CN105959941A - Method for providing access point on a high-speed train - Google Patents

Abstract

The invention discloses a method for providing a hotspot on a motor vehicle, which includes a client, the client is installed on a notebook, the hotspot is installed on the motor car, the motor car has a voltage conversion unit, the input end of the voltage conversion unit is connected to the power supply grid of the motor car, and the voltage conversion unit The output terminal of the battery is connected to the hotspot, the voltage conversion unit is used to supply power to the hotspot, the hotspot is connected to the mobile phone base station module installed on the train, the mobile phone base station module is used to connect to the Internet, and the hotspot is used to forward the Internet signal of the mobile phone base station module. Through the interaction between the client and the server, the technical solution can realize the security authentication of the hotspot and solve the security problem of the WIFI hotspot.

Description

A method for providing hotspots on a train

technical field

The invention relates to the technical field of hotspot management, in particular to a method for providing hotspots on a train.

Background technique

The existing WIFI is becoming more and more popular, and everyone is using it. A device that can provide WIFI signals is a hotspot. You can use your mobile phone or notebook to search for hotspots and then connect. Existing hotspot connections are based on ssid and passwords. , and generally as long as the hotspot with the same ssid and password appears nearby, it can be connected, which facilitates everyone's connection. For example, in the existing hotspots of bullet trains, users can connect to the hotspots of bullet trains when they get on the bullet train or around the bullet train. But there is a problem, if the illegal ssid and password are disguised as the WIFI of the train, so that the user can connect to the illegal hotspot. If this hotspot has information reading and forwarding functions, the user may inadvertently leak information, such as bank card information, during the normal surfing process, which may cause serious security problems.

Contents of the invention

For this reason, it is necessary to provide a method for providing hotspots on the motor vehicle to solve the problem of the security of the existing hotspots.

In order to achieve the above purpose, the inventor provides a method for providing hotspots on the motor car, which is applied between the client, the hotspot and the authentication server. The client is installed on the notebook, the hotspot is installed on the motor car, and the motor car has a voltage conversion unit. The input end of the conversion unit is connected to the electric vehicle power grid, and the output end of the voltage conversion unit is connected to the hot spot. For forwarding the Internet signal of the mobile phone base station module, the hotspot has a unique first encryption method, and the authentication server has a first decryption method corresponding to the first encryption method, including the following steps:

The client prohibits other applications from communicating with the WIFI module;

The client establishes a connection to the hotspot through the WIFI module connected to it;

The client sends random numbers to the hotspot;

The hotspot uses the first encryption method to encrypt the random number to obtain the verification information;

The hotspot replies the verification information to the client;

The client sends hotspot identification information, verification information and random numbers to the authentication server;

The authentication server obtains the first decryption method according to the hotspot identification information;

The authentication server uses the first decryption method to decrypt the verification information and compares it with the random number to obtain the authentication result;

The authentication server replies the authentication result to the client;

The client judges whether the authentication result is passed;

If passed, allow other applications to communicate by connecting to the WIFI module;

If not passed, disconnect from the hotspot;

Detect the signal strength of the hotspot, disconnect the connection with the hotspot and delete the hotspot information when the signal strength of the hotspot is lower than the preset value.

Further, there is a unique second encryption method between the authentication servers, and the client stores a second decryption method corresponding to the second encryption method, wherein:

When the client sends authentication information to the authentication server, the client sends client identification information to the authentication server;

After obtaining the authentication result, the authentication server obtains the second encryption method according to the client identification information, encrypts the authentication result and the random number with the second encryption method, and then the authentication server replies the encrypted authentication result to the client;

When the client judges whether the authentication result is passed, it first uses the second decryption method to decrypt the authentication result, and judges whether the random number is correct and whether the authentication result is passed;

If the random number is correct and the authentication result is passed, other applications are allowed to communicate by connecting to the WIFI module;

Otherwise, disconnect from the hotspot.

