或现 场可编程门阵列(FPGA)实现。
本发明所述的方法并不限于具体实施方式中所述的实施例，本领域技术人员根据本发明的技术方案得出其它的实施方式，同样属于本发明的技术创新范围。
显然，本领域的技术人员可以对本发明进行各种改动和变型而不脱离本发明的精神和范围。这样，倘若本发明的这些修改和变型属于本发明权利要求及其等同技术的范围之内，则本发明也意图包含这些改动和变型在内。
工业实用性
综合本发明的各实施例，无线访问节点配置具有不加密属性的第一热点，能方便用户接入WLAN；配置具有加密属性的第二热点，又能保障WLAN中通信链路的安全性；并且，通过所述第一热点与所述第二热点之间的切换策略，能够使所述第一热点与第二热点之间建立通信连接。另外，能够将终端从安全等级较低的第一链路自动切换到安全等级较高的第二链路，能够在不影响用户体验的前提下保障WLAN中通信链路的安全性。

Claims (10)

  1. 一种无线局域网中的热点配置方法，所述方法包括：
    无线访问节点配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的服务集标识SSID与所述第二热点的SSID相同；
    配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信。
  2. 根据权利要求1所述的方法，其中，所述第一热点的网络参数包括：SSID1、安全类型为不加密类型、网络类型为广播类型；所述第二热点的网络参数包括：SSID2、安全类型为加密类型、网络类型为不广播类型；其中，所述SSID1与SSID2相同。
  3. 根据权利要求2所述的方法，其中，所述不加密类型为开放Open类型；所述加密类型为无线保真保护访问WPA2类型。
  4. 一种无线局域网中的接入方法，配置具有不加密属性的第一热点与具有加密属性的二热点、以及所述第一热点与第二热点之间的切换策略，所述第一热点的SSID与所述第二热点的SSID相同；所述方法还包括：
    无线访问节点通过第一链路接收终端发送的无线保真保护设置WPS请求消息；
    根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对应的第二链路，并通过所述第二链路与所述终端建立WPS会话协商过程；其中，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路。
  5. 根据权利要求4所述的方法，其中，所述通过第一链路接收终端发送WPS请求消息之前，所述方法还包括：
    通过所述第一链路接收所述终端发送的网络连接请求；
    对所述终端的用户身份进行合法性验证，验证通过后通过第一链路与所述终端建立WPS会话协商过程。
  6. 一种无线访问节点AP，所述无线访问节点包括：第一配置模块、第二配置模块；其中，
    所述第一配置模块，配置为配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的SSID与所述第二热点的SSID相同；
    所述第二配置模块，配置为配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信。
  7. 根据权利要求6所述的无线AP，其中，所述第一热点的网络参数包括：SSID1、安全类型为不加密类型、网络类型为广播类型；所述第二热点的网络参数包括：SSID2、安全类型为加密类型、网络类型为不广播类型；其中，所述SSID1与SSID2相同。
  8. 根据权利要求7所述的无线AP，其中，所述不加密的网络类型为开放Open类型；所述加密的网络类型为WPA2类型。
  9. 一种无线AP，所述无线访问节点包括：第一配置模块、第二配置模块、接收模块、连接管理模块；其中，
    所述第一配置模块，配置为配置具有不加密属性的第一热点与具有加密属性的第二热点，所述第一热点的SSID与所述第二热点的SSID相同；
    所述第二配置模块，配置为配置所述第一热点与所述第二热点之间的切换策略，所述切换策略用于将终端与第一热点之间的通信切换为与第二热点之间的通信；
    所述接收模块，配置为通过第一链路接收终端发送的WPS请求消息；
    所述连接管理模块，配置为根据所述第一热点与第二热点之间的切换策略，将所述WPS请求消息由第一热点对应的第一链路传递到第二热点对 应的第二链路，并通过所述第二链路与所述终端建立WPS会话协商过程；其中，所述第一链路为终端与所述第一热点之间建立的链路，所述第二链路为终端与所述第二热点之间建立的链路。
  10. 根据权利要求9所述的无线AP，其中，所述无线AP还包括：
    验证模块，配置为通过所述第一链路接收所述终端发送的网络连接请求时，对所述终端的用户身份进行合法性验证，验证通过后通过第一链路与所述终端建立WPS会话协商过程。
PCT/CN2015/074785 2014-07-24 2015-03-20 一种无线局域网中的热点配置方法、接入方法及设备 Ceased WO2016011824A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP15825357.5A EP3174325B1 (en) 2014-07-24 2015-03-20 Hotspot configuration method, access method and device in wireless local area network
US15/328,182 US20180027025A1 (en) 2014-07-24 2015-03-20 Hotspot configuration method, access method and device in wireless local area network

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410356304.1 2014-07-24
CN201410356304.1A CN104168561B (zh) 2014-07-24 2014-07-24 一种无线局域网中的热点配置方法、接入方法及设备

Publications (1)

