CN104540128B - The method, apparatus and system of wireless network access - Google Patents

Abstract

The invention discloses a wireless network access method, device and system, relates to the field of communication technology, and mainly aims to solve the problem of cumbersome operation process when visitors access wireless APs. The main technical solutions of the present invention include: detecting the signal strength of the visitor terminal; calculating the actual distance between the visitor terminal and the router according to the signal strength; comparing the actual distance with the preset distance threshold; if the actual distance is not greater than the distance threshold, Then send an authentication request to the management terminal, so that the management terminal determines whether to connect the visitor terminal to the wireless access node AP created by the router; receive the request response returned by the management terminal, and access or Cancel access to the guest terminal. The present invention is mainly applied in the process of a visitor terminal accessing a wireless AP in a home local area network.

Description

Method, device and system for wireless network access

technical field

The present invention relates to the field of communication technology, in particular to a method, device and system for wireless network access.

Background technique

Wireless Fidelity (Wireless Fidelity, WiFi) is the most widely used wireless network transmission technology today. WiFi is a wireless network composed of a wireless access point (Access Point, AP) and a wireless network card. Wireless APs are commonly known as "hot spots". A user terminal such as a smartphone, tablet or laptop equipped with a wireless network card can share network resources through the AP.

In a home network, the owner usually sets a password for the wireless AP. When the visitor's user terminal detects the signal of the wireless AP, the visitor needs to manually select the name of the AP to join, and manually enter the wireless password for authentication. In practical applications, manually selecting the AP name and entering the wireless password is cumbersome, and the process of entering the password is very error-prone.

Contents of the invention

In view of this, the embodiments of the present invention provide a method, device and system for wireless network access, the main purpose of which is to solve the problem of cumbersome operation when a visitor accesses a wireless AP.

According to one aspect of the present invention, a method for accessing a wireless network is provided, including:

Detect the signal strength of the visitor terminal;

Calculate the actual distance between the visitor terminal and the router according to the signal strength;

Compare the actual distance with the preset distance threshold;

If the actual distance is not greater than the distance threshold, an authentication request is sent to the management terminal, so that the management terminal determines whether to connect the visitor terminal to the wireless access node AP created by the router;

Receive the request response returned by the management terminal, and access or cancel access to the guest terminal according to the instruction information carried in the request response.

According to another aspect of the present invention, a wireless network access device is provided, including:

A detection unit is used to detect the signal strength of the visitor terminal;

a calculation unit, configured to calculate the actual distance between the visitor terminal and the router according to the signal strength detected by the detection unit;

a comparison unit, configured to compare the actual distance calculated by the calculation unit with a preset distance threshold;

The sending unit is used to send an authentication request to the management terminal when the actual distance compared by the comparison unit is not greater than the distance threshold, so that the management terminal determines whether to connect the visitor terminal to the wireless access node AP created by the router;

The receiving unit is configured to receive the request response returned by the management terminal sent by the sending unit;

An operating unit, configured to access or cancel access to the guest terminal according to the instruction information carried in the request response received by the receiving unit.

According to another aspect of the present invention, a wireless network access system is provided, the system includes a visitor terminal, a router, and a management terminal, wherein,

The router is used to detect the signal strength of the visitor terminal, calculate the actual distance between the visitor terminal and the router according to the signal strength, compare the actual distance with the preset distance threshold, if the actual distance is not greater than the distance threshold, send a message to the management terminal Send an authentication request;

The management terminal is used to receive the authentication request sent by the router, determine whether to connect the visitor terminal to the wireless access node AP created by the router, and send a request response to the router;

The router is also configured to receive the request response returned by the management terminal, and access or cancel access to the guest terminal according to the instruction information carried in the request response.

With the above technical solution, the wireless network access method, device and system provided by the present invention, the router detects the signal strength of the visitor terminal, calculates the actual distance between the visitor terminal and the router according to the signal strength, and uses the calculated actual distance Compared with the preset distance threshold, when the actual distance is not greater than the distance threshold, the router sends an authentication request to the management terminal, and the management terminal determines whether to connect the guest terminal to the wireless AP created by the router, and sends the authentication request to the router. request response, the router receives the request response sent by the management terminal, and accesses or cancels access to the guest terminal according to the instruction information carried in the request response. Compared with the prior art, the present invention calculates based on the router that the actual distance between the visitor terminal and the router is not greater than the distance threshold, and then the router determines to access the visitor terminal according to the instruction information sent by the management terminal, without manually entering the wireless password for authentication. Therefore, the method provided by the present invention can greatly simplify the operation process for a guest terminal to access a wireless AP.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating a preferred embodiment and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same components. In the attached picture:

FIG. 1 shows a flow chart of a method for wireless network access provided by an embodiment of the present invention;

