CN106411939A - Enterprise information intranet WI-FI access security reinforcing authentication method - Google Patents

Abstract

The invention discloses a method for security reinforcement authentication of enterprise information intranet WI-FI access. If it is within the coverage of the network WI‑FI access point, if so, the user terminal automatically connects to the intranet WI‑FI access point to proceed to step B; after the user terminal automatically connects to the intranet WI‑FI access point in step A, the user terminal goes backward The end server sends verification information and encryption seeds, and the back-end server verifies the legitimacy of the user terminal. If it is verified as a legitimate device, proceed to step C; the user terminal encrypts the data and exchanges data with the back-end server, and the back-end server receives the data sent by the user terminal. After encrypting the data, decrypt the data according to the encryption seed obtained in step B. The invention has the advantages of: cross verification, high security; automatic connection; and encrypted data transmission.

Description

A method for security reinforcement authentication of enterprise information intranet WI-FI access

technical field

The invention relates to a WI-FI security authentication method, in particular to a WI-FI access security reinforcement authentication method in an enterprise information intranet.

Background technique

Wi-Fi is a technology that allows electronic devices to connect to a wireless local area network, usually using 2.4G UHF or 5G SHF ISM radio frequency bands. Connections to WLANs are usually password-protected; however, they can also be open, allowing any device within range of the WLAN to connect. Wi-Fi is a brand of wireless network communication technology, held by the Wi-Fi Alliance. The purpose is to improve the interoperability between wireless network products based on the IEEE 802.11 standard. Some people call the local area network using the IEEE 802.11 series of protocols wireless fidelity. Wi-Fi Internet access can be simply understood as wireless Internet access. Almost all smart phones, tablet computers and notebook computers support Wi-Fi Internet access. It is the most widely used wireless network transmission technology today. In fact, it is to convert the wired network signal into a wireless signal, just as I introduced at the beginning, use a wireless router to receive it for related computers, mobile phones, tablets, etc. that support its technology. If the mobile phone has a Wi-Fi function, when there is a Wi-Fi wireless signal, you can surf the Internet without going through the Mobile Unicom network, saving traffic charges. Wireless network and wireless Internet access are commonly used in big cities. Although the quality of wireless communication transmitted by Wi-Fi technology is not very good, the data security performance is worse than that of Bluetooth, and the transmission quality needs to be improved, but the transmission speed is very fast and can reach 54Mbps. Personal and social information needs. The main advantage of Wi-Fi is that it does not require wiring and is not limited by wiring conditions, so it is very suitable for the needs of mobile office users, and because the transmission signal power is lower than 100mw, which is lower than the transmission power of mobile phones, Wi-Fi Internet access is relatively It is also the safest and healthiest.

The current WI-FI access authentication basic authentication is that the user selects the WI-FI to be connected for user name and password authentication. This authentication method is easily cracked by the universal WI-FI key, making the WI-FI user name and password useless. Moreover, user data based on such an authentication connection is easily hijacked by a fake base station, and the user's data security cannot be guaranteed.

Contents of the invention

The technical problem to be solved by the present invention is the secure connection of intranet WI-FI, and the purpose is to provide a method for security reinforcement authentication of enterprise information intranet WI-FI access, and solve the problem that the basic authentication of current WI-FI access authentication is user Select the WI-FI to be connected to perform username and password authentication. This authentication method is easily cracked by the universal WI-FI key, making the WI-FI username and password useless, and the user data based on this authentication connection is easily forged. The hijacking of the base station cannot guarantee the security of the user's data.

The present invention realizes through following technical scheme:

A method for security reinforcement authentication of enterprise information intranet WI-FI access, comprising the following steps of sequentially judging by an intranet WI-FI access point, a user terminal, and a back-end server:

A. The user terminal judges whether it is within the coverage of the intranet WI-FI access point. If so, the user terminal automatically connects to the intranet WI-FI access point to perform step B; if not, perform a normal WI-FI connection; in the user terminal In the system, setting the intranet WI-FI access point has the highest priority. When the user terminal is within the coverage of the intranet WI-FI access point, the device will automatically connect to the intranet WI-FI access point without manual selection;

B. After the user terminal automatically connects to the intranet WI-FI access point in step A, the user terminal sends verification information and encrypted seeds to the back-end server, and the back-end server verifies the legitimacy of the user terminal. If it is verified as a legitimate device, proceed to step C ; If it is verified as an illegal device, the intranet WI-FI access point will disconnect from the user terminal; verify the legitimacy of the user terminal through the matching verification information preset into the user terminal and the back-end server, after passing The terminal server verifies the legitimacy of the user terminal to ensure that each device connected to the intranet WI-FI is a safe device, ensuring the security of the intranet WI-FI;

C. The user terminal encrypts the data and exchanges data with the back-end server. After receiving the encrypted data sent by the user terminal, the back-end server decrypts the data according to the encryption seed obtained in step B; when the user terminal accesses Wi-Fi data communication , the data is encrypted, and the user terminal in step B provides an encryption seed to prevent the data from being intercepted and cracked.

The WI-FI identification, user name and password of the intranet WI-FI access point are preset in the user terminal system. By presetting the WI-FI logo, user name and password of the intranet WI-FI access point in the user terminal system, the user terminal can automatically connect to the intranet according to the priority when searching for the intranet WI-FI access point Wi-Fi access point.