Publication Number Publication Date
WO2016011824A1 true WO2016011824A1 (zh) 2016-01-28

Family

ID=51912153

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/074785 Ceased WO2016011824A1 (zh) 2014-07-24 2015-03-20 一种无线局域网中的热点配置方法、接入方法及设备

Country Status (4)

Country Link
US (1) US20180027025A1 (zh)
EP (1) EP3174325B1 (zh)
CN (2) CN104168561B (zh)
WO (1) WO2016011824A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11032708B2 (en) 2018-09-26 2021-06-08 International Business Machines Corporation Securing public WLAN hotspot network access
CN114222274A (zh) * 2020-09-16 2022-03-22 华为技术有限公司 一种通信方法与电子设备

Families Citing this family (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104168561B (zh) * 2014-07-24 2018-08-28 南京中兴软件有限责任公司 一种无线局域网中的热点配置方法、接入方法及设备
US10560881B2 (en) 2015-11-11 2020-02-11 Huawei Technologies Co., Ltd. Network handover method and apparatus
CN106060818A (zh) * 2016-07-28 2016-10-26 上海斐讯数据通信技术有限公司 连接路由器的方法及路由器
CN106231686A (zh) * 2016-07-28 2016-12-14 上海斐讯数据通信技术有限公司 防蹭网装置、系统及连接路由器的方法
EP3563598B1 (en) * 2016-12-30 2021-11-03 British Telecommunications Public Limited Company Automatic pairing of devices to wireless networks
EP3579596B1 (en) * 2017-02-27 2021-03-10 Huawei Technologies Co., Ltd. Method and apparatus for establishing wireless local area network connection and terminal
CN107302785B (zh) * 2017-07-04 2019-12-06 中国联合网络通信集团有限公司 一种接入方法、智能设备、网关及接入系统
FR3077458B1 (fr) * 2018-01-31 2020-01-17 Sagemcom Broadband Sas Procede d'agregation d'une pluralite de connexions radio dans un reseau sans fil
EP3683637B1 (de) * 2019-01-16 2023-03-22 Siemens Aktiengesellschaft Verfahren zum herstellen einer bidirektionalen verbindung zwischen einem gerät, insbesondere einem feldgerät, und einer applikation in einer zentralen einrichtung
CN111010693B (zh) * 2019-11-25 2023-10-03 华为技术有限公司 一种提供无线保真网络接入服务的方法及电子设备
CN113132984B (zh) * 2019-12-30 2025-01-03 中兴通讯股份有限公司 网络连接建立方法、装置、系统和终端设备
JP7443881B2 (ja) * 2020-03-27 2024-03-06 セイコーエプソン株式会社 電子機器、通信システム及び通信方法
CN112203240A (zh) * 2020-09-15 2021-01-08 深圳传音控股股份有限公司 重建群组的方法、系统、移动终端及存储介质
EP4020885B1 (en) * 2020-12-22 2024-02-14 Koninklijke Fabriek Inventum B.V. Establishment of battery-free insert access to secure network
CN115002758B (zh) * 2022-05-26 2025-05-13 深圳市联洲国际技术有限公司 多频无线热点的配置方法、配置装置与处理器
CN116668598A (zh) * 2023-06-16 2023-08-29 珠海奔图电子有限公司 网络连接配置方法、网络连接配置装置和图像形成设备
CN118055525B (zh) * 2024-01-26 2024-08-06 广州芯德通信科技股份有限公司 一种WiFi自动配置的方法与电子设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101489222A (zh) * 2009-02-25 2009-07-22 杭州华三通信技术有限公司 同一热点同时提供明文和加密服务的方法和无线接入装置
CN101626609A (zh) * 2008-07-10 2010-01-13 株式会社理光 通信装置
CN103458408A (zh) * 2013-08-19 2013-12-18 小米科技有限责任公司 网络连接方法、网络共享方法及装置
CN104168561A (zh) * 2014-07-24 2014-11-26 中兴通讯股份有限公司 一种无线局域网中的热点配置方法、接入方法及设备