FIG. 2 shows a schematic diagram of an authentication request interface sent to a management terminal provided by an embodiment of the present invention;

FIG. 3 shows a schematic diagram of a white list for recording visitor terminals provided by an embodiment of the present invention;

FIG. 4 shows a block diagram of a device for wireless network access provided by an embodiment of the present invention;

FIG. 5 shows a block diagram of another wireless network access device provided by an embodiment of the present invention;

FIG. 6 shows a block diagram of another wireless network access device provided by an embodiment of the present invention;

FIG. 7 shows a block diagram of another wireless network access device provided by an embodiment of the present invention;

FIG. 8 shows a block diagram of another wireless network access device provided by an embodiment of the present invention;

FIG. 9 shows a block diagram of another wireless network access device provided by an embodiment of the present invention;

FIG. 10 shows a block diagram of another wireless network access device provided by an embodiment of the present invention;

FIG. 11 shows a block diagram of another wireless network access device provided by an embodiment of the present invention;

Fig. 12 shows a block diagram of a wireless network access system provided by an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

An embodiment of the present invention provides a method for wireless network access, as shown in FIG. 1, the method includes:

101. Detect the signal strength of the visitor terminal.

When a guest terminal needs to access the wireless network, it first needs to turn on the signal switch for accessing the wireless network on its own device, so that the router can detect the guest terminal based on the signal sent by the guest terminal, and the router detects the guest terminal based on the signal sent by the guest terminal. The signal strength of the terminal. Wherein, the visitor terminal in step 101 is a visitor terminal that supports wireless Internet access, and the visitor terminal used in the embodiment of the present invention can be: a smart phone, a personal computer (PersonalComputer, PC), a tablet computer, etc., the specific embodiment of the present invention No restrictions are imposed.

102. Calculate the actual distance between the visitor terminal and the router according to the signal strength.

After detecting the signal strength of the visitor terminal in step 101, the router calculates the actual distance between the visitor terminal and the router according to the signal strength. In the embodiment of the present invention, when calculating the actual distance between the visitor terminal and the router, external interference and errors caused by different visitor terminal models are not excluded.

103. Compare the actual distance with a preset distance threshold.

After the actual distance calculated in step 102 is compared with the preset distance threshold, the smaller the set distance threshold is, the closer the actual distance between the visitor terminal and the router is to access the wireless network. Wherein, the preset distance threshold is artificially set. When setting the distance threshold, the following methods can be adopted but not limited to. For example, the distance threshold can be set to 40 cm, or the distance threshold can also be set to 10 cm. The embodiment of the invention does not limit this.

104. If the actual distance is not greater than the distance threshold, send an authentication request to the management terminal, so that the management terminal determines whether to connect the visitor terminal to the wireless access node AP created by the router.

While ensuring that the operation steps when the visitor terminal accesses the wireless AP can be simplified, the security of the wireless AP must also be ensured. In order to prevent other visitor terminals from accessing the wireless AP, the router should perform authentication according to the comparison result in step 103. If the actual distance is not greater than the distance threshold, an authentication request is sent to the management terminal; the management terminal receives and responds to the authentication request sent by the router, and the router determines whether to connect the visitor terminal to the router according to the information carried in the authentication request information. In the wireless AP. Wherein, the management terminal is a terminal used by the router owner, including: a smart phone, a PC, a tablet computer, etc., and the specific embodiments of the present invention are not limited.

105. Receive the request response returned by the management terminal, and access or cancel access to the guest terminal according to the instruction information carried in the request response.

When the guest terminal accesses the wireless AP, it does not connect the guest terminal to the wireless AP according to the actual distance between the guest terminal and the router calculated by the router is not greater than the distance threshold, but responds to the request sent by the management terminal. information carried in. The router receives and checks the information in the request response, and connects or cancels the access to the guest terminal according to the instruction information carried in the request response. When the management terminal instructs the router to connect the guest terminal to the wireless AP, it determines to connect the guest terminal to the wireless AP. In the AP, when the management terminal instructs the router that the guest terminal cannot be connected to the wireless AP, the connection of the guest terminal to the wireless AP is cancelled.

In the prior art, for a family scene, when there are many guest terminals at home, the owner needs to manually input the password of the wireless AP repeatedly on each visitor’s mobile phone, tablet computer, etc., one by one. The more guests, the more the owner’s The greater the amount of repetitive labor, and the process of password input is very error-prone. In order to simplify the process of a guest terminal accessing a wireless AP, in the wireless network access method provided in the embodiment of the present invention, the router detects the signal strength of the guest terminal, calculates the actual distance between the guest terminal and the router according to the signal strength, and calculates the obtained The actual distance is compared with the preset distance threshold. When the actual distance is not greater than the distance threshold, the router sends an authentication request to the management terminal, and the management terminal determines whether to connect the guest terminal to the wireless AP created by the router, and Send a request response to the router, and the router receives the request response sent by the management terminal, and accesses or cancels access to the guest terminal according to the instruction information carried in the request response. Compared with the prior art, the embodiment of the present invention is based on the fact that the actual distance between the guest terminal and the router calculated by the router is not greater than the distance threshold, and then the router determines to access the guest terminal according to the instruction information sent by the management terminal without manually entering the wireless password Therefore, the method provided by the embodiment of the present invention can greatly simplify the operation process for the guest terminal to access the wireless AP.