Before the user terminal is used, the basic information of the user terminal device will be registered in the back-end server. Each user terminal has its own basic equipment information, and the method of registering the basic information of the user terminal equipment in the back-end server and verifying the equipment when it is connected to the intranet WI-FI can effectively ensure the connection to the intranet WI - Security of FI equipment;

The user terminal uses an AES encryption method to encrypt data. Advanced Encryption Standard, Advanced Encryption Standard, abbreviation: AES, also known as Rijndael encryption method in cryptography, is a block encryption standard adopted by the US federal government. This standard is used to replace the original DES, has been analyzed by many parties and is widely used all over the world. After a five-year selection process, the Advanced Encryption Standard was published by the National Institute of Standards and Technology in FIPS PUB 197 on November 26, 2001, and became an effective standard on May 26, 2002. In 2006, Advanced Encryption Standard became one of the most popular algorithms in symmetric key encryption.

Compared with the prior art, the present invention has the following advantages and beneficial effects:

1. The present invention provides a security reinforcement authentication method for enterprise information intranet WI-FI access. Intranet WI-FI access points, user terminals and back-end servers are jointly linked, cross-validated, and have high security;

2. The present invention provides a security-enhanced authentication method for enterprise information intranet WI-FI access, which automatically connects and eliminates the possibility of operational errors;

3. The present invention is a method for security reinforcement authentication of enterprise information intranet WI-FI access. The data is encrypted and sent, even if the data is hijacked, it cannot be interpreted.

detailed description

In order to make the purpose, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail in conjunction with the following examples. The schematic embodiments of the present invention and their descriptions are only used to explain the present invention, and are not intended as a guideline for the present invention. limit.

Example

A method for security reinforcement authentication of enterprise information intranet WI-FI access, comprising the following steps of sequentially judging by an intranet WI-FI access point, a user terminal, and a back-end server:

A. Preset the WI-FI logo, user name and password of the intranet WI-FI access point in the user terminal system; the user terminal will register the basic information of the user terminal device in the back-end server before use

B. The user terminal judges whether it is within the coverage of the intranet WI-FI access point. If so, the user terminal automatically connects to the intranet WI-FI access point for step C; if not, performs a normal WI-FI connection; the user terminal system The WI-FI logo, user name and password of the intranet WI-FI access point are preset in the user terminal system. The priority of setting the intranet WI-FI access point in the user terminal system is the highest. When the user terminal is in the intranet WI-FI When the access point is within the coverage range, the device automatically connects to the intranet WI-FI access point without manual selection; by presetting the WI-FI logo, user name and password of the intranet WI-FI access point in the user terminal system The method can enable the user terminal to automatically connect to the intranet WI-FI access point according to the priority when searching for the intranet WI-FI access point.

C. After the user terminal automatically connects to the intranet WI-FI access point in step B, the user terminal sends verification information and AES encryption seeds to the back-end server. The verification information is the basic information of the user terminal device, including device model, serial number, etc. , each user terminal has its own basic equipment information. The backend server verifies the legitimacy of the user terminal according to the basic information of the user terminal equipment registered in step A. If it is verified as a legal device, go to step D; if it is verified as an illegal device, Then the intranet WI-FI access point is disconnected from the user terminal; the legitimacy of the user terminal is verified by the matching verification information preset into the user terminal and the back-end server, and the legitimacy of the user terminal is verified by the back-end server. Ensure that each device connected to the intranet WI-FI is a safe device, ensuring the security of the intranet WI-FI;

D. The user terminal encrypts the data with AES and exchanges data with the back-end server. After receiving the encrypted data sent by the user terminal, the back-end server decrypts the data according to the AES encryption seed obtained in step C; the user terminal accesses Wi-Fi During data communication, the data is encrypted, and the user terminal in step C provides an encryption seed to prevent the data from being intercepted and cracked.

The intranet WI-FI system established according to the above method, according to the experiment, has: WI-FI automatic identification: the device can automatically identify the intranet WI-FI and can automatically connect, no need for manual connection, access identification: the back-end server can verify The legitimacy of the access device and the security of data transmission: even if the data is intercepted, it cannot be interpreted because there is no encryption seed.

The specific embodiments described above have further described the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above descriptions are only specific embodiments of the present invention and are not intended to limit the scope of the present invention. Protection scope, within the spirit and principles of the present invention, any modification, equivalent replacement, improvement, etc., shall be included in the protection scope of the present invention.

Claims (4)

1. a kind of company information Intranet WI-FI accesses the method for security hardening certification it is characterised in that inclusion Intranet WI-FI connects The following steps that access point, user terminal, back-end server are judged successively：

A, user terminal judge whether to be in Intranet WI-FI access point coverage, and if so, user terminal is connected into Intranet automatically WI-FI access point carries out step B；If it is not, carrying out common WI-FI connection；

B, after step party A-subscriber's terminal is connected into Intranet WI-FI access point automatically, user terminal to the back-end server send checking letter Breath and encryption seed, back-end server verifies user terminal legitimacy, if being verified as legitimate device, carries out step C；If being verified as Illegality equipment, then the connection of the disconnection of Intranet WI-FI access point and user terminal；

C, user terminal will carry out data exchange with back-end server after data encryption, and back-end server receives user terminal and sends out After the encryption data sent, data deciphering is carried out according to the encryption seed that step B obtains.

2. the method that a kind of company information Intranet WI-FI according to claim 1 accesses security hardening certification, its feature exists In, preset in described client terminal system Intranet WI-FI access point WI-FI mark, username and password.

3. the method that a kind of company information Intranet WI-FI according to claim 1 accesses security hardening certification, its feature exists In described user terminal all can register the essential information of this subscriber terminal equipment before use in back-end server.

4. the method that a kind of company information Intranet WI-FI according to claim 1 accesses security hardening certification, its feature exists In described user terminal is encrypted to data using AES encryption method.