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8064948B2 (en) * 2006-01-09 2011-11-22 Cisco Technology, Inc. Seamless roaming for dual-mode WiMax/WiFi stations
CN105141588A (zh) * 2006-10-31 2015-12-09 意大利电信股份公司 Ip双模终端中不同通信系统之间的无缝切换的管理
JP5396863B2 (ja) * 2009-01-07 2014-01-22 ヤマハ株式会社 ワイヤレスネットワークシステム
CN101534531B (zh) * 2009-04-02 2011-07-13 中兴通讯股份有限公司 一种网络切换方法及系统
US8750265B2 (en) * 2009-07-20 2014-06-10 Wefi, Inc. System and method of automatically connecting a mobile communication device to a network using a communications resource database
CN102014381B (zh) * 2009-09-08 2012-12-12 华为技术有限公司 加密算法协商方法、网元及移动台
KR101626465B1 (ko) * 2009-10-26 2016-06-01 삼성전자주식회사 휴대용 단말기에서 억세스 포인트와 연결하기 위한 장치 및 방법
WO2012035203A1 (en) * 2010-09-16 2012-03-22 Nokia Corporation Dynamic account creation with secured hotspot network
US9565558B2 (en) * 2011-10-21 2017-02-07 At&T Intellectual Property I, L.P. Securing communications of a wireless access point and a mobile device
CN103200618B (zh) * 2012-01-05 2020-03-10 中兴通讯股份有限公司 无线局域网wlan热点功能控制处理方法及装置
US9161219B2 (en) * 2012-06-22 2015-10-13 Guest Tek Interactive Entertainment Ltd. Authorizing secured wireless access at hotspot having open wireless network and secure wireless network
CN103686899A (zh) * 2012-09-25 2014-03-26 东莞宇龙通信科技有限公司 移动数据业务网络与wifi网络切换的方法及移动终端
CN102984773B (zh) * 2012-11-23 2015-09-16 富春通信股份有限公司 Lte-wlan网间互通下的wlan切换方法及装置
CN103491648B (zh) * 2013-09-18 2018-04-10 宇龙计算机通信科技(深圳)有限公司 基于wifi的通信方法及系统
CN105100955A (zh) * 2014-05-16 2015-11-25 中兴通讯股份有限公司 机顶盒切换网络的方法、装置及设有该装置的机顶盒

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101626609A (zh) * 2008-07-10 2010-01-13 株式会社理光 通信装置
CN101489222A (zh) * 2009-02-25 2009-07-22 杭州华三通信技术有限公司 同一热点同时提供明文和加密服务的方法和无线接入装置
CN103458408A (zh) * 2013-08-19 2013-12-18 小米科技有限责任公司 网络连接方法、网络共享方法及装置
CN104168561A (zh) * 2014-07-24 2014-11-26 中兴通讯股份有限公司 一种无线局域网中的热点配置方法、接入方法及设备

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3174325A4 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11032708B2 (en) 2018-09-26 2021-06-08 International Business Machines Corporation Securing public WLAN hotspot network access
CN114222274A (zh) * 2020-09-16 2022-03-22 华为技术有限公司 一种通信方法与电子设备
CN114222274B (zh) * 2020-09-16 2022-12-13 华为技术有限公司 一种通信方法与电子设备

Also Published As

Publication number Publication date
EP3174325B1 (en) 2018-09-12
EP3174325A1 (en) 2017-05-31
CN104168561A (zh) 2014-11-26
US20180027025A1 (en) 2018-01-25
CN105828326B (zh) 2021-01-01
CN104168561B (zh) 2018-08-28
CN105828326A (zh) 2016-08-03
EP3174325A4 (en) 2017-07-05

Similar Documents

Publication Publication Date Title
CN104168561B (zh) 一种无线局域网中的热点配置方法、接入方法及设备
JP7470671B2 (ja) コアネットワークへの非３ｇｐｐ装置アクセス
US11997635B2 (en) Establishing simultaneous mesh node connections
JP6715867B2 (ja) 統合スモールセルネットワークおよびｗｉｆｉネットワークのための統一認証
EP2939391B1 (en) Method and system for secure network access
EP2900006B1 (en) Method and system for securely accessing portable hotspot of smart phones
US8037305B2 (en) Securing multiple links and paths in a wireless mesh network including rapid roaming
US20240422543A1 (en) Securing transmission paths in a mesh network
CN107005534B (zh) 一种安全连接建立的方法和装置
US20160094515A1 (en) Mobile hotspot managed by access controller
EP2617222B1 (en) Dynamic account creation with secured hotspot network
CN109219965A (zh) 一种通信方法及相关装置
TR201911098T4 (tr) Yakınlık hizmetlerinden yararlanan hesaplama cihazlarına yönelik güvenli haberleşme.
CN107567017B (zh) 无线连接系统、装置及方法
Liu et al. Security analysis of mobile device-to-device network applications
CN102595405A (zh) 一种网络接入的认证方法、系统和设备
US20190215903A1 (en) Network Handover Protection Method, Related Device, and System
JP2008537644A (ja) 無線ネットワークにおけるモバイルユニットの高速ローミングの方法およびシステム
CN101765057A (zh) 一种向WiFi访问终端提供组播业务的方法、设备及系统
WO2025031156A1 (zh) 通信方法和通信装置
KR20190000781A (ko) 단말의 데이터 전송 방법, 단말 장치 및 데이터 전송 제어 방법
WO2024145946A1 (en) Apparatus, method, and computer program
JP2007538470A (ja) Ｖｐｎクライアントのないポータブル装置の仮想プライベートネットワークへのアクセスを管理する方法
CN101765230B (zh) 无线网状网络中的用户通信数据的传输方法和装置
WO2012026932A1 (en) Method and apparatus for over-the-air configuration of a wireless device

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15825357

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

REEP Request for entry into the european phase

Ref document number: 2015825357

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2015825357

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 15328182

Country of ref document: US