Furthermore, when the router sends an authentication request to the management terminal, it needs to inform the management terminal which guest terminal is connected to the wireless AP. Therefore, when the router sends an authentication request to the management terminal, it needs to wirelessly bridge to the virtual AP created by the guest terminal In the AP, obtain the MAC address of the visitor terminal and the name of the virtual AP from the virtual AP, and the router can carry the obtained MAC address and the name of the virtual AP in the authentication request and send it to the management terminal, or only carry the MAC address It is sent to the management terminal in the authentication request, and only the name of the virtual AP can be carried in the authentication request and sent to the management terminal. The management terminal can identify the visitor terminal according to the MAC address and/or the name of the virtual AP. As shown in FIG. 2, FIG. 2 shows a schematic diagram of an authentication request interface sent by the router to the management terminal. The management terminal clicks on the visitor terminal 1, and then sends an instruction to the router after clicking Send. Wherein, the name of the virtual AP is set by the guest terminal. When setting the name of the virtual AP, the guest terminal can use but not limited to the following methods. For example, the name of the virtual AP can be a Service Set Identifier (Service Set Identifier, SSID ), can also be set according to user preferences, such as Gs496, etc., which are not limited in specific embodiments of the present invention.

Further, the request response sent by the management terminal to the router carries the MAC address of the visitor terminal and/or the name of the virtual AP, and the MAC address and/or the name of the virtual AP are bound with an authentication flag bit, and the authentication The flag bit is used to identify whether access to the guest terminal is allowed, and the authentication flag bit can be set to 1 and 0, 1 means that access to the guest terminal is allowed, and 0 means that access to the guest terminal is not allowed. Or, as another optional way, the authentication flag bits can also be represented by T (True) and F (False), where the meaning represented by T corresponds to the above 1, which means that access to the guest terminal is allowed, and the meaning represented by F Corresponding to the above 0, it means that access to the guest terminal is not allowed.

Further, whenever the router calculates that the actual distance between the guest terminal and the router is not greater than the preset distance, it will send an authentication request to the management terminal. Similarly, when the guest terminal 1 has previously accessed a wireless AP, When the visitor terminal 1 accesses the wireless AP for the second time, the router will also send authentication request information to the management terminal, which may cause certain troubles to the management terminal. For this reason, in the embodiment of the present invention, after the router receives the request response returned by the management terminal, if the management terminal allows access to the guest terminal, the MAC address of the guest terminal is added to the white list; if the management terminal is prohibited from accessing the guest terminal, then Add the MAC address of the guest terminal to the blacklist; when the guest terminal added to the whitelist by the router accesses the wireless AP next time, as long as the actual distance of the terminal is not greater than the distance threshold, it can automatically access the wireless AP; The visitor terminal that is connected to the blacklist by the router cannot be connected to the wireless AP, and the visitor terminal can only continuously send access request information to the wireless AP. Among them, the embodiment of the present invention can implement the timing of adding the MAC address of the visitor terminal to the whitelist or blacklist in the following ways, but not limited to, for example, after the router receives the request response returned by the management terminal, immediately add the MAC address of the visitor terminal to the blacklist. The MAC address is added to the whitelist or blacklist, or the router selects its own idle time to add the MAC address of the visitor terminal to the whitelist or blacklist, which is not limited by the specific embodiment of the present invention.

It should be noted that the MAC address of the guest terminal recorded in the above white list or blacklist is not the name of the guest terminal, because the MAC address of the guest terminal can uniquely identify a guest terminal, and the name of the guest terminal can be changed arbitrarily. In turn, it cannot be ensured that a guest terminal is identified by recording the name of the guest terminal. In an implementation of the embodiment of the present invention, the whitelist or blacklist may also record the name of the corresponding visitor terminal on the premise of recording the visitor terminal, but the router shall identify the visitor terminal according to the information recorded in the whitelist. Identify the MAC address of the corresponding visitor terminal. As shown in FIG. 3 , FIG. 3 shows a schematic diagram of recording the MAC address of the visitor terminal and the name of the visitor terminal in the white list.

Further, the management terminal can update the whitelist and/or blacklist in the router. First, the router receives the update instruction sent by the management terminal, and updates the whitelist and/or blacklist according to the update instruction. The following will update the router The contents of the whitelist and/or blacklist are detailed:

1. Add MAC addresses to the whitelist or blacklist. If the management terminal knows a MAC address in advance, it can be added to the whitelist or blacklist. If the MAC address is added to the whitelist, when the visitor terminal identified by the MAC address needs to access the wireless AP, it can automatically access the wireless AP. AP; if the MAC address is added to the blacklist, the visitor terminal identified by the MAC address will not be able to access the wireless AP.

2. Delete the MAC addresses recorded in the white list or black list. As mentioned here, delete the MAC address recorded in the whitelist or blacklist. When the visitor terminal identified by the MAC address accesses the wireless AP next time, it needs to go through the router to calculate the actual distance between the visitor terminal and the router based on the signal strength of the visitor terminal. Not greater than the distance threshold, and determine whether to connect the guest terminal to the wireless AP according to the instructions of the management terminal.

3. Transfer the MAC addresses in the whitelist to the blacklist. After the MAC address is transferred to the blacklist, the visitor terminal identified by the MAC address will not be able to access the wireless AP.

4. Transfer the MAC addresses in the blacklist to the whitelist. After the MAC address is transferred to the white list, the visitor terminal identified by the MAC address can be automatically connected to the wireless AP.

Further, as a refinement and extension of the above embodiment, when detecting the signal strength of the visitor terminal in the above step 101, the router adopts different methods for detecting the signal strength of the visitor terminal for different signal types. The embodiment of the present invention adopts but not limited to the following methods when detecting the signal strength of the visitor terminal:

method one:

When the visitor terminal sends a data signal, it detects the received signal strength indicator RSSI value when receiving the digital signal.

The router uses a unified method to detect the signal strength of the visitor terminal. The signal strength varies according to the transmission power of different visitor terminals, and different visitor terminal models correspond to different transmission powers. Therefore, the router detects the RSSI of the received digital signal. After the value, find the transmit power of the corresponding visitor terminal model, and calibrate the RSSI value according to the transmit power. For example, assume that the transmit power of visitor terminal 1 whose model is M01 is 40mW, and the transmit power of visitor terminal 2 whose model is M030 is 5mW. When visitor terminal 1 and visitor terminal 2 are at the same distance from the router, the router It will detect that the signal strength of guest terminal 1 is greater than that of guest terminal 2; similarly, when the router detects that the signal strength of guest terminal 3 and guest terminal 4 is the same, and the transmit power of guest terminal 3 and guest terminal 4 is the same , then the actual distance between guest terminal 3 and guest terminal 4 is the same as that of the router, but it does not rule out that the transmit power of guest terminal 3 is different from that of guest terminal 4. When the transmit power of guest terminal 3 is higher than that of guest terminal 4 When the transmitting power of the visitor terminal 3 is large, the actual distance between the visitor terminal 3 and the router is greater than the actual distance between the visitor terminal 4 and the router; when the transmitting power of the visitor terminal 3 is smaller than that of the visitor terminal 4, the visitor terminal 3 and the router The actual distance between the routers is smaller than the actual distance between the visitor terminal 4 and the router, and then the router will have an error when calculating the actual distance between the visitor terminal and the router according to the signal strength. Therefore, to address the above problems, the embodiment of the present invention calibrates the RSSI value according to different visitor terminal models corresponding to different transmission powers.

In the actual operation process, the router will determine the model of the visitor terminal according to the data signal sent by the visitor terminal, and find the corresponding transmit power of the visitor terminal according to the comparison table of the visitor terminal model and transmit power, as shown in Table 1 , Table 1 shows a comparison table between visitor terminal models and transmit power.

Table 1

Guest Terminal Model transmit power M01 40mW M030 5mW Zw8050 60mW SX673 3mW H4 21mW Mh370 25mW

After the router calibrates the RSSI value according to the transmit power of the visitor terminal, it obtains the current RSSI value of the visitor terminal, determines the signal strength of the visitor terminal according to the current RSSI value of the visitor terminal, and saves a preset first mapping relationship locally on the router table to obtain the actual distance between the visitor terminal and the router, wherein the table records the one-to-one correspondence between the RSSI value and the actual distance. Wherein, the router may pre-calculate actual distances corresponding to different signal strengths, and write the calculated actual distances into the first mapping relationship table. Thereafter, after obtaining the signal strength of the visitor terminal, the router can directly look up the table to obtain the corresponding actual distance. In this embodiment, the manner of calculating the actual distance according to the signal strength of the RSSI can be realized by referring to the prior art, and this embodiment will not describe it again.

Wherein, when the router looks up the transmit power corresponding to the visitor terminal according to the visitor terminal model and transmit power comparison table, the embodiment of the present invention may be implemented in the following manner, but not limited to, the router uses the visitor terminal model and transmit power comparison table Search the transmit power corresponding to the visitor terminal successively; or search the transmit power corresponding to the visitor terminal in the visitor terminal model and transmit power comparison table by means of dichotomy, which is not limited in the specific embodiments of the present invention.

Method 2:

The wireless bridge is connected to the virtual AP created by the guest terminal, and the decibel dBm value of the virtual AP is detected.

The router will automatically scan the surrounding wireless APs and check the wireless APs that can be bridged. During the wireless AP scanning process of the router, the dBm value carried in the wireless AP is obtained. According to the dBm value, the signal strength of the visitor terminal can be detected. According to the signal Intensity calculates the actual distance between the guest terminal and the router. During specific implementation, firstly, the guest terminal creates a virtual AP, and the router bridges into the virtual AP created by the guest terminal, and detects the dBm value. Wherein, both the dBm value and the RSSI value can be used to represent the signal strength of the visitor terminal, wherein the dBm value and the RSSI value can be converted to each other.

The router obtains the current dBm value of the visitor terminal, and determines the signal strength of the visitor terminal according to the current dBm value of the visitor terminal, saves a preset second mapping relationship table locally in the router, and obtains the actual distance between the visitor terminal and the router, wherein , the table records the one-to-one correspondence between the dBm value and the actual distance.

Optionally, in order to further ensure the security of the wireless AP, the router stops broadcasting the name of the wireless AP to the visitor terminal before detecting the signal strength of the visitor terminal, so that the visitor terminal does not display the name of the wireless AP. In an implementation of the embodiment of the present invention, when the router stops broadcasting the name of the wireless AP to the visitor terminal, the router can continue to detect the signal strength of the visitor terminal, and when the router calculates the actual distance between the visitor terminal and the router according to the signal strength When the distance is not greater than the distance threshold, the router broadcasts the name of the wireless AP and connects the visitor terminal to the wireless AP; in another implementation of the embodiment of the present invention, the router stops broadcasting the name of the wireless AP to the visitor terminal , and the guest terminal knows the name of the wireless AP, the guest terminal user can manually enter the name of the wireless AP, and send the request information for accessing the wireless AP to the router. The terminal sends a prompt message of please wait. When the router calculates according to the signal strength that the actual distance between the visitor terminal and the router is not greater than the distance threshold, the router sends an authentication request to the management terminal and receives the request returned by the management terminal. response, and access or cancel access to the guest terminal according to the instruction information carried in the request response.

Wherein, in the embodiment of the present invention, when sending the prompt information of please wait to the visitor terminal, the following methods may be adopted but not limited to, for example, the router may send the prompt information of waiting for distance measurement to the visitor terminal in the form of a dialog box; or , it is also possible not to respond to the request information sent by the visitor terminal to access the wireless AP, but to wait for the router to calculate the actual distance between the visitor terminal and the router according to the signal strength of the visitor terminal after the actual distance between the visitor terminal and the router is not greater than the distance threshold, and send the request to the management terminal. Sending an authentication request, the router receives the request response returned by the management terminal, and accesses or cancels access to the guest terminal according to the instruction information carried in the request response. The specific embodiments of the present invention are not limited.

In an actual application scenario, the router stops broadcasting the name of the wireless AP to the guest terminal and is used in an interactive game at home. Hide the wireless AP in a corner of the home, Xiaoming, Xiaohua, and Xiaohong compete to see which visitor terminal will connect to the wireless AP in the shortest time, the guest terminal of Xiaoming, Xiaohua, and Xiaohong The wireless AP needs to be within the preset distance from the router. In addition, the router can also be set within the preset distance between the guest terminal and the router, and the wireless network between the guest terminal and the wireless AP can be established by shaking the guest terminal. , in order to increase the user's experience of simplifying the operation procedure of accessing the wireless AP. Among them, the router sets the times and ways of shaking the guest terminal so that the guest terminal can quickly access the wireless AP. The router can set the guest terminal to shake once, or set the guest terminal to shake twice. The number of times to judge whether to connect the guest terminal to the wireless AP.

Optionally, since the router can virtualize multiple wireless APs, and each wireless AP has its unique name, the router can also broadcast the names of all wireless APs to the guest terminal, so that the user can select the desired wireless AP on the guest terminal. Accessed wireless APs, wherein multiple wireless APs virtualized by the same router are all subnets created by the router, can connect guest terminals to the wireless network.

Further, as mentioned above, the router can virtualize multiple wireless APs, and divide the virtualized multiple wireless APs into master wireless APs and slave wireless APs, wherein guest terminals can log in to the router through the master wireless APs The control interface of the router can modify the configuration information of the router, the name of the wireless AP, etc., but the guest terminal cannot log in to the control interface of the router through the slave wireless AP; the master wireless AP and the slave wireless AP are both subnets created by the router. When a guest terminal requests to access the wireless network, the guest terminal can be connected to the secondary wireless AP.

Further, as an implementation of the above method, an embodiment of the present invention also provides a device for wireless network access, as shown in FIG. 4 , the device includes:

A detection unit 401, configured to detect the signal strength of the visitor terminal;

A calculation unit 402, configured to calculate the actual distance between the visitor terminal and the router according to the signal strength detected by the detection unit 401;

A comparison unit 403, configured to compare the actual distance calculated by the calculation unit 402 with a preset distance threshold;

The sending unit 404 is configured to send an authentication request to the management terminal when the actual distance compared by the comparison unit 403 is not greater than the distance threshold, so that the management terminal determines whether to connect the visitor terminal to the wireless access node AP created by the router ;

The receiving unit 405 is configured to receive the request response returned by the management terminal sent by the sending unit 404;

The operating unit 406 is configured to access or cancel access to the guest terminal according to the indication information carried in the request response received by the receiving unit 405 .

Further, as shown in FIG. 5, the guest terminal creates a virtual AP, and the sending unit 404 sends an authentication request to the management terminal, including:

The bridging module 4041 is used for wireless bridging to the virtual AP created by the guest terminal;

The obtaining module 4042 is used to obtain the media access control MAC address of the visitor terminal and/or the name of the virtual AP from the virtual AP bridged by the bridging module 4041;

The sending module 4043 is configured to carry the MAC address and/or the name of the virtual AP obtained by the obtaining module 4042 in the authentication request and send it to the management terminal, so that the management terminal can identify the visitor terminal according to the MAC address and/or the name of the virtual AP .

Further, the request response received by the receiving unit 405 carries the MAC address of the visitor terminal and/or the name of the virtual AP, and the MAC address and/or the name of the virtual AP are bound with an authentication flag, and the authentication flag is used for Indicates whether access to guest terminals is allowed.

Further, as shown in Figure 6, the device further includes:

The adding unit 407 is configured to add the MAC address of the visitor terminal to the whitelist when the management terminal allows access to the visitor terminal after the receiving unit 405 receives the request response returned by the management terminal;

The adding unit 407 is further configured to, after the receiving unit 405 receives the request response returned by the management terminal, add the MAC address of the guest terminal to the blacklist when the management terminal prohibits access to the guest terminal.

Further, as shown in Figure 7, the device further includes:

The receiving unit 405 is also configured to receive an update instruction sent by the management terminal;

The updating unit 408 is configured to update the whitelist and/or the blacklist according to the update instruction received by the receiving unit 405 .

Further, the detection unit 401 is also used to detect the received signal strength indicator RSSI value when receiving the digital signal when the visitor terminal sends the data signal;

The calculation unit 402 is further configured to search the distance value corresponding to the RSSI value in the preset first mapping relationship table to obtain the actual distance.

Further, as shown in Figure 8, the device further includes:

The search unit 409 is used to search for the transmit power of the corresponding visitor terminal model after the detection unit 401 detects the RSSI value when receiving the digital signal;

The calibration unit 410 is configured to calibrate the RSSI value according to the transmit power searched by the search unit 409 .

Further, the detection unit 401 is also used to wirelessly bridge into the virtual AP created by the visitor terminal, and detect the decibel dBm value of the virtual AP;

The calculating unit 402 is further configured to search the distance value corresponding to the dBm value in the preset second mapping relationship table to obtain the actual distance.

Further, as shown in Figure 9, the device further includes:

The stop unit 4011 is configured to stop broadcasting the name of the wireless AP to the visitor terminal before the detection unit 401 detects the signal strength of the visitor terminal, so that the visitor terminal does not display the name of the wireless AP.

Further, as shown in Figure 10, the device further includes:

The broadcast unit 4012 is configured to broadcast the names of all wireless APs to the visitor terminal when the actual distance compared by the comparison unit 403 is not greater than the distance threshold, so that the user selects the wireless AP to be accessed on the visitor terminal.

Further, as shown in Figure 11, the operation unit 406 accesses the visitor terminal, including:

Establishing module 4061, used to establish a virtual wireless AP, the guest terminal cannot log in to the control interface of the router through the virtual wireless AP;

The access module 4062 is configured to connect the guest terminal to the virtual wireless AP established by the establishment module 4061.

Further, as an implementation of the above method and an application of the above device, as shown in FIG. 12 , an embodiment of the present invention also provides a wireless network access system, the system includes a visitor terminal 501, a router 502, and a management terminal 503, in,

The router 502 is used to detect the signal strength of the visitor terminal 501, calculate the actual distance between the visitor terminal 501 and the router 502 according to the signal strength, compare the actual distance with the preset distance threshold, if the actual distance is not greater than the distance threshold, Then send an authentication request to the management terminal 503;

The management terminal 503 is configured to receive the authentication request sent by the router 502, determine whether to connect the visitor terminal 501 to the wireless access node AP created by the router 502, and send a request response to the router 502;

The router 502 is further configured to receive the request response returned by the management terminal 503, and access or cancel access to the guest terminal 501 according to the instruction information carried in the request response.

In the device and system for wireless network access provided by the embodiments of the present invention, the router detects the signal strength of the visitor terminal, calculates the actual distance between the visitor terminal and the router according to the signal strength, and compares the calculated actual distance with the preset distance threshold For comparison, when the actual distance is not greater than the distance threshold, the router sends an authentication request to the management terminal, and the management terminal determines whether to connect the guest terminal to the wireless AP created by the router, and sends a request response to the router, and the router receives the management terminal. The terminal sends a response to the request, and accesses or cancels access to the guest terminal according to the instruction information carried in the request response. Compared with the prior art, the embodiment of the present invention is based on the fact that the actual distance between the guest terminal and the router calculated by the router is not greater than the distance threshold, and then the router determines to access the guest terminal according to the instruction information sent by the management terminal without manually entering the wireless password Therefore, the device and system provided by the embodiments of the present invention can greatly simplify the operation process for a visitor terminal to access a wireless AP.

In the foregoing embodiments, the descriptions of each embodiment have their own emphases, and for parts not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

It can be understood that related features in the above methods and devices can refer to each other. In addition, "first", "second" and so on in the above embodiments are used to distinguish each embodiment, and do not represent the advantages and disadvantages of each embodiment.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method or method so disclosed may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all of the functions of some or all of the components in the title of the invention according to the embodiments of the present invention. The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

Claims (17)

1. a kind of method of wireless network access, which is characterized in that including：

Detect the signal strength of visitor's terminal；

Visitor's terminal is calculated to the actual range between router according to the signal strength；

The actual range is compared with preset distance threshold；

If the actual range is not more than the distance threshold, authentication request is sent to management terminal, eventually so as to the management End determines whether to be linked into visitor's terminal in the radio access node AP that the router creates；

The request response that the management terminal returns is received, and according to the instruction information access carried in the request response or is taken Disappear access visitor's terminal；

The signal strength of detection visitor's terminal, including：

When visitor's terminal transmission data signal, detection receives the received signal strength indicator RSSI when data-signal Value；

After RSSI value when the detection receives the data-signal, the method further includes：

Search the transmission power of corresponding visitor's terminal models；

The RSSI value is calibrated according to the size of the transmission power；

It is described that visitor's terminal is calculated to the actual range between router according to the signal strength, including：

The distance value that the RSSI value after the corresponding calibration is searched in preset first mapping table, obtain the reality away from From.

2. according to the method described in claim 1, it is characterized in that, visitor's terminal establishment have virtual AP, it is described to management Terminal sends authentication request, including：

It is wirelessly bridged in the virtual AP that visitor's terminal creates；

The MAC address of visitor's terminal and/or the title of the virtual AP are obtained to the virtual AP；

The carrying of the title of the MAC Address and/or the virtual AP is sent to the management terminal in the authentication request, So that the management terminal is identified visitor's terminal according to the title of the MAC Address and/or the virtual AP.

3. according to the method described in claim 2, it is characterized in that, carrying the institute of visitor's terminal in the request response The title of MAC Address and/or the virtual AP is stated, and the name binding of the MAC Address and/or the virtual AP have authentication Flag bit, the authentication token position is for identifying whether to allow to access visitor's terminal.

4. according to the method described in claim 1, it is characterized in that, in the request response for receiving the management terminal and returning Later, the method further includes：

If the management terminal allows to access visitor's terminal, the MAC Address of visitor's terminal is added to white list In；

If the management terminal forbids accessing visitor's terminal, the MAC Address of visitor's terminal is added to blacklist In.

5. according to the method described in claim 4, it is characterized in that, the method further includes：

Receive the more new command that the management terminal is sent；

The white list and/or the blacklist are updated according to the more new command.

6. according to the method described in claim 1, it is characterized in that, it is described detection visitor's terminal signal strength before, institute The method of stating further comprises：

Stop the title to wireless aps described in visitor's terminal broadcast, so that visitor's terminal does not show the wireless aps Title.

If 7. according to the method described in claim 6, it is characterized in that, the actual range be not more than the distance threshold, The method further includes：

To the title of all wireless aps of visitor's terminal broadcast, so that user selects to need to access in visitor's terminal Wireless aps.

8. method according to any one of claim 1 to 7, which is characterized in that access visitor's terminal, packet It includes：

Virtual radio AP is established, visitor's terminal can not log in the control interface of router by the virtual radio AP；

Visitor's terminal is linked into the virtual radio AP.

9. a kind of device of wireless network access, which is characterized in that including：

Detection unit, the signal strength for detecting visitor's terminal；

Computing unit, the signal strength for being detected according to the detection unit calculate visitor's terminal between router Actual range；

Comparing unit, the actual range for calculating the computing unit are compared with preset distance threshold；

Transmission unit is used for when the actual range that the comparing unit compares is not more than the distance threshold, to management terminal Authentication request is sent, so that the management terminal determines whether visitor's terminal being linked into the wireless of the router establishment In access node AP；

Receiving unit, the request response returned for receiving the management terminal that the transmission unit is sent；

Operating unit, the instruction information access or cancellation carried in the request response for being received according to the receiving unit access Visitor's terminal；

The detection unit is additionally operable to, and when visitor's terminal transmission data signal, is detected when receiving the data-signal Received signal strength indicator RSSI value；

Described device further comprises：

Searching unit, for after the RSSI value that the detection unit detects when receiving the data-signal, searching corresponding institute State the transmission power of visitor's terminal models；

The size of alignment unit, the transmission power for being searched according to the searching unit calibrates the RSSI value；

The computing unit is additionally operable to, and the RSSI value of the corresponding calibration module is searched in preset first mapping table Distance value obtains the actual range.

10. device according to claim 9, which is characterized in that visitor's terminal establishment has virtual AP, the transmission single Member sends authentication request to management terminal, including：

Bridge module, for being wirelessly bridged in the virtual AP that visitor's terminal creates；

Acquisition module, the virtual AP for being bridged to the bridge module obtain the media access control of visitor's terminal The title of MAC Address and/or the virtual AP；

The title of sending module, MAC Address and/or the virtual AP for obtaining the acquisition module is carried in the mirror It is sent to the management terminal in power request, so that the management terminal is according to the name of the MAC Address and/or the virtual AP Visitor's terminal is identified in title.

11. device according to claim 10, which is characterized in that carried in the request response that the receiving unit receives The title of the MAC Address of visitor's terminal and/or the virtual AP, and the MAC Address and/or the virtual AP Name binding have an authentication token position, the authentication token position is for identifying whether to allow to access visitor's terminal.

12. device according to claim 9, which is characterized in that described device further comprises：

Adding device, after the request for receiving the management terminal return in the receiving unit responds, when the management When terminal allows to access visitor's terminal, the MAC Address of visitor's terminal is added in white list；

The adding device is additionally operable to, and after the request response that the receiving unit receives that the management terminal returns, works as institute When stating management terminal and forbidding accessing visitor's terminal, the MAC Address of visitor's terminal is added in blacklist.

13. device according to claim 12, which is characterized in that described device further comprises：

The receiving unit is additionally operable to, and receives the more new command that the management terminal is sent；

Updating unit, more new command for being received according to the receiving unit to the white list and/or the blacklist into Row update.

14. device according to claim 9, which is characterized in that described device further comprises：

Stop unit, for before the signal strength that the detection unit detects visitor's terminal, stopping to visitor's terminal The title of the wireless aps is broadcasted, so that visitor's terminal does not show the title of the wireless aps.

15. device according to claim 14, which is characterized in that described device further comprises：

Radio unit, the actual range for being compared when the comparing unit are not more than the distance threshold, to visitor end The title of all wireless aps is broadcasted at end, so that user selects the wireless aps for needing to access in visitor's terminal.

16. device according to any one of claims 9 to 15, which is characterized in that the operating unit accesses the visit Objective terminal, including：

Module is established, for establishing virtual radio AP, visitor's terminal can not log in router by the virtual radio AP Control interface；

AM access module, for visitor's terminal to be linked into described establish in the virtual radio AP of module foundation.

17. a kind of system of wireless network access, which is characterized in that the system comprises visitor's terminal, router and management Terminal, wherein

The router, for when visitor's terminal transmission data signal, detection to receive the reception signal when data-signal Then intensity indicating RSSI value searches the transmission power of corresponding visitor's terminal models, further according to the big of the transmission power It is small that the RSSI value is calibrated, the distance value of the corresponding RSSI value is searched in preset first mapping table, is obtained Visitor's terminal is obtained to the actual range between router, the actual range is compared with preset distance threshold, if institute It states actual range and is not more than the distance threshold, then send authentication request to management terminal；

The management terminal, the authentication request sent for receiving the router, it is determined whether by visitor's terminal It is linked into the radio access node AP that the router creates, and request response is sent to the router；

The router is additionally operable to receive the request response that the management terminal returns, and according in request response The instruction information access of carrying cancels access visitor's terminal.