Further, the sending and receiving information of the authentication server by the client includes: sending and receiving information of the authentication server by the client through the radio frequency module of the mobile phone.

Different from the prior art, the above technical solution can realize the unique authentication of the hotspot through the authentication server, and prevent the hotspot from being fraudulently used.

detailed description

In order to describe in detail the technical content, structural features, achieved goals and effects of the technical solution, the following will be described in detail in conjunction with specific embodiments.

This embodiment provides a method for providing a hotspot on a motor vehicle, which is applied between the client, the hotspot and the authentication server. The client is installed on the notebook, the hotspot is installed on the motor car, the motor car has a voltage conversion unit, and the input terminal of the voltage conversion unit It is connected to the electric vehicle power grid, the output terminal of the voltage conversion unit is connected to the hot spot, the voltage conversion unit is used to supply power to the hot spot, the hot spot is connected to the mobile phone base station module installed on the high speed car, the mobile phone base station module is used to connect to the Internet, and the hot spot is used to forward the mobile phone Internet signal of base station module. In this way, the client connected to the hotspot can access the Internet through the mobile phone base station module. Hotspots have a unique first encryption method, unique means that they are different from other hotspots, and can be uniquely associated through the identification information of hotspots. The authentication server stores a first decryption method corresponding to the first encryption method.

This method comprises the following steps: the client prohibits other applications from communicating with the WIFI module; The WIFI module communicates with external programs. There are many ways for the client to prohibit other applications from communicating through the WIFI module. You can intercept the communication of other applications and discard the data packets, or set an invalid route, so that all applications will be forwarded through this route. That is, the communication of these applications can be prohibited.

The client establishes a connection to the hotspot through the WIFI module connected to it; the client can display the hotspots searched by the WIFI module, and the user can establish a connection to the hotspot after clicking on the hotspot.

The client sends a random number to the hotspot; the client can generate a random number, and there are many ways to generate this random number. The hotspot uses the first encryption method to encrypt the random number to obtain verification information; the verification information is the encrypted random number.

The hotspot replies with verification information to the client; the client sends hotspot identification information, verification information and random numbers to the authentication server. The hotspot identification information may be the hotspot's mac address information or other information. For other information, the hotspot may send the hotspot identification information to the client when the hotspot replies the verification information to the client.

The authentication server obtains the first decryption method according to the hotspot identification information; the authentication server uses the first decryption method to decrypt the verification information and compares it with the random number to obtain the authentication result; the authentication server replies the authentication result to the client; the client judges whether the authentication result is pass.

If passed, other applications are allowed to communicate with the WIFI module; if not passed, the connection with the hotspot is disconnected. In this way, since the fraudulent hotspot does not know the encryption method, it is impossible to encrypt the random number to obtain correct verification information, and naturally cannot pass the authentication on the authentication server. Then the client can disconnect the connection with the fraudulent hotspot, thereby avoiding the connection of the illegal hotspot.

In order to prevent fraudulent hotspots from directly sending legal authentication results to the client, in some embodiments, the authentication server stores a unique second encryption method, and the client stores a second decryption method corresponding to the second encryption method , where: when the client sends authentication information to the authentication server, the client sends the client identification information to the authentication server; after the authentication server obtains the authentication result, it obtains the second encryption method according to the client identification information, and adopts the second encryption method to encrypt the authentication result and the random number, and then the authentication server replies the encrypted authentication result to the client; when the client judges whether the authentication result is passed, it first uses the second decryption method to decrypt the authentication result, and judges whether the random number is correct and whether the authentication result is passed ; If the random number is correct and the authentication result is passed, other applications are allowed to communicate with the WIFI module; otherwise, the connection with the hotspot is disconnected. In this way, the authentication result is also encrypted data. If the fraudulent hotspot sends another legitimate authentication result, since the authentication result is not encrypted by the second encryption method, it cannot be decrypted to obtain the correct random number and authentication result. This prevents the fraudulent hotspot from randomly sending another legal authentication result to the client, which may cause connection problems on the client.

Of course, as long as the client obtains the authentication result through a module other than the WIFI module, the correctness of the authentication result can be greatly improved. The information includes: the client sends and receives authentication server information through the radio frequency module of the mobile phone. In this way, since the fraudulent hotspot is in WIFI mode, and the radio frequency module of the mobile phone cannot be fraudulently used, the authentication result obtained by the client from the radio frequency module of the mobile phone is a legal authentication result.

In many cases, the fake hotspot and the legitimate hotspot are in the same place, and the user needs to be reminded of this illegal situation in time. Then, before the method starts, a step is further included: the client judges whether there are more than two hotspots with the same ssid information and mac information around, and if so, prompts the hotspot. The prompt can be performed through a dialog box or a highlighted display. Once the user sees such a situation, he must be relatively vigilant when connecting.

In order to avoid connecting to illegal hotspots in other places, the present invention also includes the following steps: detecting the signal strength of the hotspot, disconnecting the connection with the hotspot and deleting the hotspot information after the signal strength of the hotspot is lower than a preset value. After the hotspot information is deleted, the device installed with the client cannot automatically connect to the hotspot information, thus ensuring security.

Although the above-mentioned embodiments have been described, those skilled in the art can make additional changes and modifications to these embodiments once they know the basic creative concept, so the above-mentioned are only the implementation of the present invention For example, it is not intended to limit the scope of patent protection of the present invention. Any equivalent structure or equivalent process transformation made by using the content of the description of the present invention, or directly or indirectly used in other related technical fields, is also included in the patent of the present invention. within the scope of protection.

Claims (3)

1. the method providing focus on motor-car, is applied between client, focus and certificate server, Client is arranged on notebook, and focus is arranged on motor-car, and motor-car has voltage conversion unit, electricity Pressure converting unit input is connected with motor-car power supply grid, and the outfan of voltage conversion unit is connected with focus, Voltage conversion unit is for powering to focus, and focus is connected with the cellular base station module being arranged on motor-car, Cellular base station module is used for connecting the Internet, and focus is used for forwarding the internet signal of cellular base station module, Focus has unique first encryption method, and certificate server has first corresponding with the first encryption method Decryption method, it is characterised in that comprise the steps:

Client forbids that other application programs communicate by being attached thereto WIFI module；

Client sets up connection by the WIFI module being attached thereto to focus；

Client sends and counts to focus at random；

Focus uses the first encryption method to be verified information after random number is encrypted computing；

Focus replys checking information to client；

Client sends focus identification information, checking information and counts to certificate server at random；

Certificate server obtains first decryption method according to focus identification information；

After certificate server uses first decryption method to be decrypted checking information and compare with random number Relatively obtain authentication result；

Certificate server replys authentication result to client；

Client judges whether authentication result is passed through；

If passed through, then other application programs are allowed to communicate by being attached thereto WIFI module；

If do not passed through, then disconnect the connection between focus；

Detection focus signal intensity, after focus signal intensity is less than preset value, disconnects the connection with focus And delete hot information.

The method that focus is provided on motor-car the most according to claim 1, it is characterised in that certification takes Having unique second encryption method between business device, client has second solution corresponding with the second encryption method Decryption method, wherein:

When client sends authentication information to certificate server, client sends client identification information to recognizing Card server；

After certificate server obtains authentication result, obtain the second encryption method according to client identification information, Using the second encryption method to be encrypted authentication result and random number, then certificate server replys encryption After authentication result to client；

Client judges, when whether authentication result is passed through, to enter authentication result initially with the second decryption method Row deciphering, it is judged that random number is the most correct and whether authentication result is passed through；

If random number is correct and authentication result is passed through, then allow other application programs by being attached thereto WIFI module communicates；

Otherwise, then the connection between focus is disconnected.

The method that focus is provided on motor-car the most according to claim 2, it is characterised in that client The information sending and receiving certificate server includes: client is sent by mobile phone radio frequency module and reception is recognized Card